Код:
begin
SearchRootkit(true, true);
TerminateProcessByName('c:\program files\application nation\bin\utilapplicationnation.exe');
TerminateProcessByName('c:\users\Администратор\appdata\local\gmsd_ru_279\upgmsd_ru_279.exe');
TerminateProcessByName('c:\program files\application nation\updateapplicationnation.exe');
TerminateProcessByName('c:\users\Администратор\appdata\local\smartweb\smartwebhelper.exe');
TerminateProcessByName('c:\users\Администратор\appdata\local\smartweb\smartwebapp.exe');
TerminateProcessByName('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\nst4c0a.tmp');
TerminateProcessByName('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\jnss3337.tmp');
TerminateProcessByName('c:\program files\infonaut_1.10.0.14\service\insvc.exe');
TerminateProcessByName('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\hnss4a13.tmp');
TerminateProcessByName('c:\program files\gmsd_ru_279\gmsd_ru_279.exe');
TerminateProcessByName('c:\program files\application nation\bin\applicationnation.purbrowse.exe');
TerminateProcessByName('c:\program files\application nation\bin\applicationnation.expext.exe');
TerminateProcessByName('c:\program files\application nation\bin\applicationnation.browseradapter.exe');
StopService('rsmdriverproviderservice');
StopService('insvc_1.10.0.14');
StopService('dequzody');
StopService('cybusyro');
QuarantineFile('C:\Program Files\miuitab\suptab.dll', '');
QuarantineFile('C:\Users\Администратор\appdata\local\smartweb\__u.exe', '');
QuarantineFile('C:\Program Files\Application Nation\ApplicationNationbho.dll', '');
QuarantineFile('C:\Program Files\MaxComputerCleaner_v17.684\MaxComputerCleaner_Maintenance.exe', '');
QuarantineFile('C:\Windows\system32\drivers\innfd_1_10_0_14.sys', '');
QuarantineFile('C:\Users\Администратор\AppData\Local\SmartWeb\swhk.dll', '');
QuarantineFile('c:\program files\application nation\bin\utilapplicationnation.exe', '');
QuarantineFile('c:\users\Администратор\appdata\local\gmsd_ru_279\upgmsd_ru_279.exe', '');
QuarantineFile('c:\program files\application nation\updateapplicationnation.exe', '');
QuarantineFile('c:\users\Администратор\appdata\local\smartweb\smartwebhelper.exe', '');
QuarantineFile('c:\users\Администратор\appdata\local\smartweb\smartwebapp.exe', '');
QuarantineFile('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\nst4c0a.tmp', '');
QuarantineFile('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\jnss3337.tmp', '');
QuarantineFile('c:\program files\infonaut_1.10.0.14\service\insvc.exe', '');
QuarantineFile('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\hnss4a13.tmp', '');
QuarantineFile('c:\program files\gmsd_ru_279\gmsd_ru_279.exe', '');
QuarantineFile('c:\program files\application nation\bin\applicationnation.purbrowse.exe', '');
QuarantineFile('c:\program files\application nation\bin\applicationnation.expext.exe', '');
QuarantineFile('c:\program files\application nation\bin\applicationnation.browseradapter.exe', '');
DeleteFile('c:\program files\application nation\bin\applicationnation.browseradapter.exe', '32');
DeleteFile('c:\program files\application nation\bin\applicationnation.expext.exe', '32');
DeleteFile('c:\program files\application nation\bin\applicationnation.purbrowse.exe', '32');
DeleteFile('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\hnss4a13.tmp', '32');
DeleteFile('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\jnss3337.tmp', '32');
DeleteFile('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd\nst4c0a.tmp', '32');
DeleteFile('c:\program files\application nation\updateapplicationnation.exe', '32');
DeleteFile('c:\program files\application nation\bin\utilapplicationnation.exe', '32');
DeleteFile('C:\Users\Администратор\AppData\Local\SmartWeb\swhk.dll', '32');
DeleteFile('C:\Windows\system32\drivers\innfd_1_10_0_14.sys', '32');
DeleteFile('C:\Program Files\MaxComputerCleaner_v17.684\MaxComputerCleaner_Maintenance.exe', '32');
DeleteFile('C:\Program Files\gmsd_ru_279\gmsd_ru_279.exe', '32');
DeleteFile('C:\Users\Администратор\AppData\Local\gmsd_ru_279\upgmsd_ru_279.exe', '32');
DeleteFile('C:\Program Files\Application Nation\ApplicationNationbho.dll', '32');
DeleteFile('C:\Windows\Tasks\AGqEoWbpcuPwmm7hT.job', '32');
DeleteFile('C:\Windows\Tasks\eyRgXVtPOUwKObwwHGaaXhebn2.job', '32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job', '32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job', '32');
DeleteFile('C:\Users\Администратор\appdata\local\smartweb\smartwebapp.exe', '32');
DeleteFile('C:\Users\Администратор\appdata\local\smartweb\smartwebhelper.exe', '32');
DeleteFile('C:\Users\Администратор\appdata\local\smartweb\__u.exe', '32');
DeleteFile('C:\Program Files\miuitab\suptab.dll', '32');
DeleteFile('C:\Program Files\infonaut_1.10.0.14\service\insvc.exe', '32');
DeleteService('innfd_1_10_0_14');
DeleteService('insvc_1.10.0.14');
DeleteService('dequzody');
DeleteService('cybusyro');
DeleteFileMask('C:\Program Files\infonaut_1.10.0.14', '*', true);
DeleteFileMask('C:\Program Files\miuitab', '*', true);
DeleteFileMask('C:\Users\Администратор\appdata\local\smartweb', '*', true);
DeleteFileMask('C:\Program Files\Application Nation', '*', true);
DeleteFileMask('C:\Program Files\gmsd_ru_279', '*', true);
DeleteFileMask('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd', '*', true);
DeleteDirectory('C:\Program Files\infonaut_1.10.0.14');
DeleteDirectory('C:\Program Files\miuitab');
DeleteDirectory('C:\Users\Администратор\appdata\local\smartweb');
DeleteDirectory('C:\Program Files\Application Nation');
DeleteDirectory('C:\Program Files\gmsd_ru_279');
DeleteDirectory('c:\users\Администратор\appdata\roaming\00000000-1433568746-0000-0000-902b3401e0fd');
DelBHO('{0633EE93-D776-472f-A0FF-E1416B8B2E3D}');
DelBHO('{3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF}');
DelBHO('{10921475-03CE-4E04-90CE-E2E7EF20C814}');
DelBHO('{0cd1caf7-a6fd-4c97-8f2f-8b5c3e2cf11e}');
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineCore" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineUA" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "MaxComputerCleaner_Start" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SmartWeb Upgrade Trigger Task" /F', 0, 15000, true);
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'GoogleChromeAutoLaunch_2E97E79495C2EE918393804007FA94E4');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'ZaxarGameBrowser');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'ZaxarLoader');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'Timestasks');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'gmsd_ru_268');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'gmsd_ru_274');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'VKSaver');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'amigo');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'MailRuUpdater');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'Update');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'Muzbaza');
BC_ImportDeletedList;
ExecuteSysClean;
BC_DeleteSvc('cybusyro');
BC_DeleteSvc('dequzody');
BC_DeleteSvc('insvc_1.10.0.14');
BC_DeleteSvc('rsmdriverproviderservice');
BC_DeleteSvc('Update Application Nation');
BC_DeleteSvc('innfd_1_10_0_14');
ExecuteRepair(2);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.