Возможно вирус в браузере

start
CreateRestorePoint:
HKU\S-1-5-21-1631299907-416768166-1816831618-1001\...\MountPoints2: {9fdc4132-6b4c-11e3-824e-806e6f6e6963} - "E:\Autorun.exe" 
FF Extension: (Поиск@Mail.Ru) - C:\Users\Иван\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\search@mail.ru [2017-01-23]
FF HKU\S-1-5-21-1631299907-416768166-1816831618-1001\...\Firefox\Extensions: [magicplayer@torrentstream.org] - C:\Users\Иван\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org => not found
CHR HomePage: Default -> hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBFnYN5R-SRTQR4zPSPgVzx87ub16L9WpT-iu5ajtWESAVIrWFrwJsy0P0hYkIgnkZn6MFfot0sBSBWUCy6EUwOvdWPjCikEe4qDXLnIHrlH4nh3e7xmVFtqJtqoduFzcmFmtzzRfpUko3iCz96n9qaXnziX4Wzi6gQFwztjfuwm-iC2Cs-3tRp6RN1
CHR StartupUrls: Default -> "hxxp://www-searching.com/?pid=s&s=h2dzbcnbl1au,5b99c788-7a6b-421f-bdaa-29e917d2c97d,"
S2 AVG Antivirus; "C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe" [X]
S3 AVG Firewall; "C:\Program Files (x86)\AVG\Antivirus\afwServ.exe" [X]
S3 avgbIDSAgent; "C:\Program Files (x86)\AVG\Antivirus\x64\aswidsagenta.exe" [X]
S3 klvssbrigde64; "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 17.0.0\x64\vssbridge64.exe" [X]
S2 Liviwardjetit; C:\Program Files (x86)\Arozentghanety\Mwpcln.dll [X]
S3 avgbdisk; C:\WINDOWS\system32\drivers\avgbdiska.sys [165624 2017-02-13] (AVG Technologies CZ, s.r.o.)
S3 avgbidsdriver; C:\WINDOWS\system32\drivers\avgbidsdrivera.sys [311592 2017-02-13] (AVG Technologies CZ, s.r.o.)
S3 avgbidsh; C:\WINDOWS\system32\drivers\avgbidsha.sys [192096 2017-02-13] (AVG Technologies CZ, s.r.o.)
S3 avgblog; C:\WINDOWS\system32\drivers\avgbloga.sys [336920 2017-02-13] (AVG Technologies CZ, s.r.o.)
S3 avgbuniv; C:\WINDOWS\system32\drivers\avgbuniva.sys [50848 2017-02-13] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\WINDOWS\system32\drivers\avgHwid.sys [39288 2017-02-13] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\WINDOWS\system32\drivers\avgMonFlt.sys [127072 2017-02-13] (AVG Technologies CZ, s.r.o.)
S3 avgNetSec; C:\WINDOWS\system32\drivers\avgNetSec.sys [456936 2017-02-13] (AVG Technologies CZ, s.r.o.)
S3 avgRdr; C:\WINDOWS\system32\drivers\avgRdr2.sys [101624 2017-02-13] (AVG Technologies CZ, s.r.o.)
S3 avgSnx; C:\WINDOWS\system32\drivers\avgSnx.sys [992488 2017-02-13] (AVG Technologies CZ, s.r.o.)
R1 BDMWrench_x64; C:\WINDOWS\System32\DRIVERS\BDMWrench_x64.sys [56136 2014-11-06] (Baidu)
U3 aswbdisk; no ImagePath
S0 avgRvrt; \SystemRoot\system32\drivers\avgRvrt.sys [X]
S1 avgSP; \SystemRoot\system32\drivers\avgSP.sys [X]
S3 avgStm; \SystemRoot\system32\drivers\avgStm.sys [X]
S3 avgVmm; \SystemRoot\system32\drivers\avgVmm.sys [X]
S1 bd0001; system32\DRIVERS\bd0001.sys [X]
S1 bd0002; system32\DRIVERS\bd0002.sys [X]
S1 dzrlhceg; \??\C:\WINDOWS\system32\drivers\dzrlhceg.sys [X]
S1 kozaekyr; \??\C:\WINDOWS\system32\drivers\kozaekyr.sys [X]
2017-02-19 00:05 - 2017-02-19 00:05 - 00000008 __RSH C:\Users\Все пользователи\ntuser.pol
2017-02-19 00:05 - 2017-02-19 00:05 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-02-13 10:59 - 2017-02-13 10:59 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-02-13 10:56 - 2017-02-18 20:30 - 00000000 ____D C:\Users\Все пользователи\AVAST Software
2017-02-13 10:56 - 2017-02-18 20:30 - 00000000 ____D C:\ProgramData\AVAST Software
2017-02-13 10:20 - 2017-02-13 10:20 - 00992488 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2017-02-13 10:20 - 2017-02-13 10:20 - 00127072 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2017-02-13 10:20 - 2017-02-13 10:20 - 00101624 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2017-02-13 10:20 - 2017-02-13 10:20 - 00039288 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgHwid.sys
2017-02-13 10:19 - 2017-02-13 10:19 - 00456936 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgNetSec.sys
2017-02-13 10:19 - 2017-02-13 10:19 - 00336920 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbloga.sys
2017-02-13 10:19 - 2017-02-13 10:19 - 00311592 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdrivera.sys
2017-02-13 10:19 - 2017-02-13 10:19 - 00192096 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsha.sys
2017-02-13 10:19 - 2017-02-13 10:19 - 00165624 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbdiska.sys
2017-02-13 10:19 - 2017-02-13 10:19 - 00050848 ____C (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniva.sys
2017-02-13 09:13 - 2017-02-13 09:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hamster Soft
2017-02-19 00:05 - 2016-04-16 09:11 - 00000008 __RSH C:\Users\Иван\ntuser.pol
2017-02-14 12:15 - 2016-04-23 12:23 - 00000000 ____D C:\Users\Все пользователи\Kaspersky Lab
2017-02-14 12:15 - 2016-04-23 12:23 - 00000000 ____D C:\ProgramData\Kaspersky Lab
Task: {0284D60A-B07A-4696-985E-C4EA25663FF3} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {372C49A0-FF02-49E1-B52B-C66373FC7338} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {381F3457-5935-413A-A7B9-69E3A7C7CCED} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {3D85DBBF-AD09-4A8E-9837-42E14003053A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {4C78D339-C9D6-464D-A884-9A9BCFFE6D93} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {747DD89C-2FAC-4270-97DA-4E2724FF4CE6} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe 
Task: {A383B587-2AF6-4142-8C3A-BECF0E0ABC9C} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {B780E09C-F4DC-4F3A-8BF7-D56BFE4AC6E2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {B78A7399-9B58-4C6D-93C6-E9B14B0E0A00} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {7B5D1018-863B-47CA-935A-1BDD49D37802} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\SymErr.exe 
Task: {BD09BB6D-4FEC-4924-8551-6BFA0608C5DE} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\SymErr.exe 
Task: {C3ECB2A4-05A1-47D8-BEEC-9D8172E6F92A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {E6C32377-5993-474A-A287-28F1B66B0076} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {E8AEE976-3840-418B-A615-978210B0F37B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: C:\WINDOWS\Tasks\0614aUpdateInfo.job => C:\ProgramData\Avg_Update_0614a\0614a_AVG-Secure-Search-Update.exe
Hosts:
HKU\S-1-5-21-1631299907-416768166-1816831618-1001\...\StartupApproved\Run: => "AVG-Secure-Search-Update_1213b"
HKU\S-1-5-21-1631299907-416768166-1816831618-1001\...\StartupApproved\Run: => "AceStream"
CMD: ipconfig /flushdns
CMD: IPCONFIG /release
CMD: IPCONFIG /renew
CMD: RD /S /Q %WinDir%\System32\GroupPolicyUsers
CMD: RD /S /Q %WinDir%\System32\GroupPolicy
CMD: RD /S /Q %WinDir%\SysWOW64\GroupPolicyUsers
CMD: RD /S /Q %WinDir%\SysWOW64\GroupPolicy
CMD: RD /S /Q %WinDir%\SysNative\GroupPolicyUsers
CMD: RD /S /Q %WinDir%\SysNative\GroupPolicy
CMD: gpupdate /force
CMD: bitsadmin /reset /allusers
EmptyTemp:
Reboot:
end