Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
TerminateProcessByName('c:\program files (x86)\03000200-1448015107-0500-0006-000700080009\knst8cad.tmp');
TerminateProcessByName('c:\users\29ec~1\appdata\local\temp\nsm3470.tmp');
TerminateProcessByName('c:\users\29ec~1\appdata\local\temp\nsma868.tmp');
TerminateProcessByName('c:\users\29ec~1\appdata\local\temp\nsu5575.tmp');
StopService('ginoquci');
StopService('mojolyvo');
QuarantineFile('c:\program files (x86)\03000200-1448015107-0500-0006-000700080009\knst8cad.tmp', '');
QuarantineFile('c:\users\29ec~1\appdata\local\temp\nsm3470.tmp', '');
QuarantineFile('c:\users\29ec~1\appdata\local\temp\nsma868.tmp', '');
QuarantineFile('c:\users\29ec~1\appdata\local\temp\nsu5575.tmp', '');
QuarantineFile('C:\ProgramData\IUzBbEeDhmTp\dZ0.bat', '');
QuarantineFile('c:\users\Сервер\appdata\local\gmsd_ru_005010152\upgmsd_ru_005010152.exe', '');
QuarantineFile('c:\program files (x86)\gmsd_ru_005010152\gmsd_ru_005010152.exe', '');
QuarantineFileF('C:\ProgramData\IUzBbEeDhmTp\', '*', true, '', 0, 0);
DeleteFileMask('C:\ProgramData\IUzBbEeDhmTp\', '*', true);
DeleteDirectory('C:\ProgramData\IUzBbEeDhmTp\');
DeleteFile('c:\program files (x86)\03000200-1448015107-0500-0006-000700080009\knst8cad.tmp', '32');
DeleteFile('c:\users\29ec~1\appdata\local\temp\nsm3470.tmp', '32');
DeleteFile('c:\users\29ec~1\appdata\local\temp\nsma868.tmp', '32');
DeleteFile('c:\users\29ec~1\appdata\local\temp\nsu5575.tmp', '32');
DeleteFile('C:\ProgramData\IUzBbEeDhmTp\dZ0.bat', '32');
DeleteFile('c:\users\Сервер\appdata\local\gmsd_ru_005010152\upgmsd_ru_005010152.exe', '32');
DeleteFile('c:\program files (x86)\gmsd_ru_005010152\gmsd_ru_005010152.exe', '32');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
DeleteService('ginoquci');
DeleteService('mojolyvo');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.