231930
Advanced Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
Regshot 1.9.0 x86 Unicode
Комментарий:
Текущая дата:2019/4/22 14:22:56 , 2019/4/22 14:23:42
Имя компьютера:WIN-GVT4ARIBQAC , WIN-GVT4ARIBQAC
----------------------------------
Новые разделы:2
----------------------------------
HKLM\SYSTEM\ControlSet001\services\VSS\Diag\BITS Writer
HKLM\SYSTEM\CurrentControlSet\services\VSS\Diag\BITS Writer
----------------------------------
Новые параметры:4
----------------------------------
HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_HTTP\0000\Control\ActiveService: "HTTP"
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTTP\0000\Control\ActiveService: "HTTP"
HKU\S-1-5-21-2179018757-2182296143-237416838-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\P:\Fbsg\Ertfubg\Ncc\ertfubg\ertfubg.rkr: 00 00 00 00 00 00 00 00 01 00 00 00 E7 6E 00 00 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00
HKU\S-1-5-21-2179018757-2182296143-237416838-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\P:\Pnyphyngbe\Pnyphybe.rkr: 00 00 00 00 00 00 00 00 01 00 00 00 8A 32 00 00 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00
----------------------------------
Измененные параметры:3
----------------------------------
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ServiceSessionId: 5E 72 16 64 45 03 1C 4D 81 04 6A CD 95 63 A2 48
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ServiceSessionId: BC 7B A8 49 26 35 FD 48 AC 21 56 C0 DA 8C AB F1
HKU\S-1-5-21-2179018757-2182296143-237416838-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA: 00 00 00 00 0D 00 00 00 23 00 00 00 67 A4 08 00 06 00 00 00 0F 00 00 00 06 56 02 00 43 00 3A 00 5C 00 54 00 43 00 5C 00 54 00 6F 00 74 00 61 00 6C 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 C8 02 00 00 00 00 58 3A F5 02 1C EA 72 02 0A 3A F5 02 00 00 00 00 15 00 15 00 06 AC D9 01 D4 3A F5 02 10 00 00 00 0F 00 00 00 B4 EA 72 02 7C EA 72 02 08 FD C8 02 10 00 00 00 6A FF C8 02 15 00 2F 00 3E A7 D9 01 7C E9 72 02 0E 00 00 00 0A 00 00 00 4E C6 F5 02 04 00 72 02 08 FD C8 02 0B 00 00 00 00 00 00 00 09 09 09 00 09 09 09 09 00 09 11 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4C E9 72 02 96 5B 1C 76 78 ED 72 02 47 44 45 46 08 FD C8 02 62 02 00 00 00 00 00 00 7C E9 72 02 24 EB 72 02 62 02 00 00 80 ED 72 02 88 E9 72 02 84 F8 1D 76 00 00 01 00 38 A7 D9 01 11 00 00 00 78 53 21 00 70 53 21 00 15 00 00 00 DC E9 00 00 69 A7 2D B3 8C E9 72 02 82 91 55 76 DC E9 72 02 90 E9 72 02 27 95 55 76 00 00 00 00 8C D3 7F 03 B8 E9 72 02 CD 94 55 76 8C D3 7F 03 64 EA 72 02 00 CF 7F 03 E1 94 55 76 00 00 00 00 00 CF 7F 03 64 EA 72 02 C0 E9 72 02 06 00 00 00 0F 00 00 00 06 56 02 00 43 00 3A 00 5C 00 54 00 43 00 5C 00 54 00 6F 00 74 00 61 00 6C 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 C8 02 00 00 00 00 58 3A F5 02 1
C EA 72 02 0A 3A F5 02 00 00 00 00 15 00 15 00 06 AC D9 01 D4 3A F5 02 10 00 00 00 0F 00 00 00 B4 EA 72 02 7C EA 72 02 08 FD C8 02 10 00 00 00 6A FF C8 02 15 00 2F 00 3E A7 D9 01 7C E9 72 02 0E 00 00 00 0A 00 00 00 4E C6 F5 02 04 00 72 02 08 FD C8 02 0B 00 00 00 00 00 00 00 09 09 09 00 09 09 09 09 00 09 11 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4C E9 72 02 96 5B 1C 76 78 ED 72 02 47 44
45 46 08 FD C8 02 62 02 00 00 00 00 00 00 7C E9 72 02 24 EB 72 02 62 02 00 00 80 ED 72 02 88 E9 72 02 84 F8 1D 76 00 00 01 00 38 A7 D9 01 11 00 00 00 78 53 21 00 70 53 21 00 15 00 00 00 DC E9 00 00 69 A7 2D B3 8C E9 72 02 82 91 55 76 DC E9 72 02 90 E9 72 02 27 95 55 76 00 00 00 00 8C D3 7F 03 B8 E9 72 02 CD 94 55 76 8C D3 7F 03 64 EA 72 02 00 CF 7F 03 E1 94 55 76 00 00 00 00 00 CF 7F 03 64 EA 72 02 C0 E9 72 02 06 00 00 00 0F 00 00 00 06 56 02 00 43 00 3A 00 5C 00 54 00 43 00 5C 00 54 00 6F 00 74 00 61 00 6C 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 C8 02 00 00 00 00 58 3A F5 02 1C EA 72 02 0A 3A F5 02 00 00 00 00 15 00 15 00 06 AC D9 01 D4 3A F5 02 10 00 00 00 0F 00 00 00 B4 EA 72 02 7C EA 72 02 08 FD C8 02 10 00 00 00 6A FF C8 02 15 00 2F 00 3E A7 D9 01 7C E9 72 02 0E 00 00 00 0A 00 00 00 4E C6 F5 02 04 00 72 02 08 FD C8 02 0B 00 00 00 00 00 00 00 09 09 09 00 09 09 09 09 00 09 11 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4C E9 72 02 96 5B 1C 76 78 ED 72 02 47 44 45 46 08 FD C8 02 62 02 00 00 00 00 00 00 7C E9 72 02 24 EB 72 02 62 02 00 00 80 ED 72 02 88 E9 72 02 84 F8 1D 76 00 00 01 00 38 A7 D9 01 11 00 00 00 78 53 21 00 70 53 21 00 15 00 00 00 DC E9 00 00 69 A7 2D B3 8C E9 72 02 82 91 55 76 DC E9 72 02 90 E9 72 02 27 95 55 76 00 00 00 00 8C D3 7F 03 B8 E9 72 02 CD 94 55 76 8C D3 7F 03 64 EA 72 02 00 CF 7F 03 E1 94 55 76 00 00 00 00 00 CF 7F 03 64 EA 72 02 C
0 E9 72 02
HKU\S-1-5-21-2179018757-2182296143-237416838-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\HRZR_PGYFRFFVBA: 00 00 00 00 0D 00 00 00 27 00 00 00 0B 5A 09 00 06 00 00 00 11 00 00 00 39 6A 02 00 43 00 3A 00 5C 00 54 00 43 00 5C 00 54 00 6F 00 74 00 61 00 6C 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 5C 00 41 00 70 00 70 00 5C 00 72 00 65 00 67 00 73 00 68 00 6F 00 74 00 5C 00 72 00 65 00 67 00 73 00 68 00 6F 00 74 00 2E 00 65 00 78 00 65 00 00 00 08 FD C8 02 10 00 00 00 6A FF C8 02 18 00 34 00 3E A7 D9 01 7C E9 72 02 0E 00 00 00 0A 00 00 00 4E C6 F5 02 04 00 72 02 08 FD C8 02 0B 00 00 00 00 00 00 00 09 09 09 00 09 09 09 09 00 09 11 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4C E9 72 02 96 5B 1C 76 78 ED 72 02 47 44 45 46 08 FD C8 02 62 02 00 00 00 00 00 00 7C E9 72 02 24 EB 72 02 62 02 00 00 80 ED 72 02 88 E9 72 02 84 F8 1D 76 00 00 01 00 38 A7 D9 01 11 00 00 00 78 53 21 00 70 53 21 00 18 00 00 00 DC E9 00 00 69 A7 2D B3 8C E9 72 02 82 91 55 76 DC E9 72 02 90 E9 72 02 27 95 55 76 00 00 00 00 8C D3 7F 03 B8 E9 72 02 CD 94 55 76 8C D3 7F 03 64 EA 72 02 00 CF 7F 03 E1 94 55 76 00 00 00 00 00 CF 7F 03 64 EA 72 02 C0 E9 72 02 06 00 00 00 11 00 00 00 39 6A 02 00 43 00 3A 00 5C 00 54 00 43 00 5C 00 54 00 6F 00 74 00 61 00 6C 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 5C 00 41 00 70 00 70 00 5C 00 7
2 00 65 00 67 00 73 00 68 00 6F 00 74 00 5C 00 72 00 65 00 67 00 73 00 68 00 6F 00 74 00 2E 00 65 00 78 00 65 00 00 00 08 FD C8 02 10 00 00 00 6A FF C8 02 18 00 34 00 3E A7 D9 01 7C E9 72 02 0E 00 00 00 0A 00 00 00 4E C6 F5 02 04 00 72 02 08 FD C8 02 0B 00 00 00 00 00 00 00 09 09 09 00 09 09 09 09 00 09 11 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4C E9 72 02 96 5B 1C 76 78 ED 72 02 47 44
45 46 08 FD C8 02 62 02 00 00 00 00 00 00 7C E9 72 02 24 EB 72 02 62 02 00 00 80 ED 72 02 88 E9 72 02 84 F8 1D 76 00 00 01 00 38 A7 D9 01 11 00 00 00 78 53 21 00 70 53 21 00 18 00 00 00 DC E9 00 00 69 A7 2D B3 8C E9 72 02 82 91 55 76 DC E9 72 02 90 E9 72 02 27 95 55 76 00 00 00 00 8C D3 7F 03 B8 E9 72 02 CD 94 55 76 8C D3 7F 03 64 EA 72 02 00 CF 7F 03 E1 94 55 76 00 00 00 00 00 CF 7F 03 64 EA 72 02 C0 E9 72 02 06 00 00 00 11 00 00 00 39 6A 02 00 43 00 3A 00 5C 00 54 00 43 00 5C 00 54 00 6F 00 74 00 61 00 6C 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 5C 00 41 00 70 00 70 00 5C 00 72 00 65 00 67 00 73 00 68 00 6F 00 74 00 5C 00 72 00 65 00 67 00 73 00 68 00 6F 00 74 00 2E 00 65 00 78 00 65 00 00 00 08 FD C8 02 10 00 00 00 6A FF C8 02 18 00 34 00 3E A7 D9 01 7C E9 72 02 0E 00 00 00 0A 00 00 00 4E C6 F5 02 04 00 72 02 08 FD C8 02 0B 00 00 00 00 00 00 00 09 09 09 00 09 09 09 09 00 09 11 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4C E9 72 02 96 5B 1C 76 78 ED 72 02 47 44 45 46 08 FD C8 02 62 02 00 00 00 00 00 00 7C E9 72 02 24 EB 72 02 62 02 00 00 80 ED 72 02 88 E9 72 02 84 F8 1D 76 00 00 01 00 38 A7 D9 01 11 00 00 00 78 53 21 00 70 53 21 00 18 00 00 00 DC E9 00 00 69 A7 2D B3 8C E9 72 02 82 91 55 76 DC E9 72 02 90 E9 72 02 27 95 55 76 00 00 00 00 8C D3 7F 03 B8 E9 72 02 CD 94 55 76 8C D3 7F 03 64 EA 72 02 00 CF 7F 03 E1 94 55 76 00 00 00 00 00 CF 7F 03 64 EA 72 02 C
0 E9 72 02
HKU\S-1-5-21-2179018757-2182296143-237416838-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\P:\GP\Gbgnypzq.rkr: 00 00 00 00 06 00 00 00 0F 00 00 00 06 56 02 00 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF FF FF FF FF 60 DA E4 D1 16 F9 D4 01 00 00 00 00
HKU\S-1-5-21-2179018757-2182296143-237416838-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count\P:\GP\Gbgnypzq.rkr: 00 00 00 00 06 00 00 00 11 00 00 00 39 6A 02 00 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF 00 00 80 BF FF FF FF FF 60 DA E4 D1 16 F9 D4 01 00 00 00 00
----------------------------------
Новые файлы:4
----------------------------------
C:\Calculator\Calculor.ini
C:\Calculator\Calculor_memory.log
C:\Calculator\Calculor_recent.log
C:\Windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f3f5d0d3-6b1f-43e1-8147-d934e6df5a5c}\snapshot.etl
----------------------------------
Измененные файлы [атрибуты]:11
----------------------------------
C:\Windows\AppCompat\Programs\RecentFileCache.bcf
C:\Windows\System32\catroot2\edb.log
C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
C:\Windows\System32\wdi\BootPerformanceDiagnostics_SystemData.bin
C:\Windows\System32\wdi\LogFiles\BootCKCL.etl
C:\Windows\System32\wdi\LogFiles\WdiContextLog.etl.003
C:\Windows\System32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
C:\Windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2179018757-2182296143-237416838-1000_UserData.bin
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx
C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx
----------------------------------
Новые папки:1
----------------------------------
C:\Windows\System32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f3f5d0d3-6b1f-43e1-8147-d934e6df5a5c}
----------------------------------
Всего изменений:25
---------------------------------- |
