Реклама в Google Chrome "Ads by Lyrics" и перекидает на левые сайты

start
CreateRestorePoint:
() C:\Users\User\AppData\Local\Temp\Rar$EXa0.182\iTools 3.2.0.6 Rus\iToolsDaemon.exe
C:\Users\User\AppData\Local\Temp\Rar$EXa0.182\iTools 3.2.0.6 Rus\iToolsDaemon.exe
OPR Extension: (PhoenixGuard v2.0 - бесплатный антивирус) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\nkooappjeoniffjmoplbagpngedkckpl [2015-10-07]
globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ATTENTION
Task: {B34D6008-23E1-499C-A04D-B98A8EF7B61D} - System32\Tasks\iToolsDaemon => C:\Users\User\AppData\Local\Temp\Rar$EXa0.182\iTools 3.2.0.6 Rus\iToolsDaemon.exe [2015-12-30] () <==== ATTENTION
Task: C:\Windows\Tasks\iToolsDaemon.job => C:\Users\User\AppData\Local\Temp\Rar$EXa0.182\iTools 3.2.0.6 Rus\iToolsDaemon.exe <==== ATTENTION
AlternateDataStreams: C:\Program Files\Common Files\System:75tgBYgMEQe0pVplBbl5QUzP0l
AlternateDataStreams: C:\ProgramData\Microsoft:78Gmql0NvQbxrY7HggX7EaFd
AlternateDataStreams: C:\ProgramData\Microsoft:k0LyOwREbw5INbf33A7bFY
AlternateDataStreams: C:\Users\User\Local Settings:K4YyX5jgwyggblmEOszNAuq6PYs
AlternateDataStreams: C:\Users\User\AppData\Local:K4YyX5jgwyggblmEOszNAuq6PYs
AlternateDataStreams: C:\Users\User\AppData\Local\4w2qr703:niVqU0PTB4hKt8kBSGJ7
AlternateDataStreams: C:\Users\User\AppData\Local\Application Data:K4YyX5jgwyggblmEOszNAuq6PYs
AlternateDataStreams: C:\Users\Все пользователи\Microsoft:78Gmql0NvQbxrY7HggX7EaFd
AlternateDataStreams: C:\Users\Все пользователи\Microsoft:k0LyOwREbw5INbf33A7bFY
EmptyTemp:
Reboot:
end