Start::
CreateRestorePoint:
CHR HKU\S-1-5-21-359424554-922702950-451155675-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cnlhokffphohmfcddnibpohmkdfafdli]
CHR HKU\S-1-5-21-359424554-922702950-451155675-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [djgdgdcfmdkficbifbnaacknblbkhhoc]
CHR HKLM-x32\...\Chrome\Extension: [cnlhokffphohmfcddnibpohmkdfafdli]
CHR HKLM-x32\...\Chrome\Extension: [djlkjhaeaofhlchjkhhohmgadibkoaad]
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
2022-01-18 00:15 - 2022-01-18 00:15 - 000012595 _____ C:\ProgramData\goyslgxe.nnn
2022-01-17 23:49 - 2022-01-17 23:49 - 000012310 _____ C:\ProgramData\juutbubq.wrj
2021-03-05 12:54 - 2021-03-05 12:54 - 000000128 ____H () C:\Users\Антон\AppData\Roaming\ecf00c38dc807e105d881c433a6b455dd2c606b6
AlternateDataStreams: C:\Users\Антон:id [32]
HKU\FileCache\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\UserChoice => 
HKU\FileCache\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.reg\UserChoice => 
HKU\FileCache\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bat\UserChoice => 
HKU\FileCache\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cmd\UserChoice => 
HKU\FileCache\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com\UserChoice => 
HKU\FileCache\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scr\UserChoice => 
HKU\FileCache\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\UserChoice => 
FirewallRules: [{03B9F016-AC5F-4CAC-841B-73227C36525C}] => (Allow) C:\Users\Антон\AppData\Roaming\Zoom\bin\airhost.exe => Нет файла
FirewallRules: [{8EA3DC98-BC4B-43E0-9FCE-C8DCEB6AF453}] => (Allow) C:\Users\Антон\AppData\Roaming\Zoom\bin\airhost.exe => Нет файла
ExportKey: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions
CMD: sfc /scannow
Reboot:
End::