begin
DeleteFile('C:\Windows\System32\Drivers\360AntiHacker64.sys', '32');
DeleteFile('C:\Windows\system32\DRIVERS\360AvFlt.sys', '32');
DeleteFile('C:\Windows\system32\DRIVERS\360Box64.sys', '32');
DeleteFile('C:\Windows\system32\DRIVERS\360FsFlt.sys', '32');
DeleteFile('C:\Windows\system32\DRIVERS\BAPIDRV64.sys', '32');
DeleteFile('C:\Windows\system32\DRIVERS\rsutils.sys', '32');
DeleteFile('C:\Windows\system32\DRIVERS\sysmon.sys', '32');
DeleteFile('C:\Program Files (x86)\Rising\RAV\rsdelaylauncher.exe', '32');
DeleteFile('C:\Program Files (x86)\Rising\RAV\wbprotect.dll', '32');
DeleteFile('c:\program files (x86)\rising\rav\ravmond.exe', '32');
DeleteFile('c:\program files (x86)\rising\rsd\rsmgrsvc.exe', '32');
DeleteFile('c:\program files (x86)\rising\rav\rstray.exe', '32');
DeleteService('sysmon');
DeleteService('rsutils');
DeleteService('BAPIDRV');
DeleteService('360FsFlt');
DeleteService('360Box64');
DeleteService('RsRavMon');
DeleteService('RsMgrSvc');
DeleteService('360AvFlt');
DeleteService('360AntiHacker');
DeleteFileMask('C:\Program Files (x86)\Rising', '*', true);
DeleteDirectory('C:\Program Files (x86)\Rising');
DelBHO('{B69F34DD-F0F9-42DC-9EDD-957187DA688D}');
ExecuteFile('schtasks.exe', '/delete /TN "RsDelayLauncher_{8A34248E-7D35-4832-8378-7659E0B0A380}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{DF6323AD-1E58-4E4F-BD3F-CC7D1F2F5DFE}" /F', 0, 15000, true);
DelCLSID('{63332668-8CE1-445D-A5EE-25929176714E}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GoogleChromeAutoLaunch_98D5BFA13B21B1F6BD544833CA6BEA23', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Run', 'RavTRAY');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved', '{63332668-8CE1-445D-A5EE-25929176714E}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved', '{CBDECEF7-7A29-4cbf-A009-2673D82C7BF9}');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ QQPCTray', 'command');
RegKeyParamDel('HKEY_LOCAL_MACHINE', 'SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iLivid', 'command');
ExecuteSysClean;
RebootWindows(true);
end.
