Код:
begin
QuarantineFile('C:\Program Files\quiknowledge\ie\quiknowledgeclientie.dll', '');
QuarantineFile('C:\Users\User\AppData\Roaming\Dorrible\Ribble\d.exe', '');
QuarantineFile('C:\Users\User\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE', '');
QuarantineFile('C:\Users\User\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE', '');
QuarantineFile('C:\ProgramData\KinGaCoupOon\nHGfFlqYZ6NeTg.dll', '');
QuarantineFile('C:\Program Files (x86)\WDMPlugin\KangoBHO.dll', '');
QuarantineFile('C:\ProgramData\RoyalShopperApp\uFVSfVIJMmg6xP.dll', '');
QuarantineFile('C:\ProgramData\SalesChheCkeeR\9w1tTbfs7qXg6O.dll', '');
QuarantineFile('C:\ProgramData\SHoppeRMastEre\vp1fgdVpbcCPgR.dll', '');
QuarantineFile('C:\Users\User\AppData\Roaming\Microsoft\Moesee.exe', '');
QuarantineFile('\screentoolkit.exe', '');
QuarantineFile('C:\Users\User\AppData\Local\screentk\screentool.exe', '');
QuarantineFile('C:\Users\User\AppData\Local\screentk\screentkup.exe', '');
QuarantineFile('C:\Users\User\AppData\Local\WinnerDM\wdm.exe', '');
QuarantineFile('C:\ProgramData\Schedule\timetasks.exe', '');
QuarantineFile('C:\ProgramData\Program status\scheck.exe', '');
QuarantineFile('C:\Program Files (x86)\MyPC Backup\BackupStack.exe', '');
DeleteFile('C:\Program Files (x86)\MyPC Backup\BackupStack.exe', '32');
DeleteFile('C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll', '32');
DeleteFile('C:\ProgramData\Program status\scheck.exe', '32');
DeleteFile('C:\ProgramData\Schedule\timetasks.exe', '32');
DeleteFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Kinoroom Browser.lnk', '32');
DeleteFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\kbrowser-updater-utility.lnk', '32');
DeleteFile('C:\Users\User\AppData\Local\WinnerDM\wdm.exe', '32');
DeleteFile('C:\Users\User\AppData\Local\screentk\screentkup.exe', '32');
DeleteFile('C:\Users\User\AppData\Local\screentk\screentool.exe', '32');
DeleteFile('C:\Users\User\AppData\Local\screentk\screentoolkit.exe', '32');
DeleteFile('C:\Users\User\AppData\Roaming\Microsoft\Moesee.exe', '32');
DeleteFile('C:\ProgramData\SHoppeRMastEre\vp1fgdVpbcCPgR.dll', '32');
DeleteFile('C:\ProgramData\SalesChheCkeeR\9w1tTbfs7qXg6O.dll', '32');
DeleteFile('C:\ProgramData\RoyalShopperApp\uFVSfVIJMmg6xP.dll', '32');
DeleteFile('C:\Program Files (x86)\WDMPlugin\KangoBHO.dll', '32');
DeleteFile('C:\ProgramData\KinGaCoupOon\nHGfFlqYZ6NeTg.dll', '32');
DeleteFile('C:\Users\User\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE', '32');
DeleteFile('C:\windows\Tasks\Digital Sites.job', '32');
DeleteFile('C:\windows\system32\Tasks\adobe-updater-utility-ru', '32');
DeleteFile('C:\windows\system32\Tasks\Advanced System Protector_startup', '32');
DeleteFile('C:\Users\User\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE', '32');
DeleteFile('C:\windows\system32\Tasks\Dealply', '32');
DeleteFile('C:\windows\system32\Tasks\Digital Sites', '32');
DeleteFile('C:\windows\system32\Tasks\kbrowser-updater-utility', '32');
DeleteFile('C:\windows\system32\Tasks\LaunchSignup', '32');
DeleteFile('C:\windows\system32\Tasks\lswpmhk', '32');
DeleteFile('C:\Users\User\AppData\Roaming\Dorrible\Ribble\d.exe', '32');
DeleteFile('C:\windows\system32\Tasks\Ribble', '32');
DeleteFile('C:\windows\system32\Tasks\{C4F93538-365F-4E41-955A-10DB06FF1485}', '32');
DeleteFile('C:\Program Files\quiknowledge\ie\quiknowledgeclientie.dll', '32');
DeleteService('storegidfilter');
DeleteService('netfilter64');
DeleteService('screentk');
DeleteService('BackupStack');
DeleteFileMask('C:\Program Files\quiknowledge', '*', true);
DeleteFileMask('C:\Users\User\AppData\Roaming\Dorrible', '*', true);
DeleteFileMask('C:\Users\User\AppData\Roaming\Dealply', '*', true);
DeleteFileMask('C:\Users\User\AppData\Roaming\DIGITA~1', '*', true);
DeleteFileMask('C:\ProgramData\KinGaCoupOon', '*', true);
DeleteFileMask('C:\Program Files (x86)\WDMPlugin', '*', true);
DeleteFileMask('C:\ProgramData\RoyalShopperApp', '*', true);
DeleteFileMask('C:\ProgramData\SalesChheCkeeR', '*', true);
DeleteFileMask('C:\ProgramData\SHoppeRMastEre', '*', true);
DeleteFileMask('C:\Users\User\AppData\Local\screentk', '*', true);
DeleteFileMask(':\ProgramData\Schedule', '*', true);
DeleteFileMask('C:\ProgramData\Program status', '*', true);
DeleteFileMask('C:\Users\User\AppData\Local\WinnerDM', '*', true);
DeleteDirectory('C:\Program Files\quiknowledge');
DeleteDirectory('C:\Users\User\AppData\Roaming\Dorrible');
DeleteDirectory('C:\Users\User\AppData\Roaming\Dealply');
DeleteDirectory('C:\Users\User\AppData\Roaming\DIGITA~1');
DeleteDirectory('C:\ProgramData\KinGaCoupOon');
DeleteDirectory('C:\Program Files (x86)\WDMPlugin');
DeleteDirectory('C:\ProgramData\RoyalShopperApp');
DeleteDirectory('C:\ProgramData\SalesChheCkeeR');
DeleteDirectory('C:\ProgramData\SHoppeRMastEre');
DeleteDirectory('C:\Users\User\AppData\Local\screentk');
DeleteDirectory(':\ProgramData\Schedule');
DeleteDirectory('C:\ProgramData\Program status');
DeleteDirectory('C:\Users\User\AppData\Local\WinnerDM');
DelBHO('{D8F550E8-B962-4189-963C-C9639BFF528C}');
DelBHO('{c7f1f126-bf90-4ed0-bb80-e14cd4667869}');
DelBHO('{8984B388-A5BB-4DF7-B274-77B879E179DB}');
DelBHO('{840A315F-16FE-4F2E-9DEA-DD975D4C0246}');
DelBHO('{7b0cf224-e7fd-442b-aa7e-d8529842e167}');
DelBHO('{6acaeeb9-52e2-489c-b246-3b758264ac99}');
DelBHO('{2574206a-dcb7-4fe0-85f2-05798e09e36a}');
DelBHO('{00e71626-0bef-11dc-8314-0800200c9a66}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ZaxarLoader', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iLivid', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\screentk', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\screentkUpdater', 'command');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'Screen Saver Pro 3.1');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\desktopy', 'command');
ExecuteSysClean;
ExecuteRepair(2);
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.