Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantine;
TerminateProcessByName('c:\program files\elex-tech\yac\isafetray.exe');
StopService('iSafeKrnl');
StopService('iSafeKrnlKit');
StopService('iSafeKrnlMon');
StopService('iSafeKrnlR3');
StopService('iSafeNetFilter');
QuarantineFile('c:\program files\elex-tech\yac\isafetray.exe', '');
QuarantineFile('C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys', '');
QuarantineFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys', '');
QuarantineFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys', '');
QuarantineFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys', '');
QuarantineFile('C:\Windows\system32\DRIVERS\iSafeNetFilter.sys', '');
QuarantineFile('C:\Windows\system32\DRIVERS\iSafeKrnlBoot.sys', '');
QuarantineFile('C:\Windows\system32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw.sys', '');
QuarantineFile('C:\Program Files\Kinoroom Browser\kinoroom-browser.exe', '');
QuarantineFile('C:\Users\2\AppData\Local\Microsoft\Extensions\extsetup.exe', '');
QuarantineFile('C:\Users\2\AppData\Local\SystemDir\nethost.exe', '');
QuarantineFile('C:\Users\2\AppData\Local\Microsoft\Extensions\safebrowser.exe', '');
QuarantineFile('D:\autorun.inf', '');
QuarantineFile('C:\Users\2\appdata\local\kometa\kometaup.exe', '');
QuarantineFile('C:\Users\2\appdata\local\microsoft\start menu\вoйти в интeрнeт 2inf.net.exe', '');
QuarantineFile('C:\Program Files\elex-tech\yac\ipcdl.exe', '');
QuarantineFile('C:\Program Files\elex-tech\yac\isafechlp.dll', '');
QuarantineFile('C:\Program Files\elex-tech\yac\uninstall.exe', '');
QuarantineFile('C:\Program Files\skinapp\skinapp.exe', '');
DeleteFile('c:\program files\elex-tech\yac\isafetray.exe', '32');
DeleteFile('C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys', '32');
DeleteFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys', '32');
DeleteFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys', '32');
DeleteFile('C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys', '32');
DeleteFile('C:\Windows\system32\DRIVERS\iSafeNetFilter.sys', '32');
DeleteFile('C:\Windows\system32\DRIVERS\iSafeKrnlBoot.sys', '32');
DeleteFile('C:\Windows\system32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw.sys', '32');
DeleteFile('C:\Program Files\Kinoroom Browser\kinoroom-browser.exe', '32');
DeleteFile('C:\Users\2\AppData\Local\Microsoft\Extensions\extsetup.exe', '32');
DeleteFile('C:\Users\2\AppData\Local\SystemDir\nethost.exe', '32');
DeleteFile('C:\Users\2\AppData\Local\Microsoft\Extensions\safebrowser.exe', '32');
DeleteFile('D:\autorun.inf', '32');
DeleteFile('C:\Users\2\appdata\local\kometa\kometaup.exe', '32');
DeleteFile('C:\Users\2\appdata\local\microsoft\start menu\вoйти в интeрнeт 2inf.net.exe', '32');
DeleteFile('C:\Program Files\elex-tech\yac\ipcdl.exe', '32');
DeleteFile('C:\Program Files\elex-tech\yac\isafechlp.dll', '32');
DeleteFile('C:\Program Files\elex-tech\yac\uninstall.exe', '32');
DeleteFile('C:\Program Files\skinapp\skinapp.exe', '32');
DeleteService('iSafeKrnl');
DeleteService('iSafeKrnlKit');
DeleteService('iSafeKrnlMon');
DeleteService('iSafeKrnlR3');
DeleteService('iSafeNetFilter');
DeleteService('iSafeKrnlBoot');
DeleteService('{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw');
DeleteService('allnet');
DeleteFileMask('c:\program files\elex-tech', '*', true);
DeleteFileMask('c:\program files\kinoroom browser', '*', true);
DeleteFileMask('c:\users\2\appdata\local\microsoft\extensions', '*', true);
DeleteFileMask('c:\users\2\appdata\local\systemdir', '*', true);
DeleteFileMask('c:\users\2\appdata\local\kometa', '*', true);
DeleteFileMask('c:\program files\skinapp', '*', true);
DeleteDirectory('c:\program files\elex-tech');
DeleteDirectory('c:\program files\kinoroom browser');
DeleteDirectory('c:\users\2\appdata\local\systemdir');
DeleteDirectory('c:\users\2\appdata\local\kometa');
DeleteDirectory('c:\program files\skinapp');
DelBHO('{8dec4b69-27c4-405d-a37d-8d45c83f66ab}');
ExecuteFile('schtasks.exe', '/delete /TN "extsetup" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "nethost task" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Safebrowser" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "appdistrib" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "chrome5" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "chrome5_logon" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{33E3FF35-C31E-471C-852D-6EDB8E27DBBC}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{356933B1-C900-4CD9-A520-6AF912B14F24}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{45D1864B-52E9-4E03-BA64-0C9D6D7B5EA7}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{49362CC1-E8D5-4DC2-BC2F-7996CA9EF6B1}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{4F262D18-036B-42CC-A24A-07EE395F16BC}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{5E239698-FC3E-423B-BDA5-55C300CD9953}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{8B51C74C-66E5-46B3-ACEA-85BE5ADEA5B0}" /F', 0, 15000, true);
BC_ImportALL;
ExecuteSysClean;
BC_DeleteSvc('iSafeKrnl');
BC_DeleteSvc('iSafeKrnlKit');
BC_DeleteSvc('iSafeKrnlMon');
BC_DeleteSvc('iSafeKrnlR3');
BC_DeleteSvc('iSafeNetFilter');
BC_DeleteSvc('iSafeKrnlBoot');
BC_DeleteSvc('{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw');
ExecuteRepair(4);
ExecuteRepair(3);
BC_Activate;
RebootWindows(true);
end.
Компьютер перезагрузится.