Код:
begin
SearchRootkit(true, true);
QuarantineFile('C:\Users\Микаил\AppData\Roaming\newSI_2149\s_inst.exe', '');
QuarantineFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-7.exe', '');
QuarantineFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-6.exe', '');
QuarantineFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-5.exe', '');
QuarantineFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-7.exe', '');
QuarantineFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-6.exe', '');
QuarantineFile('C:\Users\Микаил\AppData\Roaming\EMSSADRI.exe', '');
DeleteFile('C:\iexplore.bat', '32');
DeleteFile('C:\Users\Микаил\AppData\Roaming\EMSSADRI.exe', '32');
DeleteFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-6.exe', '32');
DeleteFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-7.exe', '32');
DeleteFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-5.exe', '32');
DeleteFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-6.exe', '32');
DeleteFile('C:\Program Files\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-7.exe', '32');
DeleteFile('C:\Users\Микаил\AppData\Roaming\newSI_2149\s_inst.exe', '32');
DeleteFile('C:\Windows\Tasks\EMSSADRI.job', '32');
DeleteFile('C:\Windows\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-6.job', '32');
DeleteFile('C:\Windows\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-7.job', '32');
DeleteFile('C:\Windows\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-5.job', '32');
DeleteFile('C:\Windows\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-5_user.job', '32');
DeleteFile('C:\Windows\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-6.job', '32');
DeleteFile('C:\Windows\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-7.job', '32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job', '32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job', '32');
DeleteFile('C:\Windows\Tasks\newSI_2149.job', '32');
DeleteFile('C:\Windows\Tasks\newSI_21591.job', '32');
DeleteFile('C:\Windows\system32\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-6', '32');
DeleteFile('C:\Windows\system32\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-7', '32');
DeleteFile('C:\Windows\system32\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-5', '32');
DeleteFile('C:\Windows\system32\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-6', '32');
DeleteFile('C:\Windows\system32\Tasks\f25ef41e-9925-48ba-8dab-24c8bac45edc-7', '32');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineCore', '32');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineUA', '32');
DeleteFile('C:\Windows\system32\Tasks\newSI_2149', '32');
DeleteFile('C:\Windows\system32\Tasks\newSI_21591', '32');
DeleteFileMask('C:\Users\Микаил\AppData\Roaming\newSI_2149', '*', true);
DeleteFileMask('C:\Program Files\CinemaPlus12bV08.02', '*', true);
DeleteDirectory('C:\Users\Микаил\AppData\Roaming\newSI_2149');
DeleteDirectory('C:\Program Files\CinemaPlus12bV08.02');
DelBHO('{0633EE93-D776-472f-A0FF-E1416B8B2E3D}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnTBMon', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\vcurrfzccr', 'command');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteRepair(2);
ExecuteRepair(6);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.