;uVS v4.11 [http://dsrt.dyndns.org:8888]
;Target OS: NTv10.0
v400c
OFFSGNSAVE
deltmp
regt 26
regt 38
restart
;---------command-block---------
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDJGDGDCFMDKFICBIFBNAACKNBLBKHHOC%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DMDELDJOLAMFBCGNNDJMJJIINNHBNBNLA%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DKLKJGPMDJOCAABFGDDMNBAHCAIBJNENE%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DODIJCGAFKHPOBJLNFDGIACPDENPMBGME%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://WOW-CLEAR.RU/
delref HTTP://MAIL.RU/CNT/10445?GP=NEWCUSTOM1
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\YANDEX\BROWSERMANAGER\BROWSERMANAGERSHOW.EXE
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\AMIGO\APPLICATION\AMIGO.EXE
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\TEMP\YUPDATE-PING-YADISK.TEMP
delref %SystemDrive%\PROGRAM FILES\DOWNLOAD STUDIO\DSTUDIO-GUI.EXE
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\MAIL.RU\MAILRUUPDATER.EXE
delref {9F2B0085-9218-42A1-88B0-9F0E65851666}\[CLSID]
delref {E984D939-0E00-4DD9-AC3A-7ACA04745521}\[CLSID]
delref {FE285C8C-5360-41C1-A700-045501C740DE}\[CLSID]
delref {9CDA66BE-3271-4723-8D35-DD834C58AD92}\[CLSID]
delref %SystemRoot%\EHOME\MCUPDATE
delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID]
delref %SystemRoot%\EHOME\MCUPDATE.EXE
delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID]
delref {7FA3A1C3-3C87-40DE-AC16-B6E2815A4CC8}\[CLSID]
delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID]
delref %SystemRoot%\EHOME\EHREC
delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID]
delref {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}\[CLSID]
delref {EA9155A3-8A39-40B4-8963-D3C761B18371}\[CLSID]
delref {DEF03232-9688-11E2-BE7F-B4B52FD966FF}\[CLSID]
delref {D2CBF5F7-5702-440B-8D8F-8203034A6B82}\[CLSID]
delref {DFA14C43-F385-4170-99CC-1B7765FA0E4A}\[CLSID]
delref {343D770D-7788-47C2-B62A-B7C4CED925CB}\[CLSID]
delref {E51DFD48-AA36-4B45-BB52-E831F02E8316}\[CLSID]
delref {FF87090D-4A9A-4F47-879B-29A80C355D61}\[CLSID]
delref {45F26E9E-6199-477F-85DA-AF1EDFE067B1}\[CLSID]
delref {7CCA6768-8373-4D28-8876-83E8B4E3A969}\[CLSID]
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\PROGRAMS\OPERA\LAUNCHER.EXE
delref {AC44EC8F-071A-4290-BDE2-A66A764472DF}\[CLSID]
delref {6B9228DA-9C15-419E-856C-19E768A13BDC}\[CLSID]
delref {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}\[CLSID]
delref %Sys32%\DRIVERS\VMBUSR.SYS
delref {2D8B3101-E025-480D-917C-835522C7F628}\[CLSID]
delref {503739D0-4C5E-4CFD-B3BA-D881334F0DF2}\[CLSID]
delref {A910D941-9DA9-4656-8933-AA1EAE01F76E}\[CLSID]
delref {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\[CLSID]
delref {0D012ABD-CEED-11D2-9C76-00105AA73033}\[CLSID]
delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID]
delref {19916E01-B44E-4E31-94A4-4696DF46157B}\[CLSID]
delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID]
delref {4063BE15-3B08-470D-A0D5-B37161CFFD69}\[CLSID]
delref {56A58823-AE99-11D5-B90B-0050DACD1F75}\[CLSID]
delref {88D969C0-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C1-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C2-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C3-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C4-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {88D969C5-F192-11D4-A65F-0040963251E5}\[CLSID]
delref {8AD9C840-044E-11D1-B3E9-00805F499D93}\[CLSID]
delref {CA8A9780-280D-11CF-A24D-444553540000}\[CLSID]
delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID]
delref {DA33B06A-D234-4D3E-90FE-594DAECD1B84}\[CLSID]
delref {E01D1C6A-4F40-11D3-8958-00105A272DCF}\[CLSID]
delref %Sys32%\ALTTAB.DLL
delref %Sys32%\GWX\GWX.EXE
delref %Sys32%\PWCREATOR.EXE
delref %Sys32%\QAGENTRT.DLL
delref %Sys32%\LOCATIONNOTIFICATIONS.EXE
delref %SystemDrive%\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPDMCCORE.DLL
delref %Sys32%\HOTSTARTUSERAGENT.DLL
delref %Sys32%\DRIVERS\RDPWD.SYS
delref %SystemDrive%\PROGRAM FILES\INTERNET EXPLORER\IEDVTOOL.DLL
delref %Sys32%\P2PHOST.EXE
delref %Sys32%\NAPIPSEC.DLL
delref %Sys32%\OCSETUP.EXE
delref %Sys32%\MSSHA.DLL
delref %Sys32%\APILOGEN.DLL
delref %Sys32%\IPBUSENUM.DLL
delref %Sys32%\OOBE\MSOOBEUI.DLL
delref %Sys32%\MCTADMIN.EXE
delref %SystemDrive%\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE
delref %Sys32%\OOBEFLDR.DLL
delref %Sys32%\DHCPQEC.DLL
delref %Sys32%\DRIVERS\UMDF\USBCCIDDRIVER.DLL
delref %Sys32%\WWANADVUI.DLL
delref %Sys32%\DSHOWRDPFILTER.DLL
delref {1FBA04EE-3024-11D2-8F1F-0000F87ABD16}\[CLSID]
delref %Sys32%\BLANK.HTM
delref {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48}\[CLSID]
delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID]
delref {A11A1EE5-F9F8-4BE0-907F-D74A49CC506B}\[CLSID]
delref %SystemDrive%\PROGRAM FILES\BITRIX24\32\BITRIXSHELLEXT.DLL
delref %Sys32%\DRIVERS\HDAUDADDSERVICE.SYS
delref HELPSVC\[SERVICE]
delref SACSVR\[SERVICE]
delref TBS\[SERVICE]
delref VMMS\[SERVICE]
delref MESSENGER\[SERVICE]
delref RDSESSMGR\[SERVICE]
delref %Sys32%\PSXSS.EXE
delref IRENUM\[SERVICE]
delref %SystemDrive%\PROGRAM FILES\MICROSOFT\EDGEUPDATE\1.3.135.41\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.26.9\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.35.422\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\REMPL\DISKTOAST.EXE
delref %SystemDrive%\PROGRAM FILES\BLUESTACKS\BSTKSVC.EXE
delref %SystemDrive%\BVTBIN\TESTS\INSTALLPACKAGE\CBSTEST\X86\CSITEST.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.22.3\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.33.23\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.28.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.33.3\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.21.115\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.35.442\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.28.15\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.22.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.35.342\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\BLUESTACKS\BSTKC.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.27.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.34.7\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\REMPL\STRGSNSADDONS.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.35.301\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\MICROSOFT\EDGEUPDATE\1.3.133.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.33.17\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\MICROSOFT\EDGEUPDATE\1.3.135.29\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.34.11\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.29.1\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.33.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.25.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.33.7\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.25.11\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.28.13\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.23.9\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.35.452\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.24.7\PSMACHINE.DLL
delref %Sys32%\IGFXCFG.EXE
delref %SystemDrive%\PROGRAM FILES\BLUESTACKS\BSTKPROXYSTUB.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.33.23\GOOGLEUPDATEBROKER.EXE
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL
delref %Sys32%\VAILAUDIOPROXY.EXE
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES\GOOGLE\UPDATE\1.3.24.15\PSMACHINE.DLL
delref D:\ИГРЫ\WORLD OF TANKS\WOTLAUNCHER.EXE
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\TEMP\1CAEC798-7A53C078-BF2F4F90-A0687980\1E712C542.SYS
delall %SystemDrive%\PROGRAM FILES\NETSHIELD KIT\NETSHIELDSVC.EXE
delall %SystemDrive%\PROGRAM FILES\NETSHIELD KIT\CLI.EXE
setdns Подключение по локальной сети 2\4\{0B95D99F-26AE-4B8A-8961-46360970FA55}\
setdns Подключение по локальной сети 3\4\{6B40668F-8E05-4351-A9C2-FD07314EE3C5}\
setdns Подключение по локальной сети 4\4\{20B14D9A-663A-4D60-9BD8-BF77FFF69CD6}\
setdns Подключение по локальной сети 5\4\{F5944B99-F721-4418-B5BA-655C2A559D84}\
setdns Подключение по локальной сети* 1\4\{B4F6D189-CD0A-4E5E-9CA5-FB1E96E354B4}\
setdns Подключение по локальной сети* 2\4\{395FD7CA-803A-445B-84FB-012881F1A0A0}\
setdns Подключение по локальной сети* 4\4\{75DACE31-1F30-4121-94D2-9C4267E141A0}\
setdns Подключение по локальной сети* 5\4\{7213736A-DD75-4B13-AB85-6826A3394FB6}\
setdns Подключение по локальной сети\4\{008A653A-4A38-4217-BD7A-2DFC3888B07D}\
setdns Сетевое подключение Bluetooth\4\{C39394FF-1B84-49F4-A44F-DE29F87353DD}\
apply

  
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  No File
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2026262309-3726023237-4141569772-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2026262309-3726023237-4141569772-1000\...\webcompanion.com -> hxxp://webcompanion.com
DNS Servers: 185.192.111.210 - 37.59.58.122
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
FirewallRules: [TCP Query User{6E47380C-6C88-4CB6-B3F3-FAE35547B90A}C:\users\user\appdata\local\mediaget2\mediaget.exe] => (Allow) C:\users\user\appdata\local\mediaget2\mediaget.exe => No File
FirewallRules: [UDP Query User{EA0F14BE-A7AD-445D-B320-E4247C9B42DF}C:\users\user\appdata\local\mediaget2\mediaget.exe] => (Allow) C:\users\user\appdata\local\mediaget2\mediaget.exe => No File
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Task: {037BEBDF-A377-40FF-A90A-34E0A2EA0937} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0AFC58FE-8BB5-449A-A7FA-7B78FD89867F} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {119C6BA3-FE8B-4B98-8AE6-85299C0F0384} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {17807F0A-A9F5-43AE-9216-9FF2254861B8} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {18183305-4536-4581-89F3-CC35B670EF79} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1CA79766-5DED-40CB-A849-0FC64FA06D6E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {2DCD3AFC-EAE5-4DE7-A474-EC615B362954} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION
Task: {31AA4586-558F-4153-864C-2B93FB0222D3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {3341C608-5815-4951-BCB9-4E77C008F3FA} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3BF4F54A-B98A-42BF-874A-808D2721CD04} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {46897D5B-5D86-45E2-A8B0-853127A0A1A5} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5134C4F9-EFEA-4A07-8F5A-5E109A768BC9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {626D1C25-73E1-41A0-880D-41EA34562543} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {8C8A6FDA-C732-47F0-BC13-0B3E43920FAA} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {A448E0FE-93EB-4CA4-9070-94B326610977} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AA7A73EC-91D8-4A15-ABC5-F01C5163B609} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {AE1E4965-DF84-495C-9BD8-88B57E0B3000} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AECEB1CD-0E63-4487-9308-C640E3A5D271} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {B2B23BCE-00A3-4A9E-9613-FDA4CEB3DF96} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B80F8B7C-E442-48F2-9156-599230068706} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B83B101C-2FE7-4FE5-8D52-0FD437F53307} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {BD8AB5CA-028C-4A0A-A79A-0492CBB6F413} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {CEDB961C-206D-49EF-ACF7-BF7DC6955ECF} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {D46A00AA-4C14-4A70-B9BC-03F043077821} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E201191A-5448-4531-A821-1A4538E0B357} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {F5C86990-1D57-4584-A3D6-1160C6FBCEBF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {F654B173-E3EC-4210-9672-E0259F293FDC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Tcpip\. .\Interfaces\{008a653a-4a38-4217-bd7a-2dfc3888b07d}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{0b95d99f-26ae-4b8a-8961-46360970fa55}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{20b14d9a-663a-4d60-9bd8-bf77fff69cd6}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{3407c751-cc5f-11e7-9db2-806e6f6e6963}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{395fd7ca-803a-445b-84fb-012881f1a0a0}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{6b40668f-8e05-4351-a9c2-fd07314ee3c5}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{7213736a-dd75-4b13-ab85-6826a3394fb6}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{75dace31-1f30-4121-94d2-9c4267e141a0}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{784679ea-7a36-4abc-af54-b256c49563bf}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{b4f6d189-cd0a-4e5e-9ca5-fb1e96e354b4}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{c39394ff-1b84-49f4-a44f-de29f87353dd}: [NameServer] 185.192.111.210,37.59.58.122
Tcpip\. .\Interfaces\{f5944b99-f721-4418-b5ba-655c2a559d84}: [NameServer] 185.192.111.210,37.59.58.122
CHR NewTab: Default ->  Active:"chrome-extension://hdpgllbnilfcbckbdchjcfgopijgllcm/index.html", Not-active:"chrome-extension://kppacdmmddediahklmcgkgdhhoojemmd/visual-bookmarks.html"
CHR HKLM\...\Chrome\Extension: [ablpcikjmhamjanpibkccdmpoekjigja]
CHR HKLM\...\Chrome\Extension: [bgknpfancpeamejmcooedljjnaddldhg]
CHR HKLM\...\Chrome\Extension: [cegdomhocaeoedbdpfolmgjkjaijfomo]
CHR HKLM\...\Chrome\Extension: [fdjdjkkjoiomafnihnobkinnfjnnlhdg]
CHR HKLM\...\Chrome\Extension: [gdknicmnhbaajdglbinpahhapghpakch]
CHR HKLM\...\Chrome\Extension: [gehngeifmelphpllncobkmimphfkckne]
CHR HKLM\...\Chrome\Extension: [gndaciceccgapjhpniecknjlmmlanaem]
CHR HKLM\...\Chrome\Extension: [hdpgllbnilfcbckbdchjcfgopijgllcm]
CHR HKLM\...\Chrome\Extension: [jedelkhanefmcnpappfhachbpnlhomai]
CHR HKLM\...\Chrome\Extension: [kppacdmmddediahklmcgkgdhhoojemmd]
CHR HKLM\...\Chrome\Extension: [lanabbpahpjnaljebnpgkjemcbkepiak]
CHR HKLM\...\Chrome\Extension: [pganlglbhgfjfgopijbhemcpbehjnpia]
2020-10-27 09:18 - 2020-10-27 09:18 - 000000000 ____D C:\Users\Все пользователи\ESET
2020-10-27 09:18 - 2020-10-27 09:18 - 000000000 ____D C:\ProgramData\ESET
2020-10-27 09:16 - 2020-10-27 09:16 - 000000000 ____D C:\Program Files\ESET
2020-10-27 09:16 - 2020-10-27 09:16 - 000000000 ____D C:\eset_upd
2020-10-27 09:02 - 2020-10-27 09:02 - 000000000 ____D C:\Users\Все пользователи\Doctor Web
2020-10-27 09:02 - 2020-10-27 09:02 - 000000000 ____D C:\Users\User\Doctor Web
2020-10-27 09:02 - 2020-10-27 09:02 - 000000000 ____D C:\ProgramData\Doctor Web

EmptyTemp:
Reboot:

• bcdedit.exe -set loadoptions DISABLE_INTEGRITY_CHECKS
  
• bcdedit.exe -set TESTSIGNING ON
  

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows

Open NoInteractiveServices

Change value to ZERO

Close window and restart the service you want to interact with.

Но делу это тоже не помогло.Походу на этот ключ дело это не завязано так как проверил на еще 5 компах ключ равен 1 и все там нормально. Как разрешить интерактивную службу пока не ясно или как победить проблему.