Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
TerminateProcessByName('C:\Program Files (x86)\33444335-1451676581-5434-4636-A0D3C15E38AB\knsb4B5F.tmp');
TerminateProcessByName('c:\users\pc\appdata\local\temp\nsoe36c.tmp');
TerminateProcessByName('c:\programdata\tmp0x0x\protectwindowsmanager.exe');
StopService('vifeqozyzbt');
StopService('WindowsMangerProtect');
QuarantineFile('C:\Users\pc\AppData\Roaming\ASPackage\ASPackage.exe','');
QuarantineFileF('c:\programdata\tmp0x0x', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFileF('C:\Users\pc\AppData\Local\SmartWeb', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFileF('C:\Users\pc\AppData\Local\Hostinstaller', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFile('C:\Program Files (x86)\33444335-1451676581-5434-4636-A0D3C15E38AB\knsb4B5F.tmp', '');
QuarantineFile('c:\users\pc\appdata\local\temp\nsoe36c.tmp', '');
QuarantineFile('c:\programdata\tmp0x0x\protectwindowsmanager.exe', '');
QuarantineFile('c:\users\pc\appdata\roaming\microsoft\windows\start menu\programs\startup\xboxext.exe', '');
QuarantineFile('C:\Users\pc\AppData\Local\SmartWeb\SmartWebHelper.exe', '');
QuarantineFile('C:\Users\pc\AppData\Local\Hostinstaller\945482517_monster.exe', '');
ExecuteFile('schtasks.exe', '/delete /TN "Soft installer" /F', 0, 15000, true);
DeleteFile('C:\Program Files (x86)\33444335-1451676581-5434-4636-A0D3C15E38AB\knsb4B5F.tmp', '32');
DeleteFile('c:\users\pc\appdata\local\temp\nsoe36c.tmp', '32');
DeleteFile('C:\Users\pc\AppData\Roaming\ASPackage\ASPackage.exe','32');
DeleteFile('c:\programdata\tmp0x0x\protectwindowsmanager.exe', '32');
DeleteFile('C:\Users\pc\AppData\Local\SmartWeb\SmartWebHelper.exe', '32');
DeleteFile('C:\Users\pc\AppData\Local\Hostinstaller\945482517_monster.exe', '32');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunOnce','Update');
DeleteFileMask('c:\programdata\tmp0x0x', '*', true);
DeleteFileMask('C:\Users\pc\AppData\Local\SmartWeb', '*', true);
DeleteFileMask('C:\Users\pc\AppData\Local\Hostinstaller', '*', true);
DeleteDirectory('c:\programdata\tmp0x0x');
DeleteDirectory('C:\Users\pc\AppData\Local\SmartWeb');
DeleteDirectory('C:\Users\pc\AppData\Local\Hostinstaller');
DeleteService('vifeqozyzbt');
DeleteService('WindowsMangerProtect');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.
Компьютер