Код:
begin
TerminateProcessByName('C:\Program Files\WNetworkEn\29baaaa22e698fef333f7b4a3e1f4f55.exe');
StopService('WNetworkEn Monitor');
StopService('rowugoqo');
StopService('gkernel');
QuarantineFile('C:\Program Files\WNetworkEn\29baaaa22e698fef333f7b4a3e1f4f55.exe', '');
QuarantineFile('C:\Program Files (x86)\00000000-1457920312-0000-0000-D43D7EF842FC\jnsb7CC3.tmp', '');
QuarantineFile('GoogleChromeUpSvc.sys', '');
QuarantineFile('C:\Program Files (x86)\00000000-1457920312-0000-0000-D43D7EF842FC\knsqA2D8.tmp', '');
QuarantineFile('C:\Users\Даниил\AppData\Local\00000000-1457945631-0000-0000-D43D7EF842FC\snss1A3C.tmp', '');
QuarantineFile('C:\Program Files\UBar\UbarService.exe', '');
QuarantineFile('c:\program files\WNEn\29baaaa22e698fef333f7b4a3e1f4f55.exe', '');
QuarantineFile('C:\Program Files (x86)\00000000-1457920312-0000-0000-D43D7EF842FC\hnsh9851.tmp', '');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17063.223\QMUdisk64.sys', '');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17063.223\softaal64.sys', '');
QuarantineFile('C:\Windows\system32\drivers\tsskx64.sys', '');
QuarantineFile('C:\Program Files\UBar\UbarDriver.sys', '');
QuarantineFile('C:\Program Files (x86)\badu\uc.exe', '');
QuarantineFile('C:\Program Files (x86)\badu\Uninst.exe', '');
QuarantineFile('D:\Documents\systemfile.exe', '');
QuarantineFile('C:\Users\Даниил\AppData\Roaming\UPUpdata\cessrs.exe', '');
QuarantineFile('c:\programdata\lightgate.exe', '');
QuarantineFile('C:\TEMP\un.exe', '');
QuarantineFile('C:\Program Files (x86)\win_en_77\win_en_77.exe', '');
QuarantineFile('c:\programdata\msiql.exe', '');
QuarantineFile('C:\ProgramData\WindowsMsg\675D131108D4FD145B0BFBC68A3E018A.dll', '');
QuarantineFile('C:\Program Files (x86)\UCBrowser\Application\UUC0789.exe', '');
QuarantineFile('C:\ProgramData\service.exe', '');
QuarantineFile('C:\ProgramData\Windows Update\svrupg.exe', '');
QuarantineFile('C:\Users\Даниил\AppData\Local\YInrMbDXmb\mhMlbfHv1.bat', '');
QuarantineFile('C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe', '');
QuarantineFile('C:\Users\Даниил\AppData\Roaming\FreeVPN\FreeVPN.exe', '');
QuarantineFile('C:\Users\Даниил\appdata\roaming\aspackage\aspackage.exe', '');
DeleteFile('C:\Windows\Tasks\DriverToolkit Autorun.job', '64');
DeleteFile('C:\Program Files\WNetworkEn\29baaaa22e698fef333f7b4a3e1f4f55.exe', '32');
DeleteFile('AppVerifier.sys', '32');
DeleteFile('C:\Program Files (x86)\00000000-1457920312-0000-0000-D43D7EF842FC\jnsb7CC3.tmp', '32');
DeleteFile('GoogleChromeUpSvc.sys', '32');
DeleteFile('hotnix32.sys', '32');
DeleteFile('C:\Program Files (x86)\00000000-1457920312-0000-0000-D43D7EF842FC\knsqA2D8.tmp', '32');
DeleteFile('C:\Users\Даниил\AppData\Local\00000000-1457945631-0000-0000-D43D7EF842FC\snss1A3C.tmp', '32');
DeleteFile('C:\Program Files\UBar\UbarService.exe', '32');
DeleteFile('c:\program files\WNEn\29baaaa22e698fef333f7b4a3e1f4f55.exe', '32');
DeleteFile('C:\Program Files (x86)\00000000-1457920312-0000-0000-D43D7EF842FC\hnsh9851.tmp', '32');
DeleteFile('C:\TEMP\gkernel.sys', '32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17063.223\QMUdisk64.sys', '32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.2.17063.223\softaal64.sys', '32');
DeleteFile('C:\Windows\system32\drivers\tsskx64.sys', '32');
DeleteFile('C:\Program Files\UBar\UbarDriver.sys', '32');
DeleteFile('C:\Program Files (x86)\badu\uc.exe', '32');
DeleteFile('C:\Program Files (x86)\badu\Uninst.exe', '32');
DeleteFile('D:\Documents\systemfile.exe', '32');
DeleteFile('C:\Users\Даниил\AppData\Roaming\UPUpdata\cessrs.exe', '32');
DeleteFile('c:\programdata\lightgate.exe', '32');
DeleteFile('C:\TEMP\un.exe', '32');
DeleteFile('C:\Program Files (x86)\win_en_77\win_en_77.exe', '32');
DeleteFile('c:\programdata\msiql.exe', '32');
DeleteFile('C:\ProgramData\WindowsMsg\675D131108D4FD145B0BFBC68A3E018A.dll', '32');
DeleteFile('C:\Program Files (x86)\UCBrowser\Application\UUC0789.exe', '32');
DeleteFile('C:\ProgramData\service.exe', '32');
DeleteFile('C:\ProgramData\Windows Update\svrupg.exe', '32');
DeleteFile('C:\Users\Даниил\AppData\Local\YInrMbDXmb\mhMlbfHv1.bat', '32');
DeleteFile('C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe', '32');
DeleteFile('C:\Users\Даниил\AppData\Roaming\FreeVPN\FreeVPN.exe', '32');
DeleteFile('C:\Users\Даниил\appdata\roaming\aspackage\aspackage.exe', '32');
DeleteFile('C:\Users\Даниил\appdata\roaming\aspackage\uninstall.exe', '32');
DeleteService('WNetworkEn Monitor');
DeleteService('AppVerifier');
DeleteService('gerocyni');
DeleteService('GoogleChromeUpSvc');
DeleteService('hotnix32');
DeleteService('qumoxykizbt');
DeleteService('rowugoqo');
DeleteService('UbarPolicyProvider');
DeleteService('WNEn Monitor');
DeleteService('wucotusy');
DeleteService('gkernel');
DeleteService('QMUdisk');
DeleteService('softaal');
DeleteService('TSSKX64');
DeleteService('UbarCalloutDriver');
DeleteFileMask('C:\Program Files\WNetworkEn', '*', true);
DeleteFileMask('C:\Program Files\UBar', '*', true);
DeleteFileMask('c:\program files\WNEn', '*', true);
DeleteFileMask('C:\Program Files (x86)\Tencent', '*', true);
DeleteFileMask('C:\Program Files (x86)\badu', '*', true);
DeleteFileMask('C:\Users\Даниил\AppData\Roaming\UPUpdata', '*', true);
DeleteFileMask('C:\Program Files (x86)\win_en_77', '*', true);
DeleteFileMask('C:\ProgramData\WindowsMsg', '*', true);
DeleteFileMask('C:\Program Files (x86)\UCBrowser', '*', true);
DeleteFileMask('C:\ProgramData\Windows Update', '*', true);
DeleteFileMask('C:\Program Files (x86)\DriverToolkit', '*', true);
DeleteFileMask('C:\Users\Даниил\AppData\Roaming\FreeVPN', '*', true);
DeleteFileMask('C:\Users\Даниил\AppData\Local\UCBrowser\User Data\Default\Extensions', '*', true);
DeleteFileMask('C:\Users\Даниил\appdata\roaming\aspackage', '*', true);
DeleteDirectory('C:\Program Files\WNetworkEn');
DeleteDirectory('C:\Program Files\UBar');
DeleteDirectory('c:\program files\WNEn');
DeleteDirectory('C:\Program Files (x86)\Tencent');
DeleteDirectory('C:\Program Files (x86)\badu');
DeleteDirectory('C:\Users\Даниил\AppData\Roaming\UPUpdata');
DeleteDirectory('C:\Program Files (x86)\win_en_77');
DeleteDirectory('C:\ProgramData\WindowsMsg');
DeleteDirectory('C:\Program Files (x86)\UCBrowser');
DeleteDirectory('C:\ProgramData\Windows Update');
DeleteDirectory('C:\Program Files (x86)\DriverToolkit');
DeleteDirectory('C:\Users\Даниил\AppData\Roaming\FreeVPN');
DeleteDirectory('C:\Users\Даниил\AppData\Local\UCBrowser\User Data\Default\Extensions');
DeleteDirectory('C:\Users\Даниил\appdata\roaming\aspackage');
ExecuteFile('schtasks.exe', '/delete /TN "FreeVPN" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'apphide');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'pcmgr');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'SystemClose');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'cessrs.exe -start');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'LightGate');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'un');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'win_en_77');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'msiql');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'taskhost');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'svchost0');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Services\Eventlog\Application\GoogleChromeUpService', 'EventMessageFile');
ExecuteSysClean;
ExecuteRepair(1);
ExecuteRepair(3);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.