Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\users\user\appdata\roaming\daemon2.exe');
TerminateProcessByName('c:\program files\vk ok adblock\ieef\nx7oj5nfrz.exe');
StopService('biosromvar');
StopService('OATool');
QuarantineFileF('c:\program files\vk ok adblock', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files\Kinoroom Browser', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('c:\users\user\appdata\roaming\daemon2.exe', '');
QuarantineFile('c:\program files\vk ok adblock\ieef\nx7oj5nfrz.exe', '');
QuarantineFile('C:\Program Files\VK OK AdBlock\IEEF\Nx7oJ5nfRZ.dll', '');
QuarantineFile('C:\Users\ADMINI~1\AppData\Local\Temp\biosromvar.sys', '');
QuarantineFile('C:\Users\ADMINI~1\AppData\Local\Temp\OATool.sys', '');
QuarantineFile('C:\Program Files\VK OK AdBlock\4E82NdX.exe', '');
QuarantineFile('C:\Program Files\Kinoroom Browser\krbrowser.exe', '');
DeleteFile('C:\Windows\Tasks\Update Service for VK OK AdBlock.job', '32');
DeleteFile('C:\Windows\Tasks\Update Service for VK OK AdBlock2.job', '32');
DeleteFile('c:\users\user\appdata\roaming\daemon2.exe', '32');
DeleteFile('c:\program files\vk ok adblock\ieef\nx7oj5nfrz.exe', '32');
DeleteFile('C:\Program Files\VK OK AdBlock\IEEF\Nx7oJ5nfRZ.dll', '32');
DeleteFile('C:\Users\ADMINI~1\AppData\Local\Temp\biosromvar.sys', '32');
DeleteFile('C:\Users\ADMINI~1\AppData\Local\Temp\OATool.sys', '32');
DeleteFile('C:\Program Files\VK OK AdBlock\4E82NdX.exe', '32');
DeleteFile('C:\Program Files\Kinoroom Browser\krbrowser.exe', '32');
DeleteService('biosromvar');
DeleteService('OATool');
DeleteFileMask('c:\program files\vk ok adblock', '*', true);
DeleteFileMask('C:\Program Files\Kinoroom Browser', '*', true);
DeleteDirectory('c:\program files\vk ok adblock');
DeleteDirectory('C:\Program Files\Kinoroom Browser');
DelBHO('{FF20459C-DA6E-41A7-80BC-8F4FEFD9C575}');
ExecuteFile('schtasks.exe', '/delete /TN "KRBLNKRUN" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Update Service for VK OK AdBlock" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Update Service for VK OK AdBlock2" /F', 0, 15000, true);
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'Daemon');
BC_ImportALL;
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.