Bizigames. org, Как лечить?

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
QuarantineFile('C:\Users\CD86~1\AppData\Local\Temp\start.exe','');
 QuarantineFile('C:\Users\CD86~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE','');
 QuarantineFile('C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe','');
 DeleteFile('C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe','32');
 DeleteFile('C:\Users\CD86~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE','32');
 DeleteFile('C:\Windows\Tasks\DSite.job','64');
 DeleteFile('C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job','64');
 DeleteFile('C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job','64');
 DeleteFile('C:\Windows\system32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore','64');
 DeleteFile('C:\Windows\system32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA','64');
 DeleteFile('C:\Windows\system32\Tasks\DSite','64');
 DeleteFile('C:\Users\CD86~1\AppData\Local\Temp\start.exe','32');
 DeleteFile('C:\Windows\system32\Tasks\WdfHG','64');
 DeleteFile('C:\Users\Алексей\appdata\roaming\acestream\engine\lib\ctools.dll','32');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','CMD');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(9); 
RebootWindows(false);
end.

begin
CreateQurantineArchive('c:\quarantine.zip');
end.

start
CreateRestorePoint:
HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1
HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-3745773413-1458168362-3701131968-1000\...\Policies\system: [NoInternetOpenWith ] 1
HKU\S-1-5-21-3745773413-1458168362-3701131968-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3745773413-1458168362-3701131968-1000\...\Policies\Explorer: [NoRecentDocsMenu] 0x01000000
HKU\S-1-5-21-3745773413-1458168362-3701131968-1000\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKU\S-1-5-21-3745773413-1458168362-3701131968-1000\...\Policies\Explorer: [ForceClassicControlPanel] 1
HKU\S-1-5-21-3745773413-1458168362-3701131968-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://addobbe.com/
Toolbar: HKU\S-1-5-21-3745773413-1458168362-3701131968-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Hosts: Hosts file not detected in the default directory
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Алексей\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (60401.user.js) - C:\Users\Алексей\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilbbgjkoohcggmjoobhopgecfaidpfdj [2014-01-15]
CHR Extension: (No Name) - C:\Users\Алексей\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhnkgpdlogbknkhlgdjlejeljbhflim [2015-01-26]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 -> C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll [2013-09-28] (BonanzaDeals)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 -> C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll [2013-09-28] (BonanzaDeals)
CHR Extension: (BonanzaDeals) - C:\Users\Алексей\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieadcoanfjloocmfafkebdnfefmohngj [2013-09-28]
CHR Extension: (Bookmark Manager) - C:\Users\Алексей\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-15]
Task: {477F4468-1FA7-4D5C-ADEC-DB60624B9501} - System32\Tasks\BonanzaDealsUpdate => C:\Program <==== ATTENTION
Task: {5872E9F9-0D41-452B-9C64-BF53DB428899} - \WdfHG No Task File <==== ATTENTION
Task: {E28EA2BC-A004-4802-99F0-2DE0D0FB9ED5} - \DSite No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:8CE646EE
AlternateDataStreams: C:\Users\Все пользователи\TEMP:8CE646EE

cmd: ipconfig /flushdns
cmd: ipconfig /release
cmd: ipconfig /renew
EmptyTemp:
Reboot:
end