begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
TerminateProcessByName('c:\users\vadik\appdata\local\temp\pps-qq-19.exe');
StopService('TSSysKit');
StopService('TS888x64');
StopService('TFsFlt');
StopService('TAOKernelDriver');
StopService('TAOAccelerator');
StopService('softaal');
StopService('QQSysMonX64');
StopService('QMUdisk');
StopService('QQPCRTP');
StopService('HomePageDefender Service');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\TSSysKit64.sys','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\TS888x64.sys','');
QuarantineFile('C:\Windows\system32\Drivers\TFsFltX64.sys','');
QuarantineFile('C:\Windows\system32\Drivers\TAOKernelEx64.sys','');
QuarantineFile('C:\Windows\system32\Drivers\TAOAccelerator64.sys','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\softaal64.sys','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\QQSysMonX64.sys','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\QMUdisk64.sys','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\QQPCRTP.exe','');
QuarantineFile('C:\Program Files (x86)\HomePageDefender\HpDefSrv.exe','');
QuarantineFile('c:\users\vadik\appdata\local\temp\pps-qq-19.exe', '');
QuarantineFile('C:\Users\Vadik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk', '');
QuarantineFile('C:\Users\Vadik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk', '');
QuarantineFile('C:\Users\Vadik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk', '');
QuarantineFile('C:\Users\Public\Desktop\Google Chrome.lnk', '');
QuarantineFile('C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk', '');
QuarantineFile('C:\Program Files (x86)\HomePageDefender\Stuff.exe', '');
QuarantineFileF('C:\Program Files (x86)\HomePageDefender', '*', true, '', 0, 0);
DeleteFile('C:\Program Files (x86)\HomePageDefender\HpDefSrv.exe','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\QQPCRTP.exe','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\QMUdisk64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\QQSysMonX64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\softaal64.sys','32');
DeleteFile('C:\Windows\system32\Drivers\TAOAccelerator64.sys','32');
DeleteFile('C:\Windows\system32\Drivers\TAOKernelEx64.sys','32');
DeleteFile('C:\Windows\system32\Drivers\TFsFltX64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\TS888x64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\11.3.17195.214\TSSysKit64.sys','32');
DeleteFile('c:\users\vadik\appdata\local\temp\pps-qq-19.exe', '32');
DeleteFile('C:\Program Files (x86)\HomePageDefender\Stuff.exe', '');
DeleteService('TSSysKit');
DeleteService('TS888x64');
DeleteService('TFsFlt');
DeleteService('TAOKernelDriver');
DeleteService('TAOAccelerator');
DeleteService('softaal');
DeleteService('QQSysMonX64');
DeleteService('QMUdisk');
DeleteService('QQPCRTP');
DeleteService('HomePageDefender Service');
DeleteFileMask('C:\Program Files (x86)\HomePageDefender', '*', true);
DeleteDirectory('C:\Program Files (x86)\HomePageDefender');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','QQPCTray');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','pps-qq-19');
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
ExecuteSysClean;
ExecuteRepair(3);
ExecuteWizard('SCU', 2, 3, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.
(
