Код:
begin
ExecuteAVUpdate;
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\documents and settings\user\local settings\application data\mail.ru\mailruupdater.exe');
TerminateProcessByName('c:\program files\mail.ru\mailruupdater\mailruupdater.exe');
TerminateProcessByName('c:\program files\mail.ru\update service\mrupdsrv.exe');
StopService('mrupdsrv');
StopService('Updater.Mail.Ru');
QuarantineFileF('c:\documents and settings\all users\application data\microsoft\adobe\flash player\d5b3886d-57e3-4939-814e-b0d2e6e8abd9', '*', true, '', 0 , 0);
QuarantineFileF('c:\documents and settings\user\local settings\application data\microsoft\extensions', '*', true, '', 0 , 0);
QuarantineFile('c:\documents and settings\user\local settings\application data\mail.ru\mailruupdater.exe', '');
QuarantineFile('c:\program files\mail.ru\mailruupdater\mailruupdater.exe', '');
QuarantineFile('c:\program files\mail.ru\update service\mrupdsrv.exe', '');
QuarantineFile('C:\Documents and Settings\USER\Local Settings\Application Data\Microsoft\Extensions\extsetup.exe', '');
QuarantineFile('C:\Program Files\Common Files\6213CC31-7C44-4068-952A-ED4CF6050DD5\EFDCFC7B-9BF1-4615-9F8C-18F854591F57.exe', '');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\Microsoft\Adobe\Flash Player\D5B3886D-57E3-4939-814E-B0D2E6E8ABD9\163A9920-BDAB-430E-A7B4-AB3C6C3753BC.exe', '');
DeleteFile('c:\documents and settings\user\local settings\application data\mail.ru\mailruupdater.exe', '32');
DeleteFile('c:\program files\mail.ru\mailruupdater\mailruupdater.exe', '32');
DeleteFile('c:\program files\mail.ru\update service\mrupdsrv.exe', '32');
DeleteFile('C:\Documents and Settings\USER\Local Settings\Application Data\Microsoft\Extensions\extsetup.exe', '32');
DeleteFile('C:\Program Files\Common Files\6213CC31-7C44-4068-952A-ED4CF6050DD5\EFDCFC7B-9BF1-4615-9F8C-18F854591F57.exe', '32');
DeleteFile('C:\Documents and Settings\All Users\Application Data\Microsoft\Adobe\Flash Player\D5B3886D-57E3-4939-814E-B0D2E6E8ABD9\163A9920-BDAB-430E-A7B4-AB3C6C3753BC.exe', '32');
DeleteService('mrupdsrv');
DeleteService('Updater.Mail.Ru');
DeleteFileMask('c:\documents and settings\user\local settings\application data\mail.ru', '*', true);
DeleteFileMask('c:\program files\mail.ru', '*', true);
DeleteFileMask('c:\documents and settings\user\local settings\application data\microsoft\extensions', '*', true);
DeleteFileMask('c:\program files\common files\6213cc31-7c44-4068-952a-ed4cf6050dd5', '*', true);
DeleteFileMask('C:\Documents and Settings\All Users\Application Data\Microsoft\Adobe', '*', true);
DeleteDirectory('c:\documents and settings\user\local settings\application data\mail.ru');
DeleteDirectory('c:\program files\mail.ru');
DeleteDirectory('c:\program files\common files\6213cc31-7c44-4068-952a-ed4cf6050dd5');
DeleteDirectory('C:\Documents and Settings\All Users\Application Data\Microsoft\Adobe');
ExecuteFile('schtasks.exe', '/delete /TN "C:\WINDOWS\Tasks\MailRuUpdater.job" /F', 0, 15000, true);
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'MailRuUpdater');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', 'D5B3886D-57E3-4939-814E-B0D2E6E8ABD9');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', 'SafeBrowser');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', 'AppDownloads');
BC_ImportALL;
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.