- This topic has 4 ответа, 2 участника, and was last updated 9 years, 1 month назад by
.
-
Сообщения
-
Здравствуйте, добро пожаловать на Spyware-ru форум.
Запустите программу Блокнот и вставьте в открытое окно следующий текст
CreateRestorePoint: Tcpip\..\Interfaces\{9ea3a412-ef40-4b1a-b990-82ea98d5cce8}: [NameServer] 91.109.206.194 Tcpip\..\Interfaces\{a40a112a-8b40-4471-bbac-b58b05fe0b50}: [NameServer] 98.158.96.96 Tcpip\..\Interfaces\{f0eb8250-86c6-4c43-a45d-c014b090994d}: [NameServer] 98.158.96.96 HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION CHR HKLM\...\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [ojlcebdkbpjdpiligkdbbkdkfjmchbfd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [palmggefdfeikonghaeongkabmgcagco] - hxxps://clients2.google.com/service/update2/crx U3 idsvc; no ImagePath U3 wpcsvc; no ImagePath Task: {12F82B56-4C8C-463C-8B60-BC987466C00C} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION Task: {2584596B-24FA-4F45-8EA9-C3D4A45FF585} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {2983D997-F41D-4E07-83A6-7C650B83D298} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {31549B4A-5385-4307-80EE-D09C0372AF5A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {3F29D40D-3EC5-4B23-9D1E-B46A17090B88} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {432FABEB-3ABD-4779-A22E-B541DC061312} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION Task: {A3FCEFCF-15E5-487D-836C-F24678981077} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {B4731382-36E9-430D-AEA8-5831B34AF704} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION Task: {CDD9CF76-2907-441B-9241-7A340EBD4099} - System32\Tasks\Phoenix Browser Updater => C:\Users\User\AppData\Local\Phoenix Browser Updater\Phoenix Browser Updater.exe <==== ATTENTION EmptyTemp: Reboot:Сохраните полученный файл в папку где находится программа FRST/FRST64 под именем fixlist
Запустите программу FRST и нажмите кнопку Fix.
Когда программа закончит работу появиться сообщение "Fix completed". Нажмите OK.
Откроется блокнот с содержимым файла fixlog.txt. Вставьте содержимое этого файла в ваш ответ.После этого выполните новую проверку программой FRST (перед нажатием клавиши Scan поставьте галочку в пункте Addition.txt) и оба её лога прикрепите к вашему ответу.
Fix result of Farbar Recovery Scan Tool (x86) Version: 31-08-2016
Ran by User (08-09-2016 07:52:22) Run:1
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available Profiles: User & DefaultAppPool)
Boot Mode: Normal==============================================
fixlist content:
*****************
CreateRestorePoint:
Tcpip\..\Interfaces\{9ea3a412-ef40-4b1a-b990-82ea98d5cce8}: [NameServer] 91.109.206.194
Tcpip\..\Interfaces\{a40a112a-8b40-4471-bbac-b58b05fe0b50}: [NameServer] 98.158.96.96
Tcpip\..\Interfaces\{f0eb8250-86c6-4c43-a45d-c014b090994d}: [NameServer] 98.158.96.96
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction < ======= ATTENTION
CHR HKLM\…\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] — hxxps://clients2.google.com/service/update2/crx
CHR HKLM\…\Chrome\Extension: [ojlcebdkbpjdpiligkdbbkdkfjmchbfd] — hxxps://clients2.google.com/service/update2/crx
CHR HKLM\…\Chrome\Extension: [palmggefdfeikonghaeongkabmgcagco] — hxxps://clients2.google.com/service/update2/crx
U3 idsvc; no ImagePath
U3 wpcsvc; no ImagePath
Task: {12F82B56-4C8C-463C-8B60-BC987466C00C} — \Microsoft\Windows\Setup\gwx\rundetector -> No File < ==== ATTENTION
Task: {2584596B-24FA-4F45-8EA9-C3D4A45FF585} — \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File < ==== ATTENTION
Task: {2983D997-F41D-4E07-83A6-7C650B83D298} — \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File < ==== ATTENTION
Task: {31549B4A-5385-4307-80EE-D09C0372AF5A} — \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File < ==== ATTENTION
Task: {3F29D40D-3EC5-4B23-9D1E-B46A17090B88} — \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File < ==== ATTENTION
Task: {432FABEB-3ABD-4779-A22E-B541DC061312} — \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File < ==== ATTENTION
Task: {A3FCEFCF-15E5-487D-836C-F24678981077} — \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File < ==== ATTENTION
Task: {B4731382-36E9-430D-AEA8-5831B34AF704} — \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File < ==== ATTENTION
Task: {CDD9CF76-2907-441B-9241-7A340EBD4099} — System32\Tasks\Phoenix Browser Updater => C:\Users\User\AppData\Local\Phoenix Browser Updater\Phoenix Browser Updater.exe < ==== ATTENTION
EmptyTemp:
Reboot:
*****************Error: (0) Failed to create a restore point.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9ea3a412-ef40-4b1a-b990-82ea98d5cce8}\\NameServer => value removed successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{a40a112a-8b40-4471-bbac-b58b05fe0b50}\\NameServer => value removed successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{f0eb8250-86c6-4c43-a45d-c014b090994d}\\NameServer => value removed successfully.
«HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer» => key removed successfully.
«HKLM\SOFTWARE\Google\Chrome\Extensions\oelpkepjlgmehajehfeicfbjdiobdkfj» => key removed successfully.
«HKLM\SOFTWARE\Google\Chrome\Extensions\ojlcebdkbpjdpiligkdbbkdkfjmchbfd» => key removed successfully.
«HKLM\SOFTWARE\Google\Chrome\Extensions\palmggefdfeikonghaeongkabmgcagco» => key removed successfully.
idsvc => service removed successfully.
wpcsvc => service removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{12F82B56-4C8C-463C-8B60-BC987466C00C}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{12F82B56-4C8C-463C-8B60-BC987466C00C}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2584596B-24FA-4F45-8EA9-C3D4A45FF585}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2584596B-24FA-4F45-8EA9-C3D4A45FF585}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2983D997-F41D-4E07-83A6-7C650B83D298}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2983D997-F41D-4E07-83A6-7C650B83D298}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{31549B4A-5385-4307-80EE-D09C0372AF5A}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{31549B4A-5385-4307-80EE-D09C0372AF5A}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3F29D40D-3EC5-4B23-9D1E-B46A17090B88}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F29D40D-3EC5-4B23-9D1E-B46A17090B88}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{432FABEB-3ABD-4779-A22E-B541DC061312}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{432FABEB-3ABD-4779-A22E-B541DC061312}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A3FCEFCF-15E5-487D-836C-F24678981077}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A3FCEFCF-15E5-487D-836C-F24678981077}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B4731382-36E9-430D-AEA8-5831B34AF704}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4731382-36E9-430D-AEA8-5831B34AF704}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CDD9CF76-2907-441B-9241-7A340EBD4099}» => key removed successfully.
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CDD9CF76-2907-441B-9241-7A340EBD4099}» => key removed successfully.
C:\Windows\System32\Tasks\Phoenix Browser Updater => moved successfully
«HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Phoenix Browser Updater» => key removed successfully.=========== EmptyTemp: ==========
BITS transfer queue => 574874 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 76741660 B
Java, Flash, Steam htmlcache => 1014 B
Windows/system/drivers => 4385654 B
Edge => 11852091 B
Chrome => 478654080 B
Firefox => 0 B
Opera => 0 BTemp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 68805 B
LocalService => 8122 B
NetworkService => 0 B
User => 9447800 B
DefaultAppPool => 0 BRecycleBin => 128881 B
EmptyTemp: => 554.9 MB temporary data Removed.================================
The system needed a reboot.
==== End of Fixlog 07:53:03 ====
- Для ответа в этой теме необходимо авторизоваться.
