Код:
begin
QuarantineFileF('C:\PROGRA~2\SearchProtect', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\AnyProtectEx', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Program Files (x86)\Mobogenie', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Users\Николай\AppData\Local\SmartWeb', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Users\D683~1\AppData\Roaming\DIGITA~1', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Users\D683~1\AppData\Roaming\PRICEF~1', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Users\Николай\AppData\Local\Microsoft\Extensions', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('C:\Users\Николай\appdata\roaming\aspackage', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll', '');
QuarantineFile('C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll', '');
QuarantineFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '');
QuarantineFile('C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe', '');
QuarantineFile('C:\Program Files (x86)\Mobogenie\DaemonProcess.exe', '');
QuarantineFile('C:\Users\Николай\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe', '');
QuarantineFile('C:\Users\Николай\AppData\Local\SmartWeb\SmartWebHelper.exe', '');
QuarantineFile('C:\Users\Николай\AppData\Local\Yandex\browser.bat', '');
QuarantineFile('C:\Users\D683~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE', '');
QuarantineFile('C:\Users\D683~1\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE', '');
QuarantineFile('C:\Users\Николай\AppData\Local\Microsoft\Extensions\safebrowser.exe', '');
QuarantineFile('C:\Users\Николай\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe', '');
QuarantineFile('C:\Users\Николай\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrsetup.exe', '');
QuarantineFile('C:\Users\Николай\appdata\local\smartweb\smartwebapp.exe', '');
QuarantineFile('C:\Users\Николай\appdata\local\smartweb\swhk.dll', '');
QuarantineFile('C:\Users\Николай\appdata\local\smartweb\__u.exe', '');
QuarantineFile('C:\Users\Николай\appdata\roaming\aspackage\aspackage.exe', '');
QuarantineFile('C:\Users\Николай\appdata\roaming\aspackage\uninstall.exe', '');
DeleteFile('C:\Windows\Tasks\Digital Sites.job', '64');
DeleteFile('C:\Windows\Tasks\Price Fountain.job', '64');
DeleteFile('C:\Program Files (x86)\Baidu\BaiduAn\2.3.0.2225\BaiduAnSvc.exe', '32');
DeleteFile('C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll', '32');
DeleteFile('C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll', '32');
DeleteFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '32');
DeleteFile('C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe', '32');
DeleteFile('C:\Program Files (x86)\Mobogenie\DaemonProcess.exe', '32');
DeleteFile('C:\Users\Николай\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe', '32');
DeleteFile('C:\Users\Николай\AppData\Local\SmartWeb\SmartWebHelper.exe', '32');
DeleteFile('C:\Users\Николай\AppData\Local\Yandex\browser.bat', '32');
DeleteFile('C:\Users\D683~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE', '32');
DeleteFile('C:\Users\D683~1\AppData\Roaming\PRICEF~1\UPDATE~1\UPDATE~1.EXE', '32');
DeleteFile('C:\Users\Николай\AppData\Local\Microsoft\Extensions\safebrowser.exe', '32');
DeleteFile('C:\Users\Николай\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrlte.exe', '32');
DeleteFile('C:\Users\Николай\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.19.2\dsrsetup.exe', '32');
DeleteFile('C:\Users\Николай\appdata\local\smartweb\smartwebapp.exe', '32');
DeleteFile('C:\Users\Николай\appdata\local\smartweb\swhk.dll', '32');
DeleteFile('C:\Users\Николай\appdata\local\smartweb\__u.exe', '32');
DeleteFile('C:\Users\Николай\appdata\roaming\aspackage\aspackage.exe', '32');
DeleteFile('C:\Users\Николай\appdata\roaming\aspackage\uninstall.exe', '32');
DeleteService('{db1fd023-48a0-496d-b896-22f18fc807bb}w64');
DeleteService('{7f7f2c29-eeca-42c4-8c50-9c6b4697db13}w64');
DeleteService('{7c18b119-d64a-4b8f-90db-d1c5b5ad5acf}w64');
DeleteService('{6f8e76a6-8d83-42da-bc6d-e2c19080f60b}w64');
DeleteService('{6a86ad4e-d1ee-4703-baff-f697dcc0f883}w64');
DeleteService('{4d04d451-b8ea-4a87-becc-f81f49396472}w64');
DeleteService('{42ad32fb-64da-4848-a5f2-2ed54fc96139}w64');
DeleteService('{30389f51-b968-4243-8e7c-c69cde75ce4d}w64');
DeleteService('{29b136c9-938d-4d3d-8df8-d649d9b74d02}w64');
DeleteService('{1a6d0cfb-dce2-4165-b21a-b549f29bee27}w64');
DeleteService('wpnfd_1_10_0_4');
DeleteService('BDMRTP');
DeleteFileMask('C:\Program Files (x86)\Baidu', '*', true);
DeleteFileMask('C:\PROGRA~2\SearchProtect', '*', true);
DeleteFileMask('C:\Program Files (x86)\AnyProtectEx', '*', true);
DeleteFileMask('C:\Program Files (x86)\Mobogenie', '*', true);
DeleteFileMask('C:\Users\Николай\AppData\Local\Pay-By-Ads', '*', true);
DeleteFileMask('C:\Users\Николай\AppData\Local\SmartWeb', '*', true);
DeleteFileMask('C:\Users\D683~1\AppData\Roaming\DIGITA~1', '*', true);
DeleteFileMask('C:\Users\D683~1\AppData\Roaming\PRICEF~1', '*', true);
DeleteFileMask('C:\Users\Николай\AppData\Local\Microsoft\Extensions', '*', true);
DeleteFileMask('C:\Users\Николай\appdata\roaming\aspackage', '*', true);
DeleteDirectory('C:\Program Files (x86)\Baidu');
DeleteDirectory('C:\PROGRA~2\SearchProtect');
DeleteDirectory('C:\Program Files (x86)\AnyProtectEx');
DeleteDirectory('C:\Program Files (x86)\Mail.Ru');
DeleteDirectory('C:\Program Files (x86)\Mobogenie');
DeleteDirectory('C:\Users\Николай\AppData\Local\Pay-By-Ads');
DeleteDirectory('C:\Users\Николай\AppData\Local\SmartWeb');
DeleteDirectory('C:\Users\D683~1\AppData\Roaming\DIGITA~1');
DeleteDirectory('C:\Users\D683~1\AppData\Roaming\PRICEF~1');
DeleteDirectory('C:\Users\Николай\AppData\Local\Microsoft\Extensions');
DeleteDirectory('C:\Users\Николай\appdata\roaming\aspackage');
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP1" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP3" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Digital Sites" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Price Fountain" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Safebrowser" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SmartWeb Upgrade Trigger Task" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Yahoo! Search" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Yahoo! Search Updater" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AnyProtect Scanner', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mobilegeni daemon', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Yahoo! Search', 'command');
ExecuteSysClean;
ExecuteRepair(14);
ExecuteRepair(22);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.