Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
QuarantineFile('C:\Users\User\AppData\Local\config\python\pythonw.exe', '');
QuarantineFile('C:\Users\User\AppData\Local\config\updater.py', '');
QuarantineFile('C:\Users\User\AppData\Local\mrJWF\cNJ.py', '');
QuarantineFile('C:\Users\User\AppData\Local\PEmpA\URnzlRt.py', '');
QuarantineFile('C:\Users\User\AppData\Local\Programs\Python\Python36-32\pythonw.exe', '');
QuarantineFile('C:\Users\User\AppData\Local\Uiyld\KXpsy.py', '');
QuarantineFile('C:\Users\User\AppData\Local\ZTGBA\QYLNR.py', '');
QuarantineFileF('c:\users\user\appdata\local\mrjwf', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\users\user\appdata\local\pempa', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\users\user\appdata\local\uiyld', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', true, '', 0 , 0);
QuarantineFileF('c:\users\user\appdata\local\ztgba', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', true, '', 0 , 0);
DeleteFile('C:\Users\User\AppData\Local\config\python\pythonw.exe', '64');
DeleteFile('C:\Users\User\AppData\Local\config\updater.py', '64');
DeleteFile('C:\Users\User\AppData\Local\mrJWF\cNJ.py', '64');
DeleteFile('C:\Users\User\AppData\Local\PEmpA\URnzlRt.py', '64');
DeleteFile('C:\Users\User\AppData\Local\Programs\Python\Python36-32\pythonw.exe', '64');
DeleteFile('C:\Users\User\AppData\Local\Uiyld\KXpsy.py', '64');
DeleteFile('C:\Users\User\AppData\Local\ZTGBA\QYLNR.py', '64');
DeleteFileMask('c:\users\user\appdata\local\config', '*', true);
DeleteFileMask('c:\users\user\appdata\local\mrjwf', '*', true);
DeleteFileMask('c:\users\user\appdata\local\pempa', '*', true);
DeleteFileMask('c:\users\user\appdata\local\uiyld', '*', true);
DeleteFileMask('c:\users\user\appdata\local\ztgba', '*', true);
DeleteDirectory('c:\users\user\appdata\local\config');
DeleteDirectory('c:\users\user\appdata\local\mrjwf');
DeleteDirectory('c:\users\user\appdata\local\pempa');
DeleteDirectory('c:\users\user\appdata\local\uiyld');
DeleteDirectory('c:\users\user\appdata\local\ztgba');
DeleteSchedulerTask('EFMYBU');
DeleteSchedulerTask('EJXS');
DeleteSchedulerTask('HREVNQ');
DeleteSchedulerTask('HXAYEK');
DeleteSchedulerTask('LXYHKR');
DeleteSchedulerTask('System config updates');
DeleteSchedulerTask('TRUP');
DeleteSchedulerTask('VNGLUB');
DeleteSchedulerTask('VVAD');
DeleteSchedulerTask('VXWJ');
DeleteSchedulerTask('XZYU');
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
ExecuteRepair(22);
ExecuteRepair(23);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.