Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
QuarantineFile('C:\Users\СОМ\AppData\Roaming\00000000-1431307311-0000-0000-001FD05FBA61\jnsoA4D3.tmp','');
QuarantineFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe','');
QuarantineFile('C:\Users\СОМ\AppData\Roaming\Browsers\exe.emorhc.bat', '');
QuarantineFile('C:\Users\СОМ\AppData\Roaming\Browsers\exe.erolpxei.bat', '');
QuarantineFile('C:\Users\СОМ\AppData\Local\SmartWeb\SmartWebHelper.exe', '');
QuarantineFile('C:\PROGRA~1\COMMON~1\System\SysMenu.dll', '');
QuarantineFile('C:\Users\???\AppData\Roaming\A1bgNKCi.exe', '');
QuarantineFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '');
QuarantineFile('C:\Program Files (x86)\Ge-Force\fce0a815-cb33-4000-bd2c-72657c2b87bf-1-6.exe', '');
QuarantineFile('C:\Program Files (x86)\Ge-Force\fce0a815-cb33-4000-bd2c-72657c2b87bf-10.exe', '');
QuarantineFile('C:\Program Files (x86)\Ge-Force\fce0a815-cb33-4000-bd2c-72657c2b87bf-4.exe', '');
QuarantineFile('C:\Program Files (x86)\Ge-Force\fce0a815-cb33-4000-bd2c-72657c2b87bf-5.exe', '');
QuarantineFile('C:\Program Files (x86)\Ge-Force\fce0a815-cb33-4000-bd2c-72657c2b87bf-6.exe', '');
QuarantineFile('C:\Program Files (x86)\Ge-Force\fce0a815-cb33-4000-bd2c-72657c2b87bf-7.exe', '');
QuarantineFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '');
QuarantineFile('C:\Users\???\AppData\Roaming\RoECg0hAgTyq0.exe', '');
QuarantineFile('C:\Users\СОМ\AppData\Local\Host', '');
QuarantineFileF('C:\Users\СОМ\AppData\Local\SmartWeb\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0, 0);
QuarantineFileF('C:\Program Files (x86)\Ge-Force\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0, 0);
QuarantineFileF('C:\Users\???\AppData\Roaming\', '*.exe', false, '', 0, 0);
QuarantineFileF('C:\Program Files (x86)\AnyProtectEx\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0, 0);
QuarantineFileF('C:\Users\СОМ\AppData\Roaming\Browsers\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0, 0);
DeleteFile('C:\Users\СОМ\AppData\Roaming\Browsers\exe.emorhc.bat', '32');
DeleteFile('C:\Users\СОМ\AppData\Roaming\Browsers\exe.erolpxei.bat', '32');
DeleteFile('C:\Users\СОМ\AppData\Local\Host', '32');
DeleteFile('C:\Windows\system32\Tasks\Soft installer', '64');
DeleteFile('C:\Users\???\AppData\Roaming\RoECg0hAgTyq0.exe', '32');
DeleteFile('C:\Windows\Tasks\RoECg0hAgTyq0.job', '64');
DeleteFile('C:\Users\???\AppData\Roaming\A1bgNKCi.exe', '32');
DeleteFile('C:\Windows\Tasks\A1bgNKCi.job', '64');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.