Publicado em 26 de jun.

[Resolvido] PC Totalmente lento após alguns minutos inativo

#topicos-resolvidos-seguranca-malwares

Segue links..

[ FRST.txt ]

http://www.cjoint.com/c/FFAq225MhrQ

[ Addition.txt ]

http://www.cjoint.com/c/FFAq3vzr7JQ

Discussão (10)

Entre ou cadastre-se para participar da discussão

Entrar Criar conta

DigRam· 26 de jun.

/!\ Boa Noite! sr.silva /!\

Copie estas informações que estão em vermelho,para o Bloco de Notas.
Salve-as com o nome fixlist. << Texto!
Salve-as no desktop! ( Área de trabalho ... )

start

CloseProcesses:

HKLM-x32\...\Run: [] => [X]

HKU\S-1-5-21-2957143589-1019319754-4208424685-1000\...\Winlogon: [shell] C:\Windows\explorer.exe [3231232 2016-04-09] (Microsoft Corporation) <==== ATENÇÃO

GroupPolicy: Restrição - Chrome <======= ATENÇÃO

CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL Nenhum Arquivo

Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL Nenhum Arquivo

Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL Nenhum Arquivo

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO

HKU\S-1-5-21-2957143589-1019319754-4208424685-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-2957143589-1019319754-4208424685-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxps://www.google.com/search?q={searchTerms}&rlz=

Toolbar: HKLM-x32 - Sem Nome - {8dcb7100-df86-4384-8842-8fa844297b3f} - Nenhum Arquivo

FF Plugin HKU\S-1-5-21-2957143589-1019319754-4208424685-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\ADM\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [Nenhum Arquivo]

CHR HomePage: Profile 1 -> hxxp://www.search.ask.com/?gct=hp

CHR DefaultSearchURL: Profile 1 -> hxxp://www.search.ask.com/web?q={searchTerms}

CHR DefaultSearchKeyword: Profile 1 -> search.ask.com

CHR DefaultSuggestURL: Profile 1 -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\ADM\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.7.796\_platform_specific\win_x86\widevinecdmadapter.dll => Nenhum Arquivo

S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]

Task: {C98984F0-6859-484B-8AAD-674FCBBE0D53} - \{FF81205E-70FE-41A1-83AE-F652A6A1A287} -> Nenhum Arquivo <==== ATENÇÃO

Task: {E82B40C9-29FB-4C31-902B-F1EDF5489BE6} - \{056C18FC-653E-47CD-8E44-8F7C1EA8902D} -> Nenhum Arquivo <==== ATENÇÃO

AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]

AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]

AlternateDataStreams: C:\Windows\System32:DC83F454_Abn.gbp [2]

AlternateDataStreams: C:\Windows\System32:DC83F454_Bb.gbp [2]

AlternateDataStreams: C:\Windows\System32:DC83F454_Bnt.gbp [2]

AlternateDataStreams: C:\Windows\System32:DC83F454_Cef.gbp [2]

AlternateDataStreams: C:\Windows\System32:DC83F454_Uni.gbp [2]

AlternateDataStreams: C:\Windows\SysWOW64\drivers:GbpKmAp.lst [212]

AlternateDataStreams: C:\Windows\system32\Drivers\gbpddfac64.sys:X5ZN8aGvT4 [2770]

AlternateDataStreams: C:\Windows\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [1198]

AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]

AlternateDataStreams: C:\ProgramData\TEMP:0A8E2C33 [140]

AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [134]

AlternateDataStreams: C:\ProgramData\TEMP:A31FAD21 [118]

AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]

AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:0A8E2C33 [140]

AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:5C321E34 [134]

AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:A31FAD21 [118]

C:\Users\ADM\AppData\Local\Temp\avgnt.exe

C:\Users\ADM\AppData\Local\Temp\Foxit Updater.exe

C:\Users\ADM\AppData\Local\Temp\HD-Logger-Native.dll

C:\Users\ADM\AppData\Local\Temp\HD-ShortcutHandler.dll

C:\Users\ADM\AppData\Local\Temp\sqlite3.dll

C:\Users\ADM\AppData\Local\Temp\uninstall.exe

CMD: netsh winsock reset catalog

EmptyTemp:

Hosts:

Reboot:

end

Execute FRST/FRST64 >> Clique "Corrigir" << Aguarde!
Na mensagem,clique Executar.
Poste o relatório! (Fixlog.txt)

< Peço aos visitantes que não utilizem este script em outros computadores,sob risco de danos aos mesmos! >

A+

sr.silva· 26 de jun.

Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 26-06-2016 02

Executado por ADM (2016-06-26 20:31:34) Run:2

Executando a partir de C:\Users\ADM\Desktop

Perfis Carregados: ADM (Perfis Disponíveis: ADM & teste)

Modo da Inicialização: Normal

==============================================

fixlist Conteúdo:

*****************