Код:
begin
TerminateProcessByName('c:\program files\wnen\caa9bdd25d3bd7e5fa060c1f08e2a4a7.exe');
TerminateProcessByName('C:\Program Files\WNEn\eaf6148bc2ea5d9530b771396e533fd6.exe');
TerminateProcessByName('c:\users\Денис\appdata\roaming\kigxunpob\ipoudd.exe');
TerminateProcessByName('c:\program files (x86)\e2a6fb90-1457464824-1020-0618-145919000000\jnsj4ecd.tmp');
TerminateProcessByName('c:\users\Денис\appdata\roaming\kigxunpob\kigxunpob.exe');
TerminateProcessByName('C:\Users\Денис\AppData\Roaming\Kigxunpob\Owetbous.exe');
StopService('dojygici');
StopService('Kooyd');
StopService('WNEn Monitor');
StopService('Aihamavu');
StopService('qrjatyd');
QuarantineFileF('c:\program files\wnen', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\users\Денис\appdata\roaming\kigxunpob', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('c:\program files\wnen\caa9bdd25d3bd7e5fa060c1f08e2a4a7.exe', '');
QuarantineFile('C:\Program Files\WNEn\eaf6148bc2ea5d9530b771396e533fd6.exe', '');
QuarantineFile('c:\users\Денис\appdata\roaming\kigxunpob\ipoudd.exe', '');
QuarantineFile('c:\program files (x86)\e2a6fb90-1457464824-1020-0618-145919000000\jnsj4ecd.tmp', '');
QuarantineFile('C:\Users\Денис\AppData\Roaming\Kigxunpob\Owetbous.exe', '');
QuarantineFile('c:\program files\wnen\WNEnlibs\nsfahw.dll', '');
QuarantineFile('C:\Users\Денис\AppData\Roaming\Kigxunpob\Ipoudd.dll', '');
QuarantineFile('C:\Users\Денис\AppData\Roaming\Kigxunpob\Kigxunpob.exe', '');
QuarantineFile('C:\Users\Денис\AppData\Roaming\WoqupNobk\Taggoht.exe', '');
QuarantineFile('C:\Program Files (x86)\RayDld\ihpmServer.exe', '');
QuarantineFile('C:\Users\Денис\AppData\Local\Temp\RarSFX2\Erbol\antiban.sys', '');
QuarantineFile('C:\Windows\system32\drivers\tsskx64.sys', '');
QuarantineFile('C:\Windows\svchost.exe', '');
QuarantineFile('C:\Users\Денис\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yandex.lnk', '');
QuarantineFile('C:\Users\Денис\AppData\Local\Mail.Ru\GameCenter\[email protected]', '');
QuarantineFile('C:\Program Files (x86)\Mobogenie\DaemonProcess.exe', '');
QuarantineFile('C:\Program Files (x86)\MTV20160128\MTView.exe', '');
QuarantineFile('C:\Users\Денис\AppData\Local\WupKjz\EuDWKqg1.bat', '');
QuarantineFileF('C:\Users\Денис\AppData\Local\WupKjz', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0, 0);
QuarantineFile('C:\Windows\winstart.bat', '');
QuarantineFile('C:\Program Files\Advanced PC Care\advancedpccare.exe', '');
QuarantineFile('C:\PROGRA~1\GROOVE~1\Guiixp.bat', '');
QuarantineFile('C:\Users\Денис\AppData\Roaming\FreeVPN\FreeVPN.exe', '');
QuarantineFile('C:\Program Files (x86)\Universal Driver Updater\UniversalDriverUpdater.exe', '');
DeleteFile('c:\program files\wnen\caa9bdd25d3bd7e5fa060c1f08e2a4a7.exe', '32');
DeleteFile('C:\Program Files\WNEn\eaf6148bc2ea5d9530b771396e533fd6.exe', '32');
DeleteFile('c:\users\Денис\appdata\roaming\kigxunpob\ipoudd.exe', '32');
DeleteFile('c:\program files (x86)\e2a6fb90-1457464824-1020-0618-145919000000\jnsj4ecd.tmp', '32');
DeleteFile('C:\Users\Денис\AppData\Roaming\Kigxunpob\Owetbous.exe', '32');
DeleteFile('c:\program files\wnen\WNEnlibs\nsfahw.dll', '32');
DeleteFile('C:\Users\Денис\AppData\Roaming\Kigxunpob\Ipoudd.dll', '32');
DeleteFile('C:\Users\Денис\AppData\Roaming\Kigxunpob\Kigxunpob.exe', '32');
DeleteFile('C:\Users\Денис\AppData\Roaming\WoqupNobk\Taggoht.exe', '32');
DeleteFile('C:\Program Files (x86)\RayDld\ihpmServer.exe', '32');
DeleteFile('C:\Users\Денис\AppData\Local\Temp\RarSFX2\Erbol\antiban.sys', '32');
DeleteFile('C:\Windows\system32\drivers\tsskx64.sys', '32');
DeleteFile('C:\Windows\svchost.exe', '32');
DeleteFile('C:\Users\Денис\AppData\Local\Mail.Ru\GameCenter\[email protected]', '32');
DeleteFile('C:\Program Files (x86)\Mobogenie\DaemonProcess.exe', '32');
DeleteFile('C:\Program Files (x86)\MTV20160128\MTView.exe', '32');
DeleteFile('C:\Users\Денис\AppData\Local\WupKjz\EuDWKqg1.bat', '32');
DeleteFile('C:\Windows\winstart.bat', '32');
DeleteFile('C:\Program Files\Advanced PC Care\advancedpccare.exe', '32');
DeleteFile('C:\PROGRA~1\GROOVE~1\Guiixp.bat', '32');
DeleteFile('C:\Users\Денис\AppData\Roaming\FreeVPN\FreeVPN.exe', '32');
DeleteFile('C:\Program Files (x86)\Universal Driver Updater\UniversalDriverUpdater.exe', '32');
DeleteService('dojygici');
DeleteService('Kooyd');
DeleteService('WNEn Monitor');
DeleteService('Aihamavu');
DeleteService('ihpmServer');
DeleteService('qrjatyd');
DeleteService('TSSKX64');
DeleteFileMask('C:\Users\Денис\AppData\Local\WupKjz', '*', true);
DeleteFileMask('c:\program files\wnen', '*', true);
DeleteFileMask('c:\users\Денис\appdata\roaming\kigxunpob', '*', true);
DeleteFileMask('C:\Users\Денис\AppData\Roaming\WoqupNobk', '*', true);
DeleteFileMask('C:\Program Files (x86)\RayDld', '*', true);
DeleteFileMask('C:\Users\Денис\AppData\Local\Mail.Ru', '*', true);
DeleteFileMask('C:\Program Files (x86)\Mobogenie', '*', true);
DeleteFileMask('C:\Program Files (x86)\MTV20160128', '*', true);
DeleteFileMask('C:\Program Files\Advanced PC Care', '*', true);
DeleteFileMask('C:\Users\Денис\AppData\Roaming\FreeVPN', '*', true);
DeleteFileMask('C:\Program Files (x86)\Universal Driver Updater', '*', true);
DeleteDirectory('C:\Users\Денис\AppData\Local\WupKjz');
DeleteDirectory('c:\program files\wnen');
DeleteDirectory('c:\users\Денис\appdata\roaming\kigxunpob');
DeleteDirectory('C:\Users\Денис\AppData\Roaming\WoqupNobk');
DeleteDirectory('C:\Program Files (x86)\RayDld');
DeleteDirectory('C:\Users\Денис\AppData\Local\Mail.Ru');
DeleteDirectory('C:\Program Files (x86)\Mobogenie');
DeleteDirectory('C:\Program Files (x86)\MTV20160128');
DeleteDirectory('C:\Program Files\Advanced PC Care');
DeleteDirectory('C:\Users\Денис\AppData\Roaming\FreeVPN');
DeleteDirectory('C:\Program Files (x86)\Universal Driver Updater');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Advanced PC Care_Logon" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Dauwiq" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "FreeVPN" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Start Universal Driver Updater оn logon" /F', 0, 15000, true);
ExecuteFile('ipconfig.exe', '/flushdns', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GameCenterMailRu', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mobilegeni daemon', 'command');
ExecuteSysClean;
ExecuteRepair(13);
ExecuteRepair(21);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.