Код:
begin
TerminateProcessByName('c:\users\Максим\appdata\local\filterstart\filterstart.exe');
TerminateProcessByName('c:\program files (x86)\screenup\future_helper.exe');
QuarantineFileF('c:\users\максим\appdata\local\filesystemoptions', '*.exe', true, '', 0 ,0);
QuarantineFileF('c:\users\максим\appdata\local\testmenu', '*.exe', true, '', 0 ,0);
QuarantineFileF('c:\users\максим\appdata\local\immediatehelp', '*.exe', true, '', 0 ,0);
QuarantineFileF('c:\users\максим\appdata\local\lastnews', '*.exe', true, '', 0 ,0);
QuarantineFileF('c:\users\максим\appdata\local\validatelife', '*.exe', true, '', 0 ,0);
QuarantineFile('c:\users\Максим\appdata\local\filterstart\filterstart.exe', '');
QuarantineFile('c:\program files (x86)\screenup\future_helper.exe', '');
QuarantineFile('C:\Users\Максим\AppData\Local\FilterOptions\regCheck.vbs', '');
QuarantineFile('C:\Users\Максим\AppData\Local\FileSystemOptions\regCheck.vbs', '');
QuarantineFile('C:\Users\Максим\AppData\Local\TestMenu\regCheck.vbs', '');
QuarantineFile('C:\Users\Максим\AppData\Local\ImmediateHelp\regCheck.vbs', '');
QuarantineFile('C:\Users\Максим\AppData\Local\LastNews\regCheck.vbs', '');
QuarantineFile('C:\Users\Максим\AppData\Local\ValidateLife\regCheck.vbs', '');
QuarantineFile('C:\Users\Максим\AppData\Local\DateOption\regCheck.vbs', '');
QuarantineFile('C:\Program Files (x86)\Kinoroom Browser\krbrowser.exe', '');
QuarantineFile('C:\Users\Максим\appdata\roaming\imagecropresize\imageed\imageed.exe', '');
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\KRBUUS\KRBLNKRUN" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "PC Account Manager" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "System Translator Manager" /F', 0, 15000, true);
DeleteFile('c:\users\Максим\appdata\local\filterstart\filterstart.exe', '32');
DeleteFile('c:\program files (x86)\screenup\future_helper.exe', '32');
DeleteFile('C:\Program Files (x86)\ScreenUp\nfapi.dll', '32');
DeleteFile('C:\Program Files (x86)\ScreenUp\ProtocolFilters.dll', '32');
DeleteFile('C:\Users\Максим\AppData\Local\FilterOptions\regCheck.vbs', '32');
DeleteFile('C:\Users\Максим\AppData\Local\FileSystemOptions\regCheck.vbs', '32');
DeleteFile('C:\Users\Максим\AppData\Local\TestMenu\regCheck.vbs', '32');
DeleteFile('C:\Users\Максим\AppData\Local\ImmediateHelp\regCheck.vbs', '32');
DeleteFile('C:\Users\Максим\AppData\Local\LastNews\regCheck.vbs', '32');
DeleteFile('C:\Users\Максим\AppData\Local\ValidateLife\regCheck.vbs', '32');
DeleteFile('C:\Users\Максим\AppData\Local\DateOption\regCheck.vbs', '32');
DeleteFile('C:\Program Files (x86)\Kinoroom Browser\krbrowser.exe', '32');
DeleteFile('C:\Users\Максим\appdata\roaming\imagecropresize\imageed\imageed.exe', '32');
DeleteFileMask('c:\users\максим\appdata\local\filterstart', '*', true);
DeleteFileMask('c:\program files (x86)\screenup', '*', true);
DeleteFileMask('c:\users\максим\appdata\local\filesystemoptions', '*', true);
DeleteFileMask('c:\users\максим\appdata\local\testmenu', '*', true);
DeleteFileMask('c:\users\максим\appdata\local\immediatehelp', '*', true);
DeleteFileMask('c:\users\максим\appdata\local\lastnews', '*', true);
DeleteFileMask('c:\users\максим\appdata\local\validatelife', '*', true);
DeleteFileMask('c:\users\максим\appdata\local\dateoption', '*', true);
DeleteFileMask('c:\program files (x86)\kinoroom browser', '*', true);
DeleteFileMask('c:\users\максим\appdata\roaming\imagecropresize', '*', true);
DeleteDirectory('c:\users\максим\appdata\local\filterstart');
DeleteDirectory('c:\program files (x86)\screenup');
DeleteDirectory('c:\users\максим\appdata\local\filesystemoptions');
DeleteDirectory('c:\users\максим\appdata\local\testmenu');
DeleteDirectory('c:\users\максим\appdata\local\immediatehelp');
DeleteDirectory('c:\users\максим\appdata\local\lastnews');
DeleteDirectory('c:\users\максим\appdata\local\validatelife');
DeleteDirectory('c:\users\максим\appdata\local\dateoption');
DeleteDirectory('c:\program files (x86)\kinoroom browser');
DeleteDirectory('c:\users\максим\appdata\roaming\imagecropresize');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','FilterOptions');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','hvqtbooobk');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','FileSystemOptions');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','TestMenu');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','ImmediateHelp');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','LastNews');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','ValidateLife');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','DateOption');
ExecuteRepair(22);
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.
Компьютер перезагрузится.