Скопируйте приведенный ниже текст в Блокнот и сохраните файл как fixlist.txt в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:
...
Запустите FRST и нажмите один раз на кнопку Fix и подождите.
| Код |
|---|
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\StartupApproved\Run: => "Browser Manager"
FirewallRules: [{8E7FCA7E-BECC-465F-87CD-3BD4DFE984F5}] => (Allow) C:\Users\Admin\AppData\Local\Temp\DriverPack-20200528132729\tools\aria2c.exe => No File
FirewallRules: [{1961C7F5-5D8E-47C7-964E-D5F62322E4E7}] => (Allow) C:\Users\Admin\AppData\Roaming\DRPSu\Alice\cloud.exe => No File
FirewallRules: [{A6E76A89-C140-4C5D-A7C0-C302C55FED58}] => (Block) LPort=445
FirewallRules: [{BB86678C-7634-46D6-8530-72EE0CB4F931}] => (Block) LPort=139
FirewallRules: [{2C64934B-3546-4665-9C32-72A37A16E1C8}] => (Block) LPort=445
FirewallRules: [{EDCA3124-6ED0-4D34-98F8-588F4EA65645}] => (Block) LPort=139
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Run: [Browser Manager] => C:\Users\Admin\AppData\Local\Yandex\BrowserManager\MBLauncher.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [1] eav_trial_rus.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [2] avast_free_antivirus_setup_online.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [3] eis_trial_rus.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [4] essf_trial_rus.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [5] hitmanpro_x64.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [6] ESETOnlineScanner_UKR.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [7] ESETOnlineScanner_RUS.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [8] HitmanPro.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [9] 360TS_Setup_Mini.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [10] Cezurity_Scanner_Pro_Free.exe
HKU\S-1-5-21-321243530-1451630498-3779057630-1001\...\Policies\Explorer\DisallowRun: [11] Cube.exe
CHR HKU\S-1-5-21-321243530-1451630498-3779057630-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ldgpjdiadomhinpimgchmeembbgojnjk]
CHR HKLM-x32\...\Chrome\Extension: [fdjdjkkjoiomafnihnobkinnfjnnlhdg]
2020-10-28 13:54 - 2020-05-28 13:37 - 000000000 __SHD C:\AdwCleaner
2020-10-27 16:57 - 2020-10-27 17:12 - 000000000 ____D C:\Users\Admin\Doctor Web
2020-10-28 11:46 - 2020-05-28 13:37 - 000000000 __SHD C:\Users\Все пользователи\Doctor Web
2020-10-28 11:46 - 2020-05-28 13:37 - 000000000 __SHD C:\ProgramData\Doctor Web
2020-10-27 17:34 - 2020-05-28 13:38 - 000000000 ___HD C:\Program Files\RDP Wrapper
2020-10-27 17:13 - 2020-05-28 13:37 - 000000000 __SHD C:\Users\Все пользователи\WindowsTask
2020-10-27 17:13 - 2020-05-28 13:37 - 000000000 __SHD C:\Users\Все пользователи\RealtekHD
2020-10-27 17:13 - 2020-05-28 13:37 - 000000000 __SHD C:\ProgramData\WindowsTask
2020-10-27 17:13 - 2020-05-28 13:37 - 000000000 __SHD C:\ProgramData\RealtekHD
EmptyTemp:
Reboot:
|
Проверяем, как работает система...
и
Пишем по _общему результату лечения.
