Код:
begin
StopService('iThemes5');
QuarantineFileF('c:\program files (x86)\gerfuphqitather configuration', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', false, '', 0 , 0);
QuarantineFileF('c:\users\user\appdata\roaming\forceupdatevof', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', false, '', 0 , 0);
QuarantineFile('C:\Program Files (x86)\Common Files\Services\iThemes.dll', '');
QuarantineFile('C:\Program Files (x86)\Thoruingstpory\SyfDebuger.dll', '');
QuarantineFile('C:\Users\User\AppData\Roaming\WinSnare\WinSnare.dll', '');
QuarantineFile('C:\Users\User\AppData\Roaming\vofer\ml.py', '');
QuarantineFile('C:\Users\User\AppData\Roaming\vofer\python\pythonw.exe', '');
QuarantineFile('C:\Program Files (x86)\Gerfuphqitather Configuration\local64spl.dll', '');
QuarantineFile('C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe', '');
QuarantineFile('C:\Program Files (x86)\BikaQRssReader\BikaQ.exe', '');
QuarantineFile('C:\Users\User\AppData\Roaming\ForceUpdateVOF\updater.py', '');
QuarantineFile('C:\Users\User\AppData\Roaming\ForceUpdateVOF\python\pythonw.exe', '');
QuarantineFile('C:\Program Files (x86)\Thoruingstpory\pipele.exe', '');
QuarantineFile('"C:\Program Files (x86)\MIO\MIO.exe" -bindurl http://api.mhttxtv.com/samsungxhd252kj_s0njj1np600013.exe cmd=', '');
QuarantineFile('C:\Program Files (x86)\MIO\MIO.exe', '');
QuarantineFile('C:\Users\User\AppData\Roaming\SearchAY\ml.py', '');
QuarantineFile('C:\Users\User\AppData\Roaming\SearchAY\python\pythonw.exe', '');
QuarantineFile('C:\Users\User\AppData\Roaming\SearchAY\app.py', '');
QuarantineFile('C:\Users\User\AppData\Roaming\ForceUpdateVOF\uninstall.exe', '');
DeleteFile('C:\Windows\Tasks\Uninstaller_SkipUac_User.job', '64');
DeleteFile('C:\Program Files (x86)\Common Files\Services\iThemes.dll', '32');
DeleteFile('C:\Program Files (x86)\amuleCexx\ed2k.exe', '32');
DeleteFile('C:\Program Files (x86)\Thoruingstpory\SyfDebuger.dll', '32');
DeleteFile('C:\Users\User\AppData\Roaming\WinSnare\WinSnare.dll', '32');
DeleteFile('C:\Users\User\AppData\Roaming\vofer\ml.py', '32');
DeleteFile('C:\Users\User\AppData\Roaming\vofer\python\pythonw.exe', '32');
DeleteFile('C:\Program Files (x86)\Gerfuphqitather Configuration\local64spl.dll', '32');
DeleteFile('C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe', '32');
DeleteFile('C:\Program Files (x86)\BikaQRssReader\BikaQ.exe', '32');
DeleteFile('C:\Users\User\AppData\Roaming\ForceUpdateVOF\updater.py', '32');
DeleteFile('C:\Users\User\AppData\Roaming\ForceUpdateVOF\python\pythonw.exe', '32');
DeleteFile('C:\Program Files (x86)\Thoruingstpory\pipele.exe', '32');
DeleteFile('"C:\Program Files (x86)\MIO\MIO.exe" -bindurl http://api.mhttxtv.com/samsungxhd252kj_s0njj1np600013.exe cmd=', '32');
DeleteFile('C:\Program Files (x86)\MIO\MIO.exe', '32');
DeleteFile('C:\Users\User\AppData\Roaming\SearchAY\ml.py', '32');
DeleteFile('C:\Users\User\AppData\Roaming\SearchAY\python\pythonw.exe', '32');
DeleteFile('C:\Users\User\AppData\Roaming\SearchAY\app.py', '32');
DeleteFile('C:\Users\User\AppData\Roaming\ForceUpdateVOF\uninstall.exe', '32');
DeleteService('iThemes5');
DeleteService('ed2kidle');
DeleteFileMask('c:\program files (x86)\common files\services', '*', true);
DeleteFileMask('c:\program files (x86)\amulecexx', '*', true);
DeleteFileMask('c:\program files (x86)\thoruingstpory', '*', true);
DeleteFileMask('c:\users\user\appdata\roaming\winsnare', '*', true);
DeleteFileMask('c:\users\user\appdata\roaming\vofer', '*', true);
DeleteFileMask('c:\program files (x86)\gerfuphqitather configuration', '*', true);
DeleteFileMask('c:\program files (x86)\iobit', '*', true);
DeleteFileMask('c:\program files (x86)\bikaqrssreader', '*', true);
DeleteFileMask('c:\users\user\appdata\roaming\forceupdatevof', '*', true);
DeleteFileMask('"c:\program files (x86)\mio', '*', true);
DeleteFileMask('c:\program files (x86)\mio', '*', true);
DeleteFileMask('c:\users\user\appdata\roaming\searchay', '*', true);
DeleteDirectory('c:\program files (x86)\common files\services');
DeleteDirectory('c:\program files (x86)\amulecexx');
DeleteDirectory('c:\program files (x86)\thoruingstpory');
DeleteDirectory('c:\users\user\appdata\roaming\winsnare');
DeleteDirectory('c:\users\user\appdata\roaming\vofer');
DeleteDirectory('c:\program files (x86)\gerfuphqitather configuration');
DeleteDirectory('c:\program files (x86)\iobit');
DeleteDirectory('c:\program files (x86)\bikaqrssreader');
DeleteDirectory('c:\users\user\appdata\roaming\forceupdatevof');
DeleteDirectory('"c:\program files (x86)\mio');
DeleteDirectory('c:\program files (x86)\mio');
DeleteDirectory('c:\users\user\appdata\roaming\searchay');
ExecuteFile('schtasks.exe', '/delete /TN "BikaQ_FetchAndUpgrade_CanBeDel" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "ForceUpdateVOF2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Stuwittuhiph" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Gerfuphqitather Configuration" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Milimili" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SearchAY" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SearchAY2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Uninstaller_SkipUac_User" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "vofer" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{FA42F24E-DBA0-46E4-A6F9-D409A45F711B}" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Services\Fenghtchiqesy\Parameters', 'ServiceDll');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Services\WinSnare\Parameters', 'ServiceDll');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteRepair(4);
ExecuteRepair(3);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.