---

Результат сканирования Farbar Recovery Scan Tool (FRST) (x64) Версия: 25-03-2026
Запущено с помощью i3 (Администратор) на WIN-810AH12H8GG (Colorful Technology And Development Co.,LTD BATTLE-AX B650M-PLUS WIFI) (17-09-2026 20:06:25)
Запущено из C:\Users\i3\Downloads\farbar-recovery-scan-tool-18-04-2026.exe
Загруженные профили: i3
Платформа: Майкрософт Windows 10 Pro Версия 22H2 19045.6456 (X64) Язык: Русский (Россия)
Браузер по умолчанию: Chrome
Режим загрузки: Safe Mode (with Networking)

==================== Процессы (В белом списке) =================

(Если запись включена в fixlist, процесс будет закрыт. Файл не будет перемещён.)

(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <62>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\regedit.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Реестр Windows (В белом списке) ===================

(Если запись включена в fixlist, элемент реестра будет сброшен на значение по умолчанию или удалён. Файл не будет перемещён.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [850512 2018-12-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Microsoft\MRT: Ограничение <==== ВНИМАНИЕ
HKLM\Software\Policies\...\system: [DisableAcrylicBackgroundOnLogon] 1
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 <==== ВНИМАНИЕ
HKLM\SYSTEM\...\Terminal Server: [fDenyTSConnections] = 0 <==== ВНИМАНИЕ
HKU\S-1-5-21-1164950338-3024807286-287954337-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [123792288 2021-04-05] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-1164950338-3024807286-287954337-1001\...\Run: [YandexBrowserAutoLaunch_D63C316A1CF94C3EC42C5656699C07BE] => C:\Program Files\Yandex\YandexBrowser\Application\browser.exe [6183880 2026-09-10] (YANDEX LLC -> YANDEX LLC)
HKU\S-1-5-21-1164950338-3024807286-287954337-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}] -> C:\Program Files\Yandex\YandexBrowser\Application\26.8.2.1064\Installer\yndxstp.exe [2026-09-17] (YANDEX LLC -> YANDEX LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\152.0.7977.83\Installer\chrmstp.exe [2026-09-17] (Google LLC -> Google LLC)
Startup: C:\Users\i3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2022-02-03]
ShortcutTarget: GameRanger.lnk -> C:\Users\i3\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies -> GameRanger Pty Ltd)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Policies\Google: Ограничение <==== ВНИМАНИЕ

==================== Запланированные задачи (В белом списке) =================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

Task: {B558506A-2FC8-4EB8-B272-CCCECA680BDC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-29] (Adobe Inc. -> Adobe)
Task: {EECBF372-CB63-467E-A838-2E382C7CB5A2} - System32\Tasks\CCleanerUpdateTaskMachineCore => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe  /c (Нет файла)
Task: {D867EDB1-FA35-45B6-9C15-F0C07DFF8D45} - System32\Tasks\CCleanerUpdateTaskMachineUA => C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe  /ua /installsource scheduler (Нет файла)
Task: {372ACA2B-A2E5-441D-8EFE-240EBE447B95} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{D393D545-993E-4439-AC44-B9CDA15F4ABE} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {49F0F704-EDA9-417E-819F-0C4B3DD909DA} - System32\Tasks\Microsoft\Windows\DataBaseR\RecoveryHosts => C:\ProgramData\Microsoft\MapData\avRGzE0wjNzoCDYpii\DataBaseR.bat  (Нет файла) <==== ВНИМАНИЕ
Task: {CDA1B8BC-FB06-40FC-93DD-2F534179AB5C} - System32\Tasks\Microsoft\Windows\WindowsBackup\CleanCash => C:\Programdata\ReaItekHD\taskhost.exe [21811216 2025-12-06] (Microsoft Corporation) [Файл не подписан] <==== ВНИМАНИЕ
Task: {50191CD0-67C1-4F85-96AA-B0D64707FB2C} - System32\Tasks\Microsoft\Windows\WindowsBackup\GlobalData => C:\Windows\SysWOW64\unsecapp.exe [13683216 2023-08-07] (Microsoft Corporation) [Файл не подписан] <==== ВНИМАНИЕ
Task: {C4974A60-F8B3-4E1F-9DB3-EE8553B8C7F7} - System32\Tasks\Microsoft\Windows\WindowsBackup\WinlogonCheck => C:\Programdata\ReaItekHD\taskhost.exe [21811216 2025-12-06] (Microsoft Corporation) [Файл не подписан] <==== ВНИМАНИЕ
Task: {762D65F2-1FEF-4DC9-B96C-B042C02AB898} - System32\Tasks\Microsoft\Windows\Wininet\winser => C:\ProgramData\Windows Tasks Service\winserv.exe [10675712 2021-05-28] (tox) [Файл не подписан] -> Task Service\winserv.exe <==== ВНИМАНИЕ
Task: {69A39666-6B44-49F0-AC98-F49082ABC4DA} - System32\Tasks\Microsoft\Windows\Wininet\winsers => C:\ProgramData\Windows Tasks Service\winserv.exe [10675712 2021-05-28] (tox) [Файл не подписан] -> Task Service\winserv.exe <==== ВНИМАНИЕ
Task: {AA5E9AA1-5B84-41BB-AB07-6270756956B2} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [828296 2025-09-28] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {60DF1E05-33F8-4386-913F-CB5520EF39AF} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3FCFB314-9729-4774-A91B-03941A252613} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2404680 2026-09-09] (Overwolf Ltd -> Overwolf LTD) -> C:\Program Files (x86)\Overwolf\/RunningFrom Schedule
Task: {B727680A-4F61-45D1-835A-BD051EC6E7CE} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Task: {6D98E89D-DD8D-4CAE-A4D3-E536B8FB9488} - System32\Tasks\Восстановление сервиса обновлений Яндекс Браузера => C:\Program Files (x86)\Yandex\YandexBrowser\26.8.2.1064\service_update.exe [5342152 2026-09-17] (YANDEX LLC -> YANDEX LLC)
Task: {98D619F4-89C5-49C2-B70A-BB4138BE34E2} - System32\Tasks\Восстановление сервиса обновлений Яндекс.Браузера => C:\Program Files (x86)\Yandex\YandexBrowser\22.1.1.1544\service_update.exe  --repair (Нет файла)
Task: {6070627D-ABA9-48D0-AB2E-9A0B17A26B82} - System32\Tasks\Обновление Браузера Яндекс => C:\Program Files\Yandex\YandexBrowser\Application\browser.exe [6183880 2026-09-10] (YANDEX LLC -> YANDEX LLC)
Task: {2B187811-5EAF-404B-9ACD-829771E0FBD8} - System32\Tasks\Системное обновление Браузера Яндекс => C:\Program Files (x86)\Yandex\YandexBrowser\26.8.2.1064\service_update.exe [5342152 2026-09-17] (YANDEX LLC -> YANDEX LLC)

(Если запись включена в fixlist, файл задачи (.job) будет перемещён. Файл, выполняемый задачей, не будет перемещён.)

Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
Task: C:\WINDOWS\Tasks\Восстановление сервиса обновлений Яндекс.Браузера.job => C:\Program Files (x86)\Yandex\YandexBrowser\22.1.1.1544\service_update.exe
Task: C:\WINDOWS\Tasks\Восстановление сервиса обновлений Яндекс Браузера.job => C:\Program Files (x86)\Yandex\YandexBrowser\26.8.2.1064\service_update.exe
Task: C:\WINDOWS\Tasks\Обновление Браузера Яндекс.job => C:\Program Files\Yandex\YandexBrowser\Application\browser.exe
Task: C:\WINDOWS\Tasks\Системное обновление Браузера Яндекс.job => C:\Program Files (x86)\Yandex\YandexBrowser\26.8.2.1064\service_update.exe

==================== Internet (В белом списке) ====================

(Если элемент включён в fixlist, если он является элементом реестра, он будет удалён или сброшен на значение по умолчанию.)

Hosts: В Hosts файле более одной записи. Смотрите раздел Hosts Addition.txt
Tcpip\Parameters: [DhcpNameServer] 89.207.216.1 95.131.144.199
Tcpip\..\Interfaces\{20d86390-e495-4499-8032-057634485645}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{20d86390-e495-4499-8032-057634485645}: [DhcpDomain] lan
Tcpip\..\Interfaces\{20d86390-e495-4499-8032-057634485645}\235333F57596D2649653: [DhcpNameServer] 192.168.3.1
Tcpip\..\Interfaces\{20d86390-e495-4499-8032-057634485645}\34F6D6D6562737: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{20d86390-e495-4499-8032-057634485645}\35E425D2340554D254734344: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{20d86390-e495-4499-8032-057634485645}\35E425D2340554D254734344: [DhcpDomain] lan
Tcpip\..\Interfaces\{6b95b1dc-4928-42de-8316-361654cfc534}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\235333: [DhcpNameServer] 192.168.3.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\235333F57596D2649653: [DhcpNameServer] 192.168.3.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\27461353F5D696E65647F553466613: [DhcpNameServer] 192.168.31.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\3577565647F584F6D656: [DhcpNameServer] 192.168.3.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\35E425D2340554D254734344: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\35E425D2340554D254734344: [DhcpDomain] lan
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\35E425D2340554D254734344D2537484A5: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\35E425D2340554D254734344D2537484A5: [DhcpDomain] lan
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\859616F6D696F553446413: [DhcpNameServer] 192.168.31.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\859616F6D696F554736364F513839303: [DhcpNameServer] 192.168.31.1
Tcpip\..\Interfaces\{81b2c6af-7093-4de9-afb1-bb52faf1a95e}\B45656E656479636D283833323: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{a2000109-53a3-4f26-8ce8-28520bb7af03}: [DhcpNameServer] 89.207.216.1 95.131.144.199
Tcpip\..\Interfaces\{b9b8a374-081c-463f-87cb-8c04d6c5f0ce}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{b9c88bdf-52a9-4dbd-9223-878e029266df}: [DhcpNameServer] 89.207.216.1 95.131.144.199
Tcpip\..\Interfaces\{ef72fcbe-a09b-4ad0-9a9b-86e83607ea83}: [DhcpNameServer] 192.168.1.1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ограничение <==== ВНИМАНИЕ

FireFox:
========
FF ProfilePath: C:\Users\i3\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default [2026-09-17]
FF Homepage: Mozilla\Firefox\Profiles\nahd6ha2.default -> hxxps://www.yandex.ru/?win=430&clid=2353491-306
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=3 -> C:\Program Files (x86)\CCleaner Browser\Update\1.6.607.0\npCCleanerBrowserUpdate3.dll [Нет файла]
FF Plugin-x32: @update.ccleanerbrowser.com/CCleaner Browser;version=9 -> C:\Program Files (x86)\CCleaner Browser\Update\1.6.607.0\npCCleanerBrowserUpdate3.dll [Нет файла]
FF Plugin HKU\S-1-5-21-1164950338-3024807286-287954337-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default [2026-02-24]
Edge StartupUrls: Default -> "hxxps://go.microsoft.com/fwlink/?LinkId=625119&clcid=0x419"
Edge DefaultSearchURL: Default -> hxxps://yandex.ru/search/?from=chromesearch&clid=2224314&text={searchTerms}
Edge DefaultSearchKeyword: Default -> yandex.ru
Edge DefaultSuggestURL: Default -> hxxps://suggest.yandex.net/suggest-ff.cgi?uil=ru&part={searchTerms}
Edge Extension: (Google Переводчик) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2026-02-07]
Edge Extension: (Merkatys - бесплатная аналитика и подбор ниши на Wildberries) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bpmjjnloopaffnbhhbaoablngpnamgcd [2026-02-07]
Edge Extension: (EVIRMA 2 — экспертная аналитика продвижения и рекламы на Wildberries) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\deonmlokidjdcbcihdjdoebmihbmnfdc [2026-02-21]
Edge Extension: (Keplr) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dmkamcknogkgcdfhhbddcghachkejeap [2026-02-21]
Edge Extension: (UiPath) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dpncpimghfponcpjkgihfikppbbhchil [2026-02-07]
Edge Extension: (MetaMask) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ejbalbakoplchlghecdalmeeeajnimhm [2026-02-07]
Edge Extension: (Topview AI extension: Turn Your Product Into Viral Videos) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ekgpeagdnmojiophbfpdaahimmfibpfm [2026-02-07]
Edge Extension: (Dark Mode - Dark Theme for Chrome) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\epbpdmalnhhoggbcckpffgacohbmpapb [2026-02-07]
Edge Extension: (CodeMP - Автоматизация Wildberries) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gfcbkgmonbgmdiilglimnapbcmmdopck [2026-02-21]
Edge Extension: (Google Документы офлайн) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-02-07]
Edge Extension: (mkeeper) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hgldjkalfmhnlaldjageiphbhfacieip [2026-02-21]
Edge Extension: (Dark Reader) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ifoakfbpdcdoeenechcleahebpibofpc [2026-02-21]
Edge Extension: (МАЯК - бесплатная аналитика маркетплейсов Wildberries и OZON) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\iobjoojnnfjhlfmihckakpcgljgpmnih [2026-02-07]
Edge Extension: (Edge relevant text changes) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-10-04]
Edge Extension: (Video DownloadHelper) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmkaglaafmhbcpleggkmaliipiilhldn [2026-02-21]
Edge Extension: (Tag Assistant) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2026-02-07]
Edge Extension: (Market Papa) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kldnjmokiohapeeddlidpaakpikjkjpk [2026-02-07]
Edge Extension: (AliPrice инструмент для закупок) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lenipkahddombkldhfmcnnjakmcepdlk [2026-02-10]
Edge Extension: (Dark Theme - Dark Reader for Web) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ljjmnbjaapnggdiibfleeiaookhcodnl [2026-02-07]
Edge Extension: (Yandex Wordstat Assistant) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nbihjogngdgindfodcjbelhgjdpmkolc [2026-02-07]
Edge Extension: (Яндекс) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nehapofakghljopfegjogpgpeljkhjjn [2026-02-07]
Edge Extension: (MPSTATS - аналитика Wildberries и OZON) - C:\Users\i3\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pjbepnginjokklnhdgladnmlghcchbeb [2026-02-21]

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\i3\AppData\Local\Google\Chrome\User Data\Default [2025-08-20]
CHR DefaultSearchURL: Default -> hxxps://yandex.ru/{yandex:searchPath}?text={searchTerms}&{yandex:referralID}&clid=2871230&win=666
CHR DefaultSearchKeyword: Default -> yandex
CHR DefaultNewTabURL: Default -> hxxps://www.yandex.ru/chrome/newtab
CHR DefaultSuggestURL: Default -> hxxps://suggest.yandex.ru/suggest-ff.cgi?part={searchTerms}&{google:cursorPosition}
CHR Extension: (Платежная система Интернет-магазина Chrome) - C:\Users\i3\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-08-19]
CHR Profile: C:\Users\i3\AppData\Local\Google\Chrome\User Data\Profile 1 [2026-09-17]
CHR HomePage: Profile 1 -> hxxp://www.hse.ru/
CHR StartupUrls: Profile 1 -> "hxxps://yandex.com/"
CHR Profile: C:\Users\i3\AppData\Local\Google\Chrome\User Data\System Profile [2026-09-05]
CHR HKU\S-1-5-21-1164950338-3024807286-287954337-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjmpfdkmpojoeemjmfiddlhkkndcdpno]

Yandex: 
=======
YAN DefaultProfile: Default
YAN Profile: C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default [2026-09-17]
YAN Extension: (Google Переводчик) - C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2026-09-17]
YAN Extension: (EVIRMA 2 — экспертная аналитика продвижения и рекламы на Wildberries) - C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\deonmlokidjdcbcihdjdoebmihbmnfdc [2026-09-17]
YAN Extension: (Dark Reader) - C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2026-09-17]
YAN Extension: (Dark Mode - Dark Theme for Chrome) - C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\epbpdmalnhhoggbcckpffgacohbmpapb [2026-09-17]
YAN Extension: (Claude) - C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\fcoeoabgfenejglbffodgkkbkcdhcgfn [2026-09-17]
YAN Extension: (CodeMP - Автоматизация Wildberries) - C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\gfcbkgmonbgmdiilglimnapbcmmdopck [2026-09-17]
YAN Extension: (Dark Theme - Dark Reader for Web) - C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\ljjmnbjaapnggdiibfleeiaookhcodnl [2026-09-17]
YAN Extension: (Video Download Helper) - C:\Users\i3\AppData\Local\Yandex\YandexBrowser\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2026-09-17]

==================== Службы (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-29] (Adobe Inc. -> Adobe)
S2 amd3dvcacheSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amd3dvcache.inf_amd64_7f6e65f73e9a92f6\amd3dvcacheSvc.exe [188504 2025-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc)
S2 AmdAppCompatSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompatSvc.exe [300872 2025-01-02] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [2573448 2024-10-01] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [18991400 2025-08-20] (BattlEye Innovations e.K. -> )
S2 CleanMyPCService; C:\Program Files\CleanMyPC\CleanMyPCService.exe [493680 2018-11-02] (MacPaw INC -> MacPaw Inc.)
S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [173741304 2026-01-30] (Electronic Arts, Inc. -> Electronic Arts)
S3 FACEITService; C:\Program Files\FACEIT AC\faceitservice.exe [20663136 2020-05-24] (FACE IT LIMITED -> )
S2 ggsvc; C:\Program Files (x86)\GameGuard\acsvc.exe [5148016 2020-05-15] (OnMoon Company LLC -> )
S3 HappService; C:\Program Files\FlyFrogLLC\Happ\happd.exe [373760 2026-01-19] () [Файл не подписан]
S2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10545056 2021-04-05] (Logitech Inc -> Logitech, Inc.)
S3 msiv; C:\Program Files\GIGABYTE\Control Center\Lib\Sidekick\msiv.exe [17000 2022-08-08] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b20cc8aeaed64fc2\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-09-06] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2404680 2026-09-09] (Overwolf Ltd -> Overwolf LTD)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2026-01-24] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Uncheater\ucldr_battlegrounds_gl.exe [6979584 2020-12-10] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WifiAutoInstallSrv; C:\Program Files\Realtek\WifiAutoInstallSrv.exe [144664 2022-10-24] (Realtek Semiconductor Corp. -> Realtek)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 YandexBrowserService; C:\Program Files (x86)\Yandex\YandexBrowser\26.8.2.1064\service_update.exe [5342152 2026-09-17] (YANDEX LLC -> YANDEX LLC)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [26193816 2025-08-20] (KRAFTON, Inc. -> KRAFTON, Inc.)

===================== Драйверы (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

S3 acdrv; C:\Windows\system32\drivers\acdrv.sys [4735368 2020-05-30] (OnMoon Company LLC -> )
R3 amd3dvcache; C:\WINDOWS\System32\DriverStore\FileRepository\amd3dvcache.inf_amd64_7f6e65f73e9a92f6\amd3dvcache.sys [43328 2025-05-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
R3 AmdAppCompat; C:\WINDOWS\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompat.sys [35144 2025-01-02] (Advanced Micro Devices -> Advanced Micro Devices)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_9089120be4c72627\amdfendrmgr.sys [67264 2025-10-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [33592 2024-09-12] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
S3 amduw23g-420529-5f0fe368; C:\WINDOWS\System32\DriverStore\FileRepository\u0420529.inf_amd64_94ad5a6c4d1a04e2\B419765\amdkmdag.sys [101819840 2025-10-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
S0 FACEIT; C:\WINDOWS\System32\Drivers\FACEIT.sys [9745800 2020-05-24] (FACE IT LIMITED -> )
S2 LGHUBTemperatureService; C:\Program Files\LGHUB\logi_core_temp.sys [22864 2021-04-05] (Logitech Inc -> Logitech)
S2 libwamf; C:\WINDOWS\System32\DRIVERS\libwamf.sys [40800 2021-02-24] (OPSWAT, Inc. -> OPSWAT, Inc.)
S2 libwasys; C:\WINDOWS\system32\DRIVERS\libwasys.sys [38776 2021-02-24] (OPSWAT, Inc. -> OPSWAT, Inc.)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [37200 2021-03-17] (Logitech Inc -> Logitech)
S3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [25928 2021-03-17] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [66896 2021-03-17] (Logitech Inc -> Logitech)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12423864 2025-08-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2020-06-01] (Valve Corp. -> )
S3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2020-06-01] (Valve Corp. -> )
S3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-07-24] (TEFINCOM S.A. -> The OpenVPN Project)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2026-01-26] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2732984 2020-12-24] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]
S4 NvModuleTracker; \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [X]

==================== NetSvcs (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)


==================== Один месяц (создан) (В белом списке) =========

(Если запись включена в лист исправлений, файл/папка будут перемещены.)

Ошибка при чтении файла: "C:\ProgramData\Desktop\Yandex.lnk"
Ошибка при чтении файла: "C:\ProgramData\Desktop\TeamSpeak 3 Client.lnk"
Ошибка при чтении файла: "C:\ProgramData\Desktop\Overwolf.lnk"
Ошибка при чтении файла: "C:\ProgramData\Desktop\NVIDIA App.lnk"
Ошибка при чтении файла: "C:\ProgramData\Desktop\Happ.lnk"
Ошибка при чтении файла: "C:\ProgramData\Desktop\GCC.lnk"
Ошибка при чтении файла: "C:\ProgramData\Desktop\desktop.ini"
2026-09-17 20:06 - 2026-09-17 20:06 - 000028252 _____ C:\Users\i3\Downloads\FRST.txt
2026-09-17 20:05 - 2026-09-17 20:05 - 002445824 _____ (Farbar) C:\Users\i3\Downloads\farbar-recovery-scan-tool-18-04-2026.exe
2026-09-17 19:54 - 2026-09-17 19:54 - 009619202 _____ C:\Users\i3\Downloads\AVbr.zip
2026-09-17 19:53 - 2026-09-17 20:05 - 000361760 _____ C:\WINDOWS\ntbtlog.txt
2026-09-17 19:53 - 2026-09-17 19:53 - 000269664 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-17 19:30 - 2026-09-17 19:30 - 000002457 _____ C:\Users\i3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex.lnk
2026-09-17 19:30 - 2026-09-17 19:30 - 000000000 ____D C:\Users\i3\AppData\Roaming\Yandex
2026-09-17 19:30 - 2026-09-17 19:30 - 000000000 ____D C:\ProgramData\Yandex
2026-09-17 19:09 - 2026-09-17 19:09 - 003183752 _____ C:\Users\i3\Downloads\Autoruns.zip
2026-09-17 19:09 - 2026-09-17 19:09 - 000000000 ____D C:\Users\i3\Downloads\Autoruns
2026-09-17 18:46 - 2026-09-17 18:46 - 000000000 ____D C:\Users\i3\Downloads\mb_driver_612_realtekdch_6.0.9927.1
2026-09-17 18:45 - 2026-09-17 18:45 - 176026808 _____ C:\Users\i3\Downloads\mb_driver_612_realtekdch_6.0.9927.1.zip
2026-09-17 18:45 - 2026-01-06 11:36 - 176026528 ____N (Igor Pavlov) C:\Users\i3\Downloads\mb_driver_612_realtekdch_6.0.9927.1.exe
2026-09-17 16:42 - 2026-09-17 16:42 - 000000000 ____D C:\WINDOWS\Minidumps
2026-09-17 07:45 - 2026-09-06 10:57 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-09-17 07:45 - 2026-09-06 10:57 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-09-17 07:45 - 2026-09-06 10:57 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-09-17 07:45 - 2026-09-06 10:57 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-09-17 07:45 - 2026-09-06 10:57 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-09-17 07:45 - 2026-09-06 10:57 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-09-17 07:45 - 2026-09-06 10:57 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-09-17 07:45 - 2026-09-06 10:57 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-09-17 07:45 - 2026-09-06 10:57 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-09-17 07:45 - 2026-09-06 10:57 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-09-17 07:45 - 2026-09-06 10:53 - 001701608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-09-17 07:45 - 2026-09-06 10:53 - 001594600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-09-17 07:45 - 2026-09-06 10:53 - 001499368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-09-17 07:45 - 2026-09-06 10:53 - 001240808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-09-17 07:45 - 2026-09-06 10:53 - 000685800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-09-17 07:45 - 2026-09-06 10:53 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-09-17 07:45 - 2026-09-06 10:52 - 028185320 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-09-17 07:45 - 2026-09-06 10:52 - 002343144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-09-17 07:45 - 2026-09-06 10:52 - 001734888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-09-17 07:45 - 2026-09-06 10:52 - 001077992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-09-17 07:45 - 2026-09-06 10:52 - 000828136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-09-17 07:45 - 2026-09-06 10:52 - 000470760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-09-17 07:45 - 2026-09-06 10:51 - 032279784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-09-17 07:45 - 2026-09-06 10:51 - 020934376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-09-17 07:45 - 2026-09-06 10:51 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-09-17 07:45 - 2026-09-06 10:51 - 006052584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-09-17 07:45 - 2026-09-06 10:51 - 005926120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-09-17 07:45 - 2026-09-06 10:51 - 004790504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-09-17 07:45 - 2026-09-06 10:51 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-09-17 07:45 - 2026-09-06 10:51 - 000574040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-09-17 07:45 - 2026-09-06 10:51 - 000442640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-09-17 07:45 - 2026-09-05 06:07 - 000176631 _____ C:\WINDOWS\system32\nvinfo.pb
2026-09-17 07:45 - 2026-09-05 06:07 - 000134376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-09-05 03:51 - 2026-09-05 03:51 - 000000000 ____D C:\ProgramData\obs-studio
2026-09-05 03:50 - 2026-09-17 16:43 - 000000000 ____D C:\Program Files (x86)\Overwolf
2026-09-05 03:50 - 2026-09-17 16:42 - 000002311 _____ C:\Users\i3\Desktop\TeamSpeak Overlay.lnk
2026-09-05 03:50 - 2026-09-05 03:50 - 000004410 _____ C:\WINDOWS\system32\Tasks\Overwolf Updater Task
2026-09-05 03:50 - 2026-09-05 03:50 - 000001178 _____ C:\Users\Public\Desktop\Overwolf.lnk
2026-09-05 03:50 - 2026-09-05 03:50 - 000000000 ____D C:\Users\i3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2026-09-05 03:50 - 2026-09-05 03:50 - 000000000 ____D C:\ProgramData\Overwolf
2026-09-05 03:34 - 2026-09-05 06:25 - 000000000 ____D C:\Users\i3\AppData\Roaming\TS3Client
2026-09-05 03:34 - 2026-09-05 03:34 - 000000000 ____D C:\Users\i3\AppData\Local\TeamSpeak 3
2026-09-05 03:33 - 2026-09-17 16:42 - 000000000 ____D C:\Users\i3\AppData\Local\Overwolf
2026-09-05 03:31 - 2026-09-05 03:31 - 000001008 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2026-09-05 03:31 - 2026-09-05 03:31 - 000000970 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2026-09-05 03:31 - 2026-09-05 03:31 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client
2026-09-05 03:10 - 2026-09-05 03:10 - 000002599 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WSL.lnk
2026-09-05 03:10 - 2026-09-05 03:10 - 000002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WSL Settings.lnk
2026-09-05 03:10 - 2026-09-05 03:10 - 000000000 ____D C:\Program Files\WSL
2026-09-05 02:12 - 2026-08-31 13:16 - 000062696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2026-09-05 01:46 - 2026-09-05 01:49 - 113041880 _____ (TeamSpeak Systems GmbH) C:\Users\i3\Downloads\TeamSpeak3-Client-win64-3.6.2.exe
2026-09-03 19:34 - 2026-09-03 19:34 - 000000000 ____D C:\Users\i3\AppData\LocalLow\AMD

==================== Один месяц (изменён) ==================

(Если запись включена в лист исправлений, файл/папка будут перемещены.)

2026-09-17 20:06 - 2026-02-06 06:20 - 000000000 ____D C:\FRST
2026-09-17 19:57 - 2020-06-30 10:54 - 001752888 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-17 19:57 - 2019-12-07 17:34 - 000770570 _____ C:\WINDOWS\system32\perfh019.dat
2026-09-17 19:57 - 2019-12-07 17:34 - 000151816 _____ C:\WINDOWS\system32\perfc019.dat
2026-09-17 19:57 - 2019-12-07 12:13 - 000000000 ____D C:\WINDOWS\INF
2026-09-17 19:53 - 2026-01-24 22:21 - 000008192 ___SH C:\DumpStack.log.tmp
2026-09-17 19:53 - 2019-12-07 12:14 - 000000000 ____D C:\WINDOWS\ServiceState
2026-09-17 19:52 - 2026-01-19 03:35 - 000003136 _____ C:\WINDOWS\system32\Tasks\MSIAfterburner
2026-09-17 19:52 - 2026-01-19 03:27 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2026-09-17 19:52 - 2023-09-03 18:04 - 000000466 _____ C:\WINDOWS\Tasks\Восстановление сервиса обновлений Яндекс Браузера.job
2026-09-17 19:52 - 2020-06-30 10:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-17 19:52 - 2020-06-30 10:19 - 000000000 ____D C:\Users\i3
2026-09-17 19:52 - 2020-03-29 11:46 - 000000506 _____ C:\WINDOWS\Tasks\Системное обновление Браузера Яндекс.job
2026-09-17 19:52 - 2019-12-07 12:03 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2026-09-17 19:42 - 2020-04-07 02:49 - 000000000 ____D C:\Program Files (x86)\Steam
2026-09-17 19:36 - 2023-09-05 23:52 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-17 19:30 - 2020-03-29 11:46 - 000000430 _____ C:\WINDOWS\Tasks\Обновление Браузера Яндекс.job
2026-09-17 19:17 - 2020-03-29 11:46 - 000000000 ____D C:\Users\i3\AppData\Local\Yandex
2026-09-17 19:16 - 2020-03-29 04:26 - 000000000 ____D C:\Program Files\Realtek
2026-09-17 18:47 - 2020-02-19 10:54 - 000000000 ___HD C:\Program Files (x86)\Temp
2026-09-17 18:44 - 2020-06-30 10:49 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-17 17:52 - 2020-03-29 07:34 - 000000000 ____D C:\Users\i3\AppData\Local\D3DSCache
2026-09-17 17:52 - 2019-12-07 12:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-17 17:26 - 2020-02-19 10:50 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-17 16:50 - 2021-02-11 11:31 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-09-17 16:43 - 2021-02-11 11:31 - 000003666 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-17 16:43 - 2021-02-11 11:31 - 000003594 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-17 16:43 - 2020-03-29 04:27 - 000000000 ____D C:\Users\i3\AppData\Local\NVIDIA
2026-09-17 07:48 - 2026-02-09 04:17 - 000000000 ____D C:\WINDOWS\LastGood
2026-09-17 07:48 - 2026-01-19 00:48 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-09-17 04:36 - 2026-02-17 21:04 - 000002274 _____ C:\Users\Public\Desktop\Yandex.lnk
2026-09-17 04:36 - 2023-09-03 18:04 - 000003570 _____ C:\WINDOWS\system32\Tasks\Восстановление сервиса обновлений Яндекс Браузера
2026-09-17 04:36 - 2020-06-30 10:53 - 000003680 _____ C:\WINDOWS\system32\Tasks\Системное обновление Браузера Яндекс
2026-09-17 03:32 - 2020-03-29 12:00 - 000000000 ____D C:\Users\i3\AppData\Local\NVIDIA Corporation
2026-09-17 02:20 - 2025-10-08 21:35 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-09-05 05:11 - 2026-02-09 02:29 - 000000000 ____D C:\Users\i3\AppData\Local\AMD
2026-09-05 03:12 - 2019-12-07 12:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-05 03:08 - 2019-12-07 12:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-05 02:14 - 2026-01-23 14:27 - 000003834 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-09-05 02:14 - 2026-01-23 14:27 - 000001430 _____ C:\Users\Public\Desktop\NVIDIA App.lnk
2026-09-05 02:14 - 2020-02-19 10:50 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2026-09-05 02:14 - 2020-02-19 10:39 - 000000000 ____D C:\ProgramData\Package Cache
2026-09-05 01:48 - 2020-06-06 21:16 - 000000000 ____D C:\Users\i3\AppData\Roaming\Telegram Desktop
2026-09-03 19:53 - 2020-03-29 06:58 - 000000000 ____D C:\Users\i3\AppData\Local\ElevatedDiagnostics
2026-09-03 19:42 - 2020-03-29 08:01 - 000000000 ____D C:\Users\i3\AppData\Local\Steam
2026-08-31 13:39 - 2026-01-23 14:27 - 001456752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2026-08-31 13:39 - 2026-01-23 14:27 - 001255024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2026-08-31 13:39 - 2020-11-23 09:34 - 000274032 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2026-08-31 13:37 - 2020-11-23 09:34 - 000301168 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2026-08-31 13:16 - 2026-01-23 14:27 - 000192232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2026-08-31 13:16 - 2026-01-23 14:27 - 000168680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap32v.dll
2026-08-31 13:16 - 2026-01-23 14:27 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat

==================== Файлы в корне каталогов ========

2024-10-03 01:11 - 2024-10-03 01:11 - 000208896 _____ () C:\Users\i3\AppData\Roaming\emp.bin
2026-01-27 04:17 - 2026-01-28 10:26 - 000007602 _____ () C:\Users\i3\AppData\Local\Resmon.ResmonCfg

==================== FLock ==============================

2026-02-06 06:20 C:\_MinerSearchLogs
2026-02-06 06:20 C:\Program Files\AVAST Software
2026-02-06 06:20 C:\Program Files\AVG
2026-02-06 06:20 C:\Program Files\Bitdefender Agent
2026-02-06 06:20 C:\Program Files\ByteFence
2026-02-06 06:20 C:\Program Files\Cezurity
2026-02-06 06:20 C:\Program Files\COMODO
2026-02-06 06:20 C:\Program Files\DrWeb
2026-02-06 06:20 C:\Program Files\Enigma Software Group
2026-02-06 06:20 C:\Program Files\EnigmaSoft
2026-02-06 06:20 C:\Program Files\ESET
2026-02-06 06:20 C:\Program Files\HitmanPro
2026-02-06 06:20 C:\Program Files\Kaspersky Lab
2026-02-06 06:20 C:\Program Files\Loaris Trojan Remover
2026-02-06 06:20 C:\Program Files\Malwarebytes
2026-02-06 06:20 C:\Program Files\NETGATE
2026-02-06 06:20 C:\Program Files\Process Hacker 2
2026-02-06 06:20 C:\Program Files\Process Lasso
2026-02-06 06:20 C:\Program Files\QuickCPU
2026-02-06 06:20 C:\Program Files\Rainmeter
2026-02-06 06:20 C:\Program Files\Ravantivirus
2026-02-06 06:20 C:\Program Files\ReasonLabs
2026-02-06 06:20 C:\Program Files\RogueKiller
2026-02-06 06:20 C:\Program Files\SpyHunter
2026-02-06 06:20 C:\Program Files\SUPERAntiSpyware
2026-02-06 06:20 C:\Program Files\Transmission
2026-02-06 06:20 C:\Program Files (x86)\360
2026-02-06 06:20 C:\Program Files (x86)\AVAST Software
2026-02-06 06:20 C:\Program Files (x86)\AVG
2026-02-06 06:20 C:\Program Files (x86)\Cezurity
2026-02-06 06:20 C:\Program Files (x86)\GPU Temp
2026-02-06 06:20 C:\Program Files (x86)\GRIZZLY Antivirus
2026-02-06 06:20 C:\Program Files (x86)\Kaspersky Lab
2026-02-06 06:20 C:\Program Files (x86)\Microsoft JDX
2026-02-06 06:20 C:\Program Files (x86)\Moo0
2026-02-06 06:20 C:\Program Files (x86)\Panda Security
2026-02-06 06:20 C:\Program Files (x86)\SpeedFan
2026-02-06 06:20 C:\Program Files (x86)\SpyHunter
2026-02-06 06:20 C:\Program Files (x86)\Transmission
2026-02-06 06:20 C:\Program Files (x86)\Wise
2026-02-06 06:20 C:\Program Files\Common Files\AV
2026-02-06 06:20 C:\Program Files\Common Files\Doctor Web
2026-02-06 06:20 C:\Program Files\Common Files\McAfee
2026-02-06 06:20 C:\ProgramData\360safe
2024-10-03 00:46 C:\ProgramData\Avast Software
2026-02-06 06:20 C:\ProgramData\Avira
2026-02-06 06:20 C:\ProgramData\BookManager
2026-02-06 06:20 C:\ProgramData\Doctor Web
2026-02-06 06:20 C:\ProgramData\ESET
2026-02-06 06:20 C:\ProgramData\Evernote
2026-02-06 06:20 C:\ProgramData\FingerPrint
2026-02-06 06:20 C:\ProgramData\grizzly
2026-02-06 06:20 C:\ProgramData\Kaspersky Lab
2026-02-06 06:20 C:\ProgramData\Kaspersky Lab Setup Files
2026-02-06 06:20 C:\ProgramData\McAfee
2026-02-06 06:20 C:\ProgramData\Norton
2026-02-06 06:20 C:\ProgramData\princeton-produce
2026-02-06 06:20 C:\ProgramData\PuzzleMedia
2026-02-06 06:20 C:\ProgramData\RobotDemo
2026-02-06 06:20 C:\ProgramData\WavePad
2026-02-06 06:20 C:\Users\i3\Desktop\AutoLogger
2026-02-06 06:20 C:\Users\i3\Desktop\AV_block_remover
2026-02-06 06:20 C:\Users\i3\Downloads\AutoLogger
2026-02-06 06:20 C:\Users\i3\Downloads\AV_block_remover
2026-02-06 06:20 C:\Users\i3\AppData\Roaming\Sysfiles

==================== SigCheck ============================

(Нет автоматического исправления файлов, которые не проходят проверку.)

==================== Конец от FRST.txt ========================