Результат сканирования Farbar Recovery Scan Tool (FRST) (x64) Версия: 18-11-2022
Запущено с помощью MK11 (Администратор) на WIN-RE97U96F19D (MSI MS-7A15) (24-11-2022 17:38:49)
Запущено из E:\mo dao\dorama\JiLi\7. стримы\20221120
Загруженные профили: MK11
Платформа: Microsoft Windows 7 Профессиональная  Service Pack 1 (X64) Язык: Русский (Россия)
Браузер по умолчанию: Chrome
Режим загрузки: Normal

==================== Процессы (В белом списке) =================

(Если запись включена в fixlist, процесс будет закрыт. Файл не будет перемещён.)

(Beijing Sogou Technology Development Co., Ltd. -> Sogou.com Inc.) C:\Program Files (x86)\SogouInput\11.8.0.5496\SogouCloud.exe
(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files (x86)\HDD Regenerator\hrsrv.exe ->) (Abstradrome -> ) C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe <2>
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(cmd.exe ->) (Adguard Software Limited -> Adguard Software Ltd) C:\Program Files (x86)\Adguard\Adguard.BrowserExtensionHost.exe
(D:\steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe ->) (Skutta, Kristjan -> ) D:\steam\steamapps\common\wallpaper_engine\wallpaper32.exe
(explorer.exe ->) (Adguard Software Limited -> Adguard Software Ltd) C:\Program Files (x86)\Adguard\Adguard.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <28>
(explorer.exe ->) (Malwarebytes Inc. -> Malwarebytes) E:\mo dao\dorama\JiLi\7. стримы\20221120\adwcleaner_8.4.0.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(explorer.exe ->) (Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe
(Famatech Corp. -> Famatech Corp.) C:\Program Files (x86)\Radmin VPN\RvRvpnGui.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(services.exe ->) (Abstradrome -> ) C:\Program Files (x86)\HDD Regenerator\hrsrv.exe
(services.exe ->) (Adguard Software Limited -> Adguard Software Ltd) C:\Program Files (x86)\Adguard\AdguardSvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(services.exe ->) (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(services.exe ->) (Digital Wave Ltd -> Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) D:\Games\Origin\OriginWebHelperService.exe
(services.exe ->) (Famatech Corp. -> Famatech Corp.) C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe
(services.exe ->) (Hi-Rez Studios) [Файл не подписан] D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(services.exe ->) (Intel(R) Corporation -> Intel Corporation) C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
(services.exe ->) (Kristjan Skutta -> ) D:\steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
(services.exe ->) (Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(services.exe ->) (LogMeIn, Inc. -> LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(services.exe ->) (LogMeIn, Inc. -> LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (SafeNet Canada, Inc. -> SafeNet, Inc.) C:\Windows\System32\hasplms.exe
(services.exe ->) (UC-Logic Technology Corporation -> UC-Logic Technology Corp.) C:\Windows\System32\drivers\WTSrv.exe
(services.exe ->) (YANDEX LLC -> YANDEX LLC) C:\Program Files (x86)\Yandex\YandexBrowser\22.11.0.2419\service_update.exe <2>

==================== Реестр Windows (В белом списке) ===================

(Если запись включена в fixlist, элемент реестра будет сброшен на значение по умолчанию или удалён. Файл не будет перемещён.)

HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3069768 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [HDD Regenerator] => C:\Program Files (x86)\HDD Regenerator\Shell.exe [90336 2013-05-08] (Abstradrome -> )
HKLM-x32\...\Run: [RadminVPN] => C:\Program Files (x86)\Radmin VPN\RvRvpnGui.exe [2131984 2022-10-18] (Famatech Corp. -> Famatech Corp.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ограничение <==== ВНИМАНИЕ
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\66.0.3.0\GoogleDriveFS.exe [52475672 2022-11-08] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\66.0.3.0\GoogleDriveFS.exe [52475672 2022-11-08] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1000\...\MountPoints2: {87234afa-f1e9-11e7-bc4d-309c23020e98} - E:\RunGame.exe
HKU\S-1-5-21-2708906417-4186119665-3383214263-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1001\...\Run: [ctfmon] => C:\Windows\system32\ctfmon.exe [9728 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1001\...\Run: [Adguard] => C:\Program Files (x86)\Adguard\Adguard.exe [6315480 2022-03-05] (Adguard Software Limited -> Adguard Software Ltd)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [597640 2020-02-07] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\66.0.3.0\GoogleDriveFS.exe [52475672 2022-11-08] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1001\...\Run: [ut] => C:\Users\MK11\AppData\Roaming\uTorrent\uTorrent.exe [2718880 2022-11-16] (BitTorrent Inc -> BitTorrent Inc.)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1001\...\Policies\Explorer: [nolowdiskspacechecks] 1
HKU\S-1-5-21-2708906417-4186119665-3383214263-1005\...\Winlogon: [Shell] C:\Windows\eHome\McrMgr.exe [343552 2009-07-14] (Microsoft Windows -> Microsoft Corporation) <==== ВНИМАНИЕ
HKU\S-1-5-21-2708906417-4186119665-3383214263-1008\...\Run: [fastback] => C:\Users\TRI POLOSKI\AppData\Roaming\fastback\python\pythonw.exe [95904 2018-05-02] (Python Software Foundation -> Python Software Foundation) <==== ВНИМАНИЕ
HKU\S-1-5-21-2708906417-4186119665-3383214263-1008\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1008\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [597640 2020-02-07] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1008\...\Run: [uTorrent] => C:\Users\TRI POLOSKI\AppData\Roaming\uTorrent\uTorrent.exe [2718880 2022-11-16] (BitTorrent Inc -> BitTorrent Inc.)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1008\...\Run: [ut] => C:\Users\TRI POLOSKI\AppData\Roaming\uTorrent\uTorrent.exe [2718880 2022-11-16] (BitTorrent Inc -> BitTorrent Inc.)
HKU\S-1-5-21-2708906417-4186119665-3383214263-1008\...\Run: [Steam] => D:\steam\steam.exe [4245352 2022-11-17] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\66.0.3.0\GoogleDriveFS.exe [52475672 2022-11-08] (Google LLC -> Google, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\107.0.5304.107\Installer\chrmstp.exe [2022-11-11] (Google LLC -> Google LLC)
HKLM\Software\...\Winlogon\GPExtensions: [{C631DF4C-088F-4156-B058-4375F0853CD8}] -> C:\Windows\System32\cscobj.dll [2010-11-21] (Microsoft Windows -> Корпорация Майкрософт)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ограничение <==== ВНИМАНИЕ

==================== Запланированные задачи (В белом списке) ============

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

Task: {005D3208-5404-4018-9416-0497071A5FF0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-02-17] (Google Inc -> Google Inc.)
Task: {051AE71F-BD6C-4D0D-8E9C-427ADBBF3C7F} - \Opera scheduled Autoupdate 1511005335 -> Нет файла <==== ВНИМАНИЕ
Task: {0B160443-2A9D-4A2F-A567-651BDD5F3135} - System32\Tasks\Системное обновление Браузера Яндекс => C:\Program Files (x86)\Yandex\YandexBrowser\22.11.0.2419\service_update.exe [3216024 2022-11-13] (YANDEX LLC -> YANDEX LLC)
Task: {0F4E5C40-7464-4B67-9587-B8A76FDF71A6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24614304 2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {111CE9CC-1B61-46A2-8C81-4024D34FD7B7} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177288 2015-05-29] (Intel(R) Update Manager -> )
Task: {14021DB4-673A-4AB2-B87D-6FB7F8C91956} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {18BB8EBA-A5EB-4885-8589-EE14596F40A0} - System32\Tasks\Opera scheduled Autoupdate 1511024069 => C:\Users\Aarataka\AppData\Local\Programs\Opera\launcher.exe [1868032 2022-04-01] (Opera Software AS -> Opera Software)
Task: {1A683EF6-585A-4FBE-A62F-28E57E8F7D2A} - \{8F3970E2-8D76-6694-6B7D-A99E41AF3E0E} -> Нет файла <==== ВНИМАНИЕ
Task: {1B324772-F54B-448F-96A8-DCCD7AC11228} - \VKSaverUpdate -> Нет файла <==== ВНИМАНИЕ
Task: {1CF9CAFA-53CD-4040-9B0A-71B8D694F0F0} - \KDiuuovyDodu -> Нет файла <==== ВНИМАНИЕ
Task: {201E9DD8-0EA6-4370-9D9C-207398395644} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [13797712 2018-09-10] (Piriform Ltd -> Piriform Ltd)
Task: {2AACC6D1-CFDB-46A9-9FC5-DF494B84F3CF} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24614304 2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E77C951-D624-47FE-9555-7AA12C49D4EE} - \{0F7A0447-0B05-790C-0E11-04780B0A110A} -> Нет файла <==== ВНИМАНИЕ
Task: {3130BD05-6611-49F0-8677-F3886D624BF5} - System32\Tasks\{F97A7F96-6D5D-4CC4-BB6B-AB4DA7F6AFE6} => C:\Windows\system32\pcalua.exe -a C:\Windows\SetupX32.EXE -c /@SetupExt\Tablet
Task: {31DFB8C0-39CB-4AD9-A1D7-0883651511D2} - \{4E342CB5-16B6-4975-E650-61A978586CF9} -> Нет файла <==== ВНИМАНИЕ
Task: {331F81E2-5BA0-44B7-9793-E1A2A671D644} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [1577416 2016-02-26] (Corel Corporation -> Corel Corporation)
Task: {337513D8-2502-4EDA-BBC1-FAB487A43E5A} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.exe [1499704 2022-07-20] (Adobe Inc. -> Adobe)
Task: {40FCAE1E-F13E-45FF-A836-7990EC39DC50} - \curl -> Нет файла <==== ВНИМАНИЕ
Task: {410D0A71-1162-4602-8B63-CD2505D5A81B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-02-17] (Google Inc -> Google Inc.)
Task: {47F2252E-450C-4C53-A1A5-6AE909054F96} - System32\Tasks\Восстановление сервиса обновлений Яндекс Браузера => C:\Program Files (x86)\Yandex\YandexBrowser\22.11.0.2419\service_update.exe [3216024 2022-11-13] (YANDEX LLC -> YANDEX LLC)
Task: {492CEBB1-29D4-4306-9D0C-52FBE4D327EF} - \{DC383590-3A52-B740-A12B-402C759DACF5} -> Нет файла <==== ВНИМАНИЕ
Task: {64CFC9CA-29B2-448E-AA6E-DE2440EFAE08} - \{DC00DDAD-896C-437A-881F-922C28B24F6A} -> Нет файла <==== ВНИМАНИЕ
Task: {65A637B9-6D48-4F78-B45B-2A65F2E343CB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2022-07-20] (Adobe Inc. -> Adobe)
Task: {673EDD74-BFE8-4F8E-BECA-2A1621148FEF} - System32\Tasks\fastback2 => C:\Users\TRI POLOSKI\AppData\Roaming\fastback\python\pythonw.exe [95904 2018-05-02] (Python Software Foundation -> Python Software Foundation) <==== ВНИМАНИЕ
Task: {69799ABD-08B3-4AD4-863A-3064224871A9} - System32\Tasks\Opera scheduled Autoupdate 1511024157 => C:\Users\MK11\AppData\Local\Programs\Opera\launcher.exe [2569160 2022-10-28] (Opera Norway AS -> Opera Software)
Task: {70C80248-B993-47B4-8330-C55B6BA0595C} - \{8970755E-99B8-47C4-D442-2579F010CD6C} -> Нет файла <==== ВНИМАНИЕ
Task: {756A30B4-0ED8-4D3F-9DB4-0DD45C0AE4BE} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [160664 2022-11-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {83633A7F-E6F6-4F63-9DBE-4258A77E5305} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_154_Plugin.exe [1449472 2018-08-18] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {861B1642-B7C7-4712-8DEB-28E1D72A0A71} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {87537B7C-2B37-41A9-89F3-7C834F90A5DB} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [745480 2019-04-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {8E77C118-3A3F-4739-838C-6FB06029E471} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-WIN-RE97U96F19D => C:\Windows\ehome\McxTask.exe [37376 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
Task: {8F7A4A0F-95FF-4F9D-A094-6D29332B0A31} - System32\Tasks\NCH Software\PixillionDowngrade => C:\Program Files (x86)\NCH Software\Pixillion\pixillion.exe [2283000 2022-01-24] (NCH Software, Inc. -> NCH Software)
Task: {91B77A76-8803-48EE-8933-B146167F0B79} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
Task: {91ECCAC1-59A2-4BAA-AC59-4DCC9FE1985B} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177288 2015-05-29] (Intel(R) Update Manager -> )
Task: {9CD37EE9-E409-43AC-923E-EF8C2559CEC4} - System32\Tasks\Opera scheduled assistant Autoupdate 1560877489 => C:\Users\MK11\AppData\Local\Programs\Opera\launcher.exe [2569160 2022-10-28] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\MK11\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {A230DD56-9AB9-4A90-B2A9-78420CB2D917} - \UYCw -> Нет файла <==== ВНИМАНИЕ
Task: {A5D8D139-FCDB-4D29-8903-E7AA5D36FDCE} - \initwin -> Нет файла <==== ВНИМАНИЕ
Task: {AA9F7886-7B41-48B7-970D-50433E6DEDD7} - \{3DCBF713-E129-561E-1633-8D2C2EB7162C} -> Нет файла <==== ВНИМАНИЕ
Task: {AABFE0A1-1C57-4015-A3CE-04C4909BA1FB} - \26DF6FCA-DF13-BF3E-3AC4-4D04F389577B -> Нет файла <==== ВНИМАНИЕ
Task: {AD7D591D-4703-48F9-A7D4-AFB52F3A2BDC} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {B1EC4145-EA03-4B53-8147-D3671EE7F3BE} - System32\Tasks\fastback => C:\Users\TRI POLOSKI\AppData\Roaming\fastback\python\pythonw.exe [95904 2018-05-02] (Python Software Foundation -> Python Software Foundation) <==== ВНИМАНИЕ
Task: {B742A061-6168-4732-BA15-8FF600FB5102} - System32\Tasks\Обновление Браузера Яндекс => C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\Application\browser.exe [4566680 2022-11-08] (YANDEX LLC -> YANDEX LLC)
Task: {BC8CB814-6C66-4DEF-8F76-E7149419E20C} - \Update-S-1-8-22 -> Нет файла <==== ВНИМАНИЕ
Task: {C33B0E55-2826-4EFB-9CF6-0618FA49DA01} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6158752 2021-12-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {D35567FE-1715-485C-ACB5-EAB41B25ADB7} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1615917820 => C:\Users\TRI POLOSKI\AppData\Local\Programs\Opera GX\launcher.exe [2505160 2022-11-16] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\TRI POLOSKI\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {DF1E62D1-57DF-4E18-BCC0-1C7FD14DA415} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {DF8C9CDD-3089-40A3-8904-0F3A1759ED2C} - System32\Tasks\Opera GX scheduled Autoupdate 1573925294 => C:\Users\TRI POLOSKI\AppData\Local\Programs\Opera GX\launcher.exe [2505160 2022-11-16] (Opera Norway AS -> Opera Software)
Task: {E567146E-D5F9-44DA-BAA8-6DA5BE68EB2B} - \{BC9E3D97-C3C1-BFB7-97FB-92126FEA28BA} -> Нет файла <==== ВНИМАНИЕ
Task: {EE40AF6C-71AF-4AEC-B547-EC4E324529FF} - \cHYDiPOHiM -> Нет файла <==== ВНИМАНИЕ
Task: {F5120321-97A7-42D4-85F7-2E2F9B04620E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [160664 2022-11-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {FBC56461-8846-41D4-8958-B0FCEF7A8388} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6158752 2021-12-24] (Microsoft Corporation -> Microsoft Corporation)

(Если запись включена в fixlist, файл задачи (.job) будет перемещён. Файл, выполняемый задачей, не будет перемещён.)

Task: C:\Windows\Tasks\Восстановление сервиса обновлений Яндекс Браузера.job => C:\Program Files (x86)\Yandex\YandexBrowser\22.11.0.2419\service_update.exe
Task: C:\Windows\Tasks\Обновление Браузера Яндекс.job => C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
Task: C:\Windows\Tasks\Системное обновление Браузера Яндекс.job => C:\Program Files (x86)\Yandex\YandexBrowser\22.11.0.2419\service_update.exe

==================== Internet (В белом списке) ====================

(Если элемент включён в fixlist, если он является элементом реестра, он будет удалён или сброшен на значение по умолчанию.)

ProxyEnable: [S-1-5-21-2708906417-4186119665-3383214263-1001] => Proxy включён
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [152864 2010-05-18] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [193824 2010-05-18] (Apple Inc. -> Apple Inc.)
Hosts: В Hosts файле более одной записи. Смотрите раздел Hosts Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{10F0B61A-320E-4606-9CEC-12E39B24DF29}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{845F09F3-F283-409E-98EA-1AC3A86C19AA}: [DhcpNameServer] 192.168.0.1
HKLM\System\...\Parameters\PersistentRoutes: [0.0.0.0,0.0.0.0,26.0.0.1,9256]

FireFox:
========
FF DefaultProfile: tbeydgoo.default-1652435718067
FF ProfilePath: C:\Users\MK11\AppData\Roaming\Mozilla\Firefox\Profiles\tbeydgoo.default-1652435718067 [2022-11-24]
FF NetworkProxy: Mozilla\Firefox\Profiles\tbeydgoo.default-1652435718067 -> http", "47.93.9.25"
FF Notifications: Mozilla\Firefox\Profiles\tbeydgoo.default-1652435718067 -> hxxps://weibo.com
FF Extension: (Download Master) - C:\Users\MK11\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\dm@westbyte.com.xpi [2017-10-20]
FF Extension: (Download Master Toolbar) - C:\Users\MK11\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\dmbarff@westbyte.com.xpi [2015-12-30] [Устаревший]
FF Extension: (Tampermonkey) - C:\Users\MK11\AppData\Roaming\Mozilla\Firefox\Profiles\tbeydgoo.default-1652435718067\Extensions\firefox@tampermonkey.net.xpi [2022-09-26]
FF Extension: (YouTube Video Downloader/YouTube HD Download) - C:\Users\MK11\AppData\Roaming\Mozilla\Firefox\Profiles\tbeydgoo.default-1652435718067\Extensions\youtubedownloader@youtubedownloadvideo1clickgroup.com.xpi [2022-09-26]
FF Extension: (Video DownloadHelper) - C:\Users\MK11\AppData\Roaming\Mozilla\Firefox\Profiles\tbeydgoo.default-1652435718067\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2022-05-13]
FF Extension: (IcoFinder Past) - C:\Users\MK11\AppData\Roaming\Mozilla\Firefox\Profiles\tbeydgoo.default-1652435718067\Extensions\{d4256e4e-1c2f-441d-af5e-0b41f31a9797}.xpi [2017-11-26]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_154.dll [2018-08-18] (Adobe Systems Incorporated -> )
FF Plugin: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-07-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-07-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Нет файла]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-03-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS -> Unity Technologies ApS)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_154.dll [2018-08-18] (Adobe Systems Incorporated -> )
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-04-08] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-04-08] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-04-08] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2018-04-08] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-07-30] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files (x86)\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-07-30] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Нет файла]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-03-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-2708906417-4186119665-3383214263-1008: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\TRI POLOSKI\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2017-05-18] (Unity Technologies SF -> Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2708906417-4186119665-3383214263-1008: @zoom.us/ZoomVideoPlugin -> C:\Users\TRI POLOSKI\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-04-22] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default [2022-11-24]
CHR DownloadDir: E:\mo dao\dorama\JiLi\7. стримы\20221120
CHR Notifications: Default -> hxxps://api.weibo.com,*"; hxxps://api.weibo.com; hxxps://mail.yandex.ru; hxxps://ria.ru; hxxps://vk.com; hxxps://vz.ru; hxxps://web.telegram.org; hxxps://weibo.com; hxxps://wp.aliexpress.com; hxxps://www.instagram.com; hxxps://www.weibo.com; hxxps://www.youtube.com
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.weibo.com/u/5570332218/home?topnav=1&wvr=6","hxxps://vk.com/ji_li","hxxps://translate.google.ru/?hl=ru&tab=kT1#view=home&op=translate&sl=zh-CN&tl=ru&text=%E5%A2%A8%E6%B0%B4%E4%B8%80%E7%82%B9%E4%B9%9F%E4%B8%8D%E5%A5%BD%E5%90%83","hxxps://fanyi.baidu.com/#zh/ru/%EF%BC%9A%E5%A2%A8%E6%B0%B4%E4%B8%80%E7%82%B9%E4%B9%9F%E4%B8%8D%E5%A5%BD%E5%90%83","hxxps://bkrs.info/slovo.php?ch=%E7%AC%94%E5%A2%A8%E9%94%80%E6%AF%81%EF%BC%8C%E6%B8%85%E6%B2%B3%E6%91%87%E5%9D%A0%EF%BC%8C%E9%98%B4%E8%B0%8B%E6%B8%90%E6%98%BE%E3%80%82","hxxps://api.weibo.com/chat/#/chat?source_from=2"
CHR Session Restore: Default -> включён
CHR Extension: (vksaver - music saver vk) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\akcaclljjmjgdbamkaefciglfikonadh [2022-05-27]
CHR Extension: (Gismeteo) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfegaehidkkcfaikpaijcdahnpikhobf [2021-08-04]
CHR Extension: (Set Character Encoding) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpojelgakakmcfmjfilgdlmhefphglae [2022-02-24]
CHR Extension: (Adblock Plus - бесплатный блокировщик рекламы) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2022-11-24]
CHR Extension: (Браузерный помощник AdGuard) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbohpolgemkbfphodcfgnpjcmedcjhpn [2022-10-04]
CHR Extension: (РуТрекер - официальный плагин (доступ и пр.)) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\fddjpichkajmnkjhcmpbbjdmmcodnkej [2021-08-14]
CHR Extension: (FastSave & Repost for Instagram) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdedigfpeejoaoicpppjcpicekleaedb [2022-08-10]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-11-24]
CHR Extension: (Google Документы офлайн) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-11-17]
CHR Extension: (Японско- Русским переводчиком) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\glgookcdgonlocgknmakdlaeppncmmij [2021-08-04]
CHR Extension: (Доступ к Рутрекеру) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbdmhpkmonokeldelekgfefldfboblbj [2021-08-04]
CHR Extension: (Save Image As PNG) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkokmeaibnajheohncaamjggkanfbphi [2022-11-24]
CHR Extension: (Платежная система Интернет-магазина Chrome) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-04]
CHR Extension: (VK video saver - загрузчик видео из вконтакте) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\npknlajilknlnfgeihkpdaaeonbdcnia [2021-08-04]
CHR Extension: (Персонализированный Веб) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Default\Extensions\plcnnpdmhobdfbponjpedobekiogmbco [2021-08-04]
CHR Profile: C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-06-10]
CHR Profile: C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-06-10]
CHR Extension: (Презентации) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-02-21]
CHR Extension: (Документы) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2022-02-21]
CHR Extension: (Диск Google) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-02-21]
CHR Extension: (YouTube) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-02-21]
CHR Extension: (Таблицы) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-02-21]
CHR Extension: (0) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-11-24]
CHR Extension: (Google Документы офлайн) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-02-21]
CHR Extension: (Платежная система Интернет-магазина Chrome) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-21]
CHR Extension: (Gmail) - C:\Users\MK11\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-02-21]
CHR Profile: C:\Users\MK11\AppData\Local\Google\Chrome\User Data\System Profile [2022-06-10]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\S-1-5-21-2708906417-4186119665-3383214263-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKU\S-1-5-21-2708906417-4186119665-3383214263-1008\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjmpfdkmpojoeemjmfiddlhkkndcdpno]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

Opera: 
=======
OPR Profile: C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable [2022-11-24]
OPR StartupUrls: Opera Stable -> "hxxp://granena.ru/?utm_content=31b5cebd524a9af6c7a772dca81815e9&utm_source=startpm&utm_term=DB6FD9C7EC0280F8E2109483F4A88160&utm_d=20180102"
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Session Restore: Opera Stable -> включён
OPR Extension: (Set Character Encoding) - C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable\Extensions\bpojelgakakmcfmjfilgdlmhefphglae [2022-02-24]
OPR Extension: (Translator) - C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable\Extensions\cnbpedcoekjafichoehopgaaldogogch [2022-11-06]
OPR Extension: (Rich Hints Agent) - C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-11-06]
OPR Extension: (YaTraffic) - C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable\Extensions\gbdjphllikdaddnkhominonkmfahmaae [2022-11-22]
OPR Extension: (Opera Wallet) - C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-11-06]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-08-14]
OPR Extension: (Google Переводчик) - C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2022-10-20]
OPR Extension: (SaveFrom.net помощник) - C:\Users\MK11\AppData\Roaming\Opera Software\Opera Stable\Extensions\npdpplbicnmpoigidfdjadamgfkilaak [2022-10-20]
StartMenuInternet: (HKU\S-1-5-21-2708906417-4186119665-3383214263-1008) Opera GXStable - "C:\Users\TRI POLOSKI\AppData\Local\Programs\Opera GX\Launcher.exe"

Yandex: 
=======
YAN DefaultProfile: Default
YAN Profile: C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default [2022-11-24]
YAN DownloadDir: E:\mo dao\dorama\JiLi\РАЗОБРАТЬ
YAN Notifications: Default -> hxxps://mail.yandex.ru
YAN Extension: (Gismeteo) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\bfegaehidkkcfaikpaijcdahnpikhobf [2022-03-19]
YAN Extension: (Set Character Encoding) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\bpojelgakakmcfmjfilgdlmhefphglae [2022-03-19]
YAN Extension: (Браузерный помощник AdGuard) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\fbohpolgemkbfphodcfgnpjcmedcjhpn [2022-10-05]
YAN Extension: (РуТрекер - официальный плагин (доступ и пр.)) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\fddjpichkajmnkjhcmpbbjdmmcodnkej [2022-03-19]
YAN Extension: (FastSave & Repost for Instagram) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\fdedigfpeejoaoicpppjcpicekleaedb [2022-08-09]
YAN Extension: (Скриншотер) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\nbiljbcmnedljaldahlfkeohaahlgann [2022-03-19]
YAN Extension: (Save Image As PNG) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\nkokmeaibnajheohncaamjggkanfbphi [2022-03-19]
YAN Extension: (VK video saver - загрузчик видео из вконтакте) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\npknlajilknlnfgeihkpdaaeonbdcnia [2022-03-19]
YAN Extension: (Персонализированный Веб) - C:\Users\MK11\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\plcnnpdmhobdfbponjpedobekiogmbco [2022-03-19]

==================== Службы (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

R2 Adguard Service; C:\Program Files (x86)\Adguard\AdguardSvc.exe [467928 2022-03-05] (Adguard Software Limited -> Adguard Software Ltd)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2022-07-20] (Adobe Inc. -> Adobe)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818128 2019-03-01] (Adobe Systems Incorporated -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8930120 2022-03-23] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11138952 2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-02-16] (Digital Wave Ltd -> Digital Wave Ltd.)
S3 Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusServiceUltra.exe [5035712 2017-06-01] (Disc Soft Ltd -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2022-05-22] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [588264 2022-01-18] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934368 2022-03-03] (Epic Games Inc. -> Epic Games, Inc.)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3361736 2019-04-02] (LogMeIn, Inc. -> LogMeIn Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4599312 2017-05-12] (SafeNet Canada, Inc. -> SafeNet, Inc.)
R2 hddrsrv; C:\Program Files (x86)\HDD Regenerator\hrsrv.exe [82144 2013-05-08] (Abstradrome -> )
U2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-09-19] (Hi-Rez Studios) [Файл не подписан]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177288 2015-05-29] (Intel(R) Update Manager -> )
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc. -> LogMeIn, Inc.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [972936 2022-04-01] (McAfee, LLC -> McAfee, LLC)
S3 mracsvc; C:\Windows\System32\mracsvc.exe [21753376 2021-02-19] (Mail.Ru LLC -> LLC Mail.Ru)
S3 Origin Client Service; D:\Games\Origin\OriginClientService.exe [2579264 2022-11-09] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; D:\Games\Origin\OriginWebHelperService.exe [3497800 2022-11-09] (Electronic Arts, Inc. -> Electronic Arts)
R2 RvControlSvc; C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe [1069584 2022-10-18] (Famatech Corp. -> Famatech Corp.)
S3 SogouSvc; C:\Program Files (x86)\SogouInput\SogouExe\SogouSvc.exe [478424 2022-02-15] (Beijing Sogou Technology Development Co., Ltd. -> Sogou.com Inc.)
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\UNCHEATER\ucldr_battlegrounds_gl.exe [6020336 2022-03-23] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10595144 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
R2 Wallpaper Engine Service; D:\steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe [354808 2019-07-04] (Kristjan Skutta -> )
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
R2 WinTabService; C:\Windows\System32\Drivers\WTSRV.EXE [78064 2013-04-25] (UC-Logic Technology Corporation -> UC-Logic Technology Corp.)
R2 YandexBrowserService; C:\Program Files (x86)\Yandex\YandexBrowser\22.11.0.2419\service_update.exe [3216024 2022-11-13] (YANDEX LLC -> YANDEX LLC)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [8612552 2022-03-23] (PUBG CORPORATION -> PUBG Corporation)

===================== Драйверы (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

R1 adgnetworktdidrv; C:\Windows\System32\drivers\adgnetworktdidrv.sys [74008 2021-11-02] (Adguard Software Limited -> Adguard Software Ltd)
S3 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv.sys [303712 2019-01-21] (Bluestack Systems, Inc. -> Bluestack System Inc.)
S3 dtproscsibus; C:\Windows\System32\DRIVERS\dtproscsibus.sys [30264 2018-03-14] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtultrascsibus; C:\Windows\System32\DRIVERS\dtultrascsibus.sys [30264 2022-06-10] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtultrausbbus; C:\Windows\System32\DRIVERS\dtultrausbbus.sys [47672 2022-06-10] (Disc Soft Ltd -> Disc Soft Ltd)
S3 EuMusDesignVirtualAudioCableWdm; C:\Windows\System32\DRIVERS\vrtaucbl.sys [216504 2020-09-25] (Muzychenko Evgenii Viktorovich, IP -> Eugene V. Muzychenko)
R1 googledrivefs3758; C:\Windows\System32\DRIVERS\googledrivefs3758.sys [386632 2022-03-24] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [1287464 2017-05-12] (SafeNet, Inc. -> SafeNet, Inc.)
R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [94440 2019-06-12] (Microsoft Windows -> Корпорация Майкрософт)
S3 mracdrv; C:\Windows\System32\drivers\mracdrv1.sys [20986200 2021-02-19] (Mail.Ru LLC -> LLC Mail.Ru)
R3 PTSimBus; C:\Windows\System32\DRIVERS\PTSimBus.sys [30104 2012-10-05] (UC-Logic Technology Corporation -> PenTablet Driver)
S3 PTSimHid; C:\Windows\System32\DRIVERS\PTSimHid.sys [20368 2012-06-22] (UC-Logic Technology Corporation -> UC-Logic Technology Corp.)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2014-07-17] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
R3 RvNetMP60; C:\Windows\System32\DRIVERS\RvNetMP60.sys [58288 2022-10-18] (Microsoft Windows Hardware Compatibility Publisher -> Famatech Corp.)
S1 softaal; отсутствует ImagePath
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [40664 2013-08-22] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 TClass2k; C:\Windows\System32\DRIVERS\TClass2k.sys [30104 2012-10-05] (UC-Logic Technology Corporation -> Tablet Driver)
S2 tsnethlpx64; отсутствует ImagePath
S3 UCTblHid; C:\Windows\System32\DRIVERS\UCTblHid.sys [25496 2012-10-05] (UC-Logic Technology Corporation -> Tablet Driver)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [235832 2019-01-28] (Oracle Corporation -> Oracle Corporation)
S1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8596912 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [363752 2017-07-07] (Microsoft Windows -> Корпорация Майкрософт)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2016-06-15] (Splitmedialabs Limited -> SplitmediaLabs Limited)
R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [310536 2020-02-29] (Beijing Duodian Online Science and Technology Co.,Ltd -> BigNox Corporation)
S3 FairplayKD; \??\C:\ProgramData\NextRP\Common\temp\FairplayKD.sys [X]
S3 moufiltr; system32\DRIVERS\moufiltr.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S4 nvvhci; system32\DRIVERS\nvvhci.sys [X]
S3 Tablet2k; "%SystemRoot%\System32\Drivers\Tablet2k.sys" [X]
S3 vhidmini; system32\DRIVERS\walvhid.sys [X]
S3 vpnva; system32\DRIVERS\vpnva64-6.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)


==================== Один месяц (создан) (В белом списке) =========

(Если запись включена в лист исправлений, файл/папка будут перемещены.)

2022-11-24 17:28 - 2022-11-24 17:39 - 000000000 ____D C:\FRST
2022-11-24 12:30 - 2022-11-24 15:20 - 000000000 ____D C:\Users\MK11\Desktop\Support
2022-11-23 22:19 - 2022-11-23 22:19 - 000078910 _____ C:\Users\TRI POLOSKI\Downloads\clone-drone-in-the-danger-zone.torrent
2022-11-23 22:16 - 2022-11-23 22:17 - 000081567 _____ C:\Users\TRI POLOSKI\Downloads\slime-rancher-2.torrent
2022-11-23 20:57 - 2022-11-23 23:28 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Local\Warframe
2022-11-23 20:57 - 2022-11-23 20:57 - 000002341 _____ C:\Users\TRI POLOSKI\Desktop\Warframe.lnk
2022-11-23 20:57 - 2022-11-23 20:57 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Warframe
2022-11-23 20:54 - 2022-11-23 20:55 - 071442432 _____ C:\Users\TRI POLOSKI\Downloads\Warframe.msi
2022-11-22 21:54 - 2022-11-23 23:38 - 000000000 ____D C:\Users\TRI POLOSKI\Desktop\проектыч
2022-11-22 21:54 - 2022-11-23 19:49 - 000017978 _____ C:\Users\TRI POLOSKI\Desktop\дз инфа 192021.xlsx
2022-11-22 20:19 - 2022-11-22 20:19 - 001657351 _____ C:\Users\TRI POLOSKI\Downloads\Throwable_Weapon_Pack.zip
2022-11-22 20:03 - 2022-11-22 20:03 - 002541035 _____ C:\Users\TRI POLOSKI\Downloads\1345607722.zip
2022-11-22 20:01 - 2022-11-22 20:01 - 003513204 _____ C:\Users\TRI POLOSKI\Downloads\1995715386.zip
2022-11-22 20:01 - 2022-11-22 20:01 - 001186082 _____ C:\Users\TRI POLOSKI\Downloads\1406713225.zip
2022-11-22 20:00 - 2022-11-22 20:00 - 002040846 _____ C:\Users\TRI POLOSKI\Downloads\2436961650_grappling_hook.zip
2022-11-22 19:30 - 2022-11-22 19:30 - 014930968 _____ C:\Users\TRI POLOSKI\Downloads\1412909878.zip
2022-11-22 19:30 - 2022-11-22 19:30 - 011051721 _____ C:\Users\TRI POLOSKI\Downloads\1371735172_MF_08726.zip
2022-11-22 19:10 - 2022-11-22 19:10 - 012340442 _____ C:\Users\TRI POLOSKI\Downloads\1549834959.zip
2022-11-22 19:09 - 2022-11-22 19:09 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Roaming\DAEMON Tools Ultra
2022-11-22 19:07 - 2022-11-22 19:07 - 016018790 _____ C:\Users\TRI POLOSKI\Downloads\2859783482.zip
2022-11-22 19:06 - 2022-11-22 19:06 - 000013199 _____ C:\Users\TRI POLOSKI\Downloads\Ravenfield.torrent
2022-11-22 18:22 - 2022-06-02 17:15 - 018093936 _____ C:\Users\TRI POLOSKI\Desktop\KMSAuto++.exe
2022-11-22 18:18 - 2022-11-22 18:18 - 017635609 _____ C:\Users\TRI POLOSKI\Downloads\kmsauto-office (1).zip
2022-11-22 18:17 - 2022-11-22 18:18 - 017635609 _____ C:\Users\TRI POLOSKI\Downloads\kmsauto-office.zip
2022-11-22 18:15 - 2022-11-22 18:15 - 000000000 ____D C:\ProgramData\KMSAuto
2022-11-22 18:14 - 2022-11-22 18:18 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Local\MSfree Inc
2022-11-22 18:08 - 2022-11-22 18:08 - 001780286 _____ C:\Users\TRI POLOSKI\Downloads\psikhologia.pptx
2022-11-21 22:43 - 2022-11-21 22:44 - 016562954 _____ C:\Users\TRI POLOSKI\Downloads\kmsauto-portable-v1_5_7.zip
2022-11-21 22:30 - 2022-11-21 22:30 - 000026058 _____ C:\Users\TRI POLOSKI\Downloads\Domashnee_zadanie_20_11_2022.xlsx
2022-11-21 22:30 - 2022-11-21 22:30 - 000026058 _____ C:\Users\TRI POLOSKI\Downloads\Domashnee_zadanie_20_11_2022 (1).xlsx
2022-11-19 08:37 - 2022-11-19 08:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Radmin VPN
2022-11-19 08:36 - 2022-11-19 08:37 - 000000000 ____D C:\Program Files (x86)\Radmin VPN
2022-11-15 00:00 - 2022-11-15 00:00 - 000002009 _____ C:\Users\MK11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приватный просмотр Firefox.lnk
2022-11-13 00:41 - 2022-11-13 00:41 - 000001269 _____ C:\Users\MK11\Desktop\FurMark.lnk
2022-11-13 00:41 - 2022-11-13 00:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D
2022-11-13 00:41 - 2022-11-13 00:41 - 000000000 ____D C:\Program Files (x86)\Geeks3D
2022-11-10 15:27 - 2022-11-10 15:27 - 000002009 _____ C:\Users\Aarataka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Приватный просмотр Firefox.lnk
2022-11-07 19:32 - 2022-11-07 19:32 - 000000203 _____ C:\Users\MK11\AppData\Roaming\1405bc3e-8c21-4108-a314-e523d5e4a674.tmp
2022-10-30 10:17 - 2022-10-30 10:17 - 000000000 __SHD C:\found.000

==================== Один месяц (изменён) ==================

(Если запись включена в лист исправлений, файл/папка будут перемещены.)

2022-11-24 17:39 - 2022-01-26 22:50 - 000000000 ____D C:\ProgramData\TEMP
2022-11-24 17:37 - 2021-08-04 16:35 - 000000000 ____D C:\ProgramData\Adguard
2022-11-24 17:24 - 2009-07-14 08:45 - 000039088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2022-11-24 17:24 - 2009-07-14 08:45 - 000039088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2022-11-24 17:08 - 2017-11-19 03:57 - 000000000 ____D C:\Program Files (x86)\Google
2022-11-24 16:59 - 2021-03-23 11:38 - 000000000 ____D C:\Users\MK11\AppData\LocalLow\SogouPY
2022-11-24 15:58 - 2022-09-29 15:58 - 000000430 _____ C:\Windows\Tasks\Восстановление сервиса обновлений Яндекс Браузера.job
2022-11-24 15:41 - 2019-10-04 13:42 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2022-11-24 15:29 - 2022-09-29 15:58 - 000003426 _____ C:\Windows\system32\Tasks\Восстановление сервиса обновлений Яндекс Браузера
2022-11-24 15:29 - 2022-08-15 13:20 - 000000000 ____D C:\Users\MK11\AppData\Roaming\douyin
2022-11-24 15:29 - 2022-03-19 09:01 - 000003424 _____ C:\Windows\system32\Tasks\Обновление Браузера Яндекс
2022-11-24 15:29 - 2022-03-19 09:01 - 000000424 _____ C:\Windows\Tasks\Обновление Браузера Яндекс.job
2022-11-24 15:29 - 2022-03-19 09:00 - 000003562 _____ C:\Windows\system32\Tasks\Системное обновление Браузера Яндекс
2022-11-24 15:29 - 2022-03-19 09:00 - 000000470 _____ C:\Windows\Tasks\Системное обновление Браузера Яндекс.job
2022-11-24 15:29 - 2017-11-18 20:55 - 000000000 ____D C:\Users\MK11\AppData\Roaming\uTorrent
2022-11-24 15:22 - 2021-08-04 16:35 - 000000000 ____D C:\Program Files (x86)\Adguard
2022-11-24 15:21 - 2017-11-18 15:00 - 000000000 ____D C:\ProgramData\NVIDIA
2022-11-24 15:21 - 2009-07-14 09:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-11-24 15:21 - 2009-07-14 07:20 - 000000000 ____D C:\Windows\inf
2022-11-24 15:20 - 2022-03-19 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VooV Meeting
2022-11-24 15:20 - 2018-11-11 22:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KaraFun Player 2
2022-11-24 15:20 - 2018-09-10 16:07 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2022-11-24 14:53 - 2018-08-28 21:29 - 000000000 ____D C:\Users\MK11\AppData\Local\LogMeIn Hamachi
2022-11-24 14:52 - 2018-01-13 18:30 - 000000000 ____D C:\Windows\Minidump
2022-11-24 14:52 - 2017-11-21 01:19 - 000000000 ____D C:\Users\MK11\AppData\Local\CrashDumps
2022-11-24 14:49 - 2019-04-21 18:27 - 000000000 ____D C:\Users\MK11\AppData\Local\BitTorrentHelper
2022-11-23 23:38 - 2018-09-06 18:36 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Roaming\uTorrent
2022-11-23 23:30 - 2019-06-04 16:28 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Local\BitTorrentHelper
2022-11-23 23:01 - 2018-09-06 18:35 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\LocalLow\Mozilla
2022-11-23 20:48 - 2022-02-21 20:38 - 000000000 ____D C:\Users\TRI POLOSKI\Zomboid
2022-11-23 19:47 - 2017-11-23 14:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2022-11-23 19:05 - 2019-11-16 21:28 - 000004180 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1573925294
2022-11-23 19:03 - 2021-06-27 22:35 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Roaming\Telegram Desktop
2022-11-23 17:34 - 2020-11-23 01:58 - 000000000 ____D C:\Users\MK11\AppData\Roaming\vlc
2022-11-23 08:28 - 2011-04-12 17:26 - 000734068 _____ C:\Windows\system32\perfh019.dat
2022-11-23 08:28 - 2011-04-12 17:26 - 000155946 _____ C:\Windows\system32\perfc019.dat
2022-11-23 08:28 - 2009-07-14 09:13 - 001678196 _____ C:\Windows\system32\PerfStringBackup.INI
2022-11-21 22:28 - 2019-09-19 21:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roblox
2022-11-21 11:57 - 2009-07-14 09:08 - 000032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2022-11-20 14:45 - 2022-10-04 13:50 - 000001140 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\抖音.lnk
2022-11-20 14:45 - 2022-08-15 13:20 - 000001128 _____ C:\Users\Public\Desktop\抖音.lnk
2022-11-20 01:01 - 2017-11-18 15:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2022-11-20 01:01 - 2017-11-18 14:46 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-11-19 02:11 - 2021-09-26 14:04 - 000000000 ____D C:\Users\MK11\Downloads\Easy Paint Tool SAI
2022-11-15 15:38 - 2022-05-06 18:49 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-11-15 15:38 - 2017-11-18 15:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-11-15 00:01 - 2022-02-14 11:08 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-11-15 00:01 - 2018-05-20 18:45 - 000000000 ____D C:\Users\MK11\AppData\LocalLow\Mozilla
2022-11-15 00:00 - 2021-08-12 11:26 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2022-11-13 11:30 - 2017-11-24 18:01 - 000000000 ____D C:\Users\Aarataka\AppData\Local\LogMeIn Hamachi
2022-11-13 00:27 - 2022-03-19 09:00 - 000002499 _____ C:\Users\MK11\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex.lnk
2022-11-13 00:27 - 2022-03-19 09:00 - 000002462 _____ C:\Users\MK11\Desktop\Yandex.lnk
2022-11-11 22:53 - 2018-01-05 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-11-11 22:52 - 2009-07-14 07:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2022-11-11 22:51 - 2018-01-05 11:11 - 000000000 ____D C:\Program Files\Microsoft Office
2022-11-11 12:21 - 2021-08-04 13:43 - 000002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-11-11 03:51 - 2017-11-18 15:13 - 000000000 ____D C:\Users\Aarataka\AppData\LocalLow\Mozilla
2022-11-11 03:38 - 2018-01-13 00:30 - 000000000 ____D C:\Users\Aarataka\AppData\Local\Nox
2022-11-11 02:53 - 2018-01-13 00:31 - 000000000 ____D C:\Users\Aarataka\.android
2022-11-11 02:52 - 2021-02-21 16:34 - 000000000 ____D C:\Users\Aarataka\AppData\Roaming\vlc
2022-11-11 02:52 - 2020-02-29 22:32 - 000000000 ____D C:\Users\Aarataka\.BigNox
2022-11-11 02:52 - 2019-06-21 12:44 - 000000000 ____D C:\Users\Aarataka\AppData\Local\NoxSrv
2022-11-11 02:52 - 2018-01-13 00:30 - 000000000 ____D C:\Users\Aarataka\vmlogs
2022-11-11 02:52 - 2017-11-18 14:06 - 000000000 ____D C:\Users\Aarataka
2022-11-11 01:51 - 2021-08-11 03:48 - 000000299 _____ C:\Users\Aarataka\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2022-11-10 14:51 - 2018-02-25 14:16 - 000000000 ____D C:\Users\Aarataka\AppData\Local\CrashDumps
2022-11-08 10:20 - 2021-09-21 08:13 - 000002015 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2022-11-08 10:20 - 2021-09-21 08:13 - 000001861 _____ C:\Users\Default\Desktop\Google Slides.lnk
2022-11-08 10:20 - 2021-09-21 08:13 - 000001861 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2022-11-08 10:20 - 2021-09-21 08:13 - 000001849 _____ C:\Users\Default\Desktop\Google Docs.lnk
2022-11-02 12:21 - 2020-05-14 18:16 - 000004118 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1511024157
2022-10-30 22:04 - 2018-09-10 14:17 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Roaming\discord
2022-10-30 21:28 - 2018-09-10 14:16 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Local\Discord
2022-10-27 20:43 - 2019-09-14 18:33 - 000000000 ____D C:\Users\TRI POLOSKI\AppData\Local\LogMeIn Hamachi
2022-10-25 11:07 - 2017-11-24 18:33 - 000002802 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC

==================== Файлы в корне каталогов ========

2021-02-07 09:00 - 2021-02-07 09:00 - 000000258 _____ () C:\ProgramData\fontcacheev1.dat
2018-01-13 15:17 - 2009-07-14 05:14 - 000001060 _____ () C:\Program Files (x86)\yybaIcYIiXWyU
2009-07-14 05:14 - 2009-07-14 05:14 - 000001060 _____ () C:\Program Files (x86)\yybaIcYIiXWyU.bat
2009-07-14 05:14 - 2009-07-14 05:14 - 000186368 ____N (Microsoft Corporation) C:\Program Files (x86)\Common Files\EOeavieBY.exe
2018-01-13 15:17 - 2009-07-14 05:14 - 000001081 _____ () C:\Program Files (x86)\Common Files\KOuIEEu
2009-07-14 05:14 - 2009-07-14 05:14 - 000001081 _____ () C:\Program Files (x86)\Common Files\KOuIEEu.bat
2021-03-01 00:35 - 2021-03-01 00:35 - 000000032 _____ () C:\Users\MK11\AppData\Roaming\.ifonts-unique-key
2022-11-07 19:32 - 2022-11-07 19:32 - 000000203 _____ () C:\Users\MK11\AppData\Roaming\1405bc3e-8c21-4108-a314-e523d5e4a674.tmp
2022-10-10 03:27 - 2022-10-10 03:27 - 000000371 _____ () C:\Users\MK11\AppData\Roaming\3fc7baab-bd82-465c-b4ff-9f4f824bfb3e.tmp
2019-11-25 17:58 - 2020-03-01 17:43 - 000000033 _____ () C:\Users\MK11\AppData\Roaming\AdobeWLCMCache.dat
2019-08-04 08:34 - 2019-08-04 08:34 - 000000933 _____ () C:\Users\MK11\AppData\Roaming\D3D5D3C0-0F3D-40c1-9973-CEB7C072AE32.ini
2019-08-04 08:30 - 2019-08-04 08:30 - 000000066 _____ () C:\Users\MK11\AppData\Roaming\installSystemInfo.cfg
2020-03-20 04:33 - 2022-10-21 06:46 - 000698829 _____ () C:\Users\MK11\AppData\Roaming\VideoPad.dmp
2021-04-20 14:50 - 2021-04-20 14:50 - 000045056 _____ () C:\Users\MK11\AppData\Roaming\Web Data
2021-04-20 14:50 - 2021-04-20 14:50 - 000000000 _____ () C:\Users\MK11\AppData\Roaming\Web Data-journal
2018-09-19 02:00 - 2021-08-28 11:33 - 000000132 _____ () C:\Users\MK11\AppData\Roaming\Установки формата AIFF Adobe CS6
2018-02-18 23:16 - 2022-06-06 19:24 - 000000132 _____ () C:\Users\MK11\AppData\Roaming\Установки формата PNG Adobe CS6
2020-03-22 16:23 - 2022-09-26 14:15 - 000001456 _____ () C:\Users\MK11\AppData\Local\Adobe Сохранить для Web 13.0 Prefs
2019-04-03 19:46 - 2019-04-03 19:46 - 000000000 _____ () C:\Users\MK11\AppData\Local\oobelibMkey.log
2022-10-18 16:59 - 2022-10-18 16:59 - 000007608 _____ () C:\Users\MK11\AppData\Local\Resmon.ResmonCfg

==================== FLock ==============================

2017-11-19 05:04 C:\ProgramData\Info

==================== SigCheck ============================

(Нет автоматического исправления файлов, которые не проходят проверку.)


LastRegBack: 2022-11-23 09:13
==================== Конец от FRST.txt ========================