зависает комп, зависает avz, пытается открыть ссылки с рекламой

[COLOR=#000000][FONT=-apple-system]Здравствуйте.
Проблема в том, что на рабочем столе с интервалом в минут десять вылазиет окно, которое предлагает выбрать браузер, чтобы открыть какую то ссылку, если подтвердить открытие, открывается рекламный ресурс. Так же, когда всплывает такое окно в очередной раз, компьютер начинает сильно тупить и лагать.
При создании логов автологером, avz сразу зависает, отключение интернета и антивируса не помогает. При запросе в гугл "зависает avz" - зависает хром. Сделал все логи в ручную, кроме avz. Прошу помощи в очистке компьютера от нечисти.[/FONT][/COLOR]

Уважаемый(ая) [B]crazymaxima[/B], спасибо за обращение на наш форум!

Удаление вирусов - абсолютно бесплатная услуга на VirusInfo.Info. Хелперы в самое ближайшее время ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитой Autologger, подробнее можно прочитать в [URL="https://virusinfo.info/pravila.html"]правилах оформления запроса о помощи[/URL].

[INFORMATION]Если вы хотите получить персональную гарантированную помощь в приоритетном режиме, то воспользуйтесь платным сервисом [URL="https://virusinfo.info/content.php?r=613-sub_pomogite"]Помогите+[/URL].[/INFORMATION]

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста [URL="https://virusinfo.info/content.php?r=113-virusinfo.info-donate"]поддержите проект[/URL].

Здравствуйте,

HiJackThis (из каталога [B]autologger[/B])[URL=http://virusinfo.info/showthread.php?t=4491&p=64376&viewfull=1#post64376]профиксить[/URL]
[CODE]
O9-32 - Button: HKLM\..\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - &Связанные заметки OneNote - (no file)
O9-32 - Tools menu item: HKLM\..\{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - &Связанные заметки OneNote - (no file)
O22 - Task: {04FF85FA-5DD8-B087-5C39-AF9E8334AB93} - C:\Windows\system32\OpenWith.exe http://hotivit.net/cl/?guid=om6zobczir1twlb9xyp9z6058wsp36gi&prid=1&pid=4_1009_0
O22 - Task: {1E726EA7-BBAA-3AB7-3F44-23AB36A254D3} - C:\Windows\system32\msiexec.exe /q /i http://oncelowhice.com/gyhyaao.ige
O22 - Task: {2DB516C3-72C2-2B88-81F5-457B94C96147} - C:\Windows\system32\msiexec.exe /i http://oncelowhice.com/euouuuw.ctb /q
O22 - Task: {4726F51A-63EC-170D-A7C8-76D4422F8DBF} - C:\Users\anton\euUEconqSIc.exe /q /i http://externalbyte.net/mxkhuhsfnvog.fhi
O22 - Task: {8403BF23-D900-9F01-DA07-46D6FD769CAF} - C:\Windows\SysWOW64\QIcUpf.exe /q /i http://externalbyte.net/a8xl3zigigcl.yen
[/CODE]


AVZ [URL=http://virusinfo.info/showthread.php?t=7239&p=88804&viewfull=1#post88804]выполнить следующий скрипт[/URL].
Важно на ОС: Windows Vista/7/8/8.1 AVZ запускайте через контекстное меню проводника от имени Администратора.
[CODE]
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Users\anton\euUEconqSIc.exe','');
QuarantineFile('C:\Windows\SysWOW64\QIcUpf.exe','');
DeleteFile('C:\Users\anton\euUEconqSIc.exe','32');
DeleteFile('C:\Windows\SysWOW64\QIcUpf.exe','32');
ExecuteFile('schtasks.exe', '/delete /TN "{04FF85FA-5DD8-B087-5C39-AF9E8334AB93}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{1E726EA7-BBAA-3AB7-3F44-23AB36A254D3}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{2DB516C3-72C2-2B88-81F5-457B94C96147}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{4726F51A-63EC-170D-A7C8-76D4422F8DBF}" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "{8403BF23-D900-9F01-DA07-46D6FD769CAF}" /F', 0, 15000, true);
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.
[/CODE]

После выполнения скрипта компьютер перезагрузится.

После перезагрузки:
- Выполните в AVZ:
[CODE]
begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.
[/CODE]
Файл quarantine.zip из папки AVZ загрузите по ссылке "[B][COLOR="#FF0000"]Прислать запрошенный карантин[/COLOR][/B]" вверху темы.

- Подготовьте лог [URL="https://virusinfo.info/showthread.php?t=218752&p=1480546&viewfull=1#post1480546"]AdwCleaner[/URL] и приложите его в теме.

лог прикрепил, при отправке карантина по форме, пишет, что Результат загрузки Ошибка загрузки. Данный файл уже был загружен.
проблема не ушла

[url=https://virusinfo.info/showthread.php?t=218752&p=1480599&viewfull=1#post1480599]Удалите в AdwCleaner[/url] всё, кроме папок с названиями программ которыми вы пользуетесь (если ничем из перечисленного в логе не пользуетесь, то удалите всё). Отчет после удаления прикрепите.

Отчет прикрепляю. После сканирования прога нашла 3 угрозы, галочки не снимал, такими программами не пользуюсь.
Проблема не ушла. При запуске хрома, всегда вылазиет окно, установить ли браузер хром браузером по умолчанию, нажимаю да (хотя другими браузерами не пользуюсь в принципе), и тут же появляется окно "выберите программу которой вы хотите открыть ссылку"

- Скачайте [url=http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/][b]Farbar Recovery Scan Tool[/b][/url] [img]http://i.imgur.com/NAAC5Ba.png[/img] и сохраните на Рабочем столе.

[b]Примечание[/b]: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
[list][*]Запустите программу двойным щелчком. Когда программа запустится, нажмите [b]Yes[/b] для соглашения с предупреждением.[*]Убедитесь, что в окне [b]Optional Scan[/b] отмечены [i]"List BCD"[/i] и [i]"Driver MD5"[/i].
[img]http://i.imgur.com/B92LqRQ.png[/img][*]Нажмите кнопку [b]Scan[/b].[*]После окончания сканирования будет создан отчет ([b]FRST.txt[/b]) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.[*]Если программа была запущена в первый раз, будет создан отчет ([b]Addition.txt[/b]). Пожалуйста, прикрепите его в следующем сообщении.[/list]

[QUOTE=SQ;1489351]Пожалуйста, прикрепите
[/QUOTE]
готово

[LIST][*] Скопируйте приведенный ниже текст в Блокнот и сохраните файл как [b]fixlist.txt[/b] с поддержкой [B]Unicode[/B] в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:
[CODE]
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-1423386079-2525107893-215538273-1001\...\Policies\Explorer: []
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
U3 aswbdisk; no ImagePath
Folder: C:\Users\anton\AppData\Local\NewSDMarter
File: C:\Windows\SysWOW64\instalm
Zip: C:\Windows\SysWOW64\instalm;C:\Windows\SysWOW64\utorrent.dll;C:\Users\anton\euUEconqSIc.exe;C:\Windows\SysWOW64\QIcUpf.exe;C:\Users\anton\AppData\Local\NTUSER.DAT\msiexec64.exe;C:\Users\anton\AppData\Local\{9A5F1821-1526-1C50-A634-7F84341A2214}\msiexec64.exe;C:\Users\anton\AppData\Local\NTServices\msiexec64.exe;C:\Users\anton\AppData\Local\Media Network Sharing\msiexec64.exe;C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
File: C:\Windows\SysWOW64\utorrent.dll
Folder: C:\Users\anton\AppData\Local\Media Network Sharing
Folder: C:\Windows\{05B91DDD-6208-4D5A-8C72-928939559F4E}
Folder: C:\Windows\{EB47D3E9-14CE-4BE0-B16B-C061571F46C7}
Folder: C:\Windows\{D32F0790-E651-41F4-9571-6065DA044B85}
Folder: C:\Windows\{B58AFBDA-7D5B-40C0-BE79-D9F3286E2165}
Folder: C:\Users\anton\AppData\Local\Media Network Sharing
Folder: C:\Users\anton\AppData\Local\NTServices
Folder: C:\Users\anton\AppData\Local\NTUSER.DAT
2018-09-29 18:55 - 2017-12-27 02:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{6813A122-4BBF-4408-8C87-07176246B992}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{697DE5F4-0D13-4608-9728-7539F704E51C}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{70A294B3-FE6F-4af9-9395-CFC58FC07C30}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{74562BED-63D6-4234-A386-937DB6FA38AE}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{7C90F737-950A-49eb-B6C1-EE1744C75E97}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{868D9612-74A1-405b-9758-369138103193}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{BB9F1D04-94AB-40b7-ABAE-33D2637F6340}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{CC3BE603-926A-40ae-9570-4258474F0364}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{DD0B2199-F2FD-41eb-B744-B06B100B9A43}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{DFAB83E9-EBA6-4425-928B-B15A57F39469}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{E27473C6-A63D-4b85-95FC-C7DE20306C0D}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{F5756047-E218-465a-AC4C-FD04238C4896}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{F9748CB6-1CCB-4557-905E-8D42C83AAEB6}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
CustomCLSID: HKU\S-1-5-21-1423386079-2525107893-215538273-1001_Classes\CLSID\{FC072C1A-25CB-49e7-8F79-F2A8B8C3289D}\InprocServer32 -> c:\program files (x86)\adobe\acrobat dc\pdfmaker\autocad\2015\64\acrobatacadic.dbx => No File
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
FirewallRules: [{4564E621-7183-4CC0-9828-9331E70E02D9}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{0D869E77-C321-4577-AB3D-DA9EBD039C22}] => (Allow) C:\Users\anton\euUEconqSIc.exe
FirewallRules: [{7640D4A7-D86A-4754-B4F4-60F2D2833138}] => (Allow) C:\Windows\SysWOW64\QIcUpf.exe
FirewallRules: [{D726ACF1-2454-4D36-9BEC-C3E54FA4C1DC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6E65E3DD-3FDE-43FB-92EA-000ADD8CD18E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B7C0152D-4CDB-45AB-B81A-E837ECA86FEE}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{674EEE2E-24D1-421C-82BD-60D9E1DC7DFC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0DE6AC87-FC12-461B-91EA-6B2033C480C7}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{900624F4-0B13-4B95-8DD3-F5EBB2C079D8}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{9D0B4ECF-4B5B-4B36-B2F4-FF74C46B684D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{8AE3CFE2-60E1-4F66-ADF6-BCCC6425CC42}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A1BF0B92-7C77-40FE-A09E-953BC2F4B626}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{7201F28A-3344-48C6-93A9-1731A7C690D7}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{CDDA3809-7A7A-423C-A19C-93B27C339C64}] => (Allow) C:\Users\anton\AppData\Local\NET.Framework SDK\msiexec64.exe
FirewallRules: [{2279C273-4B5B-45DA-A12E-DDEA56586E70}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{2CD069FB-0524-4CEC-AFC4-D5A56F1E0120}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{39C1AE4B-11B6-4119-B47E-46562D8169BD}] => (Allow) C:\Users\anton\AppData\Local\NET.Framework SDK\msiexec64.exe
FirewallRules: [{075D420F-4A2E-4C77-9792-61F3F471F012}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{31385A5F-35A7-4DCF-ACB8-6B8E3E17BF4E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F4E1F595-280F-487E-B401-908B6F431D81}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FB92AE45-A432-45DC-AC76-333B2BA61C1A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{811B7F7D-AB85-4DAC-8BDE-2C5398FD7A19}] => (Allow) C:\Users\anton\AppData\Local\web server extensions\msiexec64.exe
FirewallRules: [{33F42326-83F5-4FED-A7BE-3FC7CE4BE037}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{E7D82CBD-6B11-4854-B94F-746240B64D26}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{819899AA-9E86-43D4-B462-A6E68566DF7F}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C470F99A-7EAB-49FB-8980-D094EB227289}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E3E5161C-A701-40CD-ABF5-F5FDEEE27BD1}] => (Allow) C:\Users\anton\AppData\Local\Remote NET.Assistance\msiexec64.exe
FirewallRules: [{906F2DB6-A0D6-404D-A5BA-445B8A407C6F}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{420A1EDB-EDBF-4332-BBF8-0ADA7D5E5735}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{74143664-C118-47CD-B190-27E7EFC7D2F3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{30167835-03B3-427C-9E8F-8FE18022E16B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{96884E5A-310E-4E5D-89EF-DBC3FC142E23}] => (Allow) C:\Users\anton\AppData\Local\Remote NET.Assistance\msiexec64.exe
FirewallRules: [{79702D67-2AC7-4144-993B-E649372C21FD}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{CF95B82F-A1C4-45FB-983E-6A901C0CFC28}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{815FE511-A755-4737-8543-B9E7538B1C0B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{7D82164B-87C7-4C39-AFA7-0F2119DDD644}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{5C32C792-B9E3-4D12-A7A1-613273982390}] => (Allow) C:\Users\anton\AppData\Local\Runtime_WOW64\msiexec64.exe
FirewallRules: [{3BEF9141-5102-44B1-B0B5-7D8537B5B80D}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{797F4755-A1CD-4C6C-9FE0-B44368917FAC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2D325D64-8FA3-4AD8-AB93-035A6F2FD204}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{95BBDD07-7F65-41DB-ACE5-0EC6579CC5F4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D2427E72-B6A5-4FE9-B074-A46CA9074EF5}] => (Allow) C:\Users\anton\AppData\Local\Runtime_WOW64\msiexec64.exe
FirewallRules: [{90AD2A6E-C5CC-476B-A2CB-D02DD4F05FE6}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{A49D9056-6273-4075-8C9B-D6B87692B68B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{43E8BEC2-86FB-4035-9146-6E05971318B2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{14F9FDB7-D24B-4C0F-8E88-518E7B9D8D12}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6D028415-82FB-4BF0-B8D2-7C675CAEE6A2}] => (Allow) C:\Users\anton\AppData\Local\{9A5F1821-1526-1C50-A634-7F84341A2214}\msiexec64.exe
FirewallRules: [{3C116E35-ACAA-4E09-B764-9521EF878FB0}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{78861605-C3CE-432F-A0D6-6F295660E63D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{066B1B18-1706-4300-B7B9-1ACD94B99342}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2DB2627A-6603-4BBC-AD0F-BBE1CBCDA507}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E0321014-69BF-40AB-9274-709710D17EDF}] => (Allow) C:\Users\anton\AppData\Local\{9A5F1821-1526-1C50-A634-7F84341A2214}\msiexec64.exe
FirewallRules: [{18F9528C-1958-48EA-8B0C-65ADB5256A02}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{669F2704-11FE-4294-B6A7-FBA783E57EE4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{067292D1-D30F-48B9-A7A7-26A53128B5DD}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B49069ED-FB12-4FA4-8CD2-DADC1697E391}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FE16EB63-3557-4593-A4E9-3B938993A943}] => (Allow) C:\Users\anton\AppData\Local\{9A5F1821-1526-1C50-A634-7F84341A2214}\msiexec64.exe
FirewallRules: [{C239D41B-024C-4913-AACB-61EFE356614B}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{BAE17DFB-827B-4233-A3F1-75044FED0B08}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{53D2457A-9C22-49F4-90F0-8E1459B0E897}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{4BF2CEDD-2D8E-42F5-84EE-B6E69A411AEA}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{BA13FC1B-C5C2-41FA-85AE-C25AA85C6351}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3EA538E0-5450-46AA-9058-20E6939A07EB}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{46096B15-FC01-4A4F-B20D-13B7467A9E7B}] => (Allow) C:\Users\anton\AppData\Local\{9A5F1821-1526-1C50-A634-7F84341A2214}\msiexec64.exe
FirewallRules: [{C2E97DDD-73F3-43B3-A3F1-2D6917A457C0}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{677E6585-539B-4EAF-B8AD-DD0AC8BA1AAD}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{758CC8A6-499D-410A-AD57-E32C0A0A0EAC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{79AA54F9-FB51-49A7-A833-10F783ECCB7A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{96F441FF-E541-4E7B-8EF2-662CD3B602BB}] => (Allow) C:\Users\anton\AppData\Local\{9A5F1821-1526-1C50-A634-7F84341A2214}\msiexec64.exe
FirewallRules: [{000C1992-3F3C-402A-A724-4E1B360F69D7}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{8834F430-E145-444F-8AF2-E67B2120215B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C9EB630B-79A5-4DFF-9231-9AE9D3B9C103}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A1DA4D28-D1B9-4AE9-A97A-80EEC630D690}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{104F32D8-F522-48E2-8440-9E34DA209EAA}] => (Allow) C:\Users\anton\AppData\Local\FoxitReaderPortable\msiexec64.exe
FirewallRules: [{16B32533-424C-4B46-A687-0E182E8814D3}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{FC26A44C-FA06-478D-B6A0-244F305B98F2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{57BE94B7-FF29-4172-81FF-39B79ED1A821}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{48FDC060-CF9F-4031-9B86-E24B4C002804}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E7E7F5AE-3510-4470-870D-789226ED3375}] => (Allow) C:\Users\anton\AppData\Local\FoxitReaderPortable\msiexec64.exe
FirewallRules: [{2662A54F-A67A-4A12-86A1-17E041172387}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{8376E1D9-445B-44E7-AC59-7107555B9603}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{BB70A750-A2F3-4A41-B9BB-245DA3774E18}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{DCE34DB9-6FEC-451C-A12B-0350198BEC6C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3F74B81C-BD8A-4E54-8369-A8E81F27D980}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{13B0153B-28B6-4FEB-BE80-9C6293C0D1D9}] => (Allow) C:\Users\anton\AppData\Local\FoxitReaderPortable\msiexec64.exe
FirewallRules: [{94435B65-5D3D-43C9-B202-5340E72B9511}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{2A86EC38-1F87-48CA-9D3F-ACC0C298D2E3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E4D7265B-9C61-488F-AF74-0DB0A3B18BE2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{27BCA7F7-C137-4B48-A600-1FE35C55C7A6}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F1B0A055-ED90-4422-9003-011E70671960}] => (Allow) C:\Users\anton\AppData\Local\WIX Toolset 11.2\msiexec64.exe
FirewallRules: [{C70574F2-9526-4BEA-9913-7606F8BD1D76}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{2D9E1D86-F1E8-4B43-B024-AD61564A7D8B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{42CC3690-5319-4D51-A48F-A216D0097F3A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{813A8BC3-4B59-493B-BD18-04693C911586}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{470C99B3-394D-48FF-9084-75864827F0DE}] => (Allow) C:\Users\anton\AppData\Local\WIX Toolset 11.2\msiexec64.exe
FirewallRules: [{35C2AF67-E421-4D5F-9EC5-AECBE7CADD58}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{B87C68AE-236D-4F6C-8F90-5EAC9F54401E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F3E5F48A-CD8F-4254-9F59-F0C8F66A62D4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C0066F9F-F4F2-4FBD-987E-E1D20A25EEA3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{28F60A10-B12A-42C7-810B-CF508D35E0E9}] => (Allow) C:\Users\anton\AppData\Local\WIX Toolset 11.2\msiexec64.exe
FirewallRules: [{04EFDE07-8E20-4C15-A87D-52B44AFD57DF}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{AD99A7A6-BA64-4ED4-908D-3BC31339C97F}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{73812F09-85B9-4DD8-AEFF-F27EABF2DD21}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{499004D2-CABD-4B29-9179-8D6048BAF58A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{DCC2B71D-49F4-447B-AE93-B74AC0DA5C85}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3E26CBD9-8F38-467A-866B-EA38ED584815}] => (Allow) C:\Users\anton\AppData\Local\WIX Toolset 11.2\msiexec64.exe
FirewallRules: [{80C7E7AE-9ECD-467C-AC2C-262C68BC5043}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{E0408841-34C3-4B2A-B0A5-E43F0417E261}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{37937268-1277-4D24-B8BE-E26791B64365}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{EE1CDC8B-EB4D-4A11-8D6E-EC8C8416E0FD}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6B0C6E6D-E08D-4EC6-A1A7-020AA8712976}] => (Allow) C:\Program Files (x86)\Common Files\NTServices\Winx64Legacy.exe
FirewallRules: [{8AE729A4-B450-4D16-9665-91B614B50CE8}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{64F01386-4098-4BD7-A4B3-BC0D35E874EE}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{ED1E5441-798D-4C36-A5C7-C1E396F8BDC8}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{8541E7A6-BD8F-4223-8738-8E7065193601}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{59BF9B2E-54B3-43F5-B28D-E58C94C7B6C2}] => (Allow) C:\Program Files (x86)\Common Files\NTServices\msiexec64.exe
FirewallRules: [{5F3D0A58-B7DB-4E5E-9147-46593953B42A}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{D706BF29-B516-434F-9015-A44480E1F1AE}] => (Allow) C:\Program Files (x86)\Common Files\NTServices\msiexec64.exe
FirewallRules: [{A9A8D9F0-BA96-43D4-A1F5-718BED9338B8}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{0E9979B7-FDE1-42A4-B057-5409DADCF86A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{5200B7C6-D450-487A-A301-C9FEADA4F719}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2BFFAA5B-ED9B-423C-8A75-47443831FCEC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{46DC9B89-B675-46BE-9A10-04259A58C827}] => (Allow) C:\Users\anton\AppData\Local\NTServices\msiexec64.exe
FirewallRules: [{C7B684BE-4A59-47C0-9BB1-1DDD490E86F7}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{79D6BFA9-455C-4F2A-BB76-FB64C377F88E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FDCF0D60-C462-4119-B844-C722C47EDC85}] => (Allow) C:\Users\anton\AppData\Local\NTServices\msiexec64.exe
FirewallRules: [{D9EB706B-311E-420B-80DE-9EBD75FDD9EF}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{B7456271-655D-443A-9A51-50CCF05F00DE}] => (Allow) C:\Users\anton\AppData\Local\NTServices\msiexec64.exe
FirewallRules: [{5788F5E6-D2AC-4A09-9A06-4FB3D5C9F8DA}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{E7851598-9041-4C39-9793-38B2CF6D8571}] => (Allow) C:\Users\anton\AppData\Local\NTServices\msiexec64.exe
FirewallRules: [{268CA2DA-E353-426A-AD54-EB7013EC4C72}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{3FE0F8FB-7EF3-4361-AF51-F65589D70E9E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{8A70924E-D145-477C-8692-A9B1F923FECD}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3828FE2A-09F6-4F4E-BB79-605A8981C713}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{20B1531A-B5DF-42CD-A2E1-4CFD34AE8888}] => (Allow) C:\Users\anton\AppData\Local\NTServices\msiexec64.exe
FirewallRules: [{9FAA962C-ECC2-497E-9B13-D2BD9413CA6E}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{1D11C0B9-AC5D-45FF-893D-D3BB712BA528}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{1836C2C2-DAF2-49FF-AFA3-C5653CFCD4E6}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0DD3536B-ED88-4786-B160-93A91AF12291}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2573816F-9F68-4DF4-AAD5-56FD54FCB9EF}] => (Allow) C:\Users\anton\AppData\Local\NTServices\msiexec64.exe
FirewallRules: [{87F82A49-2A9E-458E-B405-256E39D72D18}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{B45DA605-C2B7-44BD-BF02-B8A603E77D29}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{8D7D3CF1-1B40-4633-9DC3-37B157B56D92}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{749A9F40-9D0D-41E3-A3E1-00AD53595145}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{BAC3483A-F3CB-4738-B79C-17299CAB3B15}] => (Allow) C:\Users\anton\AppData\Local\Wow64Cache\msiexec64.exe
FirewallRules: [{A35FDAD6-CA4E-4903-A3ED-0163ACAA67FE}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{547826F2-7887-4D0A-BF3B-C9BB505D1902}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{83083DDE-8167-43FC-8CB5-1AD282B9156C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6B06ADE3-823D-441B-A109-E4A0FCD3B59C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{334546C0-2324-4A6C-9E3B-D34F1D3CD3FC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A30F77A0-74AF-4C8A-BD9A-DE63342F3438}] => (Allow) C:\Users\anton\AppData\Local\Wow64Cache\msiexec64.exe
FirewallRules: [{9FD9967A-2A40-43A5-849D-B2C913B6FCBC}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{57ABE529-E601-44CE-B886-23256628FE80}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F74FA86A-B26D-44C3-BA53-DEF001198E55}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C4711633-6ED0-4EE0-8F52-721CE114BE24}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{ACD4A3CD-9030-4430-8D0F-BE547262E05E}] => (Allow) C:\Users\anton\AppData\Local\Wow64Cache\msiexec64.exe
FirewallRules: [{1A09309F-FC20-46BB-9F30-49613825B0FA}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{AC2FC4D0-439D-49AB-8C70-049C418781D9}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{04B08F44-238B-418D-BD01-37C1283BEF6A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{01635F76-1E66-4027-9088-B10393799B5C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{658285EE-F93E-4358-A058-24C8F0DA0604}] => (Allow) C:\Users\anton\AppData\Local\Wow64Cache\msiexec64.exe
FirewallRules: [{90CB596B-E4CF-42F6-A13D-CB028A513B01}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{F9F0022C-7F1B-447F-BFAC-F89627790D33}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{EB474B51-C291-4068-A1FE-02207F53028B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{AF54792A-AABC-43A4-8CCC-178935B8AC7D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F16C5883-0E4A-431B-B3B1-7CB40C56D1FA}] => (Allow) C:\Users\anton\AppData\Local\ClipBoardSvc\msiexec64.exe
FirewallRules: [{CBA80C71-CD38-4B8A-A4F6-2C76758C60B0}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{39B9CF6F-5E50-4554-A082-A385703E6B69}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{9C8C886E-2192-4C68-B32C-F8F5D5A3E01A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{DFF224B1-E241-4F75-BFC9-ABF90060571D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{CF1703DB-AA85-4F4D-BFDC-32CADA70091E}] => (Allow) C:\Users\anton\AppData\Local\ClipBoardSvc\msiexec64.exe
FirewallRules: [{29AAEE7E-6484-4810-8425-298F3159E1B4}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{A156721B-E632-47D4-9CB6-91AA2EC0141A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E1431FAD-B579-4090-A2D8-9F2F9E36F43E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{66E9F8C0-427E-4237-A386-C463891AC8A9}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{EEFA9E0D-7C2A-4845-AC2C-E16BF699F5C8}] => (Allow) C:\Users\anton\AppData\Local\UserData.db\msiexec64.exe
FirewallRules: [{3C6D9103-7C3E-4672-8D75-43D6146C988F}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{A218EA0D-3349-4993-BCBF-CA36B35BFD34}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C462393D-E800-4CD6-A47C-5926A9B921C8}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FDF5B9FD-D5DF-45E0-BDD4-DE72D50ACDE0}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{CCC182B8-640F-43E2-AD39-14F74030C03E}] => (Allow) C:\Users\anton\AppData\Local\_restore{E415C293-1C11-4005-B5E5-91EC1A0BAE7D}\msiexec64.exe
FirewallRules: [{E76115EF-B647-4765-A9B0-35196B6FB243}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{3486617E-457C-47A0-80E6-C7012D9695AD}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{AD070D97-410A-43E1-ABBE-B1B65FB775DA}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{23609182-7A22-45C6-8B0B-2E170DEF2658}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{31A5EA0E-2EA6-4DB5-A353-C6C073DE79B3}] => (Allow) C:\Users\anton\AppData\Local\_restore{E415C293-1C11-4005-B5E5-91EC1A0BAE7D}\msiexec64.exe
FirewallRules: [{6490E469-5B16-4316-BB76-C150588BB3DA}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{63D7471F-E38E-40E6-8E1B-3547F2E6F380}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{7DC07C96-A3E8-4268-9AEC-AD20185E910E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A86C69C7-0C8E-482F-AFDD-1BCC29ADE130}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{13B56BAF-8B35-4DEB-8831-835DCE947F14}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2E0FECDA-0E8B-430C-AB4F-27C1008C5C7C}] => (Allow) C:\Users\anton\AppData\Local\_restore{E415C293-1C11-4005-B5E5-91EC1A0BAE7D}\msiexec64.exe
FirewallRules: [{8FD0B466-3F72-43A1-B734-391E3E806CCB}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{456FDAC9-65F3-4223-B9B2-54CC28685868}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{05670BFE-C6C8-4DCA-9AD9-37730266E45A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{98114145-8DCF-4157-AC66-DC4B1867E2F3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3481842F-BB89-469B-80E8-B59B718AC036}] => (Allow) C:\Users\anton\AppData\Local\Media Network Sharing\msiexec64.exe
FirewallRules: [{6493A556-0867-4CAA-8049-AB0485673AFD}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{701B18BD-3AD0-488A-8CA0-4E896CDB19F1}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{9779BD0B-1F39-407E-932D-83D3A085A4A5}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{206649CB-F21E-47C9-850B-A0AAE888D885}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{438A0E50-046F-4298-8BD6-D7C523BE0113}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{BD07B4E9-5DAA-4F58-8182-0889566E9B81}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{1B602765-4429-413E-BC75-7BA94B43D2FA}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6191C74E-E54D-4232-A38E-AA731775AB04}] => (Allow) C:\Users\anton\AppData\Local\Media Network Sharing\msiexec64.exe
FirewallRules: [{426C7827-55BC-4930-BF6D-098366BEB7ED}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{4E708A61-74CA-4618-AFF2-59158FFA11E6}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{8D6902D1-FEAF-4017-B70A-EADE32804630}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{609A4ECF-2B87-41B6-BFCB-CC44027D2441}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E429819F-A7DF-4161-8F36-ED3706C758EA}] => (Allow) C:\Users\anton\AppData\Local\Media Network Sharing\msiexec64.exe
FirewallRules: [{65A1DB0B-A0E0-487D-A090-A2A35AD8D6DB}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{759CF8A3-40DE-49A1-8771-E5A861780088}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{33C4045D-B0C5-43B0-864F-33CBFCC20B59}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E77FAF0C-10AB-447E-8F65-D1690965C389}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0C6D60D2-E8B5-4B76-B24F-23FB4FCE153C}] => (Allow) C:\Users\anton\AppData\Local\Media Network Sharing\msiexec64.exe
FirewallRules: [{DDC092CA-7524-4FAF-A3ED-C5DBE7FB7E3C}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{FA0A101C-669C-48EC-A324-E6EA431FAB03}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{62240436-614B-4487-AC03-FF94495C5D38}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{162B904D-F621-4136-8471-35E6639896C1}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A52E6879-140D-4C53-B723-156297A5398B}] => (Allow) C:\Users\anton\AppData\Local\Media Network Sharing\msiexec64.exe
FirewallRules: [{13A217CE-A418-4BBB-B2EB-0E913EAD8AB7}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{CD6CCF6F-6E82-413B-B62E-B4F71B608CC8}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D71D08D1-7795-472D-8224-6773A2531596}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FE4E1764-B2F5-479C-9561-B2C468D89ADF}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{53E98843-FF2D-445D-8544-AD2273052109}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{1685A6F3-9720-4763-98BE-35DA165B70A2}] => (Allow) C:\Users\anton\AppData\Local\Media Network Sharing\msiexec64.exe
FirewallRules: [{D6B670F6-509F-4571-943D-B712C724E0C2}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{D81BBF8D-8480-4BBC-9DAD-9D5BBCE8EDC6}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{827156BF-EE18-474B-9D7A-CF3F0C5FF4B4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{14DE943D-A0E4-4BB3-9843-1D59CADAEC68}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{287BB380-F9CE-46DD-9308-1E224B61D0EB}] => (Allow) C:\Users\anton\AppData\Local\Media Network Sharing\msiexec64.exe
FirewallRules: [{8A55E6B8-6F3B-40F0-8C07-7B34A0E96ECF}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{7E255CBA-E4E3-4153-8C14-7DE75CC9992A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{26F1E1D5-6761-4C33-A505-681E3B0D02E1}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{DB0A2CFA-7550-4CB4-9EA2-6C6D04D0213F}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D8E4DC6D-1601-46D8-8617-1E5400DEA4CC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{60B04F9A-E489-4BB1-8EDB-BE26BD2888E5}] => (Allow) C:\Users\anton\AppData\Local\NTUSER.DAT\msiexec64.exe
FirewallRules: [{49B2DE53-DDDB-467B-BA53-CA373B2551B3}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{162914E7-8305-4F96-A6CB-1A25108422E4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{7BECD0D0-D1E1-48ED-9603-3A419C53C897}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FBA9AF3B-A899-4B4C-B1EC-307A47E667F3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{EAA8665D-B5C8-4B24-B145-FD95B6577022}] => (Allow) C:\Users\anton\AppData\Local\NTUSER.DAT\msiexec64.exe
FirewallRules: [{17CE0AFE-9B85-4344-8FD2-C4EBC10AE6B5}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{A97F4AF6-4E1C-417D-ACB9-A17BD7DBA5B4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2B4F4343-9A7F-498C-93DD-610595CE5153}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{328475AE-F744-4E5E-A162-BCE5FD5FD33A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{BE09CE61-249D-4ADF-92FA-36C751FB8F04}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{260BE710-E82B-47A9-A655-619C81A48891}] => (Allow) C:\Users\anton\AppData\Local\NTUSER.DAT\msiexec64.exe
FirewallRules: [{4E8CC466-3BF1-4741-B07C-313C5A14D1F0}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{3501988A-0F13-434D-8979-32C2A406BF4E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D03C1BDC-C5B7-481E-9E97-73714A09C62E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{072441B7-F793-4D2C-BB11-4FFF8EF81623}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0A831885-280E-415D-B3CF-7A8A3C7AE458}] => (Allow) C:\Users\anton\AppData\Local\NTUSER.DAT\msiexec64.exe
FirewallRules: [{25CB5313-A709-4541-8DCD-66478FF53C89}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{DD7983D6-C1C0-446F-AA95-E38B28ABEF7E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{995990DC-D8B0-44D8-8F3B-76ED03AE44C0}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2CFC04CB-CF7F-4581-9BA8-2CA03CA4F2F3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{900DE25E-16D4-43EC-9A0F-E855E6B2D0A2}] => (Allow) C:\Users\anton\AppData\Local\NTUSER.DAT\msiexec64.exe
FirewallRules: [{1F1DB6B9-9607-467A-82B7-BBECD929E55F}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{19D56D33-E81D-4CAE-B453-21440DF59506}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{211CC069-72A1-4BAA-A19C-321D5E4B4D4A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{EF3B8718-F995-4EDC-B623-670FFAB87567}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{13D7AAC7-BDE6-4C78-9517-267A099A53BF}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{688FA66D-ABF6-47DA-8854-BB5EB7449395}] => (Allow) C:\Users\anton\AppData\Local\NET.Remote Assistance\msiexec64.exe
FirewallRules: [{D06B7BD8-4748-42EF-908E-4CFA40D79A4D}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{6DFC0E15-C0B2-4C02-8C36-13B165D63C6A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{38299FF9-DAD5-4BA8-84FC-3AD4D9C02FC2}] => (Allow) C:\Users\anton\AppData\Local\NET.Remote Assistance\msiexec64.exe
FirewallRules: [{4AD8AB8F-47BC-4363-BE2C-1648F2051BBC}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{2DAA5865-92E8-4703-AF23-51239734B7D2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0543E430-D2A7-4D90-B528-F5A5A498A5AF}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2A14C56F-7260-4782-AAA3-FE4F9396D63E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D5F34C37-69B2-4FE5-BD6E-511AD43E9716}] => (Allow) C:\Users\anton\AppData\Local\NET.Remote Assistance\msiexec64.exe
FirewallRules: [{E3993FFE-0A11-4D1B-8C6E-038F553215A0}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{BA7756BD-6FB9-42C9-9B93-812C6E9C3836}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{7B10AA04-F1BA-49DF-904A-9ACD08346A44}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6DC36247-BFD9-411D-8665-BCC5B58ABEF3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{DA2C6739-97BA-405E-8FA1-F1807D7DA7B9}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{925DA604-5C01-4763-9DC0-E13A3B4548AF}] => (Allow) C:\Users\anton\AppData\Local\NET.Remote Assistance\msiexec64.exe
FirewallRules: [{093E4949-E733-40CB-8F71-F2FC23BCC22C}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{440F35B1-6832-4090-9DE4-04FE490E2E55}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B2AF4A48-AB7B-4FBE-A3E5-1A7C5B7F7931}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A85A4F1C-1E04-4211-8AFA-871F68746B4C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3DD28F57-A71A-4A68-BECD-E7174C7776B2}] => (Allow) C:\Users\anton\AppData\Local\NET.Remote Assistance\msiexec64.exe
FirewallRules: [{7FA4715F-83BD-41DC-8369-C58686972AD4}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{31F8C5F3-2107-44BF-A0C6-D1844939EDED}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{15743BBB-6B9E-4305-8C80-6900AA013FB0}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{9209CE33-0F4A-48B6-95AE-17A0DA468128}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{4D01C9EE-4CA8-49DB-80E7-462CE5C54211}] => (Allow) C:\Users\anton\AppData\Local\PortableApps.com\msiexec64.exe
FirewallRules: [{42781CB1-D3C0-4691-BBBA-2B487860DAD9}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{CD7EEFEA-9CC0-41C6-9CB1-883988EE2DF1}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{EA9CDE70-5509-49EF-A8E2-8BBAB0A4AFEC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{EFC1B716-FB16-4880-A29F-9AD414FBC059}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{36C934F7-F823-49D9-AC32-27489634E1F8}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F18737C8-E323-4B3C-9861-C0B9604D077E}] => (Allow) C:\Users\anton\AppData\Local\PortableApps.com\msiexec64.exe
FirewallRules: [{98967B7E-689F-44A6-9415-B36B84884736}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{E5F20E8B-0084-4FDE-B8FF-D13799ECA946}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{2F76E63B-091F-43DB-AB6B-B208FE0F72A4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3EA8F858-EB53-41E4-A0E5-FA7BAC697BF5}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{9E9F82BA-D218-42FD-A170-3421FF0D063E}] => (Allow) C:\Users\anton\AppData\Local\PortableApps.com\msiexec64.exe
FirewallRules: [{A006497D-5F07-4539-9D98-0CF8A2A568A8}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{81EA39F9-EA70-42A6-B5C3-C8BD91DFAA2D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{4C67927C-7866-460B-BD8B-75E2535CE05D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0050592E-C95E-46CB-BCD5-B3FDFDF50F1C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{7290D913-37DC-4512-B1DB-F6E0FF065600}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{42C241B3-85F7-4427-A882-04F22BEC3E69}] => (Allow) C:\Users\anton\AppData\Local\PortableApps.com\msiexec64.exe
FirewallRules: [{5223C1AB-2EBB-46F7-BA53-3CE7B43EA0AB}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{0E8A1006-0D1A-49FB-8EEE-31111DE561A2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E8E83619-C616-4255-80A8-764309594F6E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{364F2A08-1158-41A5-B6EF-8D6213F69B99}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{1C6F04F0-24DE-4A5F-B3C3-9C01F5EC7DC7}] => (Allow) C:\Users\anton\AppData\Local\uTorrentDir\msiexec64.exe
FirewallRules: [{F6752B9D-E66D-4FE4-992B-5D1570DFF2FE}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{9FCAB2D1-24C7-42E3-94D1-79ECAB90884A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{AFFEC8BE-CE6A-44D7-AB86-F5690C652D93}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D867EF93-B492-4424-86AD-CE7FB9EF8F9E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{418FD848-7CE3-4E78-9679-7C68D0510AEC}] => (Allow) C:\Users\anton\AppData\Local\uTorrentDir\msiexec64.exe
FirewallRules: [{27DDC18F-8A53-44EE-B3EA-7943DB83875C}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{C9734987-6D0D-4248-A533-4BA217F05D12}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C4497D65-BA76-4CFD-A212-FC6A178346E8}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{BE769090-412F-410D-AA58-E7C8F7281C43}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F2CFF651-02B8-4D50-8DD2-9A059B8FE70F}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{47A8C204-832B-47B8-B5D5-94095885771E}] => (Allow) C:\Users\anton\AppData\Local\uTorrentDir\msiexec64.exe
FirewallRules: [{1B9EE661-BFB4-4749-ACD8-B4D2E0BB576A}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{D084922B-82F0-4A21-BEA1-59EAC1A4C49A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B3F953F6-DD91-43C5-92DF-7C510C235FFB}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{96EB66CC-E566-4B13-966D-667BDCF80D6F}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{5E61B3A8-3E8D-4891-B175-C7D0C7E32447}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{DACBF0BD-F729-47AF-AA2A-03B4726EF4B8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A1616362-768F-48D9-BB67-426842A6F6B4}] => (Allow) C:\Users\anton\AppData\Local\uTorrentDir\msiexec64.exe
FirewallRules: [{8565EC66-A876-49F4-9F5A-559E1062BA25}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{6033344C-9DD7-4D44-819F-77721A11B654}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{BF672905-A744-43D4-90E0-8867F07D0AA7}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C74502EC-7FD0-4E99-AC79-1D586CFA1298}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{22F3660D-6C3B-4F4F-8CA4-0BCAF1D8D095}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{68202B12-1C26-497A-97FC-5A29C01CC31E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B5F733E2-CA49-4334-B27E-2505C9B03F51}] => (Allow) C:\Users\anton\AppData\Local\uTorrentDir\msiexec64.exe
FirewallRules: [{5D3CD980-C300-44C2-BE3D-B23149A60951}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{E7F32F62-6DCC-48E5-AE4D-C080BD7C7921}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F316E4CE-A78A-40BA-AB7E-B60074A58A60}] => (Allow) C:\Users\anton\AppData\Local\backup_log\msiexec64.exe
FirewallRules: [{9BF370E7-6C3B-4B25-87E7-F4A83319CDA3}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{9559B73D-1532-43DC-8E86-5E4C82A06EB4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3FCE342F-E18A-435C-B1EA-849D895A8B53}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D0F956EF-72CC-4653-8158-940DD89EE7DF}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3C43A7B7-60DE-4589-8549-3B8DB39F6BEC}] => (Allow) C:\Users\anton\AppData\Local\backup_log\msiexec64.exe
FirewallRules: [{D6902CBB-88CC-4912-B59D-CD81B03A7757}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{6135C9C2-7DB6-4B70-BB51-412808B199E1}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{5ADD885A-DEF9-4F84-BF58-BC5EA55F0143}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E728F4DF-24D8-417F-AD7D-4946A78329D3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FA6254E0-DE64-4DDA-9B3F-1894510227A0}] => (Allow) C:\Users\anton\AppData\Local\backup_log\msiexec64.exe
FirewallRules: [{E8F73E96-3B27-4547-B56E-396A7C9FF959}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{09F32EC7-96A6-4BE3-9E30-FB8C91CB16EB}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F55DA6AA-A5B8-45C7-96D9-8F5531FD6EEC}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{4F5852ED-13F6-49B8-85C3-5C61370CF5D2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C5EDE331-6C57-4500-9B1F-29355BC63DD0}] => (Allow) C:\Users\anton\AppData\Local\backup_log\msiexec64.exe
FirewallRules: [{F7992E00-BDEE-4B02-99ED-3C09214FE019}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{116A576D-5A87-4CE3-B5C2-1CFEDED92D75}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A0B49FF7-235D-4748-B37A-F02237EF8ED3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A158C8F5-6A7F-4A03-B777-0E873A1C8071}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{DA647020-685B-4BC4-9AB5-B15E823139F0}] => (Allow) C:\Users\anton\AppData\Local\backup_log\msiexec64.exe
FirewallRules: [{2FFBFA02-040A-4848-BC92-929FAC8231A5}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{DC5E8A50-AED4-4ED4-9420-9A5057108642}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{FB6AD567-02B3-4176-81B5-F4F402FCD01C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F2ED9539-778C-4566-8B7A-34DED031E8E6}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D1268196-B3E7-4AD4-8280-EFE4E0FBB9FA}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E71269B3-C4DA-4E1B-B2FA-566146BAAF87}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{BFD579E4-5F57-4D6E-ABA0-CFEB710A4528}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{E87D34DB-7BD4-470C-AC46-34C371A20DE7}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{AD22FFDD-393E-4651-8FFC-763618ED4F21}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{62AB1A18-DFD9-410F-80A3-9A8B16D98F35}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0873F896-ADBC-4460-82BE-A7D947B7E2D6}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{96052979-9C92-446D-B2B7-6D5FB2D05001}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{1475EDFF-3386-49AB-B716-2A8762838730}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{7F838468-FE4B-44BB-843B-604F977D90FB}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C9C97C35-960C-4D21-B3CD-6D20EFB7E297}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{3D56509F-A442-438E-BF8A-1D735D73F2DF}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{D6354307-2E70-4EDA-9322-8E18AA753E23}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{0DD68F73-D0D0-4AC5-B908-B1E7E31DB2B8}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{8585157C-4609-4451-AEBA-1D2473904A3D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{5C64F8DA-1BCE-49A9-BCFD-738798F4127D}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{6438B31F-AD16-41A1-AD91-5234F5241EA5}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{FFB08C2E-2E33-4786-BDCB-C666012D448C}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{DE52CC60-45C1-4D34-9675-463CEF5599FE}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0D62082C-5C1B-4D86-9134-C7794E38F7E1}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B2158ECD-1585-494C-8790-EBD8C6EC24AE}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{B00E041E-EE7B-4003-A7E6-4EDFA6A4B868}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{BC0EA1C4-82C9-4269-962E-A0767A350713}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{F728AB50-37CF-4A84-91D1-B31AB71A1127}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{DE33679B-E04E-43FB-A34E-37A1510C2C69}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D7F50EEE-40CE-4C42-8C63-B76328971C0C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0366D672-8072-4DDE-B1CB-FD40E19BBB24}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{176BA775-A5D2-4A7C-8546-B277734D06F8}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{F1806461-7961-4B0D-A52D-71E76591B559}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{1915F243-302F-4DE8-80FD-DC55336CB75E}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{D0256D45-2BC5-4CDE-B8F7-80C281BD4591}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{E2D18392-888A-488B-8BF3-849FFF8E6403}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{CF77EDE8-CC15-4F24-8FA7-373CD0D95A65}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{826BD5CF-33C2-4484-9232-8F890B800B8D}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{29C9BB40-57A4-4F9E-A4C2-8573A093C333}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{839D05A1-63B8-4C4C-AD62-21C1E9EC3949}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{92C42856-8F24-48D3-98BB-BEFBE39DCFC4}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{0C2826BE-0AEF-4E6B-B8BF-59B91BBCB3A2}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{EC9859CB-11CD-4D2A-AD39-137F3ACA94EC}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{0B73BA06-D8CD-4DC4-8F73-5B45C5E3722C}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{9056CF1D-E376-438C-82B3-F4EAB52BC92F}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{F143C83D-CF20-48A9-B9D5-2CB57FF60DD9}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C8622453-C2E3-48DD-A127-1CEED6225628}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{9F737782-F871-41ED-A620-3793551C9EBA}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{E89233DA-D830-473A-B6AD-D5A4A688745B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{98EF796D-F296-4F29-A32D-2177C506F7D9}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{523C07C0-A298-4EBD-A7EB-622F17F7948A}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A469B389-0119-44A5-8988-219DEE9144AA}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{983042FA-3785-45D9-B062-5B02B7AEEFE2}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{C8B7BDA2-9F02-4254-8776-0F135E4931B3}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{273B9D30-6F43-4F97-A889-273E70FB1756}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{CEFC57B5-EECC-4171-8013-4C7CF11D9F0B}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{5E95786C-992E-47E4-928E-126211976969}] => (Allow) C:\Users\anton\AppData\Local\Canon Network Tool\msiexec64.exe
FirewallRules: [{42C94AEC-0489-47C3-B50E-E3D2B03E5AE2}] => (Allow) C:\Windows\SysWOW64\rundll32.exe
FirewallRules: [{07414074-096D-457D-A73A-E49387F04E55}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{A766AA2D-C4ED-46F4-971E-B909ADCEF0E2}] => (Allow) C:\Windows\SysWOW64\svchost.exe
FirewallRules: [{C00CE8AD-1905-4F17-A723-3497A71F5922}] => (Allow) C:\Windows\SysWOW64\svchost.exe
Reboot:
[/CODE][*] Запустите FRST и нажмите один раз на кнопку [b]Fix[/b] и подождите. [*] Программа создаст лог-файл [b](Fixlog.txt)[/b]. Пожалуйста, прикрепите его в следующем сообщении![*]Обратите внимание, что компьютер будет [b]перезагружен[/b].[/LIST]

[COLOR="silver"]- - - - -Добавлено - - - - -[/COLOR]

На рабочем столе образуется карантин вида [B]<date>.zip[/B] загрузите по ссылке "[B][COLOR="#FF0000"]Прислать запрошенный карантин[/COLOR][/B]" вверху темы.

готово

[LIST][*] Скопируйте приведенный ниже текст в Блокнот и сохраните файл как [b]fixlist.txt[/b] с поддержкой [B]Unicode[/B] в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:
[CODE]
CreateRestorePoint:
CloseProcesses:
C:\Windows\SysWOW64\instalm
C:\Windows\SysWOW64\utorrent.dll
Zip: C:\Users\anton\AppData\Local\FoxitReaderPortable\msiexec64.exe;C:\Users\anton\AppData\Local\WIX Toolset 11.2\msiexec64.exe;C:\Users\anton\AppData\Local\ClipBoardSvc\msiexec64.exe;C:\Users\anton\AppData\Local\UserData.db\msiexec64.exe;C:\Users\anton\AppData\Local\uTorrentDir\msiexec64.exe
Folder: C:\Users\anton\AppData\Local\FoxitReaderPortable
Folder: C:\Users\anton\AppData\Local\WIX Toolset 11.2
Folder: C:\Users\anton\AppData\Local\ClipBoardSvc
Folder: C:\Users\anton\AppData\Local\UserData.db
Folder: C:\Users\anton\AppData\Local\uTorrentDir
C:\Users\anton\AppData\Local\Media Network Sharing
C:\Users\anton\AppData\Local\NTServices
C:\Users\anton\AppData\Local\NTUSER.DAT
C:\Windows\{D32F0790-E651-41F4-9571-6065DA044B85}
C:\Windows\{B58AFBDA-7D5B-40C0-BE79-D9F3286E2165}
C:\Windows\{EB47D3E9-14CE-4BE0-B16B-C061571F46C7}
C:\Windows\{05B91DDD-6208-4D5A-8C72-928939559F4E}
Folder: C:\Users\anton\AppData\Local\Canon Network Tool
Reboot:
[/CODE][*] Запустите FRST и нажмите один раз на кнопку [b]Fix[/b] и подождите. [*] Программа создаст лог-файл [b](Fixlog.txt)[/b]. Пожалуйста, прикрепите его в следующем сообщении![*]Обратите внимание, что компьютер будет [b]перезагружен[/b].[/LIST]

[COLOR="silver"]- - - - -Добавлено - - - - -[/COLOR]

Пришел ответ от Вир. лаборатории.

[QUOTE]New malicious software was found in the attached file. Its detection will be included in the next update.
instalm - Trojan.Win64.Inject.dj
utorrent.dll - Trojan.Win64.Inject.dk [/QUOTE]

[QUOTE=SQ;1489377]

Пришел ответ от Вир. лаборатории.[/QUOTE]
Странно, неужели офф клиент юторента скачаный с оф сайта был заражен? Придется пользоваться другим торент трекер, а что за другой файл я даже не знаю.
Прикрепляю свежий лог.
Проблема ушла, пытаться открывать рекламу перестал, зависать, вроде бы, тоже. Гляньте лог, если там ничего подозрительного нет, то наверно все ОК:)

[LIST][*] Скопируйте приведенный ниже текст в Блокнот и сохраните файл как [b]fixlist.txt[/b] с поддержкой [B]Unicode[/B] в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:
[CODE]
CreateRestorePoint:
CloseProcesses:
C:\Users\anton\AppData\Local\FoxitReaderPortable
C:\Users\anton\AppData\Local\WIX Toolset 11.2
C:\Users\anton\AppData\Local\ClipBoardSvc
C:\Users\anton\AppData\Local\UserData.db
C:\Users\anton\AppData\Local\uTorrentDir
Reboot:
[/CODE][*] Запустите FRST и нажмите один раз на кнопку [b]Fix[/b] и подождите. [*] Программа создаст лог-файл [b](Fixlog.txt)[/b]. Пожалуйста, прикрепите его в следующем сообщении![*]Обратите внимание, что компьютер будет [b]перезагружен[/b].[/LIST]

сделано

Скачайте программу [url="https://yadi.sk/d/6A65LkI1WEuqC"]Universal Virus Sniffer[/url] и [url="http://virusinfo.info/showthread.php?t=121767"]сделайте полный образ автозапуска uVS[/url].

готово, только прикрепить не удалось, слишком большой вес, залил на яндекс
[URL="https://yadi.sk/d/O9CKdzySuxOLdw"]https://yadi.sk/d/O9CKdzySuxOLdw[/URL]

[URL="https://virusinfo.info/showthread.php?t=121767&p=897827&viewfull=1#post897827"]Выполните скрипт в uVS:[/URL]
[CODE];uVS v4.0.11 [http://dsrt.dyndns.org]
;Target OS: NTv6.3
v400c
OFFSGNSAVE
BREG
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.123\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.7\PSMACHINE.DLL
delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.7\PSMACHINE_64.DLL
restart[/CODE]

Сообщите, что с проблемой?

[QUOTE=SQ;1489470]Сообщите, что с проблемой?[/QUOTE]
проблема ушла, все работает чётенько, спасибо большое, пойду открою за ваше здоровье бутылочку пива:)

отлично, удачи Вам.

В завершение:
1.
[list][*]Пожалуйста, запустите adwcleaner.exe[*]В меню [B]Настройки[/B] -[B] Удалить AdwCleaner[/B] - выберите [B]Удалить[/B].[*]Подтвердите удаление, нажав кнопку: Да.[/list]

Переименуйте FRST.exe (или FRST64.exe) в [B]uninstall.exe[/B] и запустите.
Компьютер перезагрузится.

Остальные утилиты лечения и папки можно просто удалить.

Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]1[/B][*]Обработано файлов: [B]2[/B][*]В ходе лечения вредоносные программы в карантинах не обнаружены[/LIST]