Код:
begin
ExecuteAVUpdate;
TerminateProcessByName('c:\users\Пользователь\appdata\roaming\driverrevolution\driverrevolution.exe');
TerminateProcessByName('c:\users\Пользователь\appdata\local\mail.ru\mailruupdater.exe');
TerminateProcessByName('c:\program files (x86)\mail.ru\mailruupdater\mailruupdater.exe');
TerminateProcessByName('C:\Windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-7c876a3b.exe');
TerminateProcessByName('c:\users\Пользователь\appdata\roaming\texteditor\daemon\texteditor.exe');
StopService('Updater.Mail.Ru');
QuarantineFile('c:\users\Пользователь\appdata\local\mail.ru\mailruupdater.exe', '');
QuarantineFile('c:\program files (x86)\mail.ru\mailruupdater\mailruupdater.exe', '');
QuarantineFile('C:\Windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-7c876a3b.exe', '');
QuarantineFile('c:\users\Пользователь\appdata\roaming\texteditor\daemon\texteditor.exe', '');
QuarantineFile('C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe', '');
QuarantineFile('C:\ProgramData\nkhSKoUOMp\fxVZmceYBVmqHc0.bat', '');
QuarantineFile('C:\Users\Пользователь\AppData\Local\rIbVsTnFqZGY\pKRDdxDfqLNvNjE1.bat', '');
QuarantineFile('C:\Program Files (x86)\Radio_W\prxtbRad1.dll', '');
QuarantineFile('C:\Users\73B5~1\AppData\Local\Temp\mediaget-installer-tmp\yandex-downloader.exe', '');
QuarantineFile('C:\Users\Пользователь\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Yandex.lnk', '');
QuarantineFile('C:\Users\Пользователь\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk', '');
DeleteFile('c:\users\Пользователь\appdata\roaming\driverrevolution\driverrevolution.exe', '32');
DeleteFile('c:\users\Пользователь\appdata\local\mail.ru\mailruupdater.exe', '32');
DeleteFile('c:\program files (x86)\mail.ru\mailruupdater\mailruupdater.exe', '32');
DeleteFile('C:\Windows\SERVIC~2\NETWOR~1\AppData\Local\Temp\mpam-7c876a3b.exe', '32');
DeleteFile('c:\users\Пользователь\appdata\roaming\texteditor\daemon\texteditor.exe', '32');
DeleteFile('C:\Program Files (x86)\Mail.Ru\Guard\GuardMailRu.exe', '32');
DeleteFile('C:\ProgramData\nkhSKoUOMp\fxVZmceYBVmqHc0.bat', '32');
DeleteFile('C:\Users\Пользователь\AppData\Local\rIbVsTnFqZGY\pKRDdxDfqLNvNjE1.bat', '32');
DeleteFile('C:\Program Files (x86)\Radio_W\prxtbRad1.dll', '32');
DeleteFile('C:\Users\73B5~1\AppData\Local\Temp\mediaget-installer-tmp\yandex-downloader.exe', '32');
DeleteService('Updater.Mail.Ru');
DeleteFileMask('c:\users\Пользователь\appdata\roaming\driverrevolution', '*', true);
DeleteFileMask('c:\users\Пользователь\appdata\local\mail.ru', '*', true);
DeleteFileMask('c:\program files (x86)\mail.ru', '*', true);
DeleteFileMask('c:\users\Пользователь\appdata\roaming\texteditor', '*', true);
DeleteFileMask('C:\Program Files (x86)\Radio_W', '*', true);
DeleteDirectory('c:\users\Пользователь\appdata\roaming\driverrevolution');
DeleteDirectory('c:\users\Пользователь\appdata\local\mail.ru');
DeleteDirectory('c:\program files (x86)\mail.ru');
DeleteDirectory('c:\users\Пользователь\appdata\roaming\texteditor');
DeleteDirectory('C:\Program Files (x86)\Radio_W');
DelBHO('{b4efb02b-cd4a-44b9-b5d9-aa486cdffab6}');
ExecuteFile('schtasks.exe', '/delete /TN "MailRuUpdater" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{DD3CD3C9-29A3-483E-965B-3748186306AE}" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'Guard.Mail.ru.gui');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'TextEditor');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'MailRuUpdater');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'DriverRevolution Updater');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'EmotionsBarTray');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.
