Fix result of Farbar Recovery Scan Tool (x64) Version: 21.02.2018
Ran by pofig (23-02-2018 01:05:06) Run:1
Running from C:\Users\pofig\Desktop\Новая папка (5)
Loaded Profiles: pofig (Available Profiles: pofig)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-280144539-2591920384-1566407558-1001\...\RunOnce: [Application Restart #2] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MSI)
GroupPolicy: Restriction <==== ATTENTION
GroupPolicy\User: Restriction <==== ATTENTION
virustotal:C:\Windows\SysWOW64\muachost.exe
U3 aswbdisk; no ImagePath
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
Task: {881DAA3E-7BCD-49C5-9221-1CD90E4664AA} - \iToolsDaemon -> No File <==== ATTENTION
*****************

Restore point was successfully created.
Processes closed successfully.
"HKU\S-1-5-21-280144539-2591920384-1566407558-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Application Restart #2" => removed successfully
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\system32\GroupPolicy\User => moved successfully
VirusTotal: C:\Windows\SysWOW64\muachost.exe => https://www.virustotal.com/file/a8c2444a0af793cd4f167232ba6cd0518975a787bfa4060aab86db4dcb52e0e0/analysis/1519205532/
"HKLM\System\CurrentControlSet\Services\aswbdisk" => removed successfully
aswbdisk => service removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw" => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{881DAA3E-7BCD-49C5-9221-1CD90E4664AA} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{881DAA3E-7BCD-49C5-9221-1CD90E4664AA} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iToolsDaemon => could not remove key. ErrorCode1: 0x00000002

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 23-02-2018 01:06:03)


Result of scheduled keys to remove after reboot:

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{881DAA3E-7BCD-49C5-9221-1CD90E4664AA}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{881DAA3E-7BCD-49C5-9221-1CD90E4664AA}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\iToolsDaemon" => removed successfully

==== End of Fixlog 01:06:03 ====