Start::
CloseProcesses:
SystemRestore: On
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ограничение <==== ВНИМАНИЕ
GroupPolicy: Ограничение ? <==== ВНИМАНИЕ
Policies: C:\ProgramData\NTUSER.pol: Ограничение <==== ВНИМАНИЕ
R2 TermService; C:\Program Files\RDP Wrapper\rdpwrap.dll [116736 2022-09-09] (Stas'M Corp.) [Файл не подписан] <==== ВНИМАНИЕ (отсутствует ServiceDLL)
C:\Program Files\RDP Wrapper\rdpwrap.dll
C:\Program Files\RDP Wrapper
2022-11-25 13:53 - 2022-09-09 15:53 - 000000000 __SHD C:\ProgramData\RealtekHD
2022-11-25 13:53 - 2022-09-09 15:53 - 000000000 ___HD C:\ProgramData\Windows Tasks Service
2022-11-25 13:52 - 2022-09-09 15:53 - 000000000 __SHD C:\ProgramData\WindowsTask
2022-09-09 15:53 C:\AdwCleaner
2022-11-25 14:01 C:\FRST
2022-02-03 04:33 C:\KVRT2020_Data
2022-09-09 15:53 C:\KVRT_Data
2022-09-09 15:53 C:\Program Files\AVAST Software
2022-09-09 15:53 C:\Program Files\AVG
2022-09-09 15:53 C:\Program Files\Bitdefender Agent
2022-09-09 15:53 C:\Program Files\ByteFence
2022-09-09 15:53 C:\Program Files\Cezurity
2022-09-09 15:53 C:\Program Files\COMODO
2022-09-09 15:53 C:\Program Files\DrWeb
2022-09-09 15:53 C:\Program Files\Enigma Software Group
2022-09-09 15:53 C:\Program Files\ESET
2022-09-09 15:53 C:\Program Files\Kaspersky Lab
2022-09-09 15:53 C:\Program Files\Loaris Trojan Remover
2022-09-09 15:53 C:\Program Files\Malwarebytes
2022-09-09 15:53 C:\Program Files\Process Lasso
2022-09-09 15:53 C:\Program Files\Rainmeter
2022-09-09 15:53 C:\Program Files\Ravantivirus
2022-09-09 15:53 C:\Program Files\SpyHunter
2022-09-09 15:53 C:\Program Files (x86)\360
2022-09-09 15:53 C:\Program Files (x86)\AVAST Software
2022-09-09 15:53 C:\Program Files (x86)\AVG
2022-09-09 15:53 C:\Program Files (x86)\Cezurity
2022-09-09 15:53 C:\Program Files (x86)\GRIZZLY Antivirus
2022-09-09 15:53 C:\Program Files (x86)\Kaspersky Lab
2022-09-09 15:53 C:\Program Files (x86)\Microsoft JDX
2022-09-09 15:53 C:\Program Files (x86)\Panda Security
2022-09-09 15:53 C:\Program Files (x86)\SpyHunter
2022-09-09 15:53 C:\Program Files (x86)\Transmission
2022-09-09 15:53 C:\WINDOWS\speechstracing
2022-09-09 15:53 C:\Program Files\Common Files\AV
2022-09-09 15:53 C:\Program Files\Common Files\Doctor Web
2022-09-09 15:53 C:\Program Files\Common Files\McAfee
2022-09-09 15:53 C:\ProgramData\360safe
2022-09-09 15:53 C:\ProgramData\AVAST Software
2022-09-09 15:53 C:\ProgramData\Avira
2022-09-09 15:53 C:\ProgramData\BookManager
2022-09-09 15:53 C:\ProgramData\Doctor Web
2022-09-09 15:53 C:\ProgramData\ESET
2022-09-09 15:53 C:\ProgramData\Evernote
2022-09-09 15:53 C:\ProgramData\FingerPrint
2022-09-09 15:53 C:\ProgramData\grizzly
2022-09-09 15:53 C:\ProgramData\Kaspersky Lab
2022-09-09 15:53 C:\ProgramData\Kaspersky Lab Setup Files
2022-09-09 15:53 C:\ProgramData\Malwarebytes
2022-09-09 15:53 C:\ProgramData\MB3Install
2022-09-09 15:53 C:\ProgramData\McAfee
2022-09-09 15:53 C:\ProgramData\Norton
2022-09-09 15:53 C:\ProgramData\PuzzleMedia
2022-09-09 15:53 C:\ProgramData\RobotDemo
2022-09-09 15:53 C:\ProgramData\WavePad
John (S-1-5-21-3865385799-4055574765-831208414-1001 - Administrator - Enabled)
FirewallRules: [{56D9985C-D738-4D56-BCD4-2D71B79F4355}] => (Allow) C:\ProgramData\WindowsTask\AMD.exe () [Файл не подписан]
FirewallRules: [{C2C9BEC7-3402-44BA-A321-2F0BCAB6619E}] => (Allow) C:\ProgramData\WindowsTask\AppModule.exe () [Файл не подписан]
FirewallRules: [{B2C8AECD-C6BF-4886-8C76-B09A4603C200}] => (Block) LPort=139
FirewallRules: [{F6DF7064-EF8F-44F5-8673-E9C83D08E7A8}] => (Block) LPort=445
FirewallRules: [{C93A3362-D124-43B7-BCEF-5527BF74331E}] => (Block) LPort=445
FirewallRules: [{8C287E0B-1D1F-4E70-8C4B-8E3205F73374}] => (Block) LPort=139
FirewallRules: [{F0CB6B4F-B580-4A9D-BAE6-6FA7BA72AF8D}] => (Allow) C:\ProgramData\Windows Tasks Service\winserv.exe => Нет файла
FirewallRules: [{0981A77D-3102-4892-968E-BA83A675897E}] => (Allow) LPort=3389
EmptyTemp:
Reboot:
End::