Решил полечить, а наткнулся на вирус. Вот теперь пытаюсь через вас.
Решил полечить, а наткнулся на вирус. Вот теперь пытаюсь через вас.
Уважаемый(ая) Plem9wa, спасибо за обращение на наш форум!
Удаление вирусов - абсолютно бесплатная услуга на VirusInfo.Info. Хелперы в самое ближайшее время ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитой Autologger, подробнее можно прочитать в правилах оформления запроса о помощи.
Информация
Если вы хотите получить персональную гарантированную помощь в приоритетном режиме, то воспользуйтесь платным сервисом Помогите+.
Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста поддержите проект.
Выполните скрипт в AVZ
Будет выполнена перезагрузка компьютера.Код:begin ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.'); ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true); if not IsWOW64 then begin SearchRootkit(true, true); SetAVZGuardStatus(True); end; QuarantineFile('C:\Program Files\Cruddit\Cruddit.dll',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\cid25r3qloo\fdb2t4xm1lv.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\z5ix21cqo5t\uozrbo3w0my.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\rip1soeqhxm\up2nol2mjbe.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\jyqdkcgh4ri\iyw3ijdktbo.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\bou1vl3ww1d\1blxhj1j1tp.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\gxjsqj02v0d\i30g5emyhwr.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\wnjvka3h2s3\syraaokwofj.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\ktkfzyvj1ye\s33eviyouuj.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\x1xmolryn2y\piuq1r535he.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\2d2xzywfj3h\f3tw5zt5r25.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\wkshb0jrgwg\h21m5yogrzn.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\gwl4jnntdlu\cj3h1vq1tj5.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\g310theqkrs\4obh4hlgq4a.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\xdg310evwyb\mdv5akfabw5.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\544k4uajycy\fpq4r3qugtr.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\mzd5qzt3hks\rs2jzyzrbe2.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\vkufednj2hd\lnvg322wubx.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\fz5g55f3ic0\5eat4tdnfel.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\jrk0lybejg1\2gdtirw4yos.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\zlduhqxvqtq\imupe4kd4rq.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\vzgv2voqabc\jpugrfkuwum.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\jbjslkitkb0\crpe3v4ebif.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\fr1nyiopdti\neschaddblx.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\imurnwf3tgf\5p3eqzvlbpp.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\tqtrsekslqu\3oq1setcscb.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\s0qhbuos2tg\32jhupo2c32.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\wnhehe3h5mz\i4snmwntnx4.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\x0vw0bybesj\cjls2cnxysa.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\sqkzcaoozuf\lbolume3ln4.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\cajd0zwfien\y5snjgdl2sb.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\erlmsnwbnpn\0jvvka1kb4j.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\rb3gclgylzn\3bkkw2ytvhp.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\rzmx3cowxjz\fctph1jefgd.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\4ukbfyolslm\3tnmdmtj4xl.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\sewp3r1xdow\oxt41gw2gnu.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\4n5zy000zi4\vnv0in2hxmc.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\r3cystrrsbi\0o3rphnwkl2.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\cuv3cnmp0rw\hwohist00ow.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\dknblin5khi\tteuwxraalu.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\2avlmytcirl\p1beh4aung4.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\1mcbzw0sk3n\lfvkzbdvtbe.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\bd2doqcuvcz\u4ljfp1eabe.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\u4iwyksy1ux\vwru1da2ud5.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\thahicvij1a\iupmqfneqy4.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\metfm4th00l\qyopexhszxh.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\ihirhomnek4\1jtghccywfr.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\1hn2avqnhmj\lkdphtyspal.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\0ds3dh0uepc\u2qqqyalet1.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\2hr0zosbuva\vjoqskm31z5.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\vsqaphtlfna\mekh434wzb0.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\lywhp4v3xx5\vs5y5qsbsba.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\v4gfw3d01xm\4fa22msme0r.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\4zonptwesg0\aje4y124muo.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\5o4ngz2nspx\hguwzxs3t5r.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\3kp1b3wu11e\w1csx5vwp1l.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\t0xl4eny1dn\e3sqcqsgcud.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\z2gtkpm5ur2\ca5qimd1a5q.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\eykrlw05vt1\vblphv3y2gl.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\jr00tbxvckr\khtsc4laduj.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\111bmxxkcbk\4ozum1nxlu5.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\klwtsvhstkk\sqqeuokyv4z.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\ab2b2begowy\r5xv04kgcga.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\kbdmobudebv\5g1moonit4e.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\yktnfwofioq\lk22hodjgcn.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\wpsw1a0m5gi\xvbx3mmuqpe.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\qjlcenbpfls\qqdgkugy2wd.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\xiqn1jkiamx\fhjbviqpghf.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\rdgabhhdspf\s2sxwa1wazo.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\4synrdjfumj\dzulgwzm52f.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\zlbegcmh3md\hb3xfcx3zhx.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\1sksvkrh0vl\o0uk4w53sdm.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\5xvilszhead\dbz2bdlhpcp.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\fbpkfqikpd2\bdki03lsrmd.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\vwb1reqza5n\ihqd0uyie13.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\5pivq4iwp1a\ic5gh0xs3iq.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\e4j4hcdrd4z\cax2zj2m3k0.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\ebpkrrdjkrs\rqduqkdam30.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\r4g1vy4qnyn\4a2viqkr4fy.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\jivadqf13nq\lajfkzs1cso.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\njiqpffl3h5\54zhsa3wwt2.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\aspw20oxury\o5yojx42nqh.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\fvoxz0f3fp4\0vablrliuz4.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\jowxobwocds\skyy1ruegph.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\42bbqnmujvp\pdsm22lcfua.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\tshadkfjdkf\g035dgtknag.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\sofgpblcl0k\d1rvsz2err2.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\n3bmtlffdeg\ztgg2koedms.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\b3o4bwpqsix\gro3qvk413w.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\geomb4exezr\gtaqd5a5gtg.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\ul0c4z0024k\4hqo13zgdlc.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\hrqy50mpiyv\uirgi2nxr4o.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\snzo2berzl4\hkj1oymkkt1.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\my14eqkf5na\13dzuvmtsct.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\djzofe3fv4p\qaeytunfohm.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\jkkrzvj5ljm\fuiusiuctha.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\xs3pxinh5s3\4wrvw4o3nxa.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\oyril5kk4fh\35nockdt5bx.exe',''); QuarantineFile('C:\Users\Яра\AppData\Roaming\usyg3mooiof\0lphc53jbyu.exe',''); DeleteFile('C:\Users\Яра\AppData\Roaming\usyg3mooiof\0lphc53jbyu.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\oyril5kk4fh\35nockdt5bx.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\xs3pxinh5s3\4wrvw4o3nxa.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\jkkrzvj5ljm\fuiusiuctha.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\djzofe3fv4p\qaeytunfohm.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\my14eqkf5na\13dzuvmtsct.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\snzo2berzl4\hkj1oymkkt1.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\hrqy50mpiyv\uirgi2nxr4o.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\ul0c4z0024k\4hqo13zgdlc.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','v05knqx3sso'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ubfrqmedefl'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','qrqmsrke3un'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','unbcccupos2'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','qjwuvy4ulxg'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','uqvsufdg34o'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','gu52dv20213'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','sgwbylz44nu'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','rhslza0sziq'); DeleteFile('C:\Users\Яра\AppData\Roaming\geomb4exezr\gtaqd5a5gtg.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\b3o4bwpqsix\gro3qvk413w.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\n3bmtlffdeg\ztgg2koedms.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\sofgpblcl0k\d1rvsz2err2.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\tshadkfjdkf\g035dgtknag.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\42bbqnmujvp\pdsm22lcfua.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\jowxobwocds\skyy1ruegph.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\fvoxz0f3fp4\0vablrliuz4.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\aspw20oxury\o5yojx42nqh.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\njiqpffl3h5\54zhsa3wwt2.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','eqqvdwct5e3'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','uy4kamhhiqn'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','dkzduckdvcq'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','55cgxqqvdfl'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','drintnkp2ra'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','541bjxs4duu'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','h2ldidw1z2q'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','03eblpyksvu'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','gypqg22zn31'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','z0wbwbtr3p4'); DeleteFile('C:\Users\Яра\AppData\Roaming\jivadqf13nq\lajfkzs1cso.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\r4g1vy4qnyn\4a2viqkr4fy.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\ebpkrrdjkrs\rqduqkdam30.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\e4j4hcdrd4z\cax2zj2m3k0.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\5pivq4iwp1a\ic5gh0xs3iq.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\vwb1reqza5n\ihqd0uyie13.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\fbpkfqikpd2\bdki03lsrmd.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\5xvilszhead\dbz2bdlhpcp.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\1sksvkrh0vl\o0uk4w53sdm.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\zlbegcmh3md\hb3xfcx3zhx.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','kqk153yoo5c'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','412g0wuf0p5'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','yrk1jsfzvfn'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','qpcqmsuu5dw'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','0f3ebygw4d1'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','orlcdeg5ngn'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','gd2ti1rm155'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','kcouodehskc'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','zdsgjf022oc'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','lg02kg4hwo5'); DeleteFile('C:\Users\Яра\AppData\Roaming\4synrdjfumj\dzulgwzm52f.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\rdgabhhdspf\s2sxwa1wazo.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\xiqn1jkiamx\fhjbviqpghf.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\qjlcenbpfls\qqdgkugy2wd.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\wpsw1a0m5gi\xvbx3mmuqpe.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\yktnfwofioq\lk22hodjgcn.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\kbdmobudebv\5g1moonit4e.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\ab2b2begowy\r5xv04kgcga.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\klwtsvhstkk\sqqeuokyv4z.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\111bmxxkcbk\4ozum1nxlu5.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','bmi51tdf1vl'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','y3swdixmwws'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','e1ogzgrripv'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','mu5hgrhbcgr'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ghfymb3opxo'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','f2a2fhgx0xv'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','x0eoz41ortx'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','pckh2wiprn4'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','kv2o5kcifgw'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','1ebxy5guiqy'); DeleteFile('C:\Users\Яра\AppData\Roaming\jr00tbxvckr\khtsc4laduj.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\eykrlw05vt1\vblphv3y2gl.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\z2gtkpm5ur2\ca5qimd1a5q.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\t0xl4eny1dn\e3sqcqsgcud.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\3kp1b3wu11e\w1csx5vwp1l.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\5o4ngz2nspx\hguwzxs3t5r.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\4zonptwesg0\aje4y124muo.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\v4gfw3d01xm\4fa22msme0r.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\lywhp4v3xx5\vs5y5qsbsba.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\vsqaphtlfna\mekh434wzb0.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ddfogvvxg1e'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','swghv2hiysp'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','nfte0lvm4ah'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','wguxt2dnwui'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','n1khxtgv0qh'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','c1m5gtxlklv'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','wmjxzedihq1'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','s0nycapohuj'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','hbuxbqtqwps'); DeleteFile('C:\Users\Яра\AppData\Roaming\2hr0zosbuva\vjoqskm31z5.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','wnbsysxkq5w'); DeleteFile('C:\Users\Яра\AppData\Roaming\0ds3dh0uepc\u2qqqyalet1.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\1hn2avqnhmj\lkdphtyspal.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','hqpw2zv3yoa'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','x0kx5hkw44p'); DeleteFile('C:\Users\Яра\AppData\Roaming\ihirhomnek4\1jtghccywfr.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\metfm4th00l\qyopexhszxh.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\thahicvij1a\iupmqfneqy4.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\u4iwyksy1ux\vwru1da2ud5.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\bd2doqcuvcz\u4ljfp1eabe.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','jjb3vscm5xb'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','5cbdaypjn2l'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','vhxom20kal2'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','txhfmwdq23q'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','1sfbvvxzea2'); DeleteFile('C:\Users\Яра\AppData\Roaming\1mcbzw0sk3n\lfvkzbdvtbe.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\2avlmytcirl\p1beh4aung4.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\dknblin5khi\tteuwxraalu.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\cuv3cnmp0rw\hwohist00ow.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\r3cystrrsbi\0o3rphnwkl2.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\4n5zy000zi4\vnv0in2hxmc.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\sewp3r1xdow\oxt41gw2gnu.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\4ukbfyolslm\3tnmdmtj4xl.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\rzmx3cowxjz\fctph1jefgd.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\rb3gclgylzn\3bkkw2ytvhp.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\erlmsnwbnpn\0jvvka1kb4j.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','c1w3brqkmur'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','y2g250lsubp'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','w0dolhl1bup'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','p2o53ukapnk'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','scchcztahto'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','jypa2jaw421'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','2rinsbgbl4b'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ije4qgkcfrn'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','wiyoncp3l42'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','zl1sb1zynhp'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','bumtmdao145'); DeleteFile('C:\Users\Яра\AppData\Roaming\cajd0zwfien\y5snjgdl2sb.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\sqkzcaoozuf\lbolume3ln4.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\x0vw0bybesj\cjls2cnxysa.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\wnhehe3h5mz\i4snmwntnx4.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\s0qhbuos2tg\32jhupo2c32.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\tqtrsekslqu\3oq1setcscb.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\imurnwf3tgf\5p3eqzvlbpp.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\fr1nyiopdti\neschaddblx.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\jbjslkitkb0\crpe3v4ebif.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\vzgv2voqabc\jpugrfkuwum.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\zlduhqxvqtq\imupe4kd4rq.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','xazeuh3dvok'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','gzx12fpobfi'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','vqkda0kbkc3'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','bfopiz0sn1r'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','cpo1yl0e5sv'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ephzmlm54io'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','5f1pxpghkgg'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','2z5ebhvpviy'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ucryjaxijnk'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','2xlhb5lytzt'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','3sxjketpsy3'); DeleteFile('C:\Users\Яра\AppData\Roaming\jrk0lybejg1\2gdtirw4yos.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\fz5g55f3ic0\5eat4tdnfel.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\vkufednj2hd\lnvg322wubx.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\mzd5qzt3hks\rs2jzyzrbe2.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\544k4uajycy\fpq4r3qugtr.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\xdg310evwyb\mdv5akfabw5.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\g310theqkrs\4obh4hlgq4a.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\gwl4jnntdlu\cj3h1vq1tj5.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\wkshb0jrgwg\h21m5yogrzn.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\2d2xzywfj3h\f3tw5zt5r25.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','fht3wzcwek0'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','qbcs0gcgwcg'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','du0gievi1jc'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','0abmlydcdko'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','2her5bkf4w2'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','0xk21hrynwd'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ngswkpzp1bx'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','g1hrgicttmz'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','0lgeixo3fa1'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','lmv1qmysmll'); DeleteFile('C:\Users\Яра\AppData\Roaming\x1xmolryn2y\piuq1r535he.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\ktkfzyvj1ye\s33eviyouuj.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\wnjvka3h2s3\syraaokwofj.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\gxjsqj02v0d\i30g5emyhwr.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\bou1vl3ww1d\1blxhj1j1tp.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\jyqdkcgh4ri\iyw3ijdktbo.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\rip1soeqhxm\up2nol2mjbe.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\z5ix21cqo5t\uozrbo3w0my.exe','32'); DeleteFile('C:\Users\Яра\AppData\Roaming\cid25r3qloo\fdb2t4xm1lv.exe','32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','mspf4zxp4ul'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','ityuzzse4b1'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','jqbou20mhxu'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','n3hnv3beunz'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','dhoxvspd3gg'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','p5j4mza32kn'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','igiqevbfcjd'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','jsgjkbd4l2r'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','fczgm4lzuoc'); DeleteFile('C:\Program Files\Cruddit\Cruddit.dll','32'); DeleteFile('C:\Windows\Tasks\Cruddit.job','32'); DeleteFile('C:\Windows\system32\Tasks\Cruddit','64'); BC_ImportAll; ExecuteSysClean; BC_Activate; RebootWindows(false); end.
Выполните скрипт в AVZ
c:\quarantine.zip пришлите по красной ссылке Прислать запрошенный карантин над первым сообщением темы.Код:begin CreateQurantineArchive('c:\quarantine.zip'); end.
Пожалуйста, ЕЩЕ РАЗ запустите Autologger, прикрепите к следующему сообщению НОВЫЕ логи
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Всё сделал. Жду дальнейших действий от вас. Спасибо
Жду дальнейших указаний. Спасибо
Информация
Темы объединил.
Скачайте Farbar Recovery Scan Tool и сохраните на Рабочем столе.
- Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
1. Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
2. Убедитесь, что в окне Optional Scan отмечены List BCD, Driver MD5 и 90 Days Files.
3. Нажмите кнопку Scan.
4. После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа.
5. Если программа была запущена в первый раз, также будет создан отчет (Addition.txt).
6. Отчеты, полученные в пп. 4 и 5, заархивируйте (в один архив) и прикрепите к сообщению.
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Загрузил в карантин
Логи прикрепляют к сообщению через кнопку Расширенный режим
И не нужно плодить темы для каждого нового ответа.
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Прости. Не мог разобраться
1. Откройте Блокнот и скопируйте в него приведенный ниже текст
2. Нажмите Файл – Сохранить какКод:CreateRestorePoint: HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== ATTENTION HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== ATTENTION HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== ATTENTION HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== ATTENTION HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== ATTENTION HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== ATTENTION HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== ATTENTION HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== ATTENTION HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== ATTENTION HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== ATTENTION HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== ATTENTION HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== ATTENTION HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== ATTENTION HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== ATTENTION HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== ATTENTION HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== ATTENTION HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== ATTENTION HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== ATTENTION HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== ATTENTION HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== ATTENTION HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== ATTENTION HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== ATTENTION HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== ATTENTION HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== ATTENTION HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== ATTENTION HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== ATTENTION HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== ATTENTION HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== ATTENTION HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== ATTENTION HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== ATTENTION HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== ATTENTION HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== ATTENTION HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== ATTENTION HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== ATTENTION HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== ATTENTION HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== ATTENTION HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== ATTENTION GroupPolicy: Restriction - Chrome <==== ATTENTION 2017-07-25 23:10 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files (x86)\YpuAskUn 2017-07-25 23:10 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files (x86)\YeuAskIE 2017-07-25 23:10 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files (x86)\MefarchIE 2017-07-25 23:10 - 2017-07-26 03:37 - 000000000 ____D C:\Program Files (x86)\YueAckU 2017-07-25 23:10 - 2017-07-26 02:19 - 000000000 ____D C:\Program Files (x86)\MadarchU2 2017-07-25 23:10 - 2017-07-26 00:45 - 000000000 ____D C:\Program Files (x86)\YtuAskU2 2017-07-25 23:09 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files (x86)\MayarchUn 2017-07-25 23:09 - 2017-07-26 04:02 - 000000000 ____D C:\Program Files (x86)\MederchU Task: {4E5FF248-A4CB-4311-AD31-13EE86336FD4} - \Cruddit -> No File <==== ATTENTION 2017-07-24 11:43 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\2hr0zosbuva 2017-07-24 11:43 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\L3I4BTK4Z8 2017-07-24 11:43 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\EX7JWR8OPD 2017-07-24 11:43 - 2017-07-24 11:43 - 000000000 ____D C:\Users\Яра\AppData\Roaming\0ds3dh0uepc 2017-07-24 11:12 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\1hn2avqnhmj 2017-07-24 11:12 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\LY5VEYJ3DP 2017-07-24 11:12 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\6WHWAVPVZ1 2017-07-24 11:12 - 2017-07-24 11:12 - 000000000 ____D C:\Users\Яра\AppData\Roaming\ihirhomnek4 2017-07-24 10:43 - 2017-07-24 10:43 - 000000004 _____ C:\Users\Все пользователи\_lg.3sap 2017-07-24 10:43 - 2017-07-24 10:43 - 000000004 _____ C:\ProgramData\_lg.3sap 2017-07-24 10:41 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\ZUCUGRZARV 2017-07-24 10:41 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\Q0GPI6Q43X 2017-07-24 10:41 - 2017-07-24 10:41 - 000000000 ____D C:\Users\Яра\AppData\Roaming\metfm4th00l 2017-07-24 10:40 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\thahicvij1a 2017-07-24 10:39 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\AIDV5BNTFQ 2017-07-24 10:39 - 2017-07-24 10:39 - 000000000 ____D C:\Users\Яра\AppData\Roaming\u4iwyksy1ux 2017-07-24 01:35 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\SPPDLFTTVU 2017-07-24 01:33 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\GGGGAKYQFE 2017-07-24 01:33 - 2017-07-24 01:34 - 000000000 ____D C:\Users\Яра\AppData\Roaming\bd2doqcuvcz 2017-07-24 01:33 - 2017-07-24 01:33 - 000000000 ____D C:\Users\Яра\AppData\Roaming\erlmsnwbnpn 2017-07-24 01:31 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\rb3gclgylzn 2017-07-24 01:31 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\QY9CKKUOVN 2017-07-24 00:33 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\0NPC8XFKMV 2017-07-24 00:33 - 2017-07-24 00:33 - 000000000 ____D C:\Users\Яра\AppData\Roaming\rzmx3cowxjz 2017-07-24 00:12 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\H7VLW9OOA4 2017-07-24 00:12 - 2017-07-24 00:12 - 000000000 ____D C:\Users\Яра\AppData\Roaming\4ukbfyolslm 2017-07-24 00:00 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\LWVY8QX3XO 2017-07-23 23:58 - 2017-07-23 23:58 - 000000000 ____D C:\Users\Яра\AppData\Roaming\sewp3r1xdow 2017-07-23 23:57 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\4n5zy000zi4 2017-07-23 23:57 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\CM1W84K5JH 2017-07-23 23:56 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\867148YEL4 2017-07-23 23:56 - 2017-07-23 23:56 - 000000000 ____D C:\Users\Яра\AppData\Roaming\r3cystrrsbi 2017-07-23 23:30 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\cuv3cnmp0rw 2017-07-23 23:30 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\PWMT8W7XNC 2017-07-23 23:30 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\NUYNKUECHL 2017-07-23 23:30 - 2017-07-23 23:30 - 000000000 ____D C:\Users\Яра\AppData\Roaming\dknblin5khi 2017-07-23 23:29 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\2avlmytcirl 2017-07-23 23:29 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\VF35C9KJ9P 2017-07-23 23:29 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\6X5E8BTT9U 2017-07-23 23:29 - 2017-07-23 23:29 - 000000000 ____D C:\Users\Яра\AppData\Roaming\1mcbzw0sk3n 2017-07-23 23:00 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\ZP0H4EFSS3 2017-07-23 23:00 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\EVHA89LMT0 2017-07-23 23:00 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\92W624UAK2 2017-07-23 23:00 - 2017-07-23 23:00 - 000000000 ____D C:\Users\Яра\AppData\Roaming\sqkzcaoozuf 2017-07-23 23:00 - 2017-07-23 23:00 - 000000000 ____D C:\Users\Яра\AppData\Roaming\cajd0zwfien 2017-07-23 22:59 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\YFTWRH6ICZ 2017-07-23 22:59 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\R8KC0VBXFP 2017-07-23 22:59 - 2017-07-23 22:59 - 000000000 ____D C:\Users\Яра\AppData\Roaming\x0vw0bybesj 2017-07-23 22:59 - 2017-07-23 22:59 - 000000000 ____D C:\Users\Яра\AppData\Roaming\wnhehe3h5mz 2017-07-23 22:59 - 2017-07-23 22:59 - 000000000 ____D C:\Users\Яра\AppData\Roaming\s0qhbuos2tg 2017-07-23 22:29 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\GU4CNEH699 2017-07-23 22:29 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\65BY9INUZ6 2017-07-23 22:29 - 2017-07-23 22:29 - 000000000 ____D C:\Users\Яра\AppData\Roaming\tqtrsekslqu 2017-07-23 22:28 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\imurnwf3tgf 2017-07-23 21:58 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\jbjslkitkb0 2017-07-23 21:58 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\U3YZN0NXVU 2017-07-23 21:58 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\EL81AW8HQ6 2017-07-23 21:58 - 2017-07-23 21:58 - 000000000 ____D C:\Users\Яра\AppData\Roaming\fr1nyiopdti 2017-07-23 21:28 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\DQWN1N76UZ 2017-07-23 21:28 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\3ORS9X5E8T 2017-07-23 21:28 - 2017-07-23 21:28 - 000000000 ____D C:\Users\Яра\AppData\Roaming\zlduhqxvqtq 2017-07-23 21:28 - 2017-07-23 21:28 - 000000000 ____D C:\Users\Яра\AppData\Roaming\vzgv2voqabc 2017-07-23 20:57 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\OMFJQZMG8M 2017-07-23 20:57 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\NLSD2XTV2U 2017-07-23 20:57 - 2017-07-23 20:57 - 000000000 ____D C:\Users\Яра\AppData\Roaming\wkshb0jrgwg 2017-07-23 20:57 - 2017-07-23 20:57 - 000000000 ____D C:\Users\Яра\AppData\Roaming\2d2xzywfj3h 2017-07-23 20:27 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\gwl4jnntdlu 2017-07-23 20:27 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\T8TQGS9BTK 2017-07-23 20:27 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\ICOXJQPJ3J 2017-07-23 20:27 - 2017-07-23 20:27 - 000000000 ____D C:\Users\Яра\AppData\Roaming\g310theqkrs 2017-07-23 19:56 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\QN584CIORT 2017-07-23 19:56 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\AW5JQ24BJI 2017-07-23 19:56 - 2017-07-23 19:56 - 000000000 ____D C:\Users\Яра\AppData\Roaming\xdg310evwyb 2017-07-23 19:56 - 2017-07-23 19:56 - 000000000 ____D C:\Users\Яра\AppData\Roaming\544k4uajycy 2017-07-23 19:54 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\D9U23AB2CD 2017-07-23 19:54 - 2017-07-23 19:55 - 000000000 ____D C:\Users\Яра\AppData\Roaming\mzd5qzt3hks 2017-07-23 02:27 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\ZBM3UNP8WY 2017-07-23 02:27 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\CKBUVYHFAV 2017-07-23 02:27 - 2017-07-23 02:27 - 000000000 ____D C:\Users\Яра\AppData\Roaming\vkufednj2hd 2017-07-23 02:27 - 2017-07-23 02:27 - 000000000 ____D C:\Users\Яра\AppData\Roaming\fz5g55f3ic0 2017-07-23 02:25 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\cid25r3qloo 2017-07-23 02:25 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\J0EYFU2VI6 2017-07-23 02:25 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\2EADM13FTN 2017-07-23 02:25 - 2017-07-23 02:25 - 000000000 ____D C:\Users\Яра\AppData\Roaming\jrk0lybejg1 2017-07-23 02:23 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\rip1soeqhxm 2017-07-23 02:23 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\CY1L1IPP97 2017-07-23 02:23 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\BNNXR5NPU6 2017-07-23 02:23 - 2017-07-23 02:23 - 000000000 ____D C:\Users\Яра\AppData\Roaming\z5ix21cqo5t 2017-07-23 01:57 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\RAWKP3FMRF 2017-07-23 01:57 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\KTHSDJHZRX 2017-07-23 01:56 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\bou1vl3ww1d 2017-07-23 01:56 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\RRK3HMP6J7 2017-07-23 01:56 - 2017-07-23 01:56 - 000000000 ____D C:\Users\Яра\AppData\Roaming\jyqdkcgh4ri 2017-07-23 01:56 - 2017-07-23 01:56 - 000000000 ____D C:\Users\Яра\AppData\Roaming\gxjsqj02v0d 2017-07-23 01:55 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\A06HG362GR 2017-07-23 01:55 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\4VK3DJ32P8 2017-07-23 01:55 - 2017-07-23 01:55 - 000000000 ____D C:\Users\Яра\AppData\Roaming\wnjvka3h2s3 2017-07-23 01:55 - 2017-07-23 01:55 - 000000000 ____D C:\Users\Яра\AppData\Roaming\ktkfzyvj1ye 2017-07-23 01:53 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\UNX1ILGE5G 2017-07-23 01:53 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\IQGFNZDHTH 2017-07-23 01:53 - 2017-07-23 01:53 - 000000000 ____D C:\Users\Яра\AppData\Roaming\x1xmolryn2y 2017-07-23 01:53 - 2017-07-23 01:53 - 000000000 ____D C:\Users\Яра\AppData\Roaming\vsqaphtlfna 2017-07-23 01:24 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\lywhp4v3xx5 2017-07-23 01:24 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\UM9PYF42SY 2017-07-23 01:24 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\694B8VRY5Y 2017-07-23 01:24 - 2017-07-23 01:24 - 000000000 ____D C:\Users\Яра\AppData\Roaming\v4gfw3d01xm 2017-07-23 01:23 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\4zonptwesg0 2017-07-23 01:23 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\G72GWH8YLK 2017-07-23 01:23 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\EMREBFGHNQ 2017-07-23 01:23 - 2017-07-23 01:23 - 000000000 ____D C:\Users\Яра\AppData\Roaming\5o4ngz2nspx 2017-07-23 00:54 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\3kp1b3wu11e 2017-07-23 00:54 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\QVSTSJVBO6 2017-07-23 00:54 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\JSKWQ3TENQ 2017-07-23 00:54 - 2017-07-23 00:54 - 000000000 ____D C:\Users\Яра\AppData\Roaming\t0xl4eny1dn 2017-07-23 00:52 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\z2gtkpm5ur2 2017-07-23 00:52 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\eykrlw05vt1 2017-07-23 00:52 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\RBIFDT9CLH 2017-07-23 00:52 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\77E9Z2IIP6 2017-07-23 00:24 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\jr00tbxvckr 2017-07-23 00:24 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\111bmxxkcbk 2017-07-23 00:24 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\Q5D35SSUEZ 2017-07-23 00:24 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\D4YKR4YKD4 2017-07-23 00:22 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\X40K6GGBEW 2017-07-23 00:22 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\E4B19EAH2H 2017-07-23 00:22 - 2017-07-23 00:22 - 000000000 ____D C:\Users\Яра\AppData\Roaming\klwtsvhstkk 2017-07-23 00:22 - 2017-07-23 00:22 - 000000000 ____D C:\Users\Яра\AppData\Roaming\ab2b2begowy 2017-07-22 23:53 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\WYAYW2TF2D 2017-07-22 23:53 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\FB8LZSOJGR 2017-07-22 23:53 - 2017-07-22 23:53 - 000000000 ____D C:\Users\Яра\AppData\Roaming\yktnfwofioq 2017-07-22 23:53 - 2017-07-22 23:53 - 000000000 ____D C:\Users\Яра\AppData\Roaming\kbdmobudebv 2017-07-22 23:52 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\qjlcenbpfls 2017-07-22 23:52 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\KZZFWWNU4R 2017-07-22 23:52 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\69KKYIIVT3 2017-07-22 23:52 - 2017-07-22 23:52 - 000000000 ____D C:\Users\Яра\AppData\Roaming\wpsw1a0m5gi 2017-07-22 23:23 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\xiqn1jkiamx 2017-07-22 23:23 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\RSFQRMQ1MR 2017-07-22 23:23 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\IB77OAN34F 2017-07-22 23:23 - 2017-07-22 23:23 - 000000000 ____D C:\Users\Яра\AppData\Roaming\rdgabhhdspf 2017-07-22 23:22 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\4synrdjfumj 2017-07-22 23:22 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\XWLWN9KZLL 2017-07-22 23:22 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\UMP8G5BG8X 2017-07-22 23:22 - 2017-07-22 23:22 - 000000000 ____D C:\Users\Яра\AppData\Roaming\zlbegcmh3md 2017-07-22 22:53 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\1sksvkrh0vl 2017-07-22 22:53 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\SOEEX2Z7KI 2017-07-22 22:53 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\DPORA1DGTK 2017-07-22 22:53 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\3YL746472K 2017-07-22 22:53 - 2017-07-22 22:53 - 000000000 ____D C:\Users\Яра\AppData\Roaming\fbpkfqikpd2 2017-07-22 22:53 - 2017-07-22 22:53 - 000000000 ____D C:\Users\Яра\AppData\Roaming\5xvilszhead 2017-07-22 22:51 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\3UZR3EQS10 2017-07-22 22:51 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\3EI2WPBXG1 2017-07-22 22:51 - 2017-07-22 22:51 - 000000000 ____D C:\Users\Яра\AppData\Roaming\vwb1reqza5n 2017-07-22 22:51 - 2017-07-22 22:51 - 000000000 ____D C:\Users\Яра\AppData\Roaming\5pivq4iwp1a 2017-07-22 22:21 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\OVHBK9IFP2 2017-07-22 22:21 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\ARWJDQHQEB 2017-07-22 22:21 - 2017-07-22 22:21 - 000000000 ____D C:\Users\Яра\AppData\Roaming\ebpkrrdjkrs 2017-07-22 22:21 - 2017-07-22 22:21 - 000000000 ____D C:\Users\Яра\AppData\Roaming\e4j4hcdrd4z 2017-07-22 21:51 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\DSAVZWAXVZ 2017-07-22 21:51 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\B7EJCIC2R4 2017-07-22 21:51 - 2017-07-22 21:51 - 000000000 ____D C:\Users\Яра\AppData\Roaming\r4g1vy4qnyn 2017-07-22 21:51 - 2017-07-22 21:51 - 000000000 ____D C:\Users\Яра\AppData\Roaming\jivadqf13nq 2017-07-22 21:21 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\Z8UEQTNSA0 2017-07-22 21:21 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\IL7QQ7BIID 2017-07-22 21:20 - 2017-07-22 21:20 - 000000000 ____D C:\Users\Яра\AppData\Roaming\njiqpffl3h5 2017-07-22 21:20 - 2017-07-22 21:20 - 000000000 ____D C:\Users\Яра\AppData\Roaming\aspw20oxury 2017-07-22 20:50 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\ZVOT8Q8K3S 2017-07-22 20:50 - 2017-08-06 09:00 - 000000000 ____D C:\Program Files\XH68CNKCO1 2017-07-22 20:50 - 2017-07-22 20:50 - 000000000 ____D C:\Users\Яра\AppData\Roaming\jowxobwocds 2017-07-22 20:50 - 2017-07-22 20:50 - 000000000 ____D C:\Users\Яра\AppData\Roaming\fvoxz0f3fp4 2017-07-22 20:20 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\KA0V88MH51 2017-07-22 20:20 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\99AQF6DBDU 2017-07-22 20:20 - 2017-07-22 20:20 - 000000000 ____D C:\Users\Яра\AppData\Roaming\tshadkfjdkf 2017-07-22 20:20 - 2017-07-22 20:20 - 000000000 ____D C:\Users\Яра\AppData\Roaming\42bbqnmujvp 2017-07-22 19:50 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\B29BA1VV5E 2017-07-22 19:49 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\OOMXH7PAH1 2017-07-22 19:49 - 2017-07-22 19:49 - 000000000 ____D C:\Users\Яра\AppData\Roaming\sofgpblcl0k 2017-07-22 19:49 - 2017-07-22 19:49 - 000000000 ____D C:\Users\Яра\AppData\Roaming\n3bmtlffdeg 2017-07-22 19:48 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\ID70GFF4Q3 2017-07-22 19:48 - 2017-07-22 19:49 - 000000000 ____D C:\Users\Яра\AppData\Roaming\b3o4bwpqsix 2017-07-21 19:53 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\W9N9K3R5UR 2017-07-21 19:53 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\FTFCCSQIS8 2017-07-21 19:53 - 2017-07-21 19:53 - 000000000 ____D C:\Users\Яра\AppData\Roaming\ul0c4z0024k 2017-07-21 19:53 - 2017-07-21 19:53 - 000000000 ____D C:\Users\Яра\AppData\Roaming\geomb4exezr 2017-07-21 19:35 - 2017-07-26 10:31 - 000000000 ____D C:\Users\Яра\AppData\LocalLow\TutubeBl 2017-07-21 19:35 - 2017-07-26 10:31 - 000000000 ____D C:\Users\Яра\AppData\LocalLow\TMasech 2017-07-21 19:23 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\JE4QJ0A57Q 2017-07-21 19:23 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\791YA8H0VN 2017-07-21 19:23 - 2017-07-21 19:23 - 000000000 ____D C:\Users\Яра\AppData\Roaming\hrqy50mpiyv 2017-07-21 19:22 - 2017-07-21 19:22 - 000000000 ____D C:\Users\Яра\AppData\Roaming\snzo2berzl4 2017-07-21 18:52 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\U6BKUOMB5O 2017-07-21 18:52 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\13NRALSFJ4 2017-07-21 18:52 - 2017-07-21 18:52 - 000000000 ____D C:\Users\Яра\AppData\Roaming\my14eqkf5na 2017-07-21 18:52 - 2017-07-21 18:52 - 000000000 ____D C:\Users\Яра\AppData\Roaming\djzofe3fv4p 2017-07-21 18:27 - 2017-07-21 18:27 - 000000000 ____D C:\Users\Яра\AppData\Roaming\thdr 2017-07-21 18:22 - 2017-08-13 18:04 - 000000000 ____D C:\Users\Яра\AppData\Roaming\xs3pxinh5s3 2017-07-21 18:22 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\V6GGQGGJAJ 2017-07-21 18:22 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\2M8OV37YVO 2017-07-21 18:22 - 2017-07-24 11:43 - 001847296 _____ C:\Users\Яра\AppData\Local\po.db 2017-07-21 18:22 - 2017-07-21 18:22 - 000000000 ____D C:\Users\Яра\AppData\Roaming\jkkrzvj5ljm 2017-07-21 18:21 - 2017-08-06 08:58 - 000000000 ____D C:\Program Files\3XXE5KXJKE 2017-07-21 18:21 - 2017-07-21 18:21 - 000000000 ____D C:\Users\Яра\AppData\Roaming\oyril5kk4fh 2017-07-21 17:51 - 2017-08-06 08:59 - 000000000 ____D C:\Program Files\IO93PJ1DE8 2017-07-21 17:51 - 2017-07-24 12:05 - 000000000 ____D C:\Program Files (x86)\n0wl4fd0gs2 2017-07-21 17:51 - 2017-07-21 17:51 - 000000000 ____D C:\Users\Яра\AppData\Roaming\usyg3mooiof 2017-07-21 17:50 - 2017-07-24 12:07 - 000000000 ____D C:\Users\Яра\AppData\Roaming\SIVApp 2017-07-21 17:50 - 2017-07-21 17:50 - 000000000 ____D C:\Users\Все пользователи\WindowsErrorReporting 2017-07-21 17:50 - 2017-07-21 17:50 - 000000000 ____D C:\ProgramData\WindowsErrorReporting 2017-07-06 18:26 - 2017-07-06 18:26 - 000000000 ____D C:\Users\Яра\AppData\Roaming\baidu 2017-07-06 18:26 - 2017-07-06 18:26 - 000000000 ____D C:\Users\Яра\AppData\Roaming\360se6 2017-07-06 18:26 - 2017-07-06 18:26 - 000000000 ____D C:\Users\Яра\AppData\Local\UCBrowser 2017-07-06 18:26 - 2017-07-06 18:26 - 000000000 ____D C:\Users\Яра\AppData\Local\360chrome 2017-07-06 18:26 - 2017-07-06 18:26 - 000000000 ____D C:\Users\Яра\AppData\Local\2345explorer Reboot:
3. Выберите папку, откуда была запущена утилита Farbar Recovery Scan Tool
4. Укажите Тип файла – Все файлы (*.*)
5. Введите имя файла fixlist.txt и нажмите кнопку Сохранить
6. Запустите FRST, нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.
- Обратите внимание, что будет выполнена перезагрузка компьютера.
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Может я не понял, но это все происходит на рабочем столе а не в папке Farbar Recovery Scan Tool
Что с проблемой?
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
в каком плане??? Я не так что то сделал?
Проблема решена?
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
а... нет. в браузере вылетает левые сайты
Отключите ВСЕ установленные расширения для браузеров и проверьте проблему
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
DrWeb ещё запрещает файлу процесс
Вы расширения отключили?
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
да.
Сделайте лог полного сканирования МВАМ
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Уважаемый(ая) Plem9wa, наши специалисты оказали Вам всю возможную помощь по вашему обращению.
В целях поддержания безопасности вашего компьютера настоятельно рекомендуем:
Чтобы всегда быть в курсе актуальных угроз в области информационной безопасности и сохранять свой компьютер защищенным, рекомендуем следить за последними новостями ИТ-сферы портала Anti-Malware.ru:
Надеемся больше никогда не увидеть ваш компьютер зараженным!
Если Вас не затруднит, пополните пожалуйста нашу базу безопасных файлов.