Код:
begin
StopService('TsDefenseBt');
StopService('QMUdisk');
StopService('TenCommProtect');
StopService('netfilter2');
StopService('HHandler Service');
StopService('wehidyhe');
StopService('vekupevo');
StopService('QQPCRTP');
StopService('globalUpdatem');
StopService('globalUpdate');
StopService('dijojyvi');
StopService('ContentDefender');
StopService('cogosygi');
QuarantineFile('C:\Users\Серега\AppData\Local\sysnet\sysnet.exe', '');
QuarantineFile('C:\Users\Серега\AppData\Local\Hostinstaller\2825736925_monster.exe', '');
QuarantineFile('C:\Users\Серега\AppData\Local\SearchGo\searchgo.exe', '');
QuarantineFile('C:\Users\Серега\AppData\Local\calk\calk.exe', '');
QuarantineFile('C:\Users\Серега\AppData\Local\fupdate\fupdate.exe', '');
QuarantineFile('C:\Users\Серега\AppData\LocalLow\SearchGo\searchgo.dll', '');
QuarantineFile('C:\Windows\system32\explorer.exe', '');
QuarantineFile('F:\NTIOLib_X64.sys', '');
QuarantineFile('F:\CDriver64.sys', '');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.0.16794.227\TsDefenseBT64.sys', '');
QuarantineFileF('C:\Program Files (x86)\Tencent', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\HP Defender', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.0.16794.227\QMUdisk64.sys', '');
QuarantineFile('C:\Program Files (x86)\HP Defender\HHandler.exe', '');
QuarantineFile('C:\Users\Серега\AppData\Local\00000000-1445516078-0000-0000-D43D7E4D8381\snspA595.tmp', '');
QuarantineFile('C:\Program Files (x86)\00000000-1445501635-0000-0000-D43D7E4D8381\knsuC79.tmpfs', '');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.0.16794.227\QQPCRtp.exe', '');
QuarantineFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '');
QuarantineFile('C:\Program Files (x86)\00000000-1445501635-0000-0000-D43D7E4D8381\hnse3E69.tmp', '');
QuarantineFile('ContentDefender.sys', '');
QuarantineFile('C:\Program Files (x86)\00000000-1445501635-0000-0000-D43D7E4D8381\jnse26A3.tmp', '');
QuarantineFile('C:\Windows\system32\drivers\TenCommProtect64.sys', '');
QuarantineFile('C:\Windows\system32\drivers\netfilter2.sys', '');
DeleteFile('C:\Windows\system32\drivers\netfilter2.sys', '32');
DeleteFile('C:\Windows\system32\drivers\TenCommProtect64.sys', '32');
DeleteFile('C:\Program Files (x86)\00000000-1445501635-0000-0000-D43D7E4D8381\jnse26A3.tmp', '32');
DeleteFile('ContentDefender.sys', '32');
DeleteFile('C:\Program Files (x86)\00000000-1445501635-0000-0000-D43D7E4D8381\hnse3E69.tmp', '32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.0.16794.227\QQPCRtp.exe', '32');
DeleteFile('C:\Program Files (x86)\00000000-1445501635-0000-0000-D43D7E4D8381\knsuC79.tmpfs', '32');
DeleteFile('C:\Users\Серега\AppData\Local\00000000-1445516078-0000-0000-D43D7E4D8381\snspA595.tmp', '32');
DeleteFile('C:\Program Files (x86)\HP Defender\HHandler.exe', '32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.0.16794.227\QMUdisk64.sys', '32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.0.16794.227\TsDefenseBT64.sys', '32');
DeleteFile('C:\Windows\system32\explorer.exe', '32');
DeleteFile('C:\Users\Серега\AppData\Local\fupdate\fupdate.exe', '32');
DeleteFile('C:\Users\Серега\AppData\Local\calk\calk.exe', '32');
DeleteFile('C:\Users\Серега\AppData\Local\SearchGo\searchgo.exe', '32');
DeleteFile('C:\Users\Серега\AppData\Local\Hostinstaller\2825736925_monster.exe', '32');
DeleteFile('C:\Users\Серега\AppData\Local\sysnet\sysnet.exe', '32');
DeleteFile('C:\Users\Серега\appdata\locallow\searchgo\searchgo.dll', '32');
DeleteFile('C:\Users\Серега\Favorites\Links\Интернет.url', '32');
DeleteService('TsDefenseBt');
DeleteService('QMUdisk');
DeleteService('TenCommProtect');
DeleteService('netfilter2');
DeleteService('HHandler Service');
DeleteService('wehidyhe');
DeleteService('vekupevo');
DeleteService('QQPCRTP');
DeleteService('globalUpdatem');
DeleteService('globalUpdate');
DeleteService('dijojyvi');
DeleteService('ContentDefender');
DeleteService('cogosygi');
DeleteFileMask('C:\Program Files (x86)\Tencent', '*', true);
DeleteFileMask('C:\Users\Серега\AppData\LocalLow\SearchGo', '*', true);
DeleteDirectory('C:\Program Files (x86)\Tencent');
DeleteDirectory('C:\Users\Серега\AppData\LocalLow\SearchGo');
DelBHO('{2BC46CFA-4B00-4193-A7BD-6AD1D0BCB5BC}');
DelBHO('{598AEFC6-DD3C-4A63-9AC3-53FCF6155931}');
ExecuteFile('schtasks.exe', '/delete /TN "sysnet" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Soft installer" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SearchGo Task" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "fupdate" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "calk" /F', 0, 15000, true);
ExecuteRepair(2);
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.
Компьютер будет перезагружен.