Не возможно создать логи , закрываются программы

Вложений: 1

Не возможно создать логи , автологер из раздела помогите открывается и сразу закрывается
так же не могу установить никакой антивирус , только запускаю и окно сразу закрывается
что делать?

присутствуют явно скрытые процессы , которые грузят систему

зы. кое как удалось запустить лог

Уважаемый(ая) [B]alex7575[/B], спасибо за обращение на наш форум!

Помощь при заражении компьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитой Autologger, подробнее можно прочитать в [URL="https://virusinfo.info/pravila.html"]правилах оформления запроса о помощи[/URL].

[INFORMATION]Если вы хотите получить персональную гарантированную помощь в приоритетном режиме, то воспользуйтесь платным сервисом [URL="https://virusinfo.info/content.php?r=613-sub_pomogite"]Помогите+[/URL].[/INFORMATION]

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста, [URL="https://virusinfo.info/content.php?r=113-virusinfo.info-donate"]поддержите проект[/URL].

Выполните скрипт в AVZ из папки Autologger
[code]begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
end;
QuarantineFile('C:\Program Files\rdp wrapper\rdpwrap.dll','');
QuarantineFile('C:\Programdata\WindowsTask\winlogon.exe','');
QuarantineFile('C:\ProgramData\RealtekHD\taskhostw.exe','');
SetServiceStart('RManService', 4);
DeleteService('RManService');
TerminateProcessByName('c:\programdata\windows\rfusclient.exe');
QuarantineFile('c:\programdata\windows\rfusclient.exe','');
TerminateProcessByName('c:\programdata\windows\rutserv.exe');
TerminateProcessByName('c:\programdata\rundll\system.exe');
QuarantineFile('c:\programdata\rundll\system.exe','');
QuarantineFile('c:\programdata\windows\rutserv.exe','');
TerminateProcessByName('c:\programdata\rundll\rundll32.exe');
QuarantineFile('c:\programdata\rundll\rundll32.exe','');
TerminateProcessByName('c:\programdata\windowstask\audiodg.exe');
QuarantineFile('c:\programdata\windowstask\audiodg.exe','');
DeleteFile('c:\programdata\windowstask\audiodg.exe','32');
DeleteFile('c:\programdata\rundll\rundll32.exe','32');
DeleteFile('c:\programdata\windows\rutserv.exe','32');
DeleteFile('c:\programdata\rundll\system.exe','32');
DeleteFile('c:\programdata\windows\rfusclient.exe','32');
DeleteFile('C:\ProgramData\RealtekHD\taskhostw.exe','64');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Realtek HD Audio','x64');
RegKeyDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\InternetConnect.exe','x64');
RegKeyDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Realtek HD Audio','x64');
DeleteFile('C:\Programdata\WindowsTask\winlogon.exe','64');
DeleteSchedulerTask('Microsoft\Windows\Wininet\SystemC');
DeleteSchedulerTask('Microsoft\Windows\Wininet\Cleaner');
DeleteSchedulerTask('iToolsDaemon.job');
DeleteSchedulerTask('iToolsDaemon');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.[/code][list][*]Обратите внимание: будет выполнена [b]перезагрузка компьютера[/b].[/list]

Выполните скрипт в AVZ
[code]begin
CreateQurantineArchive('c:\quarantine.zip');
end.[/code][b]c:\quarantine.zip[/b] пришлите по красной ссылке [color="Red"][u][b]Прислать запрошенный карантин [/b][/u][/color] [b]над первым сообщением[/b] темы.

[b][color="Red"]Пожалуйста, ЕЩЕ РАЗ запустите Autologger; прикрепите к следующему сообщению НОВЫЕ логи. [/color][/b]

Вложений: 1

карантин не смог загрузить тк повторный запуск проверки удалил их

Скачайте [url=https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/][b]Farbar Recovery Scan Tool[/b][/url] [img]https://i.imgur.com/NAAC5Ba.png[/img] и сохраните на Рабочем столе.
[list][*][b]Примечание[/b]: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.[/list]
1. Запустите программу двойным щелчком. Когда программа запустится, нажмите [b]Yes[/b] для соглашения с предупреждением.
2. Убедитесь, что в окне [b]Optional Scan[/b] отмечены [i]List BCD[/i] и [i]90 Days Files[/i].
[img]https://i.imgur.com/3munStB.png[/img]
3. Нажмите кнопку [b]Scan[/b].
4. После окончания сканирования будет создан отчет ([b]FRST.txt[/b]) в той же папке, откуда была запущена программа.
5. Если программа была запущена в первый раз, также будет создан отчет ([b]Addition.txt[/b]).
6. Файлы [b]FRST.txt[/b] и [b]Addition.txt[/b] заархивируйте (в [b]один общий архив[/b]) и прикрепите к сообщению.

Вложений: 1

готово

1. Выделите следующий код:
[code]
Start::
CreateRestorePoint:
2019-12-08 15:35 - 2019-12-08 15:35 - 000000000 _____ () C:\ProgramData\lsass2.exe
2019-12-08 15:57 - 2019-12-08 15:57 - 002351104 _____ () C:\ProgramData\temp8.exe
2019-12-08 15:35 - 2019-12-08 15:35 - 000000000 _____ () C:\Users\Все пользователи\lsass2.exe
2019-12-08 15:57 - 2019-12-08 15:57 - 002351104 _____ () C:\Users\Все пользователи\temp8.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [1] eav_trial_rus.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [2] avast_free_antivirus_setup_online.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [3] eis_trial_rus.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [4] essf_trial_rus.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [5] hitmanpro_x64.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [6] ESETOnlineScanner_UKR.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [7] ESETOnlineScanner_RUS.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [8] HitmanPro.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [9] 360TS_Setup_Mini.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [10] Cezurity_Scanner_Pro_Free.exe
HKU\S-1-5-21-1823999637-2905392609-1685533488-1000\...\Policies\Explorer\DisallowRun: [11] Cube.exe
HKU\S-1-5-18\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [1] eav_trial_rus.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [2] avast_free_antivirus_setup_online.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [3] eis_trial_rus.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [4] essf_trial_rus.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [5] hitmanpro_x64.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [6] ESETOnlineScanner_UKR.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [7] ESETOnlineScanner_RUS.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [8] HitmanPro.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [9] 360TS_Setup_Mini.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [10] Cezurity_Scanner_Pro_Free.exe
HKU\S-1-5-18\...\Policies\Explorer\DisallowRun: [11] Cube.exe
FirewallRules: [{5F04BFFD-1A73-417A-A692-D38ED2A08C80}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe No File
FirewallRules: [{35A01EE4-6ECA-4384-A9B4-0B811BFDE88D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE No File
FirewallRules: [{220A3663-8BB9-4FC8-A473-C8087EE6DC0B}] => (Allow) C:\Program Files (x86)\Opera\opera.exe No File
FirewallRules: [{D25CA914-D71D-4FDA-BD90-E0BBDD9F654A}] => (Allow) C:\Program Files (x86)\Opera\opera.exe No File
FirewallRules: [{68EA46AE-4AA2-46CB-B3EB-59FB528F270E}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe No File
FirewallRules: [{825EE777-4886-41E9-B4F1-F78572FF983B}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe No File
FirewallRules: [{83E7A0A4-2D82-414B-A858-F56D96DFA31F}] => (Allow) E:\Program Files (x86)\Resident Evil\RaccoonCity.exe No File
FirewallRules: [{9EC0C139-FB6F-4DFB-A98D-8DDB154B1D90}] => (Allow) E:\Program Files (x86)\Resident Evil\RaccoonCity.exe No File
FirewallRules: [{2BEFDB5A-D5F2-474D-BE5C-B44D4D2DB9DF}] => (Allow) E:\Program Files (x86)\Mafia II - Расширенное издание\pc\Mafia2.exe No File
FirewallRules: [{4C5AC26C-ADFD-408A-8077-32094FDBB45F}] => (Allow) E:\Program Files (x86)\Mafia II - Расширенное издание\pc\Mafia2.exe No File
FirewallRules: [{2DB937D9-BD1F-47D4-A787-CB1F49FBCCDF}] => (Allow) C:\Users\Любко\AppData\Roaming\Mail.Ru\Agent\magent.exe No File
FirewallRules: [{AEDDF52F-90D4-4B8E-A443-EEBC7D2521C8}] => (Allow) C:\Users\Любко\AppData\Roaming\Mail.Ru\Agent\magent.exe No File
FirewallRules: [{A97AEC4D-D8AE-43C8-BA73-D3EC655B500F}] => (Allow) E:\Program Files (x86)\Assasin Creed 3\AC3SP.exe No File
FirewallRules: [{64F31617-163B-4AB2-8B52-683FA1CB0B99}] => (Allow) E:\Program Files (x86)\Assasin Creed 3\AC3SP.exe No File
FirewallRules: [{73E7BBCC-20B2-4BA3-B119-986862BACD0C}] => (Allow) E:\Program Files (x86)\Assasin Creed 3\AC3MP.exe No File
FirewallRules: [{CF0B7797-4708-432F-AEA1-BAA34130A1B0}] => (Allow) E:\Program Files (x86)\Assasin Creed 3\AC3MP.exe No File
FirewallRules: [{84609181-8CD5-4DF4-9695-444024709D80}] => (Allow) E:\Program Files (x86)\Assasin Creed 3\AssassinsCreed3.exe No File
FirewallRules: [{CD8ABFB4-5B07-475F-83D4-869C9A2E85B9}] => (Allow) E:\Program Files (x86)\Assasin Creed 3\AssassinsCreed3.exe No File
FirewallRules: [{B731B161-770A-45F5-B506-76EA8B381B8A}] => (Allow) E:\Program Files (x86)\Far Cry 3\bin\FC3Updater.exe No File
FirewallRules: [{BBF6468A-1656-44DB-85AE-E754BD63D373}] => (Allow) E:\Program Files (x86)\Far Cry 3\bin\FC3Updater.exe No File
FirewallRules: [{3B7816F4-79D2-42B9-B271-59E4F2B5492B}] => (Allow) E:\Program Files (x86)\TomClancys\Future Soldier.exe No File
FirewallRules: [{711A48BD-EBBE-487E-A492-F54D38C5C0BB}] => (Allow) E:\Program Files (x86)\TomClancys\Future Soldier.exe No File
FirewallRules: [{931DF26B-06C1-4FFD-9D7A-6FE1862A7EEE}] => (Allow) E:\Program Files (x86)\TomClancys\gu.exe No File
FirewallRules: [{11AD1777-5CFB-4339-91C9-1B9664A9187D}] => (Allow) E:\Program Files (x86)\TomClancys\gu.exe No File
FirewallRules: [{A8F823F7-D21F-46C0-AD07-9C85CCD1CB50}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{071FBE17-E6BB-445E-9217-CA4A05AC1711}] => (Allow) E:\Program Files (x86)\Tomb Raider\TombRaider.exe No File
FirewallRules: [{ED46411E-A177-4344-B0F1-B29703123178}] => (Allow) E:\Program Files (x86)\Tomb Raider\TombRaider.exe No File
FirewallRules: [{82675537-7341-4B75-A3FE-6EFF9085DD69}] => (Allow) E:\Program Files (x86)\Far Cry 3\bin\farcry3.exe No File
FirewallRules: [{BC023975-416B-4DD6-BFD2-C6FCD8B21D3D}] => (Allow) E:\Program Files (x86)\Far Cry 3\bin\farcry3.exe No File
FirewallRules: [{E684799E-98C0-416D-B4B9-7EDDF74797D9}] => (Allow) E:\Program Files (x86)\Far Cry 3\bin\farcry3_d3d11.exe No File
FirewallRules: [{FAA2FAD1-FFF2-4116-984F-90C9141A9268}] => (Allow) E:\Program Files (x86)\Far Cry 3\bin\farcry3_d3d11.exe No File
FirewallRules: [{2AFC83A9-56F6-4C48-95FF-D6C130597B74}] => (Allow) E:\Program Files (x86)\Far Cry 3\bin\FC3Editor.exe No File
FirewallRules: [{0A178FCA-3CC1-470E-8A67-7A8B1B0E4992}] => (Allow) E:\Program Files (x86)\Far Cry 3\bin\FC3Editor.exe No File
FirewallRules: [{23F63F30-F1E0-4B77-9CDB-A8F79DE1E19F}] => (Allow) E:\Program Files (x86)\Resident Evil 6\BH6.exe No File
FirewallRules: [{A2C53539-7739-4F59-BF60-FF1C9662AAF7}] => (Allow) E:\Program Files (x86)\Resident Evil 6\BH6.exe No File
FirewallRules: [{BDCB348A-3E53-4131-AFAD-B5184C8C7CBF}] => (Allow) E:\Program Files (x86)\Crysis 3\Bin32\Crysis3.exe No File
FirewallRules: [{BE831607-A0B4-495F-A499-7C06C1A34AA3}] => (Allow) E:\Program Files (x86)\Crysis 3\Bin32\Crysis3.exe No File
FirewallRules: [{9E77E395-80D7-417E-950B-C8735AEDD7CC}] => (Allow) E:\Program Files (x86)\Battlefield 4\bf4_x86.exe No File
FirewallRules: [{477FC762-2BE7-48B0-867D-B87014DB6464}] => (Allow) E:\Program Files (x86)\Battlefield 4\bf4_x86.exe No File
FirewallRules: [{0E48F747-BA4A-401C-A32D-E184FE0133BB}] => (Allow) E:\Program Files (x86)\Battlefield 4\bf4.exe No File
FirewallRules: [{09C69536-298B-4DD1-A317-3A2068E5F94F}] => (Allow) E:\Program Files (x86)\Battlefield 4\bf4.exe No File
FirewallRules: [TCP Query User{732EB706-E34B-4511-BB4B-7B43AA41CD8A}E:\program files (x86)\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe] => (Block) E:\program files (x86)\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe No File
FirewallRules: [UDP Query User{69CF627C-C376-4FDD-82B8-243F53D0CEB6}E:\program files (x86)\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe] => (Block) E:\program files (x86)\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe No File
FirewallRules: [TCP Query User{AD2D046A-032A-464F-B9E9-D41251E7E26C}E:\program files (x86)\dying light\dyinglightgame.exe] => (Allow) E:\program files (x86)\dying light\dyinglightgame.exe No File
FirewallRules: [UDP Query User{DB362770-26B1-4373-8C4D-0AA9317D1614}E:\program files (x86)\dying light\dyinglightgame.exe] => (Allow) E:\program files (x86)\dying light\dyinglightgame.exe No File
FirewallRules: [TCP Query User{D8111822-D9E4-4CE5-8BF3-0EF5EB6DE67B}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe No File
FirewallRules: [UDP Query User{E6CDE3FD-3DA1-44C2-86F2-C7A718572648}E:\program files (x86)\far cry 4\bin\farcry4.exe] => (Block) E:\program files (x86)\far cry 4\bin\farcry4.exe No File
FirewallRules: [{FA723F1C-ED2F-4B8B-9979-F926981331A0}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe No File
FirewallRules: [{BC294856-B329-4DFE-832F-E713A9956477}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe No File
FirewallRules: [{CA2A4E9A-A702-4481-BB18-6966B5AEE773}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe No File
FirewallRules: [{082E4A7A-87C4-43AE-A74A-BFB44CA475FA}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe No File
FirewallRules: [{275FD2F7-F016-4F93-97BC-BB974910355A}] => (Allow) C:\Program Files (x86)\SecuraLive Internet Security\slisservice.exe No File
FirewallRules: [{76AB83DE-A187-4613-9E98-0DCAA0310F42}] => (Allow) C:\Program Files (x86)\SecuraLive Internet Security\slisservice.exe No File
FirewallRules: [{1F796200-97B6-4237-81AE-AF127C11BC18}] => (Allow) C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\dtUser.exe No File
FirewallRules: [{259DB560-A9CE-42AD-A36F-763679768A4A}] => (Allow) C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\dtUser.exe No File
FirewallRules: [{CB963EAF-C24A-47D5-AF2D-901F9386CA69}] => (Allow) C:\Users\Любко\AppData\Local\Temp\7zS5C7A.tmp\SymNRT.exe No File
FirewallRules: [{30752123-3CC8-4E78-8574-D1232CCFD0E2}] => (Allow) C:\Users\Любко\AppData\Local\Temp\7zS5C7A.tmp\SymNRT.exe No File
FirewallRules: [TCP Query User{FBFDD574-59FB-4F19-9AD0-3F93EA207057}C:\users\любко\desktop\qip\qip.exe] => (Allow) C:\users\любко\desktop\qip\qip.exe No File
FirewallRules: [UDP Query User{34636102-8889-4A79-AE36-2636DD24AB72}C:\users\любко\desktop\qip\qip.exe] => (Allow) C:\users\любко\desktop\qip\qip.exe No File
FirewallRules: [{D156181A-AB08-4A0B-9D65-817BE1E7E723}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe No File
FirewallRules: [{879300D1-4814-45D2-AD98-A0260DF18284}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe No File
FirewallRules: [{14CCEE14-5FF7-4128-9CC9-B0A984F2B4ED}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe No File
FirewallRules: [{AF5FE8A3-FB26-4A0E-A868-C555705634D3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe No File
FirewallRules: [{945EC517-3368-4287-9623-0532692158D7}] => (Allow) C:\Users\Любко\AppData\Local\Temp\7zS56B7.tmp\SymNRT.exe No File
FirewallRules: [{3B27BD30-D3F9-4A01-9793-9D3F697E0EBA}] => (Allow) C:\Users\Любко\AppData\Local\Temp\7zS56B7.tmp\SymNRT.exe No File
FirewallRules: [{4329EFA7-441C-492D-B784-18C89AE1C49D}] => (Allow) C:\Users\Любко\AppData\Local\Temp\7zS6B40.tmp\SymNRT.exe No File
FirewallRules: [{2936F8CC-3F97-43C6-AD54-02302E4B90C6}] => (Allow) C:\Users\Любко\AppData\Local\Temp\7zS6B40.tmp\SymNRT.exe No File
FirewallRules: [TCP Query User{8D82B939-E5D2-4F79-B3CA-801186C0CA8F}E:\program files (x86)\driver.san francisco.v 1.04.1114\driver.exe] => (Allow) E:\program files (x86)\driver.san francisco.v 1.04.1114\driver.exe No File
FirewallRules: [UDP Query User{20ACC0C1-B593-461C-8974-CA98DDDE9D33}E:\program files (x86)\driver.san francisco.v 1.04.1114\driver.exe] => (Allow) E:\program files (x86)\driver.san francisco.v 1.04.1114\driver.exe No File
FirewallRules: [TCP Query User{AD274B3E-7271-4479-B1A2-B2C96107F0B5}E:\program files (x86)\need for speed most wanted\nfs13.exe] => (Allow) E:\program files (x86)\need for speed most wanted\nfs13.exe No File
FirewallRules: [UDP Query User{4F9131A6-DB70-41B7-B3E2-E7FDD367D99F}E:\program files (x86)\need for speed most wanted\nfs13.exe] => (Allow) E:\program files (x86)\need for speed most wanted\nfs13.exe No File
FirewallRules: [{25B576A6-939E-4273-8650-EBAC95803D44}] => (Allow) C:\Program Files\DrWeb\spideragent.exe No File
FirewallRules: [{BDDC0580-86A0-437E-9282-0B9BCEF2C15B}] => (Allow) C:\Program Files\DrWeb\dwservice.exe No File
FirewallRules: [{46D5A2DE-DBE3-420A-9845-F5940C988451}] => (Allow) C:\Program Files\DrWeb\dwnetfilter.exe No File
FirewallRules: [TCP Query User{F930A065-7EC2-4F14-A661-B403E0A1BCE5}C:\program files (x86)\nero\nero 2018\nero burning rom\nero.exe] => (Allow) C:\program files (x86)\nero\nero 2018\nero burning rom\nero.exe No File
FirewallRules: [UDP Query User{0FF892DB-DFEC-4216-870E-B94831FD6371}C:\program files (x86)\nero\nero 2018\nero burning rom\nero.exe] => (Allow) C:\program files (x86)\nero\nero 2018\nero burning rom\nero.exe No File
FirewallRules: [{4C8AAE1C-6CB9-4277-A102-AC14581A4485}] => (Allow) C:\Users\Любко\AppData\Local\Temp\7ZipSfx.000\bin\tools\aria2c.exe No File
FirewallRules: [{6AD6E631-E05F-48FE-AC09-48CACA1DAD43}] => (Allow) C:\Program Files (x86)\DriverPack Cloud\cloud.exe No File
FirewallRules: [TCP Query User{CC89A87A-53D1-48C8-AA4E-ABB8C0AC6C05}C:\users\любко\appdata\local\nvidia corporation\geforcenow\cef\geforcenowstreamer.exe] => (Allow) C:\users\любко\appdata\local\nvidia corporation\geforcenow\cef\geforcenowstreamer.exe No File
FirewallRules: [UDP Query User{7727220C-A22B-48BF-8739-3F6449C2A2CE}C:\users\любко\appdata\local\nvidia corporation\geforcenow\cef\geforcenowstreamer.exe] => (Allow) C:\users\любко\appdata\local\nvidia corporation\geforcenow\cef\geforcenowstreamer.exe No File
FirewallRules: [TCP Query User{B3AE76B3-674D-4707-A131-9E90550D7607}C:\program files (x86)\loudplay\loudplay.exe] => (Allow) C:\program files (x86)\loudplay\loudplay.exe No File
FirewallRules: [UDP Query User{F92ACD96-AEC4-4DA8-AE59-584223BDAA0C}C:\program files (x86)\loudplay\loudplay.exe] => (Allow) C:\program files (x86)\loudplay\loudplay.exe No File
FirewallRules: [TCP Query User{10004293-86B0-4627-B2FD-BB019B2762B5}C:\program files (x86)\loudplay client\lp-client.exe] => (Allow) C:\program files (x86)\loudplay client\lp-client.exe No File
FirewallRules: [UDP Query User{725393BC-4C7C-4C72-B67C-834E5FF8E669}C:\program files (x86)\loudplay client\lp-client.exe] => (Allow) C:\program files (x86)\loudplay client\lp-client.exe No File
FirewallRules: [{D8DF14B7-6D0C-4E5B-BA9F-424BC5D8714D}] => (Allow) C:\ProgramData\WindowsTask\AMD.exe No File
FirewallRules: [{E603F2DD-78D7-443D-AD82-E3169BAE0CF2}] => (Allow) C:\ProgramData\WindowsTask\AppModule.exe (Microsoft Corporation) [File not signed]
FirewallRules: [{270375D3-640D-4E3F-B18D-872FC28E35B4}] => (Allow) C:\ProgramData\WindowsTask\MicrosoftHost.exe (Microsoft Corporation) [File not signed]
FirewallRules: [{7BBC6E90-9C33-4C95-941D-D610830558F2}] => (Allow) C:\ProgramData\WindowsTask\MicrosoftHost.exe (Microsoft Corporation) [File not signed]
FirewallRules: [{7C37436A-8A44-4D82-B8FA-57D163F2DF76}] => (Allow) C:\ProgramData\WindowsTask\AppModule.exe (Microsoft Corporation) [File not signed]
FirewallRules: [{C2F7F477-2C9E-444C-8738-0BB1A34B6F70}] => (Allow) C:\ProgramData\WindowsTask\AMD.exe No File
C:\ProgramData\WindowsTask
FirewallRules: [{07D99237-3CE5-4324-8744-6A663E34BB08}] => (Allow) C:\ProgramData\Windows\rutserv.exe No File
FirewallRules: [{C73BC450-765B-4637-A22F-68BD1DC9609E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe No File
FirewallRules: [{624AD96E-696D-4F3B-9653-1D707AB97BC2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe No File
FirewallRules: [{8A69A5CD-E2C6-4F92-ADF5-BD74E6220586}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe No File
FirewallRules: [{44E8F3DE-5A9F-47EB-B6A5-BDA584DC24C6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe No File
AlternateDataStreams: C:\ProgramData\Temp:10D14739 [229]
AlternateDataStreams: C:\ProgramData\Temp:41ADDB8A [125]
AlternateDataStreams: C:\ProgramData\Temp:A064CECC [124]
AlternateDataStreams: C:\Users\Все пользователи\Temp:10D14739 [229]
AlternateDataStreams: C:\Users\Все пользователи\Temp:41ADDB8A [125]
AlternateDataStreams: C:\Users\Все пользователи\Temp:A064CECC [124]
Reboot:
End::
[/code]
2. Скопируйте выделенный текст ([b]правая кнопка мыши[/b] – [b]Копировать[/b]).
3. Запустите [b]Farbar Recovery Scan Tool[/b].
4. Нажмите один раз на кнопку [b]Fix[/b] и подождите. Программа создаст лог-файл ([b]Fixlog.txt[/b]). Пожалуйста, прикрепите его в следующем сообщении.
[list][*]Обратите внимание: будет выполнена [b]перезагрузка компьютера[/b].[/list]

Вложений: 1

готово

Проблема решена?