B-boy/StyLe/

Те сега и трите са на Gen Digital и е нормално всички да са с едни и същи резултати. Едни и същи дефиниции с различен интерфейс. И 200 проби ми се струват малко на мен за такъв мащабен тест.

Довечера, сега трябва да се бачка. BBB не е лоша. Тя беше на Горна Баня май вече.

Аз бих ти препоръчал на Credo. По-добра не съм пил и свърша буквално за часове навсякъде, където я зареждат около нас, Другата, която ми харесва напоследък е тази на SanPellegrino:

Да, имало е снощи PatchTuesday ама бях навън.

Значи, едва ли е зараза (не, че не може да дойде нещо през флашката, но за RAT и дума не може да става). Сигурно хардуерен проблем или софтуерен глич. Може да е имало и IRQ конфликт на някои от каналите ползвани от клавиатурата. Фейс не ползвам и там не съм наясно. Ако решиш за FRST ще му хвърля един поглед като имам време.

OMG! UbuntuFirefox redesign will arrive in v157 release - OMG! UbuntuFirefox's new 'Nova' redesign will be enabled for all users in Firefox 157, due the end of September – barring any last minute hiccups, of course.

То е нормално да засичат uTorrent-а, защото се води grayware. Но и аз си го ползвам (нали с "изчегъркани" реклами). Можеш да игнорираш засичанията. Що се отнася за 2-та експлоръра, то нямаше ли настройка всяко копие на explorer.exe да е в отделен процес за да може ако се срине, другия процес да остане незасегнат. За забиването на хрома, нямам идея. Може да е от някоя добавка? За писането на клавиатурата, може да е заседнал клавиш или някой да е влязъл с Remote Access Tool? Аз бих разгледал лог файловете в Event Viewer-a и бих ударил една проверка с FRST за да видя дали стартира нещо подозрително и дали има промени във файловете използвани през последните 30 дни. Инструмента ще покаже и какви са позволените програми през стената.

UCheck 6.7.7 Промените: V6.7.7 09/03/2026 ================== - Fixed detection of programs backed by winget (Visual C++ Redistributables, .NET runtimes, and others) being wrongly shown as "Unsupported": on some machines winget takes longer than usual to start (e.g. Windows 10 ESU, where its package index loads more slowly), and UCheck was giving up before winget produced its output, so it saw no winget programs at all even though winget works fine from a terminal. UCheck now waits for winget to finish instead of timing out early. (This also makes UCheck more robust with any slow-to-start helper tool.) - Report window: the report view now adapts to UCheck's "software update" reports — the sidebar shows only the relevant sections, wording uses "updates available" instead of security-scan terms, the scan-only cards and category grid are hidden, and the sidebar icons/hamburger are aligned. Double-clicking a report in History opens it without ticking its checkbox. - Windows Update: the sidebar badge now counts only important updates. Optional and driver-only updates no longer raise it. - Exclusions page: rows are aligned into columns, with search and sorting. Removing an exclusion now updates the count shown on the settings menu tile immediately. An excluded program is also removed from the dashboard right away when excluded from the Installed tab. - Settings menu: the History tile shows a live report count, like the Exclusions tile. - Reports now record the current user again (the field could be blank). - Fixed a German typo: "Downlaod beendet" -> "Download beendet". - Installer: the modern (Qt6) build now requires Windows 10 version 1709 or later, matching Diag. Earlier Windows 10 builds and Server 2016 are missing APIs this build imports, which made it fail at startup; those systems now correctly get the classic build instead (aligns the OS check with Diag). - Cleaned up harmless QML/debug warnings (layout anchors, duplicate style setup). - Updated to core 9.0.11 (bundles the RKSdk engine and the shared utility / UI layers). Core / engine changes folded into this build: * External-tool output capture no longer times out early on a slow-to-start process (the winget fix above lives here, in the shared process layer, so it benefits every helper UCheck runs). * curl error 60 fix: an embedded Mozilla CA bundle is used as a fallback so HTTPS program downloads validate even when the machine's certificate store is missing a needed root; added a matching CA/TLS diagnostic. * Downloads: an explicit quiet mode avoids logging a CRITICAL error on expected non-2xx responses; size formatting no longer depends on the system locale for sub-KB values. * Proxy: when none is configured, the system-configured proxy is now auto-detected. * Dynamic (cloud) configuration reworked into a single shared instance with cloud-driven endpoints. * Licensing: removing a license clears the cached tier and always refreshes the UI; account states that could leave a dead-end "unknown license" screen now route back to activation. * Reports record the current user again when the scan info doesn't carry one. * 32-bit build fixes surfaced by the unit tests; bundled YARA engine updated (4.2.3 -> 4.5.5); signature-load failures are now explicit.Линк за теглене: https://www.adlice.com/ucheck/#alt_download Adlice Protect (RogueKiller) 16.8.3 Промените: V16.8.3 08/23/2026 ================== - Updated engine to 9.0.10 (carries 9.0.9 fixes folded in) * Detection accuracy improvements around Windows service hosts — fewer false-positives on legitimate system components while genuinely malicious loads are still surfaced * Signature engine refresh with upstream fixes; a real error is now surfaced when signatures fail to load instead of silently continuing * Cloud-driven configuration so service URLs and endpoints can be rotated without a client update * Report generation: falls back to the current Windows user when the scan didn't record one (fixes blank "User" field on some service-mode scans) * Sub-KB file sizes now display with a literal "B" suffix, consistent across all interface languages * Quieter logging on optional network endpoints that legitimately return non-2xx (less noise in the log) * Build hygiene fixes for older Windows SDK targets - New Report view: the post-scan and history report window is redesigned * Standalone modernized window with a section sidebar (Overview, Cloud, Processes, Modules, Services, Registry, Tasks, Filesystem, WMI, Web, Hosts, Antirootkit, Soft Outdated) and per-section badges showing the count and malicious-only tally * Aligned resizable columns across sections, flat-table sorting on any column, an inline filter bar (All / Hide safe / Malicious only), and a search field * Export (JSON or text) with an inline progress dialog; the Share flow uploads and reports success in-place * A hidden removal-script flow surfaces when a report is eligible: check availability, download, and open — with a progress indicator throughout * Improved progress-text contrast so the busy strip stays readable on both themes * Sidebar / license overlap fixes and UCheck adaptations so the same window backs both products - Header signatures badge now shows "Not loaded" instead of a permanent spinner when signatures fail to load (tracks the real signature status rather than a binary IsLoaded check) - Reports list: selecting a row is now checkbox-only. A plain click on the row no longer toggles selection (which made it easy to accidentally multi-select while trying to open a report); double-click still opens the report - Windows accessibility text-size slider is now honored: the app font scales with Settings → Accessibility → Text size (100–300 %), so message boxes, tooltips, tables and native context menus follow the user's chosen size - Fix: custom scan "Options" master checkbox now shows its checked state visibly — previously the indicator was invisible against the tinted title bar - Notification popup: on the "Malicious item blocked" toast, the "Action" header row in the dropdown is no longer clickable. Clicking it used to silently fire the default action (Allow → add to exclusions) - Translation refresh across the supported languages for the new Report view and the header changes (Italian and German translator updates folded in) V16.8.2 08/05/2026 ================== - Updated to core 9.0.8 (carries 9.0.7 fixes folded in) * Licensing: cached tier is cleared on license removal, and the UI is always notified — no more stale "Premium" indicators after removing a license * Networking: auto-detects the system-configured proxy when no explicit proxy is set (WPAD / Windows proxy settings) * UCheck: passes the target OS on program-download links (fixes legacy / Windows 7 downloads defaulting to the wrong installer) * UCheck: portable items are no longer counted as duplicates of their installed counterparts * UCheck / winget: added diagnostic logging when winget returns empty results (helps troubleshoot wedged package manager) * Self Protection: throttled handle-notify logging (less noise in logs during heavy activity) * Hosts scanner: opens hosts file in shared-write mode + adds bulk AddLines / RemoveLinesContaining APIs for faster fix-up * Mal.Powershell: dropped the default graylist for unknown encoded payloads (fewer false-positives on legitimate PowerShell) * Path expansion: preserves absolute paths after the \SystemRoot\ prefix * Diagnostic: silenced expected LookupNameInfos failure spam; CreateProcess GetLastError now propagated correctly * Web: added GetSystemProxy() helper (read the system-configured proxy) * Registry: CompressedFullPathWithWow6432Node resolves the real redirected path under WoW6432Node - Settings and History pages: complete visual refresh * All Settings sections (General, Scan, Real-time Protection, DocLock, Exclusions, Scheduled Scan, About) and History sections (Reports, Quarantine, Events) rebuilt with a modernized layout * Search box, sortable columns, and refresh button on every list (Exclusions, DocLock, Reports, Quarantine, Events) * Event details modal: double-click a row (or use the new Open button) to see full event details in a readable dialog, with copy-selectable fields and per-event JSON export * "Deselect All" action on Events; "Export" renamed to "Export All" * Warning banners on gated pages (DocLock, Scheduled Scan, Real-time Protection) explain why the page is disabled — license, service, or driver status - Async settings actions: applying a change (add / delete / reset) now runs in the background with a busy overlay, so the app stays responsive during the round-trip to the service. Previously the whole UI could hang briefly on cascading refresh events - Dashboard: no longer hangs while cascading a settings change (offloaded the ~20 sync IPC calls behind SettingsChanged to a background worker) - DocLock: fix stale list after add / remove / reset — the folder list now refreshes correctly instead of showing an outdated cache - Notification popup fix: on "Malicious item blocked" toast, the "Action" header row in the dropdown was clickable and silently added the threat to exclusions — the header is no longer clickable - Custom Scan: the "Options" master checkbox now shows its checked state visibly (previously the tick was invisible against the tinted title bar) - Chinese language labels unified: 简体中文 / ç¹é«”中文 across all products - Translation refresh across 15 languages (Arabic, German, Spanish, Persian, French, Italian, Japanese, Dutch, Polish, Portuguese, Brazilian Portuguese, Turkish, Ukrainian, Simplified Chinese, Traditional Chinese) — every unfinished entry filled in for the redesigned Settings and History surfacesЛинк за теглене: https://www.adlice.com/roguekiller/#alt_download Adlice Diag 4.0.9 - обновил се е и инструмента за диагностика базиран на RogueKiller. Предназначен е за експерти! Промените: V4.0.9 09/01/2026 ================== - Report window, Processes section: restored the full column set and added detail * Path and Command columns are back, plus a new Target column that shows the real payload a process was redirected to (for svchost, the hosted service DLL) * Restored columns that were missing across the other sections (Modules, Registry, Tasks, Services, WMI, Web, Hosts, Antirootkit, Filesystem) so the report matches the classic view again — Pid, Status, Path, Data and Cloud where applicable - Scan results now show the hosted service DLL next to a svchost process's command line - Fixed detection of installed software backed by winget (Visual C++ redistributables, .NET runtimes, and others): a slow-to-start helper could return no output, causing those programs to be listed as unsupported even though they were present - Updated to core 9.0.11: * svchost analysis reworked to further cut false positives: instead of judging the svchost host itself, the hosted service DLL is now resolved and scanned directly with the regular signatures, and shown as the detection target V4.0.8 08/18/2026 ================== - Report window refinements: * Overview and sidebar polish, including UCheck (outdated software) adjustments * Fixed a layout overlap in the license / account area - Fixed mocked data leftover - Report now falls back to the current Windows user when the stored scan user is empty, so the "User" field is no longer blank - Updated to core 9.0.10 V4.0.7 08/14/2026 ================== - New standalone Report window: * Rebuilt from scratch as a modern, resizable page with a collapsible section sidebar and an Overview summary * Overview: severity hero with scan-type and CLEAN / REVIEW / MALWARE badges, stat tiles (scanned / detections / duration / signatures), and Scan / System / Program info cards with per-field icons; "Detections by category" tiles link straight to their section * Every section (Processes, Modules, Services, Registry, Tasks, Filesystem, WMI, Web, Hosts, Antirootkit, Outdated) with threat and signer pills, browser icons, and expand/collapse trees * Columns are now resizable (drag the header divider) and remembered per section; flat tables are sortable by clicking a header * Cloud tab: share permalink (copy / open), and the full removal-script flow — download, review the parsed actions in a table, and apply, with each row's status updated live * Export / Open (JSON or text) now run in the background behind a progress dialog so large reports no longer freeze the window * Unified badge styling across the whole page; kept the classic report as a fallback for older systems - System page fixes: * Storage panel and the Processes / Services / Network tables now use theme-matched scrollbars instead of a stray light-colored one * Service status text (Running / Stopped / Paused) is now always readable, and stays correct after switching theme while the app is running - Report list: a single left-click no longer checks a row (use the checkbox); double-click opens it without leaving it checked - Header: the signatures badge now shows "Not loaded" instead of being stuck on "Loading…" when signatures aren't present - Fixed a crash that could occur when closing the app while real-time monitoring was still shutting down - Installer: the modern interface is enabled only on Windows 10 and later; older systems automatically get the classic interface - Smaller interface fixes: checkable settings groups now show their on/off state correctly; the license-key field supports right-click Copy / Paste / Clear; the unregistered notice is highlighted in red; and a notification dropdown no longer triggered a hidden default action - Updated to core 9.0.9 (bundles RKSdk + utility / UI layers): * Signature engine updated to libyara 4.5.5 across all consumers (compiled-rules format v21) and the rules database refreshed * svchost analysis reworked to cut false positives: trust is corroborated by path AND signature (never path alone) and the hosted service DLLs are signature-gated * Anti-rootkit and machine-learning PE model hardened against obfuscation, and kernel-event parsing hardened with protocol-version validation * Signature-load failures are now reported explicitly instead of failing silently; added a prod / staging signature toggle * Cloud configuration is now driven by a single dynamic-config source with cloud-provided endpoints * Fixed curl error 60 on program downloads by shipping an embedded CA bundle * Licensing: the cached tier is cleared and the UI is always notified when a license is removed * Network: the system-configured proxy is auto-detected when none is set explicitly * UCheck: pass the OS on program download links (fixes legacy / Windows 7 defaults); portable apps are no longer treated as duplicates of installed programs; added diagnostics for empty winget results * Variant serialization: pointer values now round-trip correctly on 32-bit builds (previously a sign-extension bug could corrupt them) * Hardened several 32-bit code paths that had drifted (format-string mismatches, process enumeration), fixing latent crashes; rebuilt the 32-bit signature engine against OpenSSL 3.x to resolve a toolchain mismatch that blocked the legacy build V4.0.6 07/28/2026 ================== - Tools tab redesign (kept tabbed, matching the System page): * Disk Cleanup: rebuilt as a modern page - Categories grouped into System / Browsers / Windows / Applications with per-group subtotals and tri-state group checkboxes - Safety tier chip per entry (Safe / Caution / Advanced) and one-click Safe / Full / Custom presets that select by tier - "All / None" quick-select, live search filter, and a compact toolbar (selected total + inline scan status + Analyze / Clean) - Results populate live during the scan (sizes grow in real time) instead of appearing only at the end - After cleaning, only the cleaned categories are re-measured — no full re-scan of everything - Clean is now cancellable mid-run (Stop on the toolbar and on the progress overlay) - Prepared to host winapp2.ini application cleaners in a future release * Hosts: new structured editor - One row per entry (enable / disable / delete), locked system-default localhost rows - Suspicious-redirect highlighting (hostname pointing at a non-local IP) with a warning banner - Block-list presets (adware / tracking / telemetry) toggled on/off in one click - Duplicate detection when adding, live filter, and "Open in editor" * Startup: type / threat / VirusTotal chips, a bottom stats bar, and a right-click menu to copy the registry path or open it in regedit * System and Tools tables now remember the column widths you set - System page: * New "Signer" column on the Processes and Services tables — shows the binary's Authenticode signer in a color-coded pill (Microsoft / third-party / unsigned) * New "Non-Microsoft only" toggle on the Processes and Services filter bars to quickly surface unsigned or third-party software * "VirusTotal" column renamed to "Cloud scan"; shows blank instead of 0/0 until an item has actually been scanned - Fixes from customer feedback: * Process/service I/O sizes under 1 KB no longer show a localized "bytes" word (e.g. Chinese) when the app language is English * Services and Network table headers no longer turn black on mouse hover * Dropbox and other 32-bit startup entries now appear under the correct WOW6432Node registry branch * Re-enabling a disabled registry startup entry no longer needs two clicks * Traditional Chinese (zh-TW) is now a fully supported, separate localization - Translations: full French, German, Simplified and Traditional Chinese for every new Disk Cleanup and Hosts string - Updated to core 9.0.7 (bundles RKSdk + utility / UI / utility layers): * HOSTS writes use shared-mode file access, fixing intermittent "access denied" errors when editing the HOSTS file repeatedly; added bulk add / remove for block-list presets * Disk cleanup engine: a running deletion can now be stopped immediately instead of finishing the whole category first * Registry: 32-bit (WOW6432Node) keys now resolve to their true redirected path, fixing tree grouping and the copy-path / open-in-regedit actions * Path expansion preserves an absolute path after a \SystemRoot\ prefix * Real-time protection: safer handle-notify path (copies the process before resolving its path) * Mal.PowerShell: no longer graylists unknown encoded payloads by default (fewer false positives) * Service install surfaces "already exists" distinctly and exposes a config-update recovery pathЛинк за теглене: https://www.adlice.com/diag/#alt_download

Това беше опровергано:

Вие сте с 10. За да продължите с актуализациите трябва да активирате удължената поддръжка ESU с инструмент като M-A-S. Вие сте с версия Microsoft Windows 10 Enterprise Version 22H2 19045.6456. Аз също съм с 10, но с Microsoft Windows Version 10.0.19045.7663 Но отново с M-A-S ще трябва да свалите релийза до PRO (става и с ключ), защото май Enterprise нямаше ESU (или се заплащаше). https://www.kaldata.com/forums/topic/337624-microsoft-activation-scripts/page/5/#findComment-6277437 Loader-а е най-вероятно чист. Засичанията като гледам са базирани на евристичен анализ. Поне аз в системата не видях активни зарази. Ако loader-а беше зловреден щеше да има следи. Поздрави! И премахнете този AutoKMS оставен най-вероятно от Microsoft Tookit. M-A-S е по-безопасен, ако не ви се купува лиценз (има такива в сивата зона с намаления на цената на един хамбургер).

Здравейте, Ще прегледам логовете, когато съм свободен, но на бърз преглед (прекарани и през нашата система за автоматичен анализ) не видях активен зловреден софтуер. Само потенциално нежелани обекти, програми за отдалечен достъп, много изключения в Windows Defender, засечени кракове и т.н. Относно проблема с Defender-a наскоро имаше счупена актуализация, която предизвикваше сривове в работата на програмата. Microsoft се опита да запуши някаква пробойна - май беше ShieldBreak и не се получи от първия път. Та обновете Windows Defender до последната му версия и вижте дали проблема остава. Поздрави!

Промените от официалната страница пусната вчера: https://www.firefox.com/en-US/firefox/155.0/releasenotes