Код:
begin
QuarantineFile('c:\program files (x86)\tofatythamaent\phwhelper.dll', '');
QuarantineFile('C:\Users\Гена\AppData\Local\MzIzNTM0Mzc=\s_inst.exe', '');
QuarantineFile('C:\Users\Гена\AppData\Roaming\UrlControl_\url_opener.exe', '');
QuarantineFile('C:\Windows\5c2e8908505a86d50d1ba6f5d29f2d1d.ps1', '');
QuarantineFile('C:\Users\Гена\AppData\Local\MailruSetup\MailruSetup.exe', '');
QuarantineFile('C:\Users\Гена\AppData\Roaming\Adobe\Manager.exe', '');
QuarantineFile('C:\Users\Гена\AppData\Local\FilterStart\FilterStart.exe', '');
QuarantineFile('C:\Program Files (x86)\Tofatythamaent\kahck.exe', '');
DeleteFile('C:\Windows\Tasks\MzIzNTM0Mzc=.job', '64');
DeleteFile('C:\Windows\Tasks\UrlControl.job', '64');
DeleteFile('c:\program files (x86)\tofatythamaent\phwhelper.dll', '32');
DeleteFile('C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe', '32');
DeleteFile('C:\Users\Гена\AppData\Local\MzIzNTM0Mzc=\s_inst.exe', '32');
DeleteFile('C:\Users\Гена\AppData\Roaming\UrlControl_\url_opener.exe', '32');
DeleteFile('C:\Windows\5c2e8908505a86d50d1ba6f5d29f2d1d.ps1', '32');
DeleteFile('C:\Users\Гена\AppData\Local\MailruSetup\MailruSetup.exe', '32');
DeleteFile('C:\Users\Гена\AppData\Roaming\Adobe\Manager.exe', '32');
DeleteFile('C:\Users\Гена\AppData\Local\FilterStart\FilterStart.exe', '32');
DeleteFile('C:\Program Files (x86)\Tofatythamaent\kahck.exe', '32');
DeleteService('LiveUpdateSvc');
DeleteFileMask('c:\program files (x86)\tofatythamaent', '*', true);
DeleteFileMask('c:\program files (x86)\iobit', '*', true);
DeleteFileMask('c:\users\гена\appdata\local\mzizntm0mzc=', '*', true);
DeleteFileMask('c:\users\гена\appdata\roaming\urlcontrol_', '*', true);
DeleteFileMask('c:\users\гена\appdata\local\mailrusetup', '*', true);
DeleteFileMask('c:\users\гена\appdata\local\filterstart', '*', true);
DeleteDirectory('c:\program files (x86)\tofatythamaent');
DeleteDirectory('c:\program files (x86)\iobit');
DeleteDirectory('c:\users\гена\appdata\local\mzizntm0mzc=');
DeleteDirectory('c:\users\гена\appdata\roaming\urlcontrol_');
DeleteDirectory('c:\users\гена\appdata\local\mailrusetup');
DeleteDirectory('c:\users\гена\appdata\local\filterstart');
ExecuteFile('schtasks.exe', '/delete /TN "5c2e8908505a86d50d1ba6f5d29f2d1d" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\Multimedia\MailruSetup" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\Multimedia\Manager" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Request Private Helper" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Sojusymecage Client" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Services\SojusymecageClient\Parameters', 'ServiceDll');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.