begin
TerminateProcessByName('c:\program files (x86)\35453035-1449414183-3635-4235-4532ffffffff\jnsk3b35.tmp');
TerminateProcessByName('c:\program files (x86)\35453035-1449414183-3635-4235-4532ffffffff\knsf87ee.tmp');
TerminateProcessByName('c:\users\aace~1\appdata\local\temp\2233113\mailruhomesearch.exe');
TerminateProcessByName('c:\users\aace~1\appdata\local\temp\6926316\mailruhomesearch.exe');
TerminateProcessByName('c:\users\Дмитрий\appdata\local\mail.ru\mailruupdater.exe');
TerminateProcessByName('c:\program files (x86)\mail.ru\mailruupdater\mailruupdater.exe');
TerminateProcessByName('c:\users\aace~1\appdata\local\temp\nsme4a2.tmp');
TerminateProcessByName('c:\users\aace~1\appdata\local\temp\nss16d8.tmp');
TerminateProcessByName('c:\users\дмитрий\appdata\local\temp\e65b6dd8-111d02a0-52a0627c-24e2be9c\ogtubaupdrl.exe');
TerminateProcessByName('c:\programdata\tmp0x0x\protectwindowsmanager.exe');
TerminateProcessByName('c:\windows\syswow64\searchprotectservice.exe');
TerminateProcessByName('c:\users\Дмитрий\appdata\local\35453035-1449435878-3635-4235-4532ffffffff\snsre497.tmp');
StopService('ginoquci');
StopService('nukynyde');
StopService('WindowsMangerProtect');
StopService('woforemu');
StopService('roqenufe');
StopService('SPS');
StopService('Updater.Mail.Ru');
StopService('contentdefenderdrv');
QuarantineFile('c:\program files (x86)\35453035-1449414183-3635-4235-4532ffffffff\jnsk3b35.tmp', '');
QuarantineFile('c:\program files (x86)\35453035-1449414183-3635-4235-4532ffffffff\knsf87ee.tmp', '');
QuarantineFile('c:\users\aace~1\appdata\local\temp\2233113\mailruhomesearch.exe', '');
QuarantineFile('c:\users\aace~1\appdata\local\temp\6926316\mailruhomesearch.exe', '');
QuarantineFile('c:\users\Дмитрий\appdata\local\mail.ru\mailruupdater.exe', '');
QuarantineFile('c:\program files (x86)\mail.ru\mailruupdater\mailruupdater.exe', '');
QuarantineFile('c:\users\aace~1\appdata\local\temp\nsme4a2.tmp', '');
QuarantineFile('c:\users\aace~1\appdata\local\temp\nss16d8.tmp', '');
QuarantineFile('c:\users\дмитрий\appdata\local\temp\e65b6dd8-111d02a0-52a0627c-24e2be9c\ogtubaupdrl.exe', '');
QuarantineFile('c:\programdata\tmp0x0x\protectwindowsmanager.exe', '');
QuarantineFile('c:\windows\syswow64\searchprotectservice.exe', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Local\Kit Follow\{EF516A6F-1B5F-8C94-D64C-DB5385F47083}\KitFollow.dll', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Local\Kit Follow\{EF516A6F-1B5F-8C94-D64C-DB5385F47083}\dqo.dll', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Local\Kit Follow\{EF516A6F-1B5F-8C94-D64C-DB5385F47083}\{F79275BB-65E9-16F4-3C9D-95A94F3BFDD3}.dat', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Local\35453035-1449435878-3635-4235-4532FFFFFFFF\snsrE497.tmp', '');
QuarantineFile('C:\Program Files\Content Defender\ContentDefender.exe', '');
QuarantineFile('C:\WINDOWS\system32\drivers\contentdefenderdrv.sys', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Roaming\ASPackage\ASPackage.exe', '');
QuarantineFile('C:\WINDOWS\system32\GroupPolicy\Machine\Registry.pol', '');
QuarantineFile('C:\WINDOWS\system32\GroupPolicy\Machine\R', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Local\Mail.ru\Sputnik\ptls\mailruhomesearch.exe', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Local\lcoupon\lcupstbl.exe', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Local\lcoupon\config.json', '');
QuarantineFile('C:\ProgramData\Tmp0x0x\P', '');
QuarantineFile('C:\Users\Дмитрий\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll', '');
QuarantineFile('C:\Program Files (x86)\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe', '');
QuarantineFile('c:\users\дмитрий\appdata\local\temp\e65b6dd8-111d02a0-52a0627c-24e2be9c\ywskazcxdl4ca.exe', '');
QuarantineFile('C:\WINDOWS\system32\searchprotectservice.exe', '');
DeleteFile('c:\program files (x86)\35453035-1449414183-3635-4235-4532ffffffff\jnsk3b35.tmp', '32');
DeleteFile('c:\program files (x86)\35453035-1449414183-3635-4235-4532ffffffff\knsf87ee.tmp', '32');
DeleteFile('c:\users\aace~1\appdata\local\temp\2233113\mailruhomesearch.exe', '32');
DeleteFile('c:\users\aace~1\appdata\local\temp\6926316\mailruhomesearch.exe', '32');
DeleteFile('c:\users\Дмитрий\appdata\local\mail.ru\mailruupdater.exe', '32');
DeleteFile('c:\program files (x86)\mail.ru\mailruupdater\mailruupdater.exe', '32');
DeleteFile('c:\users\aace~1\appdata\local\temp\nsme4a2.tmp', '32');
DeleteFile('c:\users\aace~1\appdata\local\temp\nss16d8.tmp', '32');
DeleteFile('c:\users\дмитрий\appdata\local\temp\e65b6dd8-111d02a0-52a0627c-24e2be9c\ogtubaupdrl.exe', '32');
DeleteFile('c:\programdata\tmp0x0x\protectwindowsmanager.exe', '32');
DeleteFile('c:\windows\syswow64\searchprotectservice.exe', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Local\Kit Follow\{EF516A6F-1B5F-8C94-D64C-DB5385F47083}\KitFollow.dll', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Local\Kit Follow\{EF516A6F-1B5F-8C94-D64C-DB5385F47083}\dqo.dll', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Local\Kit Follow\{EF516A6F-1B5F-8C94-D64C-DB5385F47083}\{F79275BB-65E9-16F4-3C9D-95A94F3BFDD3}.dat', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Local\35453035-1449435878-3635-4235-4532FFFFFFFF\snsrE497.tmp', '32');
DeleteFile('C:\Program Files\Content Defender\ContentDefender.exe', '32');
DeleteFile('nyneryxo.sys', '32');
DeleteFile('C:\WINDOWS\system32\drivers\contentdefenderdrv.sys', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Roaming\ASPackage\ASPackage.exe', '32');
DeleteFile('C:\WINDOWS\system32\GroupPolicy\Machine\Registry.pol', '32');
DeleteFile('C:\WINDOWS\system32\GroupPolicy\Machine\R', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Local\Mail.ru\Sputnik\ptls\mailruhomesearch.exe', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Local\lcoupon\lcupstbl.exe', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Local\lcoupon\config.json', '32');
DeleteFile('C:\ProgramData\Tmp0x0x\P', '32');
DeleteFile('C:\Users\Дмитрий\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll', '32');
DeleteFile('C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe', '32');
DeleteFile('C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe', '32');
DeleteFile('C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe', '32');
DeleteFile('C:\Program Files (x86)\SwiftSearch_1.10.0.25\Update\SwiftSearchAutoUpdateClient.exe', '32');
DeleteFile('c:\users\дмитрий\appdata\local\temp\e65b6dd8-111d02a0-52a0627c-24e2be9c\ywskazcxdl4ca.exe', '32');
DeleteFile('C:\WINDOWS\system32\searchprotectservice.exe', '32');
DeleteService('ginoquci');
DeleteService('nukynyde');
DeleteService('WindowsMangerProtect');
DeleteService('woforemu');
DeleteService('ContentDefender');
DeleteService('nyneryxo');
DeleteService('roqenufe');
DeleteService('SPS');
DeleteService('Updater.Mail.Ru');
DeleteService('contentdefenderdrv');
DeleteFileMask('c:\users\Дмитрий\appdata\local\mail.ru', '*', true);
DeleteFileMask('c:\program files (x86)\mail.ru', '*', true);
DeleteFileMask('c:\programdata\tmp0x0x', '*', true);
DeleteFileMask('C:\Users\Дмитрий\AppData\Local\Kit Follow', '*', true);
DeleteFileMask('C:\Program Files\Content Defender', '*', true);
DeleteFileMask('C:\Users\Дмитрий\AppData\Roaming\ASPackage', '*', true);
DeleteFileMask('C:\Users\Дмитрий\AppData\Local\lcoupon', '*', true);
DeleteFileMask('C:\Program Files (x86)\IObit', '*', true);
DeleteFileMask('C:\Program Files (x86)\SwiftSearch_1.10.0.25', '*', true);
DeleteDirectory('c:\users\Дмитрий\appdata\local\mail.ru');
DeleteDirectory('c:\program files (x86)\mail.ru');
DeleteDirectory('c:\programdata\tmp0x0x');
DeleteDirectory('C:\Users\Дмитрий\AppData\Local\Kit Follow');
DeleteDirectory('C:\Program Files\Content Defender');
DeleteDirectory('C:\Users\Дмитрий\AppData\Roaming\ASPackage');
DeleteDirectory('C:\Users\Дмитрий\AppData\Local\lcoupon');
DeleteDirectory('C:\Program Files (x86)\IObit');
DeleteDirectory('C:\Program Files (x86)\SwiftSearch_1.10.0.25');
DelBHO('{8E8F97CD-60B5-456F-A201-73065652D099}');
DelBHO('{0633EE93-D776-472f-A0FF-E1416B8B2E3D}');
ExecuteFile('schtasks.exe', '/delete /TN "Driver Booster Scan" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Driver Booster SkipUAC (Дмитрий)" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Driver Booster Update" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Kit Follow" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Kit Follow2" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "SwiftSearch Auto Updater 1.10.0" /F', 0, 15000, true);
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'Update');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'C');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'mailruhomesearch');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'lcoupon');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'MailRuUpdater');
ExecuteSysClean;
ExecuteRepair(23);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.