Trojan:Win64/DisguisedXMRigMiner помогите удалить (FRST установил, но не знаю что включать в фикс)

[APOLLO]

По работе пришлось установить на комп Визио, но цепанул Trojan:Win64/DisguisedXMRigMiner

На форумах посоветовали через Фабар сделать скан, но что загружать в фикс я не знаю

FRST и Addition.rar

[Mark D. Pearlstone]

Порядок оформления запроса о помощи

[APOLLO]

Не нашел как редактировать тему

Постарался создать новую

[Mark D. Pearlstone]

Продолжайте тут. Внимательно прочитайте по ссылке выше, что требуется выполнить и прикрепить.

[APOLLO]

Trojan:Win64/DisguisedXMRigMiner - был выявлен, но я не знаю как удалить и очистить от этой программы ПК

 

 

 

 

CollectionLog-2024.05.26-20.37.zip

[thyrex]

1. Выделите следующий код и скопируйте в буфер обмена (правая кнопка мыши – Копировать)

Start::
CreateRestorePoint:
HKU\S-1-5-21-1580389930-2446448498-3213482018-1001\...\Run: [GameCenter] => "C:\Users\noobm\AppData\Local\GameCenter\GameCenter.exe" -autostart (Нет файла)
HKU\S-1-5-21-1580389930-2446448498-3213482018-1001\...\Run: [Viewndow] => C:\Users\noobm\AppData\Local\Programs\Viewndow\Viewndow.exe (Нет файла)
Task: {11E95189-F3EA-4B30-81B2-EBB23605E007} - System32\Tasks\Browserupdphenix => %LOCALAPPDATA%\Browserupdphenix\Browserupdphenix.exe  -> %LOCALAPPDATA%\Browserupdphenix\--s=D37B8C83E2286A299EA06499BBE8B307FEF9D0EFC05127E3ECD8D8B190DDE6ED9603055109AEF367F6CD12E7FA --id=1 --sub-id=558 <==== ВНИМАНИЕ
Task: {1FEB7DB8-06CB-439C-8BBD-F99F1F0D45FC} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1580389930-2446448498-3213482018-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Нет файла)
S3 VBAudioVMAUXVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmauxvaio64_win10.sys [X]
S3 VBAudioVMVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmvaio64_win10.sys [X]
CustomCLSID: HKU\S-1-5-21-1580389930-2446448498-3213482018-1001_Classes\CLSID\{52198ba3-aef2-4fea-a304-b2b2edc7cdb1}\localserver32 -> "C:\Program Files\TechSmith\Camtasia 2022\CamtasiaStudio.exe" -ToastActivated => Нет файла
AlternateDataStreams: C:\Users\noobm\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\noobm\Application Data:03febd35b92b3fd6bae1a449c3baa293 [394]
AlternateDataStreams: C:\Users\noobm\Application Data:671890e017d8a4fb26004192461213ff [394]
AlternateDataStreams: C:\Users\noobm\Application Data:d0353b486a0f166ba47ab293d0b1004e [394]
AlternateDataStreams: C:\Users\noobm\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\noobm\AppData\Roaming:03febd35b92b3fd6bae1a449c3baa293 [394]
AlternateDataStreams: C:\Users\noobm\AppData\Roaming:671890e017d8a4fb26004192461213ff [394]
AlternateDataStreams: C:\Users\noobm\AppData\Roaming:d0353b486a0f166ba47ab293d0b1004e [394]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4540]
FirewallRules: [{D8C6B680-7A72-42F5-AAEC-0C9271EB2848}] => (Allow) D:\Origin\Titanfall2\Titanfall2.exe => Нет файла
FirewallRules: [{1F668B41-F371-4B6C-A9A8-E0DFA25EBEE6}] => (Allow) D:\Origin\Titanfall2\Titanfall2.exe => Нет файла
FirewallRules: [{5B4AAB43-9691-4DB9-83E3-2E8905E31994}] => (Allow) D:\Origin\Titanfall2\Titanfall2_trial.exe => Нет файла
FirewallRules: [{BBC52194-2F7F-4355-9D9E-87B9263B1400}] => (Allow) D:\Origin\Titanfall2\Titanfall2_trial.exe => Нет файла
FirewallRules: [{6D916CBB-02C8-40AD-88D1-5E79FFE65452}] => (Allow) D:\Warframe\Downloaded\Tools\Launcher.exe => Нет файла
FirewallRules: [{1C0BA9D5-BD6B-4353-A6C5-E0D51D9B834E}] => (Allow) D:\Warframe\Downloaded\Warframe.x64.exe => Нет файла
FirewallRules: [{566D8CA6-C641-43DA-A9E2-C864EFF48443}] => (Allow) D:\Warframe\Downloaded\Warframe.x64.exe => Нет файла
FirewallRules: [{E2535ED1-27DC-4D56-BE44-B4794A23076D}] => (Allow) D:\Warframe\Downloaded\Tools\RemoteCrashSender.exe => Нет файла
FirewallRules: [{B06D6E59-F081-47F3-8D7B-ABD2193995B2}] => (Allow) D:\Warframe\Downloaded\Tools\Launcher.exe => Нет файла
FirewallRules: [{21342E91-D2AA-40CB-BCB8-CE1A539158BC}] => (Allow) D:\Warframe\Downloaded\Warframe.x64.exe => Нет файла
FirewallRules: [{C6AA1530-43B0-4288-808E-BCF3B1CE8B09}] => (Allow) D:\Warframe\Downloaded\Warframe.x64.exe => Нет файла
FirewallRules: [{6C5EE705-2C93-4E81-8008-A691EDDF62E3}] => (Allow) D:\Warframe\Downloaded\Tools\RemoteCrashSender.exe => Нет файла
FirewallRules: [{DBE09DAB-2E84-4704-9303-99D6DD65991A}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe => Нет файла
FirewallRules: [{544E5524-4AA2-4C2A-AA31-779EEDA3D88D}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => Нет файла
FirewallRules: [{22551234-6C5B-4905-AFE4-11779269F5A7}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe => Нет файла
FirewallRules: [{34CC9BB0-CC63-421A-9B4A-74B751015FCC}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => Нет файла
FirewallRules: [{4F45DB31-F91B-4ADC-B101-FEAADB7B6E0F}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => Нет файла
FirewallRules: [{6944290D-B74B-4A9C-B2FD-8042566B4C00}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => Нет файла
FirewallRules: [{C8750CFA-73F4-43F9-AE77-9E75D8710300}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => Нет файла
FirewallRules: [TCP Query User{E7B5C22D-E23D-4A87-BB80-21E752440A0A}D:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe] => (Allow) D:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe => Нет файла
FirewallRules: [UDP Query User{CD5616FB-0627-49EA-9C2D-DA6F6BDD1BE0}D:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe] => (Allow) D:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe => Нет файла
FirewallRules: [TCP Query User{679CBA6E-0A1D-4FD0-93CD-27EBAB439E41}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Нет файла
FirewallRules: [UDP Query User{AFDA7D52-6E9A-4EB3-A6A8-A5512BE73314}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Нет файла
FirewallRules: [TCP Query User{8F6FBF32-5574-4145-86D9-A748412FF967}D:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Нет файла
FirewallRules: [UDP Query User{0735BC10-9078-4B56-AC9C-A938F62930AB}D:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Нет файла
FirewallRules: [TCP Query User{6D373ED4-E61F-43B1-88E3-7EE2C754A440}D:\steamlibrary\steamapps\common\forzahorizon4\forzahorizon4.exe] => (Allow) D:\steamlibrary\steamapps\common\forzahorizon4\forzahorizon4.exe => Нет файла
FirewallRules: [UDP Query User{A35EA79E-E091-4454-B4D8-08CDBE68159B}D:\steamlibrary\steamapps\common\forzahorizon4\forzahorizon4.exe] => (Allow) D:\steamlibrary\steamapps\common\forzahorizon4\forzahorizon4.exe => Нет файла
FirewallRules: [TCP Query User{31768F66-6704-47DA-8B3D-CC4A9B950C09}D:\forhonor\forhonor.exe] => (Allow) D:\forhonor\forhonor.exe => Нет файла
FirewallRules: [UDP Query User{B34CD927-95D3-4867-B9AA-BB5B0D4EFA6B}D:\forhonor\forhonor.exe] => (Allow) D:\forhonor\forhonor.exe => Нет файла
FirewallRules: [TCP Query User{254FB373-AB66-44FF-B5EB-4BEE276E4D41}C:\users\noobm\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\noobm\appdata\local\gamecenter\gamecenter.exe => Нет файла
FirewallRules: [UDP Query User{CF889E34-C44C-4CE7-900C-8C6A11D92B63}C:\users\noobm\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\noobm\appdata\local\gamecenter\gamecenter.exe => Нет файла
FirewallRules: [TCP Query User{4E0F0F2A-6E8B-4C1F-9720-7DF9C4FDCB4D}D:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe => Нет файла
FirewallRules: [UDP Query User{888FA3EF-8DE2-42C6-A37B-234AE67CAB14}D:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe => Нет файла
FirewallRules: [TCP Query User{F1AEB17C-080A-4BC5-A01E-7253621A3CD7}C:\users\noobm\appdata\local\temp\scoped_dir5132_1366883372\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir5132_1366883372\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe => Нет файла
FirewallRules: [UDP Query User{7715E349-A302-4C6C-866E-A776682E5FB6}C:\users\noobm\appdata\local\temp\scoped_dir5132_1366883372\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir5132_1366883372\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe => Нет файла
FirewallRules: [TCP Query User{2DAA1837-81C0-405B-8887-417C7E9C28BA}C:\users\noobm\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe => Нет файла
FirewallRules: [UDP Query User{69FFFF0F-E9D5-49CC-A497-4C2571C3DB07}C:\users\noobm\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2545_gtaprocess.exe => Нет файла
FirewallRules: [TCP Query User{346F7520-5072-417B-90BC-EFC7701F455E}D:\новая папка (2)\ubisoft game launcher\games\tom clancy's ghost recon wildlands\grw.exe] => (Allow) D:\новая папка (2)\ubisoft game launcher\games\tom clancy's ghost recon wildlands\grw.exe => Нет файла
FirewallRules: [UDP Query User{D31E8426-D1B9-4AB7-82B7-E30801FB1434}D:\новая папка (2)\ubisoft game launcher\games\tom clancy's ghost recon wildlands\grw.exe] => (Allow) D:\новая папка (2)\ubisoft game launcher\games\tom clancy's ghost recon wildlands\grw.exe => Нет файла
FirewallRules: [TCP Query User{18EC1B3E-C1B9-4876-BAFF-6F6C5D2B9CF7}C:\users\noobm\appdata\local\temp\scoped_dir10588_1845866068\redm.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir10588_1845866068\redm.exe => Нет файла
FirewallRules: [UDP Query User{7E1F7460-4FB8-46A4-B353-DB6FD2FCE477}C:\users\noobm\appdata\local\temp\scoped_dir10588_1845866068\redm.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir10588_1845866068\redm.exe => Нет файла
FirewallRules: [TCP Query User{97A0A172-CC3A-43FE-BEF1-C9FCF8489840}C:\users\noobm\appdata\local\temp\scoped_dir10588_276445491\redm.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir10588_276445491\redm.exe => Нет файла
FirewallRules: [UDP Query User{7243C342-EFE3-41D2-AB71-ACDE55D4B3F8}C:\users\noobm\appdata\local\temp\scoped_dir10588_276445491\redm.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir10588_276445491\redm.exe => Нет файла
FirewallRules: [TCP Query User{2230FFFE-3898-46BB-9837-7218214C18F3}C:\users\noobm\appdata\local\redm\redm.app\data\cache\subprocess\redm_b1436_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\redm\redm.app\data\cache\subprocess\redm_b1436_gtaprocess.exe => Нет файла
FirewallRules: [UDP Query User{FD9A89FC-99E4-4C50-AA47-089FB664832E}C:\users\noobm\appdata\local\redm\redm.app\data\cache\subprocess\redm_b1436_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\redm\redm.app\data\cache\subprocess\redm_b1436_gtaprocess.exe => Нет файла
FirewallRules: [TCP Query User{D56BF8F3-FB7E-4A0F-BE08-1DC2AB57E784}D:\epic games\epic games\roguecompany\roguecompany\binaries\win64\roguecompany.exe] => (Allow) D:\epic games\epic games\roguecompany\roguecompany\binaries\win64\roguecompany.exe => Нет файла
FirewallRules: [UDP Query User{97A0E322-E1B7-4971-8F71-CC2B0A1B028F}D:\epic games\epic games\roguecompany\roguecompany\binaries\win64\roguecompany.exe] => (Allow) D:\epic games\epic games\roguecompany\roguecompany\binaries\win64\roguecompany.exe => Нет файла
FirewallRules: [TCP Query User{D163F4C0-1E8A-4266-884A-A0626437AF53}D:\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\call of duty modern warfare\modernwarfare.exe => Нет файла
FirewallRules: [UDP Query User{D374ED63-961C-4CD8-A9E6-A4187D36D016}D:\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\call of duty modern warfare\modernwarfare.exe => Нет файла
FirewallRules: [{14C6B7BE-2D04-4214-92FA-813E04302093}] => (Allow) C:\Users\noobm\AppData\Roaming\uTorrent\uTorrent.exe => Нет файла
FirewallRules: [{D81C3EF7-D04C-48C6-8F44-0E332BE79872}] => (Allow) C:\Users\noobm\AppData\Roaming\uTorrent\uTorrent.exe => Нет файла
FirewallRules: [TCP Query User{7B2FDE45-D4EB-407A-B314-0246AD2A02ED}C:\users\noobm\appdata\local\programs\sirus-open-launcher\resources\app.asar.unpacked\node_modules\@sirussu\torrent-downloader\vendor\td-win-x64\td-win-x64.exe] => (Allow) C:\users\noobm\appdata\local\programs\sirus-open-launcher\resources\app.asar.unpacked\node_modules\@sirussu\torrent-downloader\vendor\td-win-x64\td-win-x64.exe => Нет файла
FirewallRules: [UDP Query User{E60EF5CF-BE58-4419-A197-B00911687560}C:\users\noobm\appdata\local\programs\sirus-open-launcher\resources\app.asar.unpacked\node_modules\@sirussu\torrent-downloader\vendor\td-win-x64\td-win-x64.exe] => (Allow) C:\users\noobm\appdata\local\programs\sirus-open-launcher\resources\app.asar.unpacked\node_modules\@sirussu\torrent-downloader\vendor\td-win-x64\td-win-x64.exe => Нет файла
FirewallRules: [TCP Query User{9805EC66-1E46-4807-BEE6-F58B348AC524}D:\steamlibrary\steamapps\common\naruto to boruto\naruto\binaries\win64\naruto-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\naruto to boruto\naruto\binaries\win64\naruto-win64-shipping.exe => Нет файла
FirewallRules: [UDP Query User{1BA111C8-D17F-43DC-A4A0-7A9F2DE3231A}D:\steamlibrary\steamapps\common\naruto to boruto\naruto\binaries\win64\naruto-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\naruto to boruto\naruto\binaries\win64\naruto-win64-shipping.exe => Нет файла
FirewallRules: [{BF7DF6DF-6257-4F18-96E2-6156801FF936}] => (Allow) D:\SteamLibrary\steamapps\common\Tower of Fantasy\Tower of Fantasy\Hotta\Binaries\Win64\INTLWebViewHelper.exe => Нет файла
FirewallRules: [{29EAB998-4D91-4C46-A2FC-C82A822292E5}] => (Allow) D:\SteamLibrary\steamapps\common\Grand Theft Auto IV\GTAIV\PlayGTAIV.exe => Нет файла
FirewallRules: [{F6588ECF-1578-4803-81E3-BFF021D75D2F}] => (Allow) D:\SteamLibrary\steamapps\common\Grand Theft Auto IV\GTAIV\PlayGTAIV.exe => Нет файла
FirewallRules: [TCP Query User{0F01697D-C4FB-454B-A939-E72D3A5337FE}D:\ready or not\ready or not\ready.or.not.build.08122022-ofme\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe] => (Allow) D:\ready or not\ready or not\ready.or.not.build.08122022-ofme\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe => Нет файла
FirewallRules: [UDP Query User{6279F4EF-8E1B-402F-91E6-D68CBB07EEB8}D:\ready or not\ready or not\ready.or.not.build.08122022-ofme\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe] => (Allow) D:\ready or not\ready or not\ready.or.not.build.08122022-ofme\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe => Нет файла
FirewallRules: [TCP Query User{FC4E7539-4154-4E4F-87D8-3FB692F615B3}D:\dead island definitive collection\dirde\dead.island.riptide.definitive.edition.v1.1.2-ofme\dead island riptide definitive edition\deadislandriptidegame.exe] => (Allow) D:\dead island definitive collection\dirde\dead.island.riptide.definitive.edition.v1.1.2-ofme\dead island riptide definitive edition\deadislandriptidegame.exe => Нет файла
FirewallRules: [UDP Query User{E6A0D46A-77B0-469E-820C-A89265F18B7F}D:\dead island definitive collection\dirde\dead.island.riptide.definitive.edition.v1.1.2-ofme\dead island riptide definitive edition\deadislandriptidegame.exe] => (Allow) D:\dead island definitive collection\dirde\dead.island.riptide.definitive.edition.v1.1.2-ofme\dead island riptide definitive edition\deadislandriptidegame.exe => Нет файла
FirewallRules: [{E88BF48C-485A-4D3F-AC6D-A28311F651AD}] => (Allow) D:\SteamLibrary\steamapps\common\SYNCED Playtest\Launcher\sop_launcher.exe => Нет файла
FirewallRules: [{019F14FD-33D0-48C8-B96E-2E0BDBC9BF44}] => (Allow) D:\SteamLibrary\steamapps\common\SYNCED Playtest\Launcher\sop_launcher.exe => Нет файла
FirewallRules: [TCP Query User{C1C70673-6613-4062-8396-719CE2908BF4}D:\wow shd\world of warcraft\_retail_\utils\wowvoiceproxy.exe] => (Allow) D:\wow shd\world of warcraft\_retail_\utils\wowvoiceproxy.exe => Нет файла
FirewallRules: [UDP Query User{ABD607FC-0F10-451B-BF69-D38C356BD8EC}D:\wow shd\world of warcraft\_retail_\utils\wowvoiceproxy.exe] => (Allow) D:\wow shd\world of warcraft\_retail_\utils\wowvoiceproxy.exe => Нет файла
FirewallRules: [TCP Query User{D5399E84-81CD-4B85-B931-2CCBAE90F3AE}D:\steamlibrary\steamapps\common\call of duty hq\sp22\sp22-cod.exe] => (Allow) D:\steamlibrary\steamapps\common\call of duty hq\sp22\sp22-cod.exe => Нет файла
FirewallRules: [UDP Query User{98C8D081-E265-4B7E-B656-A3F6E91F3A1C}D:\steamlibrary\steamapps\common\call of duty hq\sp22\sp22-cod.exe] => (Allow) D:\steamlibrary\steamapps\common\call of duty hq\sp22\sp22-cod.exe => Нет файла
FirewallRules: [TCP Query User{E4670502-C15A-4C2F-9186-D1B63FD7E5DC}C:\users\noobm\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\noobm\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => Нет файла
FirewallRules: [UDP Query User{3E86DDC8-E6F2-4474-80C0-C94F5AAE304E}C:\users\noobm\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe] => (Allow) C:\users\noobm\appdata\roaming\.tlauncher\jvms\jre1.8.0_281\bin\javaw.exe => Нет файла
FirewallRules: [TCP Query User{07142D54-8670-4E02-901C-7A803D9C03DD}C:\users\noobm\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\noobm\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe => Нет файла
FirewallRules: [UDP Query User{2FEB7A50-73BB-48E9-8418-F91ABCB45039}C:\users\noobm\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\noobm\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe => Нет файла
FirewallRules: [{C099D9BC-F949-4F83-AB0A-06F1DAD76702}] => (Block) C:\users\noobm\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe => Нет файла
FirewallRules: [{53DE1425-DBD0-47AF-BC6A-7780ED02359E}] => (Block) C:\users\noobm\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe => Нет файла
FirewallRules: [{93107539-A0E9-467D-932A-7ED1425332F1}] => (Allow) D:\SteamLibrary\steamapps\common\VX\VeiledExperts\Binaries\Win64\VeiledExperts-Win64-Shipping.exe => Нет файла
FirewallRules: [{9DC60CD7-9ECE-4D33-90A5-9C3B903F1849}] => (Allow) D:\SteamLibrary\steamapps\common\VX\VeiledExperts\Binaries\Win64\VeiledExperts-Win64-Shipping.exe => Нет файла
FirewallRules: [TCP Query User{95D29865-29A4-4091-B77A-428F2CD3D209}C:\users\noobm\appdata\local\faceit\app-1.31.16\faceit.exe] => (Allow) C:\users\noobm\appdata\local\faceit\app-1.31.16\faceit.exe => Нет файла
FirewallRules: [UDP Query User{BD03056D-2951-4679-9354-5F74FD27D30F}C:\users\noobm\appdata\local\faceit\app-1.31.16\faceit.exe] => (Allow) C:\users\noobm\appdata\local\faceit\app-1.31.16\faceit.exe => Нет файла
FirewallRules: [TCP Query User{ABE92510-0DBD-4E89-98D0-06D6D3AA3A04}D:\steamlibrary\steamapps\common\3on3 freestyle rebound\doubleclutch\binaries\win64\doubleclutch-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\3on3 freestyle rebound\doubleclutch\binaries\win64\doubleclutch-win64-shipping.exe => Нет файла
FirewallRules: [UDP Query User{A1B2AA82-A95D-4767-96E6-ABD2CFC50973}D:\steamlibrary\steamapps\common\3on3 freestyle rebound\doubleclutch\binaries\win64\doubleclutch-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\3on3 freestyle rebound\doubleclutch\binaries\win64\doubleclutch-win64-shipping.exe => Нет файла
FirewallRules: [TCP Query User{9551372A-BE0C-4E4C-B573-F1248EC99813}C:\users\noobm\appdata\local\temp\scoped_dir12308_1489086769\redm.app\data\cache\subprocess\redm_b1491_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir12308_1489086769\redm.app\data\cache\subprocess\redm_b1491_gtaprocess.exe => Нет файла
FirewallRules: [UDP Query User{2F71D258-8DF2-4641-A30A-E8CDDD3DF3A2}C:\users\noobm\appdata\local\temp\scoped_dir12308_1489086769\redm.app\data\cache\subprocess\redm_b1491_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir12308_1489086769\redm.app\data\cache\subprocess\redm_b1491_gtaprocess.exe => Нет файла
FirewallRules: [TCP Query User{C55B5496-65CE-4C51-97E1-1F86E309CEAA}C:\users\noobm\appdata\local\temp\scoped_dir10992_1403773576\redm.app\data\cache\subprocess\redm_b1491_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir10992_1403773576\redm.app\data\cache\subprocess\redm_b1491_gtaprocess.exe => Нет файла
FirewallRules: [UDP Query User{99CC1FF8-2388-4BF8-B2A9-218B3F7213FF}C:\users\noobm\appdata\local\temp\scoped_dir10992_1403773576\redm.app\data\cache\subprocess\redm_b1491_gtaprocess.exe] => (Allow) C:\users\noobm\appdata\local\temp\scoped_dir10992_1403773576\redm.app\data\cache\subprocess\redm_b1491_gtaprocess.exe => Нет файла
FirewallRules: [{E86E33D0-B3B0-426C-9A57-13D039BA2A89}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.99.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Нет файла
FirewallRules: [{8CDBA358-288D-409F-9E36-EEE1253A27BD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.99.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Нет файла
FirewallRules: [{8E0C3BD5-F86E-425B-A72A-715B6827195C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.99.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Нет файла
FirewallRules: [{069A5C34-3C7B-42A2-9F39-67F3814468B2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.99.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Нет файла
FirewallRules: [TCP Query User{977CC82D-C887-4986-A075-5AE7B0B12B55}C:\users\noobm\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\noobm\appdata\local\programs\opera\opera.exe => Нет файла
FirewallRules: [UDP Query User{4959B2D3-BE2A-4B1D-B699-E2AD99E654F6}C:\users\noobm\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\noobm\appdata\local\programs\opera\opera.exe => Нет файла
FirewallRules: [TCP Query User{2F1DF6F7-400E-4D36-8B83-7D6E61B4A44F}D:\новая папка (2)\ubisoft game launcher\games\forhonor\forhonor.exe] => (Allow) D:\новая папка (2)\ubisoft game launcher\games\forhonor\forhonor.exe => Нет файла
FirewallRules: [UDP Query User{7FB7A07B-12F1-4494-B6AC-51B202011DC8}D:\новая папка (2)\ubisoft game launcher\games\forhonor\forhonor.exe] => (Allow) D:\новая папка (2)\ubisoft game launcher\games\forhonor\forhonor.exe => Нет файла
FirewallRules: [{B7C00358-7DE8-48A3-BF36-510E8CE18B46}] => (Allow) D:\SteamLibrary\steamapps\common\Overlewd\release\SteamWindows.exe => Нет файла
FirewallRules: [{7DD18A8B-7C99-4C99-9D72-C281154AEF78}] => (Allow) D:\SteamLibrary\steamapps\common\Overlewd\release\SteamWindows.exe => Нет файла
FirewallRules: [TCP Query User{034D0E5E-5A7B-4896-86AA-A18FFEFED1DD}C:\mmvcserversio\mmvcserversio\mmvcserversio.exe] => (Allow) C:\mmvcserversio\mmvcserversio\mmvcserversio.exe => Нет файла
FirewallRules: [UDP Query User{04AB13DD-AC3F-4780-BE89-580FD45A7F5F}C:\mmvcserversio\mmvcserversio\mmvcserversio.exe] => (Allow) C:\mmvcserversio\mmvcserversio\mmvcserversio.exe => Нет файла
FirewallRules: [{9A07A0AC-CC09-44BD-885D-818BDB8B2B74}] => (Allow) D:\SteamLibrary\steamapps\common\Call of Duty HQ\bootstrapper.exe => Нет файла
FirewallRules: [{35637341-D5AA-491F-9A3C-9236F5B98E89}] => (Allow) D:\SteamLibrary\steamapps\common\Call of Duty HQ\bootstrapper.exe => Нет файла
FirewallRules: [TCP Query User{CEF8DA93-8963-4DFA-B430-BA2A919A637C}D:\steamlibrary\steamapps\common\the finals playtest\discovery\binaries\win64\discovery.exe] => (Allow) D:\steamlibrary\steamapps\common\the finals playtest\discovery\binaries\win64\discovery.exe => Нет файла
FirewallRules: [UDP Query User{4DA3CD6A-9455-4665-903C-0E47FAC913AF}D:\steamlibrary\steamapps\common\the finals playtest\discovery\binaries\win64\discovery.exe] => (Allow) D:\steamlibrary\steamapps\common\the finals playtest\discovery\binaries\win64\discovery.exe => Нет файла
FirewallRules: [TCP Query User{1DFD7727-01D0-4CE7-ADA4-71F91AC6FD31}D:\steamlibrary\steamapps\common\call of duty hq\cod22\cod22-cod.exe] => (Allow) D:\steamlibrary\steamapps\common\call of duty hq\cod22\cod22-cod.exe => Нет файла
FirewallRules: [UDP Query User{1E1FB357-67A4-4559-90D8-D92FF516C64C}D:\steamlibrary\steamapps\common\call of duty hq\cod22\cod22-cod.exe] => (Allow) D:\steamlibrary\steamapps\common\call of duty hq\cod22\cod22-cod.exe => Нет файла
FirewallRules: [TCP Query User{2AA2E1F8-5573-4F38-815F-D56FA263B64D}D:\steamlibrary\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe] => (Block) D:\steamlibrary\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe => Нет файла
FirewallRules: [UDP Query User{3DCEE13B-3DE9-4B06-919C-83EFB5FF418C}D:\steamlibrary\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe] => (Block) D:\steamlibrary\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe => Нет файла
FirewallRules: [TCP Query User{1248D73B-5D8C-445C-B01F-C2B250CF5CC0}C:\users\noobm\appdata\local\programs\dolphin anty\dolphin anty.exe] => (Allow) C:\users\noobm\appdata\local\programs\dolphin anty\dolphin anty.exe => Нет файла
FirewallRules: [UDP Query User{A863CECC-5E28-4E75-B185-60EC906AD347}C:\users\noobm\appdata\local\programs\dolphin anty\dolphin anty.exe] => (Allow) C:\users\noobm\appdata\local\programs\dolphin anty\dolphin anty.exe => Нет файла
FirewallRules: [{F898AE1C-C82B-49FD-83E4-4A0011E67671}] => (Allow) D:\SteamLibrary\steamapps\common\Overlewd\release\SteamWindows.exe => Нет файла
FirewallRules: [{A6C8843E-A220-4826-8179-731461B2F7A0}] => (Allow) D:\SteamLibrary\steamapps\common\Overlewd\release\SteamWindows.exe => Нет файла
FirewallRules: [TCP Query User{C603B0A7-90F9-4B5A-8CC7-871D15D22593}D:\steamlibrary\steamapps\common\palserver\pal\binaries\win64\palserver-win64-test-cmd.exe] => (Allow) D:\steamlibrary\steamapps\common\palserver\pal\binaries\win64\palserver-win64-test-cmd.exe => Нет файла
FirewallRules: [UDP Query User{4A04C0AD-8F87-4CA1-8868-8A67E82B7B40}D:\steamlibrary\steamapps\common\palserver\pal\binaries\win64\palserver-win64-test-cmd.exe] => (Allow) D:\steamlibrary\steamapps\common\palserver\pal\binaries\win64\palserver-win64-test-cmd.exe => Нет файла
FirewallRules: [TCP Query User{494CD39A-D2DA-4F06-BA0B-1260059E1D52}D:\steamlibrary\steamapps\common\palworld\pal\binaries\win64\palworld-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\palworld\pal\binaries\win64\palworld-win64-shipping.exe => Нет файла
FirewallRules: [UDP Query User{3CBA3F38-CDFA-4EA6-9F3B-2CCA3412C5AB}D:\steamlibrary\steamapps\common\palworld\pal\binaries\win64\palworld-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\palworld\pal\binaries\win64\palworld-win64-shipping.exe => Нет файла
FirewallRules: [TCP Query User{C6552580-4BB1-4467-8C4B-7965D0CA9F0D}C:\program files (x86)\planetvpn\bin\xray\xray.exe] => (Allow) C:\program files (x86)\planetvpn\bin\xray\xray.exe => Нет файла
FirewallRules: [UDP Query User{4CF76431-E6C3-4253-B4DE-A2A34F4CBC53}C:\program files (x86)\planetvpn\bin\xray\xray.exe] => (Allow) C:\program files (x86)\planetvpn\bin\xray\xray.exe => Нет файла
FirewallRules: [{A8131F78-6D28-4983-898F-8B766F7D92C0}] => (Allow) D:\SteamLibrary\steamapps\common\Ghost Recon Breakpoint\GRB_vulkan.exe => Нет файла
FirewallRules: [{B18AC115-BEB2-4F6A-A8FB-E5B0EE828407}] => (Allow) D:\SteamLibrary\steamapps\common\Ghost Recon Breakpoint\GRB_vulkan.exe => Нет файла
FirewallRules: [{DA12FC7A-624A-442F-AAE3-0E800AC8EDB0}] => (Allow) D:\SteamLibrary\steamapps\common\Ghost Recon Breakpoint\GRB.exe => Нет файла
FirewallRules: [{C1AF1968-EEDF-41E8-9AEA-F50B3A7BC6CC}] => (Allow) D:\SteamLibrary\steamapps\common\Ghost Recon Breakpoint\GRB.exe => Нет файла
FirewallRules: [{9A3829CB-5B3B-49BE-9CD6-6472F1A3A9D4}] => (Allow) D:\SteamLibrary\steamapps\common\No Man's Sky\Binaries\NMS.exe => Нет файла
FirewallRules: [{1FB62FDB-3CA9-4EB8-B05B-5AEEED290AD5}] => (Allow) D:\SteamLibrary\steamapps\common\No Man's Sky\Binaries\NMS.exe => Нет файла
FirewallRules: [TCP Query User{46471665-77D1-4143-B0B6-E40C9D262BC6}C:\program files (x86)\steam\steamapps\common\call of duty hq\cod22\cod22-cod.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty hq\cod22\cod22-cod.exe => Нет файла
FirewallRules: [UDP Query User{C140DFB5-7C57-4B03-A67B-B82426264FB2}C:\program files (x86)\steam\steamapps\common\call of duty hq\cod22\cod22-cod.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty hq\cod22\cod22-cod.exe => Нет файла
FirewallRules: [{93AA2096-BAFA-4938-B9E4-28D46EDCC246}] => (Allow) Z:\SteamLibrary\steamapps\common\Warframe\Tools\Launcher.exe => Нет файла
FirewallRules: [{67058FE8-26BF-4B34-9722-41AC92CD7857}] => (Allow) Z:\SteamLibrary\steamapps\common\Warframe\Warframe.x64.exe => Нет файла
FirewallRules: [{7BC54AB8-E919-4634-AD84-C86900C9A868}] => (Allow) Z:\SteamLibrary\steamapps\common\Warframe\Warframe.x64.exe => Нет файла
FirewallRules: [{13F718A0-7689-4ECF-B119-F35DCC48F7B0}] => (Allow) Z:\SteamLibrary\steamapps\common\Warframe\Tools\RemoteCrashSender.exe => Нет файла
FirewallRules: [{EBDF6B39-5489-47EA-B259-D3CB75914A7A}] => (Allow) Z:\SteamLibrary\steamapps\common\Warframe\Tools\Launcher.exe => Нет файла
FirewallRules: [{89B75E61-3740-4459-AEC9-150C1C0DD224}] => (Allow) Z:\SteamLibrary\steamapps\common\Warframe\Warframe.x64.exe => Нет файла
FirewallRules: [{1B151685-203F-43CD-9100-A95CD9204B3F}] => (Allow) Z:\SteamLibrary\steamapps\common\Warframe\Warframe.x64.exe => Нет файла
FirewallRules: [{88DB198D-E979-408C-B47E-B70F496F2C75}] => (Allow) Z:\SteamLibrary\steamapps\common\Warframe\Tools\RemoteCrashSender.exe => Нет файла
FirewallRules: [TCP Query User{76CF543D-2720-44E4-9B59-837E9454AD0B}Z:\baase\superball.exe] => (Allow) Z:\baase\superball.exe => Нет файла
FirewallRules: [UDP Query User{5F7615E7-CF69-49A0-B73E-03A90BE2CC1D}Z:\baase\superball.exe] => (Allow) Z:\baase\superball.exe => Нет файла
FirewallRules: [TCP Query User{4D839576-7466-4C53-91ED-5A4E49202D83}Z:\steamlibrary\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe] => (Allow) Z:\steamlibrary\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe => Нет файла
FirewallRules: [UDP Query User{F59528D8-F85D-40DF-8895-AFF230242A39}Z:\steamlibrary\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe] => (Allow) Z:\steamlibrary\steamapps\common\rogue company\roguecompany\binaries\win64\roguecompany.exe => Нет файла
FirewallRules: [TCP Query User{12AE7720-CDDD-4103-8A5A-26F07ADA90B6}Z:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) Z:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe => Нет файла
FirewallRules: [UDP Query User{7A1BCEC3-BA69-4B15-81BC-7841422BC93A}Z:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) Z:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe => Нет файла
FirewallRules: [TCP Query User{C54028F6-0586-46A5-9EE6-C29666C491AE}Z:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) Z:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe => Нет файла
FirewallRules: [UDP Query User{D55A2EC4-F993-44F8-B2C2-A6084BD9D139}Z:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe] => (Allow) Z:\steamlibrary\steamapps\common\grand theft auto v\gta5.exe => Нет файла
FirewallRules: [TCP Query User{ADBC2B4F-BC5E-47A6-A7FF-31A77193C888}Z:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) Z:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Нет файла
FirewallRules: [UDP Query User{C3D81890-EFF2-4F8F-9ED4-9B4B7CA6BE8A}Z:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) Z:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Нет файла
FirewallRules: [TCP Query User{9CE71E71-BD4B-431A-98BE-6DC58F4882F0}C:\users\noobm\appdata\local\redm\redm.app\data\cache\subprocess\redm_authbrowser] => (Allow) C:\users\noobm\appdata\local\redm\redm.app\data\cache\subprocess\redm_authbrowser => Нет файла
FirewallRules: [UDP Query User{BC1BE7BF-1B0C-4809-9E19-B0DF812376FF}C:\users\noobm\appdata\local\redm\redm.app\data\cache\subprocess\redm_authbrowser] => (Allow) C:\users\noobm\appdata\local\redm\redm.app\data\cache\subprocess\redm_authbrowser => Нет файла
File: C:\hav\Yaf.exe
Reboot:
End::

2. Запустите Farbar Recovery Scan Tool от имени Администратора по правой кнопке мыши.
3. Нажмите один раз на кнопку Fix (Исправить) и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

• Обратите внимание: будет выполнена перезагрузка компьютера.
  

 

[APOLLO]

Fixlog.txt

[thyrex]

Возможно было срабатывание Защитника на активатор для Visio. В логах майнера не видно.

 

Загрузите SecurityCheck by glax24 & Severnyj и сохраните утилиту на Рабочем столе.

• Запустите двойным щелчком мыши (если Вы используете Windows XP) или из меню по щелчку правой кнопки мыши Запустить от имени администратора (если Вы используете Windows Vista/7/8/10/11);
• Если увидите предупреждение от вашего фаервола относительно программы SecurityCheck, не блокируйте ее работу;
• Дождитесь окончания сканирования, откроется лог в Блокноте с именем SecurityCheck.txt;
• Если Вы закрыли Блокнот, то найти этот файл можно в корне системного диска в папке с именем SecurityCheck, например C:\SecurityCheck\SecurityCheck.txt;
• Прикрепите этот файл в своем следующем сообщении.

 

[APOLLO]

SecurityCheck.txt

[thyrex]

Цитата

--------------------------- [ OtherUtilities ] ----------------------------
Python 3.12.1 (64-bit) v.3.12.1150.0 Внимание! Скачать обновления
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33135 v.14.38.33135.0 Внимание! Скачать обновления
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 v.14.38.33135.0 Внимание! Скачать обновления
------------------------------ [ ArchAndFM ] ------------------------------
WinRAR 6.02 (64-разрядная) v.6.02.0 Внимание! Скачать обновления
-------------------------- [ IMAndCollaborate ] ---------------------------
Discord v.1.0.9003 Внимание! Скачать обновления
Telegram Desktop v.5.0.1 Внимание! Скачать обновления
-------------------------------- [ Java ] ---------------------------------
Java 8 Update 321 (64-bit) v.8.0.3210.7 Внимание! Скачать обновления
^Удалите старую версию и установите новую (jre-8u411-windows-x64.exe - Windows Offline (64-bit))^
-------------------------------- [ Media ] --------------------------------
iTunes v.12.12.10.1 Внимание! Скачать обновления
^Для проверки новой версии используйте приложение Apple Software Update^
---------------------------- [ UnwantedApps ] -----------------------------
Driver Booster for Steam Внимание! Подозрение на демо-версию антишпионской программы, программу для обновления драйверов, программу-оптимизатор или программу очистки реестра. Рекомендуется деинсталляция и сканирование ПК с помощью Malwarebytes Anti-Malware. Возможно Вы стали жертвой обмана или социальной инженерии. Компьютерные эксперты не рекомендуют использовать такие программы.

по возможности исправьте указанное, и на этом закончим.