Добрый вечер. Вообщем, началось появляться сообщение с ошибкой "Завершение программы dcore.exe" время от времени, так же при старте компьютера открывается хром с рекламными страницами. Наблюдается снижение производительности в играх. Запускал Cureit, он нашел 150~ этих всяких m1 c1 экзешников, все они были куда-то перемещены. Как я понимаю, в карантин. Все кроме одного. Но проблему это толком не решило. Прикладываю логи.
Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:
Уважаемый(ая) Artist73, спасибо за обращение на наш форум!
Удаление вирусов - абсолютно бесплатная услуга на VirusInfo.Info. Хелперы в самое ближайшее время ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитой Autologger, подробнее можно прочитать в правилах оформления запроса о помощи.
Информация
Если вы хотите получить персональную гарантированную помощь в приоритетном режиме, то воспользуйтесь платным сервисом Помогите+.
Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста, поддержите проект.
Так же прикладываю скриншот карантина Cureit. Вложение 683085
Выполните скрипт в AVZ из папки Autologger
Код:begin RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','User','x32'); RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','User','x64'); RebootWindows(false); end.
- Обратите внимание: будет выполнена перезагрузка компьютера.
Пожалуйста, ЕЩЕ РАЗ запустите Autologger; прикрепите к следующему сообщению НОВЫЕ логи.
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Скрипт был выполнен без ошибок, перезагрузился, прикладываю новые логи.Сообщение от thyrex
Скачайте Farbar Recovery Scan Toolи сохраните на Рабочем столе.
- Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
1. Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
2. Убедитесь, что в окне Optional Scan отмечены List BCD и 90 Days Files.
3. Нажмите кнопку Scan.
4. После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа.
5. Если программа была запущена в первый раз, также будет создан отчет (Addition.txt).
6. Файлы FRST.txt и Addition.txt заархивируйте (в один общий архив) и прикрепите к сообщению.
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Скан был выполнен, прикладываю архив с нужными файлами.
Последний раз редактировалось Vvvyg; 16.09.2020 в 20:58. Причина: Не надо оверквотинга
1. Выделите следующий код:
2. Скопируйте выделенный текст (правая кнопка мыши – Копировать).Код:Start:: CreateRestorePoint: AlternateDataStreams: C:\Users\User\Application Data:fd585b8e864cc41e70aa800112186ec8 [394] AlternateDataStreams: C:\Users\User\AppData\Roaming:fd585b8e864cc41e70aa800112186ec8 [394] FirewallRules: [{DF591717-B179-43FC-A7CD-F0CC082C4B5B}] => (Allow) C:\Users\User\AppData\Local\Temp\rx0r3cxl.lel\x86\m1.exe => No File FirewallRules: [{BEA7691A-3ED1-4E34-B8A9-423A1DBF872C}] => (Allow) C:\Users\User\AppData\Local\Temp\rx0r3cxl.lel\x86\c1.exe => No File FirewallRules: [{8117A38A-7AE9-4219-8431-D63483FCBB4D}] => (Allow) C:\Users\User\AppData\Local\Temp\rx0r3cxl.lel\x64\m1.exe => No File FirewallRules: [{74E4CCEE-7137-41E6-AE8F-B7965322BEAE}] => (Allow) C:\Users\User\AppData\Local\Temp\rx0r3cxl.lel\x64\c1.exe => No File FirewallRules: [{77CF6786-E356-4D2E-BA02-7CF11B7871E2}] => (Allow) C:\Users\User\AppData\Local\Temp\rx0r3cxl.lel\dcore.exe (Microsoft) [File not signed] FirewallRules: [{B9C2D7F7-9063-4906-91E0-054D732DA9CC}] => (Allow) C:\Users\User\AppData\Local\Temp\ullg5ieu.sga\x86\m1.exe => No File FirewallRules: [{307F97CB-7A74-448B-B858-405FB4ABC2C0}] => (Allow) C:\Users\User\AppData\Local\Temp\ullg5ieu.sga\x86\c1.exe => No File FirewallRules: [{03D504F5-AA1E-41F8-BB33-05ECF00BB270}] => (Allow) C:\Users\User\AppData\Local\Temp\ullg5ieu.sga\x64\m1.exe => No File FirewallRules: [{496991CF-E107-4919-9F27-5D01C5E34D2F}] => (Allow) C:\Users\User\AppData\Local\Temp\ullg5ieu.sga\x64\c1.exe => No File FirewallRules: [{D57BD8F7-4B29-4A0B-8A77-C5675BCCECCE}] => (Allow) C:\Users\User\AppData\Local\Temp\ullg5ieu.sga\dcore.exe (Microsoft) [File not signed] FirewallRules: [{D933DF65-DED6-451B-A8EE-E0D1BF689C85}] => (Allow) C:\Users\User\AppData\Local\Temp\rxfwljo0.htm\x86\c1.exe => No File FirewallRules: [{06C2546F-1C70-4810-B448-48A078913088}] => (Allow) C:\Users\User\AppData\Local\Temp\rxfwljo0.htm\dcore.exe (Microsoft) [File not signed] FirewallRules: [{C1749D53-DADB-4C34-BB24-73668EF28F34}] => (Allow) C:\Users\User\AppData\Local\Temp\rxfwljo0.htm\x86\m1.exe => No File FirewallRules: [{54948C54-F6CF-4218-9D75-BCBD6D031DB0}] => (Allow) C:\Users\User\AppData\Local\Temp\rxfwljo0.htm\x64\c1.exe => No File FirewallRules: [{FECE4EDB-8699-493C-8470-D00ECDE46C87}] => (Allow) C:\Users\User\AppData\Local\Temp\rxfwljo0.htm\x64\m1.exe => No File FirewallRules: [{FAD3DF56-554C-4F02-8901-F505AA981872}] => (Allow) C:\Users\User\AppData\Local\Temp\aucxsap4.xkz\dcore.exe (Microsoft) [File not signed] FirewallRules: [{E4D8B582-8790-4967-91F2-A2AF97DAA3B1}] => (Allow) C:\Users\User\AppData\Local\Temp\aucxsap4.xkz\x64\c1.exe => No File FirewallRules: [{849D5C0C-D5D9-470E-AB93-1299AB454663}] => (Allow) C:\Users\User\AppData\Local\Temp\aucxsap4.xkz\x86\m1.exe => No File FirewallRules: [{9A64B18A-5A4B-4146-848F-E1DBB802A80D}] => (Allow) C:\Users\User\AppData\Local\Temp\aucxsap4.xkz\x64\m1.exe => No File FirewallRules: [{33FBC7FB-3355-4448-A3FC-7D5AED17580F}] => (Allow) C:\Users\User\AppData\Local\Temp\aucxsap4.xkz\x86\c1.exe => No File FirewallRules: [{A0C49506-A236-4A13-8A99-E8E3E0E87B4C}] => (Allow) C:\Users\User\AppData\Local\Temp\vjmhbs2l.kzn\dcore.exe (Microsoft) [File not signed] FirewallRules: [{5CF73614-DCD9-43C2-8148-21685A96DBE4}] => (Allow) C:\Users\User\AppData\Local\Temp\vjmhbs2l.kzn\x64\m1.exe => No File FirewallRules: [{EBB80388-6AE6-4B29-AD40-2A47C5228671}] => (Allow) C:\Users\User\AppData\Local\Temp\vjmhbs2l.kzn\x86\m1.exe => No File FirewallRules: [{73294651-1222-4A8F-8142-C9465D6BFE63}] => (Allow) C:\Users\User\AppData\Local\Temp\vjmhbs2l.kzn\x86\c1.exe => No File FirewallRules: [{C4E55D45-40CF-4A04-9A5F-B39C62A0E5AD}] => (Allow) C:\Users\User\AppData\Local\Temp\vjmhbs2l.kzn\x64\c1.exe => No File FirewallRules: [{D3223F08-129A-4FF5-AD5F-A8956701F3BE}] => (Allow) C:\Users\User\AppData\Local\Temp\e4x34kbr.on1\x86\m1.exe => No File FirewallRules: [{BC14A04A-D4E7-4DD4-9822-1BFAD3BB9E6B}] => (Allow) C:\Users\User\AppData\Local\Temp\e4x34kbr.on1\dcore.exe (Microsoft) [File not signed] FirewallRules: [{33DA18D4-7E67-4E06-876E-0D5D493DC0C7}] => (Allow) C:\Users\User\AppData\Local\Temp\e4x34kbr.on1\x86\c1.exe => No File FirewallRules: [{A525CC53-69EE-4AAE-8E50-93683DC8D563}] => (Allow) C:\Users\User\AppData\Local\Temp\e4x34kbr.on1\x64\m1.exe => No File FirewallRules: [{FE78CBF0-971F-4B00-A408-9C781ABDE859}] => (Allow) C:\Users\User\AppData\Local\Temp\e4x34kbr.on1\x64\c1.exe => No File FirewallRules: [{3B6D891C-7007-4D08-A3D8-CE7B6768F587}] => (Allow) C:\Users\User\AppData\Local\Temp\11vs0kzz.im3\x64\c1.exe => No File FirewallRules: [{9449B888-DB72-4CEC-8193-5A38D936964D}] => (Allow) C:\Users\User\AppData\Local\Temp\11vs0kzz.im3\x86\m1.exe => No File FirewallRules: [{BA471ED3-83C9-405A-AA3D-6C33349096C2}] => (Allow) C:\Users\User\AppData\Local\Temp\11vs0kzz.im3\dcore.exe (Microsoft) [File not signed] FirewallRules: [{48486185-8560-4CF5-A0EE-9BDCC5A1B895}] => (Allow) C:\Users\User\AppData\Local\Temp\11vs0kzz.im3\x64\m1.exe => No File FirewallRules: [{18284D7B-D02C-49CE-BDD7-AF68DB9A0C62}] => (Allow) C:\Users\User\AppData\Local\Temp\11vs0kzz.im3\x86\c1.exe => No File FirewallRules: [{98AA855E-CB8C-43B4-A9F1-93ECD0376A6C}] => (Allow) C:\Users\User\AppData\Local\Temp\1y3u3sfe.nkj\x64\c1.exe => No File FirewallRules: [{503DBDAF-E84D-4155-989C-9E399570FA43}] => (Allow) C:\Users\User\AppData\Local\Temp\1y3u3sfe.nkj\x64\m1.exe => No File FirewallRules: [{E090B76A-0F9B-4C86-8D36-A81940CEB097}] => (Allow) C:\Users\User\AppData\Local\Temp\1y3u3sfe.nkj\dcore.exe (Microsoft) [File not signed] FirewallRules: [{7AF86343-1C3D-4652-9845-0773C7FADE14}] => (Allow) C:\Users\User\AppData\Local\Temp\1y3u3sfe.nkj\x86\m1.exe => No File FirewallRules: [{93E0D6EF-54C9-4989-901C-F61B971AE299}] => (Allow) C:\Users\User\AppData\Local\Temp\1y3u3sfe.nkj\x86\c1.exe => No File FirewallRules: [{860EEB2A-4D14-45AD-A2AC-52D50BA0DB98}] => (Allow) C:\Users\User\AppData\Local\Temp\msrjonob.50g\dcore.exe (Microsoft) [File not signed] FirewallRules: [{D62E72BD-3918-41EF-9811-81924EC28E37}] => (Allow) C:\Users\User\AppData\Local\Temp\msrjonob.50g\x64\c1.exe => No File FirewallRules: [{10759EC4-45EF-42F4-946B-E5D3F84EF23A}] => (Allow) C:\Users\User\AppData\Local\Temp\msrjonob.50g\x64\m1.exe => No File FirewallRules: [{DC470BCC-F6FC-43D7-98D1-B708E6A9D6CC}] => (Allow) C:\Users\User\AppData\Local\Temp\msrjonob.50g\x86\m1.exe => No File FirewallRules: [{D9B1EB00-2043-4DD6-96F6-FE3CE3CCFB02}] => (Allow) C:\Users\User\AppData\Local\Temp\msrjonob.50g\x86\c1.exe => No File FirewallRules: [{2AB0AFA8-295C-4261-B8EC-B40BFCBDBB96}] => (Allow) C:\Users\User\AppData\Local\Temp\lppwrk5y.xxe\dcore.exe (Microsoft) [File not signed] FirewallRules: [{5880DB75-4090-4B0E-A633-A5F3B960EC9F}] => (Allow) C:\Users\User\AppData\Local\Temp\lppwrk5y.xxe\x86\c1.exe => No File FirewallRules: [{915C6892-F543-4B2C-9B29-D6756CF285AA}] => (Allow) C:\Users\User\AppData\Local\Temp\lppwrk5y.xxe\x86\m1.exe => No File FirewallRules: [{03B8CD3B-A84D-4DBA-8485-B91D63627EAC}] => (Allow) C:\Users\User\AppData\Local\Temp\lppwrk5y.xxe\x64\m1.exe => No File FirewallRules: [{16012B18-2584-4B68-868A-F3A365514306}] => (Allow) C:\Users\User\AppData\Local\Temp\lppwrk5y.xxe\x64\c1.exe => No File FirewallRules: [{F6F65A76-5611-4EEA-98F8-8D69D4AEF559}] => (Allow) C:\Users\User\AppData\Local\Temp\w5v5jhmn.hz2\x86\m1.exe => No File FirewallRules: [{45915976-51C6-4B11-ADA6-E9D9C6F1AC83}] => (Allow) C:\Users\User\AppData\Local\Temp\w5v5jhmn.hz2\x64\c1.exe => No File FirewallRules: [{DA54A2FB-866F-4886-B35E-630383AB6817}] => (Allow) C:\Users\User\AppData\Local\Temp\w5v5jhmn.hz2\dcore.exe (Microsoft) [File not signed] FirewallRules: [{531E80A6-6A7A-4994-8A3B-923260EFEFE6}] => (Allow) C:\Users\User\AppData\Local\Temp\w5v5jhmn.hz2\x86\c1.exe => No File FirewallRules: [{60A2A3CE-97DE-41B2-BD2A-E032EA19A8FF}] => (Allow) C:\Users\User\AppData\Local\Temp\w5v5jhmn.hz2\x64\m1.exe => No File FirewallRules: [{5BF1B88A-AB7C-470C-9DC5-4928702A11E5}] => (Allow) C:\Users\User\AppData\Local\Temp\v3cb500r.rlv\x86\c1.exe => No File FirewallRules: [{E4552850-051F-4950-AD5E-C09A65F32913}] => (Allow) C:\Users\User\AppData\Local\Temp\v3cb500r.rlv\x64\c1.exe => No File FirewallRules: [{1796AF2E-93FD-4C55-B97D-9F2CF32DE449}] => (Allow) C:\Users\User\AppData\Local\Temp\v3cb500r.rlv\x86\m1.exe => No File FirewallRules: [{AB0DCCEA-BFC0-41AF-BB4B-97615285765E}] => (Allow) C:\Users\User\AppData\Local\Temp\v3cb500r.rlv\dcore.exe (Microsoft) [File not signed] FirewallRules: [{F80A2E51-44F5-45DB-A2DA-473514657738}] => (Allow) C:\Users\User\AppData\Local\Temp\v3cb500r.rlv\x64\m1.exe => No File FirewallRules: [{2F90E406-1F1A-4CD1-AC25-326691AD2E2C}] => (Allow) C:\Users\User\AppData\Local\Temp\tha3axpc.gky\x64\c1.exe => No File FirewallRules: [{7F6DE07C-5795-4DFC-A96A-2AAD20B686AE}] => (Allow) C:\Users\User\AppData\Local\Temp\tha3axpc.gky\x64\m1.exe => No File FirewallRules: [{50FE3111-4CE0-4CA5-80EA-A4F745B6CD0A}] => (Allow) C:\Users\User\AppData\Local\Temp\tha3axpc.gky\x86\m1.exe => No File FirewallRules: [{CB7353CA-6751-4517-9D8A-AAFC0901FA77}] => (Allow) C:\Users\User\AppData\Local\Temp\tha3axpc.gky\x86\c1.exe => No File FirewallRules: [{7CE005E8-7B07-40E6-8B03-D92ACA46B6CC}] => (Allow) C:\Users\User\AppData\Local\Temp\tha3axpc.gky\dcore.exe (Microsoft) [File not signed] FirewallRules: [{9FD500B6-79CF-4C2C-8724-212D3CDFD185}] => (Allow) C:\Users\User\AppData\Local\Temp\e1xksf0w.1bb\x64\c1.exe => No File FirewallRules: [{5B2FB6F2-B465-4EBD-AAEB-778C4ABAEAC7}] => (Allow) C:\Users\User\AppData\Local\Temp\e1xksf0w.1bb\x86\m1.exe => No File FirewallRules: [{0130394D-7B8C-4554-8D8C-B6BEA28B7E67}] => (Allow) C:\Users\User\AppData\Local\Temp\e1xksf0w.1bb\dcore.exe (Microsoft) [File not signed] FirewallRules: [{9200F631-077E-4A71-BBEE-34D9E1A22CE8}] => (Allow) C:\Users\User\AppData\Local\Temp\e1xksf0w.1bb\x86\c1.exe => No File FirewallRules: [{50BBE8B3-CCA2-4F52-ACD1-D05ADEE18737}] => (Allow) C:\Users\User\AppData\Local\Temp\e1xksf0w.1bb\x64\m1.exe => No File FirewallRules: [{C5025C67-731C-48E8-BE45-14CD545CF2C6}] => (Allow) C:\Users\User\AppData\Local\Temp\1sgpsg1v.ydc\x86\m1.exe => No File FirewallRules: [{F3F1CFCC-4095-44E6-821D-91B8CACFE097}] => (Allow) C:\Users\User\AppData\Local\Temp\1sgpsg1v.ydc\dcore.exe => No File FirewallRules: [{AF74BC0B-5D25-491D-82EC-5FD3FC423571}] => (Allow) C:\Users\User\AppData\Local\Temp\1sgpsg1v.ydc\x86\c1.exe => No File FirewallRules: [{27BBFF69-0F3D-4602-ABD9-044EB07CE686}] => (Allow) C:\Users\User\AppData\Local\Temp\1sgpsg1v.ydc\x64\c1.exe => No File FirewallRules: [{762116AC-4796-4DF2-B3A5-A9CB054BF546}] => (Allow) C:\Users\User\AppData\Local\Temp\1sgpsg1v.ydc\x64\m1.exe => No File FirewallRules: [{4461AA8A-7E5B-4FB8-8741-24471593414E}] => (Allow) C:\Users\User\AppData\Local\Temp\lkky40hp.4h1\dcore.exe (Microsoft) [File not signed] FirewallRules: [{4DD7858F-5965-4839-8A4E-E42E09FEA26D}] => (Allow) C:\Users\User\AppData\Local\Temp\lkky40hp.4h1\x64\c1.exe => No File FirewallRules: [{2C10E008-FC7B-4AAE-9553-BABEE36A0916}] => (Allow) C:\Users\User\AppData\Local\Temp\lkky40hp.4h1\x64\m1.exe => No File FirewallRules: [{C85C2542-7DCB-4337-9649-9FDA1281D221}] => (Allow) C:\Users\User\AppData\Local\Temp\lkky40hp.4h1\x86\m1.exe => No File FirewallRules: [{BCD84BEB-9EC7-4B0E-9486-7498BCD13D49}] => (Allow) C:\Users\User\AppData\Local\Temp\lkky40hp.4h1\x86\c1.exe => No File FirewallRules: [{4FBED1E9-25DD-4DF8-BA1F-BFE9D995B8FC}] => (Allow) C:\Users\User\AppData\Local\Temp\0oqmfcx5.rzf\x64\c1.exe => No File FirewallRules: [{60FF6708-3189-4FCB-9245-DDE996AEBCAA}] => (Allow) C:\Users\User\AppData\Local\Temp\0oqmfcx5.rzf\dcore.exe (Microsoft) [File not signed] FirewallRules: [{C79E6FB4-8652-403E-ACFB-CE2E1108CDE3}] => (Allow) C:\Users\User\AppData\Local\Temp\0oqmfcx5.rzf\x64\m1.exe => No File FirewallRules: [{92C822C0-7887-49D8-AF0F-ECE5C94E534B}] => (Allow) C:\Users\User\AppData\Local\Temp\0oqmfcx5.rzf\x86\c1.exe => No File FirewallRules: [{17D22EB2-1193-4BE9-8555-32AE2DADB97C}] => (Allow) C:\Users\User\AppData\Local\Temp\0oqmfcx5.rzf\x86\m1.exe => No File FirewallRules: [{1D08DB48-7D0D-4A76-841B-EB81043160DC}] => (Allow) C:\Users\User\AppData\Local\Temp\si554sfe.sqk\x64\c1.exe => No File FirewallRules: [{428B32FE-E0F3-4C9B-B390-A6F5636922E2}] => (Allow) C:\Users\User\AppData\Local\Temp\si554sfe.sqk\dcore.exe (Microsoft) [File not signed] FirewallRules: [{7F6D0266-CDFB-44ED-A2A7-7D0E2D17353F}] => (Allow) C:\Users\User\AppData\Local\Temp\si554sfe.sqk\x86\m1.exe => No File FirewallRules: [{55FE093C-94D7-4DC9-9882-47B9BB36A87E}] => (Allow) C:\Users\User\AppData\Local\Temp\si554sfe.sqk\x64\m1.exe => No File FirewallRules: [{360E7B4D-D112-43CE-8AA8-28BC65149E99}] => (Allow) C:\Users\User\AppData\Local\Temp\si554sfe.sqk\x86\c1.exe => No File FirewallRules: [{CBBF86AE-704D-4736-9248-F9959DED6C3D}] => (Allow) C:\Users\User\AppData\Local\Temp\ay2wpxng.fef\x86\m1.exe => No File FirewallRules: [{98F40B9F-A591-45AF-83D1-D74628182B94}] => (Allow) C:\Users\User\AppData\Local\Temp\ay2wpxng.fef\x64\c1.exe => No File FirewallRules: [{385DDE52-4E94-408C-8F1C-1DFBF978F4AB}] => (Allow) C:\Users\User\AppData\Local\Temp\ay2wpxng.fef\x86\c1.exe => No File FirewallRules: [{704943E8-3210-4A0D-8460-6FF451B4B3A0}] => (Allow) C:\Users\User\AppData\Local\Temp\ay2wpxng.fef\x64\m1.exe => No File FirewallRules: [{9F42AA56-1E92-4891-81B0-BAE1524D58A7}] => (Allow) C:\Users\User\AppData\Local\Temp\ay2wpxng.fef\dcore.exe (Microsoft) [File not signed] FirewallRules: [{B9D6D65B-87A9-4120-A97D-22BA4D2CB4A2}] => (Allow) C:\Users\User\AppData\Local\Temp\tcq4vc1r.cix\x86\c1.exe => No File FirewallRules: [{C707D273-2BC3-452C-A3FB-89BDEBEB1A6E}] => (Allow) C:\Users\User\AppData\Local\Temp\tcq4vc1r.cix\x64\c1.exe => No File FirewallRules: [{BE4FADA8-7997-4279-BF77-B10195B75082}] => (Allow) C:\Users\User\AppData\Local\Temp\tcq4vc1r.cix\x64\m1.exe => No File FirewallRules: [{2D929F94-F350-4BB1-BC31-6354D80830B2}] => (Allow) C:\Users\User\AppData\Local\Temp\tcq4vc1r.cix\dcore.exe (Microsoft) [File not signed] FirewallRules: [{E87D5D87-8B98-44DA-A2B6-778274FCD829}] => (Allow) C:\Users\User\AppData\Local\Temp\tcq4vc1r.cix\x86\m1.exe => No File FirewallRules: [{5FC2EE34-7692-4900-AB30-B23E3ECC641B}] => (Allow) C:\Users\User\AppData\Local\Temp\ecxob0ci.mdk\x86\c1.exe => No File FirewallRules: [{7DDF6AF8-70F6-4E11-8192-B202CAAE0328}] => (Allow) C:\Users\User\AppData\Local\Temp\ecxob0ci.mdk\dcore.exe (Microsoft) [File not signed] FirewallRules: [{9BF5478E-E6DA-487D-A4A8-453C8C5CAD61}] => (Allow) C:\Users\User\AppData\Local\Temp\ecxob0ci.mdk\x64\m1.exe => No File FirewallRules: [{057EEC5D-9980-4970-8C9A-0EF1FB96CF32}] => (Allow) C:\Users\User\AppData\Local\Temp\ecxob0ci.mdk\x86\m1.exe => No File FirewallRules: [{964974CC-A25E-4DF4-92F1-BB69681D39F5}] => (Allow) C:\Users\User\AppData\Local\Temp\ecxob0ci.mdk\x64\c1.exe => No File FirewallRules: [{5C9A1D0D-2A36-41C4-AB12-9347470A0303}] => (Allow) C:\Users\User\AppData\Local\Temp\ncl5dxpq.cxz\x86\m1.exe => No File FirewallRules: [{9D6C5789-AB94-4B7F-8314-9BE62432E5C5}] => (Allow) C:\Users\User\AppData\Local\Temp\ncl5dxpq.cxz\x64\m1.exe => No File FirewallRules: [{292BCD2D-96E0-4FF6-9F70-44CE90260FC2}] => (Allow) C:\Users\User\AppData\Local\Temp\ncl5dxpq.cxz\x86\c1.exe => No File FirewallRules: [{3DDA95AA-6EB3-49F2-9A5B-CB3528322355}] => (Allow) C:\Users\User\AppData\Local\Temp\ncl5dxpq.cxz\dcore.exe (Microsoft) [File not signed] FirewallRules: [{8FFEB000-1D18-4269-8344-74B1D646044C}] => (Allow) C:\Users\User\AppData\Local\Temp\ncl5dxpq.cxz\x64\c1.exe => No File FirewallRules: [{A17D2BC9-EFCF-4290-922F-F7CFC3E8BF42}] => (Allow) C:\Users\User\AppData\Local\Temp\ysunqcie.pig\x86\c1.exe => No File FirewallRules: [{3AC3C43F-64D5-4BDE-9579-EAD6490BD717}] => (Allow) C:\Users\User\AppData\Local\Temp\ysunqcie.pig\dcore.exe (Microsoft) [File not signed] FirewallRules: [{2374BECB-D39D-4AD1-9484-17D0ED4EC476}] => (Allow) C:\Users\User\AppData\Local\Temp\ysunqcie.pig\x86\m1.exe => No File FirewallRules: [{2D8AD9DB-B02A-4DB0-8FF3-25CBC4A56FE1}] => (Allow) C:\Users\User\AppData\Local\Temp\ysunqcie.pig\x64\m1.exe => No File FirewallRules: [{24460575-C4E1-4B95-8E75-9F08D76CE293}] => (Allow) C:\Users\User\AppData\Local\Temp\ysunqcie.pig\x64\c1.exe => No File FirewallRules: [{3D84B2E6-4E3A-467E-9DCD-50F05D7C14A1}] => (Allow) C:\Users\User\AppData\Local\Temp\crepvpa5.qwl\x64\m1.exe => No File FirewallRules: [{756FE179-F7EF-468D-A6DE-547922138307}] => (Allow) C:\Users\User\AppData\Local\Temp\crepvpa5.qwl\x64\c1.exe => No File FirewallRules: [{C083215B-42F3-49E5-B3A4-9976DD68EEBF}] => (Allow) C:\Users\User\AppData\Local\Temp\crepvpa5.qwl\x86\c1.exe => No File FirewallRules: [{30C520E7-9986-4BB4-8E64-67A83B536876}] => (Allow) C:\Users\User\AppData\Local\Temp\crepvpa5.qwl\x86\m1.exe => No File FirewallRules: [{264D7DC8-E1D7-49F8-8EA3-B3AE493FEAF0}] => (Allow) C:\Users\User\AppData\Local\Temp\crepvpa5.qwl\dcore.exe (Microsoft) [File not signed] FirewallRules: [{46CD6C48-68BD-4893-9632-6146B751D050}] => (Allow) C:\Users\User\AppData\Local\Temp\1dollogj.axr\dcore.exe (Microsoft) [File not signed] FirewallRules: [{7DEECF95-54B6-4085-BF8B-9656FB468DCC}] => (Allow) C:\Users\User\AppData\Local\Temp\1dollogj.axr\x86\c1.exe => No File FirewallRules: [{E858A472-2C22-467C-9CD1-73F65362F8F0}] => (Allow) C:\Users\User\AppData\Local\Temp\1dollogj.axr\x64\c1.exe => No File FirewallRules: [{8347CC3C-343D-4B5E-B545-A94225AF12C1}] => (Allow) C:\Users\User\AppData\Local\Temp\1dollogj.axr\x86\m1.exe => No File FirewallRules: [{6C101B0D-1C07-4607-BD60-CB3EA6DFD98A}] => (Allow) C:\Users\User\AppData\Local\Temp\1dollogj.axr\x64\m1.exe => No File FirewallRules: [{7E4DFF09-A291-4F55-B1E3-E590247D59CD}] => (Allow) C:\Users\User\AppData\Local\Temp\wpfh4g2b.bmo\dcore.exe (Microsoft) [File not signed] FirewallRules: [{E6843956-A7AB-48C2-A1E0-9744690AE341}] => (Allow) C:\Users\User\AppData\Local\Temp\wpfh4g2b.bmo\x64\c1.exe => No File FirewallRules: [{E1DD1DD7-E62D-4E9F-B59E-58228CC20E34}] => (Allow) C:\Users\User\AppData\Local\Temp\wpfh4g2b.bmo\x64\m1.exe => No File FirewallRules: [{1CEA23EF-9D8A-4D91-8C1C-0689CD05066A}] => (Allow) C:\Users\User\AppData\Local\Temp\wpfh4g2b.bmo\x86\c1.exe => No File FirewallRules: [{D488FDA8-F8D0-4C55-A518-5DEF62A42B4D}] => (Allow) C:\Users\User\AppData\Local\Temp\wpfh4g2b.bmo\x86\m1.exe => No File FirewallRules: [{DA057837-6228-4C43-B726-1C9CBE63B660}] => (Allow) C:\Users\User\AppData\Local\Temp\nknkomxt.gwx\x86\m1.exe => No File FirewallRules: [{526DCF60-F773-4FE8-9F71-0B4B85885633}] => (Allow) C:\Users\User\AppData\Local\Temp\nknkomxt.gwx\x86\c1.exe => No File FirewallRules: [{5E4BD31A-3ADA-453C-BF0E-47CA68954055}] => (Allow) C:\Users\User\AppData\Local\Temp\nknkomxt.gwx\x64\c1.exe => No File FirewallRules: [{B1C2FAEB-0230-4146-9302-92BC9F5B972D}] => (Allow) C:\Users\User\AppData\Local\Temp\nknkomxt.gwx\x64\m1.exe => No File FirewallRules: [{7AF36D9C-1FEC-4C28-9487-CAE21EFE782A}] => (Allow) C:\Users\User\AppData\Local\Temp\nknkomxt.gwx\dcore.exe => No File FirewallRules: [{DE6E6654-C9C0-4FF0-BC41-8B5AF16C95D1}] => (Allow) C:\Users\User\AppData\Local\Temp\qu5qa3yj.5q0\dcore.exe (Microsoft) [File not signed] FirewallRules: [{6B731DEE-C237-4F34-859D-32FAD4360153}] => (Allow) C:\Users\User\AppData\Local\Temp\qu5qa3yj.5q0\x86\m1.exe => No File FirewallRules: [{0C277DF3-AD8F-45B3-91D9-B242401BA6E8}] => (Allow) C:\Users\User\AppData\Local\Temp\qu5qa3yj.5q0\x64\m1.exe => No File FirewallRules: [{4D3BFF44-01E2-4690-85C6-80F9B2375247}] => (Allow) C:\Users\User\AppData\Local\Temp\qu5qa3yj.5q0\x64\c1.exe => No File FirewallRules: [{6B291027-8B1F-4C58-A064-146487065FC5}] => (Allow) C:\Users\User\AppData\Local\Temp\qu5qa3yj.5q0\x86\c1.exe => No File FirewallRules: [{7C569032-501F-4590-881C-07748B4BE6E4}] => (Allow) C:\Users\User\AppData\Local\Temp\q0ebafpb.jax\x64\m1.exe => No File FirewallRules: [{B1EA7B2A-750B-48C0-9A89-6C4AE7A5F7EA}] => (Allow) C:\Users\User\AppData\Local\Temp\q0ebafpb.jax\dcore.exe (Microsoft) [File not signed] FirewallRules: [{169E9536-B63D-4DA2-80DA-B9B10F88622E}] => (Allow) C:\Users\User\AppData\Local\Temp\q0ebafpb.jax\x86\c1.exe => No File FirewallRules: [{71961F1F-5544-41BD-A3A2-606597788A61}] => (Allow) C:\Users\User\AppData\Local\Temp\q0ebafpb.jax\x64\c1.exe => No File FirewallRules: [{511F87F0-6400-41D5-8A97-4731038F70BD}] => (Allow) C:\Users\User\AppData\Local\Temp\q0ebafpb.jax\x86\m1.exe => No File FirewallRules: [{423350B7-4834-4AC4-ABA1-FA968FE251CA}] => (Allow) C:\Users\User\AppData\Local\Temp\vxmec5qt.lbe\x86\c1.exe => No File FirewallRules: [{E345F5D7-7FB3-4DA9-9D07-B372C303FCDD}] => (Allow) C:\Users\User\AppData\Local\Temp\vxmec5qt.lbe\x64\c1.exe => No File FirewallRules: [{11FF0B6C-DD5F-468F-8ADD-5834F898B59E}] => (Allow) C:\Users\User\AppData\Local\Temp\vxmec5qt.lbe\dcore.exe (Microsoft) [File not signed] FirewallRules: [{EAAA1FD9-8857-45FC-A238-33ED30014D26}] => (Allow) C:\Users\User\AppData\Local\Temp\vxmec5qt.lbe\x86\m1.exe => No File FirewallRules: [{82C8FAC3-3092-4FA7-A745-CDD2B4183E11}] => (Allow) C:\Users\User\AppData\Local\Temp\vxmec5qt.lbe\x64\m1.exe => No File FirewallRules: [{BC98B03F-4538-4B57-A8A2-276F51651EB9}] => (Allow) C:\Users\User\AppData\Local\Temp\ipttu0jt.cbz\x64\m1.exe => No File FirewallRules: [{4B7B5B4B-000A-4AB5-B679-D5835AFBB9E3}] => (Allow) C:\Users\User\AppData\Local\Temp\ipttu0jt.cbz\x86\c1.exe => No File FirewallRules: [{3618F3D9-8D22-4AAC-8C0D-FA3D5837615B}] => (Allow) C:\Users\User\AppData\Local\Temp\ipttu0jt.cbz\dcore.exe (Microsoft) [File not signed] FirewallRules: [{731EF5EF-C778-415C-B754-E563660CBCC7}] => (Allow) C:\Users\User\AppData\Local\Temp\ipttu0jt.cbz\x64\c1.exe => No File FirewallRules: [{B8E3DC06-1ACF-4865-9749-0334320417CE}] => (Allow) C:\Users\User\AppData\Local\Temp\ipttu0jt.cbz\x86\m1.exe => No File FirewallRules: [{D2674537-3F78-4072-824D-2524BA24A94C}] => (Allow) C:\Users\User\AppData\Local\Temp\dybi3que.arx\x86\c1.exe => No File FirewallRules: [{CD5FCF4D-BB72-4D27-ABF5-AECBC883572A}] => (Allow) C:\Users\User\AppData\Local\Temp\dybi3que.arx\x64\c1.exe => No File FirewallRules: [{9F07F7D3-D24F-4B76-A577-8A5728658F25}] => (Allow) C:\Users\User\AppData\Local\Temp\dybi3que.arx\dcore.exe (Microsoft) [File not signed] FirewallRules: [{F7E106FD-5D1C-4E3E-B2B1-D0DB64EB7821}] => (Allow) C:\Users\User\AppData\Local\Temp\dybi3que.arx\x64\m1.exe => No File FirewallRules: [{5957D980-0A23-48EB-A7C8-78697797C3B5}] => (Allow) C:\Users\User\AppData\Local\Temp\dybi3que.arx\x86\m1.exe => No File FirewallRules: [{93C8329A-F2B0-42F4-BBD4-77EA6C74C8AD}] => (Allow) C:\Users\User\AppData\Local\Temp\cblsir2f.5lc\x64\c1.exe => No File FirewallRules: [{04B23A6B-C42E-47C4-9C98-430B34425D3E}] => (Allow) C:\Users\User\AppData\Local\Temp\cblsir2f.5lc\x64\m1.exe => No File FirewallRules: [{98EC8834-9593-4B53-8827-F0424BFBC995}] => (Allow) C:\Users\User\AppData\Local\Temp\cblsir2f.5lc\dcore.exe (Microsoft) [File not signed] FirewallRules: [{7196D312-4026-4CAF-A650-F631A362D9E3}] => (Allow) C:\Users\User\AppData\Local\Temp\cblsir2f.5lc\x86\m1.exe => No File FirewallRules: [{DD2F4D0D-04BE-461D-B1D9-BAE509EE0FEA}] => (Allow) C:\Users\User\AppData\Local\Temp\cblsir2f.5lc\x86\c1.exe => No File FirewallRules: [{79762D0E-2DAA-438D-9043-A9802C4EBA26}] => (Allow) C:\Users\User\AppData\Local\Temp\diq4yotv.syn\x86\c1.exe => No File FirewallRules: [{9A02442E-B41E-49DE-87EC-C027BA649014}] => (Allow) C:\Users\User\AppData\Local\Temp\diq4yotv.syn\dcore.exe (Microsoft) [File not signed] FirewallRules: [{02EAB69B-34BD-4D1E-B88F-D0858AC6408F}] => (Allow) C:\Users\User\AppData\Local\Temp\diq4yotv.syn\x64\c1.exe => No File FirewallRules: [{D926C8FD-A3DD-466C-9EB0-F2E6CD865BC3}] => (Allow) C:\Users\User\AppData\Local\Temp\diq4yotv.syn\x86\m1.exe => No File FirewallRules: [{B694D81D-F78F-4E9B-B2CD-A36D13F951E3}] => (Allow) C:\Users\User\AppData\Local\Temp\diq4yotv.syn\x64\m1.exe => No File FirewallRules: [{00E833ED-F7C8-47D0-8888-44A960D8259A}] => (Allow) C:\Users\User\AppData\Local\Temp\lmrc5hsk.lec\x64\c1.exe => No File FirewallRules: [{E0E8F12F-4974-40A6-96AC-7A8D1362B0F5}] => (Allow) C:\Users\User\AppData\Local\Temp\lmrc5hsk.lec\x86\m1.exe => No File FirewallRules: [{51E755FF-30FC-4186-A8FB-1A1A6A0BEC15}] => (Allow) C:\Users\User\AppData\Local\Temp\lmrc5hsk.lec\x64\m1.exe => No File FirewallRules: [{24BC2822-0E5C-4797-8B1E-17252CDDD5D3}] => (Allow) C:\Users\User\AppData\Local\Temp\lmrc5hsk.lec\x86\c1.exe => No File FirewallRules: [{C57310BA-1648-4292-AF40-2A97DE2C5A0C}] => (Allow) C:\Users\User\AppData\Local\Temp\lmrc5hsk.lec\dcore.exe => No File FirewallRules: [{F8470388-015F-4D77-ACFB-1C4B5FFD6B89}] => (Allow) C:\Users\User\AppData\Local\Temp\omip1fqn.oaa\x64\c1.exe => No File FirewallRules: [{C919353B-E7CA-4F9B-AA03-F135F31AFA14}] => (Allow) C:\Users\User\AppData\Local\Temp\omip1fqn.oaa\x86\m1.exe => No File FirewallRules: [{81BCE497-E3CF-485A-AEA5-44041DBAF28E}] => (Allow) C:\Users\User\AppData\Local\Temp\omip1fqn.oaa\x64\m1.exe => No File FirewallRules: [{641151CD-FD8D-4883-A48E-471EAE5EA98C}] => (Allow) C:\Users\User\AppData\Local\Temp\omip1fqn.oaa\dcore.exe (Microsoft) [File not signed] FirewallRules: [{25E0D8D1-B46A-4EAA-AF00-B1CCC9CAD310}] => (Allow) C:\Users\User\AppData\Local\Temp\omip1fqn.oaa\x86\c1.exe => No File FirewallRules: [{7BEECA6B-67E2-4184-A37E-CE4A006C3AE6}] => (Allow) C:\Users\User\AppData\Local\Temp\z2indryc.jho\x86\c1.exe => No File FirewallRules: [{616DBA21-A2E1-4976-9A67-2845CBA0FEE9}] => (Allow) C:\Users\User\AppData\Local\Temp\z2indryc.jho\dcore.exe (Microsoft) [File not signed] FirewallRules: [{8CF49AD7-845C-4412-B12D-F01400C3BA7E}] => (Allow) C:\Users\User\AppData\Local\Temp\z2indryc.jho\x86\m1.exe => No File FirewallRules: [{50C24CB4-16FF-4BDA-866F-C50FF44B7947}] => (Allow) C:\Users\User\AppData\Local\Temp\z2indryc.jho\x64\m1.exe => No File FirewallRules: [{8FFA31A0-6E43-4672-B1D9-07F65E0A3B32}] => (Allow) C:\Users\User\AppData\Local\Temp\z2indryc.jho\x64\c1.exe => No File FirewallRules: [{47EEF773-38A0-497B-9E02-E42B06502E69}] => (Allow) C:\Users\User\AppData\Local\Temp\cohj0n0d.d2u\x86\m1.exe => No File FirewallRules: [{32F1C61B-8239-44B2-9670-A6FC2D07FB54}] => (Allow) C:\Users\User\AppData\Local\Temp\cohj0n0d.d2u\x64\c1.exe => No File FirewallRules: [{6C8E9361-4EE9-4CEC-962B-6CBAD01303CB}] => (Allow) C:\Users\User\AppData\Local\Temp\cohj0n0d.d2u\x86\c1.exe => No File FirewallRules: [{F2A894A7-5365-40A6-A206-6F8F83DFBAC4}] => (Allow) C:\Users\User\AppData\Local\Temp\cohj0n0d.d2u\x64\m1.exe => No File FirewallRules: [{69B4553B-010A-4FE2-BCA0-CE12205F74E0}] => (Allow) C:\Users\User\AppData\Local\Temp\cohj0n0d.d2u\dcore.exe (Microsoft) [File not signed] FirewallRules: [{AB63922B-A45E-47FC-9772-495E4FF07AF4}] => (Allow) C:\Users\User\AppData\Local\Temp\ql50hq22.lkt\dcore.exe => No File FirewallRules: [{4B267BB1-BB1A-4091-8C20-B1DECDF5F3A1}] => (Allow) C:\Users\User\AppData\Local\Temp\ql50hq22.lkt\x64\m1.exe => No File FirewallRules: [{338189CD-979B-4744-8A07-0788B049CD58}] => (Allow) C:\Users\User\AppData\Local\Temp\ql50hq22.lkt\x86\c1.exe => No File FirewallRules: [{397FBB0B-196C-45C7-AF7B-2463954CFCA3}] => (Allow) C:\Users\User\AppData\Local\Temp\ql50hq22.lkt\x86\m1.exe => No File FirewallRules: [{B7795366-C751-4049-A94A-46D125BA0DED}] => (Allow) C:\Users\User\AppData\Local\Temp\ql50hq22.lkt\x64\c1.exe => No File FirewallRules: [{BF92A67D-E693-4299-A9CB-D27BCB5346B6}] => (Allow) C:\Users\User\AppData\Local\Temp\t4ys2rea.250\x64\c1.exe => No File FirewallRules: [{90BD8B91-812A-4AFF-9746-957BCA596BF1}] => (Allow) C:\Users\User\AppData\Local\Temp\t4ys2rea.250\x64\m1.exe => No File FirewallRules: [{04D27F47-D1F4-44B9-AF41-D6CF74B8DFD7}] => (Allow) C:\Users\User\AppData\Local\Temp\t4ys2rea.250\dcore.exe (Microsoft) [File not signed] FirewallRules: [{99640066-9780-4EC9-916E-666CCD3A70EB}] => (Allow) C:\Users\User\AppData\Local\Temp\t4ys2rea.250\x86\c1.exe => No File FirewallRules: [{BCF3F2B7-04A8-4E0D-A049-9AD5B32333F9}] => (Allow) C:\Users\User\AppData\Local\Temp\t4ys2rea.250\x86\m1.exe => No File C:\Users\User\AppData\Local\Temp\t4ys2rea.250 C:\Users\User\AppData\Local\Temp\ql50hq22.lkt C:\Users\User\AppData\Local\Temp\cohj0n0d.d2u C:\Users\User\AppData\Local\Temp\z2indryc.jho C:\Users\User\AppData\Local\Temp\omip1fqn.oaa C:\Users\User\AppData\Local\Temp\lmrc5hsk.lec C:\Users\User\AppData\Local\Temp\diq4yotv.syn C:\Users\User\AppData\Local\Temp\cblsir2f.5lc C:\Users\User\AppData\Local\Temp\dybi3que.arx C:\Users\User\AppData\Local\Temp\ipttu0jt.cbz C:\Users\User\AppData\Local\Temp\vxmec5qt.lbe C:\Users\User\AppData\Local\Temp\q0ebafpb.jax C:\Users\User\AppData\Local\Temp\qu5qa3yj.5q0 C:\Users\User\AppData\Local\Temp\nknkomxt.gwx C:\Users\User\AppData\Local\Temp\wpfh4g2b.bmo C:\Users\User\AppData\Local\Temp\1dollogj.axr C:\Users\User\AppData\Local\Temp\crepvpa5.qwl C:\Users\User\AppData\Local\Temp\ysunqcie.pig C:\Users\User\AppData\Local\Temp\ncl5dxpq.cxz C:\Users\User\AppData\Local\Temp\ecxob0ci.mdk C:\Users\User\AppData\Local\Temp\tcq4vc1r.cix C:\Users\User\AppData\Local\Temp\ay2wpxng.fef C:\Users\User\AppData\Local\Temp\si554sfe.sqk C:\Users\User\AppData\Local\Temp\0oqmfcx5.rzf C:\Users\User\AppData\Local\Temp\lkky40hp.4h1 C:\Users\User\AppData\Local\Temp\1sgpsg1v.ydc C:\Users\User\AppData\Local\Temp\e1xksf0w.1bb C:\Users\User\AppData\Local\Temp\tha3axpc.gky C:\Users\User\AppData\Local\Temp\v3cb500r.rlv C:\Users\User\AppData\Local\Temp\w5v5jhmn.hz2 C:\Users\User\AppData\Local\Temp\lppwrk5y.xxe C:\Users\User\AppData\Local\Temp\msrjonob.50g C:\Users\User\AppData\Local\Temp\1y3u3sfe.nkj C:\Users\User\AppData\Local\Temp\11vs0kzz.im3 C:\Users\User\AppData\Local\Temp\e4x34kbr.on1 C:\Users\User\AppData\Local\Temp\vjmhbs2l.kzn C:\Users\User\AppData\Local\Temp\aucxsap4.xkz C:\Users\User\AppData\Local\Temp\rxfwljo0.htm C:\Users\User\AppData\Local\Temp\ullg5ieu.sga C:\Users\User\AppData\Local\Temp\rx0r3cxl.lel Reboot: End::
3. Запустите Farbar Recovery Scan Tool.
4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.
- Обратите внимание: будет выполнена перезагрузка компьютера.
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Прикладываю фикслог.
Что с проблемой?
Microsoft MVP 2012-2016 Consumer Security
Microsoft MVP 2016 ReconnectАнтивирусная помощь
Ваши права в разделе
Ответить с цитированием
