Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\program files\325c59ee-1441083184-e111-9506-dc0ea1dd4dc9\knsec961.tmp');
QuarantineFile('C:\Users\Antoxa\appdata\roaming\aspackage\aspackage.exe', '');
QuarantineFile('C:\Users\Antoxa\appdata\local\storegid\storegid.exe', '');
QuarantineFile('C:\Users\Antoxa\appdata\local\kometa\kometaup.exe', '');
QuarantineFile('C:\windows\system32\tssk.sys', '');
QuarantineFile('c:\program files\325c59ee-1441083184-e111-9506-dc0ea1dd4dc9\knsec961.tmp', '');
DeleteFile('C:\Program Files\325C59EE-1441083184-E111-9506-DC0EA1DD4DC9\knseC961.tmp', '32');
DeleteFile('C:\windows\system32\tssk.sys', '32');
DeleteFile('C:\windows\Tasks\APSnotifierPP1.job', '32');
DeleteFile('C:\windows\Tasks\APSnotifierPP2.job', '32');
DeleteFile('C:\windows\Tasks\APSnotifierPP3.job', '32');
DeleteFile('C:\windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job', '32');
DeleteFile('C:\windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job', '32');
DeleteFile('C:\Users\Antoxa\appdata\local\kometa\kometaup.exe', '32');
DeleteFile('C:\Users\Antoxa\appdata\local\storegid\storegid.exe', '32');
DeleteFile('C:\Users\Antoxa\appdata\roaming\aspackage\aspackage.exe', '32');
DeleteService('QMUdisk');
DeleteService('wsafd_1_10_0_19');
DeleteService('TSSK');
DeleteService('qknfd');
DeleteService('misetufy');
DeleteFileMask('C:\Program Files\325C59EE-1441083184-E111-9506-DC0EA1DD4DC9', '*', true);
DeleteFileMask('C:\Users\Antoxa\appdata\local\kometa', '*', true);
DeleteFileMask('C:\Users\Antoxa\appdata\local\storegid', '*', true);
DeleteFileMask('C:\Users\Antoxa\appdata\roaming\aspackage', '*', true);
DeleteDirectory('C:\Program Files\325C59EE-1441083184-E111-9506-DC0EA1DD4DC9');
DeleteDirectory('C:\Users\Antoxa\appdata\local\kometa');
DeleteDirectory('C:\Users\Antoxa\appdata\local\storegid');
DeleteDirectory('C:\Users\Antoxa\appdata\roaming\aspackage');
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP1" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP3" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "BonanzaDealsLiveUpdateTaskMachineCore" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "BonanzaDealsLiveUpdateTaskMachineUA" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "JetBoost_AutoUpdate" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "WordSurfer Auto Updater 1.10.0.19 Core" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "WordSurfer Auto Updater 1.10.0.19 Pending Update" /F', 0, 15000, true);
BC_ImportDeletedList;
ExecuteSysClean;
BC_DeleteSvc('misetufy');
BC_DeleteSvc('TSSK');
ExecuteRepair(2);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.