При открытии ссылки самопроизвольно закрывается браузер.
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
ClearQuarantineEx(true);
QuarantineFile('C:\Users\admin\AppData\Local\system32\system32.exe', '');
QuarantineFile('C:\Users\admin\AppData\Local\Temp\nw9168_21529', '');
QuarantineFile('c:\windows\Adobeupdate.exe', '');
QuarantineFile('H:\autorun.inf', '');
DeleteSchedulerTask('AdobeUpdateFlac');
DeleteSchedulerTask('AdobeUpdateFlac2');
DeleteFile('C:\Users\admin\AppData\Local\system32\system32.exe', '32');
DeleteFile('C:\Users\admin\AppData\Local\Temp\nw9168_21529', '32');
DeleteFile('C:\Users\admin\AppData\Local\Temp\nw9168_21529', '64');
DeleteFile('c:\windows\Adobeupdate.exe', '64');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'Application Restart #0', '32');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'Application Restart #0', '64');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'Application Restart #0', 'x32');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\RunOnce', 'Application Restart #0', 'x64');
ExecuteSysClean;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.begin
DeleteFile(GetAVZDirectory+'quarantine.7z');
ExecuteFile(GetAVZDirectory+'7za.exe', 'a -mx9 -pmalware quarantine .\Quarantine\*', 1, 300000, false);
end.Start::
SystemRestore: On
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ограничение <==== ВНИМАНИЕ
HKU\S-1-5-21-355113357-3619803166-2716497870-1001\...\MountPoints2: {1245a0a6-051f-11ec-a413-f4b520203484} - "I:\setup.exe"
GroupPolicy\User: Ограничение ? <==== ВНИМАНИЕ
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"topk4\"",Filter="__EventFilter.Name=\"topk3\"::
WMI:subscription\__EventFilter->topk3::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 11000 WHERE TargetInstance ISA 'Win32_PerfFormattedData_PerfOS_System']
FirewallRules: [{B3EFD5E4-EF28-4FAD-8286-BB56E5D750FA}] => (Allow) C:\Users\admin\MediaGet2\mediaget.exe => Нет файла
FirewallRules: [{273B04AE-17C5-4D87-AEB0-91E0418D5D19}] => (Allow) C:\Users\admin\MediaGet2\mediaget.exe => Нет файла
FirewallRules: [{3671D777-F081-43E2-86AA-7F814110E358}] => (Allow) C:\Users\admin\MediaGet2\QtWebEngineProcess.exe => Нет файла
FirewallRules: [{D8074685-118E-49B0-86FF-3677F36C0287}] => (Allow) C:\Users\admin\MediaGet2\QtWebEngineProcess.exe => Нет файла
ExportKey: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions
EmptyTemp:
Reboot:
End::