Решена Проверка ноутбука

Статус
В этой теме нельзя размещать новые ответы.

Oleksa

Постоянный участник
Сообщения
230
Реакции
33
Хочу проверить,свой ноутбук программой(утилитой)AutoLogger. Что для этого нужно сделать?Спасибо!
 
Здравствуйте! Для анализа зараженной системы и ее восстановления,(если такое присутствует).Спасибо!
 
Понятно. В правилах описано как собрать необходимые отчеты. Заодно опишите словами в чем проявляется заражение.
 
Тормозит система.Высылаю отчет и скрип.Спасибо!
 

Вложения

  • CollectionLog-2018.01.23-16.44.zip
    79.2 KB · Просмотры: 2
  • 23-01-2018 16-43-17.jpg
    23-01-2018 16-43-17.jpg
    63.2 KB · Просмотры: 65
Последнее редактирование:
опишите словами в чем проявляется заражение
Не ответили.

Чисто из любопытства: почему Автологер качали не по ссылке из правил (с этого же форума), а по ссылке с соседнего форума?
 
Не ответили.

Чисто из любопытства: почему Автологер качали не по ссылке из правил (с этого же форума), а по ссылке с соседнего форума?

У Вас показывает 2015г.,а у них 2018г. Если что-то не так,прошу простить,а в чем разница?Заражений пока не вижу, (При работе,комп.зависает и тормозит...думаю Вы подскажете после анализа отчета.Спасибо!
 

Вложения

  • 23-01-2018 17-06-44.jpg
    23-01-2018 17-06-44.jpg
    26.2 KB · Просмотры: 54
У Вас показывает 2015г.,а у них 2018г.
2015 года в последний раз обновлялся функционал автологера, а так он собирается ежедневно для обновления баз/утилит в его составе.
 
Я не пойму ,что я должен сделать?Что с отчетом?Спасибо!
 
Последнее редактирование:
За флудом потерялись логи... посмотрим сейчас.
 
Закройте все программы, временно выгрузите антивирус, файрволл и прочее защитное ПО.

Выполните скрипт в АВЗ (Файл - Выполнить скрипт):

Код:
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
 StopService('4f940f0c96c67f76');
 StopService('4f9437577a4df276');
 QuarantineFile('C:\Windows\TEMP\33e3ed4.sys', '');
 QuarantineFile('C:\Windows\TEMP\54890b0.sys', '');
 DeleteFile('C:\Windows\TEMP\33e3ed4.sys', '32');
 DeleteFile('C:\Windows\TEMP\54890b0.sys', '32');
 DeleteService('4f940f0c96c67f76');
 DeleteService('4f9437577a4df276');
ExecuteSysClean;
 ExecuteRepair(8);
 ExecuteWizard('SCU', 2, 3, true);
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.

Компьютер перезагрузится. После перезагрузки, выполните такой скрипт:

Код:
begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip'); 
end.

Файл quarantine.zip из папки с распакованной утилитой AVZ отправьте с помощью этой формы или (если размер архива превышает 8 MB) на этот почтовый ящик: quarantine <at> safezone.cc (замените <at> на @) с указанием ссылки на тему в теме (заголовке) сообщения и с указанием пароля: virus в теле письма.

"Пофиксите" в HijackThis (некоторые строки могут отсутствовать):
Код:
O7 - Policy: [Untrusted Certificate] 08E4987249BC450748A4A78133CBF041A3510033 - www.live.fi
O7 - Policy: [Untrusted Certificate] 4822824ECE7ED1450C039AA077DC1F8AE3489BBF - NIC Certifying Authority
O7 - Policy: [Untrusted Certificate] C6796490CDEEAAB31AED798752ECD003E6866CB2 - NIC CA 2011
O7 - Policy: [Untrusted Certificate] D2DBF71823B2B8E78F5958096150BFCB97CC388A - NIC CA 2014
O7 - Policy: [Untrusted Certificate] E1F3591E769865C4E447ACC37EAFC9E2BFE4C576 - MCSHOLDING TEST
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt: Закачать ВСЕ при помощи Download Master - (no file)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt: Закачать при помощи Download Master - (no file)
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt: Передать на удаленную закачку DM - (no file)
O9-32 - Button: HKLM\..\{8DAE90AD-4583-4977-9DD4-4360F7A45C74} - (no name) - (no file)
O15 - Trusted Zone: https://vk-local-server.cezurity.com

Скачайте Farbar Recovery Scan Tool и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
Запустите программу. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
Отметьте галочкой также "Shortcut.txt".

Нажмите кнопку Scan.
После окончания сканирования будут созданы отчеты FRST.txt, Addition.txt, Shortcut.txt в той же папке, откуда была запущена программа. Прикрепите отчеты к своему следующему сообщению.
Подробнее читайте в этом руководстве.
 
По моему сделал всё правильно,что дальше?Спасибо!
 

Вложения

  • HiJackThis.log
    30.2 KB · Просмотры: 0
  • Addition.txt
    37 KB · Просмотры: 1
  • FRST.txt
    72.1 KB · Просмотры: 1
  • Shortcut.txt
    62.6 KB · Просмотры: 0
  • Отключите до перезагрузки антивирус.
  • Выделите следующий код:
    Код:
    Start::
    CreateRestorePoint:
    HKLM Group Policy restriction on software: *.jреg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptm*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рng*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: powershell_ise.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmр*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр4*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dос*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmа*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр3*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\wz*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.wаv*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ziр*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wаv*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\RarSfx\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpеg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ziр*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр4*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: autorun.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\7ZipSfx.*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.jрeg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рub*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\_tc\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmр*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\7z*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.аvi*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rаr*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gpg <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jрeg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.tхt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.docх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр3*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.png*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рub*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рdf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jреg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\Rar*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рdf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоc*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmа*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doс*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.tхt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хls*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рpt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоc*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\FTM*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рpt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doс*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.аvi*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dос*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рng*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rаr*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\*.zip\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.хls*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpеg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptm*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: powershell.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\8z*\ <==== ATTENTION
    HKU\S-1-5-21-2499228077-3989064002-2699483847-1000\...\Run: [Joxi] => [X]
    HKU\S-1-5-21-2499228077-3989064002-2699483847-1000\...\Policies\Explorer: [NoDrives] 1
    SearchScopes: HKU\S-1-5-21-2499228077-3989064002-2699483847-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
    SearchScopes: HKU\S-1-5-21-2499228077-3989064002-2699483847-1000 -> {0633EE93-D776-472F-A0FF-E1416B8B2E3A} URL =
    ContextMenuHandlers5: [DreamScene] -> {BE800AEB-A440-4B63-94CD-AA6B43647DF9} =>  -> No File
    Task: {429A1E38-2314-4982-9054-C23C064F0EEE} - \Opera scheduled Autoupdate 1480927760 -> No File <==== ATTENTION
    Task: {26F548F7-2C0F-436C-8D94-DF342EE6DDAA} - System32\Tasks\{69BF9815-5AF0-4856-87A1-AC68317B8167} => C:\Program Files\DjVuReader.exe <==== ATTENTION
    Task: {D1F4AEAC-80AA-4388-AF8F-236E7DD6FE7B} - \RegOrganizerQuickLaunch -> No File <==== ATTENTION
    EmptyTemp:
    Reboot:
    End::
  • Скопируйте выделенный текст (правой кнопкой - Копировать).
  • Запустите FRST (FRST64) от имени администратора.
  • Нажмите Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Прикрепите его к своему следующему сообщению.
Компьютер будет перезагружен автоматически.

Подробнее читайте в этом руководстве.
 
Что с планировщиком задач делали?
 
  • Отключите до перезагрузки антивирус.
  • Выделите следующий код:
    Код:
    Start::
    CreateRestorePoint:
    HKLM Group Policy restriction on software: *.jреg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptm*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рng*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: powershell_ise.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmр*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр4*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dос*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmа*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр3*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\wz*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.wаv*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ziр*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wаv*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doсх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\RarSfx\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpеg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ziр*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр4*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpeg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: autorun.inf <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\7ZipSfx.*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.jрeg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рub*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\_tc\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.zip*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmр*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\7z*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.аvi*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rаr*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gpg <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jрeg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.tхt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.docх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mр3*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.png*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.txt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рub*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рdf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.jреg*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\Rar*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рdf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоc*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmа*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.doс*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.ppt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрtx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.tхt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.png*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.wma*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хls*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doc*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.bmp*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.рpt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.avi*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.ррtx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.pdf*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp3*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pрt*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wav*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоc*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rar*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\FTM*\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.7z*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рpt*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xls*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.doс*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.gif*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsx*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.аvi*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.divx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rtf*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рptx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pub*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.wmv*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dос*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.рng*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.mp4*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.dосх*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.rаr*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.хlsx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\*.zip\ <==== ATTENTION
    HKLM Group Policy restriction on software: *.хls*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.jpеg*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.docx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: *.pptm*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.dоcх*.lnk <==== ATTENTION
    HKLM Group Policy restriction on software: *.xlsx*.exe <==== ATTENTION
    HKLM Group Policy restriction on software: powershell.exe <==== ATTENTION
    HKLM Group Policy restriction on software: %TEMP%\8z*\ <==== ATTENTION
    HKU\S-1-5-21-2499228077-3989064002-2699483847-1000\...\Run: [Joxi] => [X]
    HKU\S-1-5-21-2499228077-3989064002-2699483847-1000\...\Policies\Explorer: [NoDrives] 1
    SearchScopes: HKU\S-1-5-21-2499228077-3989064002-2699483847-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-2499228077-3989064002-2699483847-1000 -> {0633EE93-D776-472F-A0FF-E1416B8B2E3A} URL =
    ContextMenuHandlers5: [DreamScene] -> {BE800AEB-A440-4B63-94CD-AA6B43647DF9} =>  -> No File
    Task: {429A1E38-2314-4982-9054-C23C064F0EEE} - \Opera scheduled Autoupdate 1480927760 -> No File <==== ATTENTION
    Task: {26F548F7-2C0F-436C-8D94-DF342EE6DDAA} - System32\Tasks\{69BF9815-5AF0-4856-87A1-AC68317B8167} => C:\Program Files\DjVuReader.exe <==== ATTENTION
    Task: {D1F4AEAC-80AA-4388-AF8F-236E7DD6FE7B} - \RegOrganizerQuickLaunch -> No File <==== ATTENTION
    EmptyTemp:
    Reboot:
    End::
  • Скопируйте выделенный текст (правой кнопкой - Копировать).
  • Запустите FRST (FRST64) от имени администратора.
  • Нажмите Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Прикрепите его к своему следующему сообщению.
Компьютер будет перезагружен автоматически.

Подробнее читайте в этом руководстве.
Добрый день!Извините,что с задержкой,(2 дня работал по 12 часов,такой график работы 2/2).Проделал Вашу задачу,высылаю отчет.Спасибо!
 

Вложения

  • Fixlog.txt
    27.9 KB · Просмотры: 1
Последнее редактирование:
Перефразирую: в Планировщике задач самостоятельно какие-либо настройки меняли?

Что из проблем сейчас осталось?
 
Перефразирую: в Планировщике задач самостоятельно какие-либо настройки меняли?

Что из проблем сейчас осталось?
1).Я даже не знаю,как менять настройки и где находится этот планировщик задач.2).Пока не вижу проблем в работе.Поменялись некоторые функции в новой вкладке(Google Chrome).Что мне нужно ещё сделать?Спасибо!
 
Статус
В этой теме нельзя размещать новые ответы.
Назад
Сверху Снизу