Google Chrome сам открывает рекламные сайты

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
 TerminateProcessByName('c:\program files (x86)\cleanbrowser\app\bin\nw.exe');
 TerminateProcessByName('c:\programdata\cwdmc\wdman.exe');
 SetServiceStart('WdMan', 4);
 QuarantineFile('C:\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe','');
 QuarantineFile('C:\Users\Юлия\AppData\Local\Hostinstaller\2718817467_monster.exe','');
 QuarantineFile('C:\Program Files (x86)\Winsere\Winsere\Winsere.exe','');
 QuarantineFile('C:\Program Files (x86)\SFK\SSFK.exe','');
 QuarantineFile('C:\Users\Юлия\AppData\Local\AC3BD126-1457296186-A343-A2FF-10C37BDA68ED\snsk67D8.tmp','');
 QuarantineFile('C:\Program Files (x86)\SearchesToYesbnd\bugreport.exe','');
 QuarantineFile('C:\Program Files (x86)\AC3BD126-1457285292-A343-A2FF-10C37BDA68ED\jnsl2C0B.tmp','');
 QuarantineFile('c:\programdata\cwdmc\wdman.exe','');
 QuarantineFile('c:\program files (x86)\cleanbrowser\app\bin\nw.exe','');
 DeleteFile('c:\program files (x86)\cleanbrowser\app\bin\nw.exe','32');
 DeleteFile('c:\programdata\cwdmc\wdman.exe','32');
 DeleteFile('C:\Program Files (x86)\CleanBrowser\app\bin\libegl.dll','32');
 DeleteFile('C:\Program Files (x86)\CleanBrowser\app\bin\libglesv2.dll','32');
 DeleteFile('C:\Program Files (x86)\AC3BD126-1457285292-A343-A2FF-10C37BDA68ED\jnsl2C0B.tmp','32');
 DeleteFile('C:\Program Files (x86)\SearchesToYesbnd\bugreport.exe','32');
 DeleteFile('C:\Users\Юлия\AppData\Local\AC3BD126-1457296186-A343-A2FF-10C37BDA68ED\snsk67D8.tmp','32');
 DeleteFile('C:\Program Files (x86)\SFK\SSFK.exe','32');
 DeleteFile('C:\Program Files (x86)\Winsere\Winsere\Winsere.exe','32');
 DeleteFile('C:\Windows\system32\Tasks\WinTaske','64');
 DeleteFile('C:\Windows\system32\Tasks\Soft installer','64');
 DeleteFile('C:\Users\Юлия\AppData\Local\Hostinstaller\2718817467_monster.exe','32');
 DeleteFile('C:\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe','32');
 DeleteService('WdMan');
 DeleteService('dojygici');
 DeleteService('rowugoqo');
 DeleteService('SSFK');
 DeleteService('Winsere');
 BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.

begin
CreateQurantineArchive('c:\quarantine.zip');
end.

CreateRestorePoint:
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM\...\Chrome\Extension: [kneggodalbcmgdkkfhbhbicbbahnacjb] - hxxp://vk.ijmelto.ru/index.xml
CHR HKLM-x32\...\Chrome\Extension: [bejnpnkhfgfkcpgikiinojlmdcjimobi] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bgcifljfapbhgiehkjlckfjmgeojijcb] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cpegcopcfajiiibidlaelhjjblpefbjk] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fdjdjkkjoiomafnihnobkinnfjnnlhdg] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lbjjfiihgfegniolckphpnfaokdkbmdm] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mdeldjolamfbcgnndjmjjiinnhbnbnla] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] - hxxps://clients2.google.com/service/update2/crx
2016-03-07 19:44 - 2016-03-07 19:44 - 00000000 ____D C:\Program Files (x86)\WinTaske
2016-03-07 19:42 - 2016-03-08 12:44 - 00000000 ____D C:\ProgramData\cWdMc
2016-03-07 19:42 - 2016-03-07 19:42 - 00000000 ____D C:\Users\Юлия\AppData\Local\PqnusguzG
2016-03-07 19:42 - 2016-03-07 19:42 - 00000000 ____D C:\ProgramData\MEPWRkS
2016-03-07 19:42 - 2016-03-07 19:42 - 00000000 ____D C:\ProgramData\kVaGUgn
2016-03-07 19:42 - 2016-03-07 19:42 - 00000000 ____D C:\ProgramData\KPIRnazW
2016-03-07 19:42 - 2016-03-07 19:42 - 00000000 ____D C:\ProgramData\gBPDZrf
2016-03-07 19:41 - 2016-03-08 09:35 - 00000000 ____D C:\Users\Юлия\AppData\Local\app
2016-03-07 19:41 - 2016-03-07 19:42 - 00000000 ____D C:\Program Files (x86)\HpDef
2016-03-07 19:40 - 2016-03-07 23:23 - 00000000 ____D C:\Users\Юлия\AppData\Local\AC3BD126-1457379630-A343-A2FF-10C37BDA68ED
2016-03-06 20:29 - 2016-03-12 05:40 - 00000000 ____D C:\Users\Юлия\AppData\Local\AC3BD126-1457296186-A343-A2FF-10C37BDA68ED
2016-03-06 20:28 - 2016-03-08 12:44 - 00000000 ____D C:\Program Files (x86)\AC3BD126-1457285292-A343-A2FF-10C37BDA68ED
2016-03-06 20:28 - 2016-03-06 20:26 - 00000967 _____ C:\Windows\system32\Drivers\etc\hp.bak
2016-03-06 20:27 - 2016-03-06 20:27 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2016-03-06 20:26 - 2016-03-08 12:44 - 00000000 ____D C:\Users\Юлия\AppData\Local\Hostinstaller
2016-03-06 20:26 - 2016-03-06 20:29 - 00000000 ____D C:\Users\Юлия\AppData\Roaming\ImageCropResize
2016-03-06 20:26 - 2016-03-06 20:29 - 00000000 ____D C:\Users\Юлия\AppData\Local\ZetaGamesNews
2016-03-06 20:26 - 2016-03-06 20:29 - 00000000 ____D C:\Users\Юлия\AppData\Local\Amigo
2016-03-06 20:26 - 2016-03-06 20:28 - 00000000 ____D C:\Users\Юлия\AppData\Local\ZetaGamesViewer
C:\Users\Юлия\AppData\Local\Temp\QHC2DK.exe
Task: {EE330840-5C4A-4CFE-B65B-E67EDD4CFB1C} - \Soft installer -> No File <==== ATTENTION
Reboot: