Код:
begin
QuarantineFile('C:\Users\Serge\AppData\Roaming\WindowsUpdater\Updater.exe','');
QuarantineFile('C:\Users\Serge\AppData\Local\3FFC4B7-76DF-43A5-9D9D-A5AEE0393E9\3FFC4B7-76DF-43A5-9D9D-A5AEE0393E9.exe','');
QuarantineFile('C:\Users\Serge\AppData\Roaming\omsGjYnnjqU0Z6.exe','');
QuarantineFile('C:\Users\Serge\AppData\Roaming\DI0JcrqkzzqAbiAh8zC2Gi.exe','');
QuarantineFile('C:\Users\Serge\AppData\Roaming\6rYybQHzl.exe','');
QuarantineFile('C:\Users\Serge\AppData\Roaming\5R1xxmFgm4Uiu35DwmQCfU.exe','');
QuarantineFile('C:\Users\Serge\AppData\Roaming\1USXYhqMMPhi15teRwyL6.exe','');
QuarantineFile('C:\Users\Serge\AppData\Roaming\cpuminer\sgminer\start.cmd','');
QuarantineFile('C:\Users\Serge\AppData\Local\mbot_ru_014010083\upmbot_ru_014010083.exe','');
QuarantineFile('C:\Program Files (x86)\mbot_ru_014010083\mbot_ru_014010083.exe','');
StopService('WdsManPro');
StopService('ppsvc_1.10.0.21');
DeleteService('totyseku');
DeleteService('nidetefo');
DeleteService('jimocoso');
DeleteService('hyhobylu');
DeleteService('gopibeko');
DeleteService('WdsManPro');
DeleteService('ppsvc_1.10.0.21');
DeleteService('globalUpdatem');
DeleteService('globalUpdate');
TerminateProcessByName('c:\users\serge\desktop\Новая папка\wotomatic.exe');
TerminateProcessByName('c:\programdata\uwdsmanprou\wdsmanpro.exe');
QuarantineFile('c:\programdata\uwdsmanprou\wdsmanpro.exe','');
TerminateProcessByName('c:\program files (x86)\sfk\ssfk.exe');
QuarantineFile('c:\program files (x86)\sfk\ssfk.exe','');
TerminateProcessByName('C:\Program Files (x86)\SFK\SFKEX64.exe');
QuarantineFile('C:\Program Files (x86)\SFK\SFKEX64.exe','');
TerminateProcessByName('c:\program files (x86)\phraseprofessor_1.10.0.21\service\ppsvc.exe');
QuarantineFile('c:\program files (x86)\phraseprofessor_1.10.0.21\service\ppsvc.exe','');
TerminateProcessByName('c:\program files (x86)\crossbrowse\crossbrowse\application\crossbrowse.exe');
TerminateProcessByName('c:\program files (x86)\cinemap-1.9cv08.09\93e2d61a-becd-4475-9395-73c5e08558e4-6.exe');
TerminateProcessByName('c:\program files (x86)\cinemap-1.9cv08.09\93e2d61a-becd-4475-9395-73c5e08558e4-1-6.exe');
QuarantineFile('c:\program files (x86)\cinemap-1.9cv08.09\93e2d61a-becd-4475-9395-73c5e08558e4-1-6.exe','');
DeleteFile('c:\program files (x86)\cinemap-1.9cv08.09\93e2d61a-becd-4475-9395-73c5e08558e4-1-6.exe','32');
DeleteFile('c:\program files (x86)\cinemap-1.9cv08.09\93e2d61a-becd-4475-9395-73c5e08558e4-6.exe','32');
DeleteFile('c:\program files (x86)\crossbrowse\crossbrowse\application\crossbrowse.exe','32');
DeleteFile('c:\program files (x86)\phraseprofessor_1.10.0.21\service\ppsvc.exe','32');
DeleteFile('C:\Program Files (x86)\SFK\SFKEX64.exe','32');
DeleteFile('c:\program files (x86)\sfk\ssfk.exe','32');
DeleteFile('c:\programdata\uwdsmanprou\wdsmanpro.exe','32');
DeleteFile('C:\Windows\system32\drivers\ppfd_vt_1_10_0_21.sys','32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe','32');
DeleteFile('C:\Program Files (x86)\PhraseProfessor_1.10.0.21\Service\ppsvc.exe','32');
DeleteFile('C:\ProgramData\UWdsManProU\WdsManPro.exe','32');
DeleteFile('C:\Users\Serge\AppData\Local\03000200-1441290307-0500-0006-000700080009\snsjEB1.tmp','32');
DeleteFile('C:\Program Files (x86)\03000200-1441120604-0500-0006-000700080009\knsgEA29.tmpfs','32');
DeleteFile('C:\Program Files (x86)\03000200-1441120604-0500-0006-000700080009\jnsq1E3.tmp','32');
DeleteFile('C:\Program Files (x86)\03000200-1441279467-0500-0006-000700080009\knse7F65.tmpfs','32');
DeleteFile('C:\Program Files (x86)\03000200-1441279467-0500-0006-000700080009\hnsuABAB.tmp','32');
DeleteFile('C:\Program Files (x86)\mbot_ru_014010083\mbot_ru_014010083.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','mbot_ru_014010083');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunOnce','upmbot_ru_014010083.exe');
DeleteFile('C:\Users\Serge\AppData\Local\mbot_ru_014010083\upmbot_ru_014010083.exe','32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','GoogleChromeAutoLaunch_E21F9FAB2EE936E844842F38FC79BC13');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','apphide');
DeleteFile('C:\Users\Serge\AppData\Roaming\cpuminer\sgminer\start.cmd','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','gpuminer');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe','32');
DeleteFile('C:\Users\Serge\AppData\Roaming\Browsers\exe.emorhc.bat','32');
DeleteFile('C:\Users\Serge\AppData\Roaming\Browsers\exe.erolpxei.bat','32');
DeleteFile('C:\Program Files (x86)\Internet Explorer\iexplore.bat','32');
DeleteFile('C:\Windows\Tasks\1USXYhqMMPhi15teRwyL6.job','32');
DeleteFile('C:\Users\Serge\AppData\Roaming\1USXYhqMMPhi15teRwyL6.exe','32');
DeleteFile('C:\Windows\Tasks\2566a48a-b564-48d2-a1fc-1f0d9dd5ac8b-10_user.job','32');
DeleteFile('C:\Windows\Tasks\2566a48a-b564-48d2-a1fc-1f0d9dd5ac8b-5_user.job','32');
DeleteFile('C:\Windows\Tasks\2598067e-87eb-469f-b105-c760181e53cf-10_user.job','32');
DeleteFile('C:\Windows\Tasks\2598067e-87eb-469f-b105-c760181e53cf-5_user.job','32');
DeleteFile('C:\Users\Serge\AppData\Roaming\5R1xxmFgm4Uiu35DwmQCfU.exe','32');
DeleteFile('C:\Users\Serge\AppData\Roaming\6rYybQHzl.exe','32');
DeleteFile('C:\Windows\Tasks\6rYybQHzl.job','32');
DeleteFile('C:\Windows\Tasks\5R1xxmFgm4Uiu35DwmQCfU.job','32');
DeleteFile('C:\Windows\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-1-7.job','32');
DeleteFile('C:\Windows\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-10_user.job','32');
DeleteFile('C:\Windows\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-3.job','32');
DeleteFile('C:\Windows\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-5.job','32');
DeleteFile('C:\Windows\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-5_user.job','32');
DeleteFile('C:\Windows\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-6.job','32');
DeleteFile('C:\Windows\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-7.job','32');
DeleteFile('C:\Windows\Tasks\b228f200-6b15-42ed-8bb0-212934b13db0-10_user.job','32');
DeleteFile('C:\Windows\Tasks\Crossbrowse.job','32');
DeleteFile('C:\Windows\Tasks\DI0JcrqkzzqAbiAh8zC2Gi.job','32');
DeleteFile('C:\Users\Serge\AppData\Roaming\DI0JcrqkzzqAbiAh8zC2Gi.exe','32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job','32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job','32');
DeleteFile('C:\Windows\Tasks\omsGjYnnjqU0Z6.job','32');
DeleteFile('C:\Users\Serge\AppData\Roaming\omsGjYnnjqU0Z6.exe','32');
DeleteFile('C:\Windows\system32\Tasks\3FFC4B7-76DF-43A5-9D9D-A5AEE0393E9','64');
DeleteFile('C:\Users\Serge\AppData\Local\3FFC4B7-76DF-43A5-9D9D-A5AEE0393E9\3FFC4B7-76DF-43A5-9D9D-A5AEE0393E9.exe','32');
DeleteFile('C:\Windows\system32\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-1-6','64');
DeleteFile('C:\Windows\system32\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-1-7','64');
DeleteFile('C:\Windows\system32\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-3','64');
DeleteFile('C:\Windows\system32\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-5','64');
DeleteFile('C:\Windows\system32\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-6','64');
DeleteFile('C:\Windows\system32\Tasks\93e2d61a-becd-4475-9395-73c5e08558e4-7','64');
DeleteFile('C:\Windows\system32\Tasks\Crossbrowse','64');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineCore','64');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineUA','64');
DeleteFile('C:\Windows\system32\Tasks\PhraseProfessor Auto Updater 1.10.0.21 Core','64');
DeleteFile('C:\Windows\system32\Tasks\PhraseProfessor Auto Updater 1.10.0.21 Pending Update','64');
DeleteFile('C:\Windows\system32\Tasks\Soft installer','64');
DeleteFile('C:\Windows\system32\Tasks\WindowsUpdater','64');
DeleteFile('C:\Users\Serge\AppData\Roaming\WindowsUpdater\Updater.exe','32');
DeleteFile('C:\Windows\system32\Tasks\{02E8E66C-ABFC-44A6-B33F-7F1F73916C65}','64');
ExecuteSysClean;
RebootWindows(true);
end.