Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-11-2025 Ran by Lara (25-12-2025 14:19:42) Running from C:\Users\Lara\Downloads Майкрософт Windows 10 Домашняя Version 22H2 19045.5247 (X64) (2021-10-11 21:19:40) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= (If an entry is included in the fixlist, it will be removed.) DefaultAccount (S-1-5-21-3844586854-2832619778-3748133936-503 - Limited - Disabled) defaultuser1 (S-1-5-21-3844586854-2832619778-3748133936-1011 - Limited - Enabled) => C:\Users\defaultuser1.DESKTOP-OOO0RBD.001 kiril (S-1-5-21-3844586854-2832619778-3748133936-1002 - Limited - Enabled) => C:\Users\kiril Lara (S-1-5-21-3844586854-2832619778-3748133936-1001 - Administrator - Enabled) => C:\Users\Lara WDAGUtilityAccount (S-1-5-21-3844586854-2832619778-3748133936-504 - Limited - Disabled) Администратор (S-1-5-21-3844586854-2832619778-3748133936-500 - Administrator - Disabled) Гость (S-1-5-21-3844586854-2832619778-3748133936-501 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: ESET Security (Disabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Security (Enabled - Up to date) {255E32D5-E2F8-754A-3F87-286C949C5537} FW: ESET Файервол (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) @BIOS (HKLM-x32\...\{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 4.19.0619.1 - GIGABYTE) Hidden @BIOS (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 4.19.0619.1 - GIGABYTE) µTorrent (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\uTorrent) (Version: 3.6.0.47224 - BitTorrent Limited) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.8.1.856 - Adobe Inc.) Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_7) (Version: 20.0.7 - Adobe Systems Incorporated) AMD Ryzen Master (HKLM\...\{02247819-03CD-414E-AC8D-FD518BFBA445}) (Version: 2.12.0.2806 - Advanced Micro Devices, Inc.) Hidden AMD Ryzen Master (HKLM\...\AMD Ryzen Master) (Version: 2.12.0.2806 - Advanced Micro Devices, Inc.) AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.16 - Advanced Micro Devices, Inc.) APP Center (HKLM-x32\...\{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.19.0503.1 - GIGABYTE) Hidden APP Center (HKLM-x32\...\InstallShield_{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.19.0503.1 - GIGABYTE) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach) Autodesk Material Library 2019 (HKLM-x32\...\{8F69EE2C-DC34-4746-9B47-7511147BD4B0}) (Version: 17.11.3.0 - Autodesk) AutoGreen (HKLM-x32\...\{CFB76B97-0C1C-4E1A-999A-DE62FA5FEB9A}) (Version: 1.18.0911.1 - GIGABYTE) Hidden AutoGreen (HKLM-x32\...\InstallShield_{CFB76B97-0C1C-4E1A-999A-DE62FA5FEB9A}) (Version: 1.18.0911.1 - GIGABYTE) avoVPN 1.2.2 (HKLM-x32\...\avoVPN) (Version: 1.2.2 - avoVPN) Balanced (HKLM-x32\...\{0EA45DD4-A825-420C-AFED-C659EFE3B84F}) (Version: 4.00.0000 - Advanced Micro Devices, Inc.) Hidden Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Brotorrent - Torrent Client 2.4.6 (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\710ca060-f330-56ed-b448-69607fd2a7b8) (Version: 2.4.6 - ) BUSB (HKLM-x32\...\{0AADC50C-C4F8-49A7-8699-AFE46875CA67}) (Version: 2.18.0918.1 - GIGABYTE) CCleaner (HKLM\...\CCleaner) (Version: 6.39 - Piriform) Cloud Station (Server) (HKLM-x32\...\{5D132D9D-2A99-48CF-9DCC-775DF6F31384}) (Version: 3.19.0529.1 - GIGABYTE) Hidden Cloud Station (Server) (HKLM-x32\...\InstallShield_{5D132D9D-2A99-48CF-9DCC-775DF6F31384}) (Version: 3.19.0529.1 - GIGABYTE) CloudStation (HKLM-x32\...\{6D8DA122-A40A-421B-9D95-FE4C806BCDBE}) (Version: 1.00.0030 - GIGABYTE) Hidden CloudStation (HKLM-x32\...\InstallShield_{6D8DA122-A40A-421B-9D95-FE4C806BCDBE}) (Version: 1.00.0030 - GIGABYTE) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 12.2.0.2259 - Disc Soft Ltd) Dazzle Video Capture DVC100 X64 Driver 1.08 (HKLM-x32\...\{FB4B9EB9-68B2-4C42-8C38-B65F8FE5A5CA}) (Version: 1.08.0000 - Pinnacle) Discord (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Discord) (Version: 1.0.9219 - Discord Inc.) Discord (HKU\S-1-5-21-3844586854-2832619778-3748133936-1002\...\Discord) (Version: 1.0.9003 - Discord Inc.) EasyTune (HKLM-x32\...\{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.19.1114.1 - GIGABYTE) Hidden EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.19.1114.1 - GIGABYTE) EasyTuneEngineService (HKLM-x32\...\{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.19.1114.1 - GIGABYTE) Hidden EasyTuneEngineService (HKLM-x32\...\InstallShield_{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.19.1114.1 - GIGABYTE) ENE RGB HAL (HKLM\...\{87316426-A33E-41E9-942B-968E928A9A47}) (Version: 1.00.10 - Ene Tech.) Hidden ENE RGB HAL (HKLM-x32\...\{9f93601b-15ea-4e69-8d7c-dfa0f29ae04e}) (Version: 1.00.10 - Ene Tech.) Hidden ENE_EHD_M2_HAL (HKLM\...\{1CD178C9-BB49-4E59-9DA6-3C152E2A9844}) (Version: 1.00.01 - ENE TECHNOLOGY INC.) Hidden ENE_EHD_M2_HAL (HKLM-x32\...\{fe81cfd3-9db4-409d-b0f9-26707d1423c6}) (Version: 1.00.01 - ENE TECHNOLOGY INC.) Hidden ESET Security (HKLM\...\{5EBE1855-7526-4CE1-BA67-10FB18C5BC7E}) (Version: 19.0.14.0 - ESET, spol. s r.o.) FACEIT (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\FACEIT) (Version: 2.0.47 - FACEIT Ltd.) Fast Boot (HKLM-x32\...\{FA8FB4F2-F524-48E1-A06C-45602FBF26CD}) (Version: 1.19.0226.1 - GIGABYTE) Hidden Fast Boot (HKLM-x32\...\InstallShield_{FA8FB4F2-F524-48E1-A06C-45602FBF26CD}) (Version: 1.19.0226.1 - GIGABYTE) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 143.0.7499.170 - Google LLC) Google Drive (HKLM-x32\...\{459CE109-4E46-4340-92BC-054642BC3BC2}) (Version: 1.31.2873.2758 - Google, Inc.) GService (HKLM-x32\...\{D9CB4282-7B2A-4840-AD1D-9DA72B973DD9}) (Version: 1.16.1202.1 - GIGABYTE) Hamachi (HKLM-x32\...\{C00E2143-38F2-49BA-AB8A-03F22F02F0A4}) (Version: 2.3.0.111 - LogMeIn, Inc.) Hidden Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.3.0.111 - LogMeIn, Inc.) Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation) Memory Cleaner 3.00 (HKLM\...\MemClean) (Version: 3.00 - KoshyJohn.com) Microsoft .NET Core Host - 3.1.8 (x64) (HKLM\...\{D375EE6D-18EF-4EC9-8260-555DEB0EE4EC}) (Version: 24.96.29220 - Microsoft Corporation) Hidden Microsoft .NET Core Host FX Resolver - 3.1.8 (x64) (HKLM\...\{907E0A78-B4DF-4E35-9878-FEE2F22B6852}) (Version: 24.96.29220 - Microsoft Corporation) Hidden Microsoft .NET Core Runtime - 3.1.8 (x64) (HKLM\...\{912B84A5-61CC-4308-B244-5C34C2C02899}) (Version: 24.96.29220 - Microsoft Corporation) Hidden Microsoft .NET Host - 6.0.25 (x64) (HKLM\...\{C7141A99-592B-4226-A4E9-B767C1D0FBAF}) (Version: 48.100.4028 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.25 (x64) (HKLM\...\{AE86D888-1404-47CC-A7BB-8D86C0503E58}) (Version: 48.100.4028 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.25 (x64) (HKLM\...\{3544B2EE-E62F-4D11-B79C-3DDEACE94DA5}) (Version: 48.100.4028 - Microsoft Corporation) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 143.0.3650.96 - Корпорация Майкрософт) Microsoft Excel MUI (Russian) 2016 (HKLM\...\{90160000-0016-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Groove MUI (Russian) 2016 (HKLM\...\{90160000-00BA-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office 32-bit Components 2016 (HKLM\...\{90160000-00C1-0000-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office Korrekturhilfen 2016 – Deutsch (HKLM\...\{90160000-001F-0407-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office OSM MUI (Russian) 2016 (HKLM\...\{90160000-00E1-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office OSM UX MUI (Russian) 2016 (HKLM\...\{90160000-00E2-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office Proofing (Russian) 2016 (HKLM\...\{90160000-002C-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2016 - English (HKLM\...\{90160000-001F-0409-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office Shared 32-bit MUI (Russian) 2016 (HKLM\...\{90160000-00C1-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Russian) 2016 (HKLM\...\{90160000-006E-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office Standard 2016 (HKLM\...\{90160000-0012-0000-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Office стандартный 2016 (HKLM\...\Office16.STANDARD) (Version: 16.0.4266.1001 - Microsoft Corporation) Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.222.1112.0002 - Microsoft Corporation) Microsoft OneNote MUI (Russian) 2016 (HKLM\...\{90160000-00A1-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Outlook MUI (Russian) 2016 (HKLM\...\{90160000-001A-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft PowerPoint MUI (Russian) 2016 (HKLM\...\{90160000-0018-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Publisher MUI (Russian) 2016 (HKLM\...\{90160000-0019-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation) Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{90120064-0070-0000-0000-4000000FF1CE}) (Version: 7.1.00.00 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Chinese (Simplified) (HKLM\...\{90F60804-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Chinese (Traditional) (HKLM\...\{90F60404-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Dutch (HKLM\...\{90F60413-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{90F60409-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) French (HKLM\...\{90F6040C-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) German (HKLM\...\{90F60407-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Italian (HKLM\...\{90F60410-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Japanese (HKLM\...\{90F60411-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Korean (HKLM\...\{90F60412-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Portuguese (Brazil) (HKLM\...\{90F60416-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Spanish (HKLM\...\{90F60C0A-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) Swedish (HKLM\...\{90F6041D-7000-11D3-8CFE-0150048383C9}) (Version: 7.1.0.0 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3994d355-238a-4612-af93-26d13deddef1}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 (HKLM\...\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}) (Version: 12.0.40660 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 (HKLM\...\{CB0836EC-B072-368D-82B2-D3470BF95707}) (Version: 12.0.40660 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 (HKLM-x32\...\{7DAD0258-515C-3DD4-8964-BD714199E0F7}) (Version: 12.0.40660 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 (HKLM-x32\...\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}) (Version: 12.0.40660 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.31.31103 (HKLM-x32\...\{2aaf1df0-eb13-4099-9992-962bb4e596d1}) (Version: 14.31.31103.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 (HKLM-x32\...\{c649ede4-f16a-4486-a117-dcc2f2a35165}) (Version: 14.38.33135.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433 (HKLM-x32\...\{804e7d66-ccc2-4c12-84ba-476da31d103d}) (Version: 14.42.34433.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34438 (HKLM-x32\...\{b49c10dd-4d54-45f8-ad13-fa25704456a4}) (Version: 14.42.34438.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.31.31103 (HKLM-x32\...\{41d7b770-418a-43b7-95a5-f925fff05789}) (Version: 14.31.31103.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33135 (HKLM-x32\...\{46c3b171-c15c-4137-8e1d-67eeb2985b44}) (Version: 14.38.33135.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34433 (HKLM-x32\...\{e7802eac-3305-4da0-9378-e55d1ed05518}) (Version: 14.42.34433.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34438 (HKLM-x32\...\{ba10fda9-f731-441f-a999-000bbb7ceec2}) (Version: 14.42.34438.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 3.1.8 (x64) (HKLM\...\{F3871724-6A58-425C-8E4C-4A54935AA68F}) (Version: 24.96.29220 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 3.1.8 (x64) (HKLM-x32\...\{3e04c2ef-ccc7-4fe6-a32f-f36572af0f42}) (Version: 3.1.8.29220 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 6.0.25 (x64) (HKLM\...\{E016F2B9-01FE-4FAA-882E-ECC43FA49751}) (Version: 48.100.4037 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.25 (x64) (HKLM-x32\...\{fb0500c1-f968-4621-a48b-985b52884c49}) (Version: 6.0.25.33020 - Microsoft Corporation) Microsoft Word MUI (Russian) 2016 (HKLM\...\{90160000-001B-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden NVIDIA App 11.0.5.420 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.5.420 - NVIDIA Corporation) NVIDIA FrameView SDK 1.5.11504.36206172 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.5.11504.36206172 - NVIDIA Corporation) NVIDIA USBC Driver 1.52.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.52.831.832 - NVIDIA Corporation) NVIDIA Аудиодрайвер HD 1.4.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.0.1 - NVIDIA Corporation) NVIDIA Графический драйвер 560.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 560.94 - NVIDIA Corporation) NVIDIA Системное программное обеспечение PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.2 - OBS Project) OEM Application Profile (HKLM-x32\...\{84AD2AF7-10C8-0395-66F9-FFAEB4C5DBF1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) ON_OFF Charge 2 B18.1203.1 (HKLM-x32\...\{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.18.1203.1 - GIGABYTE) Hidden ON_OFF Charge 2 B18.1203.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.18.1203.1 - GIGABYTE) Patriot Viper M2 SSD RGB (HKLM\...\{0886A906-0625-4A43-930D-AA92F6665AF4}) (Version: 1.00.00 - Patriot Memory) Hidden Patriot Viper M2 SSD RGB (HKLM-x32\...\{0edb50a3-501b-40f9-b197-0d143fdef576}) (Version: 1.00.00 - Patriot Memory) providence-projected (HKLM-x32\...\pole-promotion_is1) (Version: 1.0004297685 - providence-projected) Radmin VPN 2.0.9 (HKLM-x32\...\{C9565E46-09AE-4B03-ABAF-FD79134C9D58}) (Version: 2.0.4899.9 - Famatech) Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 4.0.563 - Razer Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.32.1206.2018 - Realtek) RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.19.1209.1 - GIGABYTE) ScoreFitter Volumes 1-2 (HKLM\...\{5CA29919-6361-4A17-91C5-6819E43794B1}) (Version: 3.0 - Corel Corporation) set.a.light 3D V3 v3.1.6 (HKLM\...\{E10A1451-8229-41AE-997E-FB606DED5B6A}_is1) (Version: v3.1.6 - elixxier GmbH) SIV (HKLM-x32\...\{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.19.1107.1 - GIGABYTE) Hidden SIV (HKLM-x32\...\InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.19.1107.1 - GIGABYTE) Smart Backup (x64) (HKLM-x32\...\{BC1FA5CF-A36F-4C61-9638-09D0B431B006}) (Version: 3.18.0911.1 - GIGABYTE) Smart Survey (HKLM-x32\...\{EF7FC172-E7C8-447F-B9A7-0FFF20F2DC36}) (Version: 1.18.0906.1 - GIGABYTE) Hidden Smart Survey (HKLM-x32\...\InstallShield_{EF7FC172-E7C8-447F-B9A7-0FFF20F2DC36}) (Version: 1.18.0906.1 - GIGABYTE) SmartKeyboard (HKLM-x32\...\{75B74C36-A9C6-4912-B4BB-C461AA36D01E}) (Version: 1.18.0730.1 - GIGABYTE) Hidden SmartKeyboard (HKLM-x32\...\InstallShield_{75B74C36-A9C6-4912-B4BB-C461AA36D01E}) (Version: 1.18.0730.1 - GIGABYTE) Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform) TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - ) Telegram Desktop (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 6.3.9 - Telegram FZ-LLC) Title Extreme (HKLM\...\{3B519225-B4B2-40B7-A431-3C6AAE2831B4}) (Version: 3.0 - Corel Corporation) TLauncher (HKLM-x32\...\TLauncher) (Version: 2.86 - TLauncher Inc.) TP-Link TL-WN821N (HKLM-x32\...\{03468BE2-4451-416D-B045-60F2101122D4}) (Version: 2.1.0 - TP-Link) Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{0746492E-47B6-4251-940C-44462DFD74BB}) (Version: 2.55.0.0 - Microsoft Corporation) Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation) UpdateAssistant (HKLM\...\{76A22428-2400-4521-96AF-7AC4A6174CA5}) (Version: 1.25.0.0 - Microsoft Corporation) Hidden uTorrentClient 2.7.5 (HKLM\...\ff666c40-5268-5b3e-8142-9834f8ae2f4e) (Version: 2.7.5 - ) Warface (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\gcgame_0.1177) (Version: 1.578 - ASTRUM LAB) WinRAR 6.10 (32-разрядная) (HKLM-x32\...\WinRAR archiver) (Version: 6.10.0 - win.rar GmbH) XSplit Broadcaster (HKLM\...\{E3CC9E48-058F-4603-A030-537CED0718DA}) (Version: 4.5.2504.2402 - XSplit) Yandex (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\YandexBrowser) (Version: 25.10.3.1021 - Yandex) Zoom (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\ZoomUMX) (Version: 5.12.9 (10650) - Zoom Video Communications, Inc.) Кнопки сервисов Яндекса на панели задач (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\YaPinLancher) (Version: 3.7.9.0 - Яндекс) Проверка работоспособности ПК Windows (HKLM\...\{16A15A77-242A-412C-86EF-C4D58BD80ED0}) (Version: 3.6.2204.08001 - Microsoft Corporation) Среда выполнения Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 143.0.3650.96 - Корпорация Майкрософт) Hidden Средства проверки правописания Microsoft Office 2016 — русский (HKLM\...\{90160000-001F-0419-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden Ускоритель Компьютера 4.25 (HKLM-x32\...\{EB9EE9A7-45C6-4F98-8463-2078E8BDC6E8}_is1) (Version: 4.25 - AMS Software) Центр управления мышью и клавиатурой (Microsoft) (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 14.41.137.0 - Корпорация Майкрософт (Microsoft Corporation)) Chrome apps: ============ Gmail (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\698172d224c2b2ca17afa01b454c41c0) (Version: 1.0 - Google\Chrome) Google Диск (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\79053be5975ad64ac9400f3feb0408a3) (Version: 1.0 - Google\Chrome) YouTube (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\49e72409672af89da301807fb7a8097c) (Version: 1.0 - Google\Chrome) Документы (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\d4f55fb1ed6bded6eb79acba7aa00952) (Version: 1.0 - Google\Chrome) Презентация (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\8b4c9506f21c730f62911f2d0505fff9) (Version: 1.0 - Google\Chrome) Таблица (HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\66d8ecff4f34858fe8a7222a466c2c8f) (Version: 1.0 - Google\Chrome) Packages: ========= Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_6.0.0.1_x86__enpm4xejd91yc [2025-11-10] (Adobe Systems Incorporated) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2023-05-20] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2023-05-20] (Microsoft Corporation) [MS Ad] Night Skies PREMIUM -> C:\Program Files\WindowsApps\Microsoft.NightSkiesPREMIUM_1.0.0.0_neutral__8wekyb3d8bbwe [2025-10-16] (Microsoft Corporation) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-07] (NVIDIA Corp.) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.2.175.0_x64__dt26b99r8h8gj [2023-05-20] (Realtek Semiconductor Corp) Надстройка модуля мультимедиа для приложения "Фотографии" -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2023-05-20] (Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001_Classes\CLSID\{04271989-C4D2-B697-C539-DDB54CC9D3D7} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6} CustomCLSID: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.) CustomCLSID: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe /Automation => No File CustomCLSID: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001_Classes\CLSID\{6e1f4e4d-65f7-4c83-be2e-9e6683cda268}\localserver32 -> C:\Program Files\ESET\ESET Security\egui.exe (ESET, spol. s r.o. -> ESET) CustomCLSID: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe => No File CustomCLSID: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2019\ru-RU\acadficn.dll => No File CustomCLSID: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> ) ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-24] (ESET, spol. s r.o. -> ESET) ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2016-07-29] (Google Inc -> Google) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2022-01-24] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2022-01-24] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2025-03-14] (AVB Disc Soft, SIA -> Disc Soft Limited) ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-24] (ESET, spol. s r.o. -> ESET) ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2025-03-14] (AVB Disc Soft, SIA -> Disc Soft Limited) ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2016-07-29] (Google Inc -> Google) ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll [2025-12-12] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_33559cc6c2fd215a\nvshext.dll [2024-08-15] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-12-04] (Adobe Inc. -> ) ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2025-11-24] (ESET, spol. s r.o. -> ESET) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2022-01-24] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2022-01-24] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Whitelisted) ==================== ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) Shortcut: C:\Users\Lara\Desktop\Speccy - Ярлык.lnk -> C:\Program Files\Speccy\Speccy.exe (Piriform Software Ltd) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Дополнительные возможности.lnk -> C:\Windows\System32\fodhelper.exe (Microsoft Corporation) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс.lnk -> C:\Users\Lara\AppData\Local\Yandex\YandexBrowser\Application\browser.exe (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Новости в последней версии.lnk -> C:\Program Files (x86)\WinRAR\WhatsNew.txt () <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Руководство по консольной версии RAR.lnk -> C:\Program Files (x86)\WinRAR\Rar.txt () <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Справка WinRAR.lnk -> C:\Program Files (x86)\WinRAR\WinRAR.chm () <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop\Деинсталлировать Telegram.lnk -> C:\Users\Lara\AppData\Roaming\Telegram Desktop\unins000.exe (Telegram FZ-LLC ) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Запустить CIVILIZATION IV Warlords.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords.exe (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Запустить CIVILIZATION IV Колонизация.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Colonization\Colonization.exe (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Запустить CIVILIZATION IV Эпоха Огня.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword.exe (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Запустить CIVILIZATION IV.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Civilization4.exe (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Удалить Игру.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Unistall.bat (No File) Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Установить Фанатскую Русификацию для Колонизации.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\CIV4Col_Rus_1_01_1b.exe (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Установить Фанатскую Русификацию.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\CIV4BtS_Rus_3_19_2.exe (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Руководства\Древо Технологий часть 1.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Manual\TECHTREE_1.PDF (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Руководства\Древо Технологий часть 2.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Manual\TECHTREE_2.PDF (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Руководства\Руководство Пользователя.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Manual\Civ_Complete_manual.pdf (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\Руководства\Хроники Цивилизаций.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\Manual\Chronics Book.pdf (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\WEB-Ресурсы\Поддержка.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\support.URL (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\WEB-Ресурсы\Фанатский сайт.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\fanat.URL (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\CIVILIZATION IV Полное Издание\WEB-Ресурсы\Фанатский форум.lnk -> C:\Program Files (x86)\Sid Meier's Civilization 4 Complete\forum.URL (No File) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\SendTo\Передача файлов через Bluetooth.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation) <==== Cyrillic Shortcut: C:\Users\Lara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Яндекс.lnk -> C:\Users\Lara\AppData\Local\Yandex\YandexBrowser\Application\browser.exe (No File) <==== Cyrillic Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive для бизнеса.lnk -> C:\Windows\Installer\{90160000-0012-0000-1000-0000000FF1CE}\grv_icons.exe () <==== Cyrillic Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Центр управления мышью и клавиатурой (Microsoft).lnk -> C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe (Microsoft) <==== Cyrillic Shortcut: C:\Users\Public\Desktop\Ускоритель Компьютера.lnk -> C:\Program Files (x86)\Fast Computer\OptimAdmin.exe (AMS Software) <==== Cyrillic ShortcutWithArgument: C:\Users\Lara\AppData\Roaming\Microsoft\Windows\SendTo\Получатель факса.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo <==== Cyrillic ShortcutWithArgument: C:\Users\Public\Desktop\Защита банковских операций и браузера ESET.lnk -> C:\Program Files\ESET\ESET Security\ecmd.exe (ESET) -> /startprotectedbrowser <==== Cyrillic ==================== Loaded Modules (Whitelisted) ============= 2019-04-15 16:24 - 2019-04-15 16:24 - 000155648 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\yccV2.dll 2025-03-15 17:48 - 2025-12-07 07:40 - 000000000 ___JL (NVIDIA Corporation) [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll 2019-07-04 18:06 - 2019-07-04 18:06 - 001988608 _____ (TODO: ) [File not signed] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GbtNvGpuLib.dll ==================== Alternate Data Streams (Whitelisted) ======== (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData:MHD [252] AlternateDataStreams: C:\Users\All Users:MHD [252] AlternateDataStreams: C:\Users\Все пользователи:MHD [252] AlternateDataStreams: C:\ProgramData\Application Data:MHD [252] AlternateDataStreams: C:\Users\Lara\Local Settings:MHD [53] AlternateDataStreams: C:\Users\Lara\AppData\Local:MHD [53] AlternateDataStreams: C:\Users\Lara\AppData\Local\Application Data:MHD [53] AlternateDataStreams: C:\Users\Lara\AppData\Local\Temp:MHD [240] ==================== Safe Mode (Whitelisted) ================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Association (Whitelisted) ================= (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1" ==================== Internet Explorer (Whitelisted) ============= HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.yandex.ru/?win=556&clid=2313439-56 SearchScopes: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001 -> DefaultScope 5884b154-26df-11ed-be45-18c04d3473c3 URL = hxxps://yandex.ru/search/?win=556&clid=2313440-56&text={searchTerms} SearchScopes: HKU\S-1-5-21-3844586854-2832619778-3748133936-1001 -> 5884b154-26df-11ed-be45-18c04d3473c3 URL = hxxps://yandex.ru/search/?win=556&clid=2313440-56&text={searchTerms} BHO: GBHO.BHO -> {45d30484-7ded-43d9-957a-d2fd1f046511} -> C:\WINDOWS\system32\mscoree.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2022-06-19] (Oracle America, Inc. -> Oracle Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2022-06-19] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Toolbar: HKLM - Smart Backup - {1d09c093-f71e-43c3-b948-19316cbd695e} - C:\WINDOWS\system32\mscoree.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation) Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts content: ========================= (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2015-07-10 14:04 - 2024-12-19 19:45 - 000000002 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Network =========================== (Currently there is no automatic fix for this section.) DNS Servers: 8.8.8.8 - 8.8.4.4 Windows Firewall is enabled. Network Binding: ============= Radmin VPN: Famatech Radmin VPN Ethernet Adapter -> RvNetMP60.sys Ethernet: Realtek Gaming GbE Family Controller -> Rt64win7.sys Hamachi: LogMeIn Hamachi Virtual Ethernet Adapter -> Hamdrv.sys ==================== Other Areas =========================== (Currently there is no automatic fix for this section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA app\NvDLISR HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper HKU\S-1-5-21-3844586854-2832619778-3748133936-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight\Assets\Images\image_1.jpg HKU\S-1-5-21-3844586854-2832619778-3748133936-1011\Control Panel\Desktop\\Wallpaper -> HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn) HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2) HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0) HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V ==================== MSCONFIG/TASK MANAGER disabled items == (If an entry is included in the fixlist, it will be removed.) HKLM\...\StartupApproved\Run: => "PreRun" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "TurboVPN" HKLM\...\StartupApproved\Run32: => "skyvpn" HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\StartupApproved\StartupFolder: => "GameRanger.lnk" HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\StartupApproved\Run: => "Battle.net" HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\StartupApproved\Run: => "CCXProcess" HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\StartupApproved\Run: => "PlanetVPN" HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\StartupApproved\Run: => "skyvpn" ==================== FirewallRules (Whitelisted) ================ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{8A89DC4F-EE9C-4BB2-9F09-066502D46061}] => (Allow) LPort=9009 FirewallRules: [{A2EE347D-66FF-40F0-B8EB-CC2F494D6D6D}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{D1927F49-FDFB-412C-9105-6C691B0E9549}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{7ABE2198-A637-48D0-9AEC-D78EAFA88839}C:\users\lara\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lara\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited) FirewallRules: [UDP Query User{0121B5D1-D937-49F9-B496-197AE4E3CB67}C:\users\lara\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lara\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Limited) FirewallRules: [TCP Query User{C2170C1B-C6D8-4766-8C4E-34DAD372F769}C:\users\lara\appdata\local\yandex\yandexbrowser\application\browser.exe] => (Block) C:\users\lara\appdata\local\yandex\yandexbrowser\application\browser.exe => No File FirewallRules: [UDP Query User{A9972BF4-7EB7-483B-8BF3-848C6EA6CDE2}C:\users\lara\appdata\local\yandex\yandexbrowser\application\browser.exe] => (Block) C:\users\lara\appdata\local\yandex\yandexbrowser\application\browser.exe => No File FirewallRules: [{3FB2C00F-F41C-4315-B2C7-AB2A26B41EDB}] => (Allow) LPort=9009 FirewallRules: [TCP Query User{F654B6B5-FDF1-4FC7-A93D-5E833EC281B0}C:\users\lara\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\lara\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.11-windows-x64\bin\java.exe FirewallRules: [UDP Query User{CDD409CF-C28C-40D5-B838-FFF1AD0FDEBC}C:\users\lara\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\lara\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.11-windows-x64\bin\java.exe FirewallRules: [TCP Query User{1770C235-0FD0-4E81-9425-62C938FB35E9}C:\users\lara\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\lara\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe => No File FirewallRules: [UDP Query User{8B0C98E1-AF5D-4916-80E7-18E62AA3599A}C:\users\lara\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\lara\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe => No File FirewallRules: [{83C7607B-9820-45BD-AA5A-2B585B0BBBC0}] => (Allow) LPort=9009 FirewallRules: [{3C12D6FF-A421-4AEA-960B-C0E1685D680B}] => (Allow) LPort=9009 FirewallRules: [{9E6DF7BD-E9D1-4726-9D97-0D46FB2B834C}] => (Allow) LPort=9009 FirewallRules: [{238BFCF2-8715-47E2-AD74-ACFFD343F9F9}] => (Allow) LPort=9009 FirewallRules: [{6B1244D2-9CB2-4335-8374-EDB9F3AEEA0B}] => (Allow) LPort=9009 FirewallRules: [{7773E9E3-DC6A-4B1F-9FEC-320509F4C25D}] => (Allow) LPort=9009 FirewallRules: [{7FF955B4-888E-42A1-923B-AC87C439D15D}] => (Allow) LPort=9009 FirewallRules: [{E596DD01-404E-4D3A-BFDE-FDEB8B39E9DA}] => (Allow) LPort=9009 FirewallRules: [{B8F82B0C-0647-444D-BA3C-79F0AB1EAEAC}] => (Allow) LPort=9009 FirewallRules: [{BD8B00AD-EFFD-48C4-A8F0-31DA92C73498}] => (Allow) LPort=9009 FirewallRules: [{9B261B41-3C4A-4A81-BAF7-684BCFCF3F32}] => (Allow) LPort=9009 FirewallRules: [TCP Query User{943FB041-43D4-4377-B560-BC89D871783B}C:\users\lara\appdata\local\faceit\app-2.0.44\faceit.exe] => (Block) C:\users\lara\appdata\local\faceit\app-2.0.44\faceit.exe => No File FirewallRules: [UDP Query User{3F1422C8-28C7-47FD-875E-8E20AEEB059B}C:\users\lara\appdata\local\faceit\app-2.0.44\faceit.exe] => (Block) C:\users\lara\appdata\local\faceit\app-2.0.44\faceit.exe => No File FirewallRules: [{31E52288-F47C-4769-BF60-AE5811DF6BF2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.138.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{C2782E85-3169-4602-B37D-EA462CA37545}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.138.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{56DC5628-82D7-4807-9FC6-3A2809945B70}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.138.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{8EDEB288-7104-48D4-97F2-214011D3C028}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.138.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{13817B89-DA34-4FCF-BA53-86D181A58666}] => (Allow) LPort=9009 FirewallRules: [TCP Query User{E93F690C-FE1D-4C13-BBD4-75A54102C481}C:\users\lara\appdata\local\faceit\app-2.0.47\faceit.exe] => (Block) C:\users\lara\appdata\local\faceit\app-2.0.47\faceit.exe => No File FirewallRules: [UDP Query User{AAD42E6F-5202-48A4-92BD-AF0A2A1C0A83}C:\users\lara\appdata\local\faceit\app-2.0.47\faceit.exe] => (Block) C:\users\lara\appdata\local\faceit\app-2.0.47\faceit.exe => No File FirewallRules: [{6129091A-CCF5-4FE4-9D7F-D1A3370BA304}] => (Allow) LPort=9009 FirewallRules: [{D8D4B2F3-96A3-49C4-8295-2AA05FE4930C}] => (Allow) LPort=9009 FirewallRules: [{9CF2B8FB-566B-4D5B-852D-CC0BFF1798DF}] => (Allow) LPort=9009 FirewallRules: [{7AB2344E-68A5-46E3-B7F5-0C9F98088251}] => (Allow) LPort=9009 FirewallRules: [{D0CE0979-F565-4F10-A6A2-0A0AB641BA97}] => (Allow) LPort=9009 FirewallRules: [{3D7D95B2-495B-46C9-B509-2B74199240FA}] => (Allow) LPort=9009 FirewallRules: [{FE92FE50-725E-4247-B03E-EA2874EF63EB}] => (Allow) LPort=9009 FirewallRules: [{33C805AB-5495-479D-91AE-AF9B3BC38657}] => (Allow) LPort=9009 FirewallRules: [{CD99D205-00E3-45D6-BB06-853B279E925C}] => (Allow) LPort=9009 FirewallRules: [{316431A3-518D-48CF-83B9-98656710AF15}] => (Allow) LPort=9009 FirewallRules: [{E551F7C5-3139-4B2F-BBD8-156A3E818C36}] => (Allow) LPort=9009 FirewallRules: [{6C785BD4-F9C3-4FF2-AF82-488AF66D4A66}] => (Allow) C:\Program Files\Razer\RazerAppEngine\app-4.0.563\RazerAppEngine.exe (Razer USA Ltd. -> Razer Inc.) FirewallRules: [{E9E1E0F6-88F0-4E0D-A697-8E8DB826B558}] => (Allow) LPort=9009 FirewallRules: [{E2C1D8AC-B424-4720-A5B9-A8D2D3064957}] => (Allow) C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe (Famatech Corp. -> Famatech Corp.) FirewallRules: [{F4E0EED5-5E64-460F-811F-17342CC2F1F0}] => (Allow) LPort=9009 FirewallRules: [{CF520890-017B-4C3C-89B4-7341BEF73B44}] => (Allow) LPort=9009 FirewallRules: [{B76BAA6F-5991-4A6A-BB86-34AF3C5F7BE5}] => (Allow) LPort=9009 FirewallRules: [{2F138490-05A3-4011-8BDF-68FF7A81450D}] => (Allow) C:\Users\Lara\AppData\Local\Yandex\YandexBrowser\Application\browser.exe => No File FirewallRules: [{B48B574F-B6DC-4B70-9AFE-192CD5B27088}] => (Allow) LPort=9009 FirewallRules: [{D7763DBE-4EF4-4540-994C-51D5779CFB7F}] => (Allow) LPort=9009 FirewallRules: [{5575AF80-E04D-4414-B9C6-9975ADA8B310}] => (Allow) LPort=9009 FirewallRules: [{0D3F7942-E823-4252-B393-2FEC04CC3A5C}] => (Allow) LPort=9009 FirewallRules: [{ECC9E3D6-C07E-4E0A-869F-9D4BD8200EAA}] => (Allow) LPort=9009 FirewallRules: [{AA6C029D-9061-4200-8EE6-2B82D9845C83}] => (Allow) LPort=8281 FirewallRules: [{7AF72F5B-DEAE-4A42-AA7B-2751FAD79E1D}] => (Allow) LPort=8817 FirewallRules: [{2101DAA5-B714-4E2C-B9EA-278F6577E7A5}] => (Allow) LPort=9009 FirewallRules: [{86E199D0-F93E-4CF4-85D1-4F483007CD57}] => (Allow) LPort=8856 FirewallRules: [{439F4690-D487-4751-8F67-C38CA2F0EF5D}] => (Allow) LPort=9009 FirewallRules: [{CB036CDF-207B-4343-B081-662B388037C0}] => (Allow) LPort=9009 FirewallRules: [TCP Query User{15D87CA4-0AAF-4AAD-AA49-C1E86C337AEE}C:\program files\mozilla\mozilla vpn\mozilla vpn.exe] => (Allow) C:\program files\mozilla\mozilla vpn\mozilla vpn.exe => No File FirewallRules: [UDP Query User{51F5668F-9C14-4FCF-9B50-7AE3788FA915}C:\program files\mozilla\mozilla vpn\mozilla vpn.exe] => (Allow) C:\program files\mozilla\mozilla vpn\mozilla vpn.exe => No File FirewallRules: [{0B981798-5135-4698-8F78-AE52BDC8E1D4}] => (Block) C:\program files\mozilla\mozilla vpn\mozilla vpn.exe => No File FirewallRules: [{E8CE43E2-990B-4684-B038-6BAB251B529D}] => (Block) C:\program files\mozilla\mozilla vpn\mozilla vpn.exe => No File FirewallRules: [{59B8D4A9-9958-4D94-9886-D46AB8DB7D8B}] => (Allow) C:\Users\Lara\AppData\Roaming\avoVPN\data\sing-box\sing-box.exe (LARK COMPANY LIMITED -> ) FirewallRules: [{23189C1B-1ED5-4779-8280-3CA8AFFC0E95}] => (Allow) LPort=9009 FirewallRules: [{9C7914AE-A711-4B79-A826-BC92823C0A71}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Limited) FirewallRules: [{2DDBF3F3-30FE-4CB9-850E-DDBD30C35CC4}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Limited) FirewallRules: [{7B5A6D78-4615-420E-8793-8364FB6DEE39}] => (Allow) LPort=9009 FirewallRules: [{6EEE16BF-A21C-4FB0-ABCD-F4AC90207FC2}] => (Allow) LPort=9009 FirewallRules: [{CA11CDAD-F7E1-42DF-9DE0-A40325657150}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{40D819AA-1518-4AEC-96AD-E78E59333BEB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{A14CD161-4D4B-4E1B-9086-1E1EC11B14F0}] => (Allow) D:\SteamLibrary\steamapps\common\Icarus\Icarus.exe => No File FirewallRules: [{3555A5B1-8317-4952-847C-B5D0DB7C27E4}] => (Allow) D:\SteamLibrary\steamapps\common\Icarus\Icarus.exe => No File FirewallRules: [{A302D8BD-2B27-475C-9F3B-BC2E5424E233}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{67B6A706-5458-41B0-A153-E1749FBF0F7E}] => (Allow) LPort=9009 FirewallRules: [{31850C55-7919-4B15-A2A6-E0518A951D42}] => (Allow) C:\Program Files (x86)\Gigabyte\CloudStation_Server\HomeCloud\HCLOUD.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft) FirewallRules: [{3AA8C15A-FDCF-4F1D-B8F9-02B8894AF00E}] => (Allow) C:\Program Files (x86)\Gigabyte\CloudStation_Server\RemoteOC\ubssrv_oc_only.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) FirewallRules: [{ECFB2198-DA2B-42E5-A2BB-27E9AF43535B}] => (Allow) C:\Program Files (x86)\Gigabyte\CloudStation_Server\RemoteControl\grckm.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) FirewallRules: [{D8CE29C2-0EE9-4ABF-AAB4-49FB17944E1E}] => (Allow) LPort=1980 FirewallRules: [{0074982D-87CD-4C0B-A2BA-6142B1AF4959}] => (Allow) LPort=1900 FirewallRules: [{10334E29-855C-4704-B62B-FA51495AB18A}] => (Allow) LPort=1900 FirewallRules: [{F157C66C-BC8A-4900-B908-79101F69BCB4}] => (Allow) LPort=8737 FirewallRules: [{33A974DF-FBBA-4933-BEEA-E455A03B38FD}] => (Allow) D:\SteamLibrary\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe (Larian Studios Games Ltd. -> LariLauncher) FirewallRules: [{063EBAC6-50D4-4A94-A7F4-8DD9EAAA490D}] => (Allow) D:\SteamLibrary\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe (Larian Studios Games Ltd. -> LariLauncher) ==================== Restore Points ========================= 25-12-2025 05:37:59 Запланированная контрольная точка ==================== Faulty Device Manager Devices ============ ==================== Event log errors: ======================== Application errors: ================== Error: (12/25/2025 05:33:57 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Ошибка теневого копирования тома: Непредвиденная ошибка при вызове подпрограммы QueryFullProcessImageNameW.. hr = 0x8007001f, Присоединенное к системе устройство не работает.. Операция: Выполнение асинхронной операции Контекст: Текущее состояние: DoSnapshotSet Error: (12/25/2025 03:16:04 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: Не удалось создать контекст архивации для "C:\Users\Lara\Downloads\eset_smart_security_premium_live_installer (1).exe". Ошибка в файле манифеста или политики "" в строке . Версия компонента, требуемая для приложения, конфликтует с другой, уже активной версией. Конфликтующие компоненты: Компонент 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_60b8b9eb71f62e16.manifest. Компонент 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c.manifest. Error: (12/25/2025 03:16:04 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: Не удалось создать контекст архивации для "C:\Users\Lara\Downloads\eset_smart_security_premium_live_installer.exe". Ошибка в файле манифеста или политики "" в строке . Версия компонента, требуемая для приложения, конфликтует с другой, уже активной версией. Конфликтующие компоненты: Компонент 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_60b8b9eb71f62e16.manifest. Компонент 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.4355_none_a865f0c28672571c.manifest. Error: (12/25/2025 02:58:52 AM) (Source: Microsoft Security Client) (EventID: 3002) (User: ) Description: Event-ID 3002 Error: (12/25/2025 02:58:52 AM) (Source: Microsoft Security Client) (EventID: 2002) (User: ) Description: Event-ID 2002 Error: (12/25/2025 02:58:52 AM) (Source: Microsoft Security Client) (EventID: 2003) (User: ) Description: Event-ID 2003 Error: (12/25/2025 01:36:54 AM) (Source: GbtCareBotService) (EventID: 0) (User: ) Description: Невозможно запустить службу. Неверный дескриптор Error: (12/25/2025 01:35:02 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY) Description: Сбой инициализации регистрации сертификата SCEP WORKGROUP\DESKTOP-OOO0RBD$ через https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep: GetCACaps GetCACaps: Not Found {"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."} HTTP/1.1 404 Not Found Date: Wed, 24 Dec 2025 22:35:02 GMT Content-Length: 121 Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains x-ms-request-id: 9b6b8c14-5b0e-470b-8321-ec916007bceb Метод: GET(453ms) Стадия: GetCACaps Не найдено (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND) System errors: ============= Error: (12/25/2025 05:49:41 AM) (Source: volsnap) (EventID: 36) (User: ) Description: Теневая копия тома D: прервана, так как не удалось увеличить хранилище теневых копий из-за ограничения, установленного пользователем. Error: (12/25/2025 03:11:28 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Ошибка установки: не удается установить следующее обновление из-за ошибки 0xc0000017: Накопительное обновление для Windows 10 Version 22H2 для систем на базе процессоров x64, 2025 10 (KB5066791). Error: (12/25/2025 03:11:22 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Ошибка установки: не удается установить следующее обновление из-за ошибки 0xc0000017: Realtek Semiconductor Corp. - Net - 1030.52.731.2025. Error: (12/25/2025 03:11:22 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Ошибка установки: не удается установить следующее обновление из-за ошибки 0xc0000017: Razer Inc - HIDClass - 6.2.9200.16547. Error: (12/25/2025 03:11:22 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Ошибка установки: не удается установить следующее обновление из-за ошибки 0xc0000017: 2025-10 Накопительный пакет обновления .NET Framework 3.5, 4.8 и 4.8.1 для Windows 10 Version 22H2 для x64 систем (KB5066747). Error: (12/25/2025 03:11:21 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Ошибка установки: не удается установить следующее обновление из-за ошибки 0xc0000017: Обновление для Windows 10 Version 22H2 для систем на базе процессоров x64 (KB5001716), 2025-06. Error: (12/25/2025 03:05:58 AM) (Source: volsnap) (EventID: 36) (User: ) Description: Теневая копия тома C: прервана, так как не удалось увеличить хранилище теневых копий из-за ограничения, установленного пользователем. Error: (12/25/2025 02:23:23 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Ошибка установки: не удается установить следующее обновление из-за ошибки 0xc0000017: Накопительное обновление для Windows 10 Version 22H2 для систем на базе процессоров x64, 2025 10 (KB5066791). Windows Defender: ================ Date: 2025-12-25 01:34:19 Description: Антивирусная программа Microsoft Defender šċàη ħàŝ вëёπ ŝтòρрēđ ъέƒθґé сθмрŀ℮ţįőñ.%ʼn %τŠсáń ĪÐ:%ъ{1410E803-F573-4C4D-B854-047C5EB6FE0E}%ń %тЅçāл Ţўφĕ:%вАнтивредоносная программа%й %тŠ¢ǻп Ρăѓäмзт℮ŗѕ:%вБыстрая проверка%η %ŧÚś℮ŗ:%вDESKTOP-OOO0RBD\Lara%л %ťЅŧορ Řзáŝǿñ:%ъŔРĆ çŏиⁿεčţΐõп řùńđθẁň Date: 2025-12-25 01:30:44 Description: Программа Антивирусная программа Microsoft Defender обнаружила вредоносные или другие потенциально нежелательные программы. Чтобы узнать больше, см. приведенные далее сведения. https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.A!ml&threatid=2147735504&enterprise=0 Имя: Trojan:Win32/Wacatac.A!ml ИД: 2147735504 Серьезность: Критический Категория: Троян Путь: file:_C:\Users\Lara\Downloads\zipsoft-install__489__[6568].exe Начало обнаружения: Локальный компьютер Тип обнаружения: FastPath Источник обнаружения: Защита в реальном времени: Пользователь: DESKTOP-OOO0RBD\Lara Название процесса: C:\Windows\explorer.exe Версия службы анализа безопасности: AV: 1.443.280.0, AS: 1.443.280.0, NIS: 1.443.280.0 Версия подсистемы: AM: 1.1.25110.1, NIS: 1.1.25110.1 Date: 2025-12-24 17:33:31 Description: Антивирусная программа Microsoft Defender šċàη ħàŝ вëёπ ŝтòρрēđ ъέƒθґé сθмрŀ℮ţįőñ.%ʼn %τŠсáń ĪÐ:%ъ{7E79AE15-F606-4362-BD4F-4F4B242CA885}%ń %тЅçāл Ţўφĕ:%вАнтивредоносная программа%й %тŠ¢ǻп Ρăѓäмзт℮ŗѕ:%вБыстрая проверка%η %ŧÚś℮ŗ:%вNT AUTHORITY\СИСТЕМА%л %ťЅŧορ Řзáŝǿñ:%ъŞсђèðμļєď ѕçаŋ ωàš ѕќїррэđ ьέċäûśе ţћэ ļǻŝт ŝџċсěŝśƒùľ śсàñ ẃªš ẅĭťħĭń ŧĥє łąşт 7 đāỳś Date: 2025-12-24 16:50:27 Description: Антивирусная программа Microsoft Defender šċàη ħàŝ вëёπ ŝтòρрēđ ъέƒθґé сθмрŀ℮ţįőñ.%ʼn %τŠсáń ĪÐ:%ъ{6FE66293-EF5B-4247-AEBE-359E22460723}%ń %тЅçāл Ţўφĕ:%вАнтивредоносная программа%й %тŠ¢ǻп Ρăѓäмзт℮ŗѕ:%вБыстрая проверка%η %ŧÚś℮ŗ:%вNT AUTHORITY\СИСТЕМА%л %ťЅŧορ Řзáŝǿñ:%ъŞсђèðμļєď ѕçаŋ ωàš ѕќїррэđ ьέċäûśе ţћэ ļǻŝт ŝџċсěŝśƒùľ śсàñ ẃªš ẅĭťħĭń ŧĥє łąşт 7 đāỳś Date: 2025-12-23 06:18:42 Description: Антивирусная программа Microsoft Defender šċàη ħàŝ вëёπ ŝтòρрēđ ъέƒθґé сθмрŀ℮ţįőñ.%ʼn %τŠсáń ĪÐ:%ъ{52556137-081A-4F1B-883E-F2A39F4306E6}%ń %тЅçāл Ţўφĕ:%вАнтивредоносная программа%й %тŠ¢ǻп Ρăѓäмзт℮ŗѕ:%вБыстрая проверка%η %ŧÚś℮ŗ:%вNT AUTHORITY\СИСТЕМА%л %ťЅŧορ Řзáŝǿñ:%ъŞсђèðμļєď ѕçаŋ ωàš ѕќїррэđ ьέċäûśе ţћэ ļǻŝт ŝџċсěŝśƒùľ śсàñ ẃªš ẅĭťħĭń ŧĥє łąşт 7 đāỳś Event[0]: Date: 2025-12-25 01:45:06 Description: При обновлении службы анализа безопасности в программе Антивирусная программа Microsoft Defender возникла ошибка. Новая версия службы анализа безопасности: Предыдущая версия службы анализа безопасности: 1.443.280.0 Источник обновления: Сервер Центра обновления Майкрософт Тип службы анализа безопасности: Антивирусная программа Тип обновления: Полное Пользователь: NT AUTHORITY\СИСТЕМА Текущая версия подсистемы: Предыдущая версия подсистемы: 1.1.25110.1 Код ошибки: 0xc0000017 Описание ошибки: Ошибка в данных (CRC). Date: 2025-12-24 22:42:30 Description: При обновлении службы анализа безопасности в программе Антивирусная программа Microsoft Defender возникла ошибка. Новая версия службы анализа безопасности: Предыдущая версия службы анализа безопасности: 1.443.280.0 Источник обновления: Сервер Центра обновления Майкрософт Тип службы анализа безопасности: Антивирусная программа Тип обновления: Полное Пользователь: NT AUTHORITY\СИСТЕМА Текущая версия подсистемы: Предыдущая версия подсистемы: 1.1.25110.1 Код ошибки: 0xc0000017 Описание ошибки: Ошибка в данных (CRC). Date: 2025-12-24 22:00:45 Description: При обновлении службы анализа безопасности в программе Антивирусная программа Microsoft Defender возникла ошибка. Новая версия службы анализа безопасности: Предыдущая версия службы анализа безопасности: 1.443.280.0 Источник обновления: Сервер Центра обновления Майкрософт Тип службы анализа безопасности: Антивирусная программа Тип обновления: Полное Пользователь: NT AUTHORITY\СИСТЕМА Текущая версия подсистемы: Предыдущая версия подсистемы: 1.1.25110.1 Код ошибки: 0xc0000017 Описание ошибки: Ошибка в данных (CRC). Date: 2025-12-24 18:40:48 Description: При обновлении службы анализа безопасности в программе Антивирусная программа Microsoft Defender возникла ошибка. Новая версия службы анализа безопасности: Предыдущая версия службы анализа безопасности: 1.443.280.0 Источник обновления: Сервер Центра обновления Майкрософт Тип службы анализа безопасности: Антивирусная программа Тип обновления: Полное Пользователь: NT AUTHORITY\СИСТЕМА Текущая версия подсистемы: Предыдущая версия подсистемы: 1.1.25110.1 Код ошибки: 0xc0000017 Описание ошибки: Ошибка в данных (CRC). Date: 2025-12-24 16:10:07 Description: При обновлении службы анализа безопасности в программе Антивирусная программа Microsoft Defender возникла ошибка. Новая версия службы анализа безопасности: Предыдущая версия службы анализа безопасности: 1.443.280.0 Источник обновления: Сервер Центра обновления Майкрософт Тип службы анализа безопасности: Антивирусная программа Тип обновления: Полное Пользователь: NT AUTHORITY\СИСТЕМА Текущая версия подсистемы: Предыдущая версия подсистемы: 1.1.25110.1 Код ошибки: 0xc0000017 Описание ошибки: Ошибка в данных (CRC). CodeIntegrity: =============== Date: 2025-12-25 14:14:12 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== BIOS: American Megatrends Inc. F1 12/10/2019 Motherboard: Gigabyte Technology Co., Ltd. B450M H Processor: AMD Ryzen 5 2600 Six-Core Processor Percentage of memory in use: 44% Total physical RAM: 16333.5 MB Available physical RAM: 9046.43 MB Total Virtual: 31181.5 MB Available Virtual: 20786.41 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:220.19 GB) (Free:71.38 GB) (Model: Samsung SSD 860 EVO 500GB) NTFS Drive d: () (Fixed) (Total:244.71 GB) (Free:68.1 GB) (Model: Samsung SSD 860 EVO 500GB) NTFS \\?\Volume{109d109c-0000-0000-0000-100000000000}\ (Зарезервировано системой) (Fixed) (Total:0.34 GB) (Free:0.31 GB) NTFS \\?\Volume{109d109c-0000-0000-0000-c04f74000000}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS ==================== MBR & Partition Table ==================== ========================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 109D109C) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=244.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=220.2 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=527 MB) - (Type=27) ==================== End of Addition.txt =======================