Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
SetServiceStart('buqevole', 4);
SetServiceStart('sysuduto', 4);
StopService('buqevole');
StopService('sysuduto');
QuarantineFileF('C:\Users\1\AppData\Local\SmartWeb\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0, 0);
QuarantineFileF('C:\Program Files (x86)\Crossbrowse\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0, 0);
QuarantineFileF('C:\Users\1\AppData\Roaming\5C4606FA-1427673246-453A-B299-7B088C63BB9B\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js', true, '', 0, 0);
QuarantineFile('C:\Users\1\AppData\Local\SmartWeb\SmartWebHelper.exe', '');
QuarantineFile('C:\Users\1\AppData\Local\Kometa\kometaup.exe', '');
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe', '');
QuarantineFile('C:\Users\1\AppData\Roaming\5C4606FA-1427673246-453A-B299-7B088C63BB9B\jnsq492D.tmp', '');
QuarantineFile('C:\Users\1\AppData\Roaming\5C4606FA-1427673246-453A-B299-7B088C63BB9B\nsqD0CD.tmpfs', '');
DeleteFile('C:\Users\1\AppData\Roaming\5C4606FA-1427673246-453A-B299-7B088C63BB9B\nsqD0CD.tmpfs', '32');
DeleteFile('C:\Users\1\AppData\Roaming\5C4606FA-1427673246-453A-B299-7B088C63BB9B\jnsq492D.tmp', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe', '32');
DeleteFile('C:\Users\1\AppData\Local\Kometa\kometaup.exe', '32');
DeleteFile('C:\Users\1\AppData\Local\SmartWeb\SmartWebHelper.exe', '32');
DeleteService('buqevole');
DeleteService('sysuduto');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GoogleChromeAutoLaunch_115D0F87AC46593ED94E30953D6BB46A', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\kometaup', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SmartWeb', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Optimizer Pro', 'command');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
RebootWindows(true);
end.