Код:
begin
TerminateProcessByName('C:\Program Files (x86)\DNS Unlocker\dnsquintana.exe');
QuarantineFileF('C:\Program Files (x86)\CinemaPlus12bV01.02', '*', true, '', 0 , 0);
QuarantineFileF('c:\programdata\{dea4f1e3-a3a6-53e4-dea4-4f1e3a3ac78e}', '*', true, '', 0 , 0);
QuarantineFileF('c:\programdata\{41e198ef-5275-49d5-41e1-198ef52763bd}', '*', true, '', 0 , 0);
QuarantineFileF('c:\programdata\{b9712fca-52ff-fd63-b971-12fca52fbf29}', '*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\ver0BlockAndSurf', '*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\globalUpdate', '*', true, '', 0 , 0);
QuarantineFile('C:\Program Files (x86)\DNS Unlocker\dnsquintana.exe', '');
QuarantineFile('C:\Users\Служба спасения\AppData\Roaming\Browsers\exe.emorhc.bat', '');
QuarantineFile('C:\Program Files (x86)\Google\chrome.bat', '');
QuarantineFile('C:\Users\Служба спасения\AppData\Roaming\Browsers\exe.erolpxei.bat', '');
QuarantineFile('C:\Program Files (x86)\CinemaPlus12bV01.02\9f172d7b-6ec5-435f-99c4-557f375584ed-11.exe', '');
QuarantineFile('c:\programdata\{dea4f1e3-a3a6-53e4-dea4-4f1e3a3ac78e}\hqghumeaylnlf.exe', '');
QuarantineFile('c:\programdata\{41e198ef-5275-49d5-41e1-198ef52763bd}\hqghumeaylnlf.exe', '');
QuarantineFile('c:\programdata\{b9712fca-52ff-fd63-b971-12fca52fbf29}\hqghumeaylnlf.exe', '');
QuarantineFile('C:\Program Files (x86)\CinemaPlus12bV01.02\9f172d7b-6ec5-435f-99c4-557f375584ed-6.exe', '');
QuarantineFile('C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe', '');
QuarantineFile('C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe', '');
QuarantineFile('C:\Users\Служба спасения\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\42UT7ESP\dotnetfx35.exe', '');
DeleteFile('C:\Program Files (x86)\DNS Unlocker\dnsquintana.exe', '32');
DeleteFile('C:\Users\Служба спасения\AppData\Roaming\Browsers\exe.emorhc.bat', '32');
DeleteFile('C:\Program Files (x86)\Google\chrome.bat', '32');
DeleteFile('C:\Users\Служба спасения\AppData\Roaming\Browsers\exe.erolpxei.bat', '32');
DeleteFile('C:\Program Files (x86)\CinemaPlus12bV01.02\9f172d7b-6ec5-435f-99c4-557f375584ed-11.exe', '32');
DeleteFile('c:\programdata\{dea4f1e3-a3a6-53e4-dea4-4f1e3a3ac78e}\hqghumeaylnlf.exe', '32');
DeleteFile('c:\programdata\{41e198ef-5275-49d5-41e1-198ef52763bd}\hqghumeaylnlf.exe', '32');
DeleteFile('c:\programdata\{b9712fca-52ff-fd63-b971-12fca52fbf29}\hqghumeaylnlf.exe', '32');
DeleteFile('C:\Program Files (x86)\CinemaPlus12bV01.02\9f172d7b-6ec5-435f-99c4-557f375584ed-6.exe', '32');
DeleteFile('C:\Program Files (x86)\ver0BlockAndSurf\J6BlockAndSurfR79.exe', '32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe', '32');
DeleteFile('C:\Users\Служба спасения\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\42UT7ESP\dotnetfx35.exe', '32');
DeleteFileMask('C:\Program Files (x86)\CinemaPlus12bV01.02', '*', true);
DeleteFileMask('c:\programdata\{dea4f1e3-a3a6-53e4-dea4-4f1e3a3ac78e}', '*', true);
DeleteFileMask('c:\programdata\{41e198ef-5275-49d5-41e1-198ef52763bd}', '*', true);
DeleteFileMask('c:\programdata\{b9712fca-52ff-fd63-b971-12fca52fbf29}', '*', true);
DeleteFileMask('C:\Program Files (x86)\ver0BlockAndSurf', '*', true);
DeleteFileMask('C:\Program Files (x86)\globalUpdate', '*', true);
DeleteDirectory('C:\Program Files (x86)\CinemaPlus12bV01.02');
DeleteDirectory('c:\programdata\{dea4f1e3-a3a6-53e4-dea4-4f1e3a3ac78e}');
DeleteDirectory('c:\programdata\{41e198ef-5275-49d5-41e1-198ef52763bd}');
DeleteDirectory('c:\programdata\{b9712fca-52ff-fd63-b971-12fca52fbf29}');
DeleteDirectory('C:\Program Files (x86)\ver0BlockAndSurf');
DeleteDirectory('C:\Program Files (x86)\globalUpdate');
ExecuteFile('schtasks.exe', '/delete /TN "9f172d7b-6ec5-435f-99c4-557f375584ed-6" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Bidaily Synchronize Task[8da6]" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "BlockAndSurf Update" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "DNSQUINTANA" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineCore" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineUA" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Optscan" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Superclean" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{42058C74-2901-4DFA-9094-62EDC14BC4B2}" /F', 0, 15000, true);
ExecuteFile('ipconfig.exe', '/flushdns', 0, 15000, true);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
ExecuteSysClean;
ExecuteRepair(3);
ExecuteRepair(16);
ExecuteRepair(17);
ExecuteRepair(21);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.