That code is indeed different since it's from another file (Chrome's virtual machine), my bad - I forgot to mention it

That's quite obvious, I was looking for someone who can give pointers where to look towards to have it eliminated. Having OS wiped out is the easiest choice, though, along with running livecd with the AV on it to inspect disk's contents. However, these days most of malware is encrypted and decrypted of the fly, so it's difficult for AVs to search for signatures.

What exactly concerns you there? It's a script (or rather a base of scripts) that highjack page' links, opening doorways with ads and promotions designed for clicking-off on the ads.