Fix result of Farbar Recovery Scan Tool (x64) Version: 14-08-2016
Ran by Павел (15-08-2016 15:33:42) Run:2
Running from C:\Users\Павел\Downloads
Loaded Profiles: Павел (Available Profiles: Павел)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CreateRestorePoint:
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\…\Run: [dvybjwmltv] => explorer «hxxp:///?utm_source=uoua03n&utm_content=fb6126710f9bba594f41bdb6ec9cb56c&utm_term=CC8649800D7A10D0BD2EE7289826E7FB&utm_d=20160506» < ===== ATTENTION
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\…\MountPoints2: {f3dd2e01-0ba9-11e6-b2e6-e8039a87032b} — G:\start.exe
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:///?utm_content=6e4b41f14ac7c0f063d4eb16c0684d3d&utm_source=startpm&utm_term=CC8649800D7A10D0BD2EE7289826E7FB&utm_d=20160506
SearchScopes: HKU\S-1-5-21-1380383141-2180828607-1249965073-1000 -> DefaultScope {A06ED961-D98F-4CF9-A89B-80AB11DB149C} URL = hxxp://go-search.ru/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1380383141-2180828607-1249965073-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1380383141-2180828607-1249965073-1000 -> {A06ED961-D98F-4CF9-A89B-80AB11DB149C} URL = hxxp://go-search.ru/search?q={searchTerms}
CHR HomePage: Default -> hxxp://chatozov.ru/?utm_content=706daf58c4c295e14015a61bf477685c&utm_source=startpm&utm_term=CC8649800D7A10D0BD2EE7289826E7FB&utm_d=20160506
CHR HKLM-x32\…\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] — hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\…\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] — hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\…\Chrome\Extension: [fcoadmpfijfcmokecmkgolhbaeclfage] — hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] — hxxps://clients2.google.com/service/update2/crx
U3 a6mqeo3e; C:\Windows\System32\Drivers\a6mqeo3e.sys [0 ] (Microsoft Corporation) < ==== ATTENTION (zero byte File/Folder)
Task: {29EBDF23-6957-406E-A937-485C1A8D9634} — System32\Tasks\SvcDelay => C:\Windows\temp\SvcDelay.exe [2010-12-24] (Samsung Electronics Co., Ltd.) < ==== ATTENTION
C:\Users\Павел\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk
Folder: C:\Users\Павел\AppData\Local\svshost
C:\Users\Павел\AppData\Local\svshost
EmptyTemp:
Reboot:
*****************
Restore point was successfully created.
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\Software\Microsoft\Windows\CurrentVersion\Run\\dvybjwmltv => value not found.
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f3dd2e01-0ba9-11e6-b2e6-e8039a87032b} => key not found.
HKCR\CLSID\{f3dd2e01-0ba9-11e6-b2e6-e8039a87032b} => key not found.
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
HKU\S-1-5-21-1380383141-2180828607-1249965073-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A06ED961-D98F-4CF9-A89B-80AB11DB149C} => key not found.
HKCR\CLSID\{A06ED961-D98F-4CF9-A89B-80AB11DB149C} => key not found.
Chrome HomePage => not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\daanglpcpkjjlkhcbladppjphglbigam => key not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck => key not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fcoadmpfijfcmokecmkgolhbaeclfage => key not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki => key not found.
a6mqeo3e => service not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29EBDF23-6957-406E-A937-485C1A8D9634} => key not found.
C:\windows\System32\Tasks\SvcDelay => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SvcDelay => key not found.
«C:\Users\Павел\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk» => not found.
========================= Folder: C:\Users\Павел\AppData\Local\svshost ========================
not found.
====== End of Folder: ======
«C:\Users\Павел\AppData\Local\svshost» => not found.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8391936 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 2682 B
Edge => 0 B
Chrome => 41733978 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 692 B
LocalService => 0 B
NetworkService => 0 B
Павел => 19867 B
RecycleBin => 0 B
EmptyTemp: => 55.8 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 15:34:18 ====
