Код:
begin
TerminateProcessByName('c:\programdata\timetasks\timetasks.exe');
TerminateProcessByName('c:\program files (x86)\swiftsearch_1.10.0.25\service\swsesrvc.exe');
TerminateProcessByName('c:\users\rmaskaev\appdata\roaming\cpuminer\sgminer\sgm.exe');
TerminateProcessByName('c:\users\rmaskaev\appdata\local\temp\be48.tmp.exe');
TerminateProcessByName('c:\users\rmaskaev\appdata\local\temp\amisetup0872__14468.exe');
TerminateProcessByName('c:\users\rmaskaev\appdata\local\temp\878f.tmp.exe');
StopService('SPBIUpd');
QuarantineFile('C:\Users\RMaskaev\appdata\roaming\aspackage\aspackage.exe', '');
QuarantineFile('C:\WINDOWS\system32\2.exe', '');
QuarantineFile('C:\Users\RMaskaev\AppData\Roaming\WindowsUpdater\Updater.exe', '');
QuarantineFile('C:\Program Files (x86)\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe', '');
QuarantineFile('C:\Users\RMaskaev\AppData\Local\Temp\task.vbs', '');
QuarantineFile('C:\Users\RMaskaev\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll', '');
QuarantineFile('C:\Users\RMaskaev\AppData\Roaming\cpuminer\sgminer\start.cmd', '');
QuarantineFile('C:\Program Files (x86)\baidu\pps.exe', '');
QuarantineFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe', '');
QuarantineFile('C:\Program Files (x86)\Zaxar\ZaxarGameBrowser.exe', '');
QuarantineFile('C:\WINDOWS\system32\drivers\tsskx64.sys', '');
QuarantineFile('C:\WINDOWS\system32\drivers\swsedrvr_vt_1_10_0_25.sys', '');
QuarantineFile('C:\Program Files\Common Files\ShopperPro\spbiw.sys', '');
QuarantineFile('C:\Program Files\Common Files\ShopperPro\spbiu.exe', '');
QuarantineFile('c:\programdata\timetasks\timetasks.exe', '');
QuarantineFile('c:\program files (x86)\swiftsearch_1.10.0.25\service\swsesrvc.exe', '');
QuarantineFile('c:\users\rmaskaev\appdata\roaming\cpuminer\sgminer\sgm.exe', '');
QuarantineFile('c:\users\rmaskaev\appdata\local\temp\be48.tmp.exe', '');
QuarantineFile('c:\users\rmaskaev\appdata\local\temp\amisetup0872__14468.exe', '');
QuarantineFile('c:\users\rmaskaev\appdata\local\temp\878f.tmp.exe', '');
DeleteFile('c:\users\rmaskaev\appdata\local\temp\878f.tmp.exe', '32');
DeleteFile('c:\users\rmaskaev\appdata\local\temp\amisetup0872__14468.exe', '32');
DeleteFile('c:\users\rmaskaev\appdata\local\temp\be48.tmp.exe', '32');
DeleteFile('c:\users\rmaskaev\appdata\roaming\cpuminer\sgminer\sgm.exe', '32');
DeleteFile('c:\programdata\timetasks\timetasks.exe', '32');
DeleteFile('C:\Program Files\Common Files\ShopperPro\spbiu.exe', '32');
DeleteFile('C:\Program Files\Common Files\ShopperPro\spbiw.sys', '32');
DeleteFile('C:\WINDOWS\system32\drivers\swsedrvr_vt_1_10_0_25.sys', '32');
DeleteFile('C:\WINDOWS\system32\drivers\tsskx64.sys', '32');
DeleteFile('C:\Program Files (x86)\Zaxar\ZaxarGameBrowser.exe', '32');
DeleteFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe', '32');
DeleteFile('C:\Program Files (x86)\baidu\pps.exe', '32');
DeleteFile('C:\Users\RMaskaev\AppData\Roaming\cpuminer\sgminer\start.cmd', '32');
DeleteFile('C:\Users\RMaskaev\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll', '32');
DeleteFile('C:\Users\RMaskaev\AppData\Local\Temp\task.vbs', '32');
DeleteFile('C:\Program Files (x86)\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe', '32');
DeleteFile('C:\Users\RMaskaev\AppData\Roaming\WindowsUpdater\Updater.exe', '32');
DeleteFile('C:\WINDOWS\system32\2.exe', '32');
DeleteFile('C:\Users\RMaskaev\appdata\roaming\aspackage\aspackage.exe', '32');
DeleteFile('C:\Program Files (x86)\SwiftSearch_1.10.0.25\Service\swsesrvc.exe', '32');
DeleteService('TSSKX64');
DeleteService('QMUdisk');
DeleteService('swsedrvr_vt_1_10_0_25');
DeleteService('SPBIUpdd');
DeleteFileMask('C:\Program Files (x86)\SwiftSearch_1.10.0.25', '*', true);
DeleteFileMask('C:\Users\RMaskaev\appdata\roaming\aspackage', '*', true);
DeleteFileMask('C:\Users\RMaskaev\AppData\Roaming\WindowsUpdater', '*', true);
DeleteFileMask('C:\Users\RMaskaev\AppData\Local\Mail.Ru', '*', true);
DeleteFileMask('C:\Program Files (x86)\baidu', '*', true);
DeleteFileMask('c:\users\rmaskaev\appdata\roaming\cpuminer', '*', true);
DeleteFileMask('c:\programdata\timetasks', '*', true);
DeleteFileMask('C:\Program Files\Common Files\ShopperPro', '*', true);
DeleteFileMask('C:\Program Files (x86)\Zaxar', '*', true);
DeleteDirectory('C:\Program Files (x86)\SwiftSearch_1.10.0.25');
DeleteDirectory('C:\Users\RMaskaev\appdata\roaming\aspackage');
DeleteDirectory('C:\Users\RMaskaev\AppData\Roaming\WindowsUpdater');
DeleteDirectory('C:\Users\RMaskaev\AppData\Local\Mail.Ru');
DeleteDirectory('C:\Program Files (x86)\baidu');
DeleteDirectory('c:\users\rmaskaev\appdata\roaming\cpuminer');
DeleteDirectory('c:\programdata\timetasks');
DeleteDirectory('C:\Program Files\Common Files\ShopperPro');
DeleteDirectory('C:\Program Files (x86)\Zaxar');
DelBHO('{8E8F97CD-60B5-456F-A201-73065652D099}');
ExecuteFile('schtasks.exe', '/delete /TN "amiupdaterExd" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "amiupdaterExi" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SwiftSearch Auto Updater 1.10.0.25 Core" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SwiftSearch Auto Updater 1.10.0.25 Pending Update" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "WindowsUpdater" /F', 0, 15000, true);
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.