Не запускается установщик антивируса rасперского и kvrt

30 ноября, 2020

Здравствуйте. Установщик антивируса не запускается, скачал KVRT есть анимация клавиши "Запустить" - действий нет. Скачал Dr.Web CureIt обнаружил 1 угрозу, карантин плодов не принес - KVRT все так же не работает, антивирус не устанавливается.
OS Windows 10

CollectionLog-2020.11.30-22.12.zip

30 ноября, 2020

Выполните скрипт в AVZ из папки Autologger


{ Перед использованием скрипта убедитесь, что в системе не установлены упомянутые в скрипте антивирусы. Автор скрипта: regist. Modification: thyrex}
var ProgramData, ProgramFiles, ProgramFiles86, fname, OSVer: string;
    PD_folders, PF_folders, O_folders: TStringList;

procedure FillList;
begin
 PD_folders:= TStringList.Create;
 PD_folders.Add('360TotalSecurity');
 PD_folders.Add('360safe');
 PD_folders.Add('AVAST Software');
 PD_folders.Add('Avg');
 PD_folders.Add('Avira');
 PD_folders.Add('ESET');
 PD_folders.Add('Indus');
 PD_folders.Add('Kaspersky Lab Setup Files');
 PD_folders.Add('Kaspersky Lab');
 PD_folders.Add('MB3Install');
 PD_folders.Add('Malwarebytes');
 PD_folders.Add('McAfee');
 PD_folders.Add('Norton');
 PD_folders.Add('grizzly');
 PD_folders.Add('RealtekHD');
 PD_folders.Add('RunDLL');
 PD_folders.Add('Setup');
 PD_folders.Add('System32');
 PD_folders.Add('Windows');
 PD_folders.Add('WindowsTask');
 PD_folders.Add('install');
 PD_folders.Add('Doctor Web');
 PF_folders:= TStringList.Create;
 PF_folders.Add('360');
 PF_folders.Add('AVAST Software');
 PF_folders.Add('AVG');
 PF_folders.Add('ByteFence');
 PF_folders.Add('Zaxar');
 PF_folders.Add('COMODO');
 PF_folders.Add('Cezurity');
 PF_folders.Add('Common Files\McAfee');
 PF_folders.Add('ESET');
 PF_folders.Add('Enigma Software Group');
 PF_folders.Add('GRIZZLY Antivirus');
 PF_folders.Add('Kaspersky Lab');
 PF_folders.Add('Malwarebytes');
 PF_folders.Add('Microsoft JDX');
 PF_folders.Add('Panda Security');
 PF_folders.Add('SpyHunter');
 PF_folders.Add('RDP Wrapper');
 O_folders:= TStringList.Create;
 O_folders.Add(NormalDir('%SYSTEMDRIVE%'+'\AdwCleaner'));
 O_folders.Add(NormalDir('%SYSTEMDRIVE%'+'\rdp'));
 O_folders.Add(NormalDir('%SYSTEMDRIVE%'+'\KVRT_Data'));
 O_folders.Add(NormalDir('%windir%'+'\NetworkDistribution'));
 O_folders.Add(NormalDir('%windir%'+'\speechstracing'));
 O_folders.Add(NormalDir('%windir%'+'\Fonts\Mysql'));
end;

procedure Del_folders(path: string; AFL: TStringList);
var i: integer;
    A: integer; 
    s: string; 
    r: boolean;
begin
 for i:= 0 to AFL.Count - 1 do
  begin
   fname:= NormalDir(path + AFL[i]);
   r:= False;
   if DirectoryExists(fname)
    then
     begin
      s:= 'Found ' + fname + ' (';
      A:= GetAttr(fname);
      if A and 4 = 4
       then
        begin
         r:= True;
         s:= s + 'S';  
        end;
      if A and 2 = 2
       then
        begin
         r:= True;
         s:= s + 'H';  
        end;
      s:= s + 'D)';
      AddToLog(s);
      QuarantineFileF(fname, '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', true, '', 0, 0);
      DeleteFileMask(fname, '*', true);
      if r then FSResetSecurity(fname);
      DeleteDirectory(fname);
     end;
 end;
end;

procedure swprv;
begin
 ExecuteFile('sc.exe', 'create "swprv" binpath= "%SystemRoot%\System32\svchost.exe -k swprv" type= own start= demand depend= RPCSS', 0, 15000, true);
 RegKeyParamDel ('HKLM', 'SYSTEM\CurrentControlSet\Services\swprv', 'wow64');
 RegKeyStrParamWrite ('HKLM', 'SYSTEM\CurrentControlSet\Services\swprv', 'Description', '@%SystemRoot%\System32\swprv.dll,-102');
 RegKeyStrParamWrite ('HKLM', 'SYSTEM\CurrentControlSet\Services\swprv', 'DisplayName', '@%SystemRoot%\System32\swprv.dll,-103');
 RegKeyIntParamWrite ('HKLM', 'SYSTEM\CurrentControlSet\Services\swprv', 'ServiceSidType', '1');
 RegKeyParamWrite('HKLM', 'SYSTEM\CurrentControlSet\Services\swprv\Parameters', 'ServiceDll', 'REG_EXPAND_SZ', '%Systemroot%\System32\swprv.dll');
 OSVer := RegKeyStrParamRead('HKLM','SOFTWARE\Microsoft\Windows NT\CurrentVersion','CurrentVersion');
 if OSVer > '6.1' then RegKeyIntParamWrite ('HKLM', 'SYSTEM\CurrentControlSet\Services\swprv\Parameters', 'ServiceDllUnloadOnStop', '1');;
 ExecuteFile('sc.exe', 'privs "swprv" SeBackupPrivilege/SeChangeNotifyPrivilege/SeCreateGlobalPrivilege/SeCreatePermanentPrivilege/SeImpersonatePrivilege/SeManageVolumePrivilege/SeRestorePrivilege/SeIncreaseBasePriorityPrivilege/SeManageVolumePrivilege/SeRestorePrivilege/SeTcbPrivilege', 0, 15000, true);
 ExecuteFile('net.exe', 'start "swprv"', 0, 15000, true);
end;

procedure  AV_block_remove;
begin
 Clearlog;
 FillList;
 ProgramData:= GetEnvironmentVariable('ProgramData') + '\';
 ProgramFiles:= NormalDir('%PF%');
 ProgramFiles86:= NormalDir('%PF% (x86)');
 Del_folders(ProgramData, PD_folders);
 Del_folders(ProgramFiles, PF_folders);
 Del_folders(ProgramFiles86, PF_folders);
 Del_folders('', O_folders);
 if RegKeyParamExists('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', 'DisallowRun')
  then RegKeyParamDel('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', 'DisallowRun');
 if RegKeyExists('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun')
  then
   begin
    ExpRegKey('HKCU','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun','DisallowRun_backup.reg');
    RegKeyDel('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun');
   end;
 RegKeyParamWrite('HKLM', 'SYSTEM\CurrentControlSet\services\TermService\Parameters', 'ServiceDll', 'REG_EXPAND_SZ', '%SystemRoot%\System32\termsrv.dll');
 swprv;
 if MessageDLG('Удалить пользователя "John" ?'+ #13#10 + 'Если пользователь с таким именем вам не знаком, то нажмите "Да".', mtConfirmation, mbYes+mbNo, 0) = 6
  then ExecuteFile('net.exe', 'user john /delete', 0, 15000, true);
 PD_folders.Free;
 PF_folders.Free;
 O_folders.Free;
end;

begin
 AV_block_remove;
 fname:= ProgramData + 'RDPWinst.exe';
 if FileExists(fname) then DeleteFile(fname);
 ExecuteSysClean; 
 SaveLog(GetAVZDirectory +'AV_block_remove.log');
 RebootWindows(false);
end.

Обратите внимание: будет выполнена перезагрузка компьютера.

Выполните скрипт в AVZ

begin
CreateQurantineArchive('c:\quarantine.zip');
end.

c:\quarantine.zip загрузите по ссылке https://virusinfo.info/upload_virus.php?tid=37678

Полученный после загрузки ответ сообщите здесь.

Пожалуйста, ЕЩЕ РАЗ запустите Autologger; прикрепите к следующему сообщению НОВЫЕ логи.

30 ноября, 2020

Это нормально? Вроде бы эта ошибка с первой загрузки была, пытался раза 2-3

CollectionLog-2020.12.01-02.35.zip

1 декабря, 2020

Скачайте Farbar Recovery Scan Tool и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

1. Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
2. Убедитесь, что в окне Optional Scan отмечены List BCD и 90 Days Files.

3. Нажмите кнопку Scan.
4. После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа.
5. Если программа была запущена в первый раз, также будет создан отчет (Addition.txt).
6. Файлы FRST.txt и Addition.txt заархивируйте (в один общий архив) и прикрепите к сообщению.

1 декабря, 2020

Desktop.rar

1 декабря, 2020

1. Выделите следующий код:

Start::
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1856201247-181377647-3388268861-1001\...\Run: [movavi_srecorder_11.3.0_screenrecorder] => [X]
HKU\S-1-5-21-1856201247-181377647-3388268861-1001\...\Run: [movavi_srecorder_agent] => [X]
HKU\S-1-5-21-1856201247-181377647-3388268861-1001\...\MountPoints2: {bdd631e4-8735-11ea-87fc-802bf9564678} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-1856201247-181377647-3388268861-1001\...\MountPoints2: {bdd63e49-8735-11ea-87fc-802bf9564678} - "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\autorun.exe /auto
IFEO\MusNotification.exe: [Debugger] C:\Windows\system32\systray.exe
IFEO\MusNotifyIcon.exe: [Debugger] C:\Windows\system32\systray.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {320BA9CF-F35C-4612-A53D-99F7DAE1E813} - System32\Tasks\Microsoft\Windows\Wininet\Taskhost => C:\Programdata\RealtekHD\taskhostw.exe <==== ATTENTION
Task: {3E9D4CEB-88E4-4CA8-9F1B-E7EE89BA00BD} - System32\Tasks\Microsoft\Windows\Wininet\Taskhostw => C:\Programdata\RealtekHD\taskhostw.exe <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
2020-11-23 01:09 - 2020-11-23 01:09 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign6e6f01226ac3e35a
2020-11-23 01:09 - 2020-11-23 01:09 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign5d35f9b36569a918
2020-11-23 01:09 - 2020-11-23 01:09 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign51beb2f1cc068e41
2020-11-21 09:49 - 2020-11-21 09:49 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign31292c072115f5e3
2020-11-21 09:49 - 2020-11-21 09:49 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign23467686c0012fa6
2020-11-21 01:26 - 2020-11-21 01:26 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign7dfa4cc52ef24445
2020-11-21 01:25 - 2020-11-21 01:25 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignbbdebd940a70a6b9
2020-11-21 01:25 - 2020-11-21 01:25 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign3f392f7692faf8c5
2020-11-12 00:35 - 2020-11-12 00:35 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign770234c12827576c
2020-11-12 00:34 - 2020-11-12 00:34 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign5f495201b860897b
2020-11-12 00:34 - 2020-11-12 00:34 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign5dfc36721e3acd93
2020-11-12 00:34 - 2020-11-12 00:34 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign3e8e3493b9855484
2020-11-11 15:53 - 2020-11-11 15:53 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign1d6a70b38090af58
2020-11-11 15:46 - 2020-11-11 15:46 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign3574b2c54ce2f282
2020-11-11 15:44 - 2020-11-11 15:44 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignb83dce904bb3f00e
2020-11-11 15:44 - 2020-11-11 15:44 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign88c9ec9ef44b7d42
2020-11-11 15:44 - 2020-11-11 15:44 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign1a7e131c0df7a4a4
2020-10-28 17:37 - 2020-10-28 17:37 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignb1972fa7844764e1
2020-10-28 17:37 - 2020-10-28 17:37 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign6b300e4a52bf1d6a
2020-10-23 19:27 - 2020-10-23 19:27 - 000000000 ____D C:\Users\USER\AppData\Local\SKIDROW
2020-10-21 22:26 - 2020-10-21 22:26 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignec5cff8afcb89866
2020-10-21 22:26 - 2020-10-21 22:26 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign9c9c1699a2430f87
2020-10-21 22:26 - 2020-10-21 22:26 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign6f6d12aac7147d72
2020-10-21 22:25 - 2020-10-21 22:25 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignd54ccc21272113cb
2020-10-21 22:25 - 2020-10-21 22:25 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignb34705d83e0651e4
2020-10-21 22:25 - 2020-10-21 22:25 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign5f142e38d296c1ff
2020-09-21 19:42 - 2020-09-21 19:42 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignb2c264ce98ce5c46
2020-09-21 19:41 - 2020-09-21 19:41 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignb675c574f0542907
2020-09-21 19:41 - 2020-09-21 19:41 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign2499c99f6ddf3877
2020-09-17 00:58 - 2020-09-17 00:58 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignc3a60844c0f4c686
2020-09-17 00:57 - 2020-09-17 00:57 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignaa4d2f9125238af7
2020-09-17 00:57 - 2020-09-17 00:57 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign503c398b917d047d
2020-09-16 20:13 - 2020-09-16 20:13 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign1b59b6338e9ee783
2020-09-16 20:12 - 2020-09-16 20:12 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign9b779579ea712c01
2020-09-16 20:12 - 2020-09-16 20:12 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign3994f072f83dc483
2020-09-16 01:45 - 2020-09-16 01:45 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign7b86f509060bf820
2020-09-16 01:45 - 2020-09-16 01:45 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign679bcefe290c606b
2020-09-15 01:44 - 2020-09-15 01:44 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign476ccc9d8ec5a98b
2020-09-15 01:43 - 2020-09-15 01:43 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsigneb8d6628932c246f
2020-09-15 01:43 - 2020-09-15 01:43 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign62bc7c876039d53c
2020-09-14 01:15 - 2020-09-14 01:15 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign52f5ee86a74c20c9
2020-09-14 01:11 - 2020-09-14 01:11 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsigndd6df23da5c2f07c
2020-09-14 01:11 - 2020-09-14 01:11 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsignab69205473946b4f
2020-09-14 01:11 - 2020-09-14 01:11 - 000000000 ____D C:\Users\USER\AppData\Local\Tempzxpsign477cab90e92f8ec8
FirewallRules: [{693BF12D-3668-46DA-9F58-DBCC84205DF6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{EE47A84C-5752-41E2-99EF-7473A726640D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{91B29445-2411-4176-A94F-01F52BBD4F8D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe => No File
FirewallRules: [{668838C6-5CF0-42ED-9571-0C11643C4B7C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe => No File
FirewallRules: [{05005531-01E8-4F9C-92D5-A2C5D37B7061}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe => No File
FirewallRules: [{9B9A3C53-3559-4290-85E2-30F0FC832E25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe => No File
FirewallRules: [TCP Query User{04418652-F582-4CA4-B5FF-1B2416216867}C:\program files (x86)\city car driving1\bin\win32\starter.exe] => (Block) C:\program files (x86)\city car driving1\bin\win32\starter.exe => No File
FirewallRules: [UDP Query User{37B89BCA-5039-48FF-ADE9-B0F04FC7FEDF}C:\program files (x86)\city car driving1\bin\win32\starter.exe] => (Block) C:\program files (x86)\city car driving1\bin\win32\starter.exe => No File
FirewallRules: [TCP Query User{EBB662DB-8AFC-46C3-A9A8-86433A18D529}C:\program files (x86)\city car driving\bin\win32\starter.exe] => (Allow) C:\program files (x86)\city car driving\bin\win32\starter.exe => No File
FirewallRules: [UDP Query User{FA3B30F9-D8EF-4EFB-82AD-AE1D297B8ACF}C:\program files (x86)\city car driving\bin\win32\starter.exe] => (Allow) C:\program files (x86)\city car driving\bin\win32\starter.exe => No File
FirewallRules: [{4FD7496D-89A2-4DEA-BDB6-668067440A67}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe => No File
FirewallRules: [{E49F629B-D6D6-4C0E-B388-04A681ABBA2D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe => No File
FirewallRules: [{CBF2007A-65A8-4F69-86D9-AA124AFED2BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe => No File
FirewallRules: [{3AC4909E-FAA6-4B53-BDE2-55D02726AD81}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe => No File
FirewallRules: [{F7E8DD62-338B-4749-B2E1-0718781EAFC4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe => No File
FirewallRules: [{E4A53AA8-C0AA-43C3-9EF3-F0811863B3A2}] => (Allow) C:\Program Files (x86)\Origin Games\Apex\EasyAntiCheat_launcher.exe => No File
FirewallRules: [{0EAA6B08-A6F5-4874-BAA8-6E68010F8454}] => (Allow) C:\Program Files (x86)\Origin Games\Apex\EasyAntiCheat_launcher.exe => No File
FirewallRules: [TCP Query User{CDE10A3F-BE48-4481-A0E3-9FCAF513EADB}C:\program files\epic games\gtav\gta5.exe] => (Allow) C:\program files\epic games\gtav\gta5.exe => No File
FirewallRules: [UDP Query User{73FC030A-A7E6-49F3-B7CA-E61163E3308D}C:\program files\epic games\gtav\gta5.exe] => (Allow) C:\program files\epic games\gtav\gta5.exe => No File
FirewallRules: [{ABDFE34F-163D-4711-BF0A-EEBD18764DFE}] => (Block) C:\program files\epic games\gtav\gta5.exe => No File
FirewallRules: [{68E35DE8-0FB2-47DC-82D2-A8054D9586E9}] => (Block) C:\program files\epic games\gtav\gta5.exe => No File
FirewallRules: [{6766B1D8-04D5-432D-BCC4-76501B3C0FD1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe => No File
FirewallRules: [{2823C515-17C1-4D29-A712-9598C99105B6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe => No File
FirewallRules: [TCP Query User{10674F67-77E6-4993-A4E1-4B5F1648A1A1}C:\users\user\appdata\local\temp\rar$exa12804.37565\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\user\appdata\local\temp\rar$exa12804.37565\windowsnoeditor\engine\binaries\win64\ue4game.exe => No File
FirewallRules: [UDP Query User{C86B20EE-FD90-4E59-AB20-34504521C706}C:\users\user\appdata\local\temp\rar$exa12804.37565\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\user\appdata\local\temp\rar$exa12804.37565\windowsnoeditor\engine\binaries\win64\ue4game.exe => No File
FirewallRules: [{14A8E443-4243-41BE-AE92-D813C539AA9B}] => (Block) C:\users\user\appdata\local\temp\rar$exa12804.37565\windowsnoeditor\engine\binaries\win64\ue4game.exe => No File
FirewallRules: [{77AA9B5B-BE03-4D81-9A18-6DC11F155336}] => (Block) C:\users\user\appdata\local\temp\rar$exa12804.37565\windowsnoeditor\engine\binaries\win64\ue4game.exe => No File
User{4A3C6866-17F6-4553-9973-C33E4CD96953}C:\users\user\appdata\local\temp\rar$exa12804.42390\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\user\appdata\local\temp\rar$exa12804.42390\windowsnoeditor\engine\binaries\win64\ue4game.exe => No File
FirewallRules: [UDP Query User{BB4E9536-9600-4C6F-97D2-88F8566CD2C5}C:\users\user\appdata\local\temp\rar$exa12804.42390\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\user\appdata\local\temp\rar$exa12804.42390\windowsnoeditor\engine\binaries\win64\ue4game.exe => No File
FirewallRules: [{B8D896B4-BD96-4304-93AE-2A165CA3A11D}] => (Block) C:\users\user\appdata\local\temp\rar$exa12804.42390\windowsnoeditor\engine\binaries\win64\ue4game.exe => No File
FirewallRules: [{B339E371-B568-4B01-997E-470CB2105FC5}] => (Block) C:\users\user\appdata\local\temp\rar$exa12804.42390\windowsnoeditor\engine\binaries\win64\ue4game.exe => No File
FirewallRules: [{5AD66B40-4A8F-4894-90A6-643454E9F11B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe => No File
FirewallRules: [{0B210830-0A6D-4915-8B83-EC34D5E21E27}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe => No File
FirewallRules: [{481719F4-DE4E-4A9D-8E33-8423966AABB3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe => No File
FirewallRules: [{8BC4CECF-48C3-4309-AF9B-7965BA139A7E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe => No File
FirewallRules: [{894812F9-7B4A-444A-B979-41BC25B05328}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe => No File
FirewallRules: [{B7584794-CCC2-490B-A831-0B5C2B6E90CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe => No File
FirewallRules: [{8BF9A2E3-A383-458E-A8A9-D85D04F57808}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe => No File
FirewallRules: [{08C1DF7A-164D-4431-92FC-6B9CB304AA35}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe => No File
FirewallRules: [{F29E0C07-4A8D-438F-9ABA-1EFF487EBBE2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe => No File
FirewallRules: [{4202AB74-A5BE-4849-8A39-D2A1361F1109}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe => No File
FirewallRules: [{E57819B7-DD10-4C6C-9C96-E88FBD26879C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe => No File
FirewallRules: [{0CF990A6-E10B-4D57-A9D5-4F90246FC4C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe => No File
FirewallRules: [{0FD75434-A11F-4194-B32E-EAB443773650}] => (Allow) C:\Program Files (x86)\RaidCall.RU\rcplugin.exe => No File
FirewallRules: [{C2F70FF4-BEA8-4C73-9EB1-FEBCE750F7EE}] => (Allow) C:\Program Files (x86)\RaidCall.RU\rcplugin.exe => No File
FirewallRules: [{80860AA5-3864-4790-BA3D-D51C624AB2ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe => No File
FirewallRules: [{7AF53F66-B601-452D-A1C1-936FE1FD307C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe => No File
FirewallRules: [TCP Query User{D962027C-9440-4FE8-A97D-16E864870526}C:\users\user\desktop\midsummer\midsummer.exe] => (Allow) C:\users\user\desktop\midsummer\midsummer.exe => No File
FirewallRules: [UDP Query User{089FA7F6-2811-439C-94E9-FA31676ECB26}C:\users\user\desktop\midsummer\midsummer.exe] => (Allow) C:\users\user\desktop\midsummer\midsummer.exe => No File
FirewallRules: [TCP Query User{1832B96D-A4B4-4A3D-9346-3AD0040DD4D0}C:\program files\nextrp launcher\nextrp launcher.exe] => (Allow) C:\program files\nextrp launcher\nextrp launcher.exe => No File
FirewallRules: [UDP Query User{E3B0CA50-A1FC-4B9A-A01A-47A12E4294D0}C:\program files\nextrp launcher\nextrp launcher.exe] => (Allow) C:\program files\nextrp launcher\nextrp launcher.exe => No File
FirewallRules: [{045752B4-8376-4915-A405-900BBADC5C57}] => (Allow) C:\Games\Масяня под желтым прессом\game.exe => No File
FirewallRules: [{9B52A507-84AE-45A6-B797-820208D2BD5C}] => (Allow) C:\Games\Масяня под желтым прессом\game.wrp.exe => No File
FirewallRules: [{171ADCAF-82C7-43F9-81BD-510524834285}] => (Allow) C:\Games\Масяня под желтым прессом\F2PHttpDaemon.exe => No File
FirewallRules: [TCP Query User{E2890331-BD4B-4D40-8D87-D5C33CB5774F}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [UDP Query User{9AC13492-D8BA-4966-809E-598E41EFAEE5}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [TCP Query User{A6B4B8ED-7ED9-42DE-AFDA-61C1B7489581}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [UDP Query User{CEBB7522-04F8-424D-B75A-87A25C26B68A}C:\users\user\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\user\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [TCP Query User{4AF42FB9-EC57-48E8-9599-265A406A3E01}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe => No File
FirewallRules: [UDP Query User{CDF00A66-1842-4D0B-B4A0-5FD8E8257FF6}C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\resident evil 5\re5dx9.exe => No File
FirewallRules: [{B26C90D5-FB17-4F57-A732-B2FC8A3BDD1E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe => No File
FirewallRules: [{A098F354-6664-443B-BA10-5A39AFE56F82}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe => No File
FirewallRules: [TCP Query User{C29E896C-5401-4BA7-B847-7E1EB93C2DB8}C:\users\user\desktop\wish\game.exe] => (Block) C:\users\user\desktop\wish\game.exe => No File
FirewallRules: [UDP Query User{71821282-578B-4926-9FBB-CFB7DFF46730}C:\users\user\desktop\wish\game.exe] => (Block) C:\users\user\desktop\wish\game.exe => No File
FirewallRules: [TCP Query User{D802BC07-BD74-4B00-941C-CCE4C65E6208}C:\users\user\appdata\local\temp\rar$exa9828.37148\wish\game.exe] => (Block) C:\users\user\appdata\local\temp\rar$exa9828.37148\wish\game.exe => No File
FirewallRules: [UDP Query User{B1796762-C7F8-4DD9-97F7-FC88B75963A6}C:\users\user\appdata\local\temp\rar$exa9828.37148\wish\game.exe] => (Block) C:\users\user\appdata\local\temp\rar$exa9828.37148\wish\game.exe => No File
FirewallRules: [TCP Query User{B1F73301-44EA-40FC-8BEC-722916D29C6B}C:\games\the stanley parable\stanley.exe] => (Block) C:\games\the stanley parable\stanley.exe => No File
FirewallRules: [UDP Query User{CB7528DE-F4EB-4573-85ED-9EE849CB18AF}C:\games\the stanley parable\stanley.exe] => (Block) C:\games\the stanley parable\stanley.exe => No File
FirewallRules: [{636F9ED6-C20B-47E4-AA3F-26E34DEB7C75}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe => No File
FirewallRules: [{D941D964-86A0-4FEB-AE04-DAEBCE0DAB2F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe => No File
2020-11-30 15:49 - 2020-11-30 21:30 - 000021265 _____ C:\Windows\system32\drivers\etc\hosts
Reboot:
End::

2. Скопируйте выделенный текст (правая кнопка мыши – Копировать).
3. Запустите Farbar Recovery Scan Tool.
4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

Обратите внимание: будет выполнена перезагрузка компьютера.

1 декабря, 2020

Fixlog.txt

Проблема решена. Большое спасибо

Изменено 1 декабря, 2020 пользователем Артем_

1 декабря, 2020

Загрузите SecurityCheck by glax24 & Severnyj и сохраните утилиту на Рабочем столе.

Запустите двойным щелчком мыши (если Вы используете Windows XP) или из меню по щелчку правой кнопки мыши Запустить от имени администратора (если Вы используете Windows Vista/7/8/10);
Если увидите предупреждение от вашего фаервола относительно программы SecurityCheck, не блокируйте ее работу;
Дождитесь окончания сканирования, откроется лог в Блокноте с именем SecurityCheck.txt;
Если Вы закрыли Блокнот, то найти этот файл можно в корне системного диска в папке с именем SecurityCheck, например C:\SecurityCheck\SecurityCheck.txt;
Процитируйте содержимое файла в своем следующем сообщении.

Не запускается установщик антивируса rасперского и kvrt

Рекомендуемые сообщения

Артем_

thyrex

Артем_

thyrex

Артем_

thyrex

Артем_

thyrex

Пожалуйста, войдите, чтобы комментировать

Похожий контент

Обзор

Активность

Магазин

Поддержка

Kaspersky Support Forum