Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\programdata\wpm\wprotectmanager.exe');
TerminateProcessByName('c:\program files\optimizer pro 3.11\optproreminder.exe');
TerminateProcessByName('c:\programdata\602bb5c5-64ca-4d9f-8688-8581d865cedf\maintainer.exe');
TerminateProcessByName('c:\users\Владелец\appdata\local\pay-by-ads\yahoo! search\1.3.15.4\dsrsetup.exe');
TerminateProcessByName('c:\users\Владелец\appdata\local\pay-by-ads\yahoo! search\1.3.15.4\dsrlte.exe');
TerminateProcessByName('c:\program files\clickcaption_1.10.0.2\service\ccsvc.exe');
TerminateProcessByName('c:\program files\asp\advancedsystemprotector.exe');
StopService('{1d80e5b5-4071-4723-b69d-7303dd29b08f}w');
StopService('wStLibG');
StopService('ccnfd_1_10_0_2');
StopService('Util BrowseMark');
StopService('Update BrowseMark');
QuarantineFile('C:\Program Files\suptab\search~2.dll', '');
QuarantineFile('C:\Program Files\clickcaption_1.10.0.2\ie\clickcaptionclientie.dll', '');
QuarantineFile('C:\Program Files\suptab\dpinterface32.dll', '');
QuarantineFile('C:\Program Files\browsemark\bin\{B99C8534-7800-48FA-BD71-519A46CDC7E1}.dll', '');
QuarantineFile('C:\Program Files\browsemark\bin\browsemark.browseradapter.exe', '');
QuarantineFile('C:\Users\4227~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE', '');
QuarantineFile('C:\Program Files\BrowseMark\BrowseMarkBHO.dll', '');
QuarantineFile('C:\Program Files\SupTab\SupTab.dll', '');
QuarantineFile('C:\Users\4227~1\AppData\Roaming\DigitalSites\UpdateProc\bkup.dat', '');
QuarantineFile('C:\Windows\system32\drivers\{f4af1644-0425-4875-acd7-e31b7a10de1c}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{c6668848-f711-4cee-a50d-56921dafa05a}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{b12062b1-c716-4bf0-812d-5a4d0f9c82d8}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{b054ca2a-b52e-4dce-852f-fc425b1df036}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{90b6a102-782f-4c36-a3a9-17de29ea9425}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{872abe95-7d23-4f50-9415-5193de618462}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{81ebcbab-ce3d-4c4e-a5e7-682277238287}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{5e58d02b-6bcf-4282-80e0-3181dfa24f06}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{53ae7c5b-0e52-4196-9a9d-2c51b013ff96}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{4a17b2a1-9a19-4f33-9c1a-453c32556d00}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{26e7a941-8230-485f-9c8f-bbb52122397d}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{1d80e5b5-4071-4723-b69d-7303dd29b08f}w.sys', '');
QuarantineFile('C:\Windows\system32\drivers\wStLibG.sys', '');
QuarantineFile('C:\Windows\system32\drivers\ccnfd_1_10_0_2.sys', '');
QuarantineFile('C:\Program Files\BrowseMark\bin\utilBrowseMark.exe', '');
QuarantineFile('C:\Program Files\BrowseMark\updateBrowseMark.exe', '');
QuarantineFile('c:\programdata\wpm\wprotectmanager.exe', '');
QuarantineFile('c:\program files\optimizer pro 3.11\optproreminder.exe', '');
QuarantineFile('c:\programdata\602bb5c5-64ca-4d9f-8688-8581d865cedf\maintainer.exe', '');
QuarantineFile('c:\users\Владелец\appdata\local\pay-by-ads\yahoo! search\1.3.15.4\dsrsetup.exe', '');
QuarantineFile('c:\users\Владелец\appdata\local\pay-by-ads\yahoo! search\1.3.15.4\dsrlte.exe', '');
QuarantineFile('c:\program files\clickcaption_1.10.0.2\service\ccsvc.exe', '');
QuarantineFile('c:\program files\asp\advancedsystemprotector.exe', '');
DeleteFile('c:\program files\asp\advancedsystemprotector.exe', '32');
DeleteFile('c:\users\Владелец\appdata\local\pay-by-ads\yahoo! search\1.3.15.4\dsrlte.exe', '32');
DeleteFile('c:\users\Владелец\appdata\local\pay-by-ads\yahoo! search\1.3.15.4\dsrsetup.exe', '32');
DeleteFile('c:\programdata\602bb5c5-64ca-4d9f-8688-8581d865cedf\maintainer.exe', '32');
DeleteFile('c:\program files\optimizer pro 3.11\optproreminder.exe', '32');
DeleteFile('c:\Program Files\Optimizer Pro 3.11\OptProMon.dll', '32');
DeleteFile('C:\Program Files\BrowseMark\updateBrowseMark.exe', '32');
DeleteFile('C:\Program Files\BrowseMark\bin\utilBrowseMark.exe', '32');
DeleteFile('C:\Windows\system32\drivers\ccnfd_1_10_0_2.sys', '32');
DeleteFile('C:\Windows\system32\drivers\wStLibG.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{1d80e5b5-4071-4723-b69d-7303dd29b08f}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{26e7a941-8230-485f-9c8f-bbb52122397d}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{4a17b2a1-9a19-4f33-9c1a-453c32556d00}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{53ae7c5b-0e52-4196-9a9d-2c51b013ff96}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{5e58d02b-6bcf-4282-80e0-3181dfa24f06}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{81ebcbab-ce3d-4c4e-a5e7-682277238287}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{872abe95-7d23-4f50-9415-5193de618462}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{90b6a102-782f-4c36-a3a9-17de29ea9425}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{b054ca2a-b52e-4dce-852f-fc425b1df036}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{b12062b1-c716-4bf0-812d-5a4d0f9c82d8}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{c6668848-f711-4cee-a50d-56921dafa05a}w.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{f4af1644-0425-4875-acd7-e31b7a10de1c}w.sys', '32');
DeleteFile('C:\Users\4227~1\AppData\Roaming\DigitalSites\UpdateProc\bkup.dat', '32');
DeleteFile('C:\Program Files\SupTab\SupTab.dll', '32');
DeleteFile('C:\Program Files\BrowseMark\BrowseMarkBHO.dll', '32');
DeleteFile('C:\Users\4227~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE', '32');
DeleteFile('C:\Windows\Tasks\Digital Sites.job', '32');
DeleteFile('C:\Windows\system32\Tasks\Digital Sites', '32');
DeleteFile('C:\Windows\system32\Tasks\Yahoo! Search', '32');
DeleteFile('C:\Windows\system32\Tasks\Yahoo! Search Updater', '32');
DeleteFile('C:\Program Files\browsemark\bin\browsemark.browseradapter.exe', '32');
DeleteFile('C:\Program Files\browsemark\bin\{B99C8534-7800-48FA-BD71-519A46CDC7E1}.dll', '32');
DeleteFile('C:\Program Files\suptab\dpinterface32.dll', '32');
DeleteFile('C:\Program Files\clickcaption_1.10.0.2\ie\clickcaptionclientie.dll', '32');
DeleteFile('C:\Program Files\suptab\search~2.dll', '32');
DeleteFile('C:\ProgramData\WPM\wprotectmanager.exe', '32');
DeleteFile('C:\Program Files\ClickCaption_1.10.0.2\Service\ccsvc.exe', '32');
DeleteService('zlkrzann');
DeleteService('zgfdnqwv');
DeleteService('zfkflqze');
DeleteService('zejpzody');
DeleteService('yxyebjyq');
DeleteService('ymbwgskl');
DeleteService('yglsugnl');
DeleteService('ygjcgznd');
DeleteService('xydyhbcl');
DeleteService('xvvyhken');
DeleteService('xhnbfmyj');
DeleteService('xfqfkkpg');
DeleteService('wpfcnxbq');
DeleteService('wkkwnaxu');
DeleteService('wjfueqhb');
DeleteService('wgmoozjy');
DeleteService('wdnkrxev');
DeleteService('wbmoqchp');
DeleteService('vrcezlpg');
DeleteService('vkvuryxw');
DeleteService('vjmmuhhc');
DeleteService('vgqlzijo');
DeleteService('vfsnljwf');
DeleteService('vdtatpyr');
DeleteService('vddzelcy');
DeleteService('vcoiocex');
DeleteService('vbbwctcs');
DeleteService('uywvftwa');
DeleteService('uyiqkghl');
DeleteService('usbkzwyx');
DeleteService('unsmobej');
DeleteService('umsjizac');
DeleteService('ujegkhnc');
DeleteService('uhxhzito');
DeleteService('txqivirz');
DeleteService('txdamxlw');
DeleteService('trbghbzb');
DeleteService('tocnkivk');
DeleteService('tkmcvjyf');
DeleteService('tjmnyblq');
DeleteService('szqxxnfn');
DeleteService('syvyxpci');
DeleteService('swtoahpr');
DeleteService('svzyzzpo');
DeleteService('susxltyu');
DeleteService('suhqkion');
DeleteService('ssddhbpj');
DeleteService('srganddw');
DeleteService('sjxuqdqd');
DeleteService('sjjhcjlq');
DeleteService('sgieccbj');
DeleteService('rzhftluy');
DeleteService('rsvjocja');
DeleteService('rsdixnyq');
DeleteService('rqspeuue');
DeleteService('rpmqvpmj');
DeleteService('rktnpbel');
DeleteService('riawwlud');
DeleteService('rcrngbrb');
DeleteService('qwhormus');
DeleteService('qvkfgllr');
DeleteService('qujyrzxz');
DeleteService('qsxoahdn');
DeleteService('qpdlkinu');
DeleteService('qobcxpqj');
DeleteService('qkvjfwtn');
DeleteService('qjtjnxvg');
DeleteService('qgfthwct');
DeleteService('pzvryrlc');
DeleteService('pzmowvjq');
DeleteService('pwsrrhpo');
DeleteService('ppyyjzeg');
DeleteService('pijyhzsf');
DeleteService('picynvvv');
DeleteService('phfnpoqa');
DeleteService('pghvbfgn');
DeleteService('pgfajmhd');
DeleteService('pfyyoerb');
DeleteService('oytclskr');
DeleteService('oxnnhzmx');
DeleteService('orzxuxpt');
DeleteService('orqlugcu');
DeleteService('oqnuhxir');
DeleteService('oolgfwez');
DeleteService('oluglkqj');
DeleteService('odyscfmb');
DeleteService('nsafwjji');
DeleteService('nrfnsatu');
DeleteService('nnfbkmig');
DeleteService('nkktahvt');
DeleteService('njtlxdnz');
DeleteService('nhhcpptd');
DeleteService('neqxjtdz');
DeleteService('nakondvw');
DeleteService('mwbtwdee');
DeleteService('mvmfdeds');
DeleteService('msbwxnbz');
DeleteService('mrwijbfc');
DeleteService('mnoebzvw');
DeleteService('mkxkhoqh');
DeleteService('mfcmntgg');
DeleteService('mamzqhdy');
DeleteService('lvyeczok');
DeleteService('lvpwwvxr');
DeleteService('lpdwnpxg');
DeleteService('lnfbskev');
DeleteService('lbbvlykp');
DeleteService('kwqscmzt');
DeleteService('kuqqotvl');
DeleteService('krrirkpj');
DeleteService('kqptkcue');
DeleteService('kqnfuenc');
DeleteService('koepjibi');
DeleteService('kkmrlqbj');
DeleteService('khilupnq');
DeleteService('kbgtdkqu');
DeleteService('kanssckf');
DeleteService('jxemovbq');
DeleteService('jrrcbgfn');
DeleteService('jrmthvky');
DeleteService('jqkhyjje');
DeleteService('jpupnkfn');
DeleteService('jmgexdbt');
DeleteService('jkdsnclh');
DeleteService('jjpnwbxf');
DeleteService('jgbytxez');
DeleteService('jevwttub');
DeleteService('jajcqaxy');
DeleteService('iyrjsxmd');
DeleteService('iuffmjhj');
DeleteService('inshjmnl');
DeleteService('infqpavh');
DeleteService('ikfttoit');
DeleteService('ifsfttgb');
DeleteService('hzjjrtjj');
DeleteService('hyxubcvn');
DeleteService('htrihant');
DeleteService('hrdgdejj');
DeleteService('hhavxwzo');
DeleteService('hepphmhv');
DeleteService('haxbqyhz');
DeleteService('gyeiuizk');
DeleteService('gwhibtnx');
DeleteService('guakwsxv');
DeleteService('gmadjpnu');
DeleteService('glmucfwt');
DeleteService('giyrmeuv');
DeleteService('gfazyofl');
DeleteService('gatavwor');
DeleteService('gagvotlr');
DeleteService('fvujivng');
DeleteService('ftezzpur');
DeleteService('fptvidxj');
DeleteService('fjlclbxb');
DeleteService('fhiqphtz');
DeleteService('fdwduiel');
DeleteService('ezcdzljb');
DeleteService('evnhuszh');
DeleteService('eujusoqn');
DeleteService('erpfvukc');
DeleteService('eqfrskdo');
DeleteService('engsuqud');
DeleteService('efcsnkox');
DeleteService('dzzsknhq');
DeleteService('dynbsqjr');
DeleteService('dpxhjwpo');
DeleteService('dosqvvgi');
DeleteService('diyoalip');
DeleteService('dgfgrkdx');
DeleteService('dfjwosba');
DeleteService('dckvfbze');
DeleteService('cptrvkko');
DeleteService('ckbbhyzf');
DeleteService('bxcxjymw');
DeleteService('bveuzxng');
DeleteService('btgwoiyf');
DeleteService('bglmnsmr');
DeleteService('aykfkoyx');
DeleteService('awjncces');
DeleteService('avszbmeg');
DeleteService('avqwdasx');
DeleteService('auwofjwb');
DeleteService('aujgjfzc');
DeleteService('akzrhfso');
DeleteService('agslfmpy');
DeleteService('afixiugt');
DeleteService('adancacp');
DeleteService('aalcpiqs');
DeleteService('aakpntvo');
DeleteService('aaixvaqa');
DeleteService('aaehbidu');
DeleteService('{f4af1644-0425-4875-acd7-e31b7a10de1c}w');
DeleteService('{c6668848-f711-4cee-a50d-56921dafa05a}w');
DeleteService('{b99c8534-7800-48fa-bd71-519a46cdc7e1}w');
DeleteService('{b12062b1-c716-4bf0-812d-5a4d0f9c82d8}w');
DeleteService('{b054ca2a-b52e-4dce-852f-fc425b1df036}w');
DeleteService('{90b6a102-782f-4c36-a3a9-17de29ea9425}w');
DeleteService('{872abe95-7d23-4f50-9415-5193de618462}w');
DeleteService('{81ebcbab-ce3d-4c4e-a5e7-682277238287}w');
DeleteService('{5e58d02b-6bcf-4282-80e0-3181dfa24f06}w');
DeleteService('{53ae7c5b-0e52-4196-9a9d-2c51b013ff96}w');
DeleteService('{4a17b2a1-9a19-4f33-9c1a-453c32556d00}w');
DeleteService('{26e7a941-8230-485f-9c8f-bbb52122397d}w');
DeleteService('{1d80e5b5-4071-4723-b69d-7303dd29b08f}w');
DeleteService('wStLibG');
DeleteService('ccnfd_1_10_0_2');
DeleteService('Util BrowseMark');
DeleteService('Update BrowseMark');
DeleteFileMask('C:\Program Files\ClickCaption_1.10.0.2', '*', true);
DeleteFileMask('C:\ProgramData\WPM', '*', true);
DeleteFileMask('C:\Program Files\suptab', '*', true);
DeleteFileMask('C:\Program Files\browsemark', '*', true);
DeleteFileMask('C:\Users\4227~1\AppData\Roaming\DIGITA~1', '*', true);
DeleteFileMask('c:\program files\optimizer pro 3.11', '*', true);
DeleteFileMask('c:\programdata\602bb5c5-64ca-4d9f-8688-8581d865cedf', '*', true);
DeleteFileMask('c:\users\Владелец\appdata\local\pay-by-ads', '*', true);
DeleteFileMask('c:\program files\asp', '*', true);
DeleteDirectory('C:\Program Files\ClickCaption_1.10.0.2');
DeleteDirectory('C:\ProgramData\WPM');
DeleteDirectory('C:\Program Files\suptab');
DeleteDirectory('C:\Program Files\browsemark');
DeleteDirectory('C:\Users\4227~1\AppData\Roaming\DIGITA~1');
DeleteDirectory('c:\program files\optimizer pro 3.11');
DeleteDirectory('c:\programdata\602bb5c5-64ca-4d9f-8688-8581d865cedf');
DeleteDirectory('c:\users\Владелец\appdata\local\pay-by-ads');
DeleteDirectory('c:\program files\asp');
DelBHO('{aeac172e-2e4b-4b92-9af6-b0cdb1acecdb}');
DelBHO('{A18EA34C-6D33-4298-8A54-7F16499904C0}');
DelBHO('{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RPCSVCS.EXE', 'command');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.