При нажатие практически на любую ссылку приводит к переходу на сайт с рекламой

start
CreateRestorePoint:
URLSearchHook: HKLM-x32 - (No Name) - {94996a74-8a98-41bb-85fe-0b6b9787e851} - No File
URLSearchHook: HKU\S-1-5-21-2029502491-3391132873-933696228-1005 - Спутник@Mail.Ru - {09900DE8-1DCA-443F-9243-26FF581438AF} -  No File
URLSearchHook: HKU\S-1-5-21-2029502491-3391132873-933696228-1005 - (No Name) - {94996a74-8a98-41bb-85fe-0b6b9787e851} - No File
BHO: No Name -> {11111111-1111-1111-1111-110511951170} -> No File
BHO: Hotspot Shield Class -> {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} -> No File
BHO-x32: MailRuBHO Class -> {8984B388-A5BB-4DF7-B274-77B879E179DB} -> No File
BHO-x32: No Name -> {94996a74-8a98-41bb-85fe-0b6b9787e851} -> No File
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM-x32 - Спутник@Mail.Ru - {09900DE8-1DCA-443F-9243-26FF581438AF} -  No File
Toolbar: HKLM-x32 - No Name - {94996a74-8a98-41bb-85fe-0b6b9787e851} -  No File
Toolbar: HKU\S-1-5-21-2029502491-3391132873-933696228-1005 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-2029502491-3391132873-933696228-1005 -> No Name - {94996A74-8A98-41BB-85FE-0B6B9787E851} -  No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  No File
OPR Extension: (Ghostery) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg [2016-10-28]
OPR Extension: (HDPlus-V1.9) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\gjemcodhbmopadgellhifcheadcdnbnj [2014-07-12]
OPR Extension: (Adblock Plus) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2016-10-27]
2016-10-28 12:00 - 2014-07-12 21:14 - 00000000 ____D C:\Program Files (x86)\HDPlus-V1.9
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-1.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-codedownloader.exeɟ/tjjloy /ZlZaDEXvD=task /XadzHIww='HDPlus-V1.9' /WBVVcYffv=59570 /yIXCdEKO='001758' /CwNlFMqeX='0' /qPYFlsN='0' /YHmJV=11AAB232774C4AB69F083806B9A7B42CIE /BnpVqFDpn=e5978ce1a1e1fbc99798d6ad3448399c /etxFYCE=1_34_07_01 /YfbGDCq=1.34.7.1 /JAjDd=1405188849 /trxahYOU=hxxp:/stats.geninfocloud.com /reyYiam=hxxp:/errors.geninfocloud.com /QnjHH=hxxp:/js.geninfocloud.com /atTom=ch /hFiMXqzS='HDPlus-V1.9' /MJUUpCly=hxxp:/js.clientdemocloud.com /djFTHdXJ /ZdUsBlTv='{asw:[524290, 369098817, 0]}' /VSJDh='hxxp:/update.geninfocloud.com/ie_code_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-11.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-3.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-4.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-4.exeΤ/QgiiMnXzq /XadzHIww='HDPlus-V1.9' /fCfJX C:\Program Files (x86)\HDPlus-V1.9\59570.xpi' /WBVVcYffv=59570 /yIXCdEKO='001758' /CwNlFMqeX='0' /qPYFlsN='0' /YHmJV=11AAB232774C4AB69F083806B9A7B42CIE /BnpVqFDpn=e5978ce1a1e1fbc99798d6ad3448399c /etxFYCE=1_34_07_01 /YfbGDCq=1.34.7.1 /JAjDd=1405188849 /trxahYOU=hxxp:/stats.geninfocloud.com /reyYiam=hxxp:/errors.geninfocloud.com /knWQD=300 /EuIJVVI=3446275a-5477-4d33-bd0d-44b466c519cd@4bf28e24-5833-4fb8-88c3-cd8403bb6141.com /ZGqprACX=0.94 /BPrYpwcRe=a3446275a54774d33bd0d44b466c519cd4bf28e2458334fb888c3cd8403bb6141com59570 /fWuqVBhsC=hxxps:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/59570.rdf /xhmeiqra='HDPlus-V1.9' /CpOFdklEl='Turn YouTube videos to High Definition by default' /TkjSuqfV='HDPlus' /atTom=ch /ZdUsBlTv='{asw:[524290, 369098817, 0]}' /djFTHdXJ /ssrDu /tblFJ /VSJDh='hxxp:/update.geninfocloud.com/ff_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exeȔ/ieYFQbjm /XadzHIww='HDPlus-V1.9' /WBVVcYffv=59570 /yIXCdEKO='001758' /CwNlFMqeX='0' /qPYFlsN='0' /YHmJV=11AAB232774C4AB69F083806B9A7B42CIE /BnpVqFDpn=e5978ce1a1e1fbc99798d6ad3448399c /etxFYCE=1_34_07_01 /JAjDd=1405188849 /trxahYOU=hxxp:/stats.geninfocloud.com /reyYiam=hxxp:/errors.geninfocloud.com /JBWgSKYhW=hxxp:/ipgeoapi.com/ /yENwi=hxxp:/update.geninfocloud.com /Lsbko=2 /WFMjXVrp=hxxp:/logs.geninfocloud.com /VSJDh='hxxp:/update.geninfocloud.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-5_user.job => C:\Program Files (x86)\HDPlus-V1.9\c9d77c59-0ff5-4036-8806-71115fd01f45-5.exeȝ/ieYFQbjm /XadzHIww='HDPlus-V1.9' /WBVVcYffv=59570 /yIXCdEKO='001758' /CwNlFMqeX='0' /qPYFlsN='0' /YHmJV=11AAB232774C4AB69F083806B9A7B42CIE /BnpVqFDpn=e5978ce1a1e1fbc99798d6ad3448399c /etxFYCE=1_34_07_01 /JAjDd=1405188849 /trxahYOU=hxxp:/stats.geninfocloud.com /reyYiam=hxxp:/errors.geninfocloud.com /JBWgSKYhW=hxxp:/ipgeoapi.com/ /yENwi=hxxp:/update.geninfocloud.com /Lsbko=2 /WFMjXVrp=hxxp:/logs.geninfocloud.com /VSJDh='hxxp:/update.geninfocloud.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-6.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-novainstaller.exeɠ/NGwWess /XadzHIww='HDPlus-V1.9' /WBVVcYffv=59570 /yIXCdEKO='001758' /CwNlFMqeX='0' /qPYFlsN='0' /YHmJV=11AAB232774C4AB69F083806B9A7B42CIE /BnpVqFDpn=e5978ce1a1e1fbc99798d6ad3448399c /etxFYCE=1_34_07_01 /YfbGDCq=1.34.7.1 /JAjDd=1405188849 /trxahYOU=hxxp:/stats.geninfocloud.com /reyYiam=hxxp:/errors.geninfocloud.com /QnjHH=hxxp:/js.geninfocloud.com /atTom=ch /KgwSWy /hFiMXqzS=HDPlus-V1.9 /AAFzUDma='nova' /MJUUpCly=hxxp:/js.clientdemocloud.com /ZdUsBlTv='{asw:[524290, 369098817, 0]}' /ZlZaDEXvD=task /VSJDh='hxxp:/update.geninfocloud.com/novacode/{CAMP_ID}/update.jso <==== ATTENTION
Task: C:\Windows\Tasks\c9d77c59-0ff5-4036-8806-71115fd01f45-7.job => C:\Program Files (x86)\HDPlus-V1.9\HDPlus-V1.9-nova.exeɆ/XadzHIww='HDPlus-V1.9' /WBVVcYffv=59570 /yIXCdEKO='001758' /CwNlFMqeX='0' /qPYFlsN='0' /YHmJV=11AAB232774C4AB69F083806B9A7B42CIE /BnpVqFDpn=e5978ce1a1e1fbc99798d6ad3448399c /etxFYCE=1_34_07_01 /YfbGDCq=1.34.7.1 /JAjDd=1405188849 /trxahYOU=hxxp:/stats.geninfocloud.com /reyYiam=hxxp:/errors.geninfocloud.com /QnjHH=hxxp:/js.geninfocloud.com /atTom=ch /KgwSWy /hFiMXqzS=HDPlus-V1.9 /AAFzUDma='nova' /MJUUpCly=hxxp:/js.clientdemocloud.com /ZdUsBlTv='{asw:[524290, 369098817, 0]}' /VSJDh='hxxp:/update.geninfocloud.com/novarun/{CAMP_ID}/update.jso <==== ATTENTION
AlternateDataStreams: C:\Users\User\Desktop\music:com.dropbox.attributes [168]
EmptyTemp:
Reboot:
end