Код:
begin
TerminateProcessByName('c:\windows\inf\netlibrariestip\000d\1049\5.0\sql\lsm.exe');
TerminateProcessByName('c:\windows\inf\axperflib\0010\0011\000e\0015\mms.exe');
TerminateProcessByName('c:\windows\inf\axperflib\0010\0011\000a\0010\mms.exe');
TerminateProcessByName('c:\windows\inf\netlibrariestip\000d\1049\5.0\1049\5.0\mms.exe');
TerminateProcessByName('c:\windows\inf\netlibrariestip\000d\1049\5.0\1049\5.0\spoolsv.exe');
TerminateProcessByName('c:\windows\inf\axperflib\0010\0011\0015\0016\axperflib\spsvc.exe');
TerminateProcessByName('c:\windows\inf\netlibrariestip\000d\1049\5.0\sql\ssms.exe');
TerminateProcessByName('c:\windows\inf\axperflib\0010\0011\000e\0015\taskhostex.exe');
TerminateProcessByName('c:\windows\inf\axperflib\0010\0011\000a\0010\vmms.exe');
TerminateProcessByName('c:\windows\inf\netlibrariestip\0009\v3.5.56385\1049\5.0\wahiver.exe');
TerminateProcessByName('c:\program files\common files\microsoft shared\system\webisida.browser.exe');
StopService('spoolsrvrs');
StopService('wcvvses');
StopService('werlsfks');
StopService('wscsvs');
QuarantineFile('c:\windows\inf\netlibrariestip\000d\1049\5.0\sql\lsm.exe', '');
QuarantineFile('c:\windows\inf\axperflib\0010\0011\000e\0015\mms.exe', '');
QuarantineFile('c:\windows\inf\axperflib\0010\0011\000a\0010\mms.exe', '');
QuarantineFile('c:\windows\inf\netlibrariestip\000d\1049\5.0\1049\5.0\mms.exe', '');
QuarantineFile('c:\windows\inf\netlibrariestip\000d\1049\5.0\1049\5.0\spoolsv.exe', '');
QuarantineFile('c:\windows\inf\axperflib\0010\0011\0015\0016\axperflib\spsvc.exe', '');
QuarantineFile('c:\windows\inf\netlibrariestip\000d\1049\5.0\sql\ssms.exe', '');
QuarantineFile('c:\windows\inf\axperflib\0010\0011\000e\0015\taskhostex.exe', '');
QuarantineFile('c:\windows\inf\axperflib\0010\0011\000a\0010\vmms.exe', '');
QuarantineFile('c:\windows\inf\netlibrariestip\0009\v3.5.56385\1049\5.0\wahiver.exe', '');
QuarantineFile('c:\program files\common files\microsoft shared\system\webisida.browser.exe', '');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\System\gecko\MemIPC.dll', '');
QuarantineFile('C:\Program Files\MPK\MPK.exe', '');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\System\settings.exe', '');
DeleteFile('c:\windows\inf\netlibrariestip\000d\1049\5.0\sql\lsm.exe', '32');
DeleteFile('c:\windows\inf\axperflib\0010\0011\000e\0015\mms.exe', '32');
DeleteFile('c:\windows\inf\axperflib\0010\0011\000a\0010\mms.exe', '32');
DeleteFile('c:\windows\inf\netlibrariestip\000d\1049\5.0\1049\5.0\mms.exe', '32');
DeleteFile('c:\windows\inf\netlibrariestip\000d\1049\5.0\1049\5.0\spoolsv.exe', '32');
DeleteFile('c:\windows\inf\axperflib\0010\0011\0015\0016\axperflib\spsvc.exe', '32');
DeleteFile('c:\windows\inf\netlibrariestip\000d\1049\5.0\sql\ssms.exe', '32');
DeleteFile('c:\windows\inf\axperflib\0010\0011\000e\0015\taskhostex.exe', '32');
DeleteFile('c:\windows\inf\axperflib\0010\0011\000a\0010\vmms.exe', '32');
DeleteFile('c:\windows\inf\netlibrariestip\0009\v3.5.56385\1049\5.0\wahiver.exe', '32');
DeleteFile('c:\program files\common files\microsoft shared\system\webisida.browser.exe', '32');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\System\gecko\MemIPC.dll', '32');
DeleteFile('C:\Program Files\MPK\MPK.exe', '32');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\System\settings.exe', '32');
DeleteFile('svchost.exe', '32');
DeleteService('spoolsrvrs');
DeleteService('wcvvses');
DeleteService('werlsfks');
DeleteService('wscsvs');
DeleteFileMask('c:\windows\inf\netlibrariestip', '*', true);
DeleteFileMask('c:\program files\common files\microsoft shared\system', '*', true);
DeleteDirectory('c:\windows\inf\netlibrariestip');
DeleteDirectory('c:\program files\common files\microsoft shared\system');
ExecuteFile('schtasks.exe', '/delete /TN "Adobe Reader" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "GoogleUpdateTaskMashine" /F', 0, 15000, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
RebootWindows(true);
end.
Компьютер перезагрузится.