Код:
begin
TerminateProcessByName('C:\Users\Ромарио\AppData\Roaming\DarkSoulsIII\Realtek HD\rthdcpl.exe');
QuarantineFileF('c:\users\ромарио\appdata\roaming\darksoulsiii\realtek hd', '*.exe', true, '', 0 , 0);
QuarantineFileF('c:\programdata\microsoft\adobe\flash player\bc058291-d040-4f03-b947-921f4f6f4c53', '*', true, '', 0 , 0);
QuarantineFileF('c:\programdata\krb updater utility', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\users\ромарио\appdata\local\systemdir', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('C:\Users\Ромарио\AppData\Roaming\DarkSoulsIII\Realtek HD\rthdcpl.exe', '');
QuarantineFile('C:\Program Files\UBar\UbarDriver.sys', '');
QuarantineFile('C:\ProgramData\Microsoft\Adobe\Flash Player\BC058291-D040-4F03-B947-921F4F6F4C53\DF930FAB-9606-48CC-A43E-BB91362BF411.exe', '');
QuarantineFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '');
QuarantineFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\1073e238-02db-4ecf-a9a0-9d114cc37ad3-7.exe', '');
QuarantineFile('C:\ProgramData\KRB Updater Utility\krbupdater-utility.exe', '');
QuarantineFile('C:\Users\Ромарио\AppData\Local\SystemDir\nethost.exe', '');
DeleteFile('C:\Windows\Tasks\APSnotifierPP1.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP2.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP3.job', '64');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job', '64');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job', '64');
DeleteFile('C:\Windows\Tasks\ReSWMnqZgDK6Xt9PSjRWCBH.job', '32');
DeleteFile('C:\Windows\Tasks\X5QUlNiCz5F.job', '32');
DeleteFile('C:\Users\Ромарио\AppData\Roaming\DarkSoulsIII\Realtek HD\rthdcpl.exe', '32');
DeleteFile('C:\Program Files\UBar\UbarDriver.sys', '32');
DeleteFile('C:\ProgramData\Microsoft\Adobe\Flash Player\BC058291-D040-4F03-B947-921F4F6F4C53\DF930FAB-9606-48CC-A43E-BB91362BF411.exe', '32');
DeleteFile('C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe', '32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe', '32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\1073e238-02db-4ecf-a9a0-9d114cc37ad3-7.exe', '32');
DeleteFile('C:\ProgramData\KRB Updater Utility\krbupdater-utility.exe', '32');
DeleteFile('C:\Users\Ромарио\AppData\Local\SystemDir\nethost.exe', '32');
DeleteService('UbarCalloutDriver');
DeleteFileMask('c:\users\ромарио\appdata\roaming\darksoulsiii\realtek hd', '*', true);
DeleteFileMask('c:\program files\ubar', '*', true);
DeleteFileMask('c:\program files (x86)\anyprotectex', '*', true);
DeleteFileMask('c:\program files (x86)\globalupdate', '*', true);
DeleteFileMask('c:\program files (x86)\ciplus-4.5vv18.08', '*', true);
DeleteFileMask('c:\programdata\krb updater utility', '*', true);
DeleteFileMask('c:\users\ромарио\appdata\local\systemdir', '*', true);
DeleteDirectory('c:\users\ромарио\appdata\roaming\darksoulsiii\realtek hd');
DeleteDirectory('c:\program files\ubar');
DeleteDirectory('c:\program files (x86)\anyprotectex');
DeleteDirectory('c:\program files (x86)\globalupdate');
DeleteDirectory('c:\program files (x86)\ciplus-4.5vv18.08');
DeleteDirectory('c:\programdata\krb updater utility');
DeleteDirectory('c:\users\ромарио\appdata\local\systemdir');
ExecuteFile('schtasks.exe', '/delete /TN "1073e238-02db-4ecf-a9a0-9d114cc37ad3-7" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP1" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "APSnotifierPP2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineCore" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "globalUpdateUpdateTaskMachineUA" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "KRB Updater Utility" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\BC058291-D040-4F03-B947-921F4F6F4C53" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "nethost task" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Realtek HD Audio" /F', 0, 15000, true);
ExecuteFile('ipconfig.exe', '/flushdns', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run', 'BC058291-D040-4F03-B947-921F4F6F4C53');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
ExecuteSysClean;
ExecuteRepair(21);
RebootWindows(true);
end.
Компьютер перезагрузится.