Код:
begin
TerminateProcessByName('d:\program files (x86)\elex-tech\yac\isafetray.exe');
TerminateProcessByName('d:\program files (x86)\elex-tech\yac\isafesvc2.exe');
TerminateProcessByName('d:\program files (x86)\elex-tech\yac\isafesvc.exe');
TerminateProcessByName('d:\program files (x86)\firefox\bin\firefoxupdate.exe');
TerminateProcessByName('d:\program files (x86)\amulece\ed2k.exe');
StopService('iSafeKrnlBoot');
StopService('iSafeKrnlR3');
StopService('iSafeKrnlMon');
StopService('iSafeKrnlKit');
StopService('iSafeKrnl');
StopService('WinSAPSvc');
StopService('serverss');
StopService('iThemes5');
StopService('iSafeService');
StopService('FirefoxU');
StopService('ed2kidle');
QuarantineFile('D:\Program Files (x86)\Common Files\Warmstatis\uninstall.dat', '');
QuarantineFile('D:\Program Files (x86)\Common Files\Warmstatis\uninstall.exe', '');
QuarantineFile('D:\ProgramData\wintools\WintoolUprI.exe', '');
QuarantineFile('D:\ProgramData\SearchModule\smhe.js', '');
QuarantineFile('D:\ProgramData\smp2.exe', '');
QuarantineFile('D:\Users\Admini\AppData\Roaming\Event Monitor\em.exe', '');
QuarantineFile('D:\Users\Admini\AppData\Local\BrowserAir\48.0.0.0\updater.exe', '');
QuarantineFile('D:\Program Files (x86)\Cizeck\plubapy.exe', '');
QuarantineFile('D:\Program Files (x86)\Cherperksterrot Engine\local64spl.dll', '');
QuarantineFile('D:\Users\Admini\AppData\Roaming\WinSAPSvc\WinSAP.dll', '');
QuarantineFileF('D:\Program Files (x86)\Cizeck', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('D:\Program Files (x86)\Common Files\Warmstatis', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFile('D:\Windows\system32\DRIVERS\iSafeKrnlBoot.sys', '');
QuarantineFile('D:\Windows\Temp\86D3.tmp', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys', '');
QuarantineFile('d:\program files (x86)\gubed\gubedzl.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\SSLEAY32.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\sqlite3.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\libpng.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\LIBEAY32.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\libcurl.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iTPPush.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iTPProtect.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iTPNodisturb.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iTPMsgCenter.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iTPFloaty.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iTPDesk.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iTPAutoClean.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSvc2.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSvc.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\isafeupbiz.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\isaferpt.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\isafepxy.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafenpf.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\isafemc.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMonCall.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlCall.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeDisp.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafebs.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeBase.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeAdless.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\ipcproxy.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iImportLib.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iCommu.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\iCommon.dll', '');
QuarantineFile('D:\Program Files (x86)\Elex-tech\YAC\curlpp.dll', '');
QuarantineFile('D:\Program Files (x86)\Common Files\Services\iThemes.dll', '');
QuarantineFile('d:\program files (x86)\elex-tech\yac\isafetray.exe', '');
QuarantineFile('d:\program files (x86)\elex-tech\yac\isafesvc2.exe', '');
QuarantineFile('d:\program files (x86)\elex-tech\yac\isafesvc.exe', '');
QuarantineFile('d:\program files (x86)\firefox\bin\firefoxupdate.exe', '');
QuarantineFile('d:\program files (x86)\amulece\ed2k.exe', '');
DeleteFile('d:\program files (x86)\elex-tech\yac\isafesvc2.exe', '32');
DeleteFile('d:\program files (x86)\elex-tech\yac\isafetray.exe', '32');
DeleteFile('D:\Program Files (x86)\Common Files\Services\iThemes.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\curlpp.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iCommon.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iCommu.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iImportLib.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\ipcproxy.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeAdless.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeBase.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafebs.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeDisp.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlCall.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMonCall.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\isafemc.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafenpf.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\isafepxy.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\isaferpt.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\isafeupbiz.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSvc.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSvc2.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iTPAutoClean.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iTPDesk.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iTPFloaty.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iTPMsgCenter.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iTPNodisturb.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iTPProtect.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iTPPush.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\libcurl.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\LIBEAY32.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\libpng.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\sqlite3.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\SSLEAY32.dll', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys', '32');
DeleteFile('D:\Program Files (x86)\amuleCe\ed2k.exe', '32');
DeleteFile('D:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe', '32');
DeleteFile('D:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe', '32');
DeleteFile('D:\Windows\Temp\86D3.tmp', '32');
DeleteFile('D:\Windows\system32\DRIVERS\iSafeKrnlBoot.sys', '32');
DeleteFile('D:\Program Files (x86)\Gubed\GubedZL.dll', '32');
DeleteFile('D:\Users\Admini\AppData\Roaming\WinSAPSvc\WinSAP.dll', '32');
DeleteFile('D:\Program Files (x86)\Cherperksterrot Engine\local64spl.dll', '32');
DeleteFile('D:\Program Files (x86)\Cizeck\plubapy.exe', '32');
DeleteFile('D:\Users\Admini\AppData\Local\BrowserAir\48.0.0.0\updater.exe', '32');
DeleteFile('D:\Users\Admini\AppData\Roaming\Event Monitor\em.exe', '32');
DeleteFile('D:\ProgramData\smp2.exe', '32');
DeleteFile('D:\ProgramData\SearchModule\smhe.js', '32');
DeleteFile('D:\ProgramData\wintools\WintoolUprI.exe', '32');
DeleteFile('D:\Program Files (x86)\Common Files\Warmstatis\uninstall.exe', '32');
DeleteFile('D:\Program Files (x86)\Common Files\Warmstatis\uninstall.dat', '32');
DeleteService('iSafeKrnlBoot');
DeleteService('iSafeKrnlR3');
DeleteService('iSafeKrnlMon');
DeleteService('iSafeKrnlKit');
DeleteService('iSafeKrnl');
DeleteService('WinSAPSvc');
DeleteService('serverss');
DeleteService('iThemes5');
DeleteService('iSafeService');
DeleteService('FirefoxU');
DeleteService('ed2kidle');
DeleteFileMask('D:\Program Files (x86)\Common Files\Warmstatis', '*', true);
DeleteFileMask('D:\Users\Admini\AppData\Roaming\WinSAPSvc', '*', true);
DeleteFileMask('D:\Program Files (x86)\Elex-tech\YAC', '*', true);
DeleteFileMask('d:\program files (x86)\amulece', '*', true);
DeleteDirectory('CD:\Program Files (x86)\Common Files\Warmstatis');
DeleteDirectory('D:\Users\Admini\AppData\Roaming\WinSAPSvc');
DeleteDirectory('D:\Program Files (x86)\Elex-tech\YAC');
DeleteDirectory('d:\program files (x86)\amulece');
DelBHO('{8E8F97CD-60B5-456F-A201-73065652D099}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Services\GubedZL\Parameters', 'ServiceDll');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Services\WinSAPSvc\Parameters', 'ServiceDll');
ExecuteSysClean;
ExecuteRepair(2);
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 2, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.
Компьютер будет перезагружен.