Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
TerminateProcessByName('c:\users\vs\appdata\roaming\63772d20-1434182941-11d5-b78e-001bfc5a2d40\knst70e8.tmp');
StopService('nytijoco');
QuarantineFile('C:\Users\VS\AppData\Roaming\istartsurf\UninstallManager.exe', '');
QuarantineFile('C:\Users\VS\local settings\application data\ExtensionInstaller_14\extinst.exe', '');
QuarantineFile('C:\Program Files (x86)\CinemaPlus-4.5vV14.06\569ad400-4bee-4f1b-b37a-564f5e948abc-3.exe', '');
QuarantineFile('C:\Users\VS\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE', '');
QuarantineFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '');
QuarantineFile('C:\Program Files (x86)\CinemaPlus-4.5vV14.06\569ad400-4bee-4f1b-b37a-564f5e948abc-7.exe', '');
QuarantineFile('C:\Program Files (x86)\CinemaPlus-4.5vV14.06\569ad400-4bee-4f1b-b37a-564f5e948abc-1-7.exe', '');
QuarantineFile('C:\Program Files (x86)\CinemaPlus-4.5vV14.06\569ad400-4bee-4f1b-b37a-564f5e948abc-1-6.exe', '');
QuarantineFile('C:\Users\VS\AppData\Local\SmartWeb\SmartWebHelper.exe', '');
QuarantineFileF('C:\Program Files (x86)\Crossbrowse\', '*.exe, *.dll, *.sys, *.bat, *.vbs', true, '', 0, 0);
QuarantineFileF('C:\Program Files (x86)\AnyProtectEx', '*.exe, *.dll, *.sys, *.bat, *.vbs', true, '', 0, 0);
QuarantineFileF('C:\Users\VS\AppData\Local\SmartWeb\', '*.exe, *.dll, *.sys, *.bat, *.vbs', true, '', 0, 0);
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe', '');
QuarantineFileF('C:\Users\VS\AppData\Roaming\istartsurf', '*.exe, *.dll, *.sys, *.bat, *.vbs', true, '', 0, 0);
QuarantineFileF('C:\Program Files (x86)\CinemaPlus-4.5vV14.06', '*.exe, *.dll, *.sys, *.bat, *.vbs', true, '', 0, 0);
QuarantineFileF('c:\users\vs\appdata\roaming\63772d20-1434182941-11d5-b78e-001bfc5a2d40\', '*.exe, *.dll, *tmp*, *.sys, *.bat, *.vbs', true, '', 0, 0);
QuarantineFile('c:\users\vs\appdata\roaming\63772d20-1434182941-11d5-b78e-001bfc5a2d40\knst70e8.tmp', '');
QuarantineFile('C:\Users\VS\AppData\Local\Temp\install2199362.exe', '');
QuarantineFile('C:\Users\VS\AppData\Roaming\CoGsSi4bu2gDlFbfvVqv.exe', '');
DeleteFile('C:\Users\VS\local settings\application data\ExtensionInstaller_14\extinst.exe', '32');
DeleteFile('C:\Windows\system32\Tasks\ExtensionInstallerX_14', '64');
DeleteFile('C:\Windows\system32\Tasks\Soft installer', '64');
DeleteFile('C:\Windows\system32\Tasks\Uninstaller_SkipUac_VS', '64');
DeleteFile('C:\Windows\system32\Tasks\{5D24FACB-4B47-4B6B-AD4E-55FC9DB44E0D}', '64');
DeleteFile('C:\Users\VS\AppData\Roaming\istartsurf\UninstallManager.exe', '32');
DeleteFile('c:\users\vs\appdata\roaming\63772d20-1434182941-11d5-b78e-001bfc5a2d40\knst70e8.tmp', '32');
DeleteFile('C:\Users\VS\AppData\Local\Temp\install2199362.exe', '32');
DeleteFile('C:\Users\VS\AppData\Roaming\CoGsSi4bu2gDlFbfvVqv.exe', '32');
DeleteService('nytijoco');
DeleteFileMask('C:\Users\VS\AppData\Roaming\istartsurf', '*', true);
DeleteFileMask('c:\users\vs\appdata\roaming\63772d20-1434182941-11d5-b78e-001bfc5a2d40\', '*', true);
DeleteDirectory('C:\Users\VS\AppData\Roaming\istartsurf');
DeleteDirectory('c:\users\vs\appdata\roaming\63772d20-1434182941-11d5-b78e-001bfc5a2d40\');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'GoforFilesInstaller Starter');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.