Перейти к содержанию

Рекомендуемые сообщения

Опубликовано

ошибка 0xc0000017 при запуске каких либо системных приложений(диспетчер устройств, переустановка виндовс) systemsettingsadminflows, bcdegit и при попытке что либо выполнить в командной строке

CollectionLog-2025.12.28-12.35.zip

Опубликовано

Здравствуйте.

 

Пофиксите в HiJackThis из папки Autologger (запускать HiJackThis от имени Администратора по правой кнопке мыши)

O26 - Debugger (Stack Rumbling): HKLM\..\a2service.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\acnamagent.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\acnamlogonagent.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\AnVir.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\anvir64.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\anvirlauncher.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\aswidsagent.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\autoruns.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\autorunsc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\AvastSvc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\AvastUI.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\AvastUI.p.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\avgnt.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\avgsvc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\avguard.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\AVKService.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\avp.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\avpui.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\bcdedit.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\bdagent.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\bdservicehost.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\BullGuardSvc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\ccSvcHst.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\clientcommunicationservice.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\cmdagent.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\CybereasonRansomFreeService.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\DeepInstinctService.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\dism.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\dwservice.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\egui.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\ekrn.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\EPConsole.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\FRST64.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\F-Secure.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\GDataAVK.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\GlassWire.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\GlassWireSetup.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\HeimdalClientHost.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\kldw.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\klwtblfs.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\KVRT.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\mbamagent.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\mbamservice.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\mbamtray.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\mcshield.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\MediaCreationTool22H2.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\mfeesp.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\mfetp.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\mmc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\mstsc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\n360.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\nortonsecurity.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\ntrtscan.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\OpenHardwareMonitor.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\panda_url_filtering.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\pavfnsvr.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\pavsrv.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\pccntmon.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\PowerTool.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\PowerTool64.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\PSANHost.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\PSUAService.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\ReAgentc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\recoverydrive.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\regedit.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\rstrui.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\SAVAdminService.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\SAVService.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\SBAMSvc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\SecureAPlus.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\shstat.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\Smc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\sophosav.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\sophosclean.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\sophoshealth.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\sophossps.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\sophosui.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\systemreset.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\SystemSettingsAdminFlows.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\tcpview.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\tcpview64.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\TMASOAgent.exe.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\TrustwaveService.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\V3Svc.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\VirusTotalUpload.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\vssadmin.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\vsserv.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\Wireshark.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\WRSA.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\wuapihost.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\wuauclt.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\x32dbg.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\x64dbg.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\xcopy.exe: [MinimumStackCommitInBytes] = 0x41888887
O26 - Debugger (Stack Rumbling): HKLM\..\ZAPrivacyService.exe: [MinimumStackCommitInBytes] = 0x41888887
O26-32 - Office Addin: HKLM\..\NativeShim - (Inquire) -> (no file)
O27 - Account: (Bad profile) Folder is not referenced by any of user SIDs: C:\Users\73b5~1
O27 - Account: (Bad profile) Folder is not referenced by any of user SIDs: C:\Users\user

Пожалуйста, ЕЩЕ РАЗ запустите Autologger; прикрепите к следующему сообщению НОВЫЕ логи.

Опубликовано

Скачайте Farbar Recovery Scan Tool (или с зеркала) и сохраните на Рабочем столе.

  • Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.


1. Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
2. Убедитесь, что в окне Optional Scan (Дополнительные опции) отмечены List BCD и 90 Days Files.
3. Нажмите кнопку Scan (Сканировать).

  • Будьте внимательны: при сканировании секции Другие области программа не зависает, а продолжает работать, нужно просто немного подождать.


4. После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа.
5. Если программа была запущена в первый раз, также будет создан отчет (Addition.txt).
6. Файлы FRST.txt и Addition.txt заархивируйте (в один общий архив) и прикрепите к сообщению.
 

Опубликовано
Цитата

Client Helper 6.1.6
DriverIdentifier 6.1
Firefox Browser
MediaGet
MediaGet 8.3.6
uTorrentClient 2.7.5

удалите через Панель управления – Программы и компоненты или принудительно с помощью Geek Uninstaller


1. Выделите следующий код и скопируйте в буфер обмена (правая кнопка мышиКопировать)

Start::
CreateRestorePoint:
C:\Users\Best PC\AppData\Local\Programs\vplanc\ВарТандер.lnk
C:\Users\Best PC\AppData\Local\Programs\vplanc\Майнкрафт.lnk
C:\Users\Best PC\AppData\Local\Programs\vplanc\Мир Танков.lnk
C:\Users\Best PC\AppData\Local\Programs\vplanc\Яндекс.Игры.lnk
C:\Users\Best PC\AppData\Local\Programs\Steam\Мир Кораблей.lnk
C:\Users\Best PC\AppData\Local\Programs\Steam\Мир Танков.lnk
C:\Users\Best PC\AppData\Local\Programs\Notepad++\Мир Кораблей.lnk
C:\Users\Best PC\AppData\Local\Programs\Notepad++\Мир Танков.lnk
C:\Users\Best PC\AppData\Local\Programs\Adobe Photoshop\Мир Кораблей.lnk
C:\Users\Best PC\AppData\Local\Programs\Adobe Photoshop\Мир Танков.lnk
C:\Users\Best PC\AppData\Roaming\Microsoft\Windows\Start Menu\Мир Кораблей.lnk
C:\Users\Best PC\AppData\Roaming\Microsoft\Windows\Start Menu\Мир Танков.lnk
C:\Users\Best PC\AppData\Roaming\Microsoft\Windows\Start Menu\Яндекс.Игры.lnk
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [8742]
FirewallRules: [UDP Query User{4AB7C7B9-51F2-431B-B002-B9FF3DA08612}C:\users\best pc\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\best pc\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => Нет файла
FirewallRules: [TCP Query User{3DC09640-33F3-474B-B644-DF154394912B}C:\users\best pc\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\best pc\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => Нет файла
FirewallRules: [{E5D8EF17-8EB8-4D0C-BD4B-72DFDB07A276}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Нет файла
FirewallRules: [{86E6AC7B-FA4E-4770-B3F8-AF5D1A7B7C61}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Нет файла
FirewallRules: [{0202DF8E-AB36-4C85-BC75-82D82B9A9EA1}] => (Allow) C:\Users\Best PC\MediaGet2\QtWebEngineProcess.exe (The Qt Company Oy -> The Qt Company Ltd.)
FirewallRules: [{29375469-2B2A-4A7C-99A3-2B7574DC9860}] => (Allow) C:\Users\Best PC\MediaGet2\QtWebEngineProcess.exe (The Qt Company Oy -> The Qt Company Ltd.)
FirewallRules: [{6D4C1749-B848-4E45-8E7C-9A635D4F35C8}] => (Allow) C:\Users\Best PC\MediaGet2\mediaget.exe (Global Microtrading PTE. LTD -> MediaGet)
FirewallRules: [{8AA0E1F6-07E6-4AC8-894B-8D60D3E50BE1}] => (Allow) C:\Users\Best PC\MediaGet2\mediaget.exe (Global Microtrading PTE. LTD -> MediaGet)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Microsoft\MRT: Ограничение <==== ВНИМАНИЕ
HKU\S-1-5-21-1534094200-747769746-1897326356-1000\...\MountPoints2: {aa684a3f-e332-11f0-b35e-8c882b25f13f} - "H:\setup.exe" 
GroupPolicy: Ограничение ? <==== ВНИМАНИЕ
Policies: C:\ProgramData\NTUSER.pol: Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Google: Ограничение <==== ВНИМАНИЕ
Task: {8AD3C657-78C2-4610-BFD8-0959A6EBC720} - System32\Tasks\EdgeUpdate => C:\WINDOWS\system32\cmd.exe [339968 2025-12-09] (Microsoft Windows -> Microsoft Corporation) -> /c auditpol /set /category:"Система" /success:enable && auditpol /set /category:"Подробное отслеживание" /subcategory:"Создание процесса" /success:enable <==== ВНИМАНИЕ
Task: {F2AB80D8-5C1A-4FEE-9863-DDCE2AA4AD77} - System32\Tasks\EdgeUpdateTaskUser => C:\Windows\System32\wscript.exe [200704 2025-12-09] (Microsoft Windows -> Microsoft Corporation) -> /b "C:\ProgramData\Microsoft\wext.vbs" <==== ВНИМАНИЕ
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Нет файла)
Task: {2ACC1A40-EF42-4F9C-AD85-403A3362FCE4} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe  (Нет файла)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe  (Нет файла)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Нет файла)
Task: {89436E7F-EFB3-4B45-9199-ECE7D5C31E4B} - System32\Tasks\OperaUpdate => C:\WINDOWS\system32\cmd.exe [339968 2025-12-09] (Microsoft Windows -> Microsoft Corporation) -> /c auditpol /set /category:"Система" /success:enable && auditpol /set /category:"Подробное отслеживание" /subcategory:"Создание процесса" /success:enable <==== ВНИМАНИЕ
Task: {AF8DF23B-5C1B-4C23-95EC-7F93B5048467} - System32\Tasks\OperaUpdateTask => C:\Windows\System32\wscript.exe [200704 2025-12-09] (Microsoft Windows -> Microsoft Corporation) -> /b "C:\ProgramData\Microsoft\wext.vbs" <==== ВНИМАНИЕ
Task: {8336C23A-CA9C-4410-8DEE-925AEC97BAE3} - System32\Tasks\RunGame => C:\Program Files\Client Helper\Client Helper.exe [146320896 2024-10-21] (GitHub, Inc.) [Файл не подписан] <==== ВНИМАНИЕ
ProxyEnable: [S-1-5-21-1534094200-747769746-1897326356-1000] => Proxy включён
ProxyServer: [S-1-5-21-1534094200-747769746-1897326356-1000] => hxxp://127.0.0.1:10809
ManualProxies: 1hxxp://127.0.0.1:10809 <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ограничение <==== ВНИМАНИЕ
C:\Users\Best PC\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\beealikdejnegmbkakoalcjdpgfdlegn
C:\Users\Best PC\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cfbmlmgndahppoeonoeiodiamhcckmia
C:\Users\Best PC\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nhkbngioffblecpdljcdeljecfakinae
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\adphaijfcgfpfnggeoegjnlddlndjmoo
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aecdlancfkpbemibacpcbpdmmfigcdli
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajjbgcgpinfilflkifjjgajodboglahp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdcdbphinbcafibjpomdffhoihldhmb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\amimjebeogabfgmfnolfgkjkdagpfapc
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohmemcejnikkglilfphbndffjncnagp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahfhiancdglhajhphgedccghaebnchb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdkkojgoienchgocajlkidcgmbcieill
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfkneddncemfnpcmeamjkbiomdcnokka
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgcncjkiakmdmbllgodjhacgkpaijfpf
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bihkojpmfcmamkndkngpiabbbgeegkcc
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkpkklanakccndpjbbebbcdhajbogooe
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bloilejijhlalnhbcmpccbodfenhcaac
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmgejggkppmgggabmapfhgednkjkmebb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmijgeakifgkijpnioaofdhldpllaale
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbcfhfdfmfheikfeplhndkghpcnnkghn
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccieiiieajobalnckfaelmbolndeahfb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cenkdichnhpogjebpdoffloijjgbkkka
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfbnloiolidpkdjkgdblnfnkgbffjjcn
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgcdlfimnbaaamhhggbhdjdcfdjankcj
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\chaiagkgfacbfllkdbgelfmbfhfnemke
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciapipaknecjcjnpgmmefkddcnegdnjm
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciddepcciblkcnihdhehpfgfakknemhp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjbfhcgbieceggnmcjghjibnjbdlokgl
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkbfacheaeibgbmpebngonpgenliboa
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coeacamigfoaanpnlemcknabpjfjippl
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbfpnjeoegccpdjmbpmoikcpfcebkghc
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddpkfeglgfokgiimdimefipfhlhklcei
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddplbmjbdbnkkmjiebmldlkddmgpfbdg
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\decipfhaphmhaipiiknpcpeicdgfakai
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\deneekiegjpmjodndhdkgengpinnjlec
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfdmoklfkdongjpooedifchaaapcaoej
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgdhhjmcmendeinnpgdbncinjplbddji
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgnbgifilmfmdehlpihoadnhmlajfimb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\djjcnfboimkgjmkchdmbnpjbifanpbmj
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkajfcickchdobefonhpokmkpmekehbj
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlbkeiiojnipcalolmhhlammhojijlif
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmcacplgnimgbjkiabeabiablakaafgl
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmjnmddclfhakblilbjkihbecfphaeaf
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnjplmmaocbmgdflojbfbgjlapgnoccc
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnkefjkklagpgfbdnignkkccaafepjkn
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\edmglkhbejclleffmaenebnofjogdoda
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednoffhjhhkejbnoabocdjebkfgejocj
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\egdfodgcmeehlhofjefkcpojcjddffhm
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehkeoiaechnmbkmjebebcakclchmhgjb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiepohdebnfejafnmckddffigkembjlm
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimgnemkjlomplbfjlpfomlpfdngmbjb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\elnfbgbpgoboocldbfcfmggodnhlghje
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\emcfnhbhifmjlapppbmpgengpfjgacjo
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\emcpodflnoobgeogahakabcpdgfndljm
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\enfdmenkblenkmoibijmkcgkilbkpajc
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\enopdgbpbjokdaegieahahgpnnenfago
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcifhnhmjfhaboabjfhajndmggfnehdn
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fddecifcpggbdlcachpemiicpmfikfjn
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fenmemegoindpdaopjgngpilacklndgg
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fggponmbaeaakbicpkagdhnlfbfmfdfe
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjneemgpgfnhblldoahojklijapdjikn
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\floeablemmpoljoeankkbomiojhmdlgk
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmlgcnjhodbmnomaocigcbaepdcgbado
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgcjdgpnlmiojjbjdkibnmnoejmngei
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjnofiodncpeiippfddmdlmnledimaak
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkpgcojnejoocplhhpiopomfbogapeof
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahacfikobbbbjfkddijfflkfndlfhbe
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcidfojdbmpmbmbfhgahbiiojlcmnamo
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcpeddhgihdgikkbiiilgojllcpnfedc
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdmodmbngncofgfhihdpghngobogjeic
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfgefdknlbgekbhkffpihkaepfpijcej
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlpbechcdgfkghfeppcmolkinfopekc
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkdgfpajghphkjkgekchegfhibigbikm
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlngdkfmpkjakbifgcijogbbjfgbadfb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hopejkadpgclcflgpdhpalapepohbpgb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibhnmilnlkdpomnjinaedekalhgocpao
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\icajmphjedkinenkamgojekgamhkdokg
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdilhmlphcmkgnnjjfljjdlfhkcbcdd
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\iemdgejkmobpjjbbecokbbchbakmmgla
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihffmhgnfpfibnhabkkdnimfepoakfkh
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijhehecldlohlbkmpacadnplfjiaeipe
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijkcjglkcagfpcgfgnbendjgfmklnaem
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikhgmcjbliogpcifimlgjokdhfljklhh
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioeacekdgmjlbebagaoipmpjikkcnfnf
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jangjaiipmeokppanffoafpfklpdkekf
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbcapbkmckimffhdafbopjkjljmfcalo
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbjdbhmachhhdhbhgglkpfgfkipkkggo
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcfeliilnlgbaocllefeodlehdbhbole
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcheliedahkoecbffdleapoblknnmppk
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jejebeahcekdaikiigimeabonikonnnf
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jepjppjocjnkbefhjibhgnociljdckif
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgmgmhmhihfghohjmdooenkbpdjfmmec
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jiilllimhjnienmcbebfmabhgmabgakc
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jncogmhceonekpnplflcdcgmjcneaphn
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\joglokebhdpnodgnfccbpkedimpimlgp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jphaadjnfifgbjhnlbeijeopbaldgbfp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbihihlbhmliahdglielemcpkjgkgbai
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcjphcdmogdlbipkbfjpgmojmlhbikof
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgpdlgakhcohpodhoennlmegaacnneec
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\koghdmmmlbkijepcemacgaibegcppifh
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpgajmokcffldahgbjaoaphiahlodlgp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lglcinfhhcolcoahpifhdcclfojdackg
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljnkpnmlalcipjgkphpdioajcemeiidi
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkdihbcoaobhjicocbolohmcodafneob
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimaobdkhaeajpofmcjcbjeijfhnee
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbejapkcelbmcknkcobklgcfojjngcgb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mebejgcincbamahhmkamnklbjfgbddjn
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhflmgkkifeahnkdndngfbdhoihldgng
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mijkaoabilbfjofolnicopadnafdcdbk
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjphdgliopingebedhicjnknoilcfcab
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mncdhaicnjpmkehnaenlmdnpllmolknp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnemfjpgiceblnalgghbfjcnedieopeo
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbamfjipolghlgnilbipjdgpmfklcbba
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncichhehmckkhngpbmbgimbnadpkgkce
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndkdficaodpkondkognblcalofkhfhlm
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfbgnmaaacgcfdenemeancaalaoeiecj
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\njechaaecabcgeoopdobhodnebahhghb
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlimielgbemmiljccifjhgiflbkedij
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nohkeheonlainnlhgfhmpgojldgnefma
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nohmjlpdcnkjkgajjfpobbljmklbgnll
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\npemnnnpamcpmalcblimccpcihnkjecl
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\obcfigagkogpodbijcpiijngdckpjekd
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\obejkkfjddjbfomnoojfggknkkpllhed
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofdodecpibpciaaofblpjebpbkjaegbp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogcnojffgpnanlgdagdehngiallnddep
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\oggjhdkjpgbpammcbelegdpadhpnachh
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\oidlejboicigefdcdmbjijmnaphalhmf
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdkjnfchfmfkongonanealogjemdbap
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\okidaepnbelhfdpnlgiaghakgjlipigi
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\omklobhcjlafjmjmhkcdlmnidmheofpg
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\onahejelmgdiffnaddjpnifkbjlbgjop
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pafhbgagakajmphpekficcldjcolhjpa
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcincndejajlmljhghilmefpjcmjeomg
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\phkkbkgmgcbcigccfjbamcdcapfeafog
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\piegokamadhfmnenahklclppenphnjll
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pifbiigjnlpnjchjimgfhfhedoilfiop
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pifefhankealnhmeehpadnbdbnlkfilf
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilfjhdlcgmhpcjigpfbhoabgapphpkl
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjnmolonmogpbbcjaffhokdaiefnppdd
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkgemddcmamplclbghndjogiogdkbdnp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pklimaneceohhhhgdnciikfdmlndbpjo
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmjoimblpobeheecgopkedpjokbmegbk
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmlgkdbdppiennofccacejkhdhfhhdp
C:\Users\Best PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppmbkbidepknopgdcggebnomhjcbbhab
CHR HKLM-x32\...\Chrome\Extension: [kadaohckdkghfaclhjmkmplebcdcnfnp] - <отсутствует Path/update_url>
C:\Users\Best PC\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\cekealodoibfdaelhjoaccajehipbmhh
C:\Users\Best PC\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ibdafehbeodhlncpgdbajcimknlmhdnj
C:\Users\Best PC\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\jljkbnhhboplbkaghkoieafbnnmpkhng
C:\Users\Best PC\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\kehkgofmgpjigbekkphnjhbgoihakiin
2025-12-28 00:48 - 2025-12-28 00:48 - 000002714 _____ C:\WINDOWS\system32\Tasks\MediaGetProUpdaterV6_t1731389604791
2025-12-28 00:48 - 2025-12-28 00:48 - 000002622 _____ C:\WINDOWS\system32\Tasks\MediaGetProUpdaterV5_t1731389602745
2025-12-28 00:48 - 2025-12-28 00:48 - 000002518 _____ C:\WINDOWS\system32\Tasks\RunGame
2024-08-31 23:33 - 2025-06-10 22:31 - 000000364 _____ () C:\Users\Best PC\MediaGetPro.dat
2025-09-18 17:52 - 2025-10-31 23:13 - 000000970 _____ () C:\Users\Best PC\Rave.dat
2025-09-08 14:14 - 2025-09-08 14:14 - 000000599 _____ () C:\Users\Best PC\uTorrentClient.dat
Reboot:
End::

2. Запустите Farbar Recovery Scan Tool от имени Администратора по правой кнопке мыши.
3. Нажмите один раз на кнопку Fix (Исправить) и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

  • Обратите внимание: будет выполнена перезагрузка компьютера.


 

Опубликовано

Загрузите SecurityCheck by glax24 & Severnyj и сохраните архив на Рабочем столе.

  • Разархивируйте, запустите двойным щелчком мыши (если Вы используете Windows XP) или из меню по щелчку правой кнопки мыши Запустить от имени администратора (если Вы используете Windows Vista/7/8/10/11);
  • Если увидите предупреждение от вашего фаервола относительно программы SecurityCheck, не блокируйте ее работу;
  • Дождитесь окончания сканирования, откроется лог в Блокноте с именем SecurityCheck.txt;
  • Если Вы закрыли Блокнот, то найти этот файл можно в корне системного диска в папке с именем SecurityCheck, например C:\SecurityCheck\SecurityCheck.txt;
  • Прикрепите этот файл в своем следующем сообщении.


 

Пожалуйста, войдите, чтобы комментировать

Вы сможете оставить комментарий после входа в



Войти
×
×
  • Создать...