Перейти к содержанию

[РЕШЕНО] Trojan.MultiCertStor.a не удается полностью вылечить


Антон Осинкин

Рекомендуемые сообщения

Подскажите, пожалуйста, по данной проблеме.

 

Программа Kaspersky Virus Removal Tool определяет и вылечивает Trojan.MultiCertStor.a в системной памяти, а также зараженные файлы с папке C:\WINDOWS\TEMP, но после перезагрузки компьютера вирус снова обнаруживается.

post-54599-0-49502400-1561202406_thumb.jpg

post-54599-0-68583100-1561202411_thumb.jpg

CollectionLog-2019.06.22-12.52.zip

Изменено пользователем Антон Осинкин
Ссылка на комментарий
Поделиться на другие сайты

Здравствуйте.

 

YoutubeAdBlock удалите через Установку программ.

 

Выполните скрипт в AVZ из папки Autologger

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
QuarantineFile('C:\Program Files (x86)\sNOhMFMJMBV\sNOhMFMJMBV.dll','');
 QuarantineFile('C:\Program Files (x86)\KYvaIl\KYvaIl.dll','');
 QuarantineFile('C:\Program Files (x86)\GAasuBHwSxk\GAasuBHwSxk.dll','');
 DelBHO('{0082D95D-A66B-47D2-B36A-776FD1928D09}');
 DeleteFile('C:\Program Files (x86)\blKRurWOZIE\kTP0G35Q.dll','32');
 DeleteFile('C:\Program Files (x86)\rwSoHhuEU\ZpLNLZ.dll','64');
 DeleteSchedulerTask('fstZwSPTafElMco2');
 DeleteSchedulerTask('GAasuBHwSxk');
 DeleteFile('C:\Program Files (x86)\GAasuBHwSxk\GAasuBHwSxk.dll','64');
 DeleteFile('C:\Program Files (x86)\KYvaIl\KYvaIl.dll','64');
 DeleteSchedulerTask('KYvaIl');
 DeleteSchedulerTask('Microsoft\Windows\PerfTrack\UtcTimeViewer');
 DeleteSchedulerTask('Microsoft\Windows\SMB\UninstallSMB1ClientTask');
 DeleteSchedulerTask('Microsoft\Windows\SMB\UninstallSMB1ServerTask');
 DeleteSchedulerTask('sNOhMFMJMBV');
 DeleteSchedulerTask('т');
 DeleteFile('C:\Program Files (x86)\sNOhMFMJMBV\sNOhMFMJMBV.dll','64');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
  • Обратите внимание: будет выполнена перезагрузка компьютера.
Выполните скрипт в AVZ

begin
CreateQurantineArchive('c:\quarantine.zip');
end.
c:\quarantine.zip загрузите по ссылке https://virusinfo.info/upload_virus.php?tid=37678

Полученный после загрузки ответ сообщите здесь.

 

Пожалуйста, ЕЩЕ РАЗ запустите Autologger; прикрепите к следующему сообщению НОВЫЕ логи.

Ссылка на комментарий
Поделиться на другие сайты

Не удалось удалить YoutubeAdBlock. Ошибку прикладываю. Также прикладываю новые логи.

 

Сообщение от модератора Mark D. Pearlstone
Не цитируйте полностью сообщения.

post-54599-0-73893100-1561206826_thumb.jpg

CollectionLog-2019.06.22-15.33.zip

Ссылка на комментарий
Поделиться на другие сайты

Скачайте Farbar Recovery Scan Tool NAAC5Ba.png и сохраните на Рабочем столе.

  • Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
1. Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.

2. Убедитесь, что в окне Optional Scan отмечены List BCD и 90 Days Files.

3munStB.png

3. Нажмите кнопку Scan.

4. После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа.

5. Если программа была запущена в первый раз, также будет создан отчет (Addition.txt).

6. Файлы FRST.txt и Addition.txt заархивируйте (в один общий архив) и прикрепите к сообщению.

Ссылка на комментарий
Поделиться на другие сайты

Скачайте Farbar Recovery Scan Tool NAAC5Ba.png и сохраните на Рабочем столе.

  • Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.
1. Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.

2. Убедитесь, что в окне Optional Scan отмечены List BCD и 90 Days Files.

3munStB.png

3. Нажмите кнопку Scan.

4. После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа.

5. Если программа была запущена в первый раз, также будет создан отчет (Addition.txt).

6. Файлы FRST.txt и Addition.txt заархивируйте (в один общий архив) и прикрепите к сообщению.

 

FRST64_logs.zip

Ссылка на комментарий
Поделиться на другие сайты

1. Выделите следующий код:

Start::
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\RunOnce: [{9FA3D45F-767F-40E1-BA2C-FD3DC0E3BBFE}] => cmd.exe /C start /D "C:\Users\3EC2~1\AppData\Local\Temp" /B {9FA3D45F-767F-40E1-BA2C-FD3DC0E3BBFE}.cmd
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {1C808F97-46E9-4F29-B2B4-FBB35E7F7B10} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {5AC5CFD8-E9CD-4D86-A6DD-FE528665C2BA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {7B3DAA9B-904C-4407-AD20-B4B301C18F65} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {9C55074C-0B7F-498C-BE07-44A7CB2707B3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {B327AA34-C5AB-4D88-8970-8B28E08A9488} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {B8752309-0C6C-42ED-BE1E-E2390A994624} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {BD5A07D4-004E-4978-A922-C88E348AEB5D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION
Task: {C992AF38-6CC7-429A-9FDA-86CC00B6FD2F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION
Task: {D70D36C3-72F5-4E28-8622-5F312E2B467B} - System32\Tasks\GAasuBHwSxk => C:\WINDOWS\system32\rundll32.exe "C:\Program Files (x86)\GAasuBHwSxk\GAasuBHwSxk.dll",GAasuBHwSxk <==== ATTENTION
Task: {E275C25A-66FB-4F5D-8E65-68DF98F87471} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {E3B0D47E-0152-4E32-92E3-11A4F694BE12} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {EBCCCA32-5B30-42FA-B945-982CB65F44EF} - \WPD\SqmUpload_S-1-5-21-1860992455-3967582363-3133285134-1001 -> No File <==== ATTENTION
Task: {EF4724D6-9174-41C3-B2F6-7262440998C1} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {F15940FE-6549-4E0A-A532-0E7AD9D845C3} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
C:\Users\Антон\AppData\Local\Google\Chrome\User Data\Guest Profile\Extensions\acjkbnlfijcimdefnmllcbpekmkbafib
C:\Users\Антон\AppData\Local\Google\Chrome\User Data\System Profile\Extensions\acjkbnlfijcimdefnmllcbpekmkbafib
2019-06-16 11:28 - 2019-06-22 15:17 - 000000000 ____D C:\Program Files (x86)\sNOhMFMJMBV
2019-06-16 10:56 - 2019-06-22 15:17 - 000000000 ____D C:\Program Files (x86)\KYvaIl
2019-06-16 10:36 - 2019-06-22 15:18 - 000000000 ____D C:\Program Files (x86)\GAasuBHwSxk
2019-06-16 10:36 - 2019-06-22 15:17 - 000016818 _____ C:\WINDOWS\System32\Tasks\GAasuBHwSxk
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [127]
AlternateDataStreams: C:\ProgramData\TEMP:AE7261F6 [136]
AlternateDataStreams: C:\ProgramData\TEMP:B755D674 [134]
AlternateDataStreams: C:\Users\Public\DRM:احتضان [48]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:1AAB2E68 [127]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:AE7261F6 [136]
AlternateDataStreams: C:\Users\Все пользователи\TEMP:B755D674 [134]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\01594277.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\10500940.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\38058088.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\42698248.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\74244104.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\78308036.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\95234527.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\E5F88799.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\01594277.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\10500940.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\38058088.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\42698248.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\74244104.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\78308036.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\95234527.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\E5F88799.sys => ""="Driver"
HKU\S-1-5-21-1860992455-3967582363-3133285134-1001\...\StartupApproved\Run: => "QF1WK1LOP7FVMEU"
HKU\S-1-5-21-1860992455-3967582363-3133285134-1001\...\StartupApproved\Run: => "6799016"
HKU\S-1-5-21-1860992455-3967582363-3133285134-1001\...\StartupApproved\Run: => "7027057"
HKU\S-1-5-21-1860992455-3967582363-3133285134-1001\...\StartupApproved\Run: => "6391391"
HKU\S-1-5-21-1860992455-3967582363-3133285134-1001\...\StartupApproved\Run: => "7099585"
HKU\S-1-5-21-1860992455-3967582363-3133285134-1001\...\StartupApproved\Run: => "4119324"
HKU\S-1-5-21-1860992455-3967582363-3133285134-1001\...\StartupApproved\Run: => "3362271"
HKU\S-1-5-21-1860992455-3967582363-3133285134-1001\...\StartupApproved\Run: => "4786703"
FirewallRules: [UDP Query User{B78ED18F-61D1-4EA4-9852-0DC487C24AE8}G:\wd discovery software\wd discovery.exe] => (Allow) G:\wd discovery software\wd discovery.exe No File
FirewallRules: [TCP Query User{6C175587-4D76-4D4D-8851-ABAAE92C5D54}G:\wd discovery software\wd discovery.exe] => (Allow) G:\wd discovery software\wd discovery.exe No File
FirewallRules: [UDP Query User{D42B5994-9D33-4FCE-96CA-6CF5ED456580}F:\wd discovery software\wd discovery.exe] => (Allow) F:\wd discovery software\wd discovery.exe No File
FirewallRules: [TCP Query User{98FCA68F-B05B-4DB6-AB55-7F3829583F15}F:\wd discovery software\wd discovery.exe] => (Allow) F:\wd discovery software\wd discovery.exe No File
FirewallRules: [UDP Query User{BB31D6E4-EF9F-4455-A323-F53514E095AC}F:\wd discovery software\wd discovery.exe] => (Allow) F:\wd discovery software\wd discovery.exe No File
FirewallRules: [TCP Query User{F6993C19-F4C0-4FC1-8774-139855AB82E8}F:\wd discovery software\wd discovery.exe] => (Allow) F:\wd discovery software\wd discovery.exe No File
FirewallRules: [{F69E653B-6BB6-42F7-ACE1-5B757DE53C62}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe No File
FirewallRules: [{41C15BD9-8DB0-4934-879F-9F2FEB72E13E}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe No File
FirewallRules: [UDP Query User{04D12ACE-B7F9-4165-883E-2E5C87A1D77B}C:\program files (x86)\1cv8\8.3.6.2041\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.6.2041\bin\1cv8.exe No File
FirewallRules: [TCP Query User{8454CD87-23A1-43EF-B685-EDB67A59AA92}C:\program files (x86)\1cv8\8.3.6.2041\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.6.2041\bin\1cv8.exe No File
FirewallRules: [UDP Query User{B69C9EE3-E812-4EE7-ABB6-F889CAEB8F1A}C:\program files (x86)\1cv8\8.3.5.1443\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.5.1443\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{3ACF4AC6-A112-41EE-B0E0-897EA9495BF1}C:\program files (x86)\1cv8\8.3.5.1443\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.5.1443\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{C2682B00-893A-419E-B90B-69877FD5E4E7}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe No File
FirewallRules: [TCP Query User{2B3EF5AC-4670-4465-9959-9C68D39FF6FD}C:\program files\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\javaw.exe No File
FirewallRules: [UDP Query User{73907F92-E282-4698-9DB6-E5C486619E9C}C:\program files\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\java.exe No File
FirewallRules: [TCP Query User{5D0A4B5D-3A4E-4D6D-8429-0DE1D7BEBEE9}C:\program files\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_45\bin\java.exe No File
FirewallRules: [UDP Query User{CA1D869E-79CD-4AC4-91BF-922695A69681}C:\program files (x86)\1cv82\8.2.19.121\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv82\8.2.19.121\bin\1cv8.exe No File
FirewallRules: [TCP Query User{EA71DFED-6928-487F-A649-62849A9675EF}C:\program files (x86)\1cv82\8.2.19.121\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv82\8.2.19.121\bin\1cv8.exe No File
FirewallRules: [UDP Query User{558B9EC2-D86F-43D7-942A-28B012D8BA69}C:\program files\java\jre1.8.0_31\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\java.exe No File
FirewallRules: [TCP Query User{89A09AB5-AA58-4788-B995-4D7BF041E802}C:\program files\java\jre1.8.0_31\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\java.exe No File
FirewallRules: [UDP Query User{1D28187D-E814-41FF-9424-7BF0672756DB}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe No File
FirewallRules: [TCP Query User{A19147C1-EC47-4C68-A9FA-DC42C4445C43}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe No File
FirewallRules: [UDP Query User{EA43B4E3-AF9C-47E7-817C-C020374F2139}C:\program files (x86)\1cv8\8.3.5.1443\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.5.1443\bin\1cv8.exe No File
FirewallRules: [TCP Query User{0207FF49-6328-4B79-AF0E-F6B030ADE26C}C:\program files (x86)\1cv8\8.3.5.1443\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.5.1443\bin\1cv8.exe No File
FirewallRules: [{30481ADF-FF69-45DB-B187-FD117C86D0FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe No File
FirewallRules: [{D502B7D5-E297-42B6-A352-E37124CD7642}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe No File
FirewallRules: [{E237D037-C8D0-4F40-968C-B5AAD0C381DE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe No File
FirewallRules: [{6526ECBD-D9CC-4044-8425-9005FC36ADEC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe No File
FirewallRules: [{DD35A4B5-F601-4C85-82DA-FBB44410AEF0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe No File
FirewallRules: [{75AAC904-F75C-413A-8490-D1C5B046B3B1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe No File
FirewallRules: [{DEAFFA4D-7A5B-490A-829A-34DFEC79F324}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe No File
FirewallRules: [{CD86264A-8BDC-4AD4-B0AC-16AAD8924C5A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe No File
FirewallRules: [{27B0B7F3-E574-49E7-A4D0-2243C9BD12AE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe No File
FirewallRules: [{5DE97042-F6FC-415B-A67B-5FBCEEFA7EAF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe No File
FirewallRules: [{AC9A9F18-E8DC-4CEA-B984-79BD60595740}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe No File
FirewallRules: [{BBF552C5-9D25-4B06-AE09-6B40EBB5E393}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe No File
FirewallRules: [{88B21DC0-515A-49AB-AD32-3960693D0FF2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe No File
FirewallRules: [{638DDD90-6533-4015-999F-9D7092F3AF4C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe No File
FirewallRules: [{709E259B-ED24-423A-BFD6-9A94DDD34091}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe No File
FirewallRules: [{03DD5F57-C423-4D7E-9326-F050CDA7486E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe No File
FirewallRules: [{1DBEA31C-5B5B-401C-A30C-9BC640D9D3E8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe No File
FirewallRules: [{E694AFC8-2358-43DA-B512-6BC62F597B75}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe No File
FirewallRules: [{6986CC2C-944B-4F5C-9BCF-60A3161F7030}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe No File
FirewallRules: [{7D6D5546-2795-49E0-991F-5D2126753D18}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe No File
FirewallRules: [{296D8742-F227-4DDB-B8CB-5ED5D0FDA9FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe No File
FirewallRules: [{62E6D33D-7BDC-4327-9C38-2DEC621B8F13}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe No File
FirewallRules: [{AED24B65-DEF8-4681-9E18-1EDBF36280F1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe No File
FirewallRules: [{B952CD5A-A0C3-40B1-8C46-8C849BBFA373}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe No File
FirewallRules: [{CD565C7B-6CF1-428E-80DD-0ADF1A1D65D6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe No File
FirewallRules: [{53A2F0D0-77A6-4302-AE1C-7D3F54EED0D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe No File
FirewallRules: [{C4EAC87B-FA6D-4ED7-B08F-5CB926275E56}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe No File
FirewallRules: [{036EF017-C107-4984-9189-DA966E9C50A7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe No File
FirewallRules: [{636A49EF-2F0F-44D0-B880-15A80563EBAC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe No File
FirewallRules: [{6B795CE6-E977-4A3B-ADAB-029ADC728234}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe No File
FirewallRules: [{2B646977-C133-473D-8DCF-F044393C97AA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe No File
FirewallRules: [{332EE068-23F3-4FBC-9B66-381BB0F19943}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe No File
FirewallRules: [{FC112C12-EEFA-46A7-8006-89425D5CBD12}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe No File
FirewallRules: [{309080CE-24D5-4EBB-88B4-799EF6C38664}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe No File
FirewallRules: [{DF9D1D0C-7A5C-4D6C-9A7A-43A3489612BE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe No File
FirewallRules: [{73AA6D76-B41B-48EB-8FB0-2998290CAE70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe No File
FirewallRules: [{E42EACDA-AB63-4F05-8257-D8D8174D61FE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe No File
FirewallRules: [{9F7BBBE7-83D0-44A3-AD72-B5AAE77D162E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe No File
FirewallRules: [{9B17EF42-589F-4B04-8FED-279F0AFB6DEF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe No File
FirewallRules: [{42EEFBB0-2B17-4AB6-B72E-CAFAB48E35FB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe No File
FirewallRules: [{7FDEE140-1FCC-4227-9EFF-54131E7D6A81}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe No File
FirewallRules: [{7A15DBCA-6566-4253-8EAF-2CF7A1E18F1A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe No File
FirewallRules: [{9CA85F95-5174-4A29-9E9B-5A98D5592B69}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe No File
FirewallRules: [{69E0AD88-9005-44E5-B25C-4708CDDFFB62}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe No File
FirewallRules: [{67272D62-3EF5-4114-85F8-DC83704CD212}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe No File
FirewallRules: [{5F951D86-AB0F-42BC-A3AC-3D7690B61797}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe No File
FirewallRules: [{E203E6AE-0ACC-4B55-977F-E5272548738E}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe No File
FirewallRules: [{2D14ACB5-5800-4204-A9EC-08AB433FE338}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe No File
FirewallRules: [{C12F6300-0575-454A-821A-001F9DD8FFCC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe No File
FirewallRules: [{74BF0C78-EC4F-4B02-BA4E-C4A7BCC9E897}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe No File
FirewallRules: [UDP Query User{B652A30D-1C19-4DD4-8A09-3A3D61AC8276}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe No File
FirewallRules: [TCP Query User{1E956724-E872-42BE-94E7-C79952244846}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe No File
FirewallRules: [UDP Query User{0E81C46D-E75C-4937-9966-45020080203C}C:\program files (x86)\1cv82\8.2.19.83\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv82\8.2.19.83\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{073658A3-FA18-4237-8385-28F259546919}C:\program files (x86)\1cv82\8.2.19.83\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv82\8.2.19.83\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{D909F12C-B2F3-4C53-87E8-AD6E3FF0E16E}C:\program files (x86)\1cv82\8.2.19.83\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv82\8.2.19.83\bin\1cv8.exe No File
FirewallRules: [TCP Query User{B89BAD17-F384-49FF-ABB6-7521CD4874D6}C:\program files (x86)\1cv82\8.2.19.83\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv82\8.2.19.83\bin\1cv8.exe No File
FirewallRules: [UDP Query User{7EB81597-3B2D-4929-9773-E39092AD32EC}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe No File
FirewallRules: [TCP Query User{4EB97306-E6E9-458C-BBE3-87C61E78DA34}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe No File
FirewallRules: [UDP Query User{A02C1E9E-2F63-41A7-AF10-BA6D1F3C9CCA}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe No File
FirewallRules: [TCP Query User{E8854234-728B-4238-A9BD-1C50E850BEE7}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe No File
FirewallRules: [UDP Query User{8F6B9A36-284F-4260-858E-11CC85C37BF2}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe No File
FirewallRules: [TCP Query User{47AC6642-B51E-4109-8FE5-1DDF864D7EAD}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe No File
FirewallRules: [UDP Query User{4079D0A2-C7B4-41EB-9A84-9660F7B5F91C}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe No File
FirewallRules: [TCP Query User{E14F63C3-B56E-4807-ABD6-6674D8CC6B37}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe No File
FirewallRules: [TCP Query User{3CB0ECF7-8A51-4B16-80E2-ADF31AB555EA}C:\program files (x86)\1cv8\8.3.7.1917\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1917\bin\1cv8.exe No File
FirewallRules: [UDP Query User{0A60C376-23ED-4EC5-A29A-B74D08815D27}C:\program files (x86)\1cv8\8.3.7.1917\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1917\bin\1cv8.exe No File
FirewallRules: [TCP Query User{5013A7CE-11AE-4C80-9258-18E1EEE2E313}C:\program files\java\jre1.8.0_73\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\javaw.exe No File
FirewallRules: [UDP Query User{CB321057-9BF5-4E97-8E3D-727F8C32CBAD}C:\program files\java\jre1.8.0_73\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\javaw.exe No File
FirewallRules: [{F35D1C01-BC2C-4294-8CC7-239DF152D906}] => (Block) C:\program files\java\jre1.8.0_73\bin\javaw.exe No File
FirewallRules: [{BC3121A6-A3EF-4A76-817E-AEBCB172B1F0}] => (Block) C:\program files\java\jre1.8.0_73\bin\javaw.exe No File
FirewallRules: [TCP Query User{9EAC6833-32D8-4C7A-AB62-73DFD4237274}C:\program files\java\jre1.8.0_73\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\java.exe No File
FirewallRules: [UDP Query User{62E0933B-EDBD-4EC1-AF6D-2590EBE5B940}C:\program files\java\jre1.8.0_73\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_73\bin\java.exe No File
FirewallRules: [{4F4C58D5-5639-4881-95F5-FFAB5E053381}] => (Block) C:\program files\java\jre1.8.0_73\bin\java.exe No File
FirewallRules: [{353C2F22-9745-4B4F-9841-40302AF9768E}] => (Block) C:\program files\java\jre1.8.0_73\bin\java.exe No File
FirewallRules: [TCP Query User{BEA0E5AE-6324-48E6-8636-48E0A07ED668}C:\program files (x86)\1cv8\8.3.7.1949\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1949\bin\1cv8.exe No File
FirewallRules: [UDP Query User{8CA803D4-2E6C-4E65-9A2F-B924D13BFCDD}C:\program files (x86)\1cv8\8.3.7.1949\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1949\bin\1cv8.exe No File
FirewallRules: [TCP Query User{F5C3F7D8-7736-436F-AE5F-187B27150424}C:\program files (x86)\1cv8\8.3.7.1949\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1949\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{CEAC90BF-59E9-4E38-A506-54CA8DAB5D14}C:\program files (x86)\1cv8\8.3.7.1949\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1949\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{963956FF-3B97-46DF-A2AD-F22C1FEBDAEE}C:\program files (x86)\1cv8\8.3.7.1970\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1970\bin\1cv8.exe No File
FirewallRules: [UDP Query User{F1978FC7-C3E3-4E20-ADE8-4C3C78A69D09}C:\program files (x86)\1cv8\8.3.7.1970\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1970\bin\1cv8.exe No File
FirewallRules: [TCP Query User{02EAE93F-84F3-41CA-8F4D-CB09538B4A32}C:\program files (x86)\1cv8\8.3.7.1970\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1970\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{9CC24B49-D76F-4C83-80A6-4E9046A2E09A}C:\program files (x86)\1cv8\8.3.7.1970\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.7.1970\bin\1cv8c.exe No File
FirewallRules: [{0EF17E0D-5590-4765-A136-83B33C62AD2D}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe No File
FirewallRules: [{F939B2C3-712B-4E07-8D2F-3A8CEBBEA240}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe No File
FirewallRules: [{BFDE9D37-EC76-4321-AFDA-8A25AE5FAF8B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe No File
FirewallRules: [{36B9C43D-2BE7-4607-9EBD-5352985AD920}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe No File
FirewallRules: [TCP Query User{1B5AB057-A031-4727-BF97-5BB822FB4241}C:\program files\java\jre1.8.0_141\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_141\bin\java.exe No File
FirewallRules: [UDP Query User{206412E6-71B3-44F4-B4CB-6CA3592C64EC}C:\program files\java\jre1.8.0_141\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_141\bin\java.exe No File
FirewallRules: [TCP Query User{05F8DF4C-1344-4511-B0B0-C5F42A557631}C:\program files\java\jre1.8.0_141\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_141\bin\javaw.exe No File
FirewallRules: [UDP Query User{67893C60-29FD-42D5-B1C6-344F73F847FC}C:\program files\java\jre1.8.0_141\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_141\bin\javaw.exe No File
FirewallRules: [TCP Query User{6A35B831-9C7B-4393-86BD-D44502682D62}C:\program files\java\jre1.8.0_151\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\java.exe No File
FirewallRules: [UDP Query User{3B9B55C0-8483-4C00-8962-AF7F5902D858}C:\program files\java\jre1.8.0_151\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\java.exe No File
FirewallRules: [TCP Query User{FACB3F11-E516-40D3-9027-0ABAEC292908}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe No File
FirewallRules: [UDP Query User{E4B3FD0E-C09B-48F7-AC9F-B054A783F9C7}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe No File
FirewallRules: [TCP Query User{932D14AC-64EB-4757-B684-9B0B767FD895}C:\program files (x86)\1cv8\8.3.10.2639\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.10.2639\bin\1cv8.exe No File
FirewallRules: [UDP Query User{60A72FCD-D0EF-4AE0-B2BB-0E1D290EC17D}C:\program files (x86)\1cv8\8.3.10.2639\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.10.2639\bin\1cv8.exe No File
FirewallRules: [TCP Query User{58A9322E-8CC9-4D22-9658-7CA082B9A044}C:\program files (x86)\1cv8\8.3.10.2639\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.10.2639\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{FDE261CB-CD92-49F1-AF3D-EA582046D461}C:\program files (x86)\1cv8\8.3.10.2639\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.10.2639\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{8979B8D2-9689-4DD4-841C-CCB7855D367C}C:\program files\java\jre1.8.0_161\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_161\bin\java.exe No File
FirewallRules: [UDP Query User{799F9893-C864-4FB6-80DC-A2B60CB82547}C:\program files\java\jre1.8.0_161\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_161\bin\java.exe No File
FirewallRules: [TCP Query User{90F5C00E-4338-4A6F-9913-1433555EFC4D}C:\program files\1cv8\8.3.12.1412\bin\1cv8c.exe] => (Allow) C:\program files\1cv8\8.3.12.1412\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{C6F3BA88-AA5C-40F4-A291-E77FDFF038EF}C:\program files\1cv8\8.3.12.1412\bin\1cv8c.exe] => (Allow) C:\program files\1cv8\8.3.12.1412\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{C04C30C9-3A95-41E7-B986-DC9E0EB0B76D}C:\program files\java\jre1.8.0_171\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_171\bin\javaw.exe No File
FirewallRules: [UDP Query User{4B618B4D-18BD-4D91-A67A-F248F987BFAD}C:\program files\java\jre1.8.0_171\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_171\bin\javaw.exe No File
FirewallRules: [TCP Query User{55B5F7EE-1AF2-456E-8908-331517623191}C:\program files\1cv8\8.3.12.1529\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.12.1529\bin\1cv8.exe No File
FirewallRules: [UDP Query User{2CDE5CE4-1321-4F9B-BE91-194A7796A3B6}C:\program files\1cv8\8.3.12.1529\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.12.1529\bin\1cv8.exe No File
FirewallRules: [TCP Query User{C334B65A-9761-4296-AC17-FCFA039B4629}C:\program files (x86)\1cv8\8.3.12.1469\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.12.1469\bin\1cv8.exe No File
FirewallRules: [UDP Query User{299DEA95-36CC-4183-9A01-6EFA8C3D77EE}C:\program files (x86)\1cv8\8.3.12.1469\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.12.1469\bin\1cv8.exe No File
FirewallRules: [TCP Query User{B9C8B53C-0724-4D23-8011-8F018C3CAAC9}C:\program files (x86)\1cv8\8.3.12.1469\bin\dbgs.exe] => (Allow) C:\program files (x86)\1cv8\8.3.12.1469\bin\dbgs.exe No File
FirewallRules: [UDP Query User{B1A3226C-888C-4776-A824-D21F3C10F916}C:\program files (x86)\1cv8\8.3.12.1469\bin\dbgs.exe] => (Allow) C:\program files (x86)\1cv8\8.3.12.1469\bin\dbgs.exe No File
FirewallRules: [TCP Query User{5B8BC076-4A15-4BDE-84CC-3AFCF9ACF784}C:\program files (x86)\1cv8\8.3.12.1469\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.12.1469\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{4BCEEF53-2C7D-416E-AFE1-5CCE35534BB3}C:\program files (x86)\1cv8\8.3.12.1469\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.12.1469\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{6CEFAE58-5549-46CD-A5E0-46C8745E6F9B}C:\program files\1cv8\8.3.12.1529\bin\1cv8c.exe] => (Allow) C:\program files\1cv8\8.3.12.1529\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{FFD1F097-0C45-41EB-8814-5594B3B984A4}C:\program files\1cv8\8.3.12.1529\bin\1cv8c.exe] => (Allow) C:\program files\1cv8\8.3.12.1529\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{EF2EDAB2-22C9-4C4D-8CAB-3D83B1811CE0}C:\program files\java\jre1.8.0_191\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_191\bin\java.exe No File
FirewallRules: [UDP Query User{F38AF738-9329-4DBE-81A0-DA5318D51359}C:\program files\java\jre1.8.0_191\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_191\bin\java.exe No File
FirewallRules: [TCP Query User{DF418912-4FDE-4437-A620-340868DA221F}C:\program files\1cv8\8.3.12.1714\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.12.1714\bin\1cv8.exe No File
FirewallRules: [UDP Query User{368F96D1-E838-419F-B84E-685900478BB4}C:\program files\1cv8\8.3.12.1714\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.12.1714\bin\1cv8.exe No File
FirewallRules: [TCP Query User{457D4557-1CB8-41E9-A4C9-BF40FE73A9C9}C:\program files\1cv8\8.3.12.1616\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.12.1616\bin\1cv8.exe No File
FirewallRules: [UDP Query User{B1C28ED3-BD0C-491A-A983-CDB4C8214896}C:\program files\1cv8\8.3.12.1616\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.12.1616\bin\1cv8.exe No File
FirewallRules: [TCP Query User{15DA1020-88EA-4B31-A814-5FB8348BF7A8}C:\program files\1cv8\8.3.12.1616\bin\1cv8c.exe] => (Allow) C:\program files\1cv8\8.3.12.1616\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{2CC2BFD8-ED16-4913-8BD5-B9A145784272}C:\program files\1cv8\8.3.12.1616\bin\1cv8c.exe] => (Allow) C:\program files\1cv8\8.3.12.1616\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{ECAE14D8-0787-4B6F-A7CC-50BF2FB8015C}C:\program files\1cv8\8.3.12.1616\bin\dbgs.exe] => (Allow) C:\program files\1cv8\8.3.12.1616\bin\dbgs.exe No File
FirewallRules: [UDP Query User{6E716712-FDE0-4C0E-BAED-27E082E3B94F}C:\program files\1cv8\8.3.12.1616\bin\dbgs.exe] => (Allow) C:\program files\1cv8\8.3.12.1616\bin\dbgs.exe No File
FirewallRules: [TCP Query User{5EFDD508-CC87-42F8-B9F2-85AAE90CEFD1}C:\program files\1cv8\8.3.13.1690\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.13.1690\bin\1cv8.exe No File
FirewallRules: [UDP Query User{F1BE1D9D-28A4-4660-BFAF-F04FA3386E14}C:\program files\1cv8\8.3.13.1690\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.13.1690\bin\1cv8.exe No File
FirewallRules: [TCP Query User{D95EBBC6-9E0E-4ADD-A490-1F75DA132056}C:\program files\1cv8\8.3.14.1565\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.14.1565\bin\1cv8.exe No File
FirewallRules: [UDP Query User{6FEEB304-F5AB-46BC-8FD0-5207AEF9B587}C:\program files\1cv8\8.3.14.1565\bin\1cv8.exe] => (Allow) C:\program files\1cv8\8.3.14.1565\bin\1cv8.exe No File
FirewallRules: [TCP Query User{2F2AB51B-BA2F-427E-91E6-C75D436E33E5}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe No File
FirewallRules: [UDP Query User{7A843781-9D83-410E-A645-4170F0422D5F}C:\program files (x86)\starcraft\starcraft.exe] => (Allow) C:\program files (x86)\starcraft\starcraft.exe No File
FirewallRules: [TCP Query User{9BBD1C1F-7FC9-440D-8D45-7DD1076872C8}C:\program files (x86)\1cv8\8.3.14.1630\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.14.1630\bin\1cv8.exe No File
FirewallRules: [UDP Query User{8FB3CB17-F5CF-4D0A-B858-6C808DA2DC43}C:\program files (x86)\1cv8\8.3.14.1630\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.14.1630\bin\1cv8.exe No File
FirewallRules: [TCP Query User{54C40190-4530-4DD8-A1DD-4D809F9D08CC}C:\program files (x86)\1cv8\8.3.13.1809\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.13.1809\bin\1cv8.exe No File
FirewallRules: [UDP Query User{F1B867B2-814E-49F9-8565-5A3A0BB227D3}C:\program files (x86)\1cv8\8.3.13.1809\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.13.1809\bin\1cv8.exe No File
FirewallRules: [TCP Query User{E00660BB-D8C3-464D-BFC9-77CA4E3108C1}C:\program files (x86)\1cv8\8.3.13.1690\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.13.1690\bin\1cv8.exe No File
FirewallRules: [UDP Query User{0BF23A59-AB0C-4BC2-9A7B-BDD3C64EBF86}C:\program files (x86)\1cv8\8.3.13.1690\bin\1cv8.exe] => (Allow) C:\program files (x86)\1cv8\8.3.13.1690\bin\1cv8.exe No File
FirewallRules: [TCP Query User{E05AC44A-7EA4-4CA7-AE98-8ED4CCD779C1}C:\program files (x86)\1cv8\8.3.13.1690\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.13.1690\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{B97E8555-2A3B-4F45-9D5E-90BD62BED3EA}C:\program files (x86)\1cv8\8.3.13.1690\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.13.1690\bin\1cv8c.exe No File
FirewallRules: [TCP Query User{4DDFAD5E-7A32-4A44-9600-4791BB277F81}C:\program files (x86)\1cv8\8.3.13.1690\bin\dbgs.exe] => (Allow) C:\program files (x86)\1cv8\8.3.13.1690\bin\dbgs.exe No File
FirewallRules: [UDP Query User{FB1BC5E8-B83A-4C8D-A74F-1FFCF765E48B}C:\program files (x86)\1cv8\8.3.13.1690\bin\dbgs.exe] => (Allow) C:\program files (x86)\1cv8\8.3.13.1690\bin\dbgs.exe No File
FirewallRules: [TCP Query User{450A4A29-CB18-4C3D-AC09-DC23EC329628}C:\program files (x86)\1cv8\8.3.14.1630\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.14.1630\bin\1cv8c.exe No File
FirewallRules: [UDP Query User{1D750216-E507-4723-818D-97711A4D410E}C:\program files (x86)\1cv8\8.3.14.1630\bin\1cv8c.exe] => (Allow) C:\program files (x86)\1cv8\8.3.14.1630\bin\1cv8c.exe No File
FirewallRules: [{E59958DB-D577-4B39-BAA2-6003BD9B6952}] => (Allow) C:\Users\Антон\AppData\Local\Programs\Opera\60.0.3255.95\opera.exe No File
FirewallRules: [{29A0FB25-F750-4461-9E90-325120949567}] => (Allow) C:\WINDOWS\rss\csrss.exe No File
Reboot:
End::
2. Скопируйте выделенный текст (правая кнопка мышиКопировать).

3. Запустите Farbar Recovery Scan Tool.

4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

  • Обратите внимание: будет выполнена перезагрузка компьютера.
Ссылка на комментарий
Поделиться на другие сайты

Строгое предупреждение от модератора Mark D. Parlstone
Последний раз предупреждаю, не цитируйте сообщения полностью.

Fixlog.txt

Ссылка на комментарий
Поделиться на другие сайты

Гость
Эта тема закрыта для публикации ответов.
  • Похожий контент

    • sergoborin
      От sergoborin
      Добрый день!
       
      Не получалось вылечить HEUR:Trojan.Multi.GenBadur.genw, после перезагрузки он снова появлялся
      Удалил вручную, прошу проверить, не осталось ли ничего ещё каких-либо подозрительных файлов
      CollectionLog-2025.01.06-00.30.zip
    • Belzak
      От Belzak
      Здравствуйте, у меня такая- же проблема, вот мой файл
      WIN-GSIH82VECDJ_2024-10-11_22-13-38_v4.99.2v x64.7z
       
      Сообщение от модератора Mark D. Pearlstone Перемещено из темы.
    • Zero56621
      От Zero56621
      Меня уже долгое время мучает троян в системной памяти с названием MEM:Trojan.Win32.SEPEH.gen. Я уже попробовал много различных программ и от зависаний на короткое время мне помогла только программа Emsisoft Emerengecy Soft. При попытке вылечить данный троян, у меня просто появлялся черный экран, где я даже мышкой не мог двигать (это при попытке вылечить с помощью KVRT). Я не знаю где сохраняются отчеты, так что я решил сделать скрин. Так же прикрепил файл с программы EES.

      scan_250111-162811.txt
    • specxpilot
      От specxpilot
      Не удается подключится к серверу администрирования
      Установил Kaspersky Security Center на ubuntu server 22.04 по инструкции https://support.kaspersky.com/KSCLinux/13/ru-RU/166764.htm, открыл порты 
       
      Далее при подключении с консоли пишет ошибку 

       

       
       
    • Timur644
      От Timur644
      Добрый день.
      С вчера появилось проблема, при запуске MMC KSC выдает ошибку:
      Не удалось подключится к серверу администрирование. (скрине видно)
      Службы проверил все запущены, порт 13291 занимает утилита Касперского.
      Прошу подскажите что проверить.

×
×
  • Создать...