Код:
begin
TerminateProcessByName('c:\program files (x86)\fb0d31a0-1446050661-11d5-96f1-40167eb28d3c\jnsvaa46.tmp');
TerminateProcessByName('c:\users\ivan\appdata\roaming\nssm.exe');
StopService('burudici');
QuarantineFileF('C:\Users\ivan\appdata\roaming\newsi_42075\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('c:\program files (x86)\fb0d31a0-1446050661-11d5-96f1-40167eb28d3c\jnsvaa46.tmp', '');
QuarantineFile('c:\users\ivan\appdata\roaming\nssm.exe', '');
QuarantineFile('C:\Users\ivan\AppData\Roaming\66k9lzU5XSvtbLMjL.exe', '');
QuarantineFile('C:\Users\ivan\AppData\Roaming\AfSoFXl7REPn1.exe', '');
QuarantineFile('C:\Users\ivan\AppData\Roaming\c7M0nkMgzVMbMl1CvKZxa2p57e.exe', '');
QuarantineFile('C:\Users\ivan\AppData\Roaming\hCUsSdE7q33h8.exe', '');
QuarantineFile('C:\Users\ivan\AppData\Roaming\jEBU1WD1eretZqsVLX.exe', '');
QuarantineFile('C:\Users\ivan\AppData\Roaming\kyikUYNmVA.exe', '');
QuarantineFile('C:\Users\ivan\AppData\Roaming\U6NzemEvNNdDTfpS2do3.exe', '');
QuarantineFile('C:\Users\ivan\AppData\Roaming\uVU3FTvbnWy14jT9WzD.exe', '');
QuarantineFile('C:\Users\ivan\appdata\roaming\newsi_42075\s_inst.exe', '');
DeleteFile('C:\Windows\Tasks\66k9lzU5XSvtbLMjL.job', '64');
DeleteFile('C:\Windows\Tasks\AfSoFXl7REPn1.job', '64');
DeleteFile('C:\Windows\Tasks\c7M0nkMgzVMbMl1CvKZxa2p57e.job', '64');
DeleteFile('C:\Windows\Tasks\hCUsSdE7q33h8.job', '64');
DeleteFile('C:\Windows\Tasks\jEBU1WD1eretZqsVLX.job', '64');
DeleteFile('C:\Windows\Tasks\kyikUYNmVA.job', '64');
DeleteFile('C:\Windows\Tasks\U6NzemEvNNdDTfpS2do3.job', '64');
DeleteFile('C:\Windows\Tasks\uVU3FTvbnWy14jT9WzD.job', '64');
DeleteFile('c:\program files (x86)\fb0d31a0-1446050661-11d5-96f1-40167eb28d3c\jnsvaa46.tmp', '32');
DeleteFile('c:\users\ivan\appdata\roaming\nssm.exe', '32');
DeleteFile('C:\Users\ivan\AppData\Roaming\66k9lzU5XSvtbLMjL.exe', '32');
DeleteFile('C:\Users\ivan\AppData\Roaming\AfSoFXl7REPn1.exe', '32');
DeleteFile('C:\Users\ivan\AppData\Roaming\c7M0nkMgzVMbMl1CvKZxa2p57e.exe', '32');
DeleteFile('C:\Users\ivan\AppData\Roaming\hCUsSdE7q33h8.exe', '32');
DeleteFile('C:\Users\ivan\AppData\Roaming\jEBU1WD1eretZqsVLX.exe', '32');
DeleteFile('C:\Users\ivan\AppData\Roaming\kyikUYNmVA.exe', '32');
DeleteFile('C:\Users\ivan\AppData\Roaming\U6NzemEvNNdDTfpS2do3.exe', '32');
DeleteFile('C:\Users\ivan\AppData\Roaming\uVU3FTvbnWy14jT9WzD.exe', '32');
DeleteFile('C:\Users\ivan\appdata\roaming\newsi_42075\s_inst.exe', '32');
DeleteService('clr_optimization_v1.02');
DeleteService('burudici');
DeleteFileMask('C:\Users\ivan\appdata\roaming\newsi_42075\', '*', true);
DeleteDirectory('C:\Users\ivan\appdata\roaming\newsi_42075\');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.