В Доте посторонняя реклама, в стим браузере тоже, всплывает после каждого нажатия ( не важно куда)

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
TerminateProcessByName('c:\users\Александр\appdata\local\mysqlruntimetext\mysqlruntimetext.exe');
 TerminateProcessByName('c:\program files (x86)\gamesrs\gupdater.exe');
 TerminateProcessByName('c:\users\Александр\appdata\local\mysqlruntimetext\databaseindexprocess.exe');
 SetServiceStart('MySQLRuntimeText.exe', 4);
 SetServiceStart('MgAssistService', 4);
 SetServiceStart('GamesRS', 4);
 QuarantineFile('C:\Users\Александр\appdata\roaming\newsi_2\s_inst.exe','');
 QuarantineFile('C:\Users\Александр\appdata\roaming\mediahit\shadow\mediahit.update\mediahit.update.process.exe','');
 QuarantineFile('C:\Users\Александр\AppData\Local\MySQLRuntimeText\RegFltrX64.sys','');
 QuarantineFile('C:\Users\Александр\AppData\Local\Schedule\Schedule.exe','');
 QuarantineFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe','');
 QuarantineFile('C:\Program Files (x86)\GamesRS\GUpdater.exe','');
 QuarantineFile('C:\Users\Александр\AppData\Local\MySQLRuntimeText\MySQLRuntimeText.exe','');
 QuarantineFile('C:\Users\Александр\AppData\Local\5c8f120126a1f626be43f5d44fe4ae90\1c2b5b2f0b89168.exe','');
 QuarantineFile('C:\Users\Александр\AppData\Local\ab75bc92340e398c521873cc00e734b0\eefd3ad9395ebb2.exe','');
 QuarantineFile('c:\users\Александр\appdata\local\mysqlruntimetext\mysqlruntimetext.exe','');
 QuarantineFile('c:\users\Александр\appdata\local\mysqlruntimetext\databaseindexprocess.exe','');
 DeleteFile('C:\Users\Александр\appdata\roaming\mediahit\shadow\mediahit.update\mediahit.update.process.exe','32');
 DeleteFile('C:\Users\Александр\appdata\roaming\newsi_2\s_inst.exe','32');
 DeleteFile('C:\Program Files (x86)\GamesRS\GUpdater.exe','32');
 DeleteFile('C:\Users\Александр\AppData\Local\MySQLRuntimeText\RegFltrX64.sys','32');
 DeleteFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe','32');
 DeleteFile('C:\Users\Александр\AppData\Local\Schedule\Schedule.exe','32');
 DeleteFile('C:\PROGRA~2\SupTab\SEARCH~2.DLL','32');
 DeleteFile('C:\PROGRA~2\SUPPOR~1\SUPPOR~2.DLL','32');
 DeleteFile('C:\Users\Александр\AppData\Local\ab75bc92340e398c521873cc00e734b0\eefd3ad9395ebb2.exe','32');
 DeleteFile('C:\Users\Александр\AppData\Local\5c8f120126a1f626be43f5d44fe4ae90\1c2b5b2f0b89168.exe','32');
 DeleteFile('C:\Users\Александр\AppData\Local\MySQLRuntimeText\MySQLRuntimeText.exe','32');
 DeleteFile('c:\users\Александр\appdata\local\mysqlruntimetext\mysqlruntimetext.exe','32');
 DeleteFile('c:\program files (x86)\mobogenie\daemonprocess.exe','32');
 DeleteFile('c:\users\Александр\appdata\local\mysqlruntimetext\databaseindexprocess.exe','32');
 DeleteService('GamesRS');
 DeleteService('MgAssistService');
 DeleteService('MySQLRuntimeText.exe');
 DeleteService('1c2b5b2f0b89168.exe');
 DeleteService('eefd3ad9395ebb2.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\mobilegeni daemon','command');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ZaxarLoader','command');
DeleteFileMask('c:\users\Александр\appdata\local\mysqlruntimetext', '*', true);
DeleteDirectory('c:\users\Александр\appdata\local\mysqlruntimetext');
DeleteFileMask('C:\Users\Александр\AppData\Local\5c8f120126a1f626be43f5d44fe4ae90', '*', true);
DeleteDirectory('C:\Users\Александр\AppData\Local\5c8f120126a1f626be43f5d44fe4ae90');
DeleteFileMask('C:\Users\Александр\AppData\Local\Schedule', '*', true);
DeleteDirectory('C:\Users\Александр\AppData\Local\Schedule');
DeleteFileMask('C:\Program Files (x86)\GamesRS', '*', true);
DeleteDirectory('C:\Program Files (x86)\GamesRS');
DeleteFileMask('C:\Program Files (x86)\Zaxar', '*', true);
DeleteDirectory('C:\Program Files (x86)\Zaxar');
DeleteFileMask('C:\Users\Александр\appdata\roaming\newsi_2', '*', true);
DeleteDirectory('C:\Users\Александр\appdata\roaming\newsi_2');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1402472718&from=wpm0612&uid=WDCXWD3200LPVT-26G33T0_WD-WX81AC2U1200U1200
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1402472718&from=wpm0612&uid=WDCXWD3200LPVT-26G33T0_WD-WX81AC2U1200U1200&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1402472718&from=wpm0612&uid=WDCXWD3200LPVT-26G33T0_WD-WX81AC2U1200U1200&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=1402472718&from=wpm0612&uid=WDCXWD3200LPVT-26G33T0_WD-WX81AC2U1200U1200
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts=1402472718&from=wpm0612&uid=WDCXWD3200LPVT-26G33T0_WD-WX81AC2U1200U1200
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1396089647&from=cor&uid=WDCXWD3200LPVT-26G33T0_WD-WX81AC2U1200U1200&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts=1402472718&from=wpm0612&uid=WDCXWD3200LPVT-26G33T0_WD-WX81AC2U1200U1200
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:39079

begin
CreateQurantineArchive('c:\quarantine.zip');
end.