Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-05-2022 01 ([color=red]ATTENTION: ====> FRSTversion is 32 days old and could be outdated[/color])
Ran by User (administrator) on GOODCOMP (Gigabyte Technology Co., Ltd. 945GZM-S2) (03-06-2022 23:37:09)
Running from C:\Documents and Settings\User\Рабочий стол
Loaded Profiles: User
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: Русский -> Русский
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe <8>
(Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\alg.exe
(Microsoft Windows Component Publisher -> Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Microsoft Windows Hardware Compatibility Publisher -> S3 Graphics, Inc.) C:\WINDOWS\system32\VTTimer.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [VTTimer] => C:\WINDOWS\system32\VTTimer.exe [53248 2005-03-07] (Microsoft Windows Hardware Compatibility Publisher -> S3 Graphics, Inc.)
HKLM\...\Run: [VTTrayp] => C:\WINDOWS\system32\VTtrayp.exe [163840 2005-10-31] (Microsoft Windows Hardware Compatibility Publisher -> S3 Graphics Co., Ltd.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2029640 2009-05-14] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [135168 2021-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
HKLM\...\Run: [HotKeysCmds] => C:\WINDOWS\system32\hkcmd.exe [159744 2021-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
HKLM\...\Run: [Persistence] => C:\WINDOWS\system32\igfxpers.exe [131072 2021-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20145368 2021-11-10] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
Winlogon\Notify\crypt32chain: C:\WINDOWS\system32\crypt32.dll [2013-10-07] (Корпорация Майкрософт)
Winlogon\Notify\cscdll: C:\WINDOWS\system32\cscdll.dll [2008-04-14] (Корпорация Майкрософт)
Winlogon\Notify\ScCertProp: C:\WINDOWS\system32\wlnotify.dll [2008-04-14] (Корпорация Майкрософт)
Winlogon\Notify\Schedule: C:\WINDOWS\system32\wlnotify.dll [2008-04-14] (Корпорация Майкрософт)
Winlogon\Notify\sclgntfy: C:\WINDOWS\system32\sclgntfy.dll [2008-04-14] (Корпорация Майкрософт)
Winlogon\Notify\SensLogn: C:\WINDOWS\system32\WlNotify.dll [2008-04-14] (Корпорация Майкрософт)
Winlogon\Notify\termsrv: C:\WINDOWS\system32\wlnotify.dll [2008-04-14] (Корпорация Майкрософт)
Winlogon\Notify\wlballoon: C:\WINDOWS\system32\wlnotify.dll [2008-04-14] (Корпорация Майкрософт)
HKU\S-1-5-21-1482476501-1547161642-682003330-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)
HKLM\...\Windows NT x86\Print Processors\winprint: localspl.dll
HKLM\...\Print\Monitors\BJ Language Monitor: C:\WINDOWS\system32\cnbjmon.dll [48128 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\...\Print\Monitors\Local Port: C:\WINDOWS\system32\localspl.dll [346624 2012-05-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\...\Print\Monitors\PJL Language Monitor: C:\WINDOWS\system32\pjlmon.dll [15360 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)
HKLM\...\Print\Monitors\Standard TCP/IP Port: C:\WINDOWS\system32\tcpmon.dll [46080 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\Microsoft\Active Setup\Installed Components: [<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] -> C:\WINDOWS\system32\ieudinit.exe [2009-03-08] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\WINDOWS\inf\unregmp2.exe [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] -> C:\WINDOWS\system32\shmgrate.exe [2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] -> 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] -> C:\Program Files\Outlook Express\setup50.exe [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{5945c046-1e7d-11d1-bc44-00c04fd912be}] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] -> C:\WINDOWS\system32\advpack.dll [2009-03-08] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] -> 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{7790769C-0471-11d2-AF11-00C04FA35D02}] -> C:\Program Files\Outlook Express\setup50.exe [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\49.0.2623.112\Installer\chrmstp.exe [2019-06-21] (Google Inc -> Google Inc.)
HKLM\Software\...\Winlogon\GPExtensions: [{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}] -> C:\WINDOWS\system32\gptext.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{25537BA6-77A8-11D2-9B6C-0000F8080861}] -> C:\WINDOWS\system32\fdeploy.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{3610eda5-77ef-11d2-8dc5-00c04fa31a66}] -> C:\WINDOWS\system32\dskquota.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{426031c0-0b47-4852-b0ca-ac3d37bfcb39}] -> C:\WINDOWS\system32\gptext.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{42B5FAAE-6536-11d2-AE5A-0000F87571E3}] -> C:\WINDOWS\system32\gptext.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}] -> C:\WINDOWS\system32\scecli.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}] -> C:\WINDOWS\system32\scecli.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{C631DF4C-088F-4156-B058-4375F0853CD8}] -> C:\WINDOWS\System32\cscui.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{c6dc5466-785a-11d2-84d0-00c04fb169f7}] -> C:\WINDOWS\system32\appmgmts.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
HKLM\Software\...\Winlogon\GPExtensions: [{e437bc1c-aa7d-11d2-a382-00c04f991e27}] -> C:\WINDOWS\system32\gptext.dll [2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Policies: C:\Documents and Settings\All Users\NTUSER.pol: Restriction <==== ATTENTION
Policies: C:\Documents and Settings\User\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks=============================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player NPAPI Notifier.job => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_32_0_0_223_Plugin.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_32_0_0_223_pepper.exe
Task: C:\WINDOWS\Tasks\Driver Booster Scheduler.job => C:\Program Files\IObit\Driver Booster\9.1.0\Scheduler.exe
Task: C:\WINDOWS\Tasks\Driver Booster SkipUAC (User).job => C:\Program Files\IObit\Driver Booster\9.1.0\DriverBooster.exe
Task: C:\WINDOWS\Tasks\Driver Booster Update.job => C:\Program Files\IObit\Driver Booster\9.1.0\AutoUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Обновление Браузера Яндекс.job => C:\Documents and Settings\User\Local Settings\Application Data\Yandex\YandexBrowser\Application\browser.exe
Task: C:\WINDOWS\Tasks\Уведомление о завершении поддержки Microsoft Windows XP ежемесячно.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Уведомлением о завершении поддержки Microsoft Windows XP при входе.job => C:\WINDOWS\system32\xp_eos.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll => No File  ATTENTION: LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5 02 %SystemRoot%\System32\winrnr.dll => No File  ATTENTION: LibraryPath should be "%SystemRoot%\System32\winrnr.dll"
Winsock: Catalog5 03 %SystemRoot%\System32\mswsock.dll => No File  ATTENTION: LibraryPath should be "%SystemRoot%\system32\mswsock.dll"
Winsock: Catalog9 01 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 02 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 03 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 06 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 07 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 08 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 09 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 10 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 11 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 12 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 13 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 14 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 15 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 16 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 17 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 18 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 19 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 20 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 21 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 22 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 23 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 24 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 25 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 26 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 27 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 28 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Winsock: Catalog9 29 C:\WINDOWS\system32\mswsock.dll [247296 2008-06-20] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{223E6503-6B9C-4840-971E-27E60B6983AB}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{A2BFF9B8-8707-4A9D-AEBC-ACB1ECFED8A2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{B4B606DE-22A0-4BBA-B176-3E1C5F79D241}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{B6483B28-133F-4A14-AC3E-581CE21C3D5C}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\05c4lcm6.default [2022-06-03]
FF Homepage: C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\05c4lcm6.default -> hxxp://yandex.ru
FF Extension: (Hotfix for Firefox bug 1548973 (armagaddon 2.0) mitigation) - C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\05c4lcm6.default\features\{4aeec3a0-723a-4bdc-9896-8152ffdcfeb3}\hotfix-bug-1548973@mozilla.org.xpi [2019-06-05] [Legacy]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: (No Name) - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2020-11-18] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_32_0_0_223.dll [2019-07-09] (Adobe Inc. -> ) [File not signed]
FF Plugin: @real.com/nppl3260;version=6.0.11.2105 -> C:\Program Files\K-Lite Codec Pack\real\browser\plugins\nppl3260.dll [2005-07-06] (RealNetworks, Inc.) [File not signed]
FF Plugin: @real.com/nprpjplug;version=6.0.12.1212 -> C:\Program Files\K-Lite Codec Pack\real\browser\plugins\nprpjplug.dll [2005-07-06] (RealNetworks, Inc.) [File not signed]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\firefox-branding.js [2010-10-27]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\firefox-l10n.js [2010-10-27]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\firefox.js [2010-10-27]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\reporter.js [2010-10-27]

Chrome: 
=======
CHR Profile: C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default [2022-06-03]
CHR DefaultSearchURL: Default -> hxxp://yandex.ru/{yandex:searchPath}?text={searchTerms}
CHR DefaultSearchKeyword: Default -> yandex.ru
CHR DefaultNewTabURL: Default -> hxxps://www.yandex.ru/chrome/newtab
CHR DefaultSuggestURL: Default -> hxxps://api.browser.yandex.ru/suggest/get?part={searchTerms}
CHR Extension: (Презентации) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-06-05]
CHR Extension: (Документы) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-06-05]
CHR Extension: (Диск Google) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-06-05]
CHR Extension: (YouTube) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-06-05]
CHR Extension: (Adblock Plus - бесплатный блокировщик рекламы) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-09-04]
CHR Extension: (Таблицы) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-06-05]
CHR Extension: (Google Документы офлайн) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-29]
CHR Extension: (Платежная система Интернет-магазина Chrome) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]
CHR Extension: (Browsec VPN - Free and Unlimited VPN) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\omghfjlpggmjjaagoclmmobgdodcjboh [2020-04-24]
CHR Extension: (Gmail) - C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-05]

Yandex: 
=======
YAN Profile: C:\Documents and Settings\User\Local Settings\Application Data\Yandex\YandexBrowser\User Data\Default [2022-05-27]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2020-07-29] (Adobe Systems) [File not signed]
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [20680 2009-05-14] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [731840 2009-05-14] (ESET, spol. s r.o. -> ESET)
S3 SwPrv; C:\WINDOWS\system32\dllhost.exe /Processid:{CBF6EFCA-A3AA-4483-B32E-617368822FD1} [5120 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 ACPI; C:\WINDOWS\System32\DRIVERS\ACPI.sys [188288 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S4 ACPIEC; C:\Windows\System32\Drivers\ACPIEC.sys [11776 2003-07-07] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [3960896 2006-03-31] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2021-11-10] (Creative Labs Inc -> Creative)
S3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [701440 2004-08-17] (Microsoft Windows Component Publisher -> ATI Technologies Inc.)
S4 dmboot; C:\WINDOWS\System32\drivers\dmboot.sys [799872 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Microsoft и VERITAS Software)
R0 dmio; C:\WINDOWS\System32\drivers\dmio.sys [153600 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Microsoft и VERITAS Software)
R2 eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [114472 2009-05-14] (ESET, spol. s r.o. -> ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [107256 2009-05-14] (ESET, spol. s r.o. -> ESET)
S3 ENTECH; C:\WINDOWS\system32\DRIVERS\ENTECH.SYS [20400 1999-10-21] (EnTech Taiwan) [File not signed]
R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [94360 2009-05-14] (ESET, spol. s r.o. -> ESET)
S3 FETND5BV; C:\WINDOWS\System32\DRIVERS\fetnd5bv.sys [42496 2005-11-16] (Microsoft Windows Hardware Compatibility Publisher -> VIA Technologies, Inc.)
S3 FETNDIS; C:\WINDOWS\System32\DRIVERS\fetnd5.sys [27165 2001-08-17] (Microsoft Windows Component Publisher -> VIA Technologies, Inc.)
R1 Fips; C:\Windows\System32\Drivers\Fips.sys [44544 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
R0 Ftdisk; C:\WINDOWS\System32\DRIVERS\ftdisk.sys [125440 2003-07-07] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Windows Component Publisher -> Microsoft Corporation)
R3 HDAudBus; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [144384 2008-04-13] (Microsoft Windows Component Publisher -> Windows (R) Server 2003 DDK provider)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [23840 2021-11-10] (Martin Malik - REALiX -> REALiX(tm))
R1 i8042prt; C:\WINDOWS\System32\DRIVERS\i8042prt.sys [53120 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
R0 isapnp; C:\WINDOWS\System32\DRIVERS\isapnp.sys [37504 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
R1 Kbdclass; C:\WINDOWS\System32\DRIVERS\kbdclass.sys [24832 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S1 kbdhid; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [14720 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S3 Modem; C:\Windows\System32\Drivers\Modem.sys [30208 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2021-11-10] (Creative Labs Inc -> Creative Technology Ltd.)
R1 Mouclass; C:\WINDOWS\System32\DRIVERS\mouclass.sys [23296 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
R3 mouhid; C:\WINDOWS\System32\DRIVERS\mouhid.sys [12160 2001-10-19] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S3 nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [1897408 2004-08-03] (Microsoft Windows Component Publisher -> NVIDIA Corporation)
R3 Parport; C:\WINDOWS\System32\DRIVERS\parport.sys [80128 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
R2 ParVdm; C:\Windows\System32\Drivers\ParVdm.sys [6912 2003-07-07] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
R0 PCI; C:\WINDOWS\System32\DRIVERS\pci.sys [68480 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
R0 PCIIde; C:\WINDOWS\System32\DRIVERS\pciide.sys [3328 2003-07-07] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S4 Pcmcia; C:\Windows\System32\Drivers\Pcmcia.sys [120192 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
R3 Ptilink; C:\WINDOWS\System32\DRIVERS\ptilink.sys [17792 2003-07-07] (Microsoft Windows Component Publisher -> Parallel Technologies, Inc.)
R0 PxHelp20; C:\WINDOWS\System32\DRIVERS\PxHelp20.sys [20016 2003-10-28] (Sonic Solutions) [File not signed]
R1 redbook; C:\WINDOWS\System32\DRIVERS\redbook.sys [58368 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S3 rt2870; C:\WINDOWS\System32\DRIVERS\rt2870.sys [2850264 2021-11-10] (MEDIATEK INC. -> MediaTek Inc.)
R3 RtlWlanu; C:\WINDOWS\System32\DRIVERS\rtwlanu_XP.sys [5873896 2019-05-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Windows Component Publisher -> Microsoft Corporation)
S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [20480 2008-04-13] (Microsoft Windows Component Publisher -> Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
R1 Serial; C:\WINDOWS\System32\DRIVERS\serial.sys [65024 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S3 SISNIC; C:\WINDOWS\System32\DRIVERS\sisnic.sys [32768 2008-04-13] (Microsoft Windows Component Publisher -> SiS Corporation)
S3 smwdm; C:\WINDOWS\System32\drivers\smwdm.sys [222848 2015-12-01] (Analog Devices, Inc.) [File not signed]
R0 sr; C:\WINDOWS\System32\DRIVERS\sr.sys [73472 2008-04-14] (Microsoft Windows Component Publisher -> Корпорация Майкрософт)
S3 uti3otqy; C:\WINDOWS\system32\Drivers\uti3otqy.sys [7168 2022-05-26] () [File not signed]
S3 viagfx; C:\WINDOWS\System32\DRIVERS\vtmini.sys [248704 2006-02-09] (Microsoft Windows Hardware Compatibility Publisher -> Copyright (C) VIA/S3 Graphics Co, Ltd.)
R0 videX32; C:\WINDOWS\System32\DRIVERS\videX32.sys [9728 2006-02-23] (Microsoft Windows Hardware Compatibility Publisher -> VIA Technologies, Inc.)
R0 xfilt; C:\WINDOWS\System32\DRIVERS\xfilt.sys [11264 2006-02-23] (Microsoft Windows Hardware Compatibility Publisher -> VIA Technologies,Inc)
S4 IntelIde; no ImagePath
U1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-06-03 23:37 - 2022-06-03 23:37 - 000028541 _____ C:\Documents and Settings\User\Рабочий стол\FRST.txt
2022-06-03 23:36 - 2022-06-03 23:37 - 000000000 ____D C:\FRST
2022-06-03 23:33 - 2022-06-03 23:34 - 002072576 _____ (Farbar) C:\Documents and Settings\User\Рабочий стол\FRST.exe
2022-05-27 16:43 - 2022-06-03 23:28 - 000000000 ____D C:\Documents and Settings\User\Рабочий стол\uvs_latest
2022-05-27 16:42 - 2022-05-27 16:42 - 003554580 _____ C:\Documents and Settings\User\Рабочий стол\uvs_latest.zip
2022-05-26 21:48 - 2022-05-26 21:48 - 000002351 _____ C:\Documents and Settings\User\Рабочий стол\Yandex.lnk
2022-05-26 21:48 - 2022-05-26 21:48 - 000000000 ____D C:\Documents and Settings\User\Главное меню\Программы\Yandex
2022-05-26 21:02 - 2022-05-26 21:02 - 000007168 _____ C:\WINDOWS\system32\Drivers\uti3otqy.sys
2022-05-26 20:58 - 2022-05-26 21:11 - 000000000 ____D C:\Documents and Settings\User\Рабочий стол\avz4
2022-05-26 19:24 - 2022-05-26 20:49 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2022-05-17 23:35 - 2022-06-03 23:24 - 000000000 ____D C:\Documents and Settings\User\Рабочий стол\Посуда

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-06-03 23:37 - 2006-11-13 15:58 - 000000000 ____D C:\Documents and Settings\User\Рабочий стол
2022-06-03 23:37 - 2006-11-13 15:58 - 000000000 ____D C:\Documents and Settings\User\Local Settings\Temp
2022-06-03 23:36 - 2021-12-22 16:17 - 000000290 _____ C:\WINDOWS\Tasks\Driver Booster Scheduler.job
2022-06-03 23:29 - 2021-12-22 16:17 - 000000282 _____ C:\WINDOWS\Tasks\Driver Booster Update.job
2022-06-03 23:29 - 2019-06-11 18:19 - 000000220 _____ C:\WINDOWS\Tasks\Уведомлением о завершении поддержки Microsoft Windows XP при входе.job
2022-06-03 23:29 - 2019-06-05 00:40 - 000000952 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2022-06-03 23:29 - 2019-06-05 00:40 - 000000000 ____D C:\Program Files\Google
2022-06-03 23:29 - 2006-11-13 15:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-03 23:28 - 2006-11-13 18:44 - 000000000 ___RD C:\Documents and Settings\All Users\Главное меню\Программы
2022-06-03 23:28 - 2006-11-13 15:58 - 000000278 ___SH C:\Documents and Settings\User\ntuser.ini
2022-06-03 23:28 - 2006-11-13 15:57 - 000032530 _____ C:\WINDOWS\SchedLgU.Txt
2022-06-03 23:27 - 2014-09-07 00:46 - 000000000 ____D C:\WINDOWS\Minidump
2022-06-03 23:19 - 2019-06-08 17:29 - 000000000 ____D C:\Documents and Settings\User\Application Data\Telegram Desktop
2022-06-03 23:05 - 2006-12-04 23:19 - 000000008 _____ C:\WINDOWS\23117.tds
2022-06-03 22:45 - 2019-06-05 00:40 - 000000956 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2022-06-03 22:07 - 2020-03-21 16:07 - 000000494 _____ C:\WINDOWS\Tasks\Обновление Браузера Яндекс.job
2022-06-02 15:41 - 2003-07-07 15:00 - 000002206 _____ C:\WINDOWS\system32\wpa.dbl
2022-05-29 14:59 - 2006-11-13 15:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
2022-05-28 23:27 - 2019-08-02 00:02 - 000000956 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2022-05-28 23:05 - 2019-06-21 19:37 - 000000944 _____ C:\WINDOWS\Tasks\Adobe Flash Player NPAPI Notifier.job
2022-05-27 16:41 - 2020-06-27 14:33 - 000000000 ____D C:\Documents and Settings\User\Мои документы\Telegram Desktop
2022-05-26 21:48 - 2020-03-21 16:04 - 000000000 ____D C:\Documents and Settings\User\Application Data\Yandex
2022-05-26 21:48 - 2006-11-13 15:58 - 000000000 ___RD C:\Documents and Settings\User\Главное меню\Программы
2022-05-26 21:45 - 2010-11-24 01:59 - 000000000 ____D C:\Documents and Settings\User\Мои документы\Загрузки
2022-05-26 19:42 - 2019-06-05 00:12 - 000000736 _____ C:\Documents and Settings\All Users\Главное меню\Программы\Mozilla Firefox.lnk
2022-05-26 19:42 - 2010-11-24 01:57 - 000000730 _____ C:\Documents and Settings\All Users\Рабочий стол\Mozilla Firefox.lnk
2022-05-26 19:42 - 2010-11-24 01:57 - 000000000 ____D C:\Program Files\Mozilla Firefox

==================== Files in the root of some directories ========

2020-06-28 01:19 - 2020-06-28 01:19 - 000003584 _____ () C:\Documents and Settings\User\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-03-19 18:57 - 2020-03-19 19:26 - 000000041 ___SH () C:\Documents and Settings\All Users\Application Data\.zreglib

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================