Код:
begin
TerminateProcessByName('c:\programdata\eastmy\eastmy.exe');
TerminateProcessByName('c:\program files (x86)\qksee\qkseesvc.exe');
TerminateProcessByName('c:\program files (x86)\winsaber\winsaber.exe');
StopService('EastmyP');
StopService('qkseeService');
StopService('winsaber');
QuarantineFile('c:\programdata\eastmy\eastmy.exe', '');
QuarantineFile('c:\program files (x86)\qksee\qkseesvc.exe', '');
QuarantineFile('c:\program files (x86)\winsaber\winsaber.exe', '');
QuarantineFile('c:\programdata\sun\java\extension.dll', '');
QuarantineFile('C:\Program Files (x86)\Eastmy\Update\EastmyUpdate.exe', '');
QuarantineFile('C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe', '');
QuarantineFile('C:\Program Files (x86)\Shoqeent\cjycrLiterpyprwch.exe', '');
DeleteFile('c:\programdata\eastmy\eastmy.exe', '32');
DeleteFile('c:\program files (x86)\qksee\qkseesvc.exe', '32');
DeleteFile('c:\program files (x86)\winsaber\winsaber.exe', '32');
DeleteFile('c:\programdata\sun\java\extension.dll', '32');
DeleteFile('C:\Program Files (x86)\Eastmy\Update\EastmyUpdate.exe', '32');
DeleteFile('C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe', '32');
DeleteFile('C:\Program Files (x86)\Shoqeent\cjycrLiterpyprwch.exe', '32');
DeleteService('EastmyP');
DeleteService('qkseeService');
DeleteService('winsaber');
DeleteService('EastmyU');
DeleteService('iSafeService');
DeleteFileMask('c:\programdata\eastmy', '*', true);
DeleteFileMask('c:\program files (x86)\qksee', '*', true);
DeleteFileMask('c:\program files (x86)\winsaber', '*', true);
DeleteFileMask('c:\program files (x86)\eastmy', '*', true);
DeleteFileMask('c:\program files (x86)\elex-tech', '*', true);
DeleteFileMask('c:\program files (x86)\shoqeent', '*', true);
DeleteDirectory('c:\programdata\eastmy');
DeleteDirectory('c:\program files (x86)\qksee');
DeleteDirectory('c:\program files (x86)\winsaber');
DeleteDirectory('c:\program files (x86)\eastmy');
DeleteDirectory('c:\program files (x86)\elex-tech');
DeleteDirectory('c:\program files (x86)\shoqeent');
ExecuteFile('schtasks.exe', '/delete /TN "Cjaythituther Core" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "EastmyUpdateTaskMachineCore" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "EastmyUpdateTaskMachineUA" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Services\W3PCC\Parameters', 'ServiceDll');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
RebootWindows(true);
end.
Компьютер перезагрузится.