Ir para conteúdo

Arquivado

Este tópico foi arquivado e está fechado para novas respostas.

leandro aislan

[Resolvido] Computador fechando paginas e lento - Analise de Log

Por , em Tópicos Resolvidos (Seguranca & Malwares)

Recommended Posts

leandro aislan    0

leandro aislan
Postado
Bom dia, segue o mesmo....



¤¤¤¤¤¤¤¤¤¤ | Shortcut_Module | g3n-h@ckm@n | 11.05.2014.1


¤¤¤¤¤ Vista | 7 | 8 | 8.1 - 32/64 bits ¤¤¤¤¤ - Start 08:03:24 - 15/05/2014


Atualizado : 11/05/2014 | 12.25 Por g3n-h@ckm@n





Boot : Normal


Sistema : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1


Memória RAM = Total (MB) : 3857 | Livre (MB) : 1532

Pagefile = Total (MB) : 7713 | Livre (MB) : 4684

Virtual = Total (MB) : 4194 | Livre (MB) : 4008



Registro protegido, restabelecer : C:\Shortcut_Module\Save\Clean\ERDNT.exe


¤¤¤¤¤¤¤¤¤¤ | Windows atualizado


Nenhuma atualização descoberta !!!


¤¤¤¤¤¤¤¤¤¤ | Navegadores


IE : 11.0.9600.17041 (© Microsoft Corporation. Todos os direitos reservados.)

FF : 28.0.0.5186 (©Firefox and Mozilla Developers; available under the MPL 2 license.)

GC : 34.0.1847.137 (Copyright 2012 Google Inc. All rights reserved.)


¤¤¤¤¤¤¤¤¤¤ | Security


AS : Windows Defender Enabled

AM : Malwarebytes' Anti-Malware (1.0.0.500) [2014.04.08.09]

WMI : OK

WU: Windows Update Service [Auto(2)] = Começado

AS: Windows Defender [Auto(2)] = Começado

FW: Windows FireWall Service [Auto(2)] = Começado


¤¤¤¤¤¤¤¤¤¤ | FlashPlayer


FlashPlayer ActiveX : 13.0.0.214

FlashPlayer Plugin : 13.0.0.214


¤¤¤¤¤¤¤¤¤¤ | Processos mortos


944 | [Owner : SISTEMA |Parent : 760] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) - (3.1.6.3) = C:\PROGRA~2\GbPlugin\gbpsv.exe

1364 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Aplicativo de subsistema de spooler.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe

1704 | [Owner : SISTEMA |Parent : 760] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.7.0.0) = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

1824 | [Owner : SISTEMA |Parent : 760] - (.Apple Inc. - YSLoader.exe.) - (17.327.4.11) = C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

1964 | [Owner : SISTEMA |Parent : 760] - (.Infowatch - InfoWatch CryptoStorage Protected objects controller service.) - (2.0.201.0) = C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe

2012 | [Owner : SISTEMA |Parent : 760] - (.SafeNet Inc. - Sentinel LDK License Manager Service.) - (15.0.1.36539) = C:\Windows\System32\hasplms.exe

540 | [Owner : SISTEMA |Parent : 760] - (.Hewlett-Packard Company - HP Quick Synchronization Service.) - (4.0.112.1) = C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

1544 | [Owner : SISTEMA |Parent : 760] - (.Hewlett-Packard Company - LightScribe Service.) - (1.18.22.2) = C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

1928 | [Owner : SISTEMA |Parent : 760] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (2.0.23.0) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

2232 | [Owner : SERVIÇO DE REDE |Parent : 760] - (.Microsoft Corporation - SQL Server Windows NT.) - (2005.90.5000.0) = C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe

2344 | [Owner : SISTEMA |Parent : 760] - (.arvato digital services llc - PsiService PsiService.) - (3.1.0.56) = C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

2416 | [Owner : SERVIÇO DE REDE |Parent : 760] - (.Microsoft Corporation - SQL Browser Service EXE.) - (2005.90.5000.0) = C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

2452 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - SQL Server VSS Writer - 64 Bit.) - (2005.90.5000.0) = C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

2528 | [Owner : SISTEMA |Parent : 760] - (.TeamViewer GmbH - TeamViewer 9.) - (9.0.28223.0) = C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

2928 | [Owner : SISTEMA |Parent : 760] - (.Beijing WatchData System Co., Ltd. - WatchSAFE Service 3.4.) - (3.4.0.0) = C:\Windows\SysWOW64\Watchdata\Watchdata Brazil CSP v1.0\WDBrazMon34.exe

2996 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) - (7.250.4232.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

2768 | [Owner : SISTEMA |Parent : 760] - (.Intel Corporation - IAStorDataSvc.) - (9.5.7.1002) = C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

2952 | [Owner : SISTEMA |Parent : 2996] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) - (7.250.4232.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

4280 | [Owner : SERVIÇO LOCAL |Parent : 992] - (.Microsoft Corporation - Windows Driver Foundation - Processo de Host da Estrutura de Driver de Modo de Usuário.) - (6.2.9200.16384) = C:\Windows\System32\WUDFHost.exe

3136 | [Owner : SISTEMA |Parent : 760] - (.Adobe Systems Incorporated - Adobe Photoshop Elements 11.0 (component).) - (11.0.0.0) = C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe

3832 | [Owner : SISTEMA |Parent : 760] - (.Hewlett-Packard Company - HP Support Assistant Service.) - (6.0.5.4) = C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

4644 | [Owner : SERVIÇO DE REDE |Parent : 760] - (.Microsoft Corporation - Serviço de Compartilhamento de Rede do Windows Media Player.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe

1832 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Indexador do Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe

1724 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Processo de host do Windows (Rundll32).) - (6.1.7600.16385) = C:\Windows\System32\rundll32.exe

5016 | [Owner : SISTEMA |Parent : 1724] - (.Microsoft Corporation - Windows Install Compability Advisor Inventory Tool.) - (6.3.9600.17057) = C:\Windows\System32\CompatTel\wicainventory.exe

3164 | [Owner : SISTEMA |Parent : 592] - (.Microsoft Corporation - Host da Janela do Console.) - (6.1.7601.18229) = C:\Windows\System32\conhost.exe

2892 | [Owner : Asafer |Parent : 760] - (.Microsoft Corporation - Processo de Host para Tarefas do Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe

4488 | [Owner : Asafer |Parent : 2120] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.0.0.500) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

980 | [Owner : Asafer |Parent : 1460] - (.Microsoft Corporation - Windows Explorer.) - (6.1.7601.17567) = C:\Windows\explorer.exe

2656 | [Owner : Asafer |Parent : 980] - (.Intel Corporation - hkcmd Module.) - (8.15.10.2040) = C:\Windows\System32\hkcmd.exe

2368 | [Owner : Asafer |Parent : 876] - (.Intel Corporation - igfxsrvc Module.) - (8.15.10.2040) = C:\Windows\System32\igfxsrvc.exe

1536 | [Owner : Asafer |Parent : 980] - (.Intel Corporation - persistence Module.) - (8.15.10.2040) = C:\Windows\System32\igfxpers.exe

1896 | [Owner : Asafer |Parent : 980] - (.Microsoft Corporation - Notas Autoadesivas.) - (6.1.7600.16385) = C:\Windows\System32\StikyNot.exe

3660 | [Owner : Asafer |Parent : 980] - (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) - (6.1.7601.17514) = C:\Program Files\Windows Sidebar\sidebar.exe

2796 | [Owner : Asafer |Parent : 2128] - (.Intel Corporation - IAStorIcon.) - (9.5.7.1002) = C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

4044 | [Owner : Asafer |Parent : 2128] - (.Hewlett-Packard Company - HP UT LEDM Driver.) - (2.0.0.2) = C:\Program Files (x86)\Hp\HP UT LEDM\bin\hppusg.exe

604 | [Owner : Asafer |Parent : 2528] - (.TeamViewer GmbH - TeamViewer 9.) - (9.0.28223.0) = C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe

6100 | [Owner : SISTEMA |Parent : 2528] - (.TeamViewer GmbH - TeamViewer 9.) - (9.0.28223.0) = C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe

6092 | [Owner : SISTEMA |Parent : 2528] - (.TeamViewer GmbH - TeamViewer 9.) - (9.0.28223.0) = C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe

5456 | [Owner : Asafer |Parent : 1084] - (.Microsoft Corporation - Mecanismo do Agendador de Tarefas.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe

3096 | [Owner : Asafer |Parent : 876] - (.Kaspersky Lab - Kaspersky Password Manager.) - (7.0.3.11) = C:\PROGRA~2\KASPER~1\KASPER~2.0\KASPER~2\stpass.exe

5716 | [Owner : Asafer |Parent : 980] - (.Google Inc. - Google Chrome.) - (34.0.1847.137) = C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

2940 | [Owner : Asafer |Parent : 5716] - (.Google Inc. - Google Chrome.) - (34.0.1847.137) = C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

6260 | [Owner : Asafer |Parent : 5716] - (.Google Inc. - Google Chrome.) - (34.0.1847.137) = C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

6992 | [Owner : Asafer |Parent : 5716] - (.Google Inc. - Google Chrome.) - (34.0.1847.137) = C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

1548 | [Owner : Asafer |Parent : 5456] - (.Hewlett-Packard Company - HP Support Assistant.) - (6.0.0.0) = C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe

1380 | [Owner : Asafer |Parent : 5716] - (.Google Inc. - Google Chrome.) - (34.0.1847.137) = C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

6548 | [Owner : Asafer |Parent : 6308] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) - (6.0.335.0) = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

7096 | [Owner : Asafer |Parent : 980] - (.Microsoft Corporation - Microsoft Outlook.) - (14.0.7113.5000) = C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE

6640 | [Owner : SERVIÇO DE REDE |Parent : 760] - (.Microsoft Corporation - Microsoft Office Software Protection Platform Service.) - (14.0.370.400) = C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

4904 | [Owner : Asafer |Parent : 1832] - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) - (7.0.7601.17610) = C:\Windows\System32\SearchProtocolHost.exe

6420 | [Owner : SISTEMA |Parent : 1832] - (.Microsoft Corporation - Microsoft Windows Search Filter Host.) - (7.0.7601.17610) = C:\Windows\System32\SearchFilterHost.exe

1548 | [Owner : Asafer |Parent : 5456] - (.Hewlett-Packard Company - HP Support Assistant.) - (6.0.0.0) = C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe

6548 | [Owner : Asafer |Parent : 6308] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) - (6.0.335.0) = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

4904 | [Owner : Asafer |Parent : 1832] - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) - (7.0.7601.17610) = C:\Windows\System32\SearchProtocolHost.exe

7044 | [Owner : SERVIÇO LOCAL |Parent : 992] - (.Microsoft Corporation - Windows Driver Foundation - Processo de Host da Estrutura de Driver de Modo de Usuário.) - (6.2.9200.16384) = C:\Windows\System32\WUDFHost.exe

6812 | [Owner : SISTEMA |Parent : 760] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) - (3.1.6.3) = C:\PROGRA~2\GbPlugin\gbpsv.exe


¤¤¤¤¤¤¤¤¤¤ | Processos começados


424 | [Owner : SISTEMA |Parent : 4] - (.Microsoft Corporation - Gerenciador de Sessão do Windows.) - (6.1.7601.18229) = C:\Windows\System32\smss.exe

592 | [Owner : SISTEMA |Parent : 576] - (.Microsoft Corporation - Processo do tempo de Execução do Servidor do Cliente.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe

652 | [Owner : SISTEMA |Parent : 636] - (.Microsoft Corporation - Processo do tempo de Execução do Servidor do Cliente.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe

660 | [Owner : SISTEMA |Parent : 576] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) - (6.1.7600.16385) = C:\Windows\System32\wininit.exe

708 | [Owner : SISTEMA |Parent : 636] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) - (6.1.7601.18409) = C:\Windows\System32\winlogon.exe

760 | [Owner : SISTEMA |Parent : 660] - (.Microsoft Corporation - Aplicativo de serviços e controle.) - (6.1.7600.16385) = C:\Windows\System32\services.exe

768 | [Owner : SISTEMA |Parent : 660] - (.Microsoft Corporation - Local Security Authority Process.) - (6.1.7601.18443) = C:\Windows\System32\lsass.exe

776 | [Owner : SISTEMA |Parent : 660] - (.Microsoft Corporation - Serviço do Gerenciador de Sessão Local.) - (6.1.7601.17514) = C:\Windows\System32\lsm.exe

876 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1016 | [Owner : SERVIÇO DE REDE |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

612 | [Owner : SERVIÇO LOCAL |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

992 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1060 | [Owner : SERVIÇO LOCAL |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1084 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1248 | [Owner : SERVIÇO DE REDE |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1400 | [Owner : SERVIÇO LOCAL |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1444 | [Owner : SERVIÇO LOCAL |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1872 | [Owner : SISTEMA |Parent : 760] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - (13.0.2.628) = C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

1436 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\SysWOW64\svchost.exe

2120 | [Owner : SISTEMA |Parent : 760] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (2.1.9.0) = C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

2256 | [Owner : SERVIÇO LOCAL |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

2292 | [Owner : SERVIÇO LOCAL |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

2972 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

260 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

4452 | [Owner : SERVIÇO DE REDE |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

4696 | [Owner : SERVIÇO LOCAL |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1840 | [Owner : Asafer |Parent : 992] - (.Microsoft Corporation - Gerenciador de Janelas da Área de Trabalho.) - (6.1.7600.16385) = C:\Windows\System32\dwm.exe

4244 | [Owner : SERVIÇO LOCAL |Parent : 612] - (.Microsoft Corporation - Isolamento de Gráfico de Dispositivo de Áudio do Windows .) - (6.1.7601.17514) = C:\Windows\System32\audiodg.exe

832 | [Owner : Asafer |Parent : 2128] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - (13.0.2.628) = C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

5748 | [Owner : SERVIÇO LOCAL |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

1548 | [Owner : Asafer |Parent : 5456] - (.Hewlett-Packard Company - HP Support Assistant.) - (6.0.0.0) = C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe

6548 | [Owner : Asafer |Parent : 6308] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) - (6.0.335.0) = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

4928 | [Owner : SISTEMA |Parent : 876] - (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) = C:\Windows\System32\wbem\WmiPrvSE.exe

6772 | [Owner : SISTEMA |Parent : 1872] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - (13.0.2.628) = C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

1908 | [Owner : Asafer |Parent : 980] - (. - Shortcut_Module.) - (11.5.2014.1) = C:\Users\Asafer\Downloads\Shortcut_Module.exe

1796 | [Owner : SERVIÇO DE REDE |Parent : 876] - (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) = C:\Windows\System32\wbem\WmiPrvSE.exe

6320 | [Owner : SISTEMA |Parent : 760] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe

4904 | [Owner : Asafer |Parent : 1832] - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) - (7.0.7601.17610) = C:\Windows\System32\SearchProtocolHost.exe

1740 | [Owner : SERVIÇO LOCAL |Parent : 992] - (.Microsoft Corporation - Windows Driver Foundation - Processo de Host da Estrutura de Driver de Modo de Usuário.) - (6.2.9200.16384) = C:\Windows\System32\WUDFHost.exe

968 | [Owner : Asafer |Parent : 1908] - (. - Process Stopper.) - (1.0.0.0) = C:\Shortcut_Module\Protect_Module.exe

2560 | [Owner : Asafer |Parent : 876] - (.Microsoft Corporation - Processo de host do Windows (Rundll32).) - (6.1.7600.16385) = C:\Windows\System32\rundll32.exe


¤¤¤¤¤¤¤¤¤¤ | RUN


04 - [64] HKLM\..\Run : [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

04 - [64] HKLM\..\Run : [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"

04 - [64] HKLM\..\Run : [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe"

04 - [32] HKLM\..\Run : [igfxTray] C:\Windows\system32\igfxtray.exe

04 - [32] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe

04 - [32] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe

04 - HKU\S-1-5-21-3731980268-2904590947-1619489453-1000\..\Run : [iSUSPM Startup] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup

04 - HKU\S-1-5-21-3731980268-2904590947-1619489453-1000\..\Run : [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe

04 - HKU\S-1-5-21-3731980268-2904590947-1619489453-1000\..\Run : [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun


¤¤¤¤¤¤¤¤¤¤ | Serviços



funcionando : WINDEFEND

Serviço parado : WINDEFEND

funcionando : MMCSS

funcionando : Dhcp

funcionando : TcpIp

funcionando : WinHttpAutoProxysvc

Serviço parado : WinHttpAutoProxysvc

funcionando : SSDPSRV

funcionando : MPSSvc

Serviço parado : MPSSvc

funcionando : Rasman

Serviço parado : Rasman

funcionando : LanmanServer

funcionando : DNScache

Serviço parado : DNScache

Apagado prosperamente : HKLM\..\ControlSet001\Services\FLEXnet Licensing Service : 16

Apagado prosperamente : HKLM\..\ControlSet001\Services\SDFirewallService : Offers malware scanning services to Spybot-S&D modules.

Apagado prosperamente : HKLM\..\ControlSet002\Services\FLEXnet Licensing Service : 16

Apagado prosperamente : HKLM\..\ControlSet002\Services\SDFirewallService : Offers malware scanning services to Spybot-S&D modules.

Apagado prosperamente : HKLM\..\CurrentControlSet\Services\FLEXnet Licensing Service 64 : 16


¤¤¤¤¤¤¤¤¤¤ | Hosts


C:\Windows\System32\Drivers\etc\hosts : Reponha para zerar prosperamente


¤¤¤¤¤¤¤¤¤¤ | Registro


Apagado prosperamente : [64]HKLM\Software\Classes\Spybot2.DisabledFile

Apagado prosperamente : [64]HKLM\Software\Classes\Spybot2.SBIFile

Apagado prosperamente : [64]HKLM\Software\Classes\Spybot2.UTIFile

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshDecoWizardPage_c

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshDecoWizardPage_c.1

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshDoctorPage_c.1

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshManipulationPage.1

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshPrepCompPage_c.1

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshRelaxPage_c.1

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshSmoothPage_c.1

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshSplitPage_c.1

Apagado prosperamente : [64]HKLM\Software\Classes\Spybot2.SBEFile

Apagado prosperamente : [64]HKLM\Software\Classes\Spybot2.UTSFile

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshDoctorPage_c

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshPrepCompPage_c

Apagado prosperamente : [64]HKLM\Software\Classes\SWNGRE.uiMeshSmoothPage_c

Apagado prosperamente : [32]HKLM\Software\Classes\Spybot2.SBSFile

Apagado prosperamente : [32]HKLM\Software\Classes\SWNGRE.uiMeshManipulationPage

Apagado prosperamente : [32]HKLM\Software\Classes\SWNGRE.uiMeshSplitPage_c

Apagado prosperamente : [32]HKLM\Software\Classes\SWNGRE.uiMeshRelaxPage_c

Apagado prosperamente : HKU\S-1-5-21-3731980268-2904590947-1619489453-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3731980268-2904590947-1619489453-1000\Software\BabylonToolbar

Apagado prosperamente : [64]HKLM\Software\Classes\AppID\SoftwareUpdate.exe

Apagado prosperamente : [64]HKLM\Software\Classes\AppID\{6A070EEA-E3F8-411E-9D3A-F3814ED6D1A8} : SoftwareUpdateApp

Apagado prosperamente : [32]HKLM\Software\Classes\AppID\SoftwareUpdateAdmin.DLL

Apagado prosperamente : [64]HKLM\Software\Classes\TypeLib\{7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4} : SoftwareUpdate

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{03F05917-8B9F-4E59-98AF-454E4BA07D1E} : IAutoNestIntfEvents

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{15D048E5-1278-46EE-BC1B-48692523A223} : IuiMeshSplitPage_c

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{398C0028-8583-4382-B9A1-4BDF347594AC} : IDrawEffectZipperDistortion

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{3BF49B7D-6CDC-4A49-A317-F941C0B6EB1E} : IuiMeshDecoWizardPage_c

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{422CA428-AACB-496A-8FDD-86758BCFB756} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{4E10156C-862A-47FE-BD9E-7BD6CDC0E4D7} : IPDMWSearchResults

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{56188BC4-4248-4551-885A-477B3A30EE86} : IuiMeshSmoothPage_c

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{5D9C6A41-8EE3-4C58-980D-9C18785CE05C} : IuiMeshPrepCompPage_c

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{6A3BFE2E-1DB0-4076-84BA-86470D9AFC30} : IMeshCursor

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{81C7E033-EC39-4054-9B20-91FC1B5377DA} : IuiMeshManipulationPage

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{98A77083-05BC-4DD6-BC1F-9EC8A564E4B0} : IuiMeshRelaxPage_c

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{995E123A-2A19-4E52-872F-774C5589459C} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{A52621AD-E10F-477B-9ACB-B6181610788B} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF63} : ISearchQueryHelper

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{B0580035-9AA4-44FD-9547-4F91EB757AC4} : IVGEffectZipperDistortion

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{CF7549A9-7A2A-4A6E-ACF4-05452C98CF7E} : IVsToolWindowToolbarHost

Apagado prosperamente : [64]HKLM\Software\Classes\Interface\{D5ECA49D-564F-452F-87A7-909178924D62} : IuiMeshDoctorPage_c

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{0002D206-0000-0000-C000-000000000046} : IID_IOleInPlace3Dsite

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{03F05917-8B9F-4E59-98AF-454E4BA07D1E} : IAutoNestIntfEvents

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{15D048E5-1278-46EE-BC1B-48692523A223} : IuiMeshSplitPage_c

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{398C0028-8583-4382-B9A1-4BDF347594AC} : IDrawEffectZipperDistortion

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{3BF49B7D-6CDC-4A49-A317-F941C0B6EB1E} : IuiMeshDecoWizardPage_c

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{422CA428-AACB-496A-8FDD-86758BCFB756} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{4E10156C-862A-47FE-BD9E-7BD6CDC0E4D7} : IPDMWSearchResults

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{56188BC4-4248-4551-885A-477B3A30EE86} : IuiMeshSmoothPage_c

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{5D9C6A41-8EE3-4C58-980D-9C18785CE05C} : IuiMeshPrepCompPage_c

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{632CFD20-794A-4B34-9AC5-89972BDF7D93} : DGrooveAggregatedDeltaProcessingStatusListener

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{6A3BFE2E-1DB0-4076-84BA-86470D9AFC30} : IMeshCursor

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{81C7E033-EC39-4054-9B20-91FC1B5377DA} : IuiMeshManipulationPage

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{98A77083-05BC-4DD6-BC1F-9EC8A564E4B0} : IuiMeshRelaxPage_c

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{995E123A-2A19-4E52-872F-774C5589459C} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{A52621AD-E10F-477B-9ACB-B6181610788B} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{B0580035-9AA4-44FD-9547-4F91EB757AC4} : IVGEffectZipperDistortion

Apagado prosperamente : [32]HKLM\Software\Classes\Interface\{D5ECA49D-564F-452F-87A7-909178924D62} : IuiMeshDoctorPage_c

Apagado prosperamente : [64]HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Spybot - Search & Destroy 2

Apagado prosperamente : [64]HKLM\Software\Microsoft\Tracing\FLVPlayer_v3_RASAPI32

Apagado prosperamente : [64]HKLM\Software\Microsoft\Tracing\FLVPlayer_v3_RASMANCS

Apagado prosperamente : [32]HKLM\Software\Microsoft\Tracing\LinkuryInstaller_RASAPI32

Apagado prosperamente : [32]HKLM\Software\Microsoft\Tracing\LinkuryInstaller_RASMANCS

Apagado prosperamente : [64]HKLM\SOFTWARE\Safer Networking Limited

Apagado prosperamente : HKU\S-1-5-21-3731980268-2904590947-1619489453-1000\Software\Safer Networking Limited

Apagado prosperamente : HKU\S-1-5-21-3731980268-2904590947-1619489453-1000\Software\Trolltech

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} : ShopperReports.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} : alotBHO.dll;alotBHO.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{22D8E815-4A5E-4DFB-845E-AAB64207F5BD} : eBayTB.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} : ShoppingReport.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7} : PCTBrowserDefender.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} : BabylonToolbar.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825} : PCTBrowserDefender.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{57F02779-3D88-4958-8AD3-83C12D86ADC7} : advancedsearchbar.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} : alot.dll;alot.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{92085AD4-F48A-450D-BD93-B28CC7DF67CE} : eBayTB.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} : BabylonToolbar.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} : ShoppingReport.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CDEEC43D-3572-4E95-A2A5-F519D29F00C0} : advancedsearchbar.dll

Apagado prosperamente : [64]HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} : BabylonToolbarTlbr.dll

Apagado prosperamente : [64]HKLM\Software\Classes\Installer\Features\F3EF77EDD33AA99478DAF54C6016B704 :

Apagado prosperamente : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467 : 01:\Software\Smartbar\version

Apagado prosperamente : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] : C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon

Apagado prosperamente : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] : C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater


¤¤¤¤¤¤¤¤¤¤ | IFEO



¤¤¤¤¤¤¤¤¤¤ | Arquivos


Apagado prosperamente : C:\Windows\System32\NdfEventView.xml ()

Apagado prosperamente : C:\Users\All Users\FLEXnet

Apagado prosperamente : C:\Users\All Users\Spybot - Search & Destroy

Apagado prosperamente : C:\Users\All Users\onOne Software\Perfect Effects 4\FilmGrains\Ilford® Delta 100.tif (.-.)

Apagado prosperamente : C:\Users\All Users\onOne Software\Perfect Effects 4\FilmGrains\Ilford® Delta 3200.tif (.-.)

Apagado prosperamente : C:\Users\All Users\onOne Software\Perfect Effects 4\FilmGrains\Ilford® Delta 400.tif (.-.)

Apagado prosperamente : C:\Users\Asafer\Desktop\back up leandro\Favoritos\Gabi\Receitas light\Batatas recheadas com calabresa por jose.canozzi Acompanhamentos Receitas.com.url (.-.)

Apagado prosperamente : C:\Users\Asafer\Desktop\back up leandro\Favoritos\Gabi\Receitas light\Sadia Receitas Abobrinha Recheada Light.url (.-.)

Apagado prosperamente : C:\Users\Asafer\Desktop\back up leandro\Leandro\Disco_D\Nova Pasta (2)\Utilit_rios\Modelos da Galeria de Fotos na Web\Claro Horizontal

Apagado prosperamente : C:\Users\Asafer\Downloads\spybotsd-2.0.6-beta4.exe (© 2000-2011 Safer-Networking Ltd.. All rights reserved. .-.Spybot - Search & Destroy 2 )


¤¤¤¤¤¤¤¤¤¤ | Malversações de atalhos



¤¤¤¤¤¤¤¤¤¤ | Proxy



¤¤¤¤¤¤¤¤¤¤ | Malversações internet Explorer


Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Main\Window Title]|[] : -> Internet Explorer

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[start Page] : http://go.microsoft.com/fwlink/?LinkId=69157 -> http://www.google.com/

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[search Page] : http://go.microsoft.com/fwlink/?LinkId=54896 -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[browserMngr Start Page] : -> http://www.google.com/

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[CustomizeSearch] : -> http://www.google.com/

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[search Bar] : -> http://www.google.com/

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[start Page] : -> http://www.google.com/

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[browserMngr Start Page] : -> http://www.google.com/

Consertado : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[CustomizeSearch] : -> http://www.google.com/

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Main\Window Title]|[] : -> Internet Explorer

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[search Bar] : -> http://www.google.com/

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[start Page] : http://go.microsoft.com/fwlink/?LinkId=69157 -> http://www.google.com/

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[search Page] : http://go.microsoft.com/fwlink/?LinkId=54896 -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[browserMngr Start Page] : -> http://www.google.com/

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[CustomizeSearch] : -> http://www.google.com/

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Search]|[search Bar] : -> http://www.google.com/

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Search]|[start Page] : -> http://www.google.com/

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\SysWOW64\blank.htm

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Search]|[search Page] : -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Search]|[browserMngr Start Page] : -> http://www.google.com/

Consertado : [32][HKLM\Software\Microsoft\Internet Explorer\Search]|[CustomizeSearch] : http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> http://www.google.com/


¤¤¤¤¤¤¤¤¤¤ | Malversações Google Chrome


[Asafer] Reponha para zerar prosperamente : SearchURL

[Asafer] Reponha para zerar prosperamente : Preferences


[Asafer] : aohghmighlieiainnegkcijnfilokake = : Google & co - Google & co

[Asafer] : apdfllckaahabafndbhieahigkjlhalf = : Google & co - https://drive.google.com/?usp=chrome_app - Google & co

[Asafer] : blpcfgokakmgnkcojhhkbfbldkacnbeo = : Google & co - http://www.youtube.com - http://www.youtube.com/?feature=ytca - Google & co

[Asafer] : caimihdmbpgddfpkbochehpehdglpcim = : Guardião - Banco Itaú - GBBD Guardião - Itaú 30 horas

[Asafer] : coobgpohoikkiipiblmjeljniedjpjpf = : Google & co - http://www.google.com/webhp?source=search_app - Google & co

[Asafer] : dchlnpcodkpfdpacogkljefecpegganj = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer] : dhdnahjkclbpahfnjmpcbacidgllghba = : Autofill web-pages with stored passwords in Password Manager - Password Manager plugin

[Asafer] : hakdifolhalapjijoafobooafbilfakh = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer] : hghkgaeecgjhjkannahfamoehjmkjail = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer] : jagncdcchgajhfhijbbhecadmaiegcmh = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer] : kgmpojlddncminmkddkpoegdjhojjipg = : Guardião - Banco Itaú - GBBD Guardião - Itaú 30 horas

[Asafer] : nmmhkkegccagdldgiimedpiccmgmieda = : Google & co - Google & co

[Asafer] : nnjbodopomfddehlalfilheomcahbpei = : Módulo Adicional de Segurança CAIXA - GBBD Caixa Economica Federal

[Asafer] : pgacfjdigcddmmncljpflgcfpfahebkh = : Módulo de Segurança - Banco do Brasil - GBBD Banco do Brasil

[Asafer] : pjkljhegncpnkpknbcohdijeoejaedia = : Google & co - https://mail.google.com/mail/ca - Google & co

[Asafer] : pjldcfjmnllhmgjclecdnfampinooman = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer_2] : aohghmighlieiainnegkcijnfilokake = : Google & co - Google & co

[Asafer_2] : apdfllckaahabafndbhieahigkjlhalf = : Google & co - https://drive.google.com/?usp=chrome_app - Google & co

[Asafer_2] : blpcfgokakmgnkcojhhkbfbldkacnbeo = : Google & co - http://www.youtube.com - http://www.youtube.com/?feature=ytca - Google & co

[Asafer_2] : coobgpohoikkiipiblmjeljniedjpjpf = : Google & co - http://www.google.com/webhp?source=search_app - Google & co

[Asafer_2] : dchlnpcodkpfdpacogkljefecpegganj = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer_2] : hakdifolhalapjijoafobooafbilfakh = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer_2] : hghkgaeecgjhjkannahfamoehjmkjail = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer_2] : jagncdcchgajhfhijbbhecadmaiegcmh = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__

[Asafer_2] : nmmhkkegccagdldgiimedpiccmgmieda = : Google & co - Google & co

[Asafer_2] : pjkljhegncpnkpknbcohdijeoejaedia = : Google & co - https://mail.google.com/mail/ca - Google & co

[Asafer_2] : pjldcfjmnllhmgjclecdnfampinooman = : __MSG_ExtensionDescription__ - __MSG_ExtensionName__


¤¤¤¤¤¤¤¤¤¤ | Malversações Firefox


[Asafer] Apagado prosperamente : C:\Users\Asafer\AppData\Roaming\Mozilla\Firefox\Profiles\5r2g6265.default\sessionstore.js



¤¤¤¤¤¤¤¤¤¤ | Opera



¤¤¤¤¤¤¤¤¤¤ | Malversação de chaves StartMenuInternet


Consertado : [64][HKLM\Software\Clients\StartMenuInternet\Firefox.exe\shell\open\command] : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -> "C:\Program Files\Mozilla Firefox\Firefox.exe"

Consertado : [64][HKLM\Software\Clients\StartMenuInternet\Firefox.exe\shell\safemode\command] : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode -> "C:\Program Files\Mozilla Firefox\Firefox.exe" -safe-mode

Consertado : [64][HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -> "C:\Program Files\Internet Explorer\iexplore.exe"

Consertado : [64][HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command] : "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -> "C:\Program Files\Google\Chrome\Application\chrome.exe"


¤¤¤¤¤¤¤¤¤¤ | AppInit_DLLs


[64][HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 0

[32][HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 0


¤¤¤¤¤¤¤¤¤¤ | Malversações Javascript



¤¤¤¤¤¤¤¤¤¤ | Firewall



¤¤¤¤¤¤¤¤¤¤ | Arquivos temporários


[All Users] Arquivos temporários Apagado : 0 Ko

[Asafer] Arquivos temporários Apagado : 17846 Ko

[Asafer_2] Arquivos temporários Apagado : 6249 Ko

[Default] Arquivos temporários Apagado : 0 Ko

[Default User] Arquivos temporários Apagado : 0 Ko

[Public] Arquivos temporários Apagado : 0 Ko

[Todos os Usuários] Arquivos temporários Apagado : 0 Ko

[usuário Padrão] Arquivos temporários Apagado : 0 Ko

[C:\Windows\Temp] Arquivos temporários Apagado : 368 Ko

[C:\Temp] Arquivos temporários Apagado : 0 Ko



Outros relatórios



[X] : [1 Ko]


Elementos analisados : 709682 | Infetado : 135


¤¤¤¤¤¤¤¤¤¤ |EOF| ¤¤¤¤¤¤¤¤¤¤ | 09:20:17 | [41 Ko]

Compartilhar este post

Link para o post
Compartilhar em outros sites

Power Max    54

Power Max
Postado

:) Fico feliz que o problema tenha sido resolvido.

:seta: Só para finalizar siga estes tutoriais abaixo, por gentileza:

Excluindo erros e otimizando seu PC com o CCleaner

Elimine arquivos inúteis de seu PC com o PureRa
_____________________________________________________________________________________________

:seta: Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas deste tutorial.
______________________________________________________________________________________________

:thumbsup: Foi um prazer ajudar. Conte sempre conosco!


PROBLEMA RESOLVIDO

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.

Compartilhar este post

Link para o post
Compartilhar em outros sites
Visitante
Este tópico está impedido de receber novos posts.
Ir para a lista de tópicos Tópicos Resolvidos (Seguranca & Malwares)
×

Informação importante

Ao usar o fórum, você concorda com nossos Termos e condições.

  Aceito