CreateRestorePoint:
CloseProcesses:
HKLM\...\Run: [TNOD UP] => C:\Program Files\ESET\TNOD\TNODUP.exe [5106176 2018-08-09] (Tukero[X]Team) [File not signed]
GroupPolicy: Restriction - Chrome <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
GroupPolicyUsers\S-1-5-21-3327491866-1701107999-1953143478-1008\User: Restriction <==== ATTENTION
Toolbar: HKU\S-1-5-21-3327491866-1701107999-1953143478-500 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} -  No File
OPR Extension: (TSearch) - C:\Users\Администратор.000\AppData\Roaming\Opera Software\Opera Stable\Extensions\jdmkclkigoemafepfpiljdlgnoloicom [2017-07-07]
OPR Extension: (Adblocker for Youtube™) - C:\Users\Администратор.000\AppData\Roaming\Opera Software\Opera Stable\Extensions\keakaoleafeemhlcpdgcgnaehpeofopp [2017-12-09]
2017-09-29 19:42 - 2017-09-29 19:42 - 000174592 _____ (Microsoft Corporation) C:\Program Files (x86)\WUUYIDo.exe
cmd: wmic product where name="TNod User & Password Finder" call uninstall /nointeractive
Task: {03FF7C1D-CC1E-48FC-8DD7-BFDCA85F7CD9} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {10925BC8-AA20-4F8B-94E9-EC0D93569B59} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {3A610A28-F6A4-4A0D-9029-433B58AB1742} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {4520E8A9-AF06-4122-859B-E4B655B29B36} - \Microsoft\Windows\AppID\SmartScreenSpecific -> No File <==== ATTENTION
Task: {49180D06-3B47-403C-A13D-5E665F56307D} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
C:\Program Files\ESET\TNOD
Task: {5DE61737-8B8D-4374-B76B-F565C34B651D} - \Microsoft\Windows\Shell\FamilySafetyUpload -> No File <==== ATTENTION
Task: {6015EF5F-811A-4B3B-9B1F-1C0E56B77A93} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {6322FA18-435B-4C26-8B18-7E8F8C574064} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {6AD78D2D-893A-4950-B222-224A3CABCA32} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - \Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task -> No File <==== ATTENTION
Task: {800B64BF-AD48-459D-93CD-4E50B08E5D9E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {80A2684D-1D9B-4478-9952-31152CFA63F1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - \Microsoft\Windows\SkyDrive\Routine Maintenance Task -> No File <==== ATTENTION
Task: {8A66DC2A-7806-43CA-9D6B-DBFDBCE157CD} - \Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate -> No File <==== ATTENTION
Task: {A83E4865-394F-4DFD-ACB6-3A9D478607A0} - \Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate -> No File <==== ATTENTION
Task: {B2F4AC84-A8D0-4524-9363-BFF5A5911A00} - \Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask -> No File <==== ATTENTION
Task: {C9ACBFD2-20AA-4A3F-BE1A-A3D5279BB1BB} - \Microsoft\Windows\Plug and Play\Plug and Play Cleanup -> No File <==== ATTENTION
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> No File <==== ATTENTION
Task: {D784CC6F-618A-4727-A55A-08319E5C15F7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> No File <==== ATTENTION
Task: {E88E1500-7E50-4BF2-8268-C0CE36988C66} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION