Код:
begin
QuarantineFile('C:\Users\Content\AppData\Roaming\RYNX.exe','');
QuarantineFile('C:\Users\Content\AppData\Roaming\BNNDMK.exe','');
QuarantineFile('C:\Users\Content\AppData\Local\SmartWeb\SmartWebHelper.exe','');
QuarantineFile('C:\Users\Content\AppData\Local\00000000-1426601918-0000-0000-D43D7EECBF28\bnsi4A59.exe','');
DeleteService('qrnfd_1_10_0_9');
DeleteService('pyzuwuzu');
QuarantineFile('C:\Users\Content\AppData\Roaming\00000000-1426591067-0000-0000-D43D7EECBF28\jnsiBA95.tmp','');
DeleteService('hycetuje');
DeleteService('globalUpdatem');
DeleteService('globalUpdate');
TerminateProcessByName('c:\program files (x86)\cinemaplus12bv17.03\29955a1d-dad0-40f2-a840-3b123e78e959-6.exe');
QuarantineFile('c:\program files (x86)\cinemaplus12bv17.03\29955a1d-dad0-40f2-a840-3b123e78e959-6.exe','');
DeleteFile('c:\program files (x86)\cinemaplus12bv17.03\29955a1d-dad0-40f2-a840-3b123e78e959-6.exe','32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe','32');
DeleteFile('C:\Users\Content\AppData\Roaming\00000000-1426591067-0000-0000-D43D7EECBF28\jnsiBA95.tmp','32');
DeleteFile('C:\Users\Content\AppData\Roaming\00000000-1426591067-0000-0000-D43D7EECBF28\nss8E9F.tmpfs','32');
DeleteFile('C:\Windows\system32\drivers\qrnfd_1_10_0_9.sys','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','WinCheck');
DeleteFile('C:\Users\Content\AppData\Local\00000000-1426601918-0000-0000-D43D7EECBF28\bnsi4A59.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','SmartWeb');
DeleteFile('C:\Users\Content\AppData\Local\SmartWeb\SmartWebHelper.exe','32');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-1-6.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-1-7.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-10_user.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-11.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-3.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-4.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-5.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-5_user.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-6.job','64');
DeleteFile('C:\Windows\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-7.job','64');
DeleteFile('C:\Windows\Tasks\BNNDMK.job','64');
DeleteFile('C:\Users\Content\AppData\Roaming\BNNDMK.exe','32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job','64');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job','64');
DeleteFile('C:\Windows\Tasks\RYNX.job','64');
DeleteFile('C:\Users\Content\AppData\Roaming\RYNX.exe','32');
DeleteFile('C:\Windows\Tasks\SpeedCheck Update.job','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-1-6','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-1-7','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-10_user','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-11','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-3','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-4','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-5','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-5_user','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-6','64');
DeleteFile('C:\Windows\system32\Tasks\29955a1d-dad0-40f2-a840-3b123e78e959-7','64');
DeleteFile('C:\Windows\system32\Tasks\BNNDMK','64');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineCore','64');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineUA','64');
DeleteFile('C:\Windows\system32\Tasks\RYNX','64');
DeleteFile('C:\Windows\system32\Tasks\SmartWeb Upgrade Trigger Task','64');
DeleteFile('C:\Windows\system32\Tasks\Soft installer','64');
DeleteFile('C:\Windows\system32\Tasks\SpeedCheck Update','64');
ExecuteSysClean;
RebootWindows(true);
end.