Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantine;
ClearQuarantineEx(true);
SetServiceStart('HSystem', 4);
StopService('HSystem');
QuarantineFile('D:\Users\Владимир\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Панель запуска приложений Chrome.lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс\Яндекс.Бар\онлайн помощь по яндекс.бару для firefox.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\790a9b09c70e855d\Google Chrome.lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Chrome.lnk', '');
QuarantineFile('D:\Users\Владимир\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk', '');
QuarantineFileF('C:\Program Files (x86)\HpDef\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFile('D:\Users\Владимир\Desktop\Chrome.lnk', '');
QuarantineFile('C:\ProgramData\izvdLlhMX\NILDILBp0.exe', '');
QuarantineFile('C:\ProgramData\LEWKXmujG\LQJlyAtFHt5.exe', '');
QuarantineFile('C:\ProgramData\cDyxfpeU\HdJmfSJflp4.exe', '');
QuarantineFileF('C:\ProgramData\izvdLlhMX', '*', true, '', 0, 0);
QuarantineFileF('C:\ProgramData\LEWKXmujG', '*', true, '', 0, 0);
QuarantineFileF('C:\ProgramData\cDyxfpeU', '*', true, '', 0, 0);
QuarantineFileF('C:\Program Files (x86)\Common Files\{E93F2CFC-2F9E-4AB0-ACE6-B6012AB99B31}\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
QuarantineFile('C:\Windows\csrss.exe', '');
QuarantineFile('D:\Users\Владимир\appdata\local\microsoft\start menu\вoйти в интeрнeт.exe', '');
QuarantineFile('C:\Windows\svchost.exe', '');
QuarantineFile('C:\Program Files (x86)\HpDef\GUjnY3.exe', '');
QuarantineFileF('D:\Users\Владимир\AppData\Roaming\cpuminer\', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0, 0);
DeleteFile('C:\ProgramData\izvdLlhMX\NILDILBp0.exe', '');
DeleteFile('C:\ProgramData\LEWKXmujG\LQJlyAtFHt5.exe', '');
DeleteFile('C:\ProgramData\cDyxfpeU\HdJmfSJflp4.exe', '');
DeleteFile('C:\Program Files (x86)\HpDef\GUjnY3.exe', '32');
DeleteFile('C:\Windows\svchost.exe', '32');
DeleteFile('D:\Users\Владимир\appdata\local\microsoft\start menu\вoйти в интeрнeт.exe', '32');
DeleteFile('C:\Windows\csrss.exe', '32');
DeleteService('HSystem');
DeleteFileMask('C:\ProgramData\izvdLlhMX', '*', true);
DeleteFileMask('C:\ProgramData\LEWKXmujG', '*', true);
DeleteFileMask('C:\ProgramData\cDyxfpeU', '*', true);
DeleteFileMask('C:\Program Files (x86)\Common Files\{E93F2CFC-2F9E-4AB0-ACE6-B6012AB99B31}\', '*', true);
DeleteFileMask('D:\Users\Владимир\AppData\Roaming\cpuminer\', '*', true);
DeleteDirectory('C:\ProgramData\izvdLlhMX');
DeleteDirectory('C:\ProgramData\LEWKXmujG');
DeleteDirectory('C:\ProgramData\cDyxfpeU');
DeleteDirectory('C:\Program Files (x86)\Common Files\{E93F2CFC-2F9E-4AB0-ACE6-B6012AB99B31}\');
DeleteDirectory('D:\Users\Владимир\AppData\Roaming\cpuminer\');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\cpuminer', 'command');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
RebootWindows(true);
end.