Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
TerminateProcessByName('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\hnsid6bf.tmp');
TerminateProcessByName('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\jnsnbbf2.tmp');
TerminateProcessByName('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\knssa773.tmp');
TerminateProcessByName('c:\users\dns\appdata\local\f7a630b2-1445687040-e411-a818-28d244b31abd\snsx6c0b.tmp');
StopService('dijojyvi');
StopService('mohocogu');
StopService('qucyqecu');
StopService('woseheru');
QuarantineFile('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\hnsid6bf.tmp', '');
QuarantineFile('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\jnsnbbf2.tmp', '');
QuarantineFile('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\knssa773.tmp', '');
QuarantineFile('c:\users\dns\appdata\local\f7a630b2-1445687040-e411-a818-28d244b31abd\snsx6c0b.tmp', '');
QuarantineFile('C:\ProgramData\EtZiAaWwd\uSxosmDbC0.bat', '');
QuarantineFile('C:\ProgramData\duptABjUknbRpb5.bat', '');
QuarantineFile('C:\Users\DNS\AppData\Roaming\B1bmiC1ryMdZHX5QyYm7ktk8tc.exe', '');
QuarantineFile('C:\Users\DNS\AppData\Roaming\P7hzvkSZT83A.exe', '');
QuarantineFile('C:\Program Files\Concom\packages\b650fd88-b179-409e-a18c-e7931f1c69d3\temp\Java.exe', '');
DeleteFile('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\hnsid6bf.tmp', '32');
DeleteFile('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\jnsnbbf2.tmp', '32');
DeleteFile('c:\program files (x86)\f7a630b2-1445665367-e411-a818-28d244b31abd\knssa773.tmp', '32');
DeleteFile('c:\users\dns\appdata\local\f7a630b2-1445687040-e411-a818-28d244b31abd\snsx6c0b.tmp', '32');
DeleteFile('C:\ProgramData\EtZiAaWwd\uSxosmDbC0.bat', '32');
DeleteFile('C:\ProgramData\duptABjUknbRpb5.bat', '32');
DeleteFile('C:\Users\DNS\AppData\Roaming\B1bmiC1ryMdZHX5QyYm7ktk8tc.exe', '32');
DeleteFile('C:\Users\DNS\AppData\Roaming\P7hzvkSZT83A.exe', '32');
DeleteFile('C:\Program Files\Concom\packages\b650fd88-b179-409e-a18c-e7931f1c69d3\temp\Java.exe', '32');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "B1bmiC1ryMdZHX5QyYm7ktk8tc.job" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "P7hzvkSZT83A.job" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "B1bmiC1ryMdZHX5QyYm7ktk8tc" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Install Java" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "P7hzvkSZT83A" /F', 0, 15000, true);
DeleteService('dijojyvi');
DeleteService('mohocogu');
DeleteService('qucyqecu');
DeleteService('woseheru');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.