Start::
CreateRestorePoint:
GroupPolicy: Ограничение ? <==== ВНИМАНИЕ
GroupPolicy\User: Ограничение ? <==== ВНИМАНИЕ
Policies: C:\ProgramData\NTUSER.pol: Ограничение <==== ВНИМАНИЕ
Policies: C:\Users\mister\NTUSER.pol: Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ограничение <==== ВНИМАНИЕ
Task: {0D8A891D-890C-4808-84D8-2F436AB14653} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe <==== ВНИМАНИЕ
CHR HKU\S-1-5-21-2403352924-2529769915-2289300762-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [hjdkfkdkokphfploiiddakjokndinfgb]
CHR HKLM-x32\...\Chrome\Extension: [iepoegkaoeljnbhagabakjodgpfniimo]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ограничение <==== ВНИМАНИЕ
2021-06-05 14:25 - 2021-05-14 16:00 - 000004571 _____ C:\Windows\system32\Drivers\etc\2021-06-05_14-25_hosts.bak
2021-05-14 16:00 - 2021-06-05 14:27 - 000000000 ____D C:\Program Files\RDP Wrapper
2021-05-14 12:36 - 2021-05-13 19:43 - 000000138 _____ C:\Windows\system32\Drivers\etc\2021-05-14_12-36_hosts.bak
2021-05-13 19:43 - 2021-05-03 16:20 - 000000147 _____ C:\Windows\system32\Drivers\etc\2021-05-13_19-43_hosts.bak
HKLM\...\StartupApproved\Run: => "WindowsDefender"
Reboot:
End::