Переадресация при поиске из Chrome через search-engine.ru на сайт go.mail.ru + реклама в новых вкладках

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
 QuarantineFile('C:\Users\User\AppData\Local\Temp\new-super-ext.exe','');
 DeleteFile('C:\Users\User\AppData\Local\Temp\new-super-ext.exe','32');
 DeleteFile('C:\Windows\system32\Tasks\InternetB','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.

begin
CreateQurantineArchive('c:\quarantine.zip');
end.

CreateRestorePoint:
GroupPolicy: Restriction - Chrome <======= ATTENTION
FF Extension: (supermegabest) - C:\Users\User\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\jid1-n5ARdBzHkUEdAA@jetpack.xpi [2016-03-21]
CHR Extension: (Fast search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbdpajcdgknpendpmecafmopknefafha [2016-11-04]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-26]
CHR HKLM\...\Chrome\Extension: [dkekdlkmdpipihonapoleopfekmapadh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM\...\Chrome\Extension: [geidjeefddhgefeplhdlegoldlgiodon] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [icanjjkadceebmhanpekkofdhclnoijl] - hxxps://clients2.google.com/service/update2/crx
OPR Extension: (SearchWay) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\achhckalphdlhbnohjonneffefbmaddi [2016-11-02]
OPR Extension: (SearchWay) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\fgldnknlljnfcfgchdijbjmmkdkmnabn [2016-10-20]
OPR Extension: (Fast search) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\pbdpajcdgknpendpmecafmopknefafha [2016-10-28]
2016-11-04 01:28 - 2016-11-04 01:28 - 00604928 _____ (Reimage) C:\Users\User\Downloads\ReimageRepair.exe
2016-10-28 15:32 - 2016-10-28 15:32 - 00000000 ____D C:\Users\User\AppData\Local\Поиcк в Интeрнете
C:\Users\User\AppData\Local\Temp\0SWXEXwwSwyU.exe
C:\Users\User\AppData\Local\Temp\1852.tmp.exe
C:\Users\User\AppData\Local\Temp\3d51890c7b88e4feeeed777176b46429.dll
C:\Users\User\AppData\Local\Temp\4UeMzgKUb6ou.exe
C:\Users\User\AppData\Local\Temp\5353YfXr5Oom.exe
C:\Users\User\AppData\Local\Temp\6776917529777e6e2c623eda877910c6.dll
C:\Users\User\AppData\Local\Temp\6O11Vouvskax.exe
C:\Users\User\AppData\Local\Temp\amigo_setup.exe
C:\Users\User\AppData\Local\Temp\audiowpm.dll
C:\Users\User\AppData\Local\Temp\Cg0QLQIpe04R.exe
C:\Users\User\AppData\Local\Temp\downloader.exe
C:\Users\User\AppData\Local\Temp\DriverBoosterSetup.exe
C:\Users\User\AppData\Local\Temp\eaaaa8c6.exe
C:\Users\User\AppData\Local\Temp\FrBGZQwMzHv9.exe
C:\Users\User\AppData\Local\Temp\hcv_mailruhomesearch (1).exe
C:\Users\User\AppData\Local\Temp\hcv_mailruhomesearch (2).exe
C:\Users\User\AppData\Local\Temp\hcv_mailruhomesearch.exe
C:\Users\User\AppData\Local\Temp\hLFS9hEp9RLH.exe
C:\Users\User\AppData\Local\Temp\iobitdownloader_monster.exe
C:\Users\User\AppData\Local\Temp\KHXWGcsPwgJs.exe
C:\Users\User\AppData\Local\Temp\lCzXEIKRBy33.exe
C:\Users\User\AppData\Local\Temp\libeay32.dll
C:\Users\User\AppData\Local\Temp\mailruhomesearch.exe
C:\Users\User\AppData\Local\Temp\MailRuUpdater.exe
C:\Users\User\AppData\Local\Temp\mcoJ6rjL5WfE.exe
C:\Users\User\AppData\Local\Temp\msvcr120.dll
C:\Users\User\AppData\Local\Temp\oWhIhbkZd5UG.exe
C:\Users\User\AppData\Local\Temp\pOjdnSdiHO5G.exe
C:\Users\User\AppData\Local\Temp\Qr7736eyVJEB.exe
C:\Users\User\AppData\Local\Temp\sqlite3.dll
C:\Users\User\AppData\Local\Temp\TRXShBcmQ9gN.exe
C:\Users\User\AppData\Local\Temp\V7FRxulM75l0.exe
C:\Users\User\AppData\Local\Temp\VersionModule.dll
C:\Users\User\AppData\Local\Temp\vk_ok_adblock.exe
C:\Users\User\AppData\Local\Temp\VxIyRno7oy7E.exe
C:\Users\User\AppData\Local\Temp\yLsT0v2Ut0tj.exe
C:\Users\User\AppData\Local\Temp\zmpyTrk0VcOo.exe
Task: {6EBB5251-2285-4DC7-9411-82AD53559181} - \Microsoft\Windows\Multimedia\Manager -> No File <==== ATTENTION
Task: {AE208DC8-7233-4022-B772-FA2E38FB023D} - \InternetB -> No File <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-720408529-3403763844-1924550027-1000_Classes\CLSID\{5A8FF410-F3CE-4844-B31B-F18D911239E8}\InprocServer32 -> C:\Users\User\AppData\Local\Mail.Ru\GameCenter\NPDetector.dll => No File
Reboot: