Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\documents and settings\root\local settings\application data\mail.ru\mailruupdater.exe');
TerminateProcessByName('c:\program files\mail.ru\mailruupdater\mailruupdater.exe');
TerminateProcessByName('c:\documents and settings\root\local settings\application data\mail.ru\mrkeeper.exe');
TerminateProcessByName('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpcrtp.exe');
StopService('QQPCRTP');
StopService('Updater.Mail.Ru');
StopService('QMIEProtect');
StopService('QMUdisk');
StopService('QQSysMon');
StopService('softaal');
StopService('TFsFlt');
StopService('TsFltMgr');
StopService('TSKSP');
DeleteFile('c:\documents and settings\root\local settings\application data\mail.ru\mailruupdater.exe', '32');
DeleteFile('c:\program files\mail.ru\mailruupdater\mailruupdater.exe', '32');
DeleteFile('c:\documents and settings\root\local settings\application data\mail.ru\mrkeeper.exe', '32');
DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpcrtp.exe', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMGCShellExt.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\exnscan.dll', '32');
DeleteFile('C:\Documents and Settings\All Users\Application Data\Tencent\TSVulFw\TSVulFW.DAT', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIEsafeDll.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMBrowserSafe.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIpc.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\FileSmash\QMSoftExt.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMContextUninstall.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMContextScan.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMCommon.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\RefuseInject.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\dr.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAntiInject.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\ptrate.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\sqlite.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMTrayPlugin\QMPerfCtrl\QMPerf.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMNetworkMgr.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\scc.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSSysKitProxy.dll', '32');
DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmsysrepprov.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQFileFlt.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMExt.dll', '32');
DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmscripthost.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVEng.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMHipsEngine.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSHeart.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSService.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMEmMat.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSPolicyEng.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVUpload.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMBDScanner.dat', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAssocScan.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVCache.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\oDayProtect.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\SoftMgr\processlogdll.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMFileMon.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMRtpCheck.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\communic.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCFIXATDLL.DLL', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMInfoEng.DLL', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMUl.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMRepairPlugin.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMDns.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMRtpDLL.dll', '32');
DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmrtpcontroller.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAVProxy.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMSafeBoxHelperDll.dll', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIEProtect.sys', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMUdisk.sys', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQSysMon.sys', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\softaal.sys', '32');
DeleteFile('C:\WINDOWS\system32\Drivers\TFsFlt.sys', '32');
DeleteFile('C:\WINDOWS\system32\drivers\TsFltMgr.sys', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSKsp.sys', '32');
DeleteFile('C:\WINDOWS\system32\tssk.sys', '32');
DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCTray.exe', '32');
DeleteFile('C:\Documents and Settings\root\Local Settings\Application Data\Amigo\Application\amigo.exe', '32');
DeleteFile('C:\Program Files\IObit\IObit Uninstaller\UninstallMenuRight32.dll', '32');
DeleteFile('C:\Documents and Settings\root\Local Settings\Application Data\Amigo\Application\vk.exe', '32');
DeleteFile('C:\Documents and Settings\root\Local Settings\Application Data\Amigo\Application\ok.exe', '32');
DeleteFile('C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll', '32');
DeleteFile('C:\Documents and Settings\root\Local Settings\Application Data\Hostinstaller\3764770235_installcube.exe', '32');
DeleteFile('C:\Documents and Settings\root\Application Data\WindowsUpdater\Updater.exe', '32');
DeleteFile('\??\C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSKsp.sys', '32');
DeleteService('QQPCRTP');
DeleteService('Updater.Mail.Ru');
DeleteService('QMIEProtect');
DeleteService('QMUdisk');
DeleteService('QQSysMon');
DeleteService('softaal');
DeleteService('TFsFlt');
DeleteService('TsFltMgr');
DeleteService('TSKSP');
DeleteService('TSSK');
DeleteFileMask('c:\documents and settings\root\local settings\application data\mail.ru', '*', true);
DeleteFileMask('c:\program files\mail.ru', '*', true);
DeleteFileMask('c:\program files\tencent', '*', true);
DeleteFileMask('C:\Documents and Settings\All Users\Application Data\Tencent', '*', true);
DeleteFileMask('C:\Documents and Settings\root\Local Settings\Application Data\Amigo', '*', true);
DeleteFileMask('C:\Program Files\IObit', '*', true);
DeleteFileMask('C:\Documents and Settings\root\Local Settings\Application Data\Hostinstaller', '*', true);
DeleteFileMask('C:\Documents and Settings\root\Application Data\WindowsUpdater', '*', true);
DeleteFileMask('\??\C:\Program Files\Tencent', '*', true);
DeleteDirectory('c:\documents and settings\root\local settings\application data\mail.ru');
DeleteDirectory('c:\program files\mail.ru');
DeleteDirectory('c:\program files\tencent');
DeleteDirectory('C:\Documents and Settings\All Users\Application Data\Tencent');
DeleteDirectory('C:\Documents and Settings\root\Local Settings\Application Data\Amigo');
DeleteDirectory('C:\Program Files\IObit');
DeleteDirectory('C:\Documents and Settings\root\Local Settings\Application Data\Hostinstaller');
DeleteDirectory('C:\Documents and Settings\root\Application Data\WindowsUpdater');
DeleteDirectory('\??\C:\Program Files\Tencent');
DelBHO('{10921475-03CE-4E04-90CE-E2E7EF20C814}');
DelBHO('{92780B25-18CC-41C8-B9BE-3C9C571A8263}');
ExecuteFile('schtasks.exe', '/delete /TN "Soft installer" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "WindowsUpdater" /F', 0, 15000, true);
DelCLSID('{B19ED566-D419-470b-B111-3C89040BC027}');
DelCLSID('{63332668-8CE1-445D-A5EE-25929176714E}');
DelCLSID('{CBDECEF7-7A29-4cbf-A009-2673D82C7BF9}');
DelCLSID('{754DF2CE-51E8-4895-B53C-6381418B84AE}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', ' QQPCTray');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'MailRuUpdater');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'amigo');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved', '{B19ED566-D419-470b-B111-3C89040BC027}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved', '{63332668-8CE1-445D-A5EE-25929176714E}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved', '{CBDECEF7-7A29-4cbf-A009-2673D82C7BF9}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved', '{754DF2CE-51E8-4895-B53C-6381418B84AE}');
BC_ImportALL;
ExecuteSysClean;
BC_DeleteSvc('QMIEProtect');
BC_DeleteSvc('QMUdisk');
BC_DeleteSvc('QQSysMon');
BC_DeleteSvc('softaal');
BC_DeleteSvc('TAOAccelerator');
BC_DeleteSvc('TAOKernelDriver');
BC_DeleteSvc('TFsFlt');
BC_DeleteSvc('TsFltMgr');
BC_DeleteSvc('TSKSP');
ExecuteRepair(13);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.