Результат сканирования Farbar Recovery Scan Tool (FRST) (x64) Версия: 26-08-2026
Запущено с помощью USER (Администратор) на DESKTOP-LV2115R (Gigabyte Technology Co., Ltd. H410M S2H V2) (27-08-2026 08:09:47)
Запущено из C:\00 СОФТ\ФРСТ\FRST64.exe
Загруженные профили: USER
Платформа: Майкрософт Windows 10 Pro Версия 22H2 19045.6456 (X64) Язык: Русский (Россия)
Браузер по умолчанию: Chrome
Режим загрузки: Normal

==================== Процессы (В белом списке) =================

(Если запись включена в fixlist, процесс будет закрыт. Файл не будет перемещён.)

(AO Proizvodstvennaya Firma SKB Kontur -> PF SKB Kontur AO) C:\Program Files (x86)\SkbKontur\Autodiag K\0.7.0.2470\kontur.autodiag.center.exe
(Brother Industries, Ltd.) [Файл не подписан] C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe ->) (Brother Industries, Ltd.) [Файл не подписан] C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(C:\Program Files (x86)\Kaspersky Lab\KES.12.10.0\avp.exe ->) (AO Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\KES.12.10.0\avpui.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_2fd56aca57cf42dd\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_2fd56aca57cf42dd\igfxEM.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [Файл не подписан] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c51a65fb5ec70f9d\RtkAudUService64.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\KES.12.10.0\avp.exe
(Pro32 Getscreen LLC -> Getscreen.me) C:\Program Files\SmartClient\getscreen.exe <2>
(services.exe ->) (AO Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\KES.12.10.0\avpsus.exe
(services.exe ->) (AO Proizvodstvennaya Firma SKB Kontur -> PF SKB Kontur AO) C:\Program Files (x86)\SkbKontur\Autodiag K\0.7.0.2470\kontur.autodiag.service.exe
(services.exe ->) (Brother Industries, Ltd.) [Файл не подписан] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_2fd56aca57cf42dd\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9d19662e01abea6b\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_0797c0ea8580ae89\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_0797c0ea8580ae89\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\KES.12.10.0\avp.exe
(services.exe ->) (KYOCERA Document Solutions Inc.) [Файл не подписан] C:\Program Files\KDService\bin\KDService.exe
(services.exe ->) (Lagerkvist Teknisk Radgivning i Boras HB -> Olof Lagerkvist) C:\Windows\System32\imdsksvc.exe
(services.exe ->) (Pro32 Getscreen LLC -> Getscreen.me) C:\Program Files\SmartClient\getscreen.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c51a65fb5ec70f9d\RtkAudUService64.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (WZT -> MDL Forum, mod by Ratiborus) C:\ProgramData\KMSAuto\bin\KMSSS.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

==================== Реестр Windows (В белом списке) ===================

(Если запись включена в fixlist, элемент реестра будет сброшен на значение по умолчанию или удалён. Файл не будет перемещён.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c51a65fb5ec70f9d\RtkAudUService64.exe [1249848 2021-03-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [Файл не подписан]
HKLM\...\Run: [ScrewDrivers RDP Plugin] => C:\Program Files\Tricerat\Simplify Printing\ScrewDrivers Client v6\install_rdp.exe [179616 2018-06-20] (Tricerat inc. -> Tricerat, Inc.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139264 2013-01-23] (Brother Industries, Ltd.) [Файл не подписан]
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4509184 2012-12-27] (Brother Industries, Ltd.) [Файл не подписан]
HKLM-x32\...\Run: [BrStsInd00] => C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe [1885184 2012-12-18] (Brother Industries, Ltd.) [Файл не подписан]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Ограничение <==== ВНИМАНИЕ
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ограничение <==== ВНИМАНИЕ
HKU\S-1-5-21-210971182-866970213-627489561-1001\...\Run: [MicrosoftEdgeAutoLaunch_28CC4C91291F97998E40A29656715B1C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5018440 2026-08-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-210971182-866970213-627489561-1001\...\Run: [MicrosoftEdgeAutoLaunch_671F6394F1E691B13C7E146EF4047C07] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [5018440 2026-08-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-210971182-866970213-627489561-1001\...\Run: [Kontur.Autodiag] => C:\Program Files (x86)\SkbKontur\Autodiag K\kontur.autodiag.launcher.exe [1357472 2026-05-19] (AO Proizvodstvennaya Firma SKB Kontur -> PF SKB Kontur AO)
HKU\S-1-5-21-210971182-866970213-627489561-1001\...\MountPoints2: {aee42440-192e-11ec-a5b1-806e6f6e6963} - "E:\setup.exe" 
HKLM\...\Windows x64\Print Processors\sha7mPC: C:\Windows\System32\spool\prtprocs\x64\sha7mpc.dll [102640 2021-11-21] (HP Inc. -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\KX Language Monitor: C:\Windows\system32\KXPLM64.DLL [123960 2023-05-25] (KYOCERA Document Solutions Inc. -> KYOCERA Document Solutions Inc.)
HKLM\...\Print\Monitors\sha7m Langmon: C:\Windows\system32\sha7mlm.dll [81832 2021-11-21] (HP Inc. -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\152.0.7977.65\Installer\chrmstp.exe [7910552 2026-08-25] (Google LLC -> Google LLC)
GroupPolicy: Ограничение ? <==== ВНИМАНИЕ
Policies: C:\ProgramData\NTUSER.pol: Ограничение <==== ВНИМАНИЕ

==================== Запланированные задачи (В белом списке) =================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

Task: {39A778F8-913D-4382-A0E1-5DA1B0238C50} - System32\Tasks\Diag.Plugin bypass UAC => C:\Program Files (x86)\SkbKontur\DiagPlugin\3.0.29.1003\kddisphost.exe [162480 2026-06-18] (AO Proizvodstvennaya Firma SKB Kontur -> АО "ПФ "СКБ Контур")
Task: {F8EB8940-FDB6-4EE3-A2CF-FE470D07AFDE} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{C5094D81-84D8-4E04-BC60-4973F5CC4E3E} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)
Task: {CE23462F-5EB1-454B-B2F6-7414A59101BF} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\IntelPTTEKRecertification.exe [855664 2023-12-13] (Intel Corporation -> Intel(R) Corporation)
Task: {EDFE8C6D-AC98-499A-8B3F-FDC36E535358} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [9022080 2020-09-22] (WZT -> MSFree Inc.) -> C:\ProgramData\KMSAutoS\\/win=act /off=act
Task: {BF556145-EE98-487E-A857-DF2EBAFEFFCE} - System32\Tasks\Kontur.Plugin.Assistant-v4.14.0.5574-S-1-5-18 => C:\Program Files (x86)\SkbKontur\Plugin\4.14.0.5574\kontur.plugin.assistant.exe [1754272 2026-07-13] (AO Proizvodstvennaya Firma SKB Kontur -> PF SKB Kontur AO)
Task: {95AC3536-44F9-4238-B250-3FB68CD7336B} - System32\Tasks\Kontur.Updater-v2.1.1.373-S-1-5-18 => C:\Program Files (x86)\SkbKontur\Updater\2.1.1.373\kontur.updater.exe [1553784 2025-11-10] (AO Proizvodstvennaya Firma SKB Kontur -> PF SKB Kontur AO)
Task: {8B8F6037-12C9-4DAA-8AB5-2CCCE53C4C7B} - System32\Tasks\Kontur.Updater-v2.1.1.373-S-1-5-21-210971182-866970213-627489561-1001 => C:\Users\USER\AppData\Local\SkbKontur\Updater\2.1.1.373\kontur.updater.exe [1553784 2025-11-10] (AO Proizvodstvennaya Firma SKB Kontur -> PF SKB Kontur AO)
Task: {C85770BE-5EE4-4514-8F76-FD477B3ECD65} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe  (Нет файла)
Task: {4F26FA0B-DA60-4184-9226-C4BD1080ECDC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {B1144839-3AA7-4ABE-B859-25BF5CA524F7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD8BD947-D3DB-4015-A1B4-F8B6DFE879E7} - System32\Tasks\Рег создание точки восстановления => C:\Windows\System32\Wbem\wmic.exe [576512 2025-05-13] (Microsoft Windows -> Microsoft Corporation) -> /Namespace:\\root\\default Path SystemRestore Call CreateRestorePoint "ТочВос", 100, 7

(Если запись включена в fixlist, файл задачи (.job) будет перемещён. Файл, выполняемый задачей, не будет перемещён.)


==================== Internet (В белом списке) ====================

(Если элемент включён в fixlist, если он является элементом реестра, он будет удалён или сброшен на значение по умолчанию.)

Tcpip\..\Interfaces\{27ef5258-74b0-4c90-8b97-ce5a004bf902}: [NameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-06-25] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-22] (VideoLAN) [Файл не подписан]

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\USER\AppData\Local\Microsoft\Edge\User Data\Default [2026-08-26]
Edge StartupUrls: Default -> "hxxp://go.microsoft.com/fwlink/?LinkId=2134209&0x419"
Edge Extension: (Google Документы офлайн) - C:\Users\USER\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-08-26] [UpdateUrl:0] <==== ВНИМАНИЕ
Edge Extension: (Edge relevant text changes) - C:\Users\USER\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-08-26]

Chrome: 
=======
CHR Profile: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default [2026-08-26]
CHR Extension: (Платежная система Интернет-магазина Chrome) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-08-26]

==================== Службы (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

R2 AVP.KES.12.10; C:\Program Files (x86)\Kaspersky Lab\KES.12.10.0\avp.exe [449608 2025-07-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 avpsus.KES.12.10; C:\Program Files (x86)\Kaspersky Lab\KES.12.10.0\avpsus.exe [176488 2025-07-15] (AO Kaspersky Lab -> AO Kaspersky Lab)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Файл не подписан]
R2 FoxitReaderUpdateService; C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\FoxitPDFReaderUpdateService.exe [2357880 2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 ImDskSvc; C:\Windows\system32\imdsksvc.exe [19552 2015-12-14] (Lagerkvist Teknisk Radgivning i Boras HB -> Olof Lagerkvist)
R2 KDService; C:\Program Files\KDService\bin\KDService.exe [443904 2016-06-28] (KYOCERA Document Solutions Inc.) [Файл не подписан]
R2 KMSEmulator; C:\ProgramData\KMSAuto\bin\KMSSS.exe [304760 2024-04-15] (WZT -> MDL Forum, mod by Ratiborus)
R3 Kontur.Autodiag; C:\Program Files (x86)\SkbKontur\Autodiag K\0.7.0.2470\kontur.autodiag.service.exe [1222816 2026-05-19] (AO Proizvodstvennaya Firma SKB Kontur -> PF SKB Kontur AO)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2025-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SmartClient; C:\Program Files\SmartClient\getscreen.exe [4245272 2023-12-26] (Pro32 Getscreen LLC -> Getscreen.me)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [18071352 2023-12-04] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\NisSrv.exe [2772856 2021-09-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\MsMpEng.exe [136640 2021-09-19] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Драйверы (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)

R2 AWEAlloc; C:\Windows\system32\DRIVERS\awealloc.sys [21048 2015-12-14] (Lagerkvist Teknisk Radgivning i Boras HB -> Olof Lagerkvist)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Файл не подписан]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Файл не подписан]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [Файл не подписан]
R1 CProCtrl; C:\Windows\system32\DRIVERS\CProCtrl.5.0.0.10013.sys [102584 2025-08-27] (Microsoft Windows Hardware Compatibility Publisher -> Компания КРИПТО-ПРО)
R2 ImDisk; C:\Windows\system32\DRIVERS\imdisk.sys [48704 2015-12-14] (Lagerkvist Teknisk Radgivning i Boras HB -> Olof Lagerkvist)
R1 ISODrive; \??\C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> )
R1 klbackupdisk.KES-12-10; C:\Windows\system32\DRIVERS\KES-12-10\klbackupdisk.sys [93832 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klbackupflt.KES-12-10; C:\Windows\System32\DRIVERS\KES-12-10\klbackupflt.sys [255600 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [48776 2025-07-15] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R1 klflt.KES-12-10; C:\Windows\system32\DRIVERS\KES-12-10\klflt.sys [724608 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klfltdev.KES-12-10; C:\Windows\system32\DRIVERS\KES-12-10\klfltdev.sys [95304 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klgse.KES-12-10; C:\Windows\System32\DRIVERS\KES-12-10\klgse.sys [857080 2025-12-03] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 KLHK.KES-12-10; C:\Windows\system32\DRIVERS\KES-12-10\klhk.sys [2959384 2025-12-03] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klids.KES-12-10; \??\C:\ProgramData\Kaspersky Lab\KES.12.10\Bases\klids.sys [242808 2026-04-03] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 KLIF.KES-12-10; C:\Windows\System32\DRIVERS\KES-12-10\klif.sys [1563768 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [91208 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klpd.KES-12-10; C:\Windows\System32\DRIVERS\KES-12-10\klpd.sys [60528 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klpnpflt.KES-12-10; C:\Windows\system32\DRIVERS\KES-12-10\klpnpflt.sys [88200 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R0 klupd_KES-12-10_arkmon; C:\Windows\System32\Drivers\klupd_KES-12-10_arkmon.sys [420432 2026-04-03] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klupd_KES-12-10_klark; C:\Windows\System32\Drivers\klupd_KES-12-10_klark.sys [365160 2026-04-03] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R0 klupd_KES-12-10_klbg; C:\Windows\System32\Drivers\klupd_KES-12-10_klbg.sys [213360 2026-04-03] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klupd_KES-12-10_mark; C:\Windows\System32\Drivers\klupd_KES-12-10_mark.sys [275320 2026-04-03] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klwtp.KES-12-10; C:\Windows\system32\DRIVERS\KES-12-10\klwtp.sys [554120 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 kneps.KES-12-10; C:\Windows\system32\DRIVERS\KES-12-10\kneps.sys [408656 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 RTIFDH; C:\Windows\system32\DRIVERS\rtIFDH.sys [16256 2026-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Компания "Актив")
S3 usbscan; C:\Windows\system32\DRIVERS\usbscan.sys [49152 2021-04-09] (Microsoft Corporation) [Файл не подписан]
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [48536 2021-09-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [433384 2021-09-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86264 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (В белом списке) ===================

(Если запись включена в fixlist, она будет удалена из реестра. Файл не будет удалён, если он не указан отдельно.)


==================== Один месяц (создан) (В белом списке) =========

(Если запись включена в лист исправлений, файл/папка будут перемещены.)

2026-08-27 08:09 - 2026-08-27 08:10 - 000000000 ____D C:\FRST
2026-08-27 08:08 - 2026-08-27 08:08 - 002450432 _____ (Farbar) C:\Users\USER\Desktop\FRST64.exe
2026-08-26 23:06 - 2026-08-26 23:06 - 000000486 __RSH C:\ProgramData\ntuser.pol
2026-08-26 07:22 - 2026-08-26 07:22 - 000002486 _____ C:\Windows\system32\Tasks\Kontur.Plugin.Assistant-v4.14.0.5574-S-1-5-18
2026-08-26 07:21 - 2026-08-27 07:55 - 000000000 _____ C:\Windows\SysWOW64\DP_LOG.txt
2026-08-25 19:03 - 2026-08-25 19:03 - 000000000 ____D C:\Windows\system32\Tasks\GoogleUserPEH
2026-08-25 09:49 - 2026-08-25 09:49 - 000000000 ____D C:\Windows\system32\Tasks\GoogleSystem
2026-08-25 09:46 - 2026-08-26 07:09 - 000002243 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-08-25 09:46 - 2026-08-26 07:09 - 000002202 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-08-25 09:46 - 2026-08-25 09:46 - 000000000 ____D C:\Program Files\Google
2026-08-25 09:38 - 2026-08-25 09:38 - 000000042 _____ C:\Users\USER\Desktop\ПОЧТА.url
2026-08-25 09:26 - 2026-08-25 09:26 - 000000000 ____D C:\Windows\system32\Aktiv Co
2026-08-25 09:26 - 2026-08-25 09:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Рутокен
2026-08-25 09:26 - 2026-08-25 09:26 - 000000000 ____D C:\Program Files (x86)\Aktiv Co
2026-08-25 09:25 - 2026-08-26 07:27 - 000000000 ____D C:\ProgramData\SkbKontur
2026-08-25 09:25 - 2026-08-25 09:25 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Приложение диагностики ПК от Контура.lnk
2026-08-25 09:25 - 2026-08-25 09:25 - 000002138 _____ C:\Users\USER\Desktop\Контур.Админ.lnk
2026-08-25 09:24 - 2026-08-25 09:29 - 000002126 _____ C:\Windows\system32\Tasks\Diag.Plugin bypass UAC
2026-08-25 09:24 - 2026-08-25 09:24 - 011223056 _____ (АО «ПФ «СКБ Контур») C:\Users\USER\Downloads\DiagPlugin_admin.003075.exe
2026-08-25 09:24 - 2026-08-25 09:24 - 000002614 _____ C:\Windows\system32\Tasks\Kontur.Updater-v2.1.1.373-S-1-5-18
2026-08-25 09:20 - 2026-08-25 09:20 - 000004252 _____ C:\Windows\system32\Tasks\Рег создание точки восстановления
2026-08-24 15:08 - 2026-08-24 15:42 - 000000000 ____D C:\Users\USER\Doctor Web
2026-08-24 11:33 - 2026-08-24 11:33 - 000468823 _____ C:\Users\USER\Desktop\Акт сверки ИЮЛЬ.7z
2026-08-18 15:55 - 2026-08-19 09:44 - 000000000 ____D C:\Users\USER\Desktop\тн для альфа-транзит
2026-08-18 15:50 - 2026-08-18 15:50 - 000478668 _____ C:\Users\USER\Desktop\селеванова.pdf
2026-08-18 08:11 - 2026-08-18 08:11 - 000082678 _____ C:\Users\USER\Desktop\v8_6E8E_57.zip
2026-08-17 10:40 - 2026-08-17 10:40 - 000102114 _____ C:\Users\USER\Desktop\v8_6E8E_42.zip
2026-08-14 09:50 - 2026-08-14 09:50 - 000039936 _____ C:\Users\USER\Desktop\Счет правосудов 1308 (1).xls
2026-08-13 16:29 - 2026-08-13 16:29 - 007398370 _____ C:\Users\USER\Desktop\WhatsApp Scan 2026-08-13 at 15.25.16.pdf
2026-08-13 14:37 - 2026-08-13 14:37 - 014652261 _____ C:\Users\USER\Desktop\WhatsApp Scan 2026-08-13 at 13.59.44 (2).pdf
2026-08-13 14:35 - 2026-08-13 14:36 - 014652261 _____ C:\Users\USER\Desktop\WhatsApp Scan 2026-08-13 at 13.59.44 (1).pdf
2026-08-13 14:34 - 2026-08-13 14:34 - 014652261 _____ C:\Users\USER\Desktop\WhatsApp Scan 2026-08-13 at 13.59.44.pdf
2026-08-13 11:21 - 2026-08-13 11:39 - 000056832 _____ C:\Users\USER\Desktop\Счет правосудов 1308.xls
2026-08-12 17:02 - 2026-08-12 17:04 - 016019071 _____ C:\Users\USER\Desktop\WhatsApp Scan 2026-08-12 at 15.25.49 (1).pdf
2026-08-12 16:40 - 2026-08-12 16:41 - 027330331 _____ C:\Users\USER\Desktop\12-08-2026_16-13-28.zip
2026-08-12 16:38 - 2026-08-12 16:38 - 016019071 _____ C:\Users\USER\Desktop\WhatsApp Scan 2026-08-12 at 15.25.49.pdf
2026-08-11 16:19 - 2026-08-11 16:19 - 000102780 _____ C:\Users\USER\Desktop\v8_BF73_7a (1).zip
2026-08-11 16:14 - 2026-08-11 16:14 - 000082678 _____ C:\Users\USER\Desktop\v8_BF73_97.zip
2026-08-11 15:16 - 2026-08-11 15:16 - 000183198 _____ C:\Users\USER\Desktop\v8_BF73_92.zip
2026-08-11 15:15 - 2026-08-11 15:15 - 000172810 _____ C:\Users\USER\Desktop\v8_BF73_8c.zip
2026-08-11 15:14 - 2026-08-11 15:14 - 000173236 _____ C:\Users\USER\Desktop\v8_BF73_86.zip
2026-08-11 15:13 - 2026-08-11 15:13 - 000174645 _____ C:\Users\USER\Desktop\v8_BF73_80.zip
2026-08-11 15:11 - 2026-08-11 15:11 - 000083171 _____ C:\Users\USER\Desktop\v8_BF73_43.zip
2026-08-11 13:49 - 2026-08-11 13:49 - 000102780 _____ C:\Users\USER\Desktop\v8_BF73_7a.zip
2026-08-11 13:33 - 2026-08-11 13:33 - 000095736 _____ C:\Users\USER\Desktop\528C46BD-9201-4291-9371-58B49EDD064F.WEBP
2026-08-11 13:33 - 2026-08-11 13:33 - 000095736 _____ C:\Users\USER\Desktop\528C46BD-9201-4291-9371-58B49EDD064F (1).WEBP
2026-08-11 13:28 - 2026-08-11 13:28 - 000090488 _____ C:\Users\USER\Desktop\v8_BF73_75.zip
2026-08-11 13:25 - 2026-08-11 13:25 - 000177965 _____ C:\Users\USER\Desktop\v8_BF73_70.zip
2026-08-11 13:09 - 2026-08-11 13:09 - 000092606 _____ C:\Users\USER\Desktop\v8_BF73_63.zip
2026-08-11 10:39 - 2026-08-11 10:39 - 000087430 _____ C:\Users\USER\Desktop\Akt sverki vzaimnykh raschetov № 105 ot 10.08.2026.pdf
2026-07-30 10:51 - 2026-07-30 10:51 - 000003832 _____ C:\Users\USER\Desktop\28-07-2026_13-24-34.zip
2026-07-29 14:30 - 2026-07-29 14:29 - 000787702 _____ C:\Users\USER\Desktop\Оборотно-сальдовая ведомость по счету 58.03 за 2019г..pdf
2026-07-29 14:26 - 2026-07-29 14:25 - 025395393 _____ C:\Users\USER\Desktop\КАРТОЧКА счета 41.01 за 05.07.2019-31.12.2019.pdf
2026-07-28 15:35 - 2026-07-28 15:35 - 002107889 _____ C:\Users\USER\Desktop\абон. плата.pdf
2026-07-28 15:16 - 2026-07-28 15:16 - 000015360 _____ C:\Users\USER\Desktop\Печать.xls

==================== Один месяц (изменён) ==================

(Если запись включена в лист исправлений, файл/папка будут перемещены.)

2026-08-27 08:10 - 2019-12-07 19:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-08-27 08:09 - 2021-09-19 20:03 - 000000000 ____D C:\00 СОФТ
2026-08-27 08:07 - 2021-09-19 18:36 - 000000000 ____D C:\Users\USER\AppData\Local\ClassicShell
2026-08-27 07:57 - 2021-09-19 19:48 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-08-27 07:48 - 2021-12-15 18:03 - 000000000 ____D C:\Windows\SystemTemp
2026-08-27 07:47 - 2021-09-19 19:54 - 001663226 _____ C:\Windows\system32\PerfStringBackup.INI
2026-08-27 07:47 - 2019-12-08 00:34 - 000734024 _____ C:\Windows\system32\perfh019.dat
2026-08-27 07:47 - 2019-12-08 00:34 - 000144036 _____ C:\Windows\system32\perfc019.dat
2026-08-27 07:47 - 2019-12-07 19:13 - 000000000 ____D C:\Windows\INF
2026-08-27 07:40 - 2021-09-19 20:25 - 000000000 __SHD C:\Users\USER\IntelGraphicsProfiles
2026-08-27 07:40 - 2021-09-19 20:25 - 000000000 ____D C:\Intel
2026-08-27 07:40 - 2021-09-19 19:48 - 000008192 ___SH C:\DumpStack.log.tmp
2026-08-27 07:40 - 2021-09-19 19:48 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-08-27 07:40 - 2021-09-19 18:27 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2026-08-26 22:50 - 2019-12-07 19:03 - 000524288 _____ C:\Windows\system32\config\BBI
2026-08-26 15:04 - 2019-12-07 19:14 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2026-08-26 13:30 - 2021-09-19 19:48 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-08-26 13:30 - 2021-09-19 19:48 - 000002288 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-08-26 13:30 - 2019-12-07 19:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-26 13:30 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\AppReadiness
2026-08-26 13:05 - 2021-09-19 18:53 - 000000000 ____D C:\Users\USER\AppData\Roaming\Microsoft\Word
2026-08-26 07:22 - 2024-02-15 11:49 - 000000000 ____D C:\Program Files (x86)\SkbKontur
2026-08-26 07:12 - 2025-02-06 21:02 - 000003556 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-210971182-866970213-627489561-1001
2026-08-26 07:12 - 2021-12-13 14:26 - 000003580 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-210971182-866970213-627489561-1001
2026-08-26 07:12 - 2021-09-19 19:53 - 000003372 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-210971182-866970213-627489561-1001
2026-08-26 07:12 - 2021-09-19 19:51 - 000002417 _____ C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-08-25 09:50 - 2021-09-19 18:34 - 000000000 ____D C:\Program Files (x86)\Google
2026-08-25 09:46 - 2021-09-19 18:34 - 000000000 ____D C:\Users\USER\AppData\Local\Google
2026-08-25 09:27 - 2021-09-19 19:51 - 000000000 ____D C:\Users\USER\AppData\Local\VirtualStore
2026-08-25 09:26 - 2024-02-15 11:50 - 000000000 ____D C:\ProgramData\Aktiv Co
2026-08-25 09:26 - 2021-09-19 20:05 - 000000000 ____D C:\ProgramData\Package Cache
2026-08-25 09:25 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2026-08-25 09:20 - 2021-09-19 19:56 - 000000000 ____D C:\Users\USER\AppData\Roaming\Microsoft\MMC
2026-08-23 10:02 - 2021-09-19 19:19 - 000000000 ____D C:\ProgramData\KMSAutoS
2026-08-22 15:24 - 2021-09-19 19:48 - 000003666 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-08-22 15:24 - 2021-09-19 19:48 - 000003540 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-08-20 16:30 - 2024-06-03 14:26 - 000000000 ___RD C:\Users\USER\Desktop\Сканы Света
2026-08-18 14:05 - 2021-09-26 10:35 - 000000000 ____D C:\ProgramData\KDService
2026-08-17 15:39 - 2021-09-19 20:39 - 000000000 ____D C:\Users\USER\AppData\Roaming\Microsoft\Excel
2026-08-12 19:13 - 2021-09-19 20:25 - 000000000 ____D C:\Windows\system32\MRT
2026-08-12 19:10 - 2021-09-19 20:25 - 228836432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-08-02 20:57 - 2023-11-21 14:11 - 000002516 _____ C:\Users\USER\Desktop\СЕРВЕР.rdp

==================== Файлы в корне каталогов ========

2023-08-09 16:52 - 2023-08-09 16:52 - 000000000 _____ () C:\Program Files\.err

==================== SigCheck ============================

(Нет автоматического исправления файлов, которые не проходят проверку.)

==================== Конец от FRST.txt ========================