Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantine;
TerminateProcessByName('c:\programdata\wwdsmanprow\wdsmanpro.exe');
TerminateProcessByName('c:\users\Андрей\appdata\roaming\nssm.exe');
TerminateProcessByName('c:\users\a4f7~1\appdata\local\temp\nsdaef2.tmp');
TerminateProcessByName('c:\program files\954535a0-1438975263-11d5-a79b-002215dd8036\knsuae8b.tmpfs');
TerminateProcessByName('c:\users\a4f7~1\appdata\local\temp\nsc2446.tmp');
TerminateProcessByName('c:\program files\controller\cohc.exe');
SetServiceStart('gohekojy', 4);
SetServiceStart('cohci1394', 4);
StopService('gohekojy');
StopService('cohci1394');
QuarantineFile('C:\Users\Андрей\AppData\Local\Temp\20150903090054\I\tmp\SSFK_v2.0.6.24.exe', '');
QuarantineFile('C:\Users\Андрей\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C7KLJBQS\setup_gmsd_re[1].exe', '');
QuarantineFile('C:\Users\Андрей\AppData\Roaming\Sony Creative Software Inc\Reversed\steam.exe', '');
QuarantineFile('C:\Program Files\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-5.exe', '');
QuarantineFile('C:\Program Files\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-11.exe', '');
QuarantineFile('C:\Program Files\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-1-7.exe', '');
QuarantineFile('C:\Program Files\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-1-6.exe', '');
QuarantineFile('C:\Program Files\Crossbrowse\Crossbrowse\Application\utility.exe', '');
QuarantineFile('C:\ProgramData\RemoteSaver\waxtlmud.dll', '');
QuarantineFile('c:\programdata\wwdsmanprow\wdsmanpro.exe', '');
QuarantineFile('c:\users\Андрей\appdata\roaming\nssm.exe', '');
QuarantineFile('c:\users\a4f7~1\appdata\local\temp\nsdaef2.tmp', '');
QuarantineFile('c:\program files\954535a0-1438975263-11d5-a79b-002215dd8036\knsuae8b.tmpfs', '');
QuarantineFile('c:\users\a4f7~1\appdata\local\temp\nsc2446.tmp', '');
QuarantineFile('c:\program files\controller\cohc.exe', '');
DeleteFile('C:\Users\Андрей\AppData\Local\Temp\20150903090054\I\tmp\SSFK_v2.0.6.24.exe');
DeleteFile('C:\Users\Андрей\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C7KLJBQS\setup_gmsd_re[1].exe');
DeleteFile('c:\program files\controller\cohc.exe', '32');
DeleteFile('c:\users\a4f7~1\appdata\local\temp\nsc2446.tmp', '32');
DeleteFile('c:\users\a4f7~1\appdata\local\temp\nsdaef2.tmp', '32');
DeleteFile('c:\users\Андрей\appdata\roaming\nssm.exe', '32');
DeleteFile('c:\programdata\wwdsmanprow\wdsmanpro.exe', '32');
DeleteFile('C:\Program Files\954535A0-1438975263-11D5-A79B-002215DD8036\knsuAE8B.tmpfs', '32');
DeleteFile('C:\ProgramData\RemoteSaver\waxtlmud.dll', '32');
DeleteFile('C:\Windows\Tasks\AmiUpdXp.job', '32');
DeleteFile('C:\Program Files\Crossbrowse\Crossbrowse\Application\utility.exe', '32');
DeleteFile('C:\Windows\Tasks\Crossbrowse.job', '32');
DeleteFile('C:\Program Files\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-1-6.exe', '32');
DeleteFile('C:\Windows\Tasks\f7dab28f-9769-4a5d-9f56-e45da253027f-1-6.job', '32');
DeleteFile('C:\Program Files\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-1-7.exe', '32');
DeleteFile('C:\Windows\Tasks\f7dab28f-9769-4a5d-9f56-e45da253027f-1-7.job', '32');
DeleteFile('C:\Program Files\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-11.exe', '32');
DeleteFile('C:\Windows\Tasks\f7dab28f-9769-4a5d-9f56-e45da253027f-11.job', '32');
DeleteFile('C:\Program Files\CinemaP-1.9cV31.07\f7dab28f-9769-4a5d-9f56-e45da253027f-5.exe', '32');
DeleteFile('C:\Windows\Tasks\f7dab28f-9769-4a5d-9f56-e45da253027f-5.job', '32');
DeleteFile('C:\Windows\Tasks\f7dab28f-9769-4a5d-9f56-e45da253027f-5_user.job', '32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job', '32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job', '32');
DeleteFile('C:\Users\Андрей\AppData\Roaming\Sony Creative Software Inc\Reversed\steam.exe', '32');
DeleteFileMask('C:\Users\Андрей\AppData\Roaming\Sony Creative Software Inc', '*', true);
DeleteFileMask('C:\Program Files\CinemaP-1.9cV31.07', '*', true);
DeleteFileMask('C:\Program Files\Crossbrowse', '*', true);
DeleteFileMask('C:\ProgramData\RemoteSaver', '*', true);
DeleteFileMask('C:\Program Files\954535A0-1438975263-11D5-A79B-002215DD8036', '*', true);
DeleteFileMask('c:\programdata\wwdsmanprow', '*', true);
DeleteFileMask('c:\program files\controller', '*', true);
DeleteDirectory('C:\Users\Андрей\AppData\Roaming\Sony Creative Software Inc');
DeleteDirectory('C:\Program Files\CinemaP-1.9cV31.07');
DeleteDirectory('C:\Program Files\Crossbrowse');
DeleteDirectory('C:\ProgramData\RemoteSaver');
DeleteDirectory('C:\Program Files\954535A0-1438975263-11D5-A79B-002215DD8036');
DeleteDirectory('c:\programdata\wwdsmanprow');
DeleteDirectory('c:\program files\controller');
ExecuteFile('schtasks.exe', '/delete /TN "Crossbrowse" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "f7dab28f-9769-4a5d-9f56-e45da253027f-1-6" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "f7dab28f-9769-4a5d-9f56-e45da253027f-1-7" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "f7dab28f-9769-4a5d-9f56-e45da253027f-11" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "f7dab28f-9769-4a5d-9f56-e45da253027f-5" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineCore" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineUA" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Steam-S-1-8-22-9865GUI" /F', 0, 15000, true);
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteRepair(4);
ExecuteRepair(3);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.