Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
QuarantineFileF('C:\Users\BLACKS~1\AppData\Roaming\setupsk\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.py, *.ps1, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFile('C:\Users\BLACKS~1\AppData\Roaming\setupsk\ml.py', '');
QuarantineFile('C:\Users\BLACKS~1\AppData\Roaming\setupsk\python\pythonw.exe', '');
QuarantineFile('C:\Users\BLACKS~1\AppData\Roaming\SETUPS~1\ml.py', '');
QuarantineFile('C:\Users\BLACKS~1\AppData\Roaming\SETUPS~1\python\pythonw.exe', '');
QuarantineFile('C:\Users\blacksaber\Desktop\Вoйти в Интeрнет.lnk', '');
QuarantineFile('C:\Users\blacksaber\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk', '');
QuarantineFile('C:\Users\blacksaber\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Вoйти в Интeрнeт.lnk', '');
QuarantineFile('C:\Users\blacksaber\Desktop\Поиcк в Интeрнете.lnk', '');
DeleteFile('C:\Users\BLACKS~1\AppData\Roaming\SETUPS~1\ml.py', '32');
DeleteFile('C:\Users\BLACKS~1\AppData\Roaming\setupsk\python\pythonw.exe', '32');
DeleteFile('C:\Users\BLACKS~1\AppData\Roaming\setupsk\ml.py', '32');
DeleteFile('C:\Windows\Tasks\Teamviewer-QS-updater-4s7ffad.job', '32');
DeleteFile('C:\Windows\Tasks\WpsExternal_blacksaber_20170116210412.job', '32');
DeleteFile('C:\Windows\Tasks\WpsKtpcntrQingTask_blacksaber.job', '32');
DeleteFile('C:\Windows\Tasks\WpsUpdateTask_blacksaber.job', '32');
DeleteFile('C:\Windows\Tasks\Обновление Браузера Яндекс.job', '32');
DeleteFile('C:\Windows\Tasks\Системное обновление Браузера Яндекс.job', '32');
ExecuteFile('schtasks.exe', '/delete /TN "Teamviewer-QS-updater-4s7ffad" /F', 0, 15000, true);
DeleteFileMask('C:\Users\BLACKS~1\AppData\Roaming\setupsk\', '*', true);
DeleteDirectory('C:\Users\BLACKS~1\AppData\Roaming\setupsk\');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'setupsk');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'setupsk_upd');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'amigo');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'lvadabctyg');
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
ExecuteSysClean;
RebootWindows(true);
end.