﻿Лог утилиты random's system information tool 1.17(автор: random/random)
Run by LANGOLIER at 2025-05-09 19:25:39
Майкрософт Windows 10 Pro 
Системный раздел C:  Свободно 3450 GB (90%) размер 3815 GB
Total RAM: 32657 MB (70% free)
X64


====== Список процессов ======

C:\Windows\system32\lsass.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch -p
C:\Windows\system32\fontdrvhost.exe
C:\Windows\system32\fontdrvhost.exe
C:\Windows\system32\svchost.exe -k RPCSS -p
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p
C:\Windows\system32\dwm.exe
C:\Windows\system32\svchost.exe -k netsvcs -p
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d2629211e16b69ec\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d2629211e16b69ec\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem /ert
C:\Windows\system32\svchost.exe -k LocalService -p
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-cc507a5e-80bb-4f86-8b79-8857d49b89a8 -SystemEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-98ab0852-a239-47aa-9b72-8886582b999b -IoCancelEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-af35423a-408f-4685-8c51-0810390dbf93 -NonStateChangingEventPortName:\UMDFCommunicationPorts\WUDF\HostProcess-b032107f-d9fe-4810-b8a9-2ae677567d1f -LifetimeId:86f167ab-336a-4d0f-897d-1623f06c7519 -DeviceGroupId:WpdFsGroup -HostArg:0
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork -p
C:\Windows\System32\svchost.exe -k NetworkService -p
"C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d2629211e16b69ec\Display.NvContainer\NVDisplay.Container.exe" -f %ProgramData%\NVIDIA\DisplaySessionContainer%d.log -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d2629211e16b69ec\Display.NvContainer\plugins\Session -r -l 3 -p 30000 -cfg NVDisplay.ContainerLocalSystem\Session /ert -c
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\system32\svchost.exe -k appmodel -p
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA Corporation\NVIDIA app\NvContainer\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000  -ert
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe" -service
"C:\Program Files (x86)\NetIQ\Device Service\DeviceService.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
C:\Windows\System32\svchost.exe -k netsvcs
C:\Windows\system32\sihost.exe
C:\Windows\system32\svchost.exe -k UnistackSvcGroup
C:\Windows\system32\taskhostw.exe
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
C:\Windows\system32\ctfmon.exe
C:\Windows\Explorer.EXE
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA Corporation\NVIDIA app\NvContainer\NvContainerSession%d.log" -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\Session" -r -l 3 -p 30000  -ert -c
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA Corporation\NVIDIA app\NvContainer\NvContainerUser%dSPUser.log" -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\SPUser" -r -l 3 -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" -c
"C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -f "C:\ProgramData\NVIDIA Corporation\NVIDIA app\NvContainer\NvContainerUser%d.log" -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User" -r -l 3 -p 30000   -c
"C:\Program Files\NVIDIA Corporation\NVIDIA App\ShadowPlay\nvsphelper64.exe"
"C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe"
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
C:\Windows\system32\DriverStore\FileRepository\nv_dispi.inf_amd64_d2629211e16b69ec\nvngx_update.exe -api update -cmsid 0 -gpuarch 0x130 -optional -bootstrap -feature sl_sdk_0 -type zip
C:\Windows\system32\DriverStore\FileRepository\nv_dispi.inf_amd64_d2629211e16b69ec\nvngx_update.exe -api update -cmsid 3 -gpuarch 0x160 -optional -bootstrap -feature dlss_override -type zip
\??\C:\Windows\system32\conhost.exe 0x4
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe" --type=gpu-process --no-sandbox --lang=en-US --user-data-dir="C:\Users\LANGOLIER\AppData\Local\CEF\User Data" --gpu-preferences=UAAAAAAAAADgAgAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Users\LANGOLIER\AppData\Local\NVIDIA Corporation\NVIDIA Overlay\debug.log" --mojo-platform-channel-handle=2264 --field-trial-handle=2288,i,12899158049272224289,17444002319571204558,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:2
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
"C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --no-sandbox --lang=en-US --user-data-dir="C:\Users\LANGOLIER\AppData\Local\CEF\User Data" --log-file="C:\Users\LANGOLIER\AppData\Local\NVIDIA Corporation\NVIDIA Overlay\debug.log" --mojo-platform-channel-handle=2968 --field-trial-handle=2288,i,12899158049272224289,17444002319571204558,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
"C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --lang=en-US --user-data-dir="C:\Users\LANGOLIER\AppData\Local\CEF\User Data" --log-file="C:\Users\LANGOLIER\AppData\Local\NVIDIA Corporation\NVIDIA Overlay\debug.log" --mojo-platform-channel-handle=2992 --field-trial-handle=2288,i,12899158049272224289,17444002319571204558,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
"C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA Overlay.exe" --type=renderer --user-data-dir="C:\Users\LANGOLIER\AppData\Local\CEF\User Data" --no-sandbox --log-file="C:\Users\LANGOLIER\AppData\Local\NVIDIA Corporation\NVIDIA Overlay\debug.log" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --launch-time-ticks=16089271 --mojo-platform-channel-handle=3280 --field-trial-handle=2288,i,12899158049272224289,17444002319571204558,131072 --disable-features=CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:1
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Ableton\USB Audio Driver\x64\AbletonAudioCpl.exe" -hide
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe" 
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" 
"C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding
C:\Windows\system32\ApplicationFrameHost.exe -Embedding
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe" -ServerName:InputApp.AppXk0k6mrh4r2q0ct33a9wgbez0x7v9cz5y.mca
"C:\Program Files\Google\Chrome\Application\chrome.exe" 
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\LANGOLIER\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\LANGOLIER\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=136.0.7103.93 --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ffdaf45cba8,0x7ffdaf45cbb4,0x7ffdaf45cbc0
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=1992 /prefetch:2
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=2196 /prefetch:3
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --no-pre-read-main-dll --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=2432 /prefetch:8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=282198103 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=4196 /prefetch:2
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=282232775 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=4616 /prefetch:2
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=290373858 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=7400 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=292138444 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=7616 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe -Embedding
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=8112 /prefetch:8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=295282258 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=8952 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=8600 /prefetch:8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=298923761 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=9132 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=300021493 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=9292 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=300376155 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=9896 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=305012195 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=10016 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=305416180 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=6724 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=311207557 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=10860 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=311283895 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=10572 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=311612000 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11196 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=312677884 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11168 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=318672651 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11212 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=320541254 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11128 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=321546040 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11416 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=323835085 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11584 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=325960921 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11340 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=461229349 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=5968 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=615942331 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=7968 /prefetch:1
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
"C:\Program Files\Mozilla Firefox\firefox.exe"
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250430203103 -prefsHandle 2080:34381 -prefMapHandle 2084:277311 -ipcHandle 2148 -initialChannelId {47543b20-dfc1-4172-a653-4c3f7fe66136} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250430203103 -prefsHandle 2404:34381 -prefMapHandle 2408:277311 -ipcHandle 2420 -initialChannelId {206c234c-e8f3-4779-a97e-bef39b33be68} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3552:36287 -prefMapHandle 3556:277311 -jsInitHandle 3560:247720 -parentBuildID 20250430203103 -ipcHandle 3568 -initialChannelId {a2b08445-84a7-42aa-bf4f-89b8b6863067} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250430203103 -prefsHandle 3760:36287 -prefMapHandle 3764:277311 -ipcHandle 3552 -initialChannelId {5b15f81f-1d5d-446d-9b3f-ac1cd43b3c99} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4752:44296 -prefMapHandle 4756:277311 -jsInitHandle 4760:247720 -parentBuildID 20250430203103 -ipcHandle 4640 -initialChannelId {d4fee4f5-71e6-4eb0-9d17-7e8a2d6cbf34} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250430203103 -sandboxingKind 0 -prefsHandle 5360:44441 -prefMapHandle 5364:277311 -ipcHandle 5344 -initialChannelId {ff41b3b3-cdbe-4574-b2d1-bb706972dfaa} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6300:40780 -prefMapHandle 6304:277311 -jsInitHandle 6308:247720 -parentBuildID 20250430203103 -ipcHandle 6316 -initialChannelId {2012c30d-d602-42dc-8712-a5a2c39d24c3} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6480:40780 -prefMapHandle 5284:277311 -jsInitHandle 6564:247720 -parentBuildID 20250430203103 -ipcHandle 6240 -initialChannelId {0819f2c0-eb2a-4e7f-bea8-d7fae5f2f003} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6192:40780 -prefMapHandle 6196:277311 -jsInitHandle 6180:247720 -parentBuildID 20250430203103 -ipcHandle 6400 -initialChannelId {40382623-31b8-4b99-9c73-56860031a08a} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6124:40780 -prefMapHandle 6536:277311 -jsInitHandle 6260:247720 -parentBuildID 20250430203103 -ipcHandle 4496 -initialChannelId {7c254d4c-93e6-4c91-9299-1e316830422c} -parentPid 1852 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1852" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
"C:\Program Files\Waterfox\waterfox.exe"
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=1976 -parentBuildID 20250303140000 -prefsHandle 1960 -prefMapHandle 1952 -prefsLen 30674 -prefMapSize 290144 -appDir "C:\Program Files\Waterfox\browser" - {21b7d034-3c00-47be-9b49-42e425fb6b77} 7600  gpu
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=2228 -parentBuildID 20250303140000 -prefsHandle 2400 -prefMapHandle 2396 -prefsLen 30710 -prefMapSize 290144 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {2a972a25-446e-4459-8bd2-3d4019fa9c9e} 7600  socket
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=2892 -childID 1 -isForBrowser -prefsHandle 2884 -prefMapHandle 2880 -prefsLen 31779 -prefMapSize 290144 -jsInitHandle 1436 -jsInitLen 234780 -parentBuildID 20250303140000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {7994f840-5f49-4aec-9907-6cfa12ee8eb6} 7600  tab
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=4104 -childID 2 -isForBrowser -prefsHandle 4196 -prefMapHandle 4192 -prefsLen 35606 -prefMapSize 290144 -jsInitHandle 1436 -jsInitLen 234780 -parentBuildID 20250303140000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {918b563e-11d1-469a-8886-84b4db09e90d} 7600  tab
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=4924 -parentBuildID 20250303140000 -sandboxingKind 0 -prefsHandle 5088 -prefMapHandle 5100 -prefsLen 35657 -prefMapSize 290144 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {9d4cf1da-52b9-43bf-8885-1723b4a66380} 7600  utility
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=6700 -parentBuildID 20250303140000 -prefsHandle 7724 -prefMapHandle 7856 -prefsLen 38084 -prefMapSize 290144 -appDir "C:\Program Files\Waterfox\browser" - {6ab6e9bb-b0f6-4fac-aabd-39c309df867a} 7600  rdd
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=4536 -parentBuildID 20250303140000 -sandboxingKind 1 -prefsHandle 7204 -prefMapHandle 7212 -prefsLen 38084 -prefMapSize 290144 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {0398369f-559d-46a9-bf58-d4a7b148962a} 7600  utility
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=1110957634 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11996 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=1118931345 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=11248 /prefetch:1
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=5648 -childID 16 -isForBrowser -prefsHandle 2776 -prefMapHandle 5540 -prefsLen 33627 -prefMapSize 290144 -jsInitHandle 1436 -jsInitLen 234780 -parentBuildID 20250303140000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {79fc4e6d-46bd-4160-8a24-8d71fcd76739} 7600  tab
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=7248 -childID 17 -isForBrowser -prefsHandle 5348 -prefMapHandle 4988 -prefsLen 33627 -prefMapSize 290144 -jsInitHandle 1436 -jsInitLen 234780 -parentBuildID 20250303140000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {c5d17f27-fa82-4c3b-ba89-a74e837a051e} 7600  tab
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=1229439219 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=9972 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=1314019172 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=7736 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --init-isolate-as-foreground --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=1314295205 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=12012 /prefetch:2
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --pdf-renderer --video-capture-use-gpu-memory-buffer --lang=ru --js-flags=--jitless --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=1314458340 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=8588 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=1812382574 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=6644 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=1969795416 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=5424 /prefetch:1
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=206 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=3012423113 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=6012 /prefetch:1
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=6432 -childID 20 -isForBrowser -prefsHandle 7100 -prefMapHandle 7688 -prefsLen 33627 -prefMapSize 290144 -jsInitHandle 1436 -jsInitLen 234780 -parentBuildID 20250303140000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {bafd558e-cbff-4244-abc9-cd48351e1b2d} 7600  tab
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=7888 -childID 21 -isForBrowser -prefsHandle 7364 -prefMapHandle 6536 -prefsLen 33627 -prefMapSize 290144 -jsInitHandle 1436 -jsInitLen 234780 -parentBuildID 20250303140000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {13c18f73-8318-4a97-8269-9191f0e67340} 7600  tab
"C:\Program Files\Waterfox\waterfox.exe" -contentproc --channel=5568 -childID 22 -isForBrowser -prefsHandle 1744 -prefMapHandle 4432 -prefsLen 33690 -prefMapSize 290144 -jsInitHandle 1436 -jsInitLen 234780 -parentBuildID 20250303140000 -win32kLockedDown -appDir "C:\Program Files\Waterfox\browser" - {17ce338d-4434-424f-a7bd-2d114d45e489} 7600  tab
\\?\C:\USERS\LANGOLIER\DESKTOP\UVS_V415ENG\eycpvw
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=262 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=4760495991 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=13828 /prefetch:1
C:\Windows\System32\mousocoreworker.exe -Embedding
C:\Windows\System32\svchost.exe -k netsvcs -p
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=278 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=5161071666 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=6984 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=279 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=5170678497 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=8832 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=281 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=5225360237 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=14232 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=288 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=5412469486 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=13324 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=292 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=5621207007 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=7536 /prefetch:1
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Users\LANGOLIER\Desktop\AutoLogger\AutoLogger.exe" 
"C:\Users\LANGOLIER\Desktop\AutoLogger\AutoLogger\AV\AV_Z.exe" Script=AV\GeneralScript.txt HiddenMode=0 AM=Y
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=301 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=5855201613 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=12320 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=303 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=5855524515 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=9524 /prefetch:1
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --no-pre-read-main-dll --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=304 --time-ticks-at-unix-epoch=-1746802008181166 --launch-time-ticks=5922076757 --field-trial-handle=2004,i,9139668000378466591,17456563957811420971,262144 --variations-seed-version=20250508-180051.885000 --mojo-platform-channel-handle=14096 /prefetch:2
"C:\Users\LANGOLIER\Desktop\AutoLogger\AutoLogger\RSIT\RSITx64.exe" /silent /m3 /autolog /logfolder "C:\Users\LANGOLIER\Desktop\AutoLogger\AutoLogger\RSIT\Log" /nohjt /rus 
C:\Windows\system32\wbem\wmiprvse.exe

====== Папка назначенных заданий ======

C:\Windows\system32\tasks\BlockTelemetry - cmd /c C:\Windows\BlockTelemetry.cmd
C:\Windows\system32\tasks\HPCustParticipation HP Deskjet 4610 series - "C:\Program Files\HP\HP Deskjet 4610 series\Bin\HPCustPartic.exe" /UA 11.6 /DDV 0x0a00
C:\Windows\system32\tasks\MicrosoftEdgeUpdateTaskMachineCore{2DCE3D6F-E2EF-4658-B06E-7D93B7CB611F} - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /c
C:\Windows\system32\tasks\MicrosoftEdgeUpdateTaskMachineUA{8952A70D-8988-4712-A790-CBE11387C7AE} - C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\NVIDIA app SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - "C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA app.exe"
C:\Windows\system32\tasks\Opera scheduled assistant Autoupdate 1729722455 - C:\Program Files\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Program Files\Opera\assistant" --producttype=assistant $(Arg0)
C:\Windows\system32\tasks\Opera scheduled Autoupdate 1729722450 - C:\Program Files\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --bypasslauncher $(Arg0)
C:\Windows\system32\tasks\StartIsBack health check - "C:\Program Files (x86)\StartIsBack\startscreen.exe" /check
C:\Windows\system32\tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} - C:\Program Files\COMODO\COMODO Internet Security\cis.exe --cistrayUI
C:\Windows\system32\tasks\WaterfoxLimited\Waterfox Default Browser Agent 6F940AC27A98DD61 - C:\Program Files\Waterfox\default-browser-agent.exe do-task "6F940AC27A98DD61"
C:\Windows\system32\tasks\Microsoft\Windows\WwanSvc\NotificationTask - %SystemRoot%\System32\WiFiTask.exe wwan
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join - %SystemRoot%\System32\dsregcmd.exe $(Arg0) $(Arg1) $(Arg2)
C:\Windows\system32\tasks\Microsoft\Windows\Workplace Join\Recovery-Check - %SystemRoot%\System32\dsregcmd.exe /checkrecovery
C:\Windows\system32\tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start - C:\Windows\system32\sc.exe start wuauserv
C:\Windows\system32\tasks\Microsoft\Windows\WCM\WiFiTask - %SystemRoot%\System32\WiFiTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Report policies - %systemroot%\system32\usoclient.exe ReportPolicies
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - %systemroot%\system32\usoclient.exe StartMaintenanceWork
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan - %systemroot%\system32\usoclient.exe StartScan
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan Static Task - %systemroot%\system32\usoclient.exe StartScan
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - %systemroot%\system32\usoclient.exe StartWork
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Work - %systemroot%\system32\usoclient.exe StartWork
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\UpdateModelTask - %systemroot%\system32\usoclient.exe StartModelUpdates
C:\Windows\system32\tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker - %systemroot%\system32\MusNotification.exe
C:\Windows\system32\tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr - %windir%\System32\UNP\UpdateNotificationMgr.exe
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\srtasks.exe ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask - %windir%\system32\rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
C:\Windows\system32\tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe -e
C:\Windows\system32\tasks\Microsoft\Windows\Subscription\LicenseAcquisition - %SystemRoot%\system32\ClipRenew.exe
C:\Windows\system32\tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization - %windir%\system32\defrag.exe -c -h -g -# -m 8 -i 13500
C:\Windows\system32\tasks\Microsoft\Windows\StateRepository\MaintenanceTasks - %windir%\system32\rundll32.exe %windir%\system32\Windows.StateRepositoryClient.dll,StateRepositoryDoMaintenanceTasks
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceAgentTask - %windir%\system32\SpaceAgent.exe
C:\Windows\system32\tasks\Microsoft\Windows\SpacePort\SpaceManagerTask - %windir%\system32\spaceman.exe /Work
C:\Windows\system32\tasks\Microsoft\Windows\SharedPC\Account Cleanup - %windir%\System32\rundll32.exe %windir%\System32\Windows.SharedPC.AccountManager.dll,StartMaintenance
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\PushToInstall\LoginCheck - %windir%\system32\sc.exe start pushtoinstall login
C:\Windows\system32\tasks\Microsoft\Windows\PushToInstall\Registration - %windir%\system32\sc.exe start pushtoinstall registration
C:\Windows\system32\tasks\Microsoft\Windows\Printing\EduPrintProv - %windir%\system32\eduprintprov.exe
C:\Windows\system32\tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers - %SystemRoot%\System32\drvinst.exe 6
C:\Windows\system32\tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI - %WINDIR%\system32\SecureBootEncodeUEFI.exe
C:\Windows\system32\tasks\Microsoft\Windows\NlaSvc\WiFiTask - %SystemRoot%\System32\WiFiTask.exe nla
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser - %SystemRoot%\System32\MbaeParserTask.exe
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Cellular - %windir%\system32\ProvTool.exe /turn 7 /source CellStateChangeTask
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Logon - %windir%\system32\ProvTool.exe /turn 5 /source LogonIdleTask
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\Retry - %windir%\system32\ProvTool.exe /turn 5 /source ProvRetryTask
C:\Windows\system32\tasks\Microsoft\Windows\Management\Provisioning\RunOnReboot - %windir%\system32\ProvTool.exe /turn 5 /source ContinueSessionTask
C:\Windows\system32\tasks\Microsoft\Windows\DUSM\dusmtask - %SystemRoot%\System32\dusmtask.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskCleanup\SilentCleanup - %windir%\system32\cleanmgr.exe /autoclean /d %systemdrive%
C:\Windows\system32\tasks\Microsoft\Windows\DirectX\DirectXDatabaseUpdater - %windir%\system32\directxdatabaseupdater.exe
C:\Windows\system32\tasks\Microsoft\Windows\DirectX\DXGIAdapterCache - %windir%\system32\dxgiadaptercache.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c -h -o -$
C:\Windows\system32\tasks\Microsoft\Windows\Clip\License Validation - %SystemRoot%\system32\ClipUp.exe -p -s -o
C:\Windows\system32\tasks\Microsoft\Windows\Clip\LicenseImdsIntegration - %SystemRoot%\system32\fclip.exe
C:\Windows\system32\tasks\Microsoft\Windows\Chkdsk\SyspartRepair - %windir%\system32\bcdboot.exe %windir% /sysrepair
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\applicationdata\appuriverifierdaily - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\applicationdata\appuriverifierinstall - %windir%\system32\AppHostRegistrationVerifier.exe
C:\Windows\system32\tasks\Microsoft\Windows\applicationdata\CleanupTemporaryState - %windir%\system32\rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
C:\Windows\system32\tasks\Microsoft\Windows\applicationdata\DsSvcCleanup - %windir%\system32\dstokenclean.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem138.0.7156.0{353E2346-4245-4665-81E2-07BC9435DAF7} - "C:\Program Files (x86)\Google\GoogleUpdater\138.0.7156.0\updater.exe" --wake --system
C:\Windows\system32\tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} - "C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --cistrayUI
C:\Windows\system32\tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} - "C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe" --launchSchedule {06A09C0F-DD9C-4191-A670-71115CD78627}
C:\Windows\system32\tasks\COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} - "C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe" --launchSchedule {947247B5-026A-4437-9371-770782BE839D}
C:\Windows\system32\tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} - "C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe" --launchSchedule {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}
C:\Windows\system32\tasks\COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} - "C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --telemetry
C:\Windows\system32\tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} - "C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe" --launchSchedule {A6D52E4F-569B-4756-B3D8-DF217313DA85}

=========Mozilla firefox=========

ProfilePath - C:\Users\LANGOLIER\AppData\Roaming\Mozilla\Firefox\Profiles\grmuoq14.default-release

C:\Users\LANGOLIER\AppData\Roaming\Mozilla\Firefox\Profiles\grmuoq14.default-release\addons.json
uBlock Origin - extension - uBlock0@raymondhill.net
NoScript - extension - {73a6fe31-595d-460b-a920-fcc0f8843232}
Imagus - extension - {00000f2a-7cde-4f20-83ed-434fcb420d71}

C:\Users\LANGOLIER\AppData\Roaming\Mozilla\Firefox\Profiles\grmuoq14.default-release\extensions.json
Imagus - extension - {00000f2a-7cde-4f20-83ed-434fcb420d71} - 
uBlock Origin - extension - uBlock0@raymondhill.net - 
Form Autofill - extension - formautofill@mozilla.org - 
Picture-In-Picture - extension - pictureinpicture@mozilla.org - 
Add-ons Search Detection - extension - addons-search-detection@mozilla.com - 
Web Compatibility Interventions - extension - webcompat@mozilla.org - 
System theme — auto - theme - default-theme@mozilla.org - 
Add-ons Search Detection - extension - addons-search-detection@mozilla.com - 
Light - theme - firefox-compact-light@mozilla.org - 
Dark - theme - firefox-compact-dark@mozilla.org - 
Firefox Alpenglow - theme - firefox-alpenglow@mozilla.org - 
NoScript - extension - {73a6fe31-595d-460b-a920-fcc0f8843232} - 

=========Google Chrome=========

C:\Users\LANGOLIER\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Интернет-магазин Chrome 0.2
Extension cjpalhdlnbpafiamejdnhcphjbkeiagm  uBlock Origin 1.63.2
Extension doojmbjmlfjjnbmnoijecmcbfeoakpjm  NoScript 12.6
Extension einmhcleeonenkkldjlmhhcmgolhblhh   
Extension ghbmnnjooekpmoecnnnilnnbdlolhkhi  Google Документы офлайн 1.91.1
Extension immpkjjlgappgfkkfieppnmlhakdmaab  Imagus 0.9.9.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf   
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension ngcldkkokhibdmeamidppdknbhegmhdh   
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.24
Extension nmmhkkegccagdldgiimedpiccmgmieda  Платежная система Интернет-магазина Chrome 1.0.0.6
Extension nmmicjeknamkfloonkhhcjmomieiodli  YouTube Summary with ChatGPT & Claude 2.0.10
Extension npgcnondjocldhldegnakemclmfkngch  Обход блокировок Рунета 0.0.1.63
Extension odjhifogjcknibkahlpidmdajjpkkcfn   
Extension pdcjjgefkpoemmlcjfcfkeminneboaob  Modern Flat 1
Homepage: http://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=IL&userid=d421f621-1f89-4981-927f-a63c2c19e117&searchtype=hp&installDate={installDate}
default_search_provider.search_url: 
C:\Users\LANGOLIER\AppData\Local\Google\Chrome\User Data\Default\Preferences
Homepage: 
default_search_provider.search_url: 

======Снимок реестра ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0BBF48E6-FF9D-4FAA-AA4D-BDBB423B2BE1}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0BBF48E6-FF9D-4FAA-AA4D-BDBB423B2BE1}]
"URL"=https://www.google.com/search?q={searchTerms}


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}]
IEToEdge BHO - C:\Program Files (x86)\Microsoft\Edge\Application\136.0.3240.64\BHO\ie_to_edge_bho_64.dll [2025-05-08 569912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}]
IEToEdge BHO - C:\Program Files (x86)\Microsoft\Edge\Application\136.0.3240.64\BHO\ie_to_edge_bho.dll [2025-05-08 459832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Opera Browser Assistant"=C:\Program Files\Opera\assistant\browser_assistant.exe [2025-04-14 4536216]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"com.squirrel.splice.Splice"=C:\Users\LANGOLIER\AppData\Local\splice\app-5.3.21411\Splice.exe [2025-05-09 186293128]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IseUI"=C:\Program Files (x86)\COMODO\Internet Security Essentials\vkise.exe [2019-01-29 4187856]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]
""= []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Ableton USB Audio Control Panel Autostart.lnk - C:\Program Files\Ableton\USB Audio Driver\x64\AbletonAudioCpl.exe

C:\Users\LANGOLIER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Контроль предупреждений о чернилах - .lnk - C:\Windows\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HidSpiCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcCtnrSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NgcSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBuilder]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CBDHSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HidSpiCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsQuic]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NgcCtnrSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NgcSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=0
"DSCAutomationHostEnabled"=2
"EnableCursorSuppression"=1
"EnableFullTrustStartupTasks"=2
"EnableInstallerDetection"=0
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"EnableUwpStartupTasks"=2
"EnableVirtualization"=0
"PromptOnSecureDesktop"=0
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
"LocalAccountTokenFilterPolicy"=0
"DontDisplayLastUserName"=0
"EnableFirstLogonAnimation"=0
"EnableLinkedConnections"=0
"DisableAutomaticRestartSignOn"=1
"undockwithoutlogon"=1
"DisableCAD"=1
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"NoConnectedUser"=3

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveTrack"=1
"NoInstrumentation"=1
"DisallowCpl"=1
"NoResolveSearch"=1
"HideSCAHealth"=1
"HonorAutoRunSetting"=1
"NoDriveTypeAutoRun"=145
"HideSCAMeetNow"=1
"NoAutorun"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"NoPublishingWizard"=1
"NoWebServices"=1
"NoOnlinePrintsWizard"=1
"NoStartMenuMFUprogramsList"=1
"HideSCAMeetNow"=1
"HonorAutoRunSetting"=1
"NoDriveTypeAutoRun"=255
"NoWindowsUpdate"=1
"SettingsPageVisibility"=hide:home;mobile-devices;mobile-devices-addphone;mobile-devices-addphone-direct;workplace;maps;maps-downloadmaps;search-permissions;cortana-windowssearch;search-moredetails;emailandaccounts;privacy-speechtyping;privacy-general;privacy-feedback;privacy-calendar;privacy-location;privacy-messaging;privacy-motion;privacy-accountinfo;privacy-callhistory;privacy-automaticfiledownloads;privacy-appdiagnostics;privacy-radios;privacy-voiceactivation;privacy-contacts;privacy-email;privacy-notifications;privacy-tasks;privacy-customdevices;privacy-speech;privacy-phonecalls;privacy-activityhistory;clipboard;findmydevice;easeofaccess-eyecontrol;easeofaccess-speechrecognition;speech;backup;delivery-optimization;windowsdefender;family-group;crossdevice;project
"NoInstrumentation"=1
"NoAutorun"=1
"AllowOnlineTips"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AggregatorHost.exe]
"Debugger" = %windir%\System32\taskkill.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aitstatic.exe]
"Debugger" = %windir%\System32\taskkill.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe]
"Debugger" = %windir%\System32\taskkill.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DeviceCensus.exe]
"Debugger" = %windir%\system32\taskkill.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SecHealthUI.exe]
"Debugger" = %windir%\system32\taskkill.exe
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AggregatorHost.exe]
"Debugger" = %windir%\System32\taskkill.exe
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\aitstatic.exe]
"Debugger" = %windir%\System32\taskkill.exe
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe]
"Debugger" = %windir%\System32\taskkill.exe
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DeviceCensus.exe]
"Debugger" = %windir%\system32\taskkill.exe
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SecHealthUI.exe]
"Debugger" = %windir%\system32\taskkill.exe


[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
"StubPath" = "C:\Program Files\Google\Chrome\Application\136.0.7103.93\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --channel=stable
[HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}]
"StubPath" = "C:\Program Files (x86)\Microsoft\Edge\Application\136.0.3240.64\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"aux"=wdmaud.drv
"midi"=wdmaud.drv
"midimapper"=midimap.dll
"mixer"=wdmaud.drv
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wave"=wdmaud.drv
"wavemapper"=msacm32.drv
"msacm.l3acm"=%SystemRoot%\System32\l3codecp.acm
"aux2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave2"=wdmaud.drv
"aux1"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave3"=wdmaud.drv
"aux3"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave5"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave4"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave1"=wdmaud.drv

====== Ассоциации файлов ======

.inf - install - 
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== Список файлов и папок, созданных за последние 3 месяца ======

2025-05-09 17:33:17 ----D---- C:\Users\LANGOLIER\AppData\Roaming\Splice
2025-05-05 20:09:29 ----D---- C:\Program Files\Mozilla Firefox
2025-05-01 10:13:54 ----D---- C:\Program Files\qBittorrent
2025-04-26 14:43:32 ----D---- C:\ProgramData\ArturiaSC
2025-04-26 14:43:32 ----D---- C:\Program Files (x86)\Arturia
2025-04-26 14:42:28 ----D---- C:\ProgramData\Arturia
2025-04-26 14:42:28 ----D---- C:\Program Files\Arturia
2025-04-15 16:14:42 ----D---- C:\Users\LANGOLIER\AppData\Roaming\Xfer
2025-04-15 16:13:33 ----D---- C:\Program Files\Cableguys
2025-04-11 20:54:04 ----D---- C:\Users\LANGOLIER\AppData\Roaming\FL Cloud Plugins
2025-04-11 20:51:40 ----SHD---- C:\Config.Msi
2025-04-11 20:51:23 ----D---- C:\Program Files\FL Cloud Plugins
2025-04-11 20:47:29 ----D---- C:\Program Files\Image-Line
2025-04-11 14:58:54 ----A---- C:\Windows\unins000.exe
2025-04-11 14:58:54 ----A---- C:\Windows\unins000.dat
2025-03-29 13:54:57 ----D---- C:\ProgramData\Scaler Music
2025-03-29 13:54:57 ----D---- C:\Program Files\Scaler Music
2025-03-04 22:16:26 ----D---- C:\Program Files\Waterfox
2025-02-28 14:12:29 ----D---- C:\Users\LANGOLIER\AppData\Roaming\Plugin Boutique
2025-02-28 14:08:31 ----D---- C:\Program Files\Plugin Boutique
2025-02-27 18:45:15 ----A---- C:\Windows\SYSWOW64\vulkaninfo-1-999-0-0-0.exe
2025-02-27 18:45:15 ----A---- C:\Windows\SYSWOW64\vulkaninfo.exe
2025-02-27 18:45:15 ----A---- C:\Windows\SYSWOW64\vulkan-1-999-0-0-0.dll
2025-02-27 18:45:15 ----A---- C:\Windows\SYSWOW64\vulkan-1.dll
2025-02-27 18:45:15 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2025-02-27 18:45:15 ----A---- C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2025-02-27 18:45:15 ----A---- C:\Windows\system32\vulkaninfo.exe
2025-02-27 18:45:15 ----A---- C:\Windows\system32\vulkan-1-999-0-0-0.dll
2025-02-27 18:45:15 ----A---- C:\Windows\system32\vulkan-1.dll
2025-02-27 18:45:15 ----A---- C:\Windows\system32\OpenCL.dll
2025-02-27 18:45:13 ----A---- C:\Windows\SYSWOW64\nvofapi.dll
2025-02-27 18:45:13 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2025-02-27 18:45:13 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2025-02-27 18:45:13 ----A---- C:\Windows\SYSWOW64\nvEncodeAPI.dll
2025-02-27 18:45:13 ----A---- C:\Windows\system32\nvofapi64.dll
2025-02-27 18:45:13 ----A---- C:\Windows\system32\nvml.dll
2025-02-27 18:45:13 ----A---- C:\Windows\system32\NvIFR64.dll
2025-02-27 18:45:13 ----A---- C:\Windows\system32\nvidia-smi.exe
2025-02-27 18:45:13 ----A---- C:\Windows\system32\nvidia-pcc.exe
2025-02-27 18:45:13 ----A---- C:\Windows\system32\NvFBC64.dll
2025-02-27 18:45:13 ----A---- C:\Windows\system32\nvEncodeAPI64.dll
2025-02-27 18:45:12 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2025-02-27 18:45:12 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2025-02-27 18:45:12 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2025-02-27 18:45:12 ----A---- C:\Windows\system32\nvdebugdump.exe
2025-02-27 18:45:12 ----A---- C:\Windows\system32\nvcuvid.dll
2025-02-27 18:45:12 ----A---- C:\Windows\system32\nvcudadebugger.dll
2025-02-27 18:45:12 ----A---- C:\Windows\system32\nvcuda.dll
2025-02-27 18:45:12 ----A---- C:\Windows\system32\nvcpl.dll
2025-02-27 18:45:12 ----A---- C:\Windows\system32\nvapi64.dll
2025-02-27 18:45:11 ----A---- C:\Windows\system32\MCU.exe
2025-02-17 21:12:24 ----D---- C:\reFX
2025-02-17 21:11:26 ----D---- C:\Users\LANGOLIER\AppData\Roaming\reFX
2025-02-17 21:11:23 ----D---- C:\ProgramData\reFX

====== Список файлов и папок, измененных за последние 3 месяца ======

2025-05-09 19:25:30 ----D---- C:\Temp
2025-05-09 19:22:52 ----D---- C:\Windows\Prefetch
2025-05-09 19:10:37 ----SHD---- C:\System Volume Information
2025-05-09 18:53:45 ----D---- C:\Windows\Temp
2025-05-09 18:01:20 ----RD---- C:\Program Files
2025-05-09 17:51:21 ----D---- C:\Windows\System32
2025-05-09 17:51:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2025-05-09 17:51:20 ----D---- C:\Windows\INF
2025-05-09 17:49:00 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2025-05-09 17:46:59 ----D---- C:\ProgramData\NVIDIA
2025-05-09 17:42:53 ----D---- C:\Windows\SystemTemp
2025-05-09 14:22:14 ----RD---- C:\Windows\Microsoft.NET
2025-05-08 23:58:00 ----D---- C:\Windows\system32\SleepStudy
2025-05-07 20:05:06 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2025-05-06 21:35:30 ----D---- C:\Windows
2025-05-01 16:07:57 ----D---- C:\Users\LANGOLIER\AppData\Roaming\qBittorrent
2025-05-01 14:46:09 ----D---- C:\Windows\system32\drivers
2025-05-01 14:38:45 ----SHD---- C:\$RECYCLE.BIN
2025-05-01 14:36:09 ----D---- C:\Program Files\VSTPlugins
2025-04-28 21:40:47 ----D---- C:\Program Files\Opera
2025-04-28 21:40:46 ----D---- C:\Windows\system32\Tasks
2025-04-26 15:20:10 ----D---- C:\Users\LANGOLIER\AppData\Roaming\DJ.Studio
2025-04-26 15:17:14 ----D---- C:\Program Files\DJ.Studio
2025-04-26 14:43:32 ----RD---- C:\Program Files (x86)
2025-04-26 14:43:32 ----HD---- C:\ProgramData
2025-04-26 14:42:34 ----D---- C:\Program Files (x86)\Common Files
2025-04-18 11:07:17 ----D---- C:\Windows\AppReadiness
2025-04-16 15:06:36 ----D---- C:\Users\LANGOLIER\AppData\Roaming\Ableton
2025-04-15 17:17:18 ----D---- C:\ProgramData\Ableton
2025-04-15 16:13:33 ----D---- C:\Program Files\Common Files\VST3
2025-04-12 12:24:43 ----HD---- C:\Program Files\WindowsApps
2025-04-11 21:09:00 ----D---- C:\ProgramData\ValhallaDelay
2025-04-11 21:08:57 ----D---- C:\Users\LANGOLIER\AppData\Roaming\Tracktion
2025-04-11 20:51:42 ----SHD---- C:\Windows\Installer
2025-04-11 20:51:42 ----D---- C:\ProgramData\Package Cache
2025-02-27 19:52:35 ----D---- C:\Windows\system32\catroot2
2025-02-27 18:50:54 ----D---- C:\Windows\system32\DriverStore
2025-02-27 18:50:47 ----D---- C:\Windows\SysWOW64
2025-02-27 18:50:45 ----D---- C:\Windows\system32\drivers\NVIDIA Corporation
2025-02-27 18:50:45 ----D---- C:\Windows\LastGood
2025-02-27 18:44:44 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2025-02-19 03:24:44 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2025-02-19 03:24:41 ----A---- C:\Windows\system32\nvspcap64.dll
2025-02-19 03:24:39 ----A---- C:\Windows\SYSWOW64\FvSDK_x86.dll
2025-02-19 03:24:38 ----A---- C:\Windows\system32\FvSDK_x64.dll
2025-02-19 03:05:44 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2025-02-19 03:05:44 ----A---- C:\Windows\system32\nvaudcap64v.dll
2025-02-19 03:05:05 ----A---- C:\Windows\NvContainerRecovery.bat

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== Список драйверов (тип запуска: R=Запущен, S=остановлен, 0=Загрузочный, 1=Системный, 2=Автоматически, 3=Вручную, 4=Отключено) ======

R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\Windows\system32\drivers\iorate.sys [2024-09-13 58328]
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\Windows\system32\drivers\SgrmAgent.sys [2019-12-07 88080]
R1 afunix;afunix; C:\Windows\system32\drivers\afunix.sys [2024-09-13 44032]
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\Windows\system32\drivers\bam.sys [2019-12-07 78136]
R1 CimFS;CimFS; C:\Windows\system32\drivers\CimFS.sys [2024-09-13 95232]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2021-01-22 38880]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2021-01-22 844000]
R1 cmdhlp;COMODO Internet Security Helper Driver; C:\Windows\system32\DRIVERS\cmdhlp.sys [2021-01-22 47104]
R1 inspect;@oem7.inf,%inspect_Desc%;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2021-01-22 130256]
R1 isedrv;Internet Security Essentials; C:\Windows\system32\drivers\isedrv.sys [2018-08-30 63256]
R2 bindflt;@%systemroot%\system32\drivers\bindflt.sys,-100; C:\Windows\system32\drivers\bindflt.sys [2024-09-13 152544]
R2 CldFlt;Windows Cloud Files Filter Driver; C:\Windows\system32\drivers\cldflt.sys [2024-09-13 503808]
R3 e1i65x64;@net1ic64.inf,%e1iExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\System32\drivers\e1i65x64.sys [2019-12-07 553984]
R3 MsQuic;@%SystemRoot%\system32\drivers\msquic.sys,-1; C:\Windows\system32\drivers\msquic.sys [2024-09-13 323440]
R3 NVHDA;@oem17.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2025-01-26 125048]
R3 nvlddmkm;nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d2629211e16b69ec\nvlddmkm.sys [2025-02-27 95755408]
R3 nvvad_WaveExtensible;@oem3.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2024-11-08 59928]
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\Windows\System32\drivers\bttflt.sys [2019-12-07 43832]
S0 cht4iscsi;cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [2019-12-07 319800]
S0 cmdboot;COMODO Early Launch Driver; C:\Windows\System32\DRIVERS\cmdboot.sys [2022-02-15 16368]
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\Windows\System32\drivers\iaStorAVC.sys [2019-12-07 884752]
S0 ItSas35i;ItSas35i; C:\Windows\System32\drivers\ItSas35i.sys [2019-12-07 172344]
S0 megasas2i;megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [2019-12-07 81720]
S0 megasas35i;megasas35i; C:\Windows\System32\drivers\megasas35i.sys [2019-12-07 105480]
S0 nvdimm;@nvdimm.inf,%nvdimm.SvcDesc%;Microsoft NVDIMM device driver; C:\Windows\System32\drivers\nvdimm.sys [2019-12-07 168464]
S0 pmem;@pmem.inf,%pmem.SvcDesc%;Microsoft persistent memory disk driver; C:\Windows\System32\drivers\pmem.sys [2024-09-13 142304]
S0 Ramdisk;Windows RAM Disk Driver; C:\Windows\system32\DRIVERS\ramdisk.sys [2019-12-07 42296]
S0 scmbus;@scmbus.inf,%scmbus.SvcDesc%;Microsoft Storage Class Memory Bus Driver; C:\Windows\System32\drivers\scmbus.sys [2024-09-13 159728]
S3 AcpiDev;@acpidev.inf,%AcpiDev.SvcDesc%;ACPI Devices driver; C:\Windows\System32\drivers\AcpiDev.sys [2019-12-07 23040]
S3 Acx01000;@%SystemRoot%\system32\drivers\Acx01000.sys,-1000; C:\Windows\system32\drivers\Acx01000.sys [2024-09-13 694272]
S3 amdgpio2;@amdgpio2.inf,%GPIO.SvcDesc%;AMD GPIO Client Driver; C:\Windows\System32\drivers\amdgpio2.sys [2019-12-07 18432]
S3 amdi2c;@amdi2c.inf,%amdi2c.SVCDESC%;AMD I2C Controller Service; C:\Windows\System32\drivers\amdi2c.sys [2019-12-07 45568]
S3 applockerfltr;@%systemroot%\system32\srpapi.dll,-102; C:\Windows\system32\drivers\applockerfltr.sys [2024-09-13 18432]
S3 AppvStrm;@%systemroot%\system32\drivers\AppvStrm.sys,-101; C:\Windows\system32\drivers\AppvStrm.sys [2024-09-13 140144]
S3 AppvVemgr;@%systemroot%\system32\drivers\AppvVemgr.sys,-101; C:\Windows\system32\drivers\AppvVemgr.sys [2024-09-13 175472]
S3 AppvVfs;@%systemroot%\system32\drivers\AppvVfs.sys,-101; C:\Windows\system32\drivers\AppvVfs.sys [2024-09-13 156016]
S3 BthA2dp;@microsoft_bluetooth_a2dp.inf,%BthA2dp.ServiceDescription%;Microsoft Bluetooth A2dp driver; C:\Windows\System32\drivers\BthA2dp.sys [2024-09-13 282624]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Служба перечислителя Bluetooth; C:\Windows\System32\drivers\BthEnum.sys [2024-09-13 113664]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [2024-09-13 106496]
S3 BthMini;@bth.inf,%BTHMINI.SvcDesc%;Bluetooth Radio Driver; C:\Windows\System32\drivers\BTHMINI.sys [2024-09-13 45568]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\drivers\BTHport.sys [2024-09-13 1570304]
S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\drivers\BTHUSB.sys [2024-09-13 110592]
S3 CAD;@ChargeArbitration.inf,%CAD_DevDesc%;Charge Arbitration Driver; C:\Windows\System32\drivers\CAD.sys [2019-12-07 66576]
S3 cht4vbd;@cht4vx64.inf,%cht4vbd.generic%;Chelsio Virtual Bus Driver; C:\Windows\System32\drivers\cht4vx64.sys [2019-12-07 1853752]
S3 hidspi;@hidspi_km.inf,%hidspi.SVCDESC%;Microsoft SPI HID Miniport Driver; C:\Windows\System32\drivers\hidspi.sys [2024-09-13 104448]
S3 HidSpiCx;HidSpi KMDF Class Extension; C:\Windows\system32\drivers\HidSpiCx.sys [2024-09-13 92160]
S3 hvservice;@%SystemRoot%\system32\drivers\hvservice.sys,-16; C:\Windows\system32\drivers\hvservice.sys [2024-09-13 96224]
S3 HwNClx0101;Microsoft Hardware Notifications Class Extension Driver; C:\Windows\System32\Drivers\mshwnclx.sys [2019-12-07 30208]
S3 HyperVideo;HyperVideo; C:\Windows\System32\drivers\HyperVideo.sys [2024-09-13 42880]
S3 iagpio;@iagpio.inf,%iagpio.SVCDESC%;Intel Serial IO GPIO Controller Driver; C:\Windows\System32\drivers\iagpio.sys [2019-12-07 36352]
S3 iaLPSS2i_GPIO2;@iaLPSS2i_GPIO2_SKL.inf,%iaLPSS2i_GPIO2.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [2019-12-07 79360]
S3 iaLPSS2i_GPIO2_BXT_P;@iaLPSS2i_GPIO2_BXT_P.inf,%iaLPSS2i_GPIO2_BXT_P.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [2019-12-07 93184]
S3 iaLPSS2i_GPIO2_CNL;@iaLPSS2i_GPIO2_CNL.inf,%iaLPSS2i_GPIO2_CNL.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [2019-12-07 112128]
S3 iaLPSS2i_GPIO2_GLK;@iaLPSS2i_GPIO2_GLK.inf,%iaLPSS2i_GPIO2_GLK.SVCDESC%;Intel(R) Serial IO GPIO Driver v2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [2019-12-07 96256]
S3 iaLPSS2i_I2C_BXT_P;@iaLPSS2i_I2C_BXT_P.inf,%iaLPSS2i_I2C_BXT_P.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [2019-12-07 175104]
S3 iaLPSS2i_I2C_CNL;@iaLPSS2i_I2C_CNL.inf,%iaLPSS2i_I2C_CNL.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys [2019-12-07 177152]
S3 iaLPSS2i_I2C_GLK;@iaLPSS2i_I2C_GLK.inf,%iaLPSS2i_I2C_GLK.SVCDESC%;Intel(R) Serial IO I2C Driver v2; C:\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys [2019-12-07 177664]
S3 IndirectKmd;@%SystemRoot%\system32\drivers\IndirectKmd.sys,-100; C:\Windows\System32\drivers\IndirectKmd.sys [2024-09-13 47104]
S3 intelpmax;@intelpmax.inf,%SvcDesc%;Intel(R) Dynamic Device Peak Power Manager Driver; C:\Windows\System32\drivers\intelpmax.sys [2019-12-07 30720]
S3 IPT;IPT; C:\Windows\System32\drivers\ipt.sys [2019-12-07 59704]
S3 kbldfltr;kbldfltr; C:\Windows\system32\drivers\kbldfltr.sys [2024-09-13 30088]
S3 mausbhost;@mausbhost.inf,%MAUSBHost.ServiceName%;MA-USB Host Controller Driver; C:\Windows\System32\drivers\mausbhost.sys [2019-12-07 537608]
S3 mausbip;@mausbhost.inf,%MAUSBIP.ServiceName%;MA-USB IP Filter Driver; C:\Windows\System32\drivers\mausbip.sys [2019-12-07 64016]
S3 MbbCx;MBB Network Adapter Class Extension; C:\Windows\system32\drivers\MbbCx.sys [2024-09-13 395776]
S3 Microsoft_Bluetooth_AvrcpTransport;@microsoft_bluetooth_avrcptransport.inf,%Microsoft_Bluetooth_AvrcpTransport.ServiceDescription%;Microsoft Bluetooth Avrcp Transport Driver; C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [2024-09-13 66048]
S3 MsSecWfp;@%SystemRoot%\System32\Drivers\mssecwfp.sys,-1001; C:\Windows\system32\drivers\mssecwfp.sys [2024-09-13 71136]
S3 NDKPing;NDKPing Driver; C:\Windows\system32\drivers\NDKPing.sys [2019-12-07 72720]
S3 NetAdapterCx;Network Adapter Wdf Class Extension Library; C:\Windows\system32\drivers\NetAdapterCx.sys [2024-09-13 210944]
S3 netvsc;netvsc; C:\Windows\System32\drivers\netvsc.sys [2024-09-13 303992]
S3 PktMon;Packet Monitor Driver; C:\Windows\system32\drivers\PktMon.sys [2024-09-13 131560]
S3 PNPMEM;@memory.inf,%PNPMEM.SvcDesc%;Microsoft Memory Module Driver; C:\Windows\System32\drivers\pnpmem.sys [2019-12-07 17408]
S3 portcfg;portcfg; C:\Windows\System32\drivers\portcfg.sys [2019-12-07 27136]
S3 ReFS;ReFS; C:\Windows\system32\drivers\ReFS.sys [2024-09-13 2002816]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2021-11-17 38400]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2024-09-13 213504]
S3 rhproxy;@rhproxy.inf,%rhproxy.SVCDESC%;Resource Hub proxy driver; C:\Windows\System32\drivers\rhproxy.sys [2019-12-07 115712]
S3 SDFRd;@SDFRd.inf,%SDFRd.ServiceDesc%;SDF Reflector; C:\Windows\System32\drivers\SDFRd.sys [2019-12-07 35128]
S4 hvcrash;hvcrash; C:\Windows\System32\drivers\hvcrash.sys [2024-09-13 36208]
S4 MsSecFlt;@%SystemRoot%\System32\Drivers\mssecflt.sys,-1001; C:\Windows\system32\drivers\mssecflt.sys [2024-09-13 419296]

====== Список служб (тип запуска: R=Запущена, S=остановлена, 0=Загрузочная, 1=Системная, 2=Автоматически, 3=Вручную, 4=Отключено) ======

R2 CDPUserSvc_40d4d;Служба пользователя платформы подключенных устройств_40d4d; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = 
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2021-11-10 11334144]
R2 CmdAgentProt;COMODO Internet Security Protected Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2021-11-10 11334144]
R2 DeviceService;NetIQ Device Service; C:\Program Files (x86)\NetIQ\Device Service\DeviceService.exe [2022-06-29 3438288]
R2 isesrv;isesrv; C:\Program Files (x86)\COMODO\Internet Security Essentials\isesrv.exe [2019-01-29 1044176]
R2 NvContainerLocalSystem;NVIDIA LocalSystem Container; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2025-02-19 1277480]
R2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_d2629211e16b69ec\Display.NvContainer\NVDisplay.Container.exe [2025-02-27 1275032]
R3 BthAvctpSvc;@%SystemRoot%\system32\BthAvctpSvc.dll,-101; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\System32\BthAvctpSvc.dll
R3 InstallService;Служба установки Microsoft Store; %SystemRoot%\System32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\system32\InstallService.dll
R3 PushToInstall;@%SystemRoot%\system32\pushtoinstall.dll,-200; %SystemRoot%\System32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\system32\PushToInstall.dll
R3 RmSvc;@%SystemRoot%\system32\RMapi.dll,-1001; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\RMapi.dll
S2 CDPUserSvc;@%SystemRoot%\system32\cdpusersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = %SystemRoot%\System32\CDPUserSvc.dll
S2 edgeupdate;Служба "Обновление Microsoft Edge" (edgeupdate); C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2024-10-23 206416]
S2 GoogleUpdaterInternalService138.0.7156.0;Внутренний сервис Google Updater (GoogleUpdaterInternalService138.0.7156.0); C:\Program Files (x86)\Google\GoogleUpdater\138.0.7156.0\updater.exe [2025-05-02 7096416]
S2 GoogleUpdaterService138.0.7156.0;Сервис Google Updater (GoogleUpdaterService138.0.7156.0); C:\Program Files (x86)\Google\GoogleUpdater\138.0.7156.0\updater.exe [2025-05-02 7096416]
S3 AarSvc;@%SystemRoot%\system32\AarSvc.dll,-100; %SystemRoot%\system32\svchost.exe -k AarSvcGroup -p;"ServiceDll" = %SystemRoot%\System32\AarSvc.dll
S3 AarSvc_40d4d;Agent Activation Runtime_40d4d; C:\Windows\system32\svchost.exe -k AarSvcGroup -p;"ServiceDll" = 
S3 AssignedAccessManagerSvc;@%SystemRoot%\system32\assignedaccessmanagersvc.dll,-100; %SystemRoot%\system32\svchost.exe -k AssignedAccessManagerSvc;"ServiceDll" = %SystemRoot%\System32\assignedaccessmanagersvc.dll
S3 autotimesvc;@%SystemRoot%\System32\autotimesvc.dll,-6; %SystemRoot%\system32\svchost.exe -k autoTimeSvc;"ServiceDll" = %SystemRoot%\System32\autotimesvc.dll
S3 battlenet_helpersvc;Battle.net Update Helper Svc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [2025-01-05 3280000]
S3 BluetoothUserService;@%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101; %SystemRoot%\system32\svchost.exe -k BthAppGroup -p;"ServiceDll" = %SystemRoot%\System32\Microsoft.Bluetooth.UserService.dll
S3 BluetoothUserService_40d4d;Служба поддержки пользователей Bluetooth_40d4d; C:\Windows\system32\svchost.exe -k BthAppGroup -p;"ServiceDll" = 
S3 BTAGService;@%SystemRoot%\system32\BTAGService.dll,-101; %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted;"ServiceDll" = %SystemRoot%\System32\BTAGService.dll
S3 camsvc;@%SystemRoot%\system32\CapabilityAccessManager.dll,-1; %SystemRoot%\system32\svchost.exe -k appmodel -p;"ServiceDll" = %SystemRoot%\system32\CapabilityAccessManager.dll
S3 CaptureService;@%SystemRoot%\system32\CaptureService.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\System32\CaptureService.dll
S3 CaptureService_40d4d;CaptureService_40d4d; C:\Windows\system32\svchost.exe -k LocalService -p;"ServiceDll" = 
S3 cbdhsvc;@%SystemRoot%\system32\cbdhsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k ClipboardSvcGroup -p;"ServiceDll" = %SystemRoot%\System32\cbdhsvc.dll
S3 cbdhsvc_40d4d;Пользовательская служба буфера обмена_40d4d; C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p;"ServiceDll" = 
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2021-11-10 2675504]
S3 ConsentUxUserSvc;@%SystemRoot%\system32\ConsentUxClient.dll,-100; %SystemRoot%\system32\svchost.exe -k DevicesFlow;"ServiceDll" = %SystemRoot%\System32\ConsentUxClient.dll
S3 ConsentUxUserSvc_40d4d;ConsentUX_40d4d; C:\Windows\system32\svchost.exe -k DevicesFlow;"ServiceDll" = 
S3 CredentialEnrollmentManagerUserSvc;@%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100; C:\Windows\system32\CredentialEnrollmentManager.exe [2024-09-13 387480]
S3 CredentialEnrollmentManagerUserSvc_40d4d;CredentialEnrollmentManagerUserSvc_40d4d; C:\Windows\system32\CredentialEnrollmentManager.exe [2024-09-13 387480]
S3 dcsvc;@%systemroot%\system32\dcsvc.dll,-101; %systemroot%\system32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\system32\dcsvc.dll
S3 DeviceAssociationBrokerSvc;@%SystemRoot%\system32\deviceaccess.dll,-107; %SystemRoot%\system32\svchost.exe -k DevicesFlow -p;"ServiceDll" = %SystemRoot%\System32\deviceaccess.dll
S3 DeviceAssociationBrokerSvc_40d4d;DeviceAssociationBroker_40d4d; C:\Windows\system32\svchost.exe -k DevicesFlow -p;"ServiceDll" = 
S3 DevicePickerUserSvc;@%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006; %SystemRoot%\system32\svchost.exe -k DevicesFlow;"ServiceDll" = %SystemRoot%\System32\Windows.Devices.Picker.dll
S3 DevicePickerUserSvc_40d4d;DevicePicker_40d4d; C:\Windows\system32\svchost.exe -k DevicesFlow;"ServiceDll" = 
S3 DevicesFlowUserSvc;@%SystemRoot%\system32\DevicesFlowBroker.dll,-103; %SystemRoot%\system32\svchost.exe -k DevicesFlow;"ServiceDll" = %SystemRoot%\System32\DevicesFlowBroker.dll
S3 DevicesFlowUserSvc_40d4d;DevicesFlow_40d4d; C:\Windows\system32\svchost.exe -k DevicesFlow;"ServiceDll" = 
S3 DisplayEnhancementService;@%SystemRoot%\System32\Microsoft.Graphics.Display.DisplayEnhancementService.dll,-1000; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
S3 edgeupdatem;Служба "Обновление Microsoft Edge" (edgeupdatem); C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [2024-10-23 206416]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2019-11-08 46184]
S3 FrameServer;@%systemroot%\system32\FrameServer.dll,-100; %SystemRoot%\System32\svchost.exe -k Camera;"ServiceDll" = %SystemRoot%\system32\FrameServer.dll
S3 FvSvc;NVIDIA FrameView SDK service; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [2025-02-19 906784]
S3 GameInputSvc;@%systemroot%\system32\GameInputSvc.exe,-101; C:\Windows\System32\GameInputSvc.exe [2024-09-13 54384]
S3 GoogleChromeElevationService;Google Chrome Elevation Service (GoogleChromeElevationService); C:\Program Files\Google\Chrome\Application\136.0.7103.93\elevation_service.exe [2025-05-06 2300000]
S3 GraphicsPerfSvc;@%SystemRoot%\system32\GraphicsPerfSvc.dll,-100; %SystemRoot%\System32\svchost.exe -k GraphicsPerfSvcGroup;"ServiceDll" = %SystemRoot%\System32\GraphicsPerfSvc.dll
S3 HvHost;@%SystemRoot%\system32\hvhostsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\hvhostsvc.dll
S3 IpxlatCfgSvc;@%Systemroot%\system32\ipxlatcfg.dll,-500; %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\IpxlatCfg.dll
S3 LxpSvc;@%SystemRoot%\system32\LanguageOverlayServer.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs;"ServiceDll" = %SystemRoot%\System32\LanguageOverlayServer.dll
S3 McpManagementService;@%SystemRoot%\system32\McpManagementService.dll,-100; %SystemRoot%\system32\svchost.exe -k McpManagementServiceGroup;"ServiceDll" = %SystemRoot%\System32\McpManagementService.dll
S3 MicrosoftEdgeElevationService;Microsoft Edge Elevation Service (MicrosoftEdgeElevationService); C:\Program Files (x86)\Microsoft\Edge\Application\136.0.3240.64\elevation_service.exe [2025-05-08 2327632]
S3 MixedRealityOpenXRSvc;@%SystemRoot%\system32\MixedRealityRuntime.dll,-101; %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\MixedRealityRuntime.dll
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2025-05-05 283712]
S3 NaturalAuthentication;@%systemroot%\system32\NaturalAuth.dll,-100; %SystemRoot%\system32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\System32\NaturalAuth.dll
S3 perceptionsimulation;@%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101; C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe [2024-09-13 106496]
S3 PrintWorkflowUserSvc;@%SystemRoot%\system32\PrintWorkflowService.dll,-100; %SystemRoot%\system32\svchost.exe -k PrintWorkflow;"ServiceDll" = %SystemRoot%\System32\PrintWorkflowService.dll
S3 PrintWorkflowUserSvc_40d4d;PrintWorkflow_40d4d; C:\Windows\system32\svchost.exe -k PrintWorkflow;"ServiceDll" = 
S4 AppVClient;@%systemroot%\system32\AppVClient.exe,-102; C:\Windows\system32\AppVClient.exe [2024-09-13 777200]
S4 BcastDVRUserService;@%SystemRoot%\system32\BcastDVRUserService.dll,-100; %SystemRoot%\system32\svchost.exe -k BcastDVRUserService;"ServiceDll" = %SystemRoot%\System32\BcastDVRUserService.dll
S4 BcastDVRUserService_40d4d;Пользовательская служба DVR для игр и трансляции_40d4d; C:\Windows\system32\svchost.exe -k BcastDVRUserService;"ServiceDll" = 
S4 cloudidsvc;@%SystemRoot%\system32\cloudidsvc.dll,-100; %SystemRoot%\system32\svchost.exe -k CloudIdServiceGroup -p;"ServiceDll" = %SystemRoot%\system32\cloudidsvc.dll
S4 DialogBlockingService;@%SystemRoot%\system32\DialogBlockingService.dll,-100; %SystemRoot%\system32\svchost.exe -k DialogBlockingService;"ServiceDll" = %SystemRoot%\System32\DialogBlockingService.dll
S4 DispBrokerDesktopSvc;@%SystemRoot%\system32\dispbroker.desktop.dll,-101; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\System32\DispBroker.Desktop.dll
S4 DusmSvc;@%SystemRoot%\System32\dusmsvc.dll,-1; %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p;"ServiceDll" = %SystemRoot%\System32\dusmsvc.dll
S4 MessagingService_40d4d;MessagingService_40d4d; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = 
S4 MsKeyboardFilter;@%SystemRoot%\system32\KeyboardFilterSvc.dll,-101; %SystemRoot%\system32\svchost.exe -k netsvcs -p;"ServiceDll" = %SystemRoot%\System32\KeyboardFilterSvc.dll
S4 PimIndexMaintenanceSvc_40d4d;Служба контактных данных_40d4d; C:\Windows\system32\svchost.exe -k UnistackSvcGroup;"ServiceDll" = 
S4 SEMgrSvc;@%SystemRoot%\System32\SEMgrSvc.dll,-1001; %SystemRoot%\system32\svchost.exe -k LocalService -p;"ServiceDll" = %SystemRoot%\system32\SEMgrSvc.dll
S4 SgrmBroker;@%SystemRoot%\System32\SgrmBroker.exe,-100; C:\Windows\system32\SgrmBroker.exe [2024-09-13 330584]

-----------------EOF-----------------
