Результаты дополнительного сканирования Farbar Recovery Scan Tool (x64) Версия: 19-05-2021
Запущено с помощью mister (05-06-2021 22:46:06)
Запущено из C:\Users\mister\Downloads
Windows 8.1 Enterprise (Update) (X64) (2015-03-11 11:15:14)
Режим загрузки: Normal
==========================================================


==================== Учетные записи: =============================

mister (S-1-5-21-2403352924-2529769915-2289300762-1001 - Administrator - Enabled) => C:\Users\Mister
Администратор (S-1-5-21-2403352924-2529769915-2289300762-500 - Administrator - Disabled)
Гость (S-1-5-21-2403352924-2529769915-2289300762-501 - Limited - Disabled)

==================== Центр безопасности ========================

(Если запись включена в fixlist, она будет удалена)

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Установленные программы ======================

(В fixlist можно добавлять только рекламные программы с флагом «Скрытый», чтобы отобразить их.)

µTorrent (HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\uTorrent) (Version: 3.5.5.46010 - BitTorrent Inc.)
Ace Stream Media 3.1.32 (HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\AceStream) (Version: 3.1.32 - Ace Stream Media) <==== ВНИМАНИЕ
AIDA64 5.75.3900 Final (HKLM-x32\...\AIDA64 5.75.3900 Final) (Version:  - )
American Truck Simulator v. 1.38.2.18s (HKLM-x32\...\American Truck Simulator_is1) (Version:  - )
BrowserClientX64 (HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\BrowserClientX64) (Version: 1.14 - Mail.Ru)
BrowserClientX86 (HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\BrowserClientX86) (Version: 1.14 - Mail.Ru)
CCleaner (HKLM\...\CCleaner) (Version: 5.78 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.14.0.1664 - Disc Soft Ltd)
Epic Privacy Browser (HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\Epic Privacy Browser) (Version: 84.0.4147.105 - Epic)
Euro Truck Simulator 2 v.1.38.1.0s (HKLM-x32\...\Euro Truck Simulator 2_is1) (Version:  - )
Far Manager 3 x64 (HKLM\...\{96FFAA31-593C-4226-BA1A-7659F3B831A7}) (Version: 3.0.5757 - Eugene Roshal & Far Group)
Format Factory 4.4.0 (HKLM-x32\...\Format Factory_is1) (Version: 4.4.0 - Free Time, 2008-2016)
Free Spider Solitaire v4.0 (HKLM-x32\...\Free Spider_is1) (Version:  - TreeCardGames)
Java(TM) SE Development Kit 14.0.2 (64-bit) (HKLM\...\{6D7FE298-9878-53C8-801B-76A251D18BB2}) (Version: 14.0.2.0 - Oracle Corporation)
Light Alloy 4.11.1 (build 3333) (HKLM-x32\...\Light Alloy) (Version: 4.11.1 (build 3333) - Vortex Team)
MGCloud (HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\MGCloud) (Version: 1.90 - Playkey)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows 8 x64 Rus (HKLM\...\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}) (Version: 1.0.0.4 - Microsoft by Alker)
Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{a2199617-3609-410f-a8e8-e8806c73545b}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{0513c9cf-7191-45a7-ace9-ecdad03c93a4}) (Version: 12.0.40660.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{10dc8dbf-d3d7-4e23-be07-120fe5c66b78}) (Version: 12.0.40660.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f3065a98-e387-4588-a776-9875d73bc533}) (Version: 14.10.25008.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{594d4687-f909-4f12-8aef-b54c99f55d11}) (Version: 14.10.25008.0 - Корпорация Майкрософт)
Microsoft Word 2016 (HKLM-x32\...\Office16.WORD) (Version: 16.0.4266.1001 - Microsoft Corporation)
MY.GAMES Игровой центр (HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\GameCenter) (Version: 4.1609 - MY.COM B.V.)
NVIDIA Аудиодрайвер HD 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA Виртуальное аудиоустройство Miracast 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 361.43 - NVIDIA Corporation)
NVIDIA Драйвер контроллера 3D Vision 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA Системное программное обеспечение PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Opera Stable 76.0.4017.177 (HKLM-x32\...\Opera 76.0.4017.177) (Version: 76.0.4017.177 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.80.42860 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.2 - Krzysztof Kowalczyk)
Tetris (HKLM-x32\...\{95E0E6DC-C308-4C96-BEDB-68C75A32FAF8}_is1) (Version: 1.68 - Crystal Office Systems)
Update for Skype for Business 2016 (KB4011238) 32-Bit Edition (HKLM-x32\...\{90160000-002A-0000-1000-0000000FF1CE}_Office16.WORD_{BE7AEADB-02E5-40B7-BA59-9EE2F4C03CA1}) (Version:  - Microsoft)
WinRAR 5.91 (32-разрядная) (HKLM-x32\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)
Yandex (HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\YandexBrowser) (Version: 21.5.2.644 - ООО «ЯНДЕКС»)
Засоби перевірки правопису Microsoft Office 2016 – українська (HKLM-x32\...\{90160000-001F-0422-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Средства проверки правописания Microsoft Office 2016 — русский (HKLM-x32\...\{90160000-001F-0419-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden

Packages:
=========
MSN Здоровье и фитнес -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-16] (Microsoft Corporation) [MS Ad]
MSN Новости -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2016-04-28] (Microsoft Corporation) [MS Ad]
MSN Погода -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2016-11-23] (Microsoft Corporation) [MS Ad]
MSN Путешествия -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-16] (Microsoft Corporation) [MS Ad]
MSN Спорт -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2016-04-29] (Microsoft Corporation) [MS Ad]
MSN Финансы -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2016-04-28] (Microsoft Corporation) [MS Ad]
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2015-06-30] (Skype) [MS Ad]
Видео -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2015-11-06] (Microsoft Corporation) [MS Ad]
Игры -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2015-03-12] (Microsoft Corporation) [MS Ad]
Музыка -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2015-03-14] (Microsoft Corporation) [MS Ad]

==================== Пользовательские CLSID (В белом списке): ==============

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\WinRAR\rarext64.dll [2020-08-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\WinRAR\rarext.dll [2020-08-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-05-04] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2021-05-04] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2015-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\WinRAR\rarext64.dll [2020-08-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\WinRAR\rarext.dll [2020-08-25] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (В белом списке) ====================

(Если запись включена в fixlist, элемент реестра будет сброшен на значение по умолчанию или удалён. Файл не будет перемещён.)

HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll
HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll

==================== Ярлыки & WMI ========================

(Записи могут быть перечислены для восстановления или удаления.)

Shortcut: C:\Users\Mister\Links\Google Диск.lnk -> C:\Users\mister\Google Диск () <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Far - Ярлык.lnk -> C:\Far Manager\Far.exe (Eugene Roshal & Far Group) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Google Диск.lnk -> C:\Users\mister\Google Диск () <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\LA - Ярлык.lnk -> C:\Program Files (x86)\Light Alloy\LA.exe (hxxp://light-alloy.ru) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\MY.GAMES Игровой центр.lnk -> C:\Users\mister\AppData\Local\GameCenter\GameCenter.exe (MY.COM B.V.) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Игры\(64х)Euro Truck Simulator 2.lnk -> C:\Games\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Игры\ISawBlackClouds.exe - Ярлык.lnk -> C:\Games\I Saw Black Clouds REPACK\ISawBlackClouds.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Игры\Интернет-нарды.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Backgammon\bckgzm.exe (Microsoft Corporation) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Игры\Интернет-пики.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Spades\shvlzm.exe (Microsoft Corporation) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Игры\Интернет-шашки.lnk -> C:\Program Files\Microsoft Games\Multiplayer\Checkers\chkrzm.exe (Microsoft Corporation) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Игры\Паук.lnk -> C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe (Microsoft Corporation) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Игры\Сапёр.lnk -> C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe (Microsoft Corporation) <==== Cyrillic
Shortcut: C:\Users\Mister\Desktop\Игры\Тетрис.lnk -> C:\Tetris\tetris.exe (Crystal Office Systems) <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games\MY.GAMES Игровой центр.lnk -> C:\Users\mister\AppData\Local\GameCenter\GameCenter.exe (MY.COM B.V.) <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Другие игры от корпорации Майкрософт.lnk -> C:\Users\mister\AppData\Roaming\Microsoft\Installer\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}\IconB6047A786.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Интернет-нарды.lnk -> C:\Users\mister\AppData\Roaming\Microsoft\Installer\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}\IconB6047A783.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Интернет-пики.lnk -> C:\Users\mister\AppData\Roaming\Microsoft\Installer\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}\IconB6047A784.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Интернет-шашки.lnk -> C:\Users\mister\AppData\Roaming\Microsoft\Installer\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}\IconB6047A784.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Косынка.lnk -> C:\Users\mister\AppData\Roaming\Microsoft\Installer\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}\IconB6047A785.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Паук.lnk -> C:\Users\mister\AppData\Roaming\Microsoft\Installer\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}\IconB6047A785.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Сапер.lnk -> C:\Users\mister\AppData\Roaming\Microsoft\Installer\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}\IconB6047A783.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Червы.lnk -> C:\Users\mister\AppData\Roaming\Microsoft\Installer\{B6047A78-062F-4C6F-A82D-B94DAF72FB73}\IconB6047A782.exe () <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Браузер Opera.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software) <==== Cyrillic
Shortcut: C:\Users\Mister\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Браузер Opera.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software) <==== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Браузер Opera.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software) <==== Cyrillic
ShortcutWithArgument: C:\Users\Mister\Desktop\Игры\Косынка.lnk -> C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe (Microsoft Corporation) -> -mce <==== Cyrillic
ShortcutWithArgument: C:\Users\Mister\Desktop\Игры\Червы.lnk -> C:\Program Files\Microsoft Games\Hearts\Hearts.exe (Microsoft Corporation) -> -mce <==== Cyrillic
ShortcutWithArgument: C:\Users\Mister\Desktop\Игры\Шахматы.lnk -> C:\Program Files\Microsoft Games\Chess\Chess.exe (Microsoft Corporation) -> -mce <==== Cyrillic
ShortcutWithArgument: C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Обозреватель игр.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /E,::{ED228FDF-9EA8-4870-83b1-96b02CFE0D52}" <==== Cyrillic
ShortcutWithArgument: C:\Users\Mister\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=813022"

==================== Загруженные модули (В белом списке) =============

2020-03-07 17:27 - 2020-03-07 17:27 - 101687296 _____ () [Файл не подписан] C:\Users\mister\AppData\Local\GameCenter\Chrome\80.3987.2146\libcef.dll
2020-03-07 04:44 - 2020-03-07 04:44 - 000333824 _____ () [Файл не подписан] C:\Users\mister\AppData\Local\GameCenter\Chrome\80.3987.2146\swiftshader\libegl.dll
2020-03-07 04:44 - 2020-03-07 04:44 - 003011584 _____ () [Файл не подписан] C:\Users\mister\AppData\Local\GameCenter\Chrome\80.3987.2146\swiftshader\libglesv2.dll
2021-01-09 13:41 - 2021-01-09 13:41 - 000144896 _____ () [Файл не подписан] C:\Users\mister\AppData\Local\GameCenter\zlib1.dll
2021-01-09 13:41 - 2021-01-09 13:41 - 000158720 _____ (Igor Pavlov) [Файл не подписан] C:\Users\mister\AppData\Local\GameCenter\7zxa.dll
2020-03-07 10:03 - 2020-03-07 10:03 - 000822784 _____ (The Chromium Authors) [Файл не подписан] C:\Users\mister\AppData\Local\GameCenter\Chrome\80.3987.2146\chrome_elf.dll
2021-01-09 13:41 - 2021-01-14 12:23 - 000694272 _____ (The curl library, hxxps://curl.se/) [Файл не подписан] C:\Users\mister\AppData\Local\GameCenter\libcurl.dll

==================== Alternate Data Streams (В белом списке) ========

==================== Безопасный режим (В белом списке) ==================

==================== Ассоциация (В белом списке) =================

==================== Internet Explorer (В белом списке) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131340519998725897&GUID=C9A67A19-C7CA-49F2-8A08-CEFD7D2AF983
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131340519998729144&GUID=C9A67A19-C7CA-49F2-8A08-CEFD7D2AF983
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://WWW.MICROSOFT.COM/ISAPI/REDIR.DLL?PRD=IE&AR=IESEARCH 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://WWW.MICROSOFT.COM/ISAPI/REDIR.DLL?PRD=IE&AR=IESEARCH 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://WWW.MICROSOFT.COM/ISAPI/REDIR.DLL?PRD=IE&AR=IESEARCH 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://WWW.MICROSOFT.COM/ISAPI/REDIR.DLL?PRD=IE&AR=IESEARCH 
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://WWW.MICROSOFT.COM/ISAPI/REDIR.DLL?PRD=IE&AR=IESEARCH 
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\Software\Microsoft\Internet Explorer\Main,Start Page = ABOUT:BLANK 
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ru-ru/?ocid=iehp
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://WWW.MICROSOFT.COM/ISAPI/REDIR.DLL?PRD=IE&AR=IESEARCH 
SearchScopes: HKU\S-1-5-21-2403352924-2529769915-2289300762-1001 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxps://go.mail.ru/distib/ep/?q={searchTerms}&fr=ntg&product_id=%7B075EDC8A-5106-4DFA-8E4C-2B58EFBF6EB9%7D&gp=813028
SearchScopes: HKU\S-1-5-21-2403352924-2529769915-2289300762-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2403352924-2529769915-2289300762-1001 -> {DB3C9893-EB4E-40E3-B8A7-BB9227BDA798} URL = hxxp://yandex.ru/yandsearch?text={searchTerms}&from=os
SearchScopes: HKU\S-1-5-21-2403352924-2529769915-2289300762-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxps://go.mail.ru/distib/ep/?q={searchTerms}&fr=ntg&product_id=%7B075EDC8A-5106-4DFA-8E4C-2B58EFBF6EB9%7D&gp=813028
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKU\S-1-5-21-2403352924-2529769915-2289300762-1001 -> Нет имени - {C500C267-63BF-451F-8797-4D720C9A2ED9} -  Нет файла
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

==================== Hosts содержимое: =========================

(При необходимости, директива Hosts: может быть включена в fixlist для сброса файла Hosts)

2013-08-22 16:25 - 2021-06-05 14:25 - 000000138 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1       localhost

==================== Другие области ===========================

(В настоящее время нет автоматического исправления для этого раздела.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %JAVA_HOME%\bin
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Mister\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 212.1.224.6 - 212.1.244.6
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Брандмауэр Windows включён

==================== MSCONFIG/TASK MANAGER отключённые элементы ==

(Если запись включена в fixlist, она будет удалена)

HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "Opera Browser Assistant"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "AceWebExtensionUpdater"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "AceWebException"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "DAEMON Tools Ultra Agent"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_1F82BBFFF60712B043D8DA83D15C1195"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "Adguard"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "Epic Privacy Browser Installer"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "AceStream"
HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\...\StartupApproved\Run: => "MailRuUpdater"

==================== Правила Брандмауэра (В белом списке) ================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

FirewallRules: [{FAA75261-FAD2-41B5-A2A2-BEF13846A995}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{9E3E58DA-BA59-4B68-B7AA-740A402EA122}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{44BCAE5C-9E86-4211-8421-3CB8A9C2506F}C:\freetime\formatfactory\formatfactory.exe] => (Block) C:\freetime\formatfactory\formatfactory.exe (chen jun hao -> Free Time) [Файл не подписан]
FirewallRules: [UDP Query User{1EA70A53-735C-48D0-9FA6-DC25582776CD}C:\freetime\formatfactory\formatfactory.exe] => (Block) C:\freetime\formatfactory\formatfactory.exe (chen jun hao -> Free Time) [Файл не подписан]
FirewallRules: [{C0BEE428-A1C1-4287-84A1-14DDC2C81BE8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E71AC377-1336-463A-B0DA-B04A2F6DA2CB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{33A64F70-CC1B-4B32-BECE-7F1633103C4E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3455181A-DE77-40AB-A147-C3C40F384385}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{27266F1D-702C-409D-A267-CCD7ECD3EC52}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F73799E9-4275-4195-AF91-8C2B6D52470F}] => (Allow) C:\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{E4981A56-9298-4EC7-B4C6-17F59588ADE6}] => (Allow) C:\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{A50F9986-44C1-4D01-A9D9-B57AB18A4514}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{A3448418-F025-4725-90F9-F0F11F902032}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{4378C75D-D979-4578-BEA4-A448574A3472}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{4460864C-2616-49B4-AD7B-91D589C50AA7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{A2A10B82-FE1D-4C62-8B5B-439935163A53}C:\users\mister\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\mister\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{29431AD8-6DB1-49E1-B629-DB11368B9A40}C:\users\mister\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\mister\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{7C471938-548D-423D-B1A4-479538C76A96}C:\users\mister\appdata\local\epic privacy browser\application\epic.exe] => (Allow) C:\users\mister\appdata\local\epic privacy browser\application\epic.exe (Hidden Reflex Authors) [Файл не подписан]
FirewallRules: [UDP Query User{0FF362AE-85C9-4E25-A874-ED46E43FBEE2}C:\users\mister\appdata\local\epic privacy browser\application\epic.exe] => (Allow) C:\users\mister\appdata\local\epic privacy browser\application\epic.exe (Hidden Reflex Authors) [Файл не подписан]
FirewallRules: [TCP Query User{22EDCBA0-3CFB-4D83-99D3-6EE7EE1A4328}C:\users\mister\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\mister\appdata\local\gamecenter\gamecenter.exe (LLC Mail.Ru -> MY.COM B.V.)
FirewallRules: [UDP Query User{ABA4E232-E4A4-47E0-87F2-B8F405BFD8DB}C:\users\mister\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\mister\appdata\local\gamecenter\gamecenter.exe (LLC Mail.Ru -> MY.COM B.V.)
FirewallRules: [TCP Query User{4C13DAFB-E729-47B3-B950-8F2FF116EB2E}C:\mygames\browserclientx64\browserclient.exe] => (Allow) C:\mygames\browserclientx64\browserclient.exe (LLC Mail.Ru -> LLC Mail.Ru)
FirewallRules: [UDP Query User{24913D34-8CF4-4135-A597-9DE8FE54EF14}C:\mygames\browserclientx64\browserclient.exe] => (Allow) C:\mygames\browserclientx64\browserclient.exe (LLC Mail.Ru -> LLC Mail.Ru)
FirewallRules: [{65C7C539-ADDD-4CB4-B49D-DC417D53EC7F}] => (Allow) C:\Users\mister\AppData\Roaming\ACEStream\engine\ace_engine.exe (INNOVATIVE DIGITAL TECHNOLOGIES LLC -> Innovative Digital Technologies)
FirewallRules: [{FFB2FDE8-5486-4171-ABD6-E9E1C8E9FDFD}] => (Allow) C:\Users\mister\AppData\Roaming\ACEStream\engine\ace_engine.exe (INNOVATIVE DIGITAL TECHNOLOGIES LLC -> Innovative Digital Technologies)
FirewallRules: [TCP Query User{0AAD404A-FEB9-4C57-BAD9-A235E83C6854}C:\mygames\browserclientx86\browserclient.exe] => (Allow) C:\mygames\browserclientx86\browserclient.exe (LLC Mail.Ru -> LLC Mail.Ru)
FirewallRules: [UDP Query User{A556BAFB-AC81-4B99-B8C4-B2B136C194FD}C:\mygames\browserclientx86\browserclient.exe] => (Allow) C:\mygames\browserclientx86\browserclient.exe (LLC Mail.Ru -> LLC Mail.Ru)
FirewallRules: [{8DFE1870-5ED8-41DB-BD7C-26801AB44CFC}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{EBDFE55E-0147-4992-9391-3A92019D42F0}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{CD2AD03D-6DE0-4D7C-BBCB-E26C62F38493}] => (Allow) C:\Program Files\Opera\76.0.4017.154\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{CC2C8EBB-820E-4778-A2AB-31FF527C177E}] => (Allow) C:\Program Files\Opera\76.0.4017.177\opera.exe (Opera Software AS -> Opera Software)

==================== Точки восстановления =========================

15-05-2021 11:15:32 Restore Point Created by FRST

==================== Неисправное Устройство в Менеджере Устройств ============

Name: Kaspersky Security Data Escort Adapter
Description: Kaspersky Security Data Escort Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Kaspersky Security Data Escort Provider
Service: kltap
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: Динамики (2- Устройство с поддержкой High Definition Audio)
Description: Конечная точка Audio
Class Guid: {c166523c-fe0c-4a94-a586-f1a80cfbbf3e}
Manufacturer: Майкрософт
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Ошибки журнала событий: ========================

Ошибки приложения:
==================
Error: (06/05/2021 10:31:38 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Сбой активации лицензий (slui.exe) со следующим кодом ошибки:
hr=0x8007007B
Аргументы командной строки:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (06/05/2021 10:31:31 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Сбой активации лицензий (slui.exe) со следующим кодом ошибки:
hr=0x8007007B
Аргументы командной строки:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/05/2021 02:27:53 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Сбой активации лицензий (slui.exe) со следующим кодом ошибки:
hr=0x8007007B
Аргументы командной строки:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/05/2021 02:27:46 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Сбой активации лицензий (slui.exe) со следующим кодом ошибки:
hr=0x8007007B
Аргументы командной строки:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (06/05/2021 02:27:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Имя сбойного приложения: FreemakeUtilsService.exe, версия: 1.0.0.0, метка времени: 0x5ed5ef0c
Имя сбойного модуля: KERNELBASE.dll, версия: 6.3.9600.18666, метка времени: 0x58f32841
Код исключения: 0xe0434352
Смещение ошибки: 0x00015608
Идентификатор сбойного процесса: 0x594
Время запуска сбойного приложения: 0x01d759fdbcac25ca
Путь сбойного приложения: C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
Путь сбойного модуля: C:\Windows\SYSTEM32\KERNELBASE.dll
Идентификатор отчета: 044b046b-c5f1-11eb-8357-74d4355702d0
Полное имя сбойного пакета: 
Код приложения, связанного со сбойным пакетом:

Error: (06/05/2021 02:27:16 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Приложение: FreemakeUtilsService.exe
Версия платформы: v4.0.30319
Описание. Процесс был завершен из-за необработанного исключения.
Сведения об исключении: System.IO.FileNotFoundException
   в FreemakeUtilsService.Program.Main(System.String[])

Error: (06/05/2021 02:03:25 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Сбой активации лицензий (slui.exe) со следующим кодом ошибки:
hr=0x8007007B
Аргументы командной строки:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (06/05/2021 02:03:15 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Сбой активации лицензий (slui.exe) со следующим кодом ошибки:
hr=0x8007007B
Аргументы командной строки:
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=81671aaf-79d1-4eb1-b004-8cbbe173afea;NotificationInterval=1440;Trigger=UserLogon;SessionId=1


Системные ошибки:
=============
Error: (06/05/2021 02:27:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Сбой при запуске службы "Freemake Improver" из-за ошибки 
Служба не ответила на запрос своевременно.

Error: (06/05/2021 02:27:32 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Превышение времени ожидания (120000 мс) при ожидании подключения службы "Freemake Improver".

Error: (06/05/2021 02:01:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Сбой при запуске службы "Freemake Improver" из-за ошибки 
Служба не ответила на запрос своевременно.

Error: (06/05/2021 02:01:36 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Превышение времени ожидания (120000 мс) при ожидании подключения службы "Freemake Improver".

Error: (06/05/2021 02:00:54 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Предыдущее завершение работы системы в 13:00:48 на ‎05.‎06.‎2021 было неожиданным.

Error: (06/05/2021 12:35:43 PM) (Source: DCOM) (EventID: 10010) (User: COMPHOUSE)
Description: Регистрация сервера {1B1F472E-3221-4826-97DB-2C2324D389AE} DCOM не выполнена за отведенное время ожидания.

Error: (06/05/2021 12:35:12 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT AUTHORITY)
Description: 0x8000002a42\SystemRoot\System32\Config\RegBack\SYSTEM

Error: (06/05/2021 12:35:10 PM) (Source: DCOM) (EventID: 10010) (User: COMPHOUSE)
Description: Регистрация сервера {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} DCOM не выполнена за отведенное время ожидания.


==================== Информация о памяти =========================== 

BIOS: Award Software International, Inc. F1 10/04/2013
Материнская плата: Gigabyte Technology Co., Ltd. GA-78LMT-S2PV
Процессор: AMD FX(tm)-4300 Quad-Core Processor 
Процент используемой памяти: 37%
Общий объём физической RAM: 4077.55 MB
Доступно физической RAM: 2540.39 MB
Всего Виртуальной: 7789.55 MB
Доступно Виртуальной: 6234.41 MB

==================== Диски ================================

Drive c: () (Fixed) (Total:931.17 GB) (Free:61.03 GB) NTFS

\\?\Volume{3f7fdec0-c7df-11e4-824e-806e6f6e6963}\ (Зарезервировано системой) (Fixed) (Total:0.34 GB) (Free:0.05 GB) NTFS

==================== MBR & Таблица Разделов ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 4B9D2E6E)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)

==================== Конец от Addition.txt =======================