Код:
begin
QuarantineFileF('c:\program files (x86)\gmsd_ru_021010263', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\program files (x86)\rec_ru_221', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('C:\Program Files (x86)\gmsd_ru_021010263\gmsd_ru_021010263.exe', '');
QuarantineFile('C:\Program Files (x86)\rec_ru_221\rec_ru_221.exe', '');
QuarantineFile('C:\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe', '');
QuarantineFile('C:\Program Files\sound+\idscservice.exe', '');
DeleteFile('C:\Program Files (x86)\00000000-1457633011-0000-0000-D43D7E030B56\knsmDABE.tmpfs', '32');
DeleteFile('C:\Program Files (x86)\gmsd_ru_021010263\gmsd_ru_021010263.exe', '32');
DeleteFile('C:\Program Files (x86)\rec_ru_221\rec_ru_221.exe', '32');
DeleteFile('C:\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe', '32');
DeleteFile('C:\Program Files\sound+\idscservice.exe', '32');
DeleteService('hewixowyzbt');
DeleteFileMask('c:\program files (x86)\gmsd_ru_021010263', '*', true);
DeleteFileMask('c:\program files (x86)\rec_ru_221', '*', true);
DeleteFileMask('c:\program files (x86)\wintaske', '*', true);
DeleteFileMask('c:\program files\sound+', '*', true);
DeleteDirectory('c:\program files (x86)\gmsd_ru_021010263');
DeleteDirectory('c:\program files (x86)\rec_ru_221');
DeleteDirectory('c:\program files (x86)\wintaske');
DeleteDirectory('c:\program files\sound+');
ExecuteFile('schtasks.exe', '/delete /TN "WinTaske" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{09787A47-0E04-040D-0F11-0E0C0B7A110B}" /F', 0, 15000, true);
ExecuteFile('ipconfig.exe', '/flushdns', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\gmsd_ru_021010263', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\rec_ru_221', 'command');
ExecuteSysClean;
ExecuteRepair(21);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.