Открываются кладки в браузерах, процессор грузится на 99%

Printable View

01.09.2021, 22:48
BillyPiston

Открываются кладки в браузерах, процессор грузится на 99%

Здравствуйте. Ни с того, ни с сего открываются сами кладки в Опере и Хроме. Сначала какие-то процессы висели в диспетчере, куча просто, назывались вроде spadille, я доктором вебом прошёлся, вроде этих процессов пока нет, но вкладки так же открываются и процессор грузится.
01.09.2021, 22:50
Info_bot

Уважаемый(ая) [B]BillyPiston[/B], спасибо за обращение на наш форум!

Помощь в лечении компьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы в самое ближайшее время ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитой Autologger, подробнее можно прочитать в [URL="https://virusinfo.info/pravila.html"]правилах оформления запроса о помощи[/URL].

[INFORMATION]Если вы хотите получить персональную гарантированную помощь в приоритетном режиме, то воспользуйтесь платным сервисом [URL="https://virusinfo.info/content.php?r=613-sub_pomogite"]Помогите+[/URL].[/INFORMATION]

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста, [URL="https://virusinfo.info/content.php?r=113-virusinfo.info-donate"]поддержите проект[/URL].
01.09.2021, 23:07
BillyPiston

Вложений: 1

Вот я прикрепил логи, которые сделал по инструкции, которая в теме.
02.09.2021, 07:57
Vvvyg

[url="http://virusinfo.info/showthread.php?t=7239"]Выполните скрипт в AVZ из папки Autologger\AV\av_z.exe[/url]:[code]{Исправление в службах в реестре, значения ImagePath.
Данный скрипт распространяется свободно и может быть модицифирован по согласованию с авторами - представителями SafeZоne.сс
При публикации скрипта данный комментарий и ссылка на VirusNet.Info обязателена. }
var DescriptionTextWuauServ, DispayNameTextWuauServ, DescriptionTextBITS: String;
DispayNameTextBITS, FullPathSystem32, NameFolderSystem32, FileServiceDll: String;
ImagePathStr, RootStr, SubRootStr, LangID: string;
AllRoots, AllKeys, RootsRestored, KeysRestored, KeysFixed: integer;
FinishMsg, RestoreMsg, FixMsg, CheckMsg: String;
RegSectMsg, ParamMsg, ParamValueMsg, InRegSectMsg, CorrectMsg, RestMsg: String;

procedure CheckAndRestoreSection(Root: String);
begin
Inc(AllRoots);
if RegKeyExistsEx('HKLM', Root) then
RegKeyResetSecurity('HKLM', Root)
else
begin
Inc(RootsRestored);
RegKeyCreate('HKLM', Root);
AddToLog(RegSectMsg + Root + RestMsg);
end;
end;

procedure CheckAndRestoreSubSection;
begin
CheckAndRestoreSection(SubRootStr);
end;

procedure RestoredMsg(Root, Param: String);
begin
AddToLog(ParamMsg + Param + InRegSectMsg + Root + RestMsg);
Inc(KeysRestored);
end;

procedure FixedMsg(Root, Param: String);
begin
AddToLog(ParamValueMsg + Param + InRegSectMsg + Root + CorrectMsg);
Inc(KeysFixed);
end;

procedure RestoreStrParam(Root, Param, Value: String);
begin
RegKeyStrParamWrite('HKLM', Root, Param, Value);
RestoredMsg(Root, Param);
end;

procedure CheckAndRestoreStrParam(Root, Param, Value: String);
begin
Inc(AllKeys);
if not RegKeyParamExists('HKLM', Root, Param) then
RestoreStrParam(Root, Param, Value);
end;

procedure CheckAndRestoreIntParam(Root, Param: String; Value: Integer);
begin
Inc(AllKeys);
if not RegKeyParamExists('HKLM', Root, Param) then
begin
RegKeyIntParamWrite('HKLM', Root, Param, Value);
RestoredMsg(Root, Param);
end;
end;

procedure CheckAndRestoreMultiSZParam(Param, Value: String);
begin
Inc(AllKeys);
if not RegKeyParamExists('HKLM', RootStr, Param) then
begin
ExecuteFile('REG ADD HKLM\' + RootStr + ' /v ' + Param + Value, '', 0, 10000, true);
RestoredMsg(RootStr, Param);
end;
end;

// Исправление значения параметра ImagePath для служб 'wuauserv' и 'BITS'
procedure ImagePathFix(Node, Srv: String);
var RegStr: String;
begin
RegStr := 'SYSTEM\' + Node + '\Services\' + Srv;
if RegKeyExistsEx('HKLM', RegStr) then
begin
Inc(AllKeys);
RegKeyResetSecurity('HKLM', RegStr);
RegKeyStrParamWrite('HKLM', RegStr, 'ImagePath', ImagePathStr);
FixedMsg(RegStr, 'ImagePath');
end;
end;

{ Выполнение исправление всех ключей в ветках -
'HKLM\SYSTEM\CurrentControlSet\Services\BITS' и 'HKLM\SYSTEM\CurrentControlSet\Services\wuauserv'}
procedure CorrectRegistryRoot(DescriptionText, DisplayNameText, Srv: String);
var FileServiceDll, CCSNumber: string;
i : integer;
begin
if Srv = 'BITS' then
FileServiceDll := FullPathSystem32 + 'qmgr.dll'
else
FileServiceDll := FullPathSystem32 + 'wuauserv.dll';
RootStr:= 'SYSTEM\CurrentControlSet\Services\' + Srv;

CheckAndRestoreSection(RootStr);

CheckAndRestoreStrParam(RootStr, 'Description', DescriptionText);
CheckAndRestoreStrParam(RootStr, 'DisplayName', DisplayNameText);
CheckAndRestoreStrParam(RootStr, 'ObjectName', 'LocalSystem');

Inc(AllKeys);
if not RegKeyParamExists('HKLM', RootStr, 'ImagePath') then
RestoreStrParam(RootStr, 'ImagePath', ImagePathStr)
else
begin
Dec(AllKeys);
if LowerCase(RegKeyStrParamRead('HKLM', RootStr, 'ImagePath')) <> LowerCase(ImagePathStr) then
for i:= 0 to 999 do
begin
if i > 0 then
CCSNumber := FormatFloat('ControlSet000', i)
else
CCSNumber := 'CurrentControlSet';
ImagePathFix(CCSNumber, Srv);
end;
end;

CheckAndRestoreIntParam(RootStr, 'ErrorControl', 1);
CheckAndRestoreIntParam(RootStr, 'Start', 2);
CheckAndRestoreIntParam(RootStr, 'Type', 32);

if Srv = 'BITS' then
begin
CheckAndRestoreMultiSZParam('DependOnService', ' /t REG_MULTI_SZ /d RpcSs');
CheckAndRestoreMultiSZParam('DependOnGroup', ' /t REG_MULTI_SZ');
end;

SubRootStr:= RootStr + '\Enum';
CheckAndRestoreSubSection;

CheckAndRestoreStrParam(SubRootStr, '0', 'Root\LEGACY_' + UpperCase(Srv) + '\0000');
CheckAndRestoreIntParam(SubRootStr, 'Count', 1);
CheckAndRestoreIntParam(SubRootStr, 'NextInstance', 1);

SubRootStr := RootStr + '\Security';
CheckAndRestoreSubSection;

Inc(AllKeys);
if not RegKeyParamExists('HKLM', SubRootStr, 'Security') then
begin
RegKeyBinParamWrite('HKLM', SubRootStr, 'Security', '01,00,14,80,78,00,00,00,84,00,00,00,14,00,00,00,30,00,00,00,02,00,1c,00,01,00,00,00,02,80,14,00,ff,00,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,02,00,48,00,03,00,00,00,00,00,14,00,9d,00,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,14,00,ff,01,0f,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00');
RestoredMsg(SubRootStr, 'Security');
end;

SubRootStr:= RootStr + '\Parameters';
CheckAndRestoreSubSection;

Inc(AllKeys);
if not RegKeyParamExists('HKLM', SubRootStr, 'ServiceDll') then
begin
RegKeyParamWrite('HKLM', SubRootStr, 'ServiceDll', 'REG_EXPAND_SZ', FileServiceDll);
RestoredMsg(SubRootStr, 'ServiceDll');
end
else if LowerCase(RegKeyStrParamRead('HKLM', SubRootStr, 'ServiceDll')) <> LowerCase(FileServiceDll) then
begin
RegKeyParamWrite('HKLM', SubRootStr, 'ServiceDll', 'REG_EXPAND_SZ', FileServiceDll);
FixedMsg(SubRootStr, 'ServiceDll');
end
end;

{ Главное выполнение }
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
TerminateProcessByName('c:\windows\rss\csrss.exe');
TerminateProcessByName('c:\users\igors\appdata\local\temp\csrss\ethm2305.exe');
TerminateProcessByName('c:\windows\temp\g1085.tmp.exe');
TerminateProcessByName('c:\windows\temp\g2a76.tmp.exe');
TerminateProcessByName('c:\users\igors\appdata\local\temp\csrss\injector\injector.exe');
TerminateProcessByName('c:\users\igors\appdata\local\temp\csrss\mg20201223-1.exe');
TerminateProcessByName('c:\users\igors\appdata\local\temp\csrss\ml20201223.exe');
TerminateProcessByName('c:\windows\temp\sppsvc.exe');
TerminateProcessByName('c:\windows\windefender.exe');
TerminateProcessByName('c:\users\igors\appdata\roaming\winhost\winhoster.exe');
TerminateProcessByName('c:\users\igors\appdata\local\temp\csrss\ww31.exe');
TerminateProcessByName('c:\users\igors\appdata\local\temp\csrss\wup\z\zz.exe');
StopService('WinDefender');
QuarantineFileF('c:\windows\rss', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', false, '', 0 ,0);
QuarantineFileF('c:\users\igors\appdata\roaming\winhost', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFile('c:\windows\rss\csrss.exe', '');
QuarantineFile('c:\users\igors\appdata\local\temp\csrss\ethm2305.exe', '');
QuarantineFile('c:\windows\temp\g1085.tmp.exe', '');
QuarantineFile('c:\windows\temp\g2a76.tmp.exe', '');
QuarantineFile('c:\users\igors\appdata\local\temp\csrss\injector\injector.exe', '');
QuarantineFile('c:\users\igors\appdata\local\temp\csrss\mg20201223-1.exe', '');
QuarantineFile('c:\users\igors\appdata\local\temp\csrss\ml20201223.exe', '');
QuarantineFile('c:\windows\temp\sppsvc.exe', '');
QuarantineFile('c:\windows\windefender.exe', '');
QuarantineFile('c:\users\igors\appdata\roaming\winhost\winhoster.exe', '');
QuarantineFile('c:\users\igors\appdata\local\temp\csrss\ww31.exe', '');
QuarantineFile('c:\users\igors\appdata\local\temp\csrss\wup\z\zz.exe', '');
QuarantineFile('C:\Program Files (x86)\JfdCJqB\JfdCJqB.dll', '');
QuarantineFile('C:\Users\igors\AppData\Roaming\sysinfotool\sitool.exe', '');
QuarantineFile('C:\Users\igors\appdata\local\temp\csrss\wup\xarch\wup.exe', '');
DeleteFile('c:\windows\rss\csrss.exe', '');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\ethm2305.exe', '');
DeleteFile('c:\windows\temp\g1085.tmp.exe', '');
DeleteFile('c:\windows\temp\g2a76.tmp.exe', '');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\injector\injector.exe', '');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\mg20201223-1.exe', '');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\ml20201223.exe', '');
DeleteFile('c:\windows\temp\sppsvc.exe', '');
DeleteFile('c:\windows\windefender.exe', '');
DeleteFile('c:\users\igors\appdata\roaming\winhost\winhoster.exe', '');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\ww31.exe', '');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\wup\z\zz.exe', '');
DeleteFile('C:\WINDOWS\windefender.exe', '64');
DeleteFile('C:\Users\igors\AppData\Roaming\WinHost\WinHoster.exe', '32');
DeleteFile('C:\WINDOWS\rss\csrss.exe', '32');
DeleteFile('C:\Users\igors\AppData\Roaming\WinHost\WinHoster.exe', '64');
DeleteFile('C:\WINDOWS\rss\csrss.exe', '64');
DeleteFile('C:\Program Files (x86)\JfdCJqB\JfdCJqB.dll', '64');
DeleteFile('C:\Users\igors\AppData\Roaming\sysinfotool\sitool.exe', '64');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\ww31.exe', '64');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\ml20201223.exe', '64');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\mg20201223-1.exe', '64');
DeleteFile('c:\windows\temp\g2a76.tmp.exe', '64');
DeleteFile('c:\windows\temp\g1085.tmp.exe', '64');
DeleteFile('c:\users\igors\appdata\local\temp\csrss\wup\z\zz.exe', '64');
DeleteFile('C:\Users\igors\appdata\local\temp\csrss\wup\xarch\wup.exe', '');
ClearLog;
ExpRegKey('HKLM', 'SYSTEM\CurrentControlSet\Services\wuauserv', 'wuauserv.reg');
ExpRegKey('HKLM', 'SYSTEM\CurrentControlSet\Services\BITS', 'BITS.reg');
LangID:= RegKeyStrParamRead('HKLM', 'SYSTEM\CurrentControlSet\Control\Nls\Language', 'InstallLanguage');
if LangID = '0419' then
begin
DescriptionTextWuauServ := 'Включает загрузку и установку обновлений Windows. Если служба отключена, то на этом компьютере нельзя будет использовать возможности автоматического обновления или веб-узел Центра обновления Windows.';
DispayNameTextWuauServ := 'Автоматическое обновление';
DescriptionTextBITS := 'Обеспечивает передачу данных между клиентами и серверами в фоновом режиме. Если служба BITS отключена, такие возможности, как Windows Update, не могут правильно работать.';
DispayNameTextBITS := 'Фоновая интеллектуальная служба передачи (BITS)';
AddToLog('Операционная система - русская');
FinishMsg := '–––– Восстановление завершено ––––';
RestoreMsg := 'Восстановлено разделов\параметров: ';
FixMsg := 'Исправлено параметров: ';
CheckMsg := 'Проверено разделов\параметров: ';
RegSectMsg := 'Раздел реестра HKLM\';
ParamMsg := 'Параметр ';
ParamValueMsg := 'Значение параметра ';
InRegSectMsg := ' в разделе реестра HKLM\';
CorrectMsg := ' исправлено на оригинальное.';
RestMsg := 'восстановлен.';
end
else
begin
DescriptionTextWuauServ := 'Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site.';
DispayNameTextWuauServ := 'Automatic Updates';
DescriptionTextBITS := 'Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly.';
DispayNameTextBITS := 'Background Intelligent Transfer Service';
AddToLog('Operation system - english');
FinishMsg := '–––– Restoration finished ––––';
RestoreMsg := 'Sections\parameters restored: ';
FixMsg := 'Parameters corrected: ';
CheckMsg := 'Sections\parameters checked: ';
RegSectMsg := 'Registry section HKLM\';
ParamMsg := 'Parameter ';
ParamValueMsg := 'Value of parameter ';
InRegSectMsg := ' in registry section HKLM\';
CorrectMsg := ' corrected on original.';
RestMsg := ' restored.';
end;
AddToLog('');

{ Определение папки X:\Windows\System32\ }
NameFolderSystem32 := RegKeyStrParamRead('HKLM', 'SYSTEM\CurrentControlSet\Control\Windows', 'SystemDirectory');
ImagePathStr := NameFolderSystem32 + '\svchost.exe -k netsvcs';
Delete(NameFolderSystem32, 1, pos('\', NameFolderSystem32) - 1);
FullPathSystem32 := GetEnvironmentVariable('WinDir') + NameFolderSystem32 + '\';

AllRoots := 0;
AllKeys := 0;
RootsRestored := 0;
KeysRestored := 0;
KeysFixed := 0;

CorrectRegistryRoot(DescriptionTextBITS, DispayNameTextBITS, 'BITS');
CorrectRegistryRoot(DescriptionTextWuauServ, DispayNameTextWuauServ, 'wuauserv');

AddToLog('');
AddToLog(FinishMsg);
AddToLog('');
AddToLog(RestoreMsg + IntToStr(RootsRestored) + ' \ ' + IntToStr(KeysRestored));
AddToLog(FixMsg + IntToStr(KeysFixed));
AddToLog(CheckMsg + IntToStr(AllRoots) + ' \ ' + IntToStr(AllKeys));
SaveLog(RegKeyStrParamRead('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders', 'Desktop') + '\Correct_wuauserv&BITS.log');
DeleteFileMask('c:\windows\rss', '*', true);
DeleteFileMask('c:\users\igors\appdata\local\temp\csrss', '*', true);
DeleteFileMask('c:\users\igors\appdata\roaming\winhost', '*', true);
DeleteFileMask('c:\program files (x86)\jfdcjqb', '*', false);
DeleteFileMask('c:\users\igors\appdata\roaming\sysinfotool', '*', false);
DeleteSchedulerTask('csrss');
DeleteSchedulerTask('JfdCJqB');
DeleteSchedulerTask('Microsoft\Windows\Windows Error Reporting\SysInfo');
DeleteSchedulerTask('IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473');
DeleteDirectory('c:\windows\rss');
DeleteDirectory('c:\users\igors\appdata\local\temp\csrss');
DeleteDirectory('c:\users\igors\appdata\roaming\winhost');
DeleteDirectory('c:\program files (x86)\jfdcjqb');
DeleteDirectory('c:\users\igors\appdata\roaming\sysinfotool');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','WinHost', '32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','RedFeather', '32');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','WinHost', '64');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','RedFeather', '64');
DeleteService('WinDefender');
DeleteService('PnkBstrA');
ExecuteSysClean;
ExecuteWizard('SCU', 3, 3, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.[/code]Компьютер перезагрузится.

В папке с AVZ появится архив карантина quarantine.zip, отправьте этот файл по ссылке [COLOR="#FF0000"]Прислать запрошенный карантин[/COLOR] над над первым сообщением в теме.

Текстовый файл Correct_wuauserv&BITS.log с рабочего стола прикрепите к сообщению.

Скачайте [URL="http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/"]Farbar Recovery Scan Tool[/URL] или с [URL="https://www.geekstogo.com/forum/files/file/435-frst-farbar-recovery-scan-tool/"]зеркала[/URL] и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
Запустите программу. Когда программа запустится, нажмите [B]Да[/B] для соглашения с предупреждением.

Нажмите кнопку [B]Сканировать[/B].

После окончания сканирования будут созданы отчеты FRST.txt, Addition.txt в той же папке, откуда была запущена программа.
Прикрепите эти файлы к своему следующему сообщению (лучше оба в одном архиве).
02.09.2021, 08:27
BillyPiston

Вложений: 2

quarantine.zip я загружать стал, появилось сообщение что загрузка, долго висело, я обновил страницу, и он написал что файл уже загружен.

[COLOR="silver"]- - - - -Добавлено - - - - -[/COLOR]

Вот correct лог.

[COLOR="silver"]- - - - -Добавлено - - - - -[/COLOR]

Вот first и addition
02.09.2021, 09:45
Vvvyg

Деинсталлируйте программу Versium Research 10, похоже, с её установкой бяка появилась.

Выделите и скопируйте в буфер обмена следующий код:[CODE]Start::
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {2B46D13F-E6A1-4ACA-AFA7-4C01073A2FC2} - System32\Tasks\JfdCJqB => C:\WINDOWS\system32\rundll32.exe "C:\Program Files (x86)\JfdCJqB\JfdCJqB.dll",JfdCJqB <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B3MFFm7cT1rWoLzeOjBc5vD0BK4tOZUQwVHvzqL8UfqJWnSqWyEU-_qillGRe28wotClESm2qWHGRQLMnZ5e77rc4OpDOdnmGvgaoq7awp7IsV5Kfz36wJy8mW9UXwT9cwXuUq9msuyQ4zBIEoyDCuwz8P_HK
2021-09-01 20:43 - 2021-09-02 08:13 - 000000000 ____D C:\Program Files (x86)\JfdCJqB
Folder: C:\ProgramData\7898
Folder: C:\ProgramData\78
File: C:\Users\igors\AppData\Roaming\1543222.exe
Virustotal: C:\Users\igors\AppData\Roaming\1543222.exe
File: C:\Users\igors\AppData\Roaming\6812560.exe
Virustotal: C:\Users\igors\AppData\Roaming\6812560.exe
File: C:\Users\igors\AppData\Roaming\2991337.exe
Virustotal: C:\Users\igors\AppData\Roaming\2991337.exe
File: C:\Users\igors\AppData\Roaming\1656585.exe
Virustotal: C:\Users\igors\AppData\Roaming\1656585.exe
File: C:\Users\igors\AppData\Roaming\5835361.exe
Virustotal: C:\Users\igors\AppData\Roaming\5835361.exe
2021-09-01 20:38 - 2021-09-01 20:38 - 000264704 _____ (Routh) C:\Users\igors\AppData\Roaming\1543222.exe
2021-09-01 20:38 - 2021-09-01 20:38 - 000219648 _____ C:\Users\igors\AppData\Roaming\6812560.exe
2021-09-01 20:38 - 2021-09-01 20:38 - 000218112 _____ (vsdcsd) C:\Users\igors\AppData\Roaming\2991337.exe
2021-09-01 20:38 - 2021-09-01 20:38 - 000177152 _____ (dsvsdsd) C:\Users\igors\AppData\Roaming\1656585.exe
2021-09-01 20:38 - 2021-09-01 20:38 - 000086016 _____ (Hoting) C:\Users\igors\AppData\Roaming\5835361.exe
2021-09-01 20:38 - 2021-09-01 20:38 - 000000000 ____D C:\ProgramData\78
2020-10-21 18:46 - 2020-10-21 18:46 - 000294562 _____ () C:\Users\igors\AppData\Roaming\1w2_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2021-04-30 21:07 - 2021-09-01 20:43 - 000000000 _____ () C:\Program Files (x86)\temp_files
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
FirewallRules: [UDP Query User{1C2B3729-E798-4E8A-B565-F43BCF3E33C4}C:\users\igors\appdata\local\programs\opera\71.0.3770.284\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\71.0.3770.284\opera.exe => No File
FirewallRules: [TCP Query User{14BD6094-F566-4AFC-8D1A-ACAD7208A71B}C:\users\igors\appdata\local\programs\opera\71.0.3770.284\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\71.0.3770.284\opera.exe => No File
FirewallRules: [UDP Query User{E529A0D5-F1EF-4C80-B5DA-4893330F0712}C:\users\igors\appdata\local\programs\opera\71.0.3770.271\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\71.0.3770.271\opera.exe => No File
FirewallRules: [TCP Query User{2D6F2AFA-A75A-4406-BA8E-ADB57D70B4B8}C:\users\igors\appdata\local\programs\opera\71.0.3770.271\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\71.0.3770.271\opera.exe => No File
FirewallRules: [{EFF39177-EAE1-408D-9F27-F47110CEC415}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{E23CF0D9-B9F7-47E9-8B81-547270635431}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{FDFAA576-7856-4BC8-9B7A-0AA0A51959D0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [{5144D9B6-2FE7-4463-9CB9-C0B471808004}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => No File
FirewallRules: [UDP Query User{82E6B0E1-D69B-4E7C-A330-145DD25ABC10}C:\users\igors\appdata\local\programs\opera\71.0.3770.228\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\71.0.3770.228\opera.exe => No File
FirewallRules: [TCP Query User{D20CCCDF-1A92-4F70-84FD-695276AA9ED2}C:\users\igors\appdata\local\programs\opera\71.0.3770.228\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\71.0.3770.228\opera.exe => No File
FirewallRules: [UDP Query User{0EEFE8DE-8613-4598-A726-98C092CDBBDE}C:\users\igors\appdata\local\programs\opera\70.0.3728.189\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\70.0.3728.189\opera.exe => No File
FirewallRules: [TCP Query User{6183FAB2-07B0-4C99-ACCD-22DEAE341987}C:\users\igors\appdata\local\programs\opera\70.0.3728.189\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\70.0.3728.189\opera.exe => No File
FirewallRules: [UDP Query User{C8C98EDC-F4F5-4988-803E-2232E3096E3E}C:\users\igors\appdata\local\programs\opera\70.0.3728.106\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\70.0.3728.106\opera.exe => No File
FirewallRules: [TCP Query User{AD849E73-0938-4E5C-8368-EDC40189C281}C:\users\igors\appdata\local\programs\opera\70.0.3728.106\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\70.0.3728.106\opera.exe => No File
FirewallRules: [UDP Query User{52DB4A07-27AC-412A-BECF-CA9792499A5D}C:\users\igors\appdata\local\programs\opera\69.0.3686.95\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\69.0.3686.95\opera.exe => No File
FirewallRules: [TCP Query User{C9705FBB-0795-45ED-B2EA-0818AB59E75F}C:\users\igors\appdata\local\programs\opera\69.0.3686.95\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\69.0.3686.95\opera.exe => No File
FirewallRules: [UDP Query User{A1DCD917-62C2-4039-B351-93B64E306BD1}C:\users\igors\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.173\opera.exe => No File
FirewallRules: [TCP Query User{AEEA81D2-02D0-43D8-BE51-20DBBF8C44C5}C:\users\igors\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.173\opera.exe => No File
FirewallRules: [UDP Query User{A384EFE5-3301-4E47-A051-084AA2807C04}C:\users\igors\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.173\opera.exe => No File
FirewallRules: [TCP Query User{4AE22BAD-3869-4B2B-87DE-E763F9C0B21F}C:\users\igors\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.173\opera.exe => No File
FirewallRules: [UDP Query User{B2E39CDF-9E4D-4CCA-8708-0A663BFFA392}C:\users\igors\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.125\opera.exe => No File
FirewallRules: [TCP Query User{136EFBE2-5A9D-493E-9E1D-BA01E116CC75}C:\users\igors\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.125\opera.exe => No File
FirewallRules: [UDP Query User{12D01967-12B6-4040-B9F3-B09ABCCEAEA9}C:\users\igors\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.104\opera.exe => No File
FirewallRules: [TCP Query User{D22A9DC3-202F-427A-8FA8-B4EB93737902}C:\users\igors\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.104\opera.exe => No File
FirewallRules: [UDP Query User{65C496A9-51BC-457E-AF09-03F1F072E514}C:\users\igors\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.63\opera.exe => No File
FirewallRules: [TCP Query User{E9D2FF10-02F3-48D6-B57E-FF393437B116}C:\users\igors\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\68.0.3618.63\opera.exe => No File
FirewallRules: [UDP Query User{D3B77FA4-7914-4F49-B4BD-E522A9AAA07B}C:\users\igors\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.137\opera.exe => No File
FirewallRules: [TCP Query User{9B9F5171-6CA3-4FFB-A10A-54F2CA40B3A7}C:\users\igors\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.137\opera.exe => No File
FirewallRules: [UDP Query User{6AF043FA-544C-41A2-88BB-930DCB9BB5A1}C:\users\igors\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.137\opera.exe => No File
FirewallRules: [TCP Query User{2440E3C8-8CC6-4567-8BA8-006729DBB3A5}C:\users\igors\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.137\opera.exe => No File
FirewallRules: [UDP Query User{04FFBB90-A0D0-4195-8D8C-83ECE63502F2}C:\users\igors\appdata\local\programs\opera\67.0.3575.115\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.115\opera.exe => No File
FirewallRules: [TCP Query User{E096B202-29B4-4F1B-A0CF-765CECBFACC8}C:\users\igors\appdata\local\programs\opera\67.0.3575.115\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.115\opera.exe => No File
FirewallRules: [UDP Query User{2BA2407F-5D98-4307-8FAF-8AA8DF5107BE}C:\users\igors\appdata\local\programs\opera\67.0.3575.97\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.97\opera.exe => No File
FirewallRules: [TCP Query User{24433AD7-6DE5-42AD-A394-7D03178F027B}C:\users\igors\appdata\local\programs\opera\67.0.3575.97\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.97\opera.exe => No File
FirewallRules: [UDP Query User{8F663301-FB44-4BF8-9C32-7A85A3E0A438}C:\users\igors\appdata\local\programs\opera\67.0.3575.79\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.79\opera.exe => No File
FirewallRules: [TCP Query User{C59617A4-F41F-4169-BFAB-C19211557077}C:\users\igors\appdata\local\programs\opera\67.0.3575.79\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.79\opera.exe => No File
FirewallRules: [UDP Query User{93424E59-6A96-4472-A45E-260610E76433}C:\users\igors\appdata\local\programs\opera\67.0.3575.53\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.53\opera.exe => No File
FirewallRules: [TCP Query User{797F83FF-D96B-426E-8EB2-3F3AA71614F9}C:\users\igors\appdata\local\programs\opera\67.0.3575.53\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\67.0.3575.53\opera.exe => No File
FirewallRules: [UDP Query User{636F734A-1BFE-46DA-B2F9-9AAF07475550}C:\users\igors\appdata\local\programs\opera\66.0.3515.115\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.115\opera.exe => No File
FirewallRules: [TCP Query User{E2829F34-C07B-41FE-8A86-749E5D7B59BD}C:\users\igors\appdata\local\programs\opera\66.0.3515.115\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.115\opera.exe => No File
FirewallRules: [UDP Query User{7359DB27-DD53-4BAA-A1F2-A310C81A747E}C:\users\igors\appdata\local\programs\opera\66.0.3515.103\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.103\opera.exe => No File
FirewallRules: [TCP Query User{3BB07D07-3D5E-4824-89D6-B6B2FC33D1D3}C:\users\igors\appdata\local\programs\opera\66.0.3515.103\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.103\opera.exe => No File
FirewallRules: [UDP Query User{576FC2EA-0A45-45CA-9BFE-0EE3491C5ECB}C:\users\igors\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.72\opera.exe => No File
FirewallRules: [TCP Query User{E06506A8-EA7D-43A0-80B9-7F62D1A2A9E0}C:\users\igors\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.72\opera.exe => No File
FirewallRules: [UDP Query User{74E41A09-1299-4457-8FD5-1AA43C7C2A78}C:\users\igors\appdata\local\programs\opera\66.0.3515.60\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.60\opera.exe => No File
FirewallRules: [TCP Query User{E884331A-9F67-4141-B90F-4006E03D9310}C:\users\igors\appdata\local\programs\opera\66.0.3515.60\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.60\opera.exe => No File
FirewallRules: [UDP Query User{D3E90899-A567-42E3-BA2F-26359DBFCF41}C:\users\igors\appdata\local\programs\opera\66.0.3515.44\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.44\opera.exe => No File
FirewallRules: [TCP Query User{7FF49D2B-EA94-476B-8BCF-87BDC269AD70}C:\users\igors\appdata\local\programs\opera\66.0.3515.44\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\66.0.3515.44\opera.exe => No File
FirewallRules: [UDP Query User{1CD19345-C760-49A5-BEE2-928C204BA8D4}D:\games\gta5.exe] => (Block) D:\games\gta5.exe => No File
FirewallRules: [TCP Query User{D8EEA299-2147-4981-9124-AABE4DA08D6F}D:\games\gta5.exe] => (Block) D:\games\gta5.exe => No File
FirewallRules: [UDP Query User{541A377F-B1C2-447A-8FCF-59B480A45602}D:\games\battlefield 4\bf4.exe] => (Allow) D:\games\battlefield 4\bf4.exe => No File
FirewallRules: [TCP Query User{41CAF68E-1C9D-4758-B2CB-970D37DCFED6}D:\games\battlefield 4\bf4.exe] => (Allow) D:\games\battlefield 4\bf4.exe => No File
FirewallRules: [UDP Query User{CDB76C7F-0751-4D5B-870C-93C069D04A65}C:\users\igors\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.78\opera.exe => No File
FirewallRules: [TCP Query User{67B6A637-FD73-431A-AB96-541275D053EB}C:\users\igors\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.78\opera.exe => No File
FirewallRules: [{6E80BFCA-674C-42E1-8E23-1410492F9D8F}] => (Allow) D:\Games\STAR WARS Battlefront II\starwarsbattlefrontii.exe => No File
FirewallRules: [{1BA7D25D-9381-4049-B6DA-307343F09104}] => (Allow) D:\Games\STAR WARS Battlefront II\starwarsbattlefrontii.exe => No File
FirewallRules: [{40818CA6-7AEA-4E19-9681-86F421F17346}] => (Allow) D:\Games\STAR WARS Battlefront II\starwarsbattlefrontii_trial.exe => No File
FirewallRules: [{3EADFB41-E8AF-40C0-88AC-2FA4CD10B191}] => (Allow) D:\Games\STAR WARS Battlefront II\starwarsbattlefrontii_trial.exe => No File
FirewallRules: [UDP Query User{DD7B848C-F1B5-4C2E-A020-22C6FA094D8E}C:\users\igors\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.78\opera.exe => No File
FirewallRules: [TCP Query User{A9ADEDB3-14EF-4351-8445-16FE57C3FE81}C:\users\igors\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.78\opera.exe => No File
FirewallRules: [UDP Query User{BF26AAE1-5EB9-4F29-8FB0-3BC48395074C}C:\users\igors\appdata\local\programs\opera\65.0.3467.72\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.72\opera.exe => No File
FirewallRules: [TCP Query User{7F89166E-235C-4C11-A202-AAB4E12751BC}C:\users\igors\appdata\local\programs\opera\65.0.3467.72\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.72\opera.exe => No File
FirewallRules: [UDP Query User{4956D7A8-7A12-4491-AB56-58CC70E13471}C:\users\igors\appdata\local\programs\opera\65.0.3467.69\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.69\opera.exe => No File
FirewallRules: [TCP Query User{AAC4A7E6-ABB9-451E-A567-CBEF35AD60E2}C:\users\igors\appdata\local\programs\opera\65.0.3467.69\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.69\opera.exe => No File
FirewallRules: [UDP Query User{586A1D54-0DD1-48F3-AA23-552B636697AB}C:\users\igors\appdata\local\programs\opera\65.0.3467.62\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.62\opera.exe => No File
FirewallRules: [TCP Query User{03A9B50B-B8FD-4361-B9B5-C299D536CEA7}C:\users\igors\appdata\local\programs\opera\65.0.3467.62\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\65.0.3467.62\opera.exe => No File
FirewallRules: [TCP Query User{9F2EC9DD-6B52-4533-85AF-221BCE9E1D2E}C:\users\igors\appdata\local\programs\opera\72.0.3815.320\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\72.0.3815.320\opera.exe => No File
FirewallRules: [UDP Query User{14928ECA-4D5C-476C-8C92-678EE2953015}C:\users\igors\appdata\local\programs\opera\72.0.3815.320\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\72.0.3815.320\opera.exe => No File
FirewallRules: [{D3B276FC-E358-4389-AB58-ABFB5E94DB75}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{7B7296A1-3C48-43D0-B1A0-367301F28BD5}C:\users\igors\appdata\local\programs\opera\72.0.3815.400\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\72.0.3815.400\opera.exe => No File
FirewallRules: [UDP Query User{5CE6B88A-F88C-4063-93F8-F6DE413BD50A}C:\users\igors\appdata\local\programs\opera\72.0.3815.400\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\72.0.3815.400\opera.exe => No File
FirewallRules: [TCP Query User{02A75D6D-234D-4B7B-A4D4-402CCC028CF1}C:\users\igors\appdata\local\programs\opera\73.0.3856.284\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\73.0.3856.284\opera.exe => No File
FirewallRules: [UDP Query User{01F243FC-78EF-47BA-B803-A4019B8E02A2}C:\users\igors\appdata\local\programs\opera\73.0.3856.284\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\73.0.3856.284\opera.exe => No File
FirewallRules: [TCP Query User{99BA4C38-8FFA-4A57-91AA-75E74D5A8E73}C:\users\igors\onedrive\рабочий стол\winbox64.exe] => (Allow) C:\users\igors\onedrive\рабочий стол\winbox64.exe => No File
FirewallRules: [UDP Query User{57653C5F-FDF8-4066-A239-BC34BBCD598D}C:\users\igors\onedrive\рабочий стол\winbox64.exe] => (Allow) C:\users\igors\onedrive\рабочий стол\winbox64.exe => No File
FirewallRules: [TCP Query User{456D78F0-CE53-4240-8A58-499FC618C0CD}C:\users\igors\appdata\local\programs\opera\73.0.3856.284\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\73.0.3856.284\opera.exe => No File
FirewallRules: [UDP Query User{7D388BAD-1FF8-4884-AE1A-DA57A36DF360}C:\users\igors\appdata\local\programs\opera\73.0.3856.284\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\73.0.3856.284\opera.exe => No File
FirewallRules: [TCP Query User{0FD0CCF9-888F-4001-9ADA-0BCF89C9AF91}C:\users\igors\onedrive\рабочий стол\winbox64.exe] => (Allow) C:\users\igors\onedrive\рабочий стол\winbox64.exe => No File
FirewallRules: [UDP Query User{1D7A9F08-8289-407F-8517-8C3E16D05D80}C:\users\igors\onedrive\рабочий стол\winbox64.exe] => (Allow) C:\users\igors\onedrive\рабочий стол\winbox64.exe => No File
FirewallRules: [TCP Query User{6DA73699-0CAC-41EB-AA0D-4AB5000C19D6}C:\users\igors\appdata\local\programs\opera\73.0.3856.329\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\73.0.3856.329\opera.exe => No File
FirewallRules: [UDP Query User{A8F59753-1FB6-4B67-9446-2C964796F47C}C:\users\igors\appdata\local\programs\opera\73.0.3856.329\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\73.0.3856.329\opera.exe => No File
FirewallRules: [TCP Query User{B729FA51-47E8-43BF-8E57-7007C7E3B576}C:\users\igors\appdata\local\programs\opera\73.0.3856.344\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\73.0.3856.344\opera.exe => No File
FirewallRules: [UDP Query User{A2220C47-56CF-4F0C-98D0-5A11BE7B8A49}C:\users\igors\appdata\local\programs\opera\73.0.3856.344\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\73.0.3856.344\opera.exe => No File
FirewallRules: [{BDF584C9-B76E-430F-AFCB-6AD8B33DAA91}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{ED36866F-6B03-4DB8-A2CD-F2EEB8515C26}C:\users\igors\onedrive\рабочий стол\sdi_r2102\sdi_x64_r2102.exe] => (Allow) C:\users\igors\onedrive\рабочий стол\sdi_r2102\sdi_x64_r2102.exe => No File
FirewallRules: [UDP Query User{1C6B8E58-91F0-422A-84E1-72B37F2F74AA}C:\users\igors\onedrive\рабочий стол\sdi_r2102\sdi_x64_r2102.exe] => (Allow) C:\users\igors\onedrive\рабочий стол\sdi_r2102\sdi_x64_r2102.exe => No File
FirewallRules: [TCP Query User{41E7E44B-56ED-4E83-BE37-801612D735AA}C:\users\igors\appdata\local\programs\opera\74.0.3911.107\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\74.0.3911.107\opera.exe => No File
FirewallRules: [UDP Query User{C0BDDB07-9839-4EF5-978E-D7721F7C0698}C:\users\igors\appdata\local\programs\opera\74.0.3911.107\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\74.0.3911.107\opera.exe => No File
FirewallRules: [TCP Query User{4439AB46-5EC8-4CC1-B25A-3FD954349AA6}C:\users\igors\appdata\local\programs\opera\74.0.3911.160\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\74.0.3911.160\opera.exe => No File
FirewallRules: [UDP Query User{89B478F5-B681-417F-91E2-F9CDC064CDF4}C:\users\igors\appdata\local\programs\opera\74.0.3911.160\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\74.0.3911.160\opera.exe => No File
FirewallRules: [TCP Query User{632DD381-2008-4ED0-9A39-C3A4CC632222}C:\users\igors\appdata\local\programs\opera\74.0.3911.203\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\74.0.3911.203\opera.exe => No File
FirewallRules: [UDP Query User{990A601A-7EAC-4343-8A97-69F79F7790D3}C:\users\igors\appdata\local\programs\opera\74.0.3911.203\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\74.0.3911.203\opera.exe => No File
FirewallRules: [TCP Query User{D441EF80-39A2-4F39-A097-A96C75F1931F}C:\users\igors\appdata\local\programs\opera\74.0.3911.218\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\74.0.3911.218\opera.exe => No File
FirewallRules: [UDP Query User{A2A4004C-8FEB-4738-AC17-5B7758F7A481}C:\users\igors\appdata\local\programs\opera\74.0.3911.218\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\74.0.3911.218\opera.exe => No File
FirewallRules: [TCP Query User{0F34F736-1791-4FEC-A45B-07C32EBCD2FB}C:\users\igors\appdata\local\programs\opera\75.0.3969.149\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\75.0.3969.149\opera.exe => No File
FirewallRules: [UDP Query User{37E416CB-58DA-45FB-A550-43201A786820}C:\users\igors\appdata\local\programs\opera\75.0.3969.149\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\75.0.3969.149\opera.exe => No File
FirewallRules: [TCP Query User{622A2DE8-8C7F-48D2-ADCC-AEA0B74D27D1}C:\users\igors\appdata\local\programs\opera\75.0.3969.171\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\75.0.3969.171\opera.exe => No File
FirewallRules: [UDP Query User{7F86AB9C-F610-4099-BEFF-7A3634EAE60B}C:\users\igors\appdata\local\programs\opera\75.0.3969.171\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\75.0.3969.171\opera.exe => No File
FirewallRules: [TCP Query User{41E49525-37FD-41F8-B2EF-6CADD3133C11}C:\users\igors\appdata\local\programs\opera\75.0.3969.218\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\75.0.3969.218\opera.exe => No File
FirewallRules: [UDP Query User{E336443A-A3C3-4D2E-9F87-CCE6956CD252}C:\users\igors\appdata\local\programs\opera\75.0.3969.218\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\75.0.3969.218\opera.exe => No File
FirewallRules: [TCP Query User{4056B2FB-40A0-4189-8606-A2D5EF420741}C:\users\igors\appdata\local\programs\opera\75.0.3969.243\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\75.0.3969.243\opera.exe => No File
FirewallRules: [UDP Query User{2ACE194D-2A21-4F18-9FC5-7C5DCCFA48CB}C:\users\igors\appdata\local\programs\opera\75.0.3969.243\opera.exe] => (Allow) C:\users\igors\appdata\local\programs\opera\75.0.3969.243\opera.exe => No File
FirewallRules: [{3CD29A29-E27B-466A-A012-253B8D2D5DDF}] => (Allow) C:\WINDOWS\system32\rundll32.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{6B0B24D4-66A9-4A02-ACC1-5A905BCA4EE4}] => (Allow) C:\WINDOWS\rss\csrss.exe => No File
FirewallRules: [TCP Query User{2F90F157-47E2-4DB6-A374-A8DAAD99F115}C:\users\igors\appdata\local\programs\opera\76.0.4017.107\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\76.0.4017.107\opera.exe => No File
FirewallRules: [UDP Query User{E7328450-AD9D-4234-9367-FAA6B3433854}C:\users\igors\appdata\local\programs\opera\76.0.4017.107\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\76.0.4017.107\opera.exe => No File
FirewallRules: [TCP Query User{882BE0FF-8452-495C-879C-590CF94B9E62}C:\users\igors\appdata\local\programs\opera\76.0.4017.123\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\76.0.4017.123\opera.exe => No File
FirewallRules: [UDP Query User{26D8C733-C2B6-4D4F-9154-DA5D1F1E13EB}C:\users\igors\appdata\local\programs\opera\76.0.4017.123\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\76.0.4017.123\opera.exe => No File
FirewallRules: [TCP Query User{01E52A5D-B3F7-4BF8-885B-9D7BBEBF5296}C:\users\igors\appdata\local\programs\opera\76.0.4017.154\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\76.0.4017.154\opera.exe => No File
FirewallRules: [UDP Query User{9465AB2C-9FBB-4F1D-AE3E-7102F14FBE6E}C:\users\igors\appdata\local\programs\opera\76.0.4017.154\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\76.0.4017.154\opera.exe => No File
FirewallRules: [TCP Query User{0A4CADE7-78DA-4B9A-8CBD-3C73D299C892}C:\users\igors\appdata\local\programs\opera\76.0.4017.177\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\76.0.4017.177\opera.exe => No File
FirewallRules: [UDP Query User{72BBBA87-50BB-43DA-A7F3-CF1E76FE9393}C:\users\igors\appdata\local\programs\opera\76.0.4017.177\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\76.0.4017.177\opera.exe => No File
FirewallRules: [TCP Query User{14CCC5B2-FFC7-4DB6-B03C-94DA6EBF9E72}C:\users\igors\appdata\local\programs\opera\77.0.4054.90\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.90\opera.exe => No File
FirewallRules: [UDP Query User{29E18817-ED41-43CD-A6D1-C893794791FA}C:\users\igors\appdata\local\programs\opera\77.0.4054.90\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.90\opera.exe => No File
FirewallRules: [TCP Query User{EE6B83E0-858E-4473-A874-1D8E20EB5C38}C:\users\igors\appdata\local\programs\opera\77.0.4054.172\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.172\opera.exe => No File
FirewallRules: [UDP Query User{12E1904E-A0A7-454A-A118-370B1404D342}C:\users\igors\appdata\local\programs\opera\77.0.4054.172\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.172\opera.exe => No File
FirewallRules: [TCP Query User{D869B7B6-A4E8-4C86-9437-ECD5A5E8BE44}C:\users\igors\appdata\local\programs\opera\77.0.4054.172\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.172\opera.exe => No File
FirewallRules: [UDP Query User{D60E52D3-6623-477F-AB1E-C9D82DEA4AA0}C:\users\igors\appdata\local\programs\opera\77.0.4054.172\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.172\opera.exe => No File
FirewallRules: [TCP Query User{58E760C0-7AF0-450B-AE0E-A09DA8864311}C:\users\igors\appdata\local\programs\opera\77.0.4054.203\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.203\opera.exe => No File
FirewallRules: [UDP Query User{C02D1F54-87E1-40B0-9B69-490CEF458DD7}C:\users\igors\appdata\local\programs\opera\77.0.4054.203\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.203\opera.exe => No File
FirewallRules: [TCP Query User{4841DB81-F599-460F-B483-3FBBBD9209EE}C:\users\igors\appdata\local\programs\opera\77.0.4054.277\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.277\opera.exe => No File
FirewallRules: [UDP Query User{29507013-4197-4D63-A3D1-F6F55612A893}C:\users\igors\appdata\local\programs\opera\77.0.4054.277\opera.exe] => (Block) C:\users\igors\appdata\local\programs\opera\77.0.4054.277\opera.exe => No File
FirewallRules: [{E4E993E2-9DF5-4BA2-BBDC-DE3ED4D6772B}] => (Allow) C:\WINDOWS\rss\csrss.exe => No File
Reboot:
End::[/CODE]Запустите FRST.EXE/FRST64.EXE, нажмите один раз [B]Исправить[/B] и подождите. Программа создаст лог-файл ([B]Fixlog.txt[/B]). Прикрепите его к своему следующему сообщению.
Компьютер будет перезагружен автоматически.
02.09.2021, 09:54
BillyPiston

Вложений: 1

Я даже такой не устанавливал Versium Research 10, но удалил, как и просили.

Вот лог:
02.09.2021, 10:35
Vvvyg

Проблема решена, насколько вижу.

Уточните, у вас раньше обновление системы работало?
02.09.2021, 10:40
BillyPiston

[QUOTE=Vvvyg;1521718]Проблема решена, насколько вижу.

Уточните, у вас раньше обновление системы работало?[/QUOTE]

Я не знаю) Вроде я не обновлялся.
02.09.2021, 13:10
Vvvyg

Попробуем починить.
Скачайте утилиту Universal Virus Sniffer [URL="https://yadi.sk/d/6A65LkI1WEuqC"]отсюда[/URL] и [url=https://virusinfo.info/showthread.php?t=121767&p=897810&viewfull=1#post897810]сделайте полный образ автозапуска uVS[/url].