Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
StopService('SPDRIVER_1.37.1.189');
QuarantineFile('C:\Users\Администратор\Desktop\enigma_new.exe','');
QuarantineFile('C:\Users\Администратор\AppData\Local\Math Problem Solver\Optimize.exe','');
QuarantineFile('C:\Users\Администратор\AppData\Local\Math Problem Solver\cpu\Solve.exe','');
QuarantineFile('C:\Program Files\globalUpdate\Update\GoogleUpdate.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\PHD-V1.4-nova.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\PHD-V1.4-novainstaller.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-5.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-4.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-3.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-2.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-11.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\PHD-V1.4-codedownloader.exe','');
QuarantineFile('C:\Program Files\iWebar\iWebar-nova.exe','');
QuarantineFile('C:\Program Files\iWebar\iWebar-novainstaller.exe','');
QuarantineFile('C:\Program Files\iWebar\506c7379-6884-45ee-8159-056e3139d8cd-5.exe','');
QuarantineFile('C:\Program Files\iWebar\506c7379-6884-45ee-8159-056e3139d8cd-4.exe','');
QuarantineFile('C:\Program Files\iWebar\506c7379-6884-45ee-8159-056e3139d8cd-2.exe','');
QuarantineFile('C:\Program Files\iWebar\506c7379-6884-45ee-8159-056e3139d8cd-11.exe','');
QuarantineFile('C:\Program Files\iWebar\iWebar-codedownloader.exe','');
QuarantineFile('C:\Program Files\Sense\Sense-nova.exe','');
QuarantineFile('C:\Program Files\Sense\Sense-novainstaller.exe','');
QuarantineFile('C:\Program Files\Sense\2867fc75-17f3-4f39-98ee-a6ff2cd56850-5.exe','');
QuarantineFile('C:\Program Files\Sense\2867fc75-17f3-4f39-98ee-a6ff2cd56850-4.exe','');
QuarantineFile('C:\Program Files\Sense\2867fc75-17f3-4f39-98ee-a6ff2cd56850-2.exe','');
QuarantineFile('C:\Program Files\Sense\2867fc75-17f3-4f39-98ee-a6ff2cd56850-11.exe','');
QuarantineFile('C:\Program Files\Sense\Sense-codedownloader.exe','');
QuarantineFile('C:\Program Files\PHD-V1.4\PHD-V1.4-bho.dll','');
QuarantineFile('C:\Program Files\Sense\Sense-bho.dll','');
QuarantineFile('C:\Program Files\iWebar\iWebar-bho.dll','');
QuarantineFile('C:\Program Files\ShopperPro\JSDriver\1.37.1.189\jsdrv.sys','');
DeleteFile('C:\Program Files\ShopperPro\JSDriver\1.37.1.189\jsdrv.sys','32');
DeleteFile('C:\Program Files\iWebar\iWebar-bho.dll','32');
DeleteFile('C:\Program Files\Sense\Sense-bho.dll','32');
DeleteFile('C:\Program Files\PHD-V1.4\PHD-V1.4-bho.dll','32');
DeleteFile('C:\Program Files\Sense\Sense-codedownloader.exe','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-1.job','32');
DeleteFile('C:\Program Files\Sense\2867fc75-17f3-4f39-98ee-a6ff2cd56850-11.exe','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-11.job','32');
DeleteFile('C:\Program Files\Sense\2867fc75-17f3-4f39-98ee-a6ff2cd56850-2.exe','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-2.job','32');
DeleteFile('C:\Program Files\Sense\2867fc75-17f3-4f39-98ee-a6ff2cd56850-4.exe','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-4.job','32');
DeleteFile('C:\Program Files\Sense\2867fc75-17f3-4f39-98ee-a6ff2cd56850-5.exe','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-5.job','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-5_user.job','32');
DeleteFile('C:\Program Files\Sense\Sense-novainstaller.exe','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-6.job','32');
DeleteFile('C:\Program Files\Sense\Sense-nova.exe','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-7.job','32');
DeleteFile('C:\Program Files\iWebar\iWebar-codedownloader.exe','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-1.job','32');
DeleteFile('C:\Program Files\iWebar\506c7379-6884-45ee-8159-056e3139d8cd-11.exe','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-11.job','32');
DeleteFile('C:\Program Files\iWebar\506c7379-6884-45ee-8159-056e3139d8cd-2.exe','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-2.job','32');
DeleteFile('C:\Program Files\iWebar\506c7379-6884-45ee-8159-056e3139d8cd-4.exe','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-4.job','32');
DeleteFile('C:\Program Files\iWebar\506c7379-6884-45ee-8159-056e3139d8cd-5.exe','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-5.job','32');
DeleteFile('C:\Program Files\iWebar\iWebar-novainstaller.exe','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-6.job','32');
DeleteFile('C:\Program Files\iWebar\iWebar-nova.exe','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-7.job','32');
DeleteFile('C:\Program Files\PHD-V1.4\PHD-V1.4-codedownloader.exe','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-1.job','32');
DeleteFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-11.exe','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-11.job','32');
DeleteFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-2.exe','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-2.job','32');
DeleteFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-3.exe','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-3.job','32');
DeleteFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-4.exe','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-4.job','32');
DeleteFile('C:\Program Files\PHD-V1.4\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-5.exe','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-5.job','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-5_user.job','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-6.job','32');
DeleteFile('C:\Program Files\PHD-V1.4\PHD-V1.4-nova.exe','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-7.job','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-1','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-11','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-2','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-4','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-5','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-6','32');
DeleteFile('C:\Windows\system32\Tasks\2867fc75-17f3-4f39-98ee-a6ff2cd56850-7','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-1','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-11','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-2','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-4','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-5','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-6','32');
DeleteFile('C:\Windows\system32\Tasks\506c7379-6884-45ee-8159-056e3139d8cd-7','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-1','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-11','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-2','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-3','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-4','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-5','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-6','32');
DeleteFile('C:\Windows\system32\Tasks\88f9d0a7-0d4d-4e1a-9e5c-3dba1727a592-7','32');
DeleteFile('C:\Program Files\globalUpdate\Update\GoogleUpdate.exe','32');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineCore','32');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineUA','32');
DeleteFile('C:\Users\Администратор\AppData\Local\Math Problem Solver\cpu\Solve.exe','32');
DeleteFile('C:\Windows\system32\Tasks\Math Problem Solver CPU','32');
DeleteFile('C:\Users\Администратор\AppData\Local\Math Problem Solver\Optimize.exe','32');
DeleteFile('C:\Windows\system32\Tasks\Math Problem Solver Optimize','32');
DeleteFile('C:\Users\Администратор\Desktop\enigma_new.exe','32');
DelBHO('{11111111-1111-1111-1111-110511831162}');
DelBHO('{11111111-1111-1111-1111-110411821192}');
DelBHO('{11111111-1111-1111-1111-110311551110}');
DeleteService('SPDRIVER_1.37.1.189');
DeleteFileMask('C:\Users\Администратор\AppData\Local\Math Problem Solver','*',true);
DeleteFileMask('C:\Program Files\globalUpdate','*',true);
DeleteFileMask('C:\Program Files\PHD-V1.4','*',true);
DeleteFileMask('C:\Program Files\iWebar','*',true);
DeleteFileMask('C:\Program Files\Sense','*',true);
DeleteFileMask('C:\Program Files\ShopperPro','*',true);
DeleteDirectory('C:\Users\Администратор\AppData\Local\Math Problem Solver');
DeleteDirectory('C:\Program Files\globalUpdate');
DeleteDirectory('C:\Program Files\PHD-V1.4');
DeleteDirectory('C:\Program Files\iWebar');
DeleteDirectory('C:\Program Files\Sense');
DeleteDirectory('C:\Program Files\ShopperPro');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteWizard('SCU',2,2,true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.