Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
TerminateProcessByName('c:\program files (x86)\e8713860-1476549521-11e1-9bf7-c86000e0284d\knse79b.tmp');
TerminateProcessByName('c:\program files (x86)\zaxar\zaxarloader.exe');
StopService('xecudoty');
QuarantineFileF('D:\Users\Владимир\appdata\local\apps\2.0', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFileF('c:\program files (x86)\zaxar', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('c:\program files (x86)\e8713860-1476549521-11e1-9bf7-c86000e0284d\knse79b.tmp', '');
QuarantineFile('c:\program files (x86)\zaxar\zaxarloader.exe', '');
QuarantineFile('d:\bmp\bmppaltvr.exe', '');
QuarantineFile('d:\distr1\distrПочта.exe', '');
QuarantineFile('d:\uole13381f++\Петроэлектросбытьuolef.exe', '');
QuarantineFile('d:\Пароли\ПаролиИгры.exe', '');
QuarantineFile('D:\Users\Владимир\appdata\roaming\adobe\manager.exe', '');
QuarantineFileF('D:\Users\Владимир\appdata\roaming\mydesktop\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFile('c:\program files (x86)\acronis\acronisintel.exe', '');
QuarantineFileF('C:\Program Files (x86)\IconRunner\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFileF('C:\Program Files\spacesoundpro\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFile('c:\program files (x86)\traystatus\traystatusutorrent.exe', '');
QuarantineFileF('C:\Program Files\3494b33ceb010c647fc889a04a1a8b72\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFile('C:\Program Files\3494b33ceb010c647fc889a04a1a8b72\ca9c1a05406ef7ea5fef1481b52cfffc.exe', '');
QuarantineFileF('c:\program files (x86)\traystatus\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFile('c:\program files (x86)\adobe\inteladobe.exe', '');
QuarantineFile('c:\program files (x86)\google\googlemicrosoftvisualstudio.exe', '');
QuarantineFileF('D:\Users\Владимир\AppData\Roaming\Adobe\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFile('C:\Windows\system32\drivers\03aa87b55e8981c7f0809bf360ba74f9.sys', '');
QuarantineFileF('c:\program files (x86)\sunshine\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFileF('c:\program files (x86)\ghuwule\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFileF('c:\programdata\networkpacketmanitor\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFileF('d:\users\Владимир\appdata\roaming\hpsewil', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
DeleteFile('c:\program files (x86)\e8713860-1476549521-11e1-9bf7-c86000e0284d\knse79b.tmp', '32');
DeleteFile('c:\program files (x86)\zaxar\zaxarloader.exe', '32');
DeleteFile('D:\Users\Владимир\appdata\roaming\adobe\manager.exe');
DeleteFile('c:\program files (x86)\traystatus\traystatusutorrent.exe');
DeleteFile('c:\program files (x86)\acronis\acronisintel.exe');
DeleteFile('c:\program files (x86)\adobe\inteladobe.exe');
DeleteFile('c:\program files (x86)\google\googlemicrosoftvisualstudio.exe');
DeleteService('xecudoty');
DeleteFileMask('c:\program files (x86)\zaxar', '*', true);
DeleteFileMask('D:\Users\Владимир\appdata\roaming\mydesktop\', '*', true);
DeleteFileMask('C:\Program Files (x86)\IconRunner\', '*', true);
DeleteFileMask('C:\Program Files\spacesoundpro\', '*', true);
DeleteFileMask('C:\Program Files\3494b33ceb010c647fc889a04a1a8b72\', '*', true);
DeleteDirectory('D:\Users\Владимир\appdata\roaming\mydesktop\');
DeleteDirectory('C:\Program Files (x86)\IconRunner\');
DeleteDirectory('C:\Program Files\spacesoundpro\');
DeleteDirectory('C:\Program Files\3494b33ceb010c647fc889a04a1a8b72\');
DeleteDirectory('c:\program files (x86)\zaxar');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'IconRunner');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.