Код:
begin
QuarantineFile('C:\PROGRA~2\CREATI~1\NTIBCP~1.EXE','');
QuarantineFile('C:\Users\8523~1\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Users\8523~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Users\8523~1\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Users\Александр\AppData\Roaming\Update\MSupdate.exe','');
QuarantineFile('C:\Users\Александр\AppData\Roaming\Identities\Nzdadn.exe','');
QuarantineFile('C:\Users\Александр\AppData\Roaming\FunSpace\VKMusicUpd\FunSpace.Update.Process.exe','');
QuarantineFile('C:\Users\8523~1\AppData\Local\Temp\kusadtylds.exe','');
QuarantineFile('C:\Users\8523~1\AppData\Local\Temp\Adobe\Reader_sl.exe','');
QuarantineFile('C:\RECYCLER\mscinet.exe','');
QuarantineFile('C:\ProgramData\CreativeAudio\ntibcpsaq.exe','');
QuarantineFile('C:\Program Files\kuaiyong2\їмУГЖ»№ыЦъКЦ.exe','');
QuarantineFile('C:\Program Files\Mobogenie\DaemonProcess.exe','');
QuarantineFile('C:\PROGRA~2\msrbwk.exe','');
QuarantineFile('C:\PROGRA~2\msgqay.exe','');
DeleteService('WindowsUpdater');
QuarantineFile('C:\Windows\System32\drivers\cokibsq.sys','');
DeleteFile('C:\Windows\System32\drivers\cokibsq.sys','32');
DeleteFile('C:\PROGRA~2\msgqay.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','3067307294');
DeleteFile('C:\PROGRA~2\msrbwk.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','2262914343');
DeleteFile('C:\Program Files\Mobogenie\DaemonProcess.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','mobilegeni daemon');
DeleteFile('C:\Program Files\kuaiyong2\їмУГЖ»№ыЦъКЦ.exe','32');
DeleteFile('C:\ProgramData\CreativeAudio\ntibcpsaq.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','CreativeAudio');
DeleteFile('C:\RECYCLER\mscinet.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Windows Security Firewall Manager');
DeleteFile('C:\Users\8523~1\AppData\Local\Temp\Adobe\Reader_sl.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Adobe System Incorporated');
DeleteFile('C:\Users\8523~1\AppData\Local\Temp\kusadtylds.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','MicrosoftStCnt');
DeleteFile('C:\Users\Александр\AppData\Roaming\FunSpace\VKMusicUpd\FunSpace.Update.Process.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','VKMusic update process');
DeleteFile('C:\Users\Александр\AppData\Roaming\Identities\Nzdadn.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Nzdadn');
DeleteFile('C:\Users\Александр\AppData\Roaming\Update\MSupdate.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Windows Update Manager');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
DeleteFile('C:\Users\8523~1\AppData\Roaming\METACR~1\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\Tasks\MetaCrawler.job','32');
DeleteFile('C:\Users\8523~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\system32\Tasks\DSite','32');
DeleteFile('C:\Users\8523~1\AppData\Roaming\Funmoods\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\system32\Tasks\Funmoods','32');
DeleteFile('C:\Windows\system32\Tasks\MetaCrawler','32');
DeleteFile('C:\PROGRA~2\CREATI~1\NTIBCP~1.EXE','32');
DeleteFile('C:\Windows\system32\Tasks\Windows Update Check - 0x0E7302EC','32');
ExecuteSysClean;
RebootWindows(true);
end.
После выполнения скрипта компьютер перезагрузится!