Результат сканирования Farbar Recovery Scan Tool (FRST) (x64) Версия: 03.02.2024 01
Запущено с помощью Admond (Администратор) на DESKTOP-H6PNSOI (08-02-2024 21:35:24)
Запущено из C:\Users\Admond\Desktop\FRST64.exe
Загруженные профили: Admond
Платформа: Майкрософт Windows 10 Pro Версия 22H2 19045.3930 (X64) Язык: Русский (Россия)
Браузер по умолчанию: Yandex Browser
Режим загрузки: Normal

==================== Процессы (В белом списке) =================

(Если запись включена в fixlist, процесс будет закрыт. Файл не будет перемещён.)

(C:\Program Files (x86)\K7 Computing\K7TSecurity\k7pssrvc.exe ->) (K7 Computing Pvt Ltd -> K7 Computing Pvt. Ltd.) C:\Program Files (x86)\K7 Computing\K7TSecurity\k7twp.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(D:\Games\Steam_2\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Games\Steam_2\bin\cef\cef.win7x64\steamwebhelper.exe <6>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Games\Steam_2\steam.exe
(explorer.exe ->) (YANDEX LLC -> YANDEX LLC) C:\Users\Admond\AppData\Local\Yandex\YandexBrowser\Application\browser.exe <18>
(K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd) C:\Program Files (x86)\K7 Computing\K7TSecurity\K7TSecurity.exe
(services.exe ->) (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd) C:\Program Files (x86)\K7 Computing\K7TSecurity\K7CrvSvc.exe
(services.exe ->) (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd) C:\Program Files (x86)\K7 Computing\K7TSecurity\K7EmlPxy.exe
(services.exe ->) (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd) C:\Program Files (x86)\K7 Computing\K7TSecurity\K7FWSrvc.exe
(services.exe ->) (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd) C:\Program Files (x86)\K7 Computing\K7TSecurity\k7pssrvc.exe
(services.exe ->) (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd) C:\Program Files (x86)\K7 Computing\K7TSecurity\K7RTScan.exe
(services.exe ->) (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd) C:\Program Files (x86)\K7 Computing\K7TSecurity\K7TSMngr.exe
(services.exe ->) (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd) C:\Program Files (x86)\K7 Computing\K7TSecurity\k7wscshl.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Plarium Global LTD -> PlariumPlayClientService) C:\Users\Admond\AppData\Local\PlariumPlay\8.9.0-0.0.0\PlariumPlayClientService\PlariumPlayClientService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(services.exe ->) (YANDEX LLC -> YANDEX LLC) C:\Program Files (x86)\Yandex\YandexBrowser\24.1.0.2570\service_update.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Admond\AppData\Local\Microsoft\OneDrive\24.010.0114.0003\FileCoAuth.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2312.7.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Реестр Windows (В белом списке) ===================

(Если запись включена в fixlist, элемент реестра будет сброшен на значение по умолчанию или удалён. Файл не будет перемещён.)

HKLM-x32\...\Run: [K7TSStart] => C:\Program Files (x86)\K7 Computing\K7TSecurity\K7TSecurity.exe [707088 2022-07-06] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
HKU\S-1-5-21-3849764716-1366410836-1343688429-1001\...\Run: [YandexBrowserAutoLaunch_48F1E9F95CA529850912FA06891DC93A] => C:\Users\Admond\AppData\Local\Yandex\YandexBrowser\Application\browser.exe [8825496 2024-01-19] (YANDEX LLC -> YANDEX LLC)
HKU\S-1-5-21-3849764716-1366410836-1343688429-1001\...\Run: [PlariumPlay] => C:\Users\Admond\AppData\Local\PlariumPlay\PlariumPlay.exe [295240 2023-10-13] (Plarium Global LTD -> PlariumPlay)
HKU\S-1-5-21-3849764716-1366410836-1343688429-1001\...\Run: [MicrosoftEdgeAutoLaunch_59DCF712A6517F14EF7DF691D25AA174] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3788736 2024-02-05] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3849764716-1366410836-1343688429-1001\...\Run: [Steam] => D:\Games\Steam_2\steam.exe [4388200 2024-01-13] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3849764716-1366410836-1343688429-1002\...\Run: [MicrosoftEdgeAutoLaunch_1576607EEAA493C78638FD88093571AF] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3788736 2024-02-05] (Microsoft Corporation -> Microsoft Corporation)

==================== Запланированные задачи (В белом списке) =================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

Task: {1C92C326-B94C-4DCC-A431-CE4AD1B63886} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Admond\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-08-06] (ESET, spol. s r.o. -> ESET)
Task: {7BBA0717-EB14-406F-9FED-F4AE9DED9965} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Admond\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-08-06] (ESET, spol. s r.o. -> ESET)
Task: {852EDAF6-D0C2-4EB3-B5B9-194EDD4CD53E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {80B1A4FF-278F-4C11-A755-3C55EC604CED} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9E29273B-A4DC-4057-8773-5F3B3D64D84E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B919B9EF-EA8C-4C94-BF8A-6AB8F109B3B0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A8470628-199C-44D5-9617-D6DE0C4FD414} - System32\Tasks\Восстановление сервиса обновлений Яндекс Браузера => C:\Program Files (x86)\Yandex\YandexBrowser\24.1.0.2570\service_update.exe [3821208 2024-01-26] (YANDEX LLC -> YANDEX LLC)
Task: {7BF5EE0B-3204-4432-B26B-D61D4A680627} - System32\Tasks\Обновление Браузера Яндекс => C:\Users\Admond\AppData\Local\Yandex\YandexBrowser\Application\browser.exe [8825496 2024-01-19] (YANDEX LLC -> YANDEX LLC)
Task: {EB177CBC-B700-4697-BEBF-2ABD6E22BA4E} - System32\Tasks\Системное обновление Браузера Яндекс => C:\Program Files (x86)\Yandex\YandexBrowser\24.1.0.2570\service_update.exe [3821208 2024-01-26] (YANDEX LLC -> YANDEX LLC)

(Если запись включена в fixlist, файл задачи (.job) будет перемещён. Файл, выполняемый задачей, не будет перемещён.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\Восстановление сервиса обновлений Яндекс Браузера.job => C:\Program Files (x86)\Yandex\YandexBrowser\24.1.0.2570\service_update.exe
Task: C:\Windows\Tasks\Обновление Браузера Яндекс.job => C:\Users\Admond\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
Task: C:\Windows\Tasks\Системное обновление Браузера Яндекс.job => C:\Program Files (x86)\Yandex\YandexBrowser\24.1.0.2570\service_update.exe

==================== Internet (В белом списке) ====================

(Если элемент включён в fixlist, если он является элементом реестра, он будет удалён или сброшен на значение по умолчанию.)

Tcpip\..\Interfaces\{727d37a0-1e6f-46fa-9896-615879dba0a5}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{c918435f-015e-4ccb-8146-6cc73ef8b287}: [DhcpNameServer] 192.168.0.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Admond\AppData\Local\Microsoft\Edge\User Data\Default [2024-02-08]
Edge Extension: (Google Документы офлайн) - C:\Users\Admond\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-23]
Edge Extension: (Edge relevant text changes) - C:\Users\Admond\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-25]

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [k7srff_enUS@k7computing.com] - C:\Program Files (x86)\K7 Computing\K7TSecurity\K7SR\K7WebProtection.xpi
FF Extension: (WebProtection) - C:\Program Files (x86)\K7 Computing\K7TSecurity\K7SR\K7WebProtection.xpi [2019-07-26]
FF Plugin-x32: @k7computing.com/k7webprotection -> C:\Program Files (x86)\\K7 Computing\K7TSecurity\npK7SRNPExt.dll [2014-12-04] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [dlpfamleaodfgmfnggonbfljhjggbdbe] - C:\Program Files (x86)\K7 Computing\K7TSecurity\K7SR\k7chrome.crx [2022-09-06]
CHR HKLM-x32\...\Chrome\Extension: [dlpfamleaodfgmfnggonbfljhjggbdbe] - C:\Program Files (x86)\K7 Computing\K7TSecurity\K7SR\k7chrome.crx [2022-09-06]

Yandex: 
=======
YAN Profile: C:\Users\Admond\AppData\Local\Yandex\YandexBrowser\User Data\Default [2024-02-08]

==================== Службы (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

R2 K7CrvSvc; C:\Program Files (x86)\K7 Computing\K7TSecurity\K7CrvSvc.exe [273192 2019-03-26] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
R2 K7EmlPxy; C:\Program Files (x86)\K7 Computing\K7TSecurity\K7EmlPxy.exe [172328 2019-03-26] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
R2 K7FWSrvc; C:\Program Files (x86)\K7 Computing\K7TSecurity\K7FWSrvc.exe [754872 2022-04-13] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
R2 K7PSSrvc; C:\Program Files (x86)\K7 Computing\K7TSecurity\k7pssrvc.exe [934808 2022-01-19] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
R2 K7RTScan; C:\Program Files (x86)\K7 Computing\K7TSecurity\K7RTScan.exe [1196448 2022-12-20] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
S3 K7SpmSrc; C:\Program Files (x86)\K7 Computing\K7TSecurity\K7SpmSrc.exe [327632 2020-10-20] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
R2 K7TSMngr; C:\Program Files (x86)\K7 Computing\K7TSecurity\K7TSMngr.exe [932840 2022-10-07] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
R2 K7WscShl; C:\Program Files (x86)\K7 Computing\K7TSecurity\K7WscShl.exe [94688 2021-02-01] (K7 Computing Pvt Ltd -> K7 Computing Pvt Ltd)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-22] (Malwarebytes Inc. -> Malwarebytes)
R2 Plarium Play Client Service; C:\Users\Admond\AppData\Local\PlariumPlay\8.9.0-0.0.0\PlariumPlayClientService\PlariumPlayClientService.exe [200520 2023-12-21] (Plarium Global LTD -> PlariumPlayClientService)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 YandexBrowserService; C:\Program Files (x86)\Yandex\YandexBrowser\24.1.0.2570\service_update.exe [3821208 2024-01-26] (YANDEX LLC -> YANDEX LLC)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Драйверы (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

S0 K7Elam; C:\Windows\System32\Drivers\K7Elam.sys [23040 2021-12-12] (Microsoft Windows Early Launch Anti-malware Publisher -> K7 Computing Pvt Ltd)
R0 K7FWHlpr; C:\Windows\System32\drivers\K7FWHlpr.sys [134072 2022-08-12] (Microsoft Windows Hardware Compatibility Publisher -> K7 Computing Pvt Ltd)
R0 K7Sentry; C:\Windows\System32\drivers\K7Sentry.sys [412352 2022-12-20] (Microsoft Windows Hardware Compatibility Publisher -> K7 Computing Pvt Ltd)
R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [223296 2024-02-08] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2024-01-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239576 2024-01-22] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 RTCore64; H:\SYSTEM\MSI Afterburner_10V2\RTCore64.sys [36824 2020-07-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55856 2023-12-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [594304 2023-12-08] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-08] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)


==================== Один месяц (создан) (В белом списке) =========

(Если запись включена в лист исправлений, файл/папка будут перемещены.)

2024-02-08 21:35 - 2024-02-08 21:35 - 000016445 _____ C:\Users\Admond\Desktop\FRST.txt
2024-02-08 21:34 - 2024-02-08 21:34 - 002389504 _____ (Farbar) C:\Users\Admond\Downloads\FRST64.exe
2024-02-08 21:34 - 2024-02-08 21:34 - 002389504 _____ (Farbar) C:\Users\Admond\Desktop\FRST64.exe
2024-02-08 21:33 - 2024-02-08 21:33 - 000000000 ___HD C:\OneDriveTemp
2024-02-08 21:31 - 2024-02-08 06:10 - 009750444 _____ (Company © regist) C:\Users\Admond\Downloads\AVbr.exe
2024-02-08 21:30 - 2024-02-08 21:32 - 000000000 ____D C:\Users\Admond\Downloads\AV_block_remover
2024-02-08 21:30 - 2024-02-08 21:30 - 009619202 _____ C:\Users\Admond\Downloads\AVbr.zip
2024-02-03 21:07 - 2024-02-03 21:07 - 309736912 _____ C:\Users\Admond\Downloads\wgz7vmc4.exe
2024-02-02 13:47 - 2024-02-02 13:47 - 000000464 _____ C:\Users\Admond\Downloads\fixlist.txt
2024-02-02 13:09 - 2024-02-02 13:09 - 000001698 _____ C:\Users\Admond\Downloads\Fixlog.txt
2024-02-01 19:10 - 2024-02-01 19:10 - 000000000 ____D C:\Users\Admond\AppData\Local\Backup
2024-01-30 09:12 - 2024-01-30 20:41 - 000002504 _____ C:\Users\Admond\Desktop\Fixlog.txt
2024-01-30 09:12 - 2024-01-30 09:12 - 000000008 _____ C:\ProgramData\ntuser.pol
2024-01-28 14:43 - 2024-01-28 14:43 - 000000394 _____ C:\Users\Admond\Desktop\28.01.2024.txt
2024-01-28 09:34 - 2024-01-29 19:17 - 000000000 ____D C:\Users\Admond\Downloads\UVS
2024-01-25 17:42 - 2024-01-25 17:42 - 004393523 _____ C:\Users\Admond\Desktop\K7DT_#message247.zip
2024-01-23 13:16 - 2024-01-23 13:16 - 000000000 ____D C:\Users\Admond\Documents\FeedbackHub
2024-01-23 08:44 - 2024-01-30 21:05 - 000000000 ____D C:\Users\Admond\AppData\LocalLow\Temp
2024-01-22 19:20 - 2024-01-22 20:55 - 000000000 ____D C:\ProgramData\HitmanPro
2024-01-22 17:38 - 2024-01-22 17:38 - 000000000 ____D C:\Users\fafafafa\AppData\Local\PeerDistRepub
2024-01-22 15:21 - 2024-01-22 15:21 - 000000000 ____D C:\Users\fafafafa\AppData\Local\K7 Computing
2024-01-22 15:12 - 2024-01-22 15:12 - 000000000 ____D C:\Users\Admond\AppData\Local\mbam
2024-01-22 15:11 - 2024-02-08 21:34 - 000000000 ____D C:\Users\Admond\AppData\Local\Malwarebytes
2024-01-22 15:09 - 2024-01-22 15:09 - 000000000 ____D C:\Users\fafafafa\AppData\Local\Comms
2024-01-22 14:57 - 2024-01-22 14:57 - 000000000 ____D C:\Users\fafafafa\AppData\Roaming\Microsoft\Spelling
2024-01-22 14:51 - 2024-01-22 14:51 - 000000000 ____D C:\Users\fafafafa\AppData\Local\PlaceholderTileLogoFolder
2024-01-22 14:50 - 2024-01-22 14:50 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3849764716-1366410836-1343688429-1002
2024-01-22 14:50 - 2024-01-22 14:50 - 000003386 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3849764716-1366410836-1343688429-1002
2024-01-22 14:50 - 2024-01-22 14:50 - 000000000 ___RD C:\Users\fafafafa\OneDrive
2024-01-22 14:50 - 2024-01-22 14:50 - 000000000 ____D C:\Users\fafafafa\AppData\Local\mbam
2024-01-22 14:50 - 2024-01-22 14:50 - 000000000 ____D C:\Users\fafafafa\AppData\Local\DBG
2024-01-22 14:49 - 2024-01-22 15:05 - 000000000 ____D C:\Users\fafafafa\AppData\Local\Packages
2024-01-22 14:49 - 2024-01-22 15:05 - 000000000 ____D C:\Users\fafafafa\AppData\Local\Malwarebytes
2024-01-22 14:49 - 2024-01-22 14:51 - 000000000 ____D C:\Users\fafafafa\AppData\Local\D3DSCache
2024-01-22 14:49 - 2024-01-22 14:50 - 000002424 _____ C:\Users\fafafafa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-01-22 14:49 - 2024-01-22 14:50 - 000000000 ____D C:\Users\fafafafa
2024-01-22 14:49 - 2024-01-22 14:49 - 000000020 ___SH C:\Users\fafafafa\ntuser.ini
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 _SHDL C:\Users\fafafafa\Шаблоны
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 _SHDL C:\Users\fafafafa\Мои документы
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 _SHDL C:\Users\fafafafa\главное меню
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 _SHDL C:\Users\fafafafa\Documents\Моя музыка
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 _SHDL C:\Users\fafafafa\Documents\мои рисунки
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 _SHDL C:\Users\fafafafa\Documents\Мои видеозаписи
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 _SHDL C:\Users\fafafafa\AppData\Roaming\Microsoft\Windows\Start Menu\Программы
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ___SD C:\Users\fafafafa\AppData\Roaming\Microsoft\SystemCertificates
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ___SD C:\Users\fafafafa\AppData\Roaming\Microsoft\Protect
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ___SD C:\Users\fafafafa\AppData\Roaming\Microsoft\Crypto
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ___SD C:\Users\fafafafa\AppData\Roaming\Microsoft\Credentials
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ___RD C:\Users\fafafafa\3D Objects
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Roaming\Yandex
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Roaming\Microsoft\Windows
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Roaming\Microsoft\Vault
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Roaming\Microsoft\Network
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Roaming\Adobe
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Local\Yandex
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Local\VirtualStore
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Local\Publishers
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Local\NVIDIA
2024-01-22 14:49 - 2024-01-22 14:49 - 000000000 ____D C:\Users\fafafafa\AppData\Local\ConnectedDevicesPlatform
2024-01-22 13:46 - 2024-01-22 13:46 - 307816104 _____ C:\Users\Admond\Downloads\o4j2yd3n.exe
2024-01-22 12:16 - 2024-01-22 12:16 - 000000000 ____D C:\Users\Admond\AppData\Local\ElevatedDiagnostics
2024-01-22 12:14 - 2024-01-22 13:27 - 000684500 _____ C:\Windows\ntbtlog.txt
2024-01-22 12:07 - 2024-01-22 15:10 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-01-22 12:07 - 2024-01-22 15:10 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-01-21 17:46 - 2024-01-21 17:46 - 000000000 ____D C:\KRD2018_Data
2024-01-21 14:29 - 2024-01-21 14:30 - 704428032 _____ C:\Users\Admond\Downloads\krd.iso
2024-01-21 13:12 - 2024-01-21 13:12 - 000000000 ____D C:\Users\Admond\AppData\Roaming\WinRAR
2024-01-21 13:09 - 2024-01-21 13:09 - 000001066 _____ C:\Users\Admond\Desktop\Starfield.exe - Ярлык.lnk
2024-01-21 09:29 - 2024-02-03 21:07 - 000000000 ____D C:\Users\Admond\Doctor Web
2024-01-21 08:54 - 2024-01-22 13:15 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2024-01-21 08:52 - 2024-01-21 08:52 - 000000000 ____D C:\Windows\pss
2024-01-21 00:49 - 2024-01-21 13:08 - 000000000 ____D C:\Users\Admond\AppData\Local\Warframe
2024-01-21 00:22 - 2024-01-21 00:22 - 000000210 _____ C:\Users\Admond\Desktop\Warframe.url
2024-01-21 00:22 - 2024-01-21 00:22 - 000000000 ____D C:\Users\Admond\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2024-01-21 00:19 - 2024-01-21 00:19 - 000000000 ____D C:\Users\Admond\AppData\Local\Steam
2024-01-21 00:19 - 2024-01-21 00:19 - 000000000 ____D C:\Users\Admond\AppData\Local\CEF
2024-01-21 00:07 - 2024-01-21 00:18 - 000000659 _____ C:\Users\Public\Desktop\Steam.lnk
2024-01-21 00:07 - 2024-01-21 00:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2024-01-20 22:24 - 2024-01-20 22:24 - 000000000 ____D C:\Users\Admond\AppData\Local\hidemy.name VPN
2024-01-20 22:24 - 2024-01-20 22:24 - 000000000 ____D C:\Users\Admond\AppData\Local\cache
2024-01-20 21:17 - 2024-01-20 21:17 - 000000000 ____D C:\Users\Admond\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-01-20 21:17 - 2024-01-20 21:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-01-20 21:17 - 2024-01-20 21:17 - 000000000 ____D C:\Program Files\WinRAR
2024-01-20 18:14 - 2024-01-20 18:14 - 000000000 ____D C:\Users\Admond\AppData\Local\K7 Computing
2024-01-20 17:58 - 2024-01-20 17:58 - 000002221 _____ C:\Users\Public\Desktop\PRO32TotalSecurity.lnk
2024-01-20 17:58 - 2024-01-20 17:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PRO32TotalSecurity
2024-01-20 17:58 - 2024-01-20 17:58 - 000000000 ____D C:\ProgramData\K7 Computing
2024-01-20 17:58 - 2024-01-20 17:58 - 000000000 ____D C:\Program Files (x86)\K7 Computing
2024-01-20 16:11 - 2024-01-26 18:22 - 000001977 _____ C:\Users\Admond\Desktop\Новый текстовый документ.txt
2024-01-20 16:03 - 2024-02-08 21:35 - 000000000 ____D C:\FRST
2024-01-20 16:03 - 2024-01-22 15:10 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-01-20 16:03 - 2024-01-22 15:10 - 000000000 ____D C:\Program Files\Malwarebytes
2024-01-20 16:03 - 2024-01-20 16:03 - 000000000 ____D C:\Program Files\Google
2024-01-20 15:34 - 2024-01-20 15:34 - 000000000 ____D C:\Users\Admond\AppData\Roaming\VisualShape
2024-01-20 15:34 - 2024-01-20 15:34 - 000000000 ____D C:\ProgramData\VisualShape
2024-01-11 20:43 - 2024-01-11 20:43 - 000000000 ____D C:\Users\Admond\AppData\Local\OneDrive
2024-01-11 15:43 - 2024-01-11 15:44 - 000000000 ___HD C:\$WinREAgent

==================== Один месяц (изменён) ==================

(Если запись включена в лист исправлений, файл/папка будут перемещены.)

2024-02-08 21:34 - 2023-06-20 15:38 - 000000464 _____ C:\Windows\Tasks\Обновление Браузера Яндекс.job
2024-02-08 21:33 - 2023-06-20 15:58 - 000001134 _____ C:\Windows\system32\config\VSMIDK
2024-02-08 21:33 - 2023-06-20 15:38 - 000000506 _____ C:\Windows\Tasks\Системное обновление Браузера Яндекс.job
2024-02-08 21:33 - 2023-06-20 15:38 - 000000466 _____ C:\Windows\Tasks\Восстановление сервиса обновлений Яндекс Браузера.job
2024-02-08 21:33 - 2023-06-20 15:35 - 000000000 ___RD C:\Users\Admond\OneDrive
2024-02-08 21:33 - 2023-06-20 15:33 - 000000000 ____D C:\ProgramData\NVIDIA
2024-02-08 21:33 - 2023-06-20 15:21 - 000008192 ___SH C:\DumpStack.log.tmp
2024-02-08 21:33 - 2023-06-20 15:21 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-02-08 21:33 - 2019-12-07 12:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-02-08 21:32 - 2019-12-07 12:03 - 000524288 _____ C:\Windows\system32\config\BBI
2024-02-08 21:31 - 2023-12-14 23:57 - 000000000 ____D C:\Program Files\CPUID
2024-02-08 21:25 - 2023-06-20 15:21 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-02-08 21:16 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\AppReadiness
2024-02-08 04:54 - 2019-12-07 12:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-02-07 18:49 - 2023-06-20 15:35 - 001663226 _____ C:\Windows\system32\PerfStringBackup.INI
2024-02-07 18:49 - 2019-12-07 17:34 - 000734024 _____ C:\Windows\system32\perfh019.dat
2024-02-07 18:49 - 2019-12-07 17:34 - 000144036 _____ C:\Windows\system32\perfc019.dat
2024-02-07 18:49 - 2019-12-07 12:13 - 000000000 ____D C:\Windows\INF
2024-02-07 18:46 - 2023-06-20 15:21 - 000002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-02-07 18:46 - 2023-06-20 15:21 - 000002297 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-02-06 21:35 - 2023-06-20 15:33 - 000000000 ____D C:\Users\Admond\AppData\Local\Packages
2024-02-06 20:38 - 2023-06-20 15:59 - 000000804 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2024-02-06 14:50 - 2023-06-20 15:36 - 000000000 ____D C:\Users\Admond\AppData\Local\D3DSCache
2024-02-04 15:26 - 2023-06-20 15:32 - 000000000 ____D C:\Users\Admond
2024-02-04 10:29 - 2019-12-07 12:03 - 000000000 ____D C:\Windows\CbsTemp
2024-02-03 15:45 - 2023-06-20 15:35 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3849764716-1366410836-1343688429-1001
2024-02-03 15:45 - 2023-06-20 15:35 - 000003382 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3849764716-1366410836-1343688429-1001
2024-02-03 15:45 - 2023-06-20 15:32 - 000002443 _____ C:\Users\Admond\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-02-03 14:10 - 2023-06-20 15:21 - 000003668 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-02-03 14:10 - 2023-06-20 15:21 - 000003544 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-02-01 19:05 - 2023-06-20 15:33 - 000000000 ____D C:\Users\Admond\AppData\Local\ConnectedDevicesPlatform
2024-01-31 20:37 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\LiveKernelReports
2024-01-31 20:25 - 2023-06-20 15:33 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-01-30 09:52 - 2019-12-07 12:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2024-01-30 09:10 - 2019-12-07 12:14 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2024-01-30 09:10 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2024-01-27 18:26 - 2022-09-08 06:15 - 000000000 ____D C:\Windows\SystemTemp
2024-01-26 18:20 - 2023-06-20 15:38 - 000003680 _____ C:\Windows\system32\Tasks\Системное обновление Браузера Яндекс
2024-01-26 18:20 - 2023-06-20 15:38 - 000003570 _____ C:\Windows\system32\Tasks\Восстановление сервиса обновлений Яндекс Браузера
2024-01-26 18:20 - 2023-06-20 15:38 - 000002575 _____ C:\Users\Admond\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex.lnk
2024-01-26 18:20 - 2023-06-20 15:38 - 000002538 _____ C:\Users\Admond\Desktop\Yandex.lnk
2024-01-22 19:23 - 2023-07-14 17:10 - 000000000 ____D C:\Windows\system32\MRT
2024-01-22 16:18 - 2023-08-06 13:25 - 000001383 _____ C:\Users\Admond\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2024-01-22 16:18 - 2023-08-06 13:25 - 000001277 _____ C:\Users\Admond\Desktop\ESET Online Scanner.lnk
2024-01-22 15:26 - 2019-12-07 12:14 - 000000000 ____D C:\Program Files\Common Files\System
2024-01-22 14:49 - 2019-12-07 12:14 - 000000000 ___RD C:\Windows\PrintDialog
2024-01-22 14:49 - 2019-12-07 12:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-01-22 14:42 - 2023-08-04 08:46 - 000000000 ____D C:\Users\Admond\Downloads\Для скачанных Торрентов
2024-01-22 14:34 - 2023-06-20 16:00 - 000000000 ____D C:\Users\Admond\AppData\Roaming\Microsoft\MMC
2024-01-22 13:16 - 2023-06-20 15:33 - 000000000 ___SD C:\Users\Admond\AppData\Roaming\Microsoft\Protect
2024-01-22 12:07 - 2019-12-07 12:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2024-01-21 21:36 - 2023-08-06 14:04 - 000003862 _____ C:\Windows\system32\Tasks\EOSv3 Scheduler onLogOn
2024-01-21 21:36 - 2023-08-06 14:04 - 000003420 _____ C:\Windows\system32\Tasks\EOSv3 Scheduler onTime
2024-01-20 21:07 - 2023-06-20 15:21 - 000269320 _____ C:\Windows\system32\FNTCACHE.DAT
2024-01-20 17:58 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\Help
2024-01-20 16:16 - 2023-08-04 08:45 - 000000000 ____D C:\Users\Admond\Downloads\Torrents
2024-01-20 16:03 - 2023-06-20 15:32 - 000000000 ____D C:\Users\Admond\AppData\Roaming\Microsoft\Windows
2024-01-13 10:26 - 2019-12-07 12:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2024-01-13 10:26 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2024-01-13 10:26 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\SystemResources
2024-01-13 10:26 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\system32\setup
2024-01-13 10:26 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\ShellExperiences
2024-01-13 10:26 - 2019-12-07 12:14 - 000000000 ____D C:\Windows\bcastdvr
2024-01-12 18:36 - 2023-07-14 17:10 - 000918944 _____ (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2024-01-11 15:42 - 2023-07-14 17:10 - 189718008 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-01-09 13:29 - 2023-11-10 22:16 - 000000000 ____D C:\Users\Admond\AppData\Local\Starfield

==================== Файлы в корне каталогов ========

2023-10-13 09:37 - 2023-10-13 09:38 - 000026788 _____ () C:\Users\Admond\AppData\Local\PlariumPlay.log
2023-12-12 01:35 - 2023-12-20 01:54 - 000007602 _____ () C:\Users\Admond\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Нет автоматического исправления файлов, которые не проходят проверку.)

==================== Конец от FRST.txt ========================