Открываются новые вкладки с рекламой

begin
 ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
 SearchRootkit(true, true);
 SetAVZGuardStatus(True);
 TerminateProcessByName('c:\documents and settings\Екатерина\local settings\application data\kometa\kometaup.exe');
 QuarantineFile('C:\Documents and Settings\Екатерина\Application Data\Microsoft\Internet Explorer\Quick Launch\Поиcк в Интeрнете.lnk','');
 QuarantineFile('C:\Documents and Settings\All Users\Application Data\KRB Updater Utility\krbupdater-utility.exe','');
 QuarantineFile('c:\documents and settings\Екатерина\local settings\application data\kometa\kometaup.exe','');
 QuarantineFile('C:\Documents and Settings\Екатерина\Local Settings\Application Data\Microsoft\Start Menu\Вoйти в Интeрнeт.exe', '');
 DeleteFile('c:\documents and settings\Екатерина\local settings\application data\kometa\kometaup.exe','32');
 DeleteFile('C:\Documents and Settings\All Users\Application Data\KRB Updater Utility\krbupdater-utility.exe','32');
 DeleteFile('C:\Documents and Settings\Екатерина\Application Data\Microsoft\Internet Explorer\Quick Launch\Поиcк в Интeрнете.lnk','32');
 DeleteFile('C:\Documents and Settings\Екатерина\Local Settings\Application Data\Microsoft\Start Menu\Вoйти в Интeрнeт.exe','32');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','KRB Updater Utility');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','kometaup');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','dwyzvbrkjk');
 BC_ImportAll;
 ExecuteSysClean;
 BC_Activate;
 ExecuteWizard('SCU',2,3,true);
 RebootWindows(true);
end.

begin
 CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.

start
CreateRestorePoint:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1214440339-1682526488-682003330-1003\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR Extension: (Сейвер аудио-треков) - C:\Documents and Settings\Екатерина\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dgomkalehojkboojhjkkiplfagabokmf [2015-05-08]
OPR Extension: (Сейвер аудио-треков) - C:\Documents and Settings\Екатерина\Application Data\Opera Software\Opera Stable\Extensions\dgomkalehojkboojhjkkiplfagabokmf [2015-05-08]
EmptyTemp:
Reboot:
end