Троян минер ген

12 февраля, 2021

Здравствуйте Начал вылезать троян минер.ген Програм дата флок..Постоянно просить вылечить,перезагружается и все по новой...Помогите.

Сообщение от модератора thyrex

Перенесено из темы https://forum.kasperskyclub.ru/topic/79943-ne-mogu-udalit-virus-miner/

12 февраля, 2021

@Kolhoznik, здравствуйте!

Выполните Порядок оформления запроса о помощи

12 февраля, 2021

CollectionLog-2021.02.12-15.52.zip

12 февраля, 2021

Здравствуйте.

Пофиксите следующие строчки в HiJackThis (используйте версию из папки Автологгера).

R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://find-it.pro/?utm_source=distr_m
R0 - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://find-it.pro/?utm_source=distr_m
R3 - HKCU\..\URLSearchHooks: (no name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - (no file)
R3 - HKCU\..\URLSearchHooks: (no name) - {C9423817-5DA7-494E-87E4-111F1B49A1FD} - (no file)
O1 - Hosts: is empty
O17 - DHCP DNS 2: 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{0DD11F9A-255C-482D-8DB7-5D94218C2817}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{1A66C001-8E2F-4CCA-840F-98CE240E0155}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{229E4703-FB80-40DC-9705-3B8982A6F4DB}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B41123A-65E8-4F94-954D-EAE258048182}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{3796F68B-C865-4044-9B57-A043D7BBCC58}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{54A49661-6DCD-416F-8B5D-AAE95BDD2A93}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F99B373-9E0D-4CAE-B3C6-4A88F6022BC4}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{6369160A-6BB6-4DB1-AAC4-AEED9456B583}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{70377FAC-ED7E-4881-B1E3-5B4238919D8D}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{7940CA87-2DB1-4517-9372-3A8A04D9FA30}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{8BE1764E-D81F-48F7-9AFB-BA33222BCFD5}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C6BE9FB-34B7-4B31-9E98-964DB26C8BAF}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{951593CF-5749-4711-8758-047D7C808EB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{AEED9BE5-B286-4FD3-BC96-9425B27CE5D8}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{B06BF534-1E89-413D-8075-4FDF63EDC382}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD466CE3-CAFC-47D4-85A4-DF964AEF5606}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{BF00BA59-A0FF-4C22-83CD-DC869507E39F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{E587688B-E605-4A80-B3C8-AADEFAAF5DB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{F5AEE394-5D3A-4694-8974-2FD4660A109F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{1A66C001-8E2F-4CCA-840F-98CE240E0155}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{229E4703-FB80-40DC-9705-3B8982A6F4DB}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{2B41123A-65E8-4F94-954D-EAE258048182}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{3796F68B-C865-4044-9B57-A043D7BBCC58}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{54A49661-6DCD-416F-8B5D-AAE95BDD2A93}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{5F99B373-9E0D-4CAE-B3C6-4A88F6022BC4}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{6369160A-6BB6-4DB1-AAC4-AEED9456B583}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{70377FAC-ED7E-4881-B1E3-5B4238919D8D}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{7940CA87-2DB1-4517-9372-3A8A04D9FA30}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{8BE1764E-D81F-48F7-9AFB-BA33222BCFD5}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{8C6BE9FB-34B7-4B31-9E98-964DB26C8BAF}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{951593CF-5749-4711-8758-047D7C808EB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{AEED9BE5-B286-4FD3-BC96-9425B27CE5D8}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{B06BF534-1E89-413D-8075-4FDF63EDC382}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{BD466CE3-CAFC-47D4-85A4-DF964AEF5606}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{BF00BA59-A0FF-4C22-83CD-DC869507E39F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{E587688B-E605-4A80-B3C8-AADEFAAF5DB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{F5AEE394-5D3A-4694-8974-2FD4660A109F}: [NameServer] = 37.59.58.122
O21 - HKLM\..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O22 - BITS Job: (download) {0500F94E-9E95-4AB2-B038-67814D45FFDF} - http://redirector.gvt1.com/edgedl/release2/chrome_component/G4m99DanXpdX7lhn6ec8FQ_6422/AJDGbZBp29rxIfdU-A6jb9U -> C:\Users\CD86~1\AppData\Local\Temp\chrome_BITS_2184_844234021\AJDGbZBp29rxIfdU-A6jb9U
O22 - BITS Job: (download) {7FA2611F-7D28-4487-AFA2-4B28EBB55709} - https://download.cdn.yandex.net/browser/crx3/suggest_catboost_model_tag_model_19_7_3_14/19_07_03_14.crx -> C:\Users\CD86~1\AppData\Local\Temp\chrome_BITS_3748_1579179698\19_07_03_14.crx
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{011E7E61-C903-460D-9B3C-E70FD2E70BA6} - \{902C79F4-0114-472B-BAE8-5738F4FCCD03} (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F2B1365-8DBF-4FA5-9155-CD61007C9D8E} - \AVG\PC Tuneup 2011\Integrator\Scan and Repair (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FA97CB2-7987-4360-83BE-36243832C81A} - \QPFSiptsQiUmyMj2 (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2DA4EE75-AA42-4D66-A18B-E742731A7D45} - \Алексей (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{372BC032-ADD5-44F6-A9E0-A0F90B371345} - \vsbCsjNTZvxfEP (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BF84CDE-3DBE-4925-A060-7D9B156BC77D} - \EgDnnxLDdmkTyvIEL2 (no xml)

Скачайте Farbar Recovery Scan Tool и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
Убедитесь, что под окном Optional Scan отмечены "List BCD" и "90 Days Files".
Нажмите кнопку Scan.
После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.
Если программа была запущена в первый раз, будет создан отчет (Addition.txt). Пожалуйста, прикрепите его в следующем сообщении.

Изменено 12 февраля, 2021 пользователем mike 1

12 февраля, 2021

Addition.txt FRST.txt

5 часов назад, mike 1 сказал:

Здравствуйте.

Пофиксите следующие строчки в HiJackThis (используйте версию из папки Автологгера).



R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://find-it.pro/?utm_source=distr_m
R0 - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://find-it.pro/?utm_source=distr_m
R3 - HKCU\..\URLSearchHooks: (no name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - (no file)
R3 - HKCU\..\URLSearchHooks: (no name) - {C9423817-5DA7-494E-87E4-111F1B49A1FD} - (no file)
O1 - Hosts: is empty
O17 - DHCP DNS 2: 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{0DD11F9A-255C-482D-8DB7-5D94218C2817}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{1A66C001-8E2F-4CCA-840F-98CE240E0155}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{229E4703-FB80-40DC-9705-3B8982A6F4DB}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B41123A-65E8-4F94-954D-EAE258048182}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{3796F68B-C865-4044-9B57-A043D7BBCC58}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{54A49661-6DCD-416F-8B5D-AAE95BDD2A93}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F99B373-9E0D-4CAE-B3C6-4A88F6022BC4}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{6369160A-6BB6-4DB1-AAC4-AEED9456B583}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{70377FAC-ED7E-4881-B1E3-5B4238919D8D}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{7940CA87-2DB1-4517-9372-3A8A04D9FA30}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{8BE1764E-D81F-48F7-9AFB-BA33222BCFD5}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C6BE9FB-34B7-4B31-9E98-964DB26C8BAF}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{951593CF-5749-4711-8758-047D7C808EB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{AEED9BE5-B286-4FD3-BC96-9425B27CE5D8}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{B06BF534-1E89-413D-8075-4FDF63EDC382}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD466CE3-CAFC-47D4-85A4-DF964AEF5606}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{BF00BA59-A0FF-4C22-83CD-DC869507E39F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{E587688B-E605-4A80-B3C8-AADEFAAF5DB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{F5AEE394-5D3A-4694-8974-2FD4660A109F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{1A66C001-8E2F-4CCA-840F-98CE240E0155}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{229E4703-FB80-40DC-9705-3B8982A6F4DB}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{2B41123A-65E8-4F94-954D-EAE258048182}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{3796F68B-C865-4044-9B57-A043D7BBCC58}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{54A49661-6DCD-416F-8B5D-AAE95BDD2A93}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{5F99B373-9E0D-4CAE-B3C6-4A88F6022BC4}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{6369160A-6BB6-4DB1-AAC4-AEED9456B583}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{70377FAC-ED7E-4881-B1E3-5B4238919D8D}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{7940CA87-2DB1-4517-9372-3A8A04D9FA30}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{8BE1764E-D81F-48F7-9AFB-BA33222BCFD5}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{8C6BE9FB-34B7-4B31-9E98-964DB26C8BAF}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{951593CF-5749-4711-8758-047D7C808EB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{AEED9BE5-B286-4FD3-BC96-9425B27CE5D8}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{B06BF534-1E89-413D-8075-4FDF63EDC382}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{BD466CE3-CAFC-47D4-85A4-DF964AEF5606}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{BF00BA59-A0FF-4C22-83CD-DC869507E39F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{E587688B-E605-4A80-B3C8-AADEFAAF5DB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{F5AEE394-5D3A-4694-8974-2FD4660A109F}: [NameServer] = 37.59.58.122
O21 - HKLM\..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O22 - BITS Job: (download) {0500F94E-9E95-4AB2-B038-67814D45FFDF} - http://redirector.gvt1.com/edgedl/release2/chrome_component/G4m99DanXpdX7lhn6ec8FQ_6422/AJDGbZBp29rxIfdU-A6jb9U -> C:\Users\CD86~1\AppData\Local\Temp\chrome_BITS_2184_844234021\AJDGbZBp29rxIfdU-A6jb9U
O22 - BITS Job: (download) {7FA2611F-7D28-4487-AFA2-4B28EBB55709} - https://download.cdn.yandex.net/browser/crx3/suggest_catboost_model_tag_model_19_7_3_14/19_07_03_14.crx -> C:\Users\CD86~1\AppData\Local\Temp\chrome_BITS_3748_1579179698\19_07_03_14.crx
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{011E7E61-C903-460D-9B3C-E70FD2E70BA6} - \{902C79F4-0114-472B-BAE8-5738F4FCCD03} (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F2B1365-8DBF-4FA5-9155-CD61007C9D8E} - \AVG\PC Tuneup 2011\Integrator\Scan and Repair (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FA97CB2-7987-4360-83BE-36243832C81A} - \QPFSiptsQiUmyMj2 (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2DA4EE75-AA42-4D66-A18B-E742731A7D45} - \Алексей (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{372BC032-ADD5-44F6-A9E0-A0F90B371345} - \vsbCsjNTZvxfEP (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BF84CDE-3DBE-4925-A060-7D9B156BC77D} - \EgDnnxLDdmkTyvIEL2 (no xml)

Скачайте Farbar Recovery Scan Tool и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
Убедитесь, что под окном Optional Scan отмечены "List BCD" и "90 Days Files".
Нажмите кнопку Scan.
После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.
Если программа была запущена в первый раз, будет создан отчет (Addition.txt). Пожалуйста, прикрепите его в следующем сообщении.

Addition.txt FRST.txt

12 февраля, 2021

Деинсталлируйте:

AVG PC Tuneup 2011
Кнопка "Яндекс" на панели задач
Служба автоматического обновления программ

ВНИМАНИЕ! Данный скрипт написан специально для этого пользователя, использование его на другом компьютере может привести к неработоспособности Windows!

Временно выгрузите антивирус, файрволл и прочее защитное ПО.

Скопируйте приведенный ниже текст в Блокнот и сохраните файл как fixlist.txt в кодировке Юникод в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:

CreateRestorePoint:
CloseProcesses:

HKU\S-1-5-21-253331017-3484317970-3833979646-1000\...\Run: [MailRuUpdater] => C:\Users\Алексей\AppData\Local\Mail.Ru\MailRuUpdater.exe [3255480 2020-05-18] (LLC Mail.Ru -> Mail.Ru) <==== ATTENTION
HKU\S-1-5-21-253331017-3484317970-3833979646-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-253331017-3484317970-3833979646-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-253331017-3484317970-3833979646-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-253331017-3484317970-3833979646-1000\...\MountPoints2: {1e402fb1-6a6b-11ea-8388-0291dd5178e7} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-253331017-3484317970-3833979646-1000\...\MountPoints2: {2b84a326-88ee-11e7-9e29-806e6f6e6963} - D:\autorun.exe
HKU\S-1-5-21-253331017-3484317970-3833979646-1000\...\MountPoints2: {7a9024a4-7d96-11e8-bfd6-c685c4ba626e} - H:\iLinker.exe
HKU\S-1-5-21-253331017-3484317970-3833979646-1000\...\MountPoints2: {b4714af6-e435-11ea-a575-9e56e5bbec13} - F:\HiSuiteDownLoader.exe
GroupPolicy: Restriction - Chrome <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Policies: C:\Users\Алексей\NTUSER.pol: Restriction <==== ATTENTION
Policies: C:\Users\Все пользователи\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - \Microsoft\Windows\Time Synchronization\SynchronizeTime -> No File <==== ATTENTION
Task: {0460B2EB-2287-4A23-A762-9CCA06DE730C} - \{D16A5BE7-5A39-44A4-8622-B1902FFE67B2} -> No File <==== ATTENTION
Task: {05A8435F-C525-4060-A1C6-279E7488B582} - \{E03CBA31-F2CE-48BF-B601-F37602ACCAF7} -> No File <==== ATTENTION
Task: {074E4F32-F65A-4600-9D65-BDC393E873C3} - \WPD\SqmUpload_S-1-5-21-253331017-3484317970-3833979646-1000 -> No File <==== ATTENTION
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> No File <==== ATTENTION
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> No File <==== ATTENTION
Task: {0B1D1F1F-A9CA-41E1-8E13-ACD65D6F469F} - \{96BA39E1-3D9F-4FBA-A0B9-C84AD271D8C1} -> No File <==== ATTENTION
Task: {0BDBFB78-B4FE-4A9D-A52B-2D42B1B14AE6} - \{7838CAAC-7C67-4B11-9793-BACB3ABB201B} -> No File <==== ATTENTION
Task: {0FD4D116-C2B1-4004-9E35-3AF77BD943FA} - \Microsoft\Windows\Media Center\RecordingRestart -> No File <==== ATTENTION
Task: {113ED8F1-67B0-4B55-ADA3-B5F93AA1C6AF} - \{261BB171-D2F1-4248-B496-32C7B0687392} -> No File <==== ATTENTION
Task: {11BD16CE-4871-4075-A7F7-629F0137AB2A} - \{C6EE5B35-2220-471F-9C35-2E958ED5DE17} -> No File <==== ATTENTION
Task: {127C22E8-1033-4A05-8F0A-8785D5428899} - \{C821BC5E-DB5A-4316-947F-CF16F3571296} -> No File <==== ATTENTION
Task: {13DADD1C-7F73-490D-BF63-3D6A38839550} - \{A3DBC975-DEC5-4E31-AEE0-DC3496154C94} -> No File <==== ATTENTION
Task: {16F6764C-25D2-4DCA-85CE-C18317BE8FAC} - \Opera scheduled Autoupdate 1557333188 -> No File <==== ATTENTION
Task: {197CD0B7-82A7-4AD4-9BFC-F39DB7DE9AA5} - \{97D15AD8-BECE-4E3F-8519-D34B9E8238DD} -> No File <==== ATTENTION
Task: {199C84CE-16ED-439C-8E65-0495EBE7DE2F} - \{BF5FCD74-9893-4C75-A50B-03A6139B28AE} -> No File <==== ATTENTION
Task: {1A310320-1654-4064-8067-EEFF92D12F4B} - \Microsoft\Windows\SideShow\SystemDataProviders -> No File <==== ATTENTION
Task: {1B255142-7F52-4FB7-92D6-06E2606AB07F} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {1F64042B-1A20-4DD8-B196-B0B2CCA10FD4} - \{8D66C405-3039-40CA-80EC-0991011950B7} -> No File <==== ATTENTION
Task: {1F7B7221-AE8F-44F3-BA82-F7D260F51964} - \Microsoft\Windows\Task Manager\Interactive -> No File <==== ATTENTION
Task: {1FB9FC8E-5767-4561-85BB-2BF14A8267D3} - \{67029690-87FB-45D3-B4F6-838DB65F7143} -> No File <==== ATTENTION
Task: {213A1642-C8D7-4F36-96FE-9DB473AD9747} - \{6C3F5B16-B070-4F81-8907-17CF8FDAA7AF} -> No File <==== ATTENTION
Task: {223D74EE-EDB7-439A-9248-42F0D5E9E73F} - \{897BA2D2-6CFF-4FBC-BEBB-E68CD95EAFDF} -> No File <==== ATTENTION
Task: {22EB0A97-B7EC-4F0E-B184-1F060029A214} - \{D1744379-2B2B-4B1C-AF68-67F93B78E59A} -> No File <==== ATTENTION
Task: {2470470F-2634-478E-B181-571E98A789BB} - \Microsoft\Windows\Multimedia\SystemSoundsService -> No File <==== ATTENTION
Task: {27F1D2AB-C996-4F47-8514-93966B87C6B0} - \Microsoft\Windows\Media Center\InstallPlayReady -> No File <==== ATTENTION
Task: {28011108-68DF-4C73-B91B-57427D501BBA} - \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual) -> No File <==== ATTENTION
Task: {2A1DBB64-C01C-4528-968C-6478891F39BE} - \NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {2CBA3676-712B-483B-A1B4-E4842380AAE9} - \{F435B50E-9045-4340-9D9E-C9B1CE95E392} -> No File <==== ATTENTION
Task: {2CC4C2CC-060A-4316-9305-560AAD7589C8} - \{1757699A-9BA5-4FB2-AA90-0D77B3FE09C3} -> No File <==== ATTENTION
Task: {2F3E58C3-D0A0-46D3-AA36-FEA916444343} - \NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> No File <==== ATTENTION
Task: {3073E240-D503-46A1-8AE2-FB40FB09C1A0} - \{16CCBE29-DAD9-4804-8DB6-305277A54B05} -> No File <==== ATTENTION
Task: {33C498DA-B021-45F3-948A-845B50DC8E3B} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> No File <==== ATTENTION
Task: {33E7FA4B-C880-4E0E-8E72-FF19C28F4E53} - \Microsoft\Windows\Media Center\RegisterSearch -> No File <==== ATTENTION
Task: {356E2419-E8FD-46DB-87C1-587AF28BD09B} - \{BBFC7924-AEB6-4FBB-BFC3-D65383B7C051} -> No File <==== ATTENTION
Task: {3AC07ADA-2630-425F-B436-024DFFB93C83} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {3BCEBDDA-029B-40BB-AFBB-EB25A5D13A22} - \{5E730E35-F225-492F-9977-FF0CED12699F} -> No File <==== ATTENTION
Task: {3DD6B2C6-090E-471F-BC65-0FF4E193B1BA} - \NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {40EBB9DB-5148-4E2D-9A26-76264AF728B6} - \Microsoft\Windows\Wininet\CacheTask -> No File <==== ATTENTION
Task: {40FA0734-719C-4970-9FAA-18E3E86AD255} - \{28683C38-D280-4C3C-A95C-8D6F42271634} -> No File <==== ATTENTION
Task: {41EBCC17-9659-41A8-B16F-C0D114F6B0BE} - \{54C4269E-25DD-4D93-8D63-BEB7406EBAB6} -> No File <==== ATTENTION
Task: {42A366AF-CAEA-415E-BCCF-29FBF5DA4302} - \{EFEEA6A0-FFE9-4A9D-96E8-A4AEEE2CDD92} -> No File <==== ATTENTION
Task: {45657F62-7616-4F4D-B74D-3AE56F9C81C3} - \Microsoft\Windows\Media Center\UpdateRecordPath -> No File <==== ATTENTION
Task: {4569750F-3B39-4A06-8CEF-EA2139E11683} - \Opera scheduled assistant Autoupdate 1557333191 -> No File <==== ATTENTION
Task: {4576DB63-5785-4708-ADC2-99FA06600456} - \{ECA4DDF9-CCFC-4183-9F82-C60070434537} -> No File <==== ATTENTION
Task: {473D75A8-9EA8-49EB-BECD-AAE6E6302186} - \{E5ADF26B-B4DB-4500-A07B-C6EECB2E4122} -> No File <==== ATTENTION
Task: {47536D45-EEEC-4BDC-8183-A4DC1F8DA9E4} - \Microsoft\Windows\Customer Experience Improvement Program\UsbCeip -> No File <==== ATTENTION
Task: {482ACBE5-7EC9-4B6E-ABA8-DA39552E297A} - \NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> No File <==== ATTENTION
Task: {4B9ECB18-DAEF-4CA4-9D8F-D19C55FEAC4A} - \Обновление Браузера Яндекс -> No File <==== ATTENTION
Task: {4C8B01A2-11FF-4C41-848F-508EF4F00CF7} - \Microsoft\Windows\TextServicesFramework\MsCtfMonitor -> No File <==== ATTENTION
Task: {4CA615A8-0385-4735-867F-6B5C1E79B73E} - \{CE657D19-E3CA-4AA1-B96C-373ACAB53723} -> No File <==== ATTENTION
Task: {4D6A241E-FB8E-4DE5-BFFC-5576B6AA8DBF} - \Browserupdphenix -> No File <==== ATTENTION
Task: {4EECB043-1985-4066-8C66-4C1948460572} - \{5D09836B-8EF0-4483-8F4A-A25A8B297AC4} -> No File <==== ATTENTION
Task: {4F17C94D-5BFE-4ABB-821C-3EAC0FFD4769} - \{629E89E1-40D9-4596-BCFF-03335E8BAAE3} -> No File <==== ATTENTION
Task: {51812601-47C2-40E6-971E-5D24645E4079} - \{CEF95E7A-FCB1-47C1-A14E-03C16C4CF6AD} -> No File <==== ATTENTION
Task: {5374CDA2-3651-41BC-A308-3912B56CA726} - \{7FD0FD1E-A814-4FB1-A4B9-CD397DC23D89} -> No File <==== ATTENTION
Task: {55EFB1B1-66AC-4F5D-A10E-15F3913DBF55} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
Task: {584CB58E-4908-42C5-A374-BA53024483AA} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - \Microsoft\Windows\UPnP\UPnPHostConfig -> No File <==== ATTENTION
Task: {5A4C82CC-4649-4C87-B1AE-B3E1964A49A6} - \{702AD945-266A-472B-9C36-388589E93760} -> No File <==== ATTENTION
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> No File <==== ATTENTION
Task: {5C0AEEEA-C154-45BE-8499-BEA5F11BAFF6} - \Microsoft\Windows\Defrag\ScheduledDefrag -> No File <==== ATTENTION
Task: {5E789054-0ADC-484A-95AA-2207C1DAB692} - \Adobe Flash Player Updater -> No File <==== ATTENTION
Task: {5F5A18EB-DC73-4E45-A11C-B59043598412} - \Microsoft\Windows\CertificateServicesClient\SystemTask -> No File <==== ATTENTION
Task: {602431E6-8ABE-4E51-8ACC-4932B02228FA} - \{84C8A0FA-9067-4C23-9DAD-7CD467B6E477} -> No File <==== ATTENTION
Task: {6130EA80-DE8F-4AEC-B519-3371A8BCDD5F} - \{E27C30AA-3C3B-422E-A2E9-1CE66E9F2D51} -> No File <==== ATTENTION
Task: {613612BA-897D-44CE-8DC1-8FC283F9FD51} - \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated) -> No File <==== ATTENTION
Task: {61823E11-D3BC-4549-AD33-DBF6BFBB6674} - \{0F530A34-9145-48D6-B894-A68326103183} -> No File <==== ATTENTION
Task: {62AA6109-2B52-4486-AAE0-1E9D077CBCBB} - \{6F9A5B65-A840-45E7-B754-7E3D36A5464E} -> No File <==== ATTENTION
Task: {62E8790A-26EB-4310-9F1B-C81B00153263} - \{CBD15180-5637-4EB3-AB3D-DF23F63A5FB6} -> No File <==== ATTENTION
Task: {6738BA6E-EA75-4B6B-B8B8-71F0336DD8EF} - \Microsoft\Windows\User Profile Service\HiveUploadTask -> No File <==== ATTENTION
Task: {68C081EA-DEF4-4A3F-AF5B-D202D2C093AD} - \{0D6E197F-45E5-4E11-802D-A4CAE7A4BC7C} -> No File <==== ATTENTION
Task: {6DA70590-BF2F-4B8C-B418-9AF19F2DE43A} - \{230FDE1A-86C4-47FD-AB0F-AA040BA6C4F4} -> No File <==== ATTENTION
Task: {703E03D0-1B5A-4421-A08E-39B25E025531} - \Pupdbrowser -> No File <==== ATTENTION
Task: {7054CAAB-F9A0-4F48-80F4-51859CC9D227} - \Games\UpdateCheck_S-1-5-21-253331017-3484317970-3833979646-1000 -> No File <==== ATTENTION
Task: {716B18A8-651A-4A99-AF58-063FF4A77A5C} - \{5F0F84A3-7BFF-4DBA-B669-1BEBFF2FE275} -> No File <==== ATTENTION
Task: {71F2E533-A6CE-44DC-9CC4-DD4F792017B9} - \{F49E4578-9D8F-4662-BE65-41B4B4C7C3CB} -> No File <==== ATTENTION
Task: {725DB9E9-CD8F-4FDD-85C4-355E8A09BF6C} - \{024B7520-78F0-4AA8-9153-1961BB606C95} -> No File <==== ATTENTION
Task: {72DB7465-BC54-491B-A92A-4637A28C9BBF} - \Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck -> No File <==== ATTENTION
Task: {74A5BB57-D3F5-4487-A3D8-19210A1EF76A} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> No File <==== ATTENTION
Task: {753C47AE-EC5E-44B3-95A9-2C8E553F0E39} - \Microsoft\Windows\Windows Media Sharing\UpdateLibrary -> No File <==== ATTENTION
Task: {75D45EBF-CF6D-4FD7-8334-D11A18B987D6} - \{DD83F292-C9EA-46A4-AC0F-11A76BF5EB64} -> No File <==== ATTENTION
Task: {7763AD09-11BD-4398-B23A-169AE8D87760} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> No File <==== ATTENTION
Task: {77D7AD91-BE98-40EB-A6F5-0E8428AC865E} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
Task: {7916D7BA-8462-412B-A3A5-3FC5FC398B0E} - \{3D0F747C-166D-4419-8BE9-FDC5AE75556F} -> No File <==== ATTENTION
Task: {7AFCC0CA-7121-422A-AB45-B0E8D599FF08} - \Microsoft\Windows\CertificateServicesClient\UserTask -> No File <==== ATTENTION
Task: {7C3F7758-ABA4-415A-9D0F-41E81754AD80} - \{B99CE328-6942-468C-8941-8D17F8629622} -> No File <==== ATTENTION
Task: {7D3BD6CC-75E7-4319-A35B-58CF4556BCC1} - \Microsoft\Windows\Media Center\OCURDiscovery -> No File <==== ATTENTION
Task: {7D638363-1DE3-4CF3-8682-1FEC1CCAD45D} - \NetShield Kit scheduled Autoupdate -> No File <==== ATTENTION
Task: {7D80C612-64A4-432A-92DF-0239B893DA59} - \{E49699EA-3918-44CC-B78F-E693B8D03A48} -> No File <==== ATTENTION
Task: {7E951125-C359-4D6D-98C7-C4532BCBD4DA} - \{000A4548-0B95-435A-B739-A27F958F4CE8} -> No File <==== ATTENTION
Task: {7EF48A38-5747-4538-9873-5C2C20765E7C} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {7F0DE906-932C-4672-AC06-A4DBDB64EEAD} - \MailRuUpdater -> No File <==== ATTENTION
Task: {80196A61-E8F8-4DA7-8F54-2CAD3F8A5A3A} - \Microsoft\Windows\Media Center\OCURActivate -> No File <==== ATTENTION
Task: {808B6A80-3D1E-4B16-B972-6B89D7BD02E6} - \AVG\PC Tuneup 2011\Integrator\Start On Windows Logon -> No File <==== ATTENTION
Task: {80CDA6C9-3AC1-4594-8906-7681307A0B7C} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> No File <==== ATTENTION
Task: {81540B9F-B5BF-47EB-9C95-BE195BF2C664} - \Microsoft\Windows\NetTrace\GatherNetworkInfo -> No File <==== ATTENTION
Task: {81B0183D-CFB2-4804-A3C7-DFBCE8383EAE} - \{46F2886C-714B-4882-B438-D3F08938809E} -> No File <==== ATTENTION
Task: {82B2D76B-9AB3-4DF5-B4FF-DADE1F531793} - \{B9F16601-577E-4EFF-83D9-4A6D7C114CB1} -> No File <==== ATTENTION
Task: {835855E4-94B2-4565-A268-A3C40F8C7DD0} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> No File <==== ATTENTION
Task: {83F03B5B-6EC0-48C8-A1C1-68AB9ED74C7B} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {8628197D-2A48-4B88-9D1D-BEC139E9566D} - \{E5D2E426-EA56-44CA-AE4C-DC0016754382} -> No File <==== ATTENTION
Task: {88A618D7-B3C1-42E5-9524-F67A59EE4257} - \Microsoft\Windows\SideShow\SessionAgent -> No File <==== ATTENTION
Task: {8A1CEF19-212C-4B41-B936-B1CE0445E206} - \MsFlQfpgFqdvv2 -> No File <==== ATTENTION
Task: {8A5ED229-D6A3-481D-91F9-ABD87CD48CA9} - \Microsoft\Windows\Media Center\ehDRMInit -> No File <==== ATTENTION
Task: {8C255715-B150-4BDE-A1DD-5F09691A2A48} - \{0BBAF4F0-48FB-42A5-A3A8-21087BFC9E22} -> No File <==== ATTENTION
Task: {9435F817-FED2-454E-88CD-7F78FDA62C48} - \Microsoft\Windows\WDI\ResolutionHost -> No File <==== ATTENTION
Task: {94E4F69F-9027-434A-988C-9E4BA861814A} - \{000E1BDB-364E-4F59-985D-71DA93215EAE} -> No File <==== ATTENTION
Task: {95A3F06C-6EBB-46AE-94F9-4031E1D7E70D} - \{AE718785-358E-4024-8DF1-18295ACA1841} -> No File <==== ATTENTION
Task: {96A97817-F225-4696-8639-83202914FDF6} - \EdMyiUwGJuXYpwQNJtM2 -> No File <==== ATTENTION
Task: {9726994C-0FB5-4CF2-B61A-D800507C3323} - \{64B24340-197A-44B1-BF3E-9CE8931282C6} -> No File <==== ATTENTION
Task: {97904973-2160-497B-B35A-1694DBCA2DD3} - \{1211CDC1-8037-457A-8C87-A70FE27A0BBF} -> No File <==== ATTENTION
Task: {97F1AE7C-5E58-48E3-B2D2-116DE67BA074} - \{1B42C190-0570-487D-BA20-D95D225D9406} -> No File <==== ATTENTION
Task: {98980E3F-F685-43FE-8297-2E252D50E318} - \{1770A1EC-C260-4038-B185-B8945111121B} -> No File <==== ATTENTION
Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - \Microsoft\Windows\SystemRestore\SR -> No File <==== ATTENTION
Task: {9979CB83-103A-4105-9E5D-C74B0AF6D198} - \Microsoft\Windows\CertificateServicesClient\UserTask-Roam -> No File <==== ATTENTION
Task: {99E26481-9958-4BB7-8169-5587B344C933} - \{1BDE5BA4-6499-4AB4-8451-9523544785A9} -> No File <==== ATTENTION
Task: {9E47A789-ED90-463D-956D-40F6B074F5C3} - \gUpKfBzty -> No File <==== ATTENTION
Task: {9FDB3945-0AD2-4A99-954D-51D71B273C0B} - \NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {A1D7D5CA-346E-43D7-9170-3484BCA318E2} - \Adobe Flash Player PPAPI Notifier -> No File <==== ATTENTION
Task: {A34CCC68-DB88-4CD7-95CD-3B352AD02557} - \{CEA63330-0B80-46D9-B77D-3702EF2C6FA9} -> No File <==== ATTENTION
Task: {A35BB7A6-5F0C-4C9F-8450-2B3BED532D51} - \Microsoft\Windows\WindowsColorSystem\Calibration Loader -> No File <==== ATTENTION
Task: {A48CABBF-24C8-4B87-B00F-9261807C3B43} - \Microsoft\Windows\AppID\PolicyConverter -> No File <==== ATTENTION
Task: {A6AF9377-77CE-47AB-AD7D-EC32CAD0C82D} - \Microsoft\Windows\Location\Notifications -> No File <==== ATTENTION
Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - \Microsoft\Windows\Application Experience\ProgramDataUpdater -> No File <==== ATTENTION
Task: {A7D8E8C4-9CCF-4C94-B6D7-853C1581380D} - \Microsoft\Windows\SideShow\GadgetManager -> No File <==== ATTENTION
Task: {A8219CF2-AC20-4BFF-8E7D-172A63B057E3} - \{608E668C-BA74-4EF5-9226-1B3FD32C788C} -> No File <==== ATTENTION
Task: {AA9BECD6-90EE-4596-8FB0-084AA32FD256} - \{8DDBDC83-1C43-4346-A89F-F0C8833BF2C3} -> No File <==== ATTENTION
Task: {ABC84A49-DB12-44A8-9F42-852FC20E69A2} - \Microsoft\Windows\Offline Files\Background Synchronization -> No File <==== ATTENTION
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTION
Task: {AC668097-4D6B-4093-AC14-014C09DBF820} - \Microsoft\Windows\Ras\MobilityManager -> No File <==== ATTENTION
Task: {AFC5A9DE-50C0-4DC1-A1C2-1A01B1674DCE} - \{A01FA4E3-F8DE-4275-81E0-F66D98C8A242} -> No File <==== ATTENTION
Task: {B0B67112-E689-4D01-92E0-E3908C606404} - \{6611F3CA-1DA5-44D2-83C0-99FFD1B4927D} -> No File <==== ATTENTION
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION
Task: {B1243281-9402-4EEB-AE2F-1145F585272D} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTION
Task: {B29F6307-26E6-4C57-8010-E092B829822E} - \{D21BE30F-0953-455F-9F89-90EE636784F9} -> No File <==== ATTENTION
Task: {B390650C-7636-4D2D-AAC8-4EAC8B6B7867} - \{10457C1E-82DB-4440-A2E9-7F64978D57EC} -> No File <==== ATTENTION
Task: {B8DA0369-1010-4245-884F-C12306B83DC0} - \NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {BB001CB6-DC24-4AC7-8E7C-F0A06F802DC5} - \{F93C1CA0-6579-4796-A066-06D604BB40AA} -> No File <==== ATTENTION
Task: {BB2893A7-75A1-4EC8-A39E-CD1AF58A3A8F} - \VKDJ -> No File <==== ATTENTION
Task: {BE669978-1A07-48AB-B2A3-3DA0BCD364FC} - \NetShield Kit Self Repair -> No File <==== ATTENTION
Task: {BE669C13-8165-4536-96D0-6D6C39292AAE} - \Microsoft\Windows\Diagnosis\Scheduled -> No File <==== ATTENTION
Task: {C016366B-7126-46CA-B36B-592A3D95A60B} - \Microsoft\Windows\Customer Experience Improvement Program\Consolidator -> No File <==== ATTENTION
Task: {C1DF2274-9CF9-40D7-8474-B9528AC6F046} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> No File <==== ATTENTION
Task: {C342BF24-E80E-48AE-A2A1-845F71B864DD} - \Microsoft\Windows\Media Center\PBDADiscovery -> No File <==== ATTENTION
Task: {C3554FA0-2368-410B-9205-6939905A6585} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> No File <==== ATTENTION
Task: {C3A1FB6A-F433-4D9E-8BD2-F746BC8A975F} - \{16DB94DA-1C0C-4E70-8A5D-1D8CE9CAA0FD} -> No File <==== ATTENTION
Task: {C571EE05-74C6-42F6-8D3E-26A8F9452C47} - \{A50DF651-7260-4933-AA3A-76C9E73AB427} -> No File <==== ATTENTION
Task: {C691A4A0-1B47-4C90-B4B7-EAB2F8EA0F16} - \Microsoft\Windows\Media Center\StartRecording -> No File <==== ATTENTION
Task: {CA4B8FF2-A4D2-4D88-A52E-3A5BDAF7F56E} - \Microsoft\Windows\Registry\RegIdleBackup -> No File <==== ATTENTION
Task: {CB3D64BF-C0C9-45FF-BFB0-FF1A8F680186} - \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask -> No File <==== ATTENTION
Task: {CBD11947-D178-46A8-8543-56E334B8C8D5} - \{E4948356-2640-4518-873A-1B7A0BC35A3B} -> No File <==== ATTENTION
Task: {CCEF411B-50DB-4E69-8F26-2445AEA1CFCF} - \{8122D593-9A1E-4B73-ACDA-736937E86BDE} -> No File <==== ATTENTION
Task: {CE2BD262-2F30-4019-8814-97371B7E5AF2} - \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector -> No File <==== ATTENTION
Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> No File <==== ATTENTION
Task: {CEFBDE5A-D18C-4F97-9EBF-E1CBD893B574} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION
Task: {CF2A4FBD-7FDD-4875-8C9D-1E275313C2B8} - \NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {D0250F3F-6480-484F-B719-42F659AC64D5} - \Microsoft\Windows\Windows Error Reporting\QueueReporting -> No File <==== ATTENTION
Task: {D02BEC4E-F2D7-443F-8A9A-E90A24297ED3} - \{1B1E978F-ED9F-4BFB-9EAD-70CD84CA3C60} -> No File <==== ATTENTION
Task: {D333D1E5-0D8A-43C1-98D6-84EED2A4A3BF} - \{0E78FE8F-215F-4F1E-BA64-513B7DC99935} -> No File <==== ATTENTION
Task: {D3E2401D-71CC-4E55-9064-474EEE9A2557} - \{6CE00C69-3CDE-45E2-BECB-2CE9EB9F8B11} -> No File <==== ATTENTION
Task: {D6DB006B-677E-49ED-8ED5-D41450C77EC0} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> No File <==== ATTENTION
Task: {D74333AF-0C0F-4FFC-B36E-889055BB7763} - \{FFDAFCF6-3559-478C-8112-9B2BBD0A42FD} -> No File <==== ATTENTION
Task: {D7984694-3830-4337-8AF8-8D9A739AC65A} - \{BFEC2EEC-AA3A-456D-8DC0-143931AE0C81} -> No File <==== ATTENTION
Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - \Microsoft\Windows\Autochk\Proxy -> No File <==== ATTENTION
Task: {D9FCA921-6359-43A6-91D6-CC17E3E25619} - \{0943CE8A-9B30-4AEB-9CE9-289765CBE0F2} -> No File <==== ATTENTION
Task: {DA41DE71-8431-42FB-9DB0-EB64A961DEAD} - \Microsoft\Windows\Maintenance\WinSAT -> No File <==== ATTENTION
Task: {DAB9AE4C-E4B8-4E16-9636-CFC7EDD1771F} - \{96F3DCF1-2966-47D6-9DAF-BC9E2454BA8E} -> No File <==== ATTENTION
Task: {DC9C5814-EB26-4D66-8834-A42CB94153C0} - \Microsoft\Windows\Media Center\mcupdate -> No File <==== ATTENTION
Task: {DCF8A666-3C52-4860-BC8E-42D4D7A67134} - \NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - \Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {DDB0B241-BD5F-4AA7-ACE8-A8C4FE022ED9} - \Microsoft\Windows\Media Center\mcupdate_scheduled -> No File <==== ATTENTION
Task: {DF0BF798-C82E-4D60-887E-5F04DA849C6A} - \{DBF645E0-22CB-4DE4-BD7C-4EF95CB51225} -> No File <==== ATTENTION
Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - \Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange -> No File <==== ATTENTION
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - \Microsoft\Windows\Bluetooth\UninstallDeviceTask -> No File <==== ATTENTION
Task: {E4398BF0-2786-4B19-B648-19A91362953A} - \NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {E5BD6463-A71A-4087-87DE-8C8785B29316} - \{421617A8-BC2D-4A18-A07E-A561B8CF6AFC} -> No File <==== ATTENTION
Task: {E6FF3989-4EBE-4480-A392-19474639E47F} - \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver -> No File <==== ATTENTION
Task: {EACA24FF-236C-401D-A1E7-B3D5267B8A50} - \Microsoft\Windows\RAC\RacTask -> No File <==== ATTENTION
Task: {EB02381F-D652-4B1C-894A-712498C62C51} - \Microsoft\Windows\MUI\LPRemove -> No File <==== ATTENTION
Task: {EBD00135-4272-4DDE-8D81-5ED29FE7A467} - \Microsoft\Windows\MobilePC\HotStart -> No File <==== ATTENTION
Task: {F01A9983-55B3-4479-BCE6-8EB219F1F31B} - \Pbrowserupd -> No File <==== ATTENTION
Task: {F17E8239-18E0-46F5-9EA7-03A67C3DE373} - \{46CEBAF1-6C7A-4956-B4FA-630A52CC0B2D} -> No File <==== ATTENTION
Task: {F279C4C1-CA28-4DFF-BEB4-D0ACD43D2A71} - \{86A70F50-1DAB-4D2C-BB99-174A2AD2F38F} -> No File <==== ATTENTION
Task: {F38F6619-8559-4AA9-ADAE-4E33C6868F3C} - \NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {F4F53D51-1791-47B0-8142-61FA0FA0A059} - \{7AAE95D5-4088-4A2F-A36E-05863BD80706} -> No File <==== ATTENTION
Task: {F631116B-F5BA-4F49-AC38-FDBC8A562CED} - \{798552C1-A9A8-400D-8BF4-298ECBBEFF5F} -> No File <==== ATTENTION
Task: {F8FABFCE-C51B-408D-A440-4F9F5F0B599B} - \Microsoft\Windows\SideShow\AutoWake -> No File <==== ATTENTION
Task: {FA077DF2-891D-4CD3-B28D-BA3F8D65AAAA} - \NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} -> No File <==== ATTENTION
Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> No File <==== ATTENTION
Task: {FACEE3A0-FFB0-4581-A528-3890AA7323D8} - \{0998DABE-513B-420D-A45A-BB7F7991901A} -> No File <==== ATTENTION
Task: {FB3C354D-297A-4EB2-9B58-090F6361906B} - \Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem -> No File <==== ATTENTION
Task: {FDC58516-3037-4DEF-BC6B-E79F8705E825} - \{DA19B2AC-C7B2-4410-91BC-CEA63FAACCF5} -> No File <==== ATTENTION
Task: {FDCBA0BD-E1B4-4AC4-B771-3E7E6EE1F6D9} - \Microsoft\Windows\Offline Files\Logon Synchronization -> No File <==== ATTENTION
Task: {FDD56C73-F0D5-41B6-B767-6EFFD7966428} - \Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask -> No File <==== ATTENTION
Task: {FF9A49AF-2228-4A8F-BBBC-9A9BCE41306D} - \{C2574D9B-FEFF-4210-80A6-4497097C2968} -> No File <==== ATTENTION
Tcpip\..\Interfaces\{0DD11F9A-255C-482D-8DB7-5D94218C2817}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{1A66C001-8E2F-4CCA-840F-98CE240E0155}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{229E4703-FB80-40DC-9705-3B8982A6F4DB}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{2B41123A-65E8-4F94-954D-EAE258048182}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{3796F68B-C865-4044-9B57-A043D7BBCC58}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{54A49661-6DCD-416F-8B5D-AAE95BDD2A93}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{5F99B373-9E0D-4CAE-B3C6-4A88F6022BC4}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{6369160A-6BB6-4DB1-AAC4-AEED9456B583}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{70377FAC-ED7E-4881-B1E3-5B4238919D8D}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{7940CA87-2DB1-4517-9372-3A8A04D9FA30}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{8BE1764E-D81F-48F7-9AFB-BA33222BCFD5}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{8C6BE9FB-34B7-4B31-9E98-964DB26C8BAF}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{951593CF-5749-4711-8758-047D7C808EB2}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{AEED9BE5-B286-4FD3-BC96-9425B27CE5D8}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{B06BF534-1E89-413D-8075-4FDF63EDC382}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{BD466CE3-CAFC-47D4-85A4-DF964AEF5606}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{BF00BA59-A0FF-4C22-83CD-DC869507E39F}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{E587688B-E605-4A80-B3C8-AADEFAAF5DB2}: [NameServer] 185.192.111.210
Tcpip\..\Interfaces\{F5AEE394-5D3A-4694-8974-2FD4660A109F}: [NameServer] 185.192.111.210
S2 McAfee WebAdvisor; no ImagePath

Запустите FRST и нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении!
Обратите внимание, что компьютер будет перезагружен.
Внимание! Если на рабочем столе будет создан архив Дата_время.zip, то загрузите этот архив через данную форму

12 февраля, 2021

Fixlog.txt

5 часов назад, mike 1 сказал:

Здравствуйте.

Пофиксите следующие строчки в HiJackThis (используйте версию из папки Автологгера).











R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://find-it.pro/?utm_source=distr_m
R0 - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Main: [Start Page] = https://find-it.pro/?utm_source=distr_m
R3 - HKCU\..\URLSearchHooks: (no name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - (no file)
R3 - HKCU\..\URLSearchHooks: (no name) - {C9423817-5DA7-494E-87E4-111F1B49A1FD} - (no file)
O1 - Hosts: is empty
O17 - DHCP DNS 2: 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{0DD11F9A-255C-482D-8DB7-5D94218C2817}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{1A66C001-8E2F-4CCA-840F-98CE240E0155}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{229E4703-FB80-40DC-9705-3B8982A6F4DB}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B41123A-65E8-4F94-954D-EAE258048182}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{3796F68B-C865-4044-9B57-A043D7BBCC58}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{54A49661-6DCD-416F-8B5D-AAE95BDD2A93}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F99B373-9E0D-4CAE-B3C6-4A88F6022BC4}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{6369160A-6BB6-4DB1-AAC4-AEED9456B583}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{70377FAC-ED7E-4881-B1E3-5B4238919D8D}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{7940CA87-2DB1-4517-9372-3A8A04D9FA30}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{8BE1764E-D81F-48F7-9AFB-BA33222BCFD5}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C6BE9FB-34B7-4B31-9E98-964DB26C8BAF}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{951593CF-5749-4711-8758-047D7C808EB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{AEED9BE5-B286-4FD3-BC96-9425B27CE5D8}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{B06BF534-1E89-413D-8075-4FDF63EDC382}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD466CE3-CAFC-47D4-85A4-DF964AEF5606}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{BF00BA59-A0FF-4C22-83CD-DC869507E39F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{E587688B-E605-4A80-B3C8-AADEFAAF5DB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\CCS\Services\Tcpip\..\{F5AEE394-5D3A-4694-8974-2FD4660A109F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{1A66C001-8E2F-4CCA-840F-98CE240E0155}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{229E4703-FB80-40DC-9705-3B8982A6F4DB}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{2B41123A-65E8-4F94-954D-EAE258048182}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{3796F68B-C865-4044-9B57-A043D7BBCC58}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{54A49661-6DCD-416F-8B5D-AAE95BDD2A93}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{5F99B373-9E0D-4CAE-B3C6-4A88F6022BC4}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{6369160A-6BB6-4DB1-AAC4-AEED9456B583}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{70377FAC-ED7E-4881-B1E3-5B4238919D8D}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{7940CA87-2DB1-4517-9372-3A8A04D9FA30}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{8BE1764E-D81F-48F7-9AFB-BA33222BCFD5}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{8C6BE9FB-34B7-4B31-9E98-964DB26C8BAF}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{951593CF-5749-4711-8758-047D7C808EB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{AEED9BE5-B286-4FD3-BC96-9425B27CE5D8}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{B06BF534-1E89-413D-8075-4FDF63EDC382}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{BD466CE3-CAFC-47D4-85A4-DF964AEF5606}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{BF00BA59-A0FF-4C22-83CD-DC869507E39F}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{E587688B-E605-4A80-B3C8-AADEFAAF5DB2}: [NameServer] = 37.59.58.122
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{F5AEE394-5D3A-4694-8974-2FD4660A109F}: [NameServer] = 37.59.58.122
O21 - HKLM\..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O22 - BITS Job: (download) {0500F94E-9E95-4AB2-B038-67814D45FFDF} - http://redirector.gvt1.com/edgedl/release2/chrome_component/G4m99DanXpdX7lhn6ec8FQ_6422/AJDGbZBp29rxIfdU-A6jb9U -> C:\Users\CD86~1\AppData\Local\Temp\chrome_BITS_2184_844234021\AJDGbZBp29rxIfdU-A6jb9U
O22 - BITS Job: (download) {7FA2611F-7D28-4487-AFA2-4B28EBB55709} - https://download.cdn.yandex.net/browser/crx3/suggest_catboost_model_tag_model_19_7_3_14/19_07_03_14.crx -> C:\Users\CD86~1\AppData\Local\Temp\chrome_BITS_3748_1579179698\19_07_03_14.crx
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{011E7E61-C903-460D-9B3C-E70FD2E70BA6} - \{902C79F4-0114-472B-BAE8-5738F4FCCD03} (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F2B1365-8DBF-4FA5-9155-CD61007C9D8E} - \AVG\PC Tuneup 2011\Integrator\Scan and Repair (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FA97CB2-7987-4360-83BE-36243832C81A} - \QPFSiptsQiUmyMj2 (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2DA4EE75-AA42-4D66-A18B-E742731A7D45} - \Алексей (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{372BC032-ADD5-44F6-A9E0-A0F90B371345} - \vsbCsjNTZvxfEP (no xml)
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4BF84CDE-3DBE-4925-A060-7D9B156BC77D} - \EgDnnxLDdmkTyvIEL2 (no xml)

Скачайте Farbar Recovery Scan Tool и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
Убедитесь, что под окном Optional Scan отмечены "List BCD" и "90 Days Files".
Нажмите кнопку Scan.
После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.
Если программа была запущена в первый раз, будет создан отчет (Addition.txt). Пожалуйста, прикрепите его в следующем сообщении.

Addition.txt FRST.txt

Fixlog.txt

Хакер из меня тот еще))

12 февраля, 2021

Цитата

Скопируйте приведенный ниже текст в Блокнот и сохраните файл как fixlist.txt в кодировке Юникод в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool

Переделайте.

12 февраля, 2021

Fixlog.txt

12 февраля, 2021

Что с проблемой?

12 февраля, 2021

В смысле? Я наверное что то не так делаю,но сейчас запустил касперского, сразу обнаружен HEUR;Trojan.Win64.Miner.gen

C:\ProgramData\Flok\Flok.exe

может всю процедуру с начала пройти?

12 февраля, 2021

1. Выделите следующий код:

Start::
CreateRestorePoint:
NetShield Kit 1.3.28.0
Folder: C:\ProgramData\Flock
Reboot:
End::

2. Скопируйте выделенный текст (правая кнопка мыши – Копировать).
3. Запустите Farbar Recovery Scan Tool.
4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

Обратите внимание: будет выполнена перезагрузка компьютера.

После выполнения скрипта NetShield Kit 1.3.28.0 удалите через Установку программ.

12 февраля, 2021

4 часа назад, Kolhoznik сказал:

может всю процедуру с начала пройти?

Сделайте новые логи FRST.txt, Addition.txt после выполнения рекомендаций из сообщения thyrex

13 февраля, 2021

Fixlog.txt

CollectionLog-2021.02.13-07.51.zip

13 февраля, 2021

Читайте пожалуйста внимательно

Цитата

Сделайте новые логи FRST.txt, Addition.txt после выполнения рекомендаций из сообщения thyrex

Троян минер ген

Рекомендуемые сообщения

Kolhoznik

Ссылка на комментарий

Поделиться на другие сайты

Sandor

Ссылка на комментарий

Поделиться на другие сайты

Kolhoznik

Ссылка на комментарий

Поделиться на другие сайты

mike 1

Ссылка на комментарий

Поделиться на другие сайты

Kolhoznik

Ссылка на комментарий

Поделиться на другие сайты

mike 1

Ссылка на комментарий

Поделиться на другие сайты

Kolhoznik

Ссылка на комментарий

Поделиться на другие сайты

mike 1

Ссылка на комментарий

Поделиться на другие сайты

Kolhoznik

Ссылка на комментарий

Поделиться на другие сайты

mike 1

Ссылка на комментарий

Поделиться на другие сайты

Kolhoznik

Ссылка на комментарий

Поделиться на другие сайты

thyrex

Ссылка на комментарий

Поделиться на другие сайты

mike 1

Ссылка на комментарий

Поделиться на другие сайты

Kolhoznik

Ссылка на комментарий

Поделиться на другие сайты

mike 1

Ссылка на комментарий

Поделиться на другие сайты

Пожалуйста, войдите, чтобы комментировать

Похожий контент

Сайт

Активность

Магазин

Поддержка

Kaspersky Support Forum