Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantine;
QuarantineFile('C:\Users\C559~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE','');
QuarantineFile('C:\Program Files\SmartSaver1+ 12\71d414a6-a952-41b4-a485-e898bb99b6f3-2.exe','');
QuarantineFile('C:\Program Files\SmartSaver1+ 12\71d414a6-a952-41b4-a485-e898bb99b6f3-11.exe','');
QuarantineFile('C:\Program Files\SearchSnacks\IE\SearchSnacksClientIE.dll','');
QuarantineFile('C:\Program Files\FLV Player Addon\FLV Player Addon-bho.dll','');
QuarantineFile('c:\program files\movies toolbar\safetynut\x64\safetycrt.dll','');
QuarantineFile('C:\Users\Юля\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe','');
QuarantineFile('C:\Program Files\Windows Kits\8.0\App Certification Kit\fussvc.exe','');
QuarantineFile('C:\Program Files\SearchSnacks\Service\sssvc.exe','');
QuarantineFile('C:\Program Files\Movies Toolbar\SafetyNut\SafetyNutManager.exe','');
QuarantineFile('C:\Program Files\IEInspector\HTTPAnalyzerFullV3\InjectWinSockServiceV3.exe','');
QuarantineFile('C:\Windows\system32\drivers\ssnfd.sys','');
QuarantineFile('C:\Program Files\Movies Toolbar\SafetyNut\configmgrc2.cfg','');
QuarantineFile('c:\program files\searchsnacks\service\sssvc.exe','');
QuarantineFile('c:\program files\movies toolbar\safetynut\safetynutmanager.exe','');
QuarantineFile('c:\program files\movies toolbar\safetynut\safetynut.exe','');
QuarantineFile('c:\users\Юля\appdata\local\webplayer\flv player\webplayer.exe','');
QuarantineFile('c:\users\Юля\appdata\local\webplayer\appshat\webplayer.exe','');
TerminateProcessByName('c:\program files\searchsnacks\service\sssvc.exe');
TerminateProcessByName('c:\program files\movies toolbar\safetynut\safetynutmanager.exe');
TerminateProcessByName('c:\program files\movies toolbar\safetynut\safetynut.exe');
QuarantineFile('c:\program files\ieinspector\httpanalyzerfullv3\injectwinsockservicev3.exe','');
QuarantineFile('c:\users\Юля\appdata\local\pay-by-ads\yahoo! search\1.3.8.2\dsrlte.exe','');
TerminateProcessByName('c:\users\Юля\appdata\local\pay-by-ads\yahoo! search\1.3.8.2\dsrlte.exe');
DeleteFile('c:\users\Юля\appdata\local\pay-by-ads\yahoo! search\1.3.8.2\dsrlte.exe','32');
DeleteFile('c:\program files\movies toolbar\safetynut\safetynut.exe','32');
DeleteFile('c:\program files\movies toolbar\safetynut\safetynutmanager.exe','32');
DeleteFile('c:\program files\searchsnacks\service\sssvc.exe','32');
DeleteFile('C:\Program Files\Movies Toolbar\SafetyNut\configmgrc2.cfg','32');
DeleteFile('C:\Windows\system32\drivers\ssnfd.sys','32');
DeleteFile('C:\Program Files\Movies Toolbar\SafetyNut\SafetyNutManager.exe','32');
BC_DeleteSvc('SafetyNutManager');
DeleteFile('C:\Program Files\SearchSnacks\Service\sssvc.exe','32');
BC_DeleteSvc('sssvc');
BC_DeleteSvc('F06DEFF2-5B9C-490D-910F-35D3A9119622');
BC_DeleteSvc('ssnfd');
DelBHO('{7D1B27B2-3DE0-4F26-94A0-E14FDB06D292}');
DeleteFile('C:\Users\Юля\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Yahoo! Search');
DeleteFile('c:\program files\movies toolbar\safetynut\x64\safetycrt.dll','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','System\CurrentControlSet\Control\Session Manager\AppCertDlls','x64');
DeleteFile('C:\Program Files\SearchSnacks\IE\SearchSnacksClientIE.dll','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-1.job','32');
DeleteFile('C:\Program Files\SmartSaver1+ 12\71d414a6-a952-41b4-a485-e898bb99b6f3-11.exe','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-11.job','32');
DeleteFile('C:\Program Files\SmartSaver1+ 12\71d414a6-a952-41b4-a485-e898bb99b6f3-2.exe','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-2.job','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-3.job','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-4.job','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-5.job','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-5_user.job','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-6.job','32');
DeleteFile('C:\Windows\Tasks\71d414a6-a952-41b4-a485-e898bb99b6f3-7.job','32');
DelBHO('{11111111-1111-1111-1111-110511241166}');
DeleteFile('C:\Windows\Tasks\Apps Hat Mini-chromeinstaller.job','32');
DeleteFile('C:\Windows\Tasks\Apps Hat Mini-codedownloader.job','32');
DeleteFile('C:\Program Files\Apps Hat Mini\Apps','32');
DeleteFile('C:\Users\C559~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE','32');
DeleteFile('C:\Windows\Tasks\Digital Sites.job','32');
DeleteFile('C:\Windows\Tasks\FLV Player Addon-codedownloader.job','32');
DeleteFile('C:\Program Files\FLV Player Addon\FLV','32');
DeleteFile('C:\Windows\Tasks\FLV Player Addon-enabler.job','32');
DeleteFile('C:\Windows\Tasks\FLV Player Addon-firefoxinstaller.job','32');
DeleteFile('C:\Windows\Tasks\FLV Player Addon-updater.job','32');
DeleteFile('C:\Windows\system32\Tasks\Apps Hat Mini-chromeinstaller','32');
DeleteFile('C:\Windows\system32\Tasks\Apps Hat Mini-codedownloader','32');
DeleteFile('C:\Windows\system32\Tasks\Digital Sites','32');
DeleteFile('C:\Windows\system32\Tasks\FLV Player Addon-codedownloader','32');
DeleteFile('C:\Windows\system32\Tasks\FLV Player Addon-enabler','32');
DeleteFile('C:\Windows\system32\Tasks\FLV Player Addon-firefoxinstaller','32');
DeleteFile('C:\Windows\system32\Tasks\FLV Player Addon-updater','32');
DeleteFile('C:\Windows\system32\Tasks\Yahoo! Search','32');
DeleteFileMask('C:\Users\C559~1\AppData\Roaming\DIGITA~1','*', true);
DeleteDirectory('C:\Users\C559~1\AppData\Roaming\DIGITA~1');
DeleteFileMask('C:\Program Files\SmartSaver1+ 12','*', true);
DeleteDirectory('C:\Program Files\SmartSaver1+ 12');
DeleteFileMask('C:\Program Files\FLV Player Addon','*', true);
DeleteDirectory('C:\Program Files\FLV Player Addon');
DeleteFileMask('C:\Users\Юля\AppData\Local\Pay-By-Ads','*', true);
DeleteDirectory('C:\Users\Юля\AppData\Local\Pay-By-Ads');
DeleteFileMask('C:\Program Files\SearchSnacks','*', true);
DeleteDirectory('C:\Program Files\SearchSnacks');
DeleteFileMask('C:\Program Files\Movies Toolbar','*', true);
DeleteDirectory('C:\Program Files\Movies Toolbar');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('TSW',2,2,true);
ExecuteWizard('SCU',2,2,true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.