Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFileF('C:\Users\1\AppData\Local\Buzz Download', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0 , 0);
QuarantineFileF('C:\Program Files\IObit', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0 , 0);
QuarantineFileF('C:\Program Files\SFK', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0 , 0);
QuarantineFileF('C:\ProgramData\Tmp0x0x', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0 , 0);
QuarantineFileF('C:\Program Files\Tencent', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0 , 0);
QuarantineFileF('C:\Users\1\AppData\Local\SmartWeb', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0 , 0);
QuarantineFileF('C:\Users\1\AppData\Local\Hostinstaller', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0 , 0);
QuarantineFileF('C:\Program Files\SwiftSearch_1.10.0.25', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0 , 0);
QuarantineFile('C:\Users\1\AppData\Local\Buzz Download\{333D2790-3D9A-0182-A6B9-78D782C7A7C1}\BuzzDownload.dll', '');
QuarantineFile('C:\Users\1\AppData\Local\Buzz Download\{333D2790-3D9A-0182-A6B9-78D782C7A7C1}\yyffei.dll', '');
QuarantineFile('C:\Users\1\AppData\Local\Buzz Download\{333D2790-3D9A-0182-A6B9-78D782C7A7C1}\{46662C59-3156-C4A1-C4F8-56EE1B0F97BF}.dat', '');
QuarantineFile('C:\Program Files\667B0673-1450371764-DF11-9546-88AE1DF0446E\knsvAB89.tmpfs', '');
QuarantineFile('C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe', '');
QuarantineFile('C:\Program Files\667B0673-1450371764-DF11-9546-88AE1DF0446E\jnsvCCC5.tmp', '');
QuarantineFile('C:\Program Files\SFK\SSFK.exe', '');
QuarantineFile('C:\ProgramData\Tmp0x0x\ProtectWindowsManager.exe', '');
QuarantineFile('C:\Program Files\667B0673-1450371764-DF11-9546-88AE1DF0446E\hnskE3B0.tmp', '');
QuarantineFile('C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMUdisk.sys', '');
QuarantineFile('C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\TS888.sys', '');
QuarantineFile('C:\Windows\system32\tssk.sys', '');
QuarantineFile('C:\Users\1\AppData\Local\gmsd_ru_005010179\upgmsd_ru_005010179.exe', '');
QuarantineFile('C:\ProgramData\Tmp0x0x\P', '');
QuarantineFile('C:\Users\1\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll', '');
QuarantineFile('C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL', '');
QuarantineFile('C:\Users\1\AppData\Local\SmartWeb\SmartWebHelper.exe', '');
QuarantineFile('C:\Users\1\AppData\Local\Hostinstaller\2691294790_installcube.exe', '');
QuarantineFile('C:\Program Files\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe', '');
QuarantineFile('C:\Program Files\IObit\IObit', '');
QuarantineFile('C:\Windows\system32\Drivers\swsedrvr_vt_1_10_0_25.sys', '');
QuarantineFile('C:\Windows\system32\Drivers\swsedrvr_vw_1_10_0_25.sys', '');
QuarantineFile('C:\Users\1\appdata\local\smartweb\__u.exe', '');
QuarantineFile('C:\Program Files\swiftsearch_1.10.0.25\service\swsesrvc.exe', '');
DeleteFile('C:\Users\1\AppData\Local\Buzz Download\{333D2790-3D9A-0182-A6B9-78D782C7A7C1}\BuzzDownload.dll', '32');
DeleteFile('C:\Users\1\AppData\Local\Buzz Download\{333D2790-3D9A-0182-A6B9-78D782C7A7C1}\yyffei.dll', '32');
DeleteFile('C:\Users\1\AppData\Local\Buzz Download\{333D2790-3D9A-0182-A6B9-78D782C7A7C1}\{46662C59-3156-C4A1-C4F8-56EE1B0F97BF}.dat', '32');
DeleteFile('C:\Program Files\667B0673-1450371764-DF11-9546-88AE1DF0446E\knsvAB89.tmpfs', '32');
DeleteFile('C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe', '32');
DeleteFile('C:\Program Files\667B0673-1450371764-DF11-9546-88AE1DF0446E\jnsvCCC5.tmp', '32');
DeleteFile('C:\Program Files\SFK\SSFK.exe', '32');
DeleteFile('C:\ProgramData\Tmp0x0x\ProtectWindowsManager.exe', '32');
DeleteFile('C:\Program Files\667B0673-1450371764-DF11-9546-88AE1DF0446E\hnskE3B0.tmp', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\QMUdisk.sys', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\10.10.16434.218\TS888.sys', '32');
DeleteFile('C:\Windows\system32\tssk.sys', '32');
DeleteFile('C:\Users\1\AppData\Local\gmsd_ru_005010179\upgmsd_ru_005010179.exe', '32');
DeleteFile('C:\ProgramData\Tmp0x0x\P', '32');
DeleteFile('C:\Users\1\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll', '32');
DeleteFile('C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL', '32');
DeleteFile('C:\Users\1\AppData\Local\SmartWeb\SmartWebHelper.exe', '32');
DeleteFile('C:\Users\1\AppData\Local\Hostinstaller\2691294790_installcube.exe', '32');
DeleteFile('C:\Program Files\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe', '32');
DeleteFile('C:\Program Files\IObit\IObit', '32');
DeleteFile('C:\Windows\system32\Drivers\swsedrvr_vt_1_10_0_25.sys', '32');
DeleteFile('C:\Windows\system32\Drivers\swsedrvr_vw_1_10_0_25.sys', '32');
DeleteFile('C:\Users\1\appdata\local\smartweb\__u.exe', '32');
DeleteFile('C:\Program Files\swiftsearch_1.10.0.25\service\swsesrvc.exe', '32');
DeleteService('byjiwobo');
DeleteService('LiveUpdateSvc');
DeleteService('rizyqibe');
DeleteService('SSFK');
DeleteService('WindowsMangerProtect');
DeleteService('zizusyju');
DeleteService('QMUdisk');
DeleteService('TS888');
DeleteService('TSSK');
DeleteFileMask('C:\Users\1\AppData\Local\Buzz Download', '*', true);
DeleteFileMask('C:\Program Files\IObit', '*', true);
DeleteFileMask('C:\Program Files\SFK', '*', true);
DeleteFileMask('C:\ProgramData\Tmp0x0x', '*', true);
DeleteFileMask('C:\Program Files\Tencent', '*', true);
DeleteFileMask('C:\Users\1\AppData\Local\Mail.Ru', '*', true);
DeleteFileMask('C:\PROGRA~1\IObit', '*', true);
DeleteFileMask('C:\Users\1\AppData\Local\SmartWeb', '*', true);
DeleteFileMask('C:\Users\1\AppData\Local\Hostinstaller', '*', true);
DeleteFileMask('C:\Program Files\SwiftSearch_1.10.0.25', '*', true);
DeleteDirectory('C:\Users\1\AppData\Local\Buzz Download');
DeleteDirectory('C:\Program Files\IObit');
DeleteDirectory('C:\Program Files\SFK');
DeleteDirectory('C:\ProgramData\Tmp0x0x');
DeleteDirectory('C:\Program Files\Tencent');
DeleteDirectory('C:\Users\1\AppData\Local\Mail.Ru');
DeleteDirectory('C:\PROGRA~1\IObit');
DeleteDirectory('C:\Users\1\AppData\Local\SmartWeb');
DeleteDirectory('C:\Users\1\AppData\Local\Hostinstaller');
DeleteDirectory('C:\Program Files\SwiftSearch_1.10.0.25');
DelBHO('{8E8F97CD-60B5-456F-A201-73065652D099}');
DelBHO('{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}');
ExecuteFile('schtasks.exe', '/delete /TN "Buzz Download" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Buzz Download2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SmartWeb Upgrade Trigger Task" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Soft installer" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SwiftSearch Auto Updater 1.10.0" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Uninstaller_SkipUac_1" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'upgmsd_ru_005010179.exe');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings', 'ProxyOverride');
BC_ImportALL;
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.