Скопируйте приведенный ниже текст в Блокнот и сохраните файл как fixlist.txt в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:
...
Запустите FRST и нажмите один раз на кнопку Fix и подождите.
| Код |
|---|
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll -> No File
FirewallRules: [{86ED41ED-5012-4588-8676-21EEFD61A129}] => (Allow) C:\Users\Olexa\AppData\Roaming\uTorrent\uTorrent.exe No File
FirewallRules: [{F2B58579-5486-468D-AEB4-5A143C7B2DC9}] => (Allow) C:\Users\Olexa\AppData\Roaming\uTorrent\uTorrent.exe No File
FirewallRules: [{3D779A6A-C4DD-4943-9EE9-A0935FFAB5EA}] => (Allow) C:\ProgramData\Windows\rutserv.exe No File
FirewallRules: [{0D4E373E-59E4-4A45-A1E3-A3B8114C5798}] => (Allow) C:\ProgramData\WindowsTask\AMD.exe No File
FirewallRules: [{BCF0AA35-E13A-4E4B-9671-5D59F556AD94}] => (Allow) C:\ProgramData\WindowsTask\AppModule.exe No File
FirewallRules: [{782689E1-327A-479E-B71C-9EF0145157B7}] => (Allow) C:\ProgramData\WindowsTask\AppModule.exe No File
FirewallRules: [{E8DA28BA-F548-49F7-91D3-F56712CDF65F}] => (Allow) C:\ProgramData\WindowsTask\AMD.exe No File
FirewallRules: [{89B54CC6-8870-40B5-AFF4-2C377DA75CB7}] => (Allow) C:\ProgramData\WindowsTask\MicrosoftHost.exe No File
FirewallRules: [{F1378A2A-D824-4AFC-9B7D-813A83B2C069}] => (Allow) C:\ProgramData\WindowsTask\AMD.exe No File
FirewallRules: [{0C69ECC8-DBC7-4DEE-99CB-C2E582947825}] => (Allow) C:\ProgramData\WindowsTask\AppModule.exe No File
FirewallRules: [{527CE709-33E0-4F64-BF6F-7F5EDA0B6317}] => (Allow) C:\ProgramData\WindowsTask\MicrosoftHost.exe No File
FirewallRules: [{72C1818A-06D4-4465-85EE-A453B27DDAA3}] => (Allow) C:\ProgramData\WindowsTask\AMD.exe No File
FirewallRules: [{DB93BEBF-D3A6-4D00-84B9-D02A25FD9F53}] => (Allow) C:\ProgramData\WindowsTask\AppModule.exe No File
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1434449616-2140608379-2912902096-1001\...\MountPoints2: {110ad598-54d4-11ea-a36f-d43b04933b67} - "F:\Autorun.exe"
HKU\S-1-5-21-1434449616-2140608379-2912902096-1001\...\MountPoints2: {f9053a74-5585-11ea-a371-d43b04933b67} - "F:\Autorun.exe"
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKU\S-1-5-21-1434449616-2140608379-2912902096-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=BT171101&iDate=2020-02-01 07:19:43&bName=
CHR Extension: (Avast SafePrice | Порівняння цін, вигідні пропозиції, купони) - C:\Users\Olexa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-02-02]
S2 AvastWscReporter; "D:\AVAST\wsc_proxy.exe" /runassvc /rpcserver [X]
2020-03-08 21:59 - 2020-03-08 22:06 - 000000000 ____D C:\Users\Olexa\Doctor Web
2020-03-08 16:34 - 2020-03-09 11:37 - 000000000 __SHD C:\AdwCleaner
2020-03-08 16:34 - 2020-03-08 22:08 - 000000000 __SHD C:\Program Files\RDP Wrapper
2020-03-08 16:34 - 2020-03-08 21:21 - 000000000 __SHD C:\Users\Все пользователи\WindowsTask
2020-03-08 16:34 - 2020-03-08 21:21 - 000000000 __SHD C:\Users\Все пользователи\RealtekHD
2020-03-08 16:34 - 2020-03-08 21:21 - 000000000 __SHD C:\Users\Все пользователи\install
2020-03-08 16:34 - 2020-03-08 21:21 - 000000000 __SHD C:\rdp
2020-03-08 16:34 - 2020-03-08 21:21 - 000000000 __SHD C:\ProgramData\WindowsTask
2020-03-08 16:34 - 2020-03-08 21:21 - 000000000 __SHD C:\ProgramData\RealtekHD
2020-03-08 16:34 - 2020-03-08 21:21 - 000000000 __SHD C:\ProgramData\install
2020-03-08 16:34 - 2020-03-08 20:31 - 000000000 __SHD C:\Program Files\Malwarebytes
2020-03-08 16:34 - 2020-03-08 16:35 - 000000000 __SHD C:\Users\Все пользователи\Setup
2020-03-08 16:34 - 2020-03-08 16:35 - 000000000 __SHD C:\ProgramData\Setup
2020-03-08 16:34 - 2020-03-08 16:34 - 000000000 __SHD C:\Users\Все пользователи\RunDLL
2020-03-08 16:34 - 2020-03-08 16:34 - 000000000 __SHD C:\ProgramData\RunDLL
2020-03-08 16:34 - 2020-03-08 16:34 - 000000000 __SHD C:\Program Files\ByteFence
2020-03-08 22:41 - 2020-02-01 20:57 - 000000000 ____D C:\Users\Все пользователи\AVAST Software
2020-03-08 22:41 - 2020-02-01 20:57 - 000000000 ____D C:\ProgramData\AVAST Software
EmptyTemp:
Reboot:
|
Программа FRST создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении!
Проверяем, как работает система...
