Код:
begin
TerminateProcessByName('C:\Program Files\BitTorrent\BitTorrent.exe');
TerminateProcessByName('c:\programdata\prefssecure\nettrans.exe');
TerminateProcessByName('c:\programdata\logic cramble\set.exe');
TerminateProcessByName('c:\users\user\documents\winsos\windll.exe');
StopService('backlh');
StopService('BitTorrent');
StopService('Nettrans');
QuarantineFile('C:\Program Files\BitTorrent\BitTorrent.exe', '');
QuarantineFile('c:\programdata\prefssecure\nettrans.exe', '');
QuarantineFile('c:\programdata\logic cramble\set.exe', '');
QuarantineFile('c:\users\user\documents\winsos\windll.exe', '');
QuarantineFile('C:\Users\User\AppData\Local\Technozone.exe', '');
QuarantineFile('C:\ProgramData\locep\locep.exe', '');
QuarantineFile('C:\Program Files\UBar\UbarDriver.sys', '');
QuarantineFile('C:\ProgramData\locep\Zaamhold.dll', '');
QuarantineFile('C:\ProgramData\locep\Treebam.dll', '');
QuarantineFile('C:\Program Files (x86)\Thencult Update\local64spl.dll', '');
QuarantineFile('C:\Windows\Manager.exe', '');
DeleteFile('C:\Program Files\BitTorrent\BitTorrent.exe', '32');
DeleteFile('c:\programdata\prefssecure\nettrans.exe', '32');
DeleteFile('c:\programdata\logic cramble\set.exe', '32');
DeleteFile('c:\users\user\documents\winsos\windll.exe', '32');
DeleteFile('C:\Users\User\AppData\Local\Technozone.exe', '32');
DeleteFile('C:\ProgramData\locep\locep.exe', '32');
DeleteFile('C:\Program Files\UBar\UbarDriver.sys', '32');
DeleteFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soci2Sear Browser Enhancer\Social2Search Website.lnk', '32');
DeleteFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soci2Sear Browser Enhancer\Settings.lnk', '32');
DeleteFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soci2Sear Browser Enhancer\SignIn with Twitter.lnk', '32');
DeleteFile('C:\Users\User\Favorites\Mail.Ru.url', '32');
DeleteFile('C:\Users\User\Favorites\Mail.Ru Агент - используй для общения!.url', '32');
DeleteFile('C:\ProgramData\locep\Zaamhold.dll', '32');
DeleteFile('C:\ProgramData\locep\Treebam.dll', '32');
DeleteFile('C:\Program Files (x86)\Thencult Update\local64spl.dll', '32');
DeleteFile('C:\Windows\Manager.exe', '32');
DeleteFile('C:\ProgramData\locep\Biolam.reg', '32');
DeleteFile('C:\ProgramData\locep\Haylax.reg', '32');
DeleteFile('C:\ProgramData\locep\Solo-Phase.reg', '32');
DeleteFile('C:\ProgramData\locep\U-fan.reg', '32');
DeleteFile('C:\ProgramData\locep\DentoFix.reg', '32');
DeleteFile('C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk');
DeleteService('backlh');
DeleteService('BitTorrent');
DeleteService('Nettrans');
DeleteService('downloadiosnload');
DeleteService('locep');
DeleteService('UbarCalloutDriver');
DeleteFileMask('c:\program files\bittorrent', '*', true);
DeleteFileMask('c:\programdata\prefssecure', '*', true);
DeleteFileMask('c:\programdata\logic cramble', '*', true);
DeleteFileMask('c:\users\user\documents\winsos', '*', true);
DeleteFileMask('c:\programdata\locep', '*', true);
DeleteFileMask('c:\program files\ubar', '*', true);
DeleteFileMask('c:\program files (x86)\thencult update', '*', true);
DeleteDirectory('c:\program files\bittorrent');
DeleteDirectory('c:\programdata\prefssecure');
DeleteDirectory('c:\programdata\logic cramble');
DeleteDirectory('c:\users\user\documents\winsos');
DeleteDirectory('c:\programdata\locep');
DeleteDirectory('c:\program files\ubar');
DeleteDirectory('c:\program files (x86)\thencult update');
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\Multimedia\Manager" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "psv_FreeStrong" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "psv_MathIty" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "psv_Tamtrax" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "psv_Yearphase" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "psv_Zonedox" /F', 0, 15000, true);
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'MicroUpdate');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.