Miss vale
Topic Starter
My computer had been infected after trying to install a software received from a seller in online. Please help me… I only manage to recover file in drive C. But data inside my drive D is encrypted. But that's I just reinstalled my windows 10 pro. So here I am still afraid if the malware virus still infected my computer.
Here is the FRST.txt log
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\…\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942936 2018-11-03] (Logitech -> Logitech, Inc.)
HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9269312 2018-11-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\…\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [109664 2020-11-05] (Avast Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-2610575217-2170350634-4077445953-1001\…\Run: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [1938296 2020-11-05] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2610575217-2170350634-4077445953-1001\…\Run: [AvastBrowserAutoLaunch_4F24907E53469188BD63443A37D2E24D] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2117880 2020-10-22] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\86.0.4240.183\Installer\chrmstp.exe [2020-11-04] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\86.0.6531.112\Installer\chrmstp.exe [2020-11-05] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1C9A64DD-9910-493E-9F5F-0F5F49E14DD8} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-11-05] (Avast Software s.r.o. -> AVAST Software)
Task: {25C47041-341B-4C11-AFAF-AD5EA16EED97} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1741416 2020-11-05] (Avast Software s.r.o. -> Avast Software)
Task: {38C63171-2520-48FA-8BC3-A4349976CAA2} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [117616 2020-11-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B061C16-EF71-4856-8FCF-98233976BE55} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4496488 2020-11-04] (Avast Software s.r.o. -> AVAST Software)
Task: {7C7F972D-3356-4491-8232-508EB9803C3A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [117616 2020-11-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {958DEDF8-B490-4C50-8A9A-53C6844B581D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-11-04] (Google LLC -> Google LLC)
Task: {A54A5F4C-218A-4BD6-A8F9-697B0185A2BE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3982776 2020-11-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {A8BA2E72-1D77-4BDB-B3BE-6EB889A1C388} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2117880 2020-10-22] (Avast Software s.r.o. -> AVAST Software)
Task: {B6BD56D9-0F9B-4650-A6EF-D1CCA7F48073} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-11-04] (Google LLC -> Google LLC)
Task: {C010E9B5-BA18-485D-9429-0D0A1DC16424} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2020-11-05] (Avast Software s.r.o. -> AVAST Software)
Task: {D0FA9687-3C38-4A06-8957-091FDA5EC9B6} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2117880 2020-10-22] (Avast Software s.r.o. -> AVAST Software)
Task: {E5BD9A66-4372-4CD2-805C-2E2F5A79FA03} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [3982776 2020-11-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {EF18574B-B41E-4736-8503-E8E753DCDBE0} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [2774904 2020-11-05] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
the rest of the text I upload the with the original file. please help me…
