Код:
begin
QuarantineFileF('c:\programdata\microsoft\macromed\flash player\c832562d-85d6-4d71-8b17-3b9a09fde0c2', '*', true, '', 0 , 0);
QuarantineFile('C:\ProgramData\Microsoft\Macromed\Flash Player\C832562D-85D6-4D71-8B17-3B9A09FDE0C2\CEABBA27-E474-410D-8014-7B3C8BB36D43.exe', '');
QuarantineFile('C:\Users\Aerotid\AppData\Local\Microsoft\EE781C28DD9F0DE564BEC667433CDFC4\0F986C3EA76EC5FC7FEF4AA7F659B071.exe', '');
QuarantineFile('C:\Users\Aerotid\AppData\Local\fupdate\fupdate.exe', '');
QuarantineFile('C:\ProgramData\KRB Updater Utility\krbupdater.exe', '');
QuarantineFile('C:\Program Files (x86)\Kinoroom Browser\krbrowser.exe', '');
QuarantineFile('C:\Users\Aerotid\AppData\Local\SearchGo\searchgo.exe', '');
QuarantineFile('C:\Users\Aerotid\AppData\Local\sysnet\sysnet.exe', '');
DeleteFile('C:\ProgramData\Microsoft\Macromed\Flash Player\C832562D-85D6-4D71-8B17-3B9A09FDE0C2\CEABBA27-E474-410D-8014-7B3C8BB36D43.exe', '32');
DeleteFile('C:\Users\Aerotid\AppData\Local\Microsoft\EE781C28DD9F0DE564BEC667433CDFC4\0F986C3EA76EC5FC7FEF4AA7F659B071.exe', '32');
DeleteFile('C:\Users\Aerotid\AppData\Local\fupdate\fupdate.exe', '32');
DeleteFile('C:\ProgramData\KRB Updater Utility\krbupdater.exe', '32');
DeleteFile('C:\Program Files (x86)\Kinoroom Browser\krbrowser.exe', '32');
DeleteFile('C:\Users\Aerotid\AppData\Local\SearchGo\searchgo.exe', '32');
DeleteFile('C:\Users\Aerotid\AppData\Local\sysnet\sysnet.exe', '32');
DeleteService('bakqetth');
DeleteFileMask('c:\users\aerotid\appdata\local\microsoft\ee781c28dd9f0de564bec667433cdfc4', '*', true);
DeleteFileMask('c:\users\aerotid\appdata\local\fupdate', '*', true);
DeleteFileMask('c:\programdata\krb updater utility', '*', true);
DeleteFileMask('c:\program files (x86)\kinoroom browser', '*', true);
DeleteFileMask('c:\users\aerotid\appdata\local\searchgo', '*', true);
DeleteFileMask('c:\users\aerotid\appdata\local\sysnet', '*', true);
DeleteDirectory('c:\users\aerotid\appdata\local\microsoft\ee781c28dd9f0de564bec667433cdfc4');
DeleteDirectory('c:\users\aerotid\appdata\local\fupdate');
DeleteDirectory('c:\programdata\krb updater utility');
DeleteDirectory('c:\program files (x86)\kinoroom browser');
DeleteDirectory('c:\users\aerotid\appdata\local\searchgo');
DeleteDirectory('c:\users\aerotid\appdata\local\sysnet');
ExecuteFile('schtasks.exe', '/delete /TN "fupdate" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\59B0716F7AA4FEF7CF5CE67AE30F986C" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\59B0716F7AA4FEF7CF5CE67AE30F986CSB" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\KRBUUS\KRB Updater Utility Service" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\KRBUUS\KRBLNKRUN" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\59B0716F7AA4FEF7CF5CE67AE30F986C" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\59B0716F7AA4FEF7CF5CE67AE30F986CSB" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\AC832562D-85D6-4D71-8B17-3B9A09FDE0C2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SearchGo Task" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "sysnet" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', 'C832562D-85D6-4D71-8B17-3B9A09FDE0C2');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', '59B0716F7AA4FEF7CF5CE67AE30F986CSB');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CMD', 'command');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'RESTART_STICKY_NOTES');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteRepair(23);
ExecuteRepair(3);
RebootWindows(true);
end.
Компьютер перезагрузится.