При открытии страницы открывается reg1vulkan.com

begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('c:\documents and settings\admin\local settings\application data\convertad\casrv.exe');
 TerminateProcessByName('c:\documents and settings\admin\application data\softwareupdater\susrv.exe');
 TerminateProcessByName('c:\program files\vk downloader\basement\extensionupdaterservice.exe');
 TerminateProcessByName('c:\program files\vk downloader\backgroundsingleton.exe');
 StopService('Update Service for VK Downloader');
 StopService('serversu');
 StopService('serverca');
 QuarantineFile('C:\Documents and Settings\Admin\Local Settings\Application Data\SystemDir\nethost.exe','');
 QuarantineFile('C:\Program Files\AnyProtectEx\AnyProtect.exe','');
 QuarantineFile('C:\Program Files\VK Downloader\Toolbar32.dll','');
 QuarantineFile('C:\Program Files\Microsoft Data\InstallAddons.exe','');
 QuarantineFile('C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Windows\toolbar.exe','');
 QuarantineFile('c:\documents and settings\admin\local settings\application data\convertad\casrv.exe','');
 QuarantineFile('c:\program files\pscomplex2\pandorra technologies\sentinelservice.exe','');
 QuarantineFile('c:\documents and settings\admin\application data\softwareupdater\susrv.exe','');
 QuarantineFile('c:\program files\vk downloader\basement\extensionupdaterservice.exe','');
 QuarantineFile('c:\program files\vk downloader\backgroundsingleton.exe','');
 QuarantineFile('C:\Program Files\PSComplex2\Pandorra Technologies\SentinelHooker.dll', '');
 QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\NETDFE~1.EXE', '');
 DeleteFile('c:\program files\vk downloader\backgroundsingleton.exe');
 DeleteFile('C:\Documents and Settings\Admin\Local Settings\Application Data\ConvertAd\CASrv.exe');
 DeleteFile('C:\Documents and Settings\Admin\Application Data\SoftwareUpdater\SUsrv.exe');
 DeleteFile('C:\Program Files\VK Downloader\Basement\ExtensionUpdaterService.exe');
 DeleteFile('C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Windows\toolbar.exe');
 DeleteFile('C:\Program Files\Microsoft Data\InstallAddons.exe');
 DeleteFile('C:\Program Files\VK Downloader\Toolbar32.dll');
 DeleteFile('C:\Program Files\AnyProtectEx\AnyProtect.exe');
 DeleteFile('C:\WINDOWS\Tasks\APSnotifierPP1.job');
 DeleteFile('C:\WINDOWS\Tasks\APSnotifierPP2.job');
 DeleteFile('C:\WINDOWS\Tasks\APSnotifierPP3.job');
 DeleteFile('C:\Documents and Settings\Admin\Local Settings\Application Data\SystemDir\nethost.exe');
 DeleteFile('C:\WINDOWS\Tasks\nethost task.job');
 DeleteFile('C:\Program Files\PSComplex2\Pandorra Technologies\SentinelHooker.dll');
 DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\NETDFE~1.EXE');
 DeleteFile('C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Start Menu\Вoйти в Интeрнeт 2inf.net.lnk');
 DeleteService('Update Service for VK Downloader');
 DeleteService('serversu');
 DeleteService('serverca');
 DelBHO('{3C6CF3C0-D800-4B4D-A3D8-8ADE406523B6}');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','SystemScript');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','chrome5');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\RunOnce','GoSearchRemoveAppchrome');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\amigo','command');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\javgnlkuod','command');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
 ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip'); 
end.