archiloremd
Новый пользователь
- Сообщения
- 40
- Реакции
- 0
begin
ExecuteFile('schtasks.exe', '/delete /TN "dominantentfen" /F', 0, 15000, true);
RebootWindows(true);
end.
Скриншот прикрепитеТак же при включении появляется окно от super charger
start
CreateRestorePoint:
HKU\S-1-5-21-2692776809-4214489860-3691910712-1001\...\Policies\Explorer: []
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2692776809-4214489860-3691910712-1001 -> {846BA9C5-F166-4DEE-9232-8A82741A278C} URL =
SearchScopes: HKU\S-1-5-21-2692776809-4214489860-3691910712-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7B3EF3B254-4B06-4A1F-BACA-099ABEF08A54%7D&gp=811041
CHR HKLM-x32\...\Chrome\Extension: [aonedlchkbicmhepimiahfalheedjgbh] - hxxps://clients2.google.com/service/update2/crx
2017-01-08 16:44 - 2013-08-22 18:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-01-08 16:44 - 2013-08-22 18:36 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\Users\Все пользователи\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
Reboot:
end
We use cookies and similar technologies for the following purposes:
Do you accept cookies and these technologies?
We use cookies and similar technologies for the following purposes:
Do you accept cookies and these technologies?