Start::
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2790458046-957928041-2802393120-1000\...\Run: [AdobeBridge] => [X]
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {0770DC44-C73E-430F-9D00-0A2B13B96706} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {0A382EA4-5E13-4D22-A3CD-458F4CFDA834} - \{E2761BA1-11A8-4C9E-A4BE-F243864816D6} -> No File <==== ATTENTION
Task: {3061CC93-8F80-4F09-839A-AF8A18B4E9D6} - \{CACC6734-3CCB-4E02-91E9-05F934C0A061} -> No File <==== ATTENTION
Task: {4248F326-4904-429E-ADE5-82235FC65D1C} - \GameNet -> No File <==== ATTENTION
Task: {44B601E1-4F5A-40DD-A4DD-485E97143890} - \{D53758AC-0FF1-45BC-BECF-9D026F0843D1} -> No File <==== ATTENTION
Task: {47B27A28-9E14-4C94-B15C-95B9EDA4A167} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {4C21596C-845E-4147-B513-C361E7579184} - \{1EC323F5-4161-479E-8567-147BD4CDD905} -> No File <==== ATTENTION
Task: {53CB4300-9DB1-4255-B439-44E7A54D50D6} - \{5C809AD0-6610-4981-B2E0-487775A5F9B6} -> No File <==== ATTENTION
Task: {5931EFF9-03E4-4266-BE25-5EC9FAA80BE9} - \{8364524E-1BEC-4501-B44B-AF4EC471AE2A} -> No File <==== ATTENTION
Task: {7358693F-4CED-4035-972E-A079AC613A55} - \AVAST Software\Avast settings backup -> No File <==== ATTENTION
Task: {9EE6D6D3-95A5-459B-8A0F-2730BEC6CD95} - \{73B305A1-CEAE-44A5-B7F5-BAD8F49E23CE} -> No File <==== ATTENTION
Task: {A0F62DC8-90B5-4948-A0F3-F89EA4E93C51} - \{E433E76F-6FB4-45F5-A3A7-DFF403147442} -> No File <==== ATTENTION
Task: {A79758ED-F496-4BDC-83E4-075739C0C2AE} - \{6E1F6501-5945-4593-A562-1D3B2CD153B7} -> No File <==== ATTENTION
Task: {AFA186B9-4B40-4F19-A185-FC74573C42A6} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
Task: {BEA4CEE1-3A86-47FC-A8E7-F89BFCC4B408} - \{BA1E2F4E-84C0-4D39-8B51-9D0577F63C88} -> No File <==== ATTENTION
Task: {CFDA27B0-46D8-4F01-BFB1-C6315DB7D8EC} - \{7FF93660-1E76-4C27-9A09-A5E47C78555D} -> No File <==== ATTENTION
Task: {D002DDA1-CDC3-4653-9074-89314793EDEE} - System32\Tasks\{84C68341-F28A-4AA3-95D2-A658A4C758F9} => C:\Windows\system32\pcalua.exe -a C:\Windows\unvise32.exe -d C:\Windows -c c:\PROGRA~2\PHOTOS~1\plug-ins\klfphoto.log
Task: {DA41DE71-8431-42FB-9DB0-EB64A961DEAD} - \Microsoft\Windows\Maintenance\WinSAT -> No File <==== ATTENTION
Task: {DC7CDB01-A42B-436C-8F32-0FF7E2D951D9} - \{4A0F1EBC-E5B1-47C7-B973-001D449F8FD0} -> No File <==== ATTENTION
Task: {DEA838FF-3C97-47D3-BEBB-99A6DC7BB3B0} - \{3CA74A88-4F05-46E4-AC56-47DCA3EEAC86} -> No File <==== ATTENTION
Task: {ED90E6BF-4FC5-459A-AAC6-A00D234CC0DC} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> No File <==== ATTENTION
Task: {F20581DD-F87E-40A9-BDA7-9D9656450DBA} - \{E71EB515-E192-45DC-82FE-43FDF143500E} -> No File <==== ATTENTION
Task: {FEF035DF-8DD7-4AF6-A8D2-9D6430C3E9BA} - System32\Tasks\{D7BE77CE-B575-4E24-813B-E4433F1EDD27} => C:\Windows\system32\pcalua.exe -a D:\торенты\PinnacleStudio14HDUltimateCollection\Install_Studio_14\Welcome.exe -d D:\торенты\PinnacleStudio14HDUltimateCollection\Install_Studio_14
SearchScopes: HKU\S-1-5-21-2790458046-957928041-2802393120-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://ru.search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10420__180711__yaie&p={searchTerms}
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKU\S-1-5-21-2790458046-957928041-2802393120-1000 -> No Name - {405DFEAE-1D2F-4649-BE08-C92313C3E1CE} -  No File
FF Homepage: Mozilla\Firefox\Profiles\nahd6ha2.default -> hxxps://ru.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10420__180711__yaff
FF NewTab: Mozilla\Firefox\Profiles\nahd6ha2.default -> hxxps://ru.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10420__180711__yaff
FF SearchPlugin: C:\Users\Лилия\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yahoo-lavasoft-ff59.xml [2018-07-11]
CHR HKLM-x32\...\Chrome\Extension: [pchfckkccldkbclgdepkaonamkignanh] - hxxp://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\Лилия\AppData\Local\Google\Chrome\User Data\System Profile [2019-11-14]
AlternateDataStreams: C:\Windows:nlsPreferences [0]
AlternateDataStreams: C:\ProgramData\TEMP:41ADDB8A [151]
AlternateDataStreams: C:\ProgramData\TEMP:6C3B8FB5 [124]
AlternateDataStreams: C:\ProgramData\TEMP:A064CECC [136]
FirewallRules: [{37C3548E-9E74-4428-B401-8DEC9EEAEFF8}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 14\Programs\RM.exe No File
FirewallRules: [{26E21654-A25D-4352-8CB8-96D9CCE17A82}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 14\Programs\RM.exe No File
FirewallRules: [{F0D87040-F740-422F-820D-CA64D8F9D1C9}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 14\Programs\Studio.exe No File
FirewallRules: [{951BF657-C049-4654-9395-E2BFA416A5F1}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 14\Programs\Studio.exe No File
FirewallRules: [{1826A23A-9D18-4A42-9E43-0158795B4A05}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 14\Programs\umi.exe No File
FirewallRules: [{CAA6987D-4224-4207-B7F7-641AD5D58377}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 14\Programs\umi.exe No File
FirewallRules: [{C2D0165E-3015-4FB3-8339-E8BD4E030A1E}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe No File
FirewallRules: [{0012EA18-0482-47E0-A574-09845C4004D7}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe No File
FirewallRules: [{D660A372-CFF9-4039-B8E0-D5999BC60F7B}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe No File
FirewallRules: [{50E2F559-2CE8-4F41-A0E5-ED534897634D}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe No File
End::