Решена Проверка ноутбука

Статус
В этой теме нельзя размещать новые ответы.

Oleksa

Активный пользователь
Сообщения
230
Реакции
32
Хочу проверить,свой ноутбук программой(утилитой)AutoLogger. Что для этого нужно сделать?Спасибо!
 

Oleksa

Активный пользователь
Сообщения
230
Реакции
32
Здравствуйте! Для анализа зараженной системы и ее восстановления,(если такое присутствует).Спасибо!
 

Sandor

Команда форума
Супер-Модератор
Ассоциация VN/VIP
Преподаватель
Сообщения
8,222
Реакции
2,479
Понятно. В правилах описано как собрать необходимые отчеты. Заодно опишите словами в чем проявляется заражение.
 

Oleksa

Активный пользователь
Сообщения
230
Реакции
32
Тормозит система.Высылаю отчет и скрип.Спасибо!
 

Вложения

  • CollectionLog-2018.01.23-16.44.zip
    79.2 KB · Просмотры: 2
  • 23-01-2018 16-43-17.jpg
    23-01-2018 16-43-17.jpg
    63.2 KB · Просмотры: 35
Последнее редактирование:

Sandor

Команда форума
Супер-Модератор
Ассоциация VN/VIP
Преподаватель
Сообщения
8,222
Реакции
2,479
опишите словами в чем проявляется заражение
Не ответили.

Чисто из любопытства: почему Автологер качали не по ссылке из правил (с этого же форума), а по ссылке с соседнего форума?
 

Oleksa

Активный пользователь
Сообщения
230
Реакции
32
Не ответили.

Чисто из любопытства: почему Автологер качали не по ссылке из правил (с этого же форума), а по ссылке с соседнего форума?

У Вас показывает 2015г.,а у них 2018г. Если что-то не так,прошу простить,а в чем разница?Заражений пока не вижу, (При работе,комп.зависает и тормозит...думаю Вы подскажете после анализа отчета.Спасибо!
 

Вложения

  • 23-01-2018 17-06-44.jpg
    23-01-2018 17-06-44.jpg
    26.2 KB · Просмотры: 24

akok

Команда форума
Администратор
Ассоциация VN
Сообщения
20,425
Реакции
13,903
У Вас показывает 2015г.,а у них 2018г.
2015 года в последний раз обновлялся функционал автологера, а так он собирается ежедневно для обновления баз/утилит в его составе.
 

Oleksa

Активный пользователь
Сообщения
230
Реакции
32
Я не пойму ,что я должен сделать?Что с отчетом?Спасибо!
 
Последнее редактирование:

akok

Команда форума
Администратор
Ассоциация VN
Сообщения
20,425
Реакции
13,903
За флудом потерялись логи... посмотрим сейчас.
 

akok

Команда форума
Администратор
Ассоциация VN
Сообщения
20,425
Реакции
13,903
Закройте все программы, временно выгрузите антивирус, файрволл и прочее защитное ПО.

Выполните скрипт в АВЗ (Файл - Выполнить скрипт):

Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
 StopService('4f940f0c96c67f76');
 StopService('4f9437577a4df276');
 QuarantineFile('C:\Windows\TEMP\33e3ed4.sys', '');
 QuarantineFile('C:\Windows\TEMP\54890b0.sys', '');
 DeleteFile('C:\Windows\TEMP\33e3ed4.sys', '32');
 DeleteFile('C:\Windows\TEMP\54890b0.sys', '32');
 DeleteService('4f940f0c96c67f76');
 DeleteService('4f9437577a4df276');
ExecuteSysClean;
 ExecuteRepair(8);
 ExecuteWizard('SCU', 2, 3, true);
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.

Компьютер перезагрузится. После перезагрузки, выполните такой скрипт:

Код:
begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip'); 
end.

Файл quarantine.zip из папки с распакованной утилитой AVZ отправьте с помощью этой формы или (если размер архива превышает 8 MB) на этот почтовый ящик: quarantine <at> safezone.cc (замените <at> на @) с указанием ссылки на тему в теме (заголовке) сообщения и с указанием пароля: virus в теле письма.

"Пофиксите" в HijackThis (некоторые строки могут отсутствовать):
Код:
O7 - Policy: [Untrusted Certificate] 08E4987249BC450748A4A78133CBF041A3510033 - www.live.fi
O7 - Policy: [Untrusted Certificate] 4822824ECE7ED1450C039AA077DC1F8AE3489BBF - NIC Certifying Authority
O7 - Policy: [Untrusted Certificate] C6796490CDEEAAB31AED798752ECD003E6866CB2 - NIC CA 2011
O7 - Policy: [Untrusted Certificate] D2DBF71823B2B8E78F5958096150BFCB97CC388A - NIC CA 2014
O7 - Policy: [Untrusted Certificate] E1F3591E769865C4E447ACC37EAFC9E2BFE4C576 - MCSHOLDING TEST
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt: Закачать ВСЕ при помощи Download Master - (no file)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt: Закачать при помощи Download Master - (no file)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt: Передать на удаленную закачку DM - (no file)
O9-32 - Button: HKLM\..\{8DAE90AD-4583-4977-9DD4-4360F7A45C74} - (no name) - (no file)
O15 - Trusted Zone: https://vk-local-server.cezurity.com

Скачайте Farbar Recovery Scan Tool и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
Запустите программу. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
Отметьте галочкой также "Shortcut.txt".

Нажмите кнопку Scan.
После окончания сканирования будут созданы отчеты FRST.txt, Addition.txt, Shortcut.txt в той же папке, откуда была запущена программа. Прикрепите отчеты к своему следующему сообщению.
Подробнее читайте в этом руководстве.
 

Oleksa

Активный пользователь
Сообщения
230
Реакции
32
По моему сделал всё правильно,что дальше?Спасибо!
 

Вложения

  • HiJackThis.log
    30.2 KB · Просмотры: 0
  • Addition.txt
    37 KB · Просмотры: 1
  • FRST.txt
    72.1 KB · Просмотры: 1
  • Shortcut.txt
    62.6 KB · Просмотры: 0

akok

Команда форума
Администратор
Ассоциация VN
Сообщения
20,425
Реакции
13,903
  • Отключите до перезагрузки антивирус.
  • Выделите следующий код:
    Код:
    Start::
    CreateRestorePoint:
    HKLM Group Policy restriction on software: *.jреg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptm*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рng*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: powershell_ise.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmр*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр4*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dос*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmа*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр3*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\wz*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.wаv*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ziр*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wаv*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\RarSfx\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpеg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ziр*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр4*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: autorun.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\7ZipSfx.*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.jрeg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рub*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\_tc\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmр*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\7z*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.аvi*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rаr*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gpg <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jрeg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.tхt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.docх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр3*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.png*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рub*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рdf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jреg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\Rar*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рdf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоc*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmа*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doс*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.tхt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хls*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рpt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоc*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\FTM*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рpt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doс*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.аvi*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dос*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рng*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rаr*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\*.zip\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.хls*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpеg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptm*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: powershell.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\8z*\ <==== ATTENTION
    HKU\S-1-5-21-2499228077-3989064002-2699483847-1000\...\Run: [Joxi] => [X]
    HKU\S-1-5-21-2499228077-3989064002-2699483847-1000\...\Policies\Explorer: [NoDrives] 1
    SearchScopes: HKU\S-1-5-21-2499228077-3989064002-2699483847-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    SearchScopes: HKU\S-1-5-21-2499228077-3989064002-2699483847-1000 -> {0633EE93-D776-472F-A0FF-E1416B8B2E3A} URL =
    ContextMenuHandlers5: [DreamScene] -> {BE800AEB-A440-4B63-94CD-AA6B43647DF9} =>  -> No File
    Task: {429A1E38-2314-4982-9054-C23C064F0EEE} - \Opera scheduled Autoupdate 1480927760 -> No File <==== ATTENTION
    Task: {26F548F7-2C0F-436C-8D94-DF342EE6DDAA} - System32\Tasks\{69BF9815-5AF0-4856-87A1-AC68317B8167} => C:\Program Files\DjVuReader.exe <==== ATTENTION
    Task: {D1F4AEAC-80AA-4388-AF8F-236E7DD6FE7B} - \RegOrganizerQuickLaunch -> No File <==== ATTENTION
    EmptyTemp:
    Reboot:
    End::
  • Скопируйте выделенный текст (правой кнопкой - Копировать).
  • Запустите FRST (FRST64) от имени администратора.
  • Нажмите Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Прикрепите его к своему следующему сообщению.
Компьютер будет перезагружен автоматически.

Подробнее читайте в этом руководстве.
 

akok

Команда форума
Администратор
Ассоциация VN
Сообщения
20,425
Реакции
13,903
Что с планировщиком задач делали?
 

Oleksa

Активный пользователь
Сообщения
230
Реакции
32
  • Отключите до перезагрузки антивирус.
  • Выделите следующий код:
    Код:
    Start::
    CreateRestorePoint:
    HKLM Group Policy restriction on software: *.jреg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptm*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рng*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: powershell_ise.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmр*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр4*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dос*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmа*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр3*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\wz*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.wаv*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ziр*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wаv*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\RarSfx\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpеg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ziр*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр4*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: autorun.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\7ZipSfx.*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.jрeg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рub*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\_tc\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmр*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\7z*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.аvi*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rаr*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gpg <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jрeg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.tхt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.docх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр3*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.png*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рub*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рdf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jреg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\Rar*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рdf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоc*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmа*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doс*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.tхt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хls*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рpt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоc*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\FTM*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рpt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doс*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.аvi*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dос*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рng*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rаr*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\*.zip\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.хls*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpеg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptm*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: powershell.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\8z*\ <==== ATTENTION
    HKU\S-1-5-21-2499228077-3989064002-2699483847-1000\...\Run: [Joxi] => [X]
    HKU\S-1-5-21-2499228077-3989064002-2699483847-1000\...\Policies\Explorer: [NoDrives] 1
    SearchScopes: HKU\S-1-5-21-2499228077-3989064002-2699483847-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-2499228077-3989064002-2699483847-1000 -> {0633EE93-D776-472F-A0FF-E1416B8B2E3A} URL =
    ContextMenuHandlers5: [DreamScene] -> {BE800AEB-A440-4B63-94CD-AA6B43647DF9} =>  -> No File
    Task: {429A1E38-2314-4982-9054-C23C064F0EEE} - \Opera scheduled Autoupdate 1480927760 -> No File <==== ATTENTION
    Task: {26F548F7-2C0F-436C-8D94-DF342EE6DDAA} - System32\Tasks\{69BF9815-5AF0-4856-87A1-AC68317B8167} => C:\Program Files\DjVuReader.exe <==== ATTENTION
    Task: {D1F4AEAC-80AA-4388-AF8F-236E7DD6FE7B} - \RegOrganizerQuickLaunch -> No File <==== ATTENTION
    EmptyTemp:
    Reboot:
    End::
  • Скопируйте выделенный текст (правой кнопкой - Копировать).
  • Запустите FRST (FRST64) от имени администратора.
  • Нажмите Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Прикрепите его к своему следующему сообщению.
Компьютер будет перезагружен автоматически.

Подробнее читайте в этом руководстве.
Добрый день!Извините,что с задержкой,(2 дня работал по 12 часов,такой график работы 2/2).Проделал Вашу задачу,высылаю отчет.Спасибо!
 

Вложения

  • Fixlog.txt
    27.9 KB · Просмотры: 1
Последнее редактирование:

Sandor

Команда форума
Супер-Модератор
Ассоциация VN/VIP
Преподаватель
Сообщения
8,222
Реакции
2,479
Перефразирую: в Планировщике задач самостоятельно какие-либо настройки меняли?

Что из проблем сейчас осталось?
 

Oleksa

Активный пользователь
Сообщения
230
Реакции
32
Перефразирую: в Планировщике задач самостоятельно какие-либо настройки меняли?

Что из проблем сейчас осталось?
1).Я даже не знаю,как менять настройки и где находится этот планировщик задач.2).Пока не вижу проблем в работе.Поменялись некоторые функции в новой вкладке(Google Chrome).Что мне нужно ещё сделать?Спасибо!
 
Статус
В этой теме нельзя размещать новые ответы.
Сверху Снизу