2008 R2 - Не синхронизируется время

[deem73]

Результат работы sfc





Код:

Код: Выделить всё

C:\Windows\System32>sfc /scannow
Beginning system scan.  This process will take some time.
Beginning verification phase of system scan.
Verification 25% complete.
Windows Resource Protection could not perform the requested operation.

DISM



Код:

Код: Выделить всё

C:\Windows\System32>dism /online /cleanup-image /scanhealth
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Error: 5
An error occurred while attempting to start the servicing process for the image located at C:\.
For more information, review the log file.
The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

Свежий dism.log

[spoiler]2022-11-08 13:26:33, Info DISM PID=10984 Successfully loaded the ImageSession at "C:\Windows\System32\Dism" - CDISMManager::LoadImageSession

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Failed to get and initialize the PE Provider. Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Getting Provider DISMLogger - CDISMProviderStore::GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Getting Provider DISMLogger - CDISMProviderStore::GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM Manager: PID=10984 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Getting Provider DISMLogger - CDISMProviderStore::GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM.EXE:

2022-11-08 13:26:33, Info DISM DISM.EXE:

2022-11-08 13:26:33, Info DISM DISM.EXE:

2022-11-08 13:26:33, Info DISM DISM.EXE: Host machine information: OS Version=6.1.7601, Running architecture=amd64, Number of processors=4

2022-11-08 13:26:33, Info DISM DISM.EXE: Executing command line: dism

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Getting the collection of providers from a local provider store type. - CDISMProviderStore::GetProviderCollection

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Loading Provider from location C:\Windows\System32\Dism\WimProvider.dll - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Connecting to the provider located at C:\Windows\System32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Loading Provider from location C:\Windows\System32\Dism\FolderProvider.dll - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Connecting to the provider located at C:\Windows\System32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Loading Provider from location C:\Windows\System32\Dism\CompatProvider.dll - CDISMProviderStore::Internal_GetProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Connecting to the provider located at C:\Windows\System32\Dism\CompatProvider.dll. - CDISMProviderStore::Internal_LoadProvider

2022-11-08 13:26:33, Info DISM DISM.EXE: Got the collection of providers. Now enumerating them to build the command table.

2022-11-08 13:26:33, Info DISM DISM.EXE: Attempting to add the commands from provider: WimManager

2022-11-08 13:26:33, Info DISM DISM.EXE: Getting the help information collection for the provider: WimManager.

2022-11-08 13:26:33, Info DISM DISM.EXE: Registering information from the help collection from provider: WimManager.

2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(wimcommands) and category(localtoplevelhelp) for the provider(WimManager).

2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(cleanup-wim) and category(wimcommands) for the provider(WimManager).

2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(remount-wim) and category(wimcommands) for the provider(WimManager).

2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(mount-wim) and category(wimcommands) for the provider(WimManager).

2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(unmount-wim) and category(wimcommands) for the provider(WimManager).

2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(commit-wim) and category(wimcommands) for the provider(WimManager).

2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(get-wiminfo) and category(wimcommands) for the provider(WimManager).

2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(get-mountedwiminfo) and category(wimcommands) for the provider(WimManager).

2022-11-08 13:26:33, Info DISM DISM.EXE: Attempting to add the commands from provider: FolderManager

2022-11-08 13:26:33, Info DISM DISM.EXE: Attempting to add the commands from provider: DISM Log Provider

2022-11-08 13:26:33, Info DISM DISM.EXE: Attempting to add the commands from provider: Compatibility Manager

2022-11-08 13:26:33, Info DISM DISM.EXE: Getting the help information collection for the provider: Compatibility Manager.

2022-11-08 13:26:33, Info DISM DISM.EXE: Image session has been closed. Reboot required=no.

2022-11-08 13:26:33, Info DISM DISM.EXE:

2022-11-08 13:26:33, Info DISM DISM.EXE:

2022-11-08 13:26:33, Info DISM DISM.EXE:

2022-11-08 13:26:33, Info DISM DISM Image Session: PID=10984 Disconnecting the provider store - CDISMImageSession::Final_OnDisconnect

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Found the OSServices. Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Disconnecting Provider: Compatibility Manager - CDISMProviderStore::Internal_DisconnectProvider

2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Releasing the local reference to DISMLogger. Stop logging. - CDISMProviderStore::Internal_DisconnectProvider

2022-11-08 14:38:00, Info DISM PID=9188 Scratch directory set to 'C:\Users\ADMINI~1\AppData\Local\Temp\1\'. - CDISMManager::put_ScratchDir

2022-11-08 14:38:00, Info DISM PID=9188 Successfully loaded the ImageSession at "C:\Windows\System32\Dism" - CDISMManager::LoadImageSession

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Failed to get and initialize the PE Provider. Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider DISMLogger - CDISMProviderStore::GetProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider DISMLogger - CDISMProviderStore::GetProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider

2022-11-08 14:38:00, Info DISM DISM Manager: PID=9188 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider DISMLogger - CDISMProviderStore::GetProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider

2022-11-08 14:38:00, Info DISM DISM.EXE:

2022-11-08 14:38:00, Info DISM DISM.EXE:

2022-11-08 14:38:00, Info DISM DISM.EXE:

2022-11-08 14:38:00, Info DISM DISM.EXE: Host machine information: OS Version=6.1.7601, Running architecture=amd64, Number of processors=4

2022-11-08 14:38:00, Info DISM DISM.EXE: Executing command line: dism /online /cleanup-image /scanhealth

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider FolderManager - CDISMProviderStore::GetProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Loading Provider from location C:\Windows\System32\Dism\FolderProvider.dll - CDISMProviderStore::Internal_GetProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Connecting to the provider located at C:\Windows\System32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider FolderManager - CDISMProviderStore::GetProvider

2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider

2022-11-08 14:38:02, Error DISM DismHostLib: Failed to create dismhost.exe servicing process.

2022-11-08 14:38:02, Error DISM DISM Manager: PID=9188 Failed to create Dism Image Session in host. - CDISMManager::LoadImageSession(hr:0x80070005)

2022-11-08 14:38:02, Warning DISM DISM Manager: PID=9188 A problem ocurred loading the image session. Retrying... - CDISMManager::CreateImageSession(hr:0x80070005)

2022-11-08 14:38:02, Error DISM DismHostLib: Failed to create dismhost.exe servicing process.

2022-11-08 14:38:02, Error DISM DISM Manager: PID=9188 Failed to create Dism Image Session in host. - CDISMManager::LoadImageSession(hr:0x80070005)

2022-11-08 14:38:02, Error DISM DISM Manager: PID=9188 Failed to load the image session from the temporary location: C:\Users\ADMINI~1\AppData\Local\Temp\1\A1B98AE2-C718-43E8-A597-F3E1B7CF099C - CDISMManager::CreateImageSession(hr:0x80070005)

2022-11-08 14:38:02, Error DISM DISM.EXE: Could not load the image session. HRESULT=80070005

2022-11-08 14:38:02, Error DISM DISM.EXE: Unable to start the servicing process for the image at 'C:\'. HRESULT=80070005

2022-11-08 14:38:02, Info DISM DISM.EXE: Image session has been closed. Reboot required=no.

2022-11-08 14:38:02, Info DISM DISM.EXE:

2022-11-08 14:38:02, Info DISM DISM.EXE:

2022-11-08 14:38:02, Info DISM DISM.EXE:

2022-11-08 14:38:02, Info DISM DISM Image Session: PID=9188 Disconnecting the provider store - CDISMImageSession::Final_OnDisconnect

2022-11-08 14:38:02, Info DISM DISM Provider Store: PID=9188 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider

2022-11-08 14:38:02, Info DISM DISM Provider Store: PID=9188 Found the OSServices. Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect

2022-11-08 14:38:02, Info DISM DISM Provider Store: PID=9188 Releasing the local reference to DISMLogger. Stop logging. - CDISMProviderStore::Internal_DisconnectProvider[/spoiler]

[NickM]

Цитата deem73:



директория CBS

2008 R2 - Не синхронизируется время

Имел ввиду содержимое положить в архив и приложить - теперь дождитесь окончания проверки и прикладывайте;




Цитата deem73:



sfc.exe не отрабатывал из-за антивируса

2008 R2 - Не синхронизируется время

Впервые такое слышу;




Цитата deem73:



Про /ScratchDir не совсем понятно с какой командой применять?

2008 R2 - Не синхронизируется время

К dism, например:



Код:

Код: Выделить всё

dism /online /cleanup-image /scanhealth /ScratchDir:c:\1

где директория 1 в корне загрузочного тома должна быть создана;




Цитата deem73:



Предыстория нехорошая. Была два года назад атака вируса-криптора.

2008 R2 - Не синхронизируется время

Ууу!




Цитата deem73:



По уму, проще на это всё забить, и накатить винду по новой

2008 R2 - Не синхронизируется время

Угу, но это же!


Цитата deem73:



DC

2008 R2 - Не синхронизируется время

Цитата:



Права доступа обыкновенные:



Права смотрят так:



Код:

Код: Выделить всё

icacls.exe %Temp%
C:\Users\nickm\AppData\Local\Temp NT AUTHORITY\СИСТЕМА:(I)(OI)(CI)(F)
                                   BUILTIN\Администраторы:(I)(OI)(CI)(F)
                                   LAPTOP\Адм:(I)(OI)(CI)(F)
Успешно обработано 1 файлов; не удалось обработать 0 файлов

[deem73]

Цитата:




Цитата NickM:



Цитата deem73:

sfc.exe не отрабатывал из-за антивируса »

Впервые такое слышу;

2008 R2 - Не синхронизируется время

Он(антивирус) почти всё блокирует, поэтому ему надо задавать исключения. Вот например скрин с лога

[NickM]

Цитата NickM:



Имел ввиду содержимое положить в архив и приложить - теперь дождитесь окончания проверки и прикладывайте;

2008 R2 - Не синхронизируется время

вот:





Код:

Код: Выделить всё

C:\Windows\System32>sfc /scannow
Beginning system scan.  This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

[deem73]

Цитата NickM:



Выполняйте проверку файлов, а Я пока скину Вам права на ветку реестра.

2008 R2 - Не синхронизируется время

Этой ветки реестра уже нет. После команды w32tm /unregister

[deem73]

Цитата deem73:



Он(антивирус) почти всё блокирует, поэтому ему надо задавать исключения.

2008 R2 - Не синхронизируется время

И как тогда Вы собрались администрировать систему, когда у Вас защитное ПО настроено в параноидальном режиме?




Цитата deem73:



Этой ветки реестра уже нет. После команды w32tm /unregister

2008 R2 - Не синхронизируется время

Всё верно, теперь регистрируйте службу взад.




Цитата deem73:



вот:

2008 R2 - Не синхронизируется время

Проверку с помощью dism также выполняйте.



И да, два раза уже повторил, держите третий - содержимое директории!



А тут только это, что также следует исправлять:



Код:

Код: Выделить всё

2022-11-08 13:31:18, Info                  CSI    000000de [SR] Cannot repair member file [l:18{9}]"csrss.exe" of Microsoft-Windows-Csrss, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be checked
2022-11-08 13:31:27, Error                 CSI    000000df (F) STATUS_ACCESS_DENIED #2542080# from Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile(flags = (AllowFileNotFound), handle = {provider=NULL, handle=0}, da = (FILE_GENERIC_READ), oa = @0xf8c750->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[112]"\SystemRoot\WinSxS\amd64_microsoft-windows-csrss_31bf3856ad364e35_6.1.7600.16385_none_b4d8d57efdc6b4f3\csrss.exe"; a:(OBJ_CASE_INSENSITIVE)}, iosb = @0xf8c800, as = (null), fa = 0, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), cd = FILE_OPEN, co = (FILE_NON_DIRECTORY_FILE|FILE_SYNCHRONOUS_IO_NONALERT), eab = NULL, eal = 0, disp = Invalid)
[gle=0xd0000022]
2022-11-08 13:31:27, Error                 CSI    000000e0@2022/11/8:11:31:27.573 (F) d:\w7rtm\base\wcp\sil\merged\ntu\ntsystem.cpp(2057): Error STATUS_ACCESS_DENIED originated in function Windows::Rtl::SystemImplementation::DirectFileSystemProvider::SysCreateFile expression: (null)
[gle=0x80004005]
2022-11-08 13:31:29, Info                  CBS    Session: 30995301_2774695137 initialized by client RMT.
2022-11-08 13:31:29, Info                  CBS    Session: 30995301_2774695137 finalized. Reboot required: no [HRESULT = 0x00000000 - S_OK]
2022-11-08 13:31:30, Error                 CSI    000000e1 (F) STATUS_ACCESS_DENIED #2542079# from Windows::Rtl::SystemImplementation::CDirectory::OpenExistingFile(...)[gle=0xd0000022]
2022-11-08 13:31:30, Error                 CSI    000000e2 (F) STATUS_ACCESS_DENIED #2542078# from Windows::Rtl::SystemImplementation::CDirectory_IRtlDirectoryTearoff::OpenExistingFile(flags = (MissingFileIsOk), da = (FILE_GENERIC_READ), oa = @0xf8cd80->SIL_OBJECT_ATTRIBUTES {s:40; on:"csrss.exe"; a:(OBJ_CASE_INSENSITIVE)}, sa = (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE), oo = (FILE_SYNCHRONOUS_IO_NONALERT|FILE_NON_DIRECTORY_FILE), file = NULL, disp = Invalid)
[gle=0xd0000022]
2022-11-08 13:31:30, Error                 CSI    000000e3 (F) STATUS_ACCESS_DENIED #2542058# from PrimitiveInstaller::CCoordinator::RepairComponent(Component = Microsoft-Windows-Csrss, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral)[gle=0xd0000022]

[deem73]

Цитата NickM:



И как тогда Вы собрались администрировать систему, когда у Вас защитное ПО настроено в параноидальном режиме?



Я уже добавил много исключений, но всё равно нужно не забывать его отключать.




Цитата NickM:



Всё верно, теперь регистрируйте службу взад.

2008 R2 - Не синхронизируется время

После того как dism выполнится. Но в реестре ветвь восстанавливается не полностью



готово





Код:

Код: Выделить всё

C:\Windows\System32>dism /online /cleanup-image /scanhealth
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7601.23403
................................................................................................................................................................................
.................................................................................................................................................Completed running scanhealth, c
heck logs at %windir%\logs\CBS\Checksur.log
The operation completed successfully.

CheckSUR.log



Код:

Код: Выделить всё

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.24382
2022-11-08 17:01
Checking Windows Servicing Packages
Checking Package Manifests and Catalogs
Checking Package Watchlist
Checking Component Watchlist
Checking Packages
Checking Component Store
Summary:
Seconds executed: 1293
 No errors detected

Цитата:



И да, два раза уже повторил, держите третий - содержимое директории!



вот



Код:

Код: Выделить всё

C:\Windows\System32>dir c:\Windows\Logs\CBS\
 Volume in drive C has no label.
 Volume Serial Number is CE93-9FC1
 Directory of c:\Windows\Logs\CBS
08.11.2022  17:01              .
08.11.2022  17:01              ..
08.11.2022  16:53                59 CBS.7z
26.10.2022  09:28        18*906*020 CBS.log
24.10.2020  14:45         1*484*733 CbsPersist_20210116111812.cab
22.01.2021  10:42         1*386*396 CbsPersist_20210322071311.cab
26.05.2021  14:55         1*331*623 CbsPersist_20210526214300.cab
04.08.2021  21:24         1*015*030 CbsPersist_20210805034906.cab
02.09.2021  09:23         7*882*869 CbsPersist_20220906135231.cab
08.11.2022  17:23               373 CheckSUR.log
08.11.2022  17:23               376 CheckSUR.persist.log
24.10.2020  11:39         1*276*172 DeepClean.log
08.11.2022  13:31               444 FilterList.log
              11 File(s)     33*284*095 bytes
               2 Dir(s)  164*378*968*064 bytes free

[NickM]

Цитата deem73:



вот

2008 R2 - Не синхронизируется время

Похоже, что Вы читаете через строки:


Цитата NickM:



Имел ввиду содержимое положить в архив и приложить -

2008 R2 - Не синхронизируется время

Цитата deem73:



CheckSUR.log

2008 R2 - Не синхронизируется время

Хорошо, результат удовлетворительный;




Цитата deem73:



Но в реестре ветвь восстанавливается не полностью

2008 R2 - Не синхронизируется время

Так "заглушите" Своего "защитнега", сейчас, на данный момент это лишний компонент.



Да и как говорится - "после драки кулаками не машут".



Для чего именно сейчас, при восстановлении системы Вы его используете?



Вам сначала следует восстановить систему, а уже после её защитить.



Или Вы все действия выполняете в заражённой системе/ находясь под реальной/ активной атакой?

[deem73]

Атака давно было. Я же писал. Года два назад. Сейчас всё восстановлено и работает штатно, но с ошибками. В антивирусе прописаны исключения, но иногда я его забываю отключать. Сейчас все действия делаю с отключенной защитой.

Команду выполнил. Ветвь в реестре появилась.




Цитата:



Имел ввиду содержимое положить в архив и приложить



Я свежее заархивировал и приложил. Остальные логи старые. Непонимаю, зачем они?

[NickM]

Цитата deem73:



Атака давно было. Я же писал.

2008 R2 - Не синхронизируется время

Угу, Я читал и помню, но не понимаю, по какой причине Вы страдаете сейчас?!

Никто не пытается настраивать систему, во "враждебной" для этого среде - в среде с ограничениями!




Цитата deem73:



Команду выполнил. Ветвь в реестре появилась.

2008 R2 - Не синхронизируется время

Тогда начинайте с начала, приводите вывод команд службы времени;



+



Про восстановление системных файлов не забывайте.