Попытка трояна

Start::
CloseProcesses:
SystemRestore: On
CreateRestorePoint:
HKU\S-1-5-21-41252551-3356528712-1093918069-1001\...\MountPoints2: {9a9a9719-c4a4-11ec-b1d7-00265a0605e8} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-41252551-3356528712-1093918069-1001\...\MountPoints2: {9a9a9754-c4a4-11ec-b1d7-00265a0605e8} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-41252551-3356528712-1093918069-1001\...\MountPoints2: {9fb1e03b-fde2-11ec-b1fc-00265a0605e8} - "F:\HiSuiteDownLoader.exe" 
GroupPolicy: Ограничение ? <==== ВНИМАНИЕ
Policies: C:\ProgramData\NTUSER.pol: Ограничение <==== ВНИМАНИЕ
C:\Users\kot3d\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\amfgabfnnnaeeendcohljjlcglbgjmcl
C:\Users\kot3d\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\laddjijkcfpakbbnnedbhnnciecidncp
C:\Users\kot3d\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nehapofakghljopfegjogpgpeljkhjjn
C:\Users\kot3d\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfgabfnnnaeeendcohljjlcglbgjmcl
C:\Users\kot3d\AppData\Local\Google\Chrome\User Data\Default\Extensions\gopekdefbcehhdiejdiaijhojgbepgec
C:\Users\kot3d\AppData\Local\Google\Chrome\User Data\Default\Extensions\laddjijkcfpakbbnnedbhnnciecidncp
C:\Users\kot3d\AppData\Local\Google\Chrome\User Data\Default\Extensions\nehapofakghljopfegjogpgpeljkhjjn
AV: Malwarebytes (Disabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AlternateDataStreams: C:\Windows\tracing:? [16]
AlternateDataStreams: C:\Users\kot3d\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\kot3d\Application Data:9ed6e01d16b43ed60035852898458827 [394]
AlternateDataStreams: C:\Users\kot3d\Application Data:a8f96ed9f548b3497db5ddd233a8b439 [394]
AlternateDataStreams: C:\Users\kot3d\Application Data:eb92b835a834003ac00ee2632de0e925 [394]
AlternateDataStreams: C:\Users\kot3d\Application Data:ed34bb19b9b8add2cf59465df23aef41 [394]
AlternateDataStreams: C:\Users\kot3d\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\kot3d\AppData\Roaming:9ed6e01d16b43ed60035852898458827 [394]
AlternateDataStreams: C:\Users\kot3d\AppData\Roaming:a8f96ed9f548b3497db5ddd233a8b439 [394]
AlternateDataStreams: C:\Users\kot3d\AppData\Roaming:eb92b835a834003ac00ee2632de0e925 [394]
AlternateDataStreams: C:\Users\kot3d\AppData\Roaming:ed34bb19b9b8add2cf59465df23aef41 [394]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [8224]
ExportKey: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions
EmptyTemp:
Reboot:
End::