Код:
begin
TerminateProcessByName('c:\users\deilos\appdata\roaming\tsv\tsvr.exe');
TerminateProcessByName('c:\programdata\2wdm2\wdman.exe');
StopService('IhPul');
QuarantineFileF('c:\programdata\2wdm2', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\programdata\tmp0x0x', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\users\deilos\appdata\local\hostinstaller', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('c:\users\deilos\appdata\roaming\tsv\tsvr.exe', '');
QuarantineFile('c:\programdata\2wdm2\wdman.exe', '');
QuarantineFile('C:\Windows\system32\drivers\cherimoya.sys', '');
QuarantineFile('C:\ProgramData\Tmp0x0x\P', '');
QuarantineFile('C:\ProgramData\nAGFFgwfgGm\cVDHyokiRTNboi0.bat', '');
QuarantineFile('C:\Users\DeiloS\AppData\Local\XKmRZDwhypjhfQi\dpEdvser0.bat', '');
QuarantineFile('C:\Users\DeiloS\AppData\Roaming\98ANCI5Dta2F5ksS39.exe', '');
QuarantineFile('C:\Users\DeiloS\AppData\Local\Hostinstaller\709968565_installcube.exe', '');
QuarantineFile('c:\windows\bcore.exe', '');
QuarantineFile('C:\PROGRA~1\GROOVE~1\Cibme.bat', '');
DeleteFile('C:\Windows\Tasks\98ANCI5Dta2F5ksS39.job', '64');
DeleteFile('c:\users\deilos\appdata\roaming\tsv\tsvr.exe', '32');
DeleteFile('c:\programdata\2wdm2\wdman.exe', '32');
DeleteFile('C:\Windows\system32\drivers\cherimoya.sys', '32');
DeleteFile('C:\ProgramData\Tmp0x0x\P', '32');
DeleteFile('C:\ProgramData\nAGFFgwfgGm\cVDHyokiRTNboi0.bat', '32');
DeleteFile('C:\Users\DeiloS\AppData\Local\XKmRZDwhypjhfQi\dpEdvser0.bat', '32');
DeleteFile('C:\Users\DeiloS\AppData\Roaming\98ANCI5Dta2F5ksS39.exe', '32');
DeleteFile('C:\Users\DeiloS\AppData\Local\Hostinstaller\709968565_installcube.exe', '32');
DeleteFile('c:\windows\bcore.exe', '32');
DeleteFile('C:\PROGRA~1\GROOVE~1\Cibme.bat', '32');
DeleteService('IhPul');
DeleteService('cherimoya');
DeleteFileMask('c:\users\deilos\appdata\roaming\tsv', '*', true);
DeleteFileMask('c:\programdata\2wdm2', '*', true);
DeleteFileMask('c:\programdata\tmp0x0x', '*', true);
DeleteFileMask('c:\users\deilos\appdata\local\hostinstaller', '*', true);
DeleteFileMask('c:\progra~1\groove~1', '*', true);
DeleteDirectory('c:\users\deilos\appdata\roaming\tsv');
DeleteDirectory('c:\programdata\2wdm2');
DeleteDirectory('c:\programdata\tmp0x0x');
DeleteDirectory('c:\users\deilos\appdata\local\hostinstaller');
DeleteDirectory('c:\progra~1\groove~1');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Soft installer" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "UpnCH" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Vijjej" /F', 0, 15000, true);
ExecuteSysClean;
ExecuteRepair(4);
ExecuteRepair(3);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.