Код:
begin
TerminateProcessByName('c:\users\1234\appdata\local\gmsd_ru_254\upgmsd_ru_254.exe');
TerminateProcessByName('C:\Windows\taskmgr.exe');
TerminateProcessByName('c:\users\1234\appdata\local\smartweb\smartwebhelper.exe');
TerminateProcessByName('c:\users\1234\appdata\local\smartweb\smartwebapp.exe');
TerminateProcessByName('c:\program files (x86)\xtab\protectservice.exe');
TerminateProcessByName('C:\Program Files (x86)\OLBPre\OLBPre.exe');
TerminateProcessByName('c:\users\1234\appdata\roaming\30464e43-1432583039-3834-394b-00269edf162f\nsz9906.tmp');
TerminateProcessByName('c:\users\1234\appdata\roaming\30464e43-1432583039-3834-394b-00269edf162f\jnsr6d1a.tmp');
TerminateProcessByName('c:\program files (x86)\xtab\hpnotify.exe');
TerminateProcessByName('c:\users\1234\appdata\roaming\30464e43-1432583039-3834-394b-00269edf162f\hnsb90b2.tmp');
TerminateProcessByName('c:\program files (x86)\gmsd_ru_254\gmsd_ru_254.exe');
TerminateProcessByName('c:\program files (x86)\globalupdate\update\globalupdate.exe');
TerminateProcessByName('c:\program files (x86)\edealspop\edealspop.exe');
TerminateProcessByName('c:\program files (x86)\edealpop\edealpop.exe');
TerminateProcessByName('c:\program files (x86)\dicter\dicter.exe');
TerminateProcessByName('c:\program files (x86)\mobogenie\daemonprocess.exe');
TerminateProcessByName('c:\program files (x86)\crossbrowse\crossbrowse\application\crossbrowse.exe');
TerminateProcessByName('c:\program files (x86)\xtab\cmdshell.exe');
TerminateProcessByName('c:\program files (x86)\sense\8c344171-9816-4a09-ae7a-f50474440772-1-6.exe');
TerminateProcessByName('c:\program files (x86)\ge-force\72946d49-533d-425f-a2fb-65cc9e97cb68-1-6.exe');
StopService('pywezigy');
StopService('puzysyxu');
QuarantineFile('C:\Program Files (x86)\windealist\Internet Explorer\swu.vbs', '');
QuarantineFile('C:\Users\1234\AppData\Local\Host installer\1884773372_monster.exe', '');
QuarantineFile('C:\Program Files (x86)\ShopperPro\updater.exe', '');
QuarantineFile('C:\Program Files (x86)\ShopperPro\ShopperPro.exe', '');
QuarantineFile('C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe', '');
QuarantineFile('C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe', '');
QuarantineFile('C:\ProgramData\99ddd194860b49de9c3d4fa67f327de5\99ddd194860b49de9c3d4fa67f327de5.exe', '');
QuarantineFile('C:\PROGRA~1\COMMON~1\System\SysMenu.dll', '');
QuarantineFile('C:\Users\1234\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE', '');
QuarantineFile('C:\Users\1234\AppData\Roaming\BYAIAMUF.exe', '');
QuarantineFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '');
QuarantineFile('C:\Program Files (x86)\Sense\8c344171-9816-4a09-ae7a-f50474440772-11.exe', '');
QuarantineFile('C:\Program Files (x86)\Ge-Force\72946d49-533d-425f-a2fb-65cc9e97cb68-5.exe', '');
QuarantineFile('C:\ProgramData\ShopperPro\ShopperPro.dll', '');
QuarantineFile('C:\Program Files (x86)\XTab\SupTab.dll', '');
QuarantineFile('C:\Users\1234\AppData\Local\Yandex\browser.bat', '');
QuarantineFile('C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.1878\jsdrv.exe', '');
QuarantineFile('C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.1878\jsdrv.sys', '');
QuarantineFile('c:\users\1234\appdata\local\gmsd_ru_254\upgmsd_ru_254.exe', '');
QuarantineFile('C:\Windows\taskmgr.exe', '');
QuarantineFile('c:\users\1234\appdata\local\smartweb\smartwebhelper.exe', '');
QuarantineFile('c:\users\1234\appdata\local\smartweb\smartwebapp.exe', '');
QuarantineFile('c:\program files (x86)\xtab\protectservice.exe', '');
QuarantineFile('C:\Program Files (x86)\OLBPre\OLBPre.exe', '');
QuarantineFile('c:\users\1234\appdata\roaming\30464e43-1432583039-3834-394b-00269edf162f\nsz9906.tmp', '');
QuarantineFile('c:\users\1234\appdata\roaming\30464e43-1432583039-3834-394b-00269edf162f\jnsr6d1a.tmp', '');
QuarantineFile('c:\program files (x86)\xtab\hpnotify.exe', '');
QuarantineFile('c:\users\1234\appdata\roaming\30464e43-1432583039-3834-394b-00269edf162f\hnsb90b2.tmp', '');
QuarantineFile('c:\program files (x86)\gmsd_ru_254\gmsd_ru_254.exe', '');
QuarantineFile('c:\program files (x86)\globalupdate\update\globalupdate.exe', '');
QuarantineFile('c:\program files (x86)\edealspop\edealspop.exe', '');
QuarantineFile('c:\program files (x86)\edealpop\edealpop.exe', '');
QuarantineFile('c:\program files (x86)\dicter\dicter.exe', '');
QuarantineFile('c:\program files (x86)\mobogenie\daemonprocess.exe', '');
QuarantineFile('c:\program files (x86)\crossbrowse\crossbrowse\application\crossbrowse.exe', '');
QuarantineFile('c:\program files (x86)\xtab\cmdshell.exe', '');
QuarantineFile('c:\program files (x86)\sense\8c344171-9816-4a09-ae7a-f50474440772-1-6.exe', '');
QuarantineFile('c:\program files (x86)\ge-force\72946d49-533d-425f-a2fb-65cc9e97cb68-1-6.exe', '');
QuarantineFileF('C:\Program Files (x86)\windealist', '*', true, '', 0, 0, '', '', '');
DeleteFile('c:\program files (x86)\ge-force\72946d49-533d-425f-a2fb-65cc9e97cb68-1-6.exe', '32');
DeleteFile('c:\program files (x86)\sense\8c344171-9816-4a09-ae7a-f50474440772-1-6.exe', '32');
DeleteFile('c:\program files (x86)\xtab\cmdshell.exe', '32');
DeleteFile('c:\program files (x86)\crossbrowse\crossbrowse\application\crossbrowse.exe', '32');
DeleteFile('c:\program files (x86)\mobogenie\daemonprocess.exe', '32');
DeleteFile('c:\program files (x86)\dicter\dicter.exe', '32');
DeleteFile('c:\program files (x86)\edealpop\edealpop.exe', '32');
DeleteFile('c:\program files (x86)\edealspop\edealspop.exe', '32');
DeleteFile('c:\program files (x86)\gmsd_ru_254\gmsd_ru_254.exe', '32');
DeleteFile('c:\users\1234\appdata\roaming\30464e43-1432583039-3834-394b-00269edf162f\hnsb90b2.tmp', '32');
DeleteFile('c:\program files (x86)\xtab\hpnotify.exe', '32');
DeleteFile('C:\Program Files (x86)\OLBPre\OLBPre.exe', '32');
DeleteFile('c:\program files (x86)\xtab\protectservice.exe', '32');
DeleteFile('c:\users\1234\appdata\local\smartweb\smartwebapp.exe', '32');
DeleteFile('C:\Windows\taskmgr.exe', '32');
DeleteFile('c:\users\1234\appdata\local\gmsd_ru_254\upgmsd_ru_254.exe', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.4.2171.95\chrome.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.4.2171.95\chrome_child.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.4.2171.95\chrome_elf.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.4.2171.95\D3DCompiler_46.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.4.2171.95\libegl.dll', '32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.4.2171.95\libglesv2.dll', '32');
DeleteFile('C:\Program Files (x86)\Dicter\DicterDll.dll', '32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll', '32');
DeleteFile('C:\Program Files (x86)\Mobogenie\Device.dll', '32');
DeleteFile('C:\Program Files (x86)\XTab\BrowserAction.dll', '32');
DeleteFile('C:\Program Files (x86)\XTab\IeWatchDog.dll', '32');
DeleteFile('C:\Users\1234\AppData\Local\SmartWeb\swhk.dll', '32');
DeleteFile('C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.1878\jsdrv.sys', '32');
DeleteFile('C:\Users\1234\AppData\Roaming\30464E43-1432583039-3834-394B-00269EDF162F\jnsr6D1A.tmp', '32');
DeleteFile('C:\Users\1234\AppData\Roaming\30464E43-1432583039-3834-394B-00269EDF162F\nsz9906.tmp', '32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '32');
DeleteFile('C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.1878\jsdrv.exe', '32');
DeleteFile('C:\Users\1234\AppData\Local\Amigo\Application\amigo.exe', '32');
DeleteFile('C:\Users\1234\AppData\Local\Amigo\Application\ok.exe', '32');
DeleteFile('C:\Users\1234\AppData\Local\Amigo\Application\vk.exe', '32');
DeleteFile('C:\Users\1234\AppData\Local\SmartWeb\SmartWebHelper.exe', '32');
DeleteFile('C:\Program Files (x86)\XTab\SupTab.dll', '32');
DeleteFile('C:\ProgramData\ShopperPro\ShopperPro.dll', '32');
DeleteFile('C:\Windows\Tasks\12d55f22-7eea-4531-9a9b-1e325fa58045-10_user.job', '64');
DeleteFile('C:\Windows\Tasks\12d55f22-7eea-4531-9a9b-1e325fa58045-11.job', '64');
DeleteFile('C:\Windows\Tasks\12d55f22-7eea-4531-9a9b-1e325fa58045-3.job', '64');
DeleteFile('C:\Windows\Tasks\14b40f46-d575-4b4e-8f53-aed1f1ab7a26-10_user.job', '64');
DeleteFile('C:\Windows\Tasks\14b40f46-d575-4b4e-8f53-aed1f1ab7a26-11.job', '64');
DeleteFile('C:\Windows\Tasks\14b40f46-d575-4b4e-8f53-aed1f1ab7a26-3.job', '64');
DeleteFile('C:\Windows\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-1-6.job', '64');
DeleteFile('C:\Windows\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-1-7.job', '64');
DeleteFile('C:\Windows\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-10_user.job', '64');
DeleteFile('C:\Windows\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-11.job', '64');
DeleteFile('C:\Windows\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-5.job', '64');
DeleteFile('C:\Program Files (x86)\Ge-Force\72946d49-533d-425f-a2fb-65cc9e97cb68-5.exe', '32');
DeleteFile('C:\Windows\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-5_user.job', '64');
DeleteFile('C:\Windows\Tasks\8c344171-9816-4a09-ae7a-f50474440772-1-6.job', '64');
DeleteFile('C:\Windows\Tasks\8c344171-9816-4a09-ae7a-f50474440772-1-7.job', '64');
DeleteFile('C:\Windows\Tasks\8c344171-9816-4a09-ae7a-f50474440772-11.job', '64');
DeleteFile('C:\Program Files (x86)\Sense\8c344171-9816-4a09-ae7a-f50474440772-11.exe', '32');
DeleteFile('C:\Windows\Tasks\8c344171-9816-4a09-ae7a-f50474440772-5.job', '64');
DeleteFile('C:\Windows\Tasks\8c344171-9816-4a09-ae7a-f50474440772-5_user.job', '64');
DeleteFile('C:\Windows\Tasks\95ff9ead-567d-4f0f-9dc2-a84b5436752b-10_user.job', '64');
DeleteFile('C:\Windows\Tasks\95ff9ead-567d-4f0f-9dc2-a84b5436752b-11.job', '64');
DeleteFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '32');
DeleteFile('C:\Windows\Tasks\APSnotifierPP1.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP2.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP3.job', '64');
DeleteFile('C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job', '64');
DeleteFile('C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job', '64');
DeleteFile('C:\Users\1234\AppData\Roaming\BYAIAMUF.exe', '32');
DeleteFile('C:\Windows\Tasks\BYAIAMUF.job', '64');
DeleteFile('C:\Windows\Tasks\cfb1bfb6-8a95-47e5-be8a-c2dc8888a010-10_user.job', '64');
DeleteFile('C:\Windows\Tasks\cfb1bfb6-8a95-47e5-be8a-c2dc8888a010-11.job', '64');
DeleteFile('C:\Windows\Tasks\Crossbrowse.job', '64');
DeleteFile('C:\Windows\Tasks\Digital Sites.job', '64');
DeleteFile('C:\Windows\Tasks\DigitalSite.job', '64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-10_user.job', '64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-11.job', '64');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job', '64');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job', '64');
DeleteFile('C:\Windows\Tasks\HSUTX1.job', '64');
DeleteFile('C:\Windows\system32\Tasks\12d55f22-7eea-4531-9a9b-1e325fa58045-11', '64');
DeleteFile('C:\Windows\system32\Tasks\12d55f22-7eea-4531-9a9b-1e325fa58045-3', '64');
DeleteFile('C:\Windows\system32\Tasks\14b40f46-d575-4b4e-8f53-aed1f1ab7a26-11', '64');
DeleteFile('C:\Windows\system32\Tasks\14b40f46-d575-4b4e-8f53-aed1f1ab7a26-3', '64');
DeleteFile('C:\Windows\system32\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-1-6', '64');
DeleteFile('C:\Windows\system32\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-1-7', '64');
DeleteFile('C:\Windows\system32\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-11', '64');
DeleteFile('C:\Windows\system32\Tasks\72946d49-533d-425f-a2fb-65cc9e97cb68-5', '64');
DeleteFile('C:\Windows\system32\Tasks\8c344171-9816-4a09-ae7a-f50474440772-1-6', '64');
DeleteFile('C:\Windows\system32\Tasks\8c344171-9816-4a09-ae7a-f50474440772-11', '64');
DeleteFile('C:\Windows\system32\Tasks\8c344171-9816-4a09-ae7a-f50474440772-5', '64');
DeleteFile('C:\Windows\system32\Tasks\95ff9ead-567d-4f0f-9dc2-a84b5436752b-11', '64');
DeleteFile('C:\Windows\system32\Tasks\APSnotifierPP1', '64');
DeleteFile('C:\Windows\system32\Tasks\APSnotifierPP2', '64');
DeleteFile('C:\Windows\system32\Tasks\APSnotifierPP3', '64');
DeleteFile('C:\Windows\system32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore', '64');
DeleteFile('C:\Windows\system32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA', '64');
DeleteFile('C:\Windows\system32\Tasks\cfb1bfb6-8a95-47e5-be8a-c2dc8888a010-11', '64');
DeleteFile('C:\Windows\system32\Tasks\Crossbrowse', '64');
DeleteFile('C:\Windows\system32\Tasks\DigitalSite', '64');
DeleteFile('C:\Windows\system32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-11', '64');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineCore', '64');
DeleteFile('C:\Windows\system32\Tasks\globalUpdateUpdateTaskMachineUA', '64');
DeleteFile('C:\Windows\system32\Tasks\HSUTX1', '64');
DeleteFile('C:\Windows\system32\Tasks\LaunchPreSignup', '64');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\Windows\Maintenance\SMupdate2', '64');
DeleteFile('C:\Windows\system32\Tasks\Microsoft\Windows\Multimedia\SMupdate3', '64');
DeleteFile('C:\PROGRA~1\COMMON~1\System\SysMenu.dll', '32');
DeleteFile('C:\ProgramData\99ddd194860b49de9c3d4fa67f327de5\99ddd194860b49de9c3d4fa67f327de5.exe', '32');
DeleteFile('C:\Windows\system32\Tasks\OMHVKGNRG', '64');
DeleteFile('C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe', '32');
DeleteFile('C:\Windows\system32\Tasks\Reimage Reminder', '64');
DeleteFile('C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe', '32');
DeleteFile('C:\Windows\system32\Tasks\ReimageUpdater', '64');
DeleteFile('C:\Program Files (x86)\ShopperPro\ShopperPro.exe', '32');
DeleteFile('C:\Windows\system32\Tasks\ShopperPro', '64');
DeleteFile('C:\Windows\system32\Tasks\ShopperProJSUpd', '64');
DeleteFile('C:\Program Files (x86)\ShopperPro\updater.exe', '32');
DeleteFile('C:\Windows\system32\Tasks\SmartWeb Upgrade Trigger Task', '64');
DeleteFile('C:\Windows\system32\Tasks\SMupdate1', '64');
DeleteFile('C:\Windows\system32\Tasks\Soft installer', '64');
DeleteFile('C:\Users\1234\AppData\Local\Host installer\1884773372_monster.exe', '32');
DeleteFile('C:\Windows\system32\Tasks\SPDriver', '64');
DeleteFile('C:\Program Files (x86)\windealist\Internet Explorer\swu.vbs', '32');
DeleteFile('C:\Windows\system32\Tasks\windealistSWU', '64');
DeleteFile('C:\Windows\system32\Tasks\YTDownloaderUpd', '64');
DeleteFile('C:\Users\1234\appdata\roaming\digita~1\update~1\update~1.exe', '32');
DeleteService('scfd_1_10_0_16');
DeleteService('RgFltX64');
DeleteService('innfd_1_10_0_14');
DeleteService('SPDRIVER_1.42.1.1878');
DeleteService('ReimageRealTimeProtector');
DeleteService('Guard.Mail.ru');
DeleteService('globalUpdatem');
DeleteService('globalUpdate');
DeleteService('Task Manager Pro');
DeleteService('pywezigy');
DeleteService('puzysyxu');
DeleteService('IHProtect Service');
DeleteFileMask('C:\Program Files (x86)\windealist', '*', true);
DeleteFileMask('C:\Users\1234\AppData\Local\Host installer', '*', true);
DeleteFileMask('C:\Program Files (x86)\ShopperPro', '*', true);
DeleteFileMask('C:\Program Files\Reimage', '*', true);
DeleteFileMask('C:\Users\1234\AppData\Roaming\DIGITA~1', '*', true);
DeleteFileMask('C:\Program Files (x86)\AnyProtectEx', '*', true);
DeleteFileMask('C:\Program Files (x86)\Sense', '*', true);
DeleteFileMask('C:\Program Files (x86)\Ge-Force', '*', true);
DeleteFileMask('C:\ProgramData\ShopperPro', '*', true);
DeleteFileMask('C:\Program Files (x86)\XTab', '*', true);
DeleteFileMask('C:\Users\1234\AppData\Local\SmartWeb', '*', true);
DeleteFileMask('C:\Program Files (x86)\globalUpdate\Update', '*', true);
DeleteFileMask('C:\Users\1234\AppData\Roaming\30464E43-1432583039-3834-394B-00269EDF162F', '*', true);
DeleteFileMask('c:\users\1234\appdata\local\gmsd_ru_254\', '*', true);
DeleteFileMask('C:\Program Files (x86)\OLBPre', '*', true);
DeleteDirectory('C:\Program Files (x86)\windealist');
DeleteDirectory('C:\Users\1234\AppData\Local\Host installer');
DeleteDirectory('C:\Program Files (x86)\ShopperPro');
DeleteDirectory('C:\Program Files\Reimage');
DeleteDirectory('C:\Users\1234\AppData\Roaming\DIGITA~1');
DeleteDirectory('C:\Program Files (x86)\AnyProtectEx');
DeleteDirectory('C:\Program Files (x86)\Sense');
DeleteDirectory('C:\Program Files (x86)\Ge-Force');
DeleteDirectory('C:\ProgramData\ShopperPro');
DeleteDirectory('C:\Program Files (x86)\XTab');
DeleteDirectory('C:\Users\1234\AppData\Local\SmartWeb');
DeleteDirectory('C:\Program Files (x86)\globalUpdate\Update');
DeleteDirectory('C:\Users\1234\AppData\Roaming\30464E43-1432583039-3834-394B-00269EDF162F');
DeleteDirectory('c:\users\1234\appdata\local\gmsd_ru_254\');
DeleteDirectory('C:\Program Files (x86)\OLBPre');
DelBHO('{0633EE93-D776-472f-A0FF-E1416B8B2E3D}');
DelBHO('{fe704bf8-384b-44e1-8cf2-8dbeb3637a8a}');
DelBHO('{e7e8ed77-2fba-4ec6-bc07-65de4de6709f}');
DelBHO('{d40c654d-7c51-4eb3-95b2-1e23905c2a2d}');
DelBHO('{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}');
DelBHO('{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}');
ExecuteSysClean;
ExecuteRepair(2);
ExecuteRepair(4);
ExecuteRepair(3);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.