Код:
begin
DeleteService('innfd_1_10_0_13');
StopService('webTinstMKTN');
DeleteService('webTinstMKTN');
StopService('screentk');
DeleteService('screentk');
DeleteService('globalUpdatem');
DeleteService('globalUpdate');
StopService('VCL');
StopService('nisyquwe');
StopService('insvc_1.10.0.13');
StopService('IHProtect Service');
StopService('gikiwyle');
StopService('fogynomy');
StopService('cimeseze');
DeleteService('VCL');
DeleteService('nisyquwe');
DeleteService('insvc_1.10.0.13');
DeleteService('IHProtect Service');
DeleteService('gikiwyle');
DeleteService('fogynomy');
DeleteService('cimeseze');
TerminateProcessByName('C:\Program Files (x86)\IGS\VCL.exe');
QuarantineFile('C:\Program Files (x86)\IGS\VCL.exe','');
TerminateProcessByName('c:\program files (x86)\igs\vcl.exe');
QuarantineFile('c:\program files (x86)\igs\vcl.exe','');
TerminateProcessByName('c:\users\user\appdata\local\gmsd_ru_226\upgmsd_ru_226.exe');
QuarantineFile('c:\users\user\appdata\local\gmsd_ru_226\upgmsd_ru_226.exe','');
TerminateProcessByName('c:\users\user\appdata\local\00000011-1428013790-0000-0000-40167ee49459\snsv22a9.tmp');
QuarantineFile('c:\users\user\appdata\local\00000011-1428013790-0000-0000-40167ee49459\snsv22a9.tmp','');
TerminateProcessByName('c:\users\user\appdata\local\smartweb\smartwebhelper.exe');
QuarantineFile('c:\users\user\appdata\local\smartweb\smartwebhelper.exe','');
QuarantineFile('c:\program files (x86)\rise gaming store\rise_gaming_store_helper_service.exe','');
TerminateProcessByName('c:\program files (x86)\xtab\protectservice.exe');
QuarantineFile('c:\program files (x86)\xtab\protectservice.exe','');
TerminateProcessByName('c:\users\user\appdata\roaming\00000011-1428002713-0000-0000-40167ee49459\nsm5735.tmp');
QuarantineFile('c:\users\user\appdata\roaming\00000011-1428002713-0000-0000-40167ee49459\nsm5735.tmp','');
TerminateProcessByName('c:\users\user\appdata\roaming\00000011-1428002713-0000-0000-40167ee49459\jnsm46ad.tmp');
QuarantineFile('c:\users\user\appdata\roaming\00000011-1428002713-0000-0000-40167ee49459\jnsm46ad.tmp','');
TerminateProcessByName('c:\users\user\appdata\local\00000011-1428323161-0000-0000-40167ee49459\jnsd8984.exe');
QuarantineFile('c:\users\user\appdata\local\00000011-1428323161-0000-0000-40167ee49459\jnsd8984.exe','');
TerminateProcessByName('c:\program files (x86)\version24blockandsurf\j4blockandsurfj52.exe');
QuarantineFile('c:\program files (x86)\version24blockandsurf\j4blockandsurfj52.exe','');
TerminateProcessByName('c:\program files (x86)\infonaut_1.10.0.13\service\insvc.exe');
QuarantineFile('c:\program files (x86)\infonaut_1.10.0.13\service\insvc.exe','');
TerminateProcessByName('c:\users\user\appdata\local\00000011-1428323161-0000-0000-40167ee49459\insg8f51.tmp');
QuarantineFile('c:\users\user\appdata\local\00000011-1428323161-0000-0000-40167ee49459\insg8f51.tmp','');
TerminateProcessByName('c:\program files (x86)\xtab\hpnotify.exe');
QuarantineFile('c:\program files (x86)\xtab\hpnotify.exe','');
TerminateProcessByName('c:\program files (x86)\globalupdate\update\googleupdate.exe');
QuarantineFile('c:\program files (x86)\globalupdate\update\googleupdate.exe','');
TerminateProcessByName('c:\users\user\appdata\local\00000011-1428013776-0000-0000-40167ee49459\cnszd391.tmp');
QuarantineFile('c:\users\user\appdata\local\00000011-1428013776-0000-0000-40167ee49459\cnszd391.tmp','');
TerminateProcessByName('c:\program files (x86)\xtab\cmdshell.exe');
QuarantineFile('c:\program files (x86)\xtab\cmdshell.exe','');
DeleteFile('c:\program files (x86)\xtab\cmdshell.exe','32');
DeleteFile('c:\users\user\appdata\local\00000011-1428013776-0000-0000-40167ee49459\cnszd391.tmp','32');
DeleteFile('c:\program files (x86)\globalupdate\update\googleupdate.exe','32');
DeleteFile('c:\program files (x86)\xtab\hpnotify.exe','32');
DeleteFile('c:\users\user\appdata\local\00000011-1428323161-0000-0000-40167ee49459\insg8f51.tmp','32');
DeleteFile('c:\program files (x86)\infonaut_1.10.0.13\service\insvc.exe','32');
DeleteFile('c:\program files (x86)\version24blockandsurf\j4blockandsurfj52.exe','32');
DeleteFile('c:\users\user\appdata\local\00000011-1428323161-0000-0000-40167ee49459\jnsd8984.exe','32');
DeleteFile('c:\users\user\appdata\roaming\00000011-1428002713-0000-0000-40167ee49459\jnsm46ad.tmp','32');
DeleteFile('c:\users\user\appdata\roaming\00000011-1428002713-0000-0000-40167ee49459\nsm5735.tmp','32');
DeleteFile('c:\program files (x86)\xtab\protectservice.exe','32');
DeleteFile('c:\users\user\appdata\local\smartweb\smartwebhelper.exe','32');
DeleteFile('c:\users\user\appdata\local\00000011-1428013790-0000-0000-40167ee49459\snsv22a9.tmp','32');
DeleteFile('c:\users\user\appdata\local\gmsd_ru_226\upgmsd_ru_226.exe','32');
DeleteFile('c:\program files (x86)\igs\vcl.exe','32');
DeleteFile('C:\Program Files (x86)\IGS\VCL.exe','32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe','32');
DeleteFile('C:\WINDOWS\system32\drivers\innfd_1_10_0_13.sys','32');
DeleteFile('C:\WINDOWS\screentk.sys','32');
DeleteFile('C:\WINDOWS\system32\Drivers\webTinstMKTN.sys','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunOnce','upgmsd_ru_226.exe');
DeleteFile('C:\Users\User\AppData\Local\Yandex\YandexBrowser\Application\browser.exe.bat','32');
DeleteFile('C:\Users\User\AppData\Local\SmartWeb\SmartWebHelper.exe','32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','SmartWeb');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','WinCheck');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','gmsd_ru_226');
DeleteFile('C:\Program Files (x86)\gmsd_ru_226\gmsd_ru_226.exe','32');
DeleteFile('C:\iexplore.bat','32');
DeleteFile('C:\WINDOWS\system32\VCL.dll','32');
ExecuteSysClean;
ExecuteRepair(15);
RebootWindows(true);
end.