taki26

@Elias Pereira obrigada...por me ajudar, encerro então...

@Elias Pereira Eu não uso o chrome uso o firefox que deve ser tudo a mesma coisa...mas acho que sim...tenho um email do gmail

Esse SSD ainda não formatei é novo...comprei um novo na esperança de "driblar" os hacker...mas pemo jeito não consegui fazem de tudo pra me prejudicar no jogo inclusive fazer o pc ferver...não entendi muito bem o q você quis dizer com contas sincronizadas do google...?

@Elias Pereira Ja resetei varias vezes inclusive a ultima o tecnico teve que vir na minha residencia reconfigurar meu modem pediu senha em vez de admin admin...pediu senha intelbras.... Eu acredito que eles tenham acesso por algum numero do pc que seja fixo porque mudei ate de SSD e mesmo assim eles tem acesso. Não sei o que fazer ate entrar nas configurações da placa de rede eu tentei, o mudar pro tal do duplex e nada de funcionar ele acaba voltando pras configurações anteriores. Não esta fácil jogar em velocidade de internet 94/95 sendo que tenho 400 de contratada. E meu pc novo que pedi troca e não estou com ele no momento deu de velocidade 600/600 bem mais acima da contratada. Meu medo que quando chegue o pc novo e eu comece a jogar eles façam o mesmo que fizeram nesse. o que será que significa esse erro?

não tem como saber se meu pc foi hackeado?...cliquei em um link q me pediram no jogo...depois disso meu pc nunca mais ficou bom...sinto q eles me monitoram e controlam minha velocidade da internet, quando mais lerda for pra eles é melhor, e tb me desconectam do jogo, reiniciam meu pc aprontam de tudo...se não for aqui em qual eu posto?

Eu fiz um scan ontem e agora a tarde...coloquei o segundo aqui mas agrupou...então acima tem dois scan do FRST. espero não ter ficado confuso... Medi a velocidade da internet esta em 94/95 não mudou nada...

Esqueci de executar como administrador... Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 28-12-2023 Executado por TANIA (29-12-2023 18:04:00) Run:2 Executando a partir de C:\Users\TANIA\Desktop Perfis Carregados: TANIA Modo da Inicialização: Normal ============================================== fixlist Conteúdo: ***************** SystemRestore: On CreateRestorePoint: CloseProcesses: StartBatch: pushd\windows\system32 bcdedit.exe /export C:\exportBCDfile bcdedit.exe /set {default} recoveryenabled yes bcdedit /enum sfc /scannow DISM.exe /Online /Cleanup-image /Restorehealth sfc /scannow Endbatch: StartBatch: SETLOCAL ENABLEEXTENSIONS echo userprofile=%USERPROFILE% if not defined userprofile echo no userprofile&goto :eof del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.dl*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.ex*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.zi*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.sy*" del /f /q "%userprofile%\AppData\Roaming\{*.*" rd /s /q "%userprofile%\AppData\Roaming\discord\Cache" rd /s /q "%userprofile%\AppData\Roaming\discord\code cache" rd /s /q "%userprofile%\AppData\Roaming\discord\gpucache" del /s /q "%userprofile%\AppData\Local\Temp\*.*" del /f /q "%userprofile%\AppData\Local\*-gui" del /f /q "%userprofile%\AppData\Roaming\*-gui" :eof EndBatch: C:\Windows\Temp\*.* C:\WINDOWS\system32\*.tmp C:\WINDOWS\system32\drivers\*.tmp C:\WINDOWS\syswow64\*.tmp startbatch: del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*" del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\Js\*.*" del /s /q "%userprofile%\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*.*" del /s /q "%userprofile%\AppData\Local\Temp\*.exe" endbatch: CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R CMD: "C:\Windows\SysWOW64\lodctr.exe" /R CMD: "C:\Windows\SYSTEM32\lodctr.exe" /R CMD: fltmc instances CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset C:\resettcpip.txt CMD: Bitsadmin /Reset /Allusers EMPTYTEMP: ***************** SystemRestore: On => completado Ponto de Restauração criado com sucesso. Processos fechados com sucesso. ========= Batch: ========= 0 A opera‡Æo foi conclu¡da com ˆxito. A opera‡Æo foi conclu¡da com ˆxito. Gerenciador de Inicializa‡Æo do Windows -------------------- identificador {bootmgr} device partition=\Device\HarddiskVolume1 description Windows Boot Manager locale pt-BR inherit {globalsettings} default {current} resumeobject {f60b2f13-84d3-11ee-b4f7-c9008dfcbf89} displayorder {current} toolsdisplayorder {memdiag} timeout 30 Carregador de Inicializa‡Æo do Windows ------------------- identificador {current} device partition=C: path \Windows\system32\winload.exe description Windows 7 locale pt-BR inherit {bootloadersettings} recoverysequence {f60b2f15-84d3-11ee-b4f7-c9008dfcbf89} recoveryenabled Yes osdevice partition=C: systemroot \Windows resumeobject {f60b2f13-84d3-11ee-b4f7-c9008dfcbf89} nx OptIn Iniciando verifica‡Æo de arquivos. O processo levar alguns minutos para ser conclu¡do. Iniciando fase de verifica‡Æo de verifica‡Æo do sistema. Verifica‡Æo 0% conclu¡da.Verifica‡Æo 1% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 3% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 5% conclu¡da.Verifica‡Æo 6% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 8% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 10% conclu¡da.Verifica‡Æo 11% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 13% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 15% conclu¡da.Verifica‡Æo 16% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 18% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 20% conclu¡da.Verifica‡Æo 21% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 23% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 25% conclu¡da.Verifica‡Æo 26% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 28% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 30% conclu¡da.Verifica‡Æo 31% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 33% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 35% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 37% conclu¡da.Verifica‡Æo 38% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 40% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 42% conclu¡da.Verifica‡Æo 43% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 45% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 47% conclu¡da.Verifica‡Æo 48% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 50% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 52% conclu¡da.Verifica‡Æo 53% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 55% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 57% conclu¡da.Verifica‡Æo 58% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 60% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 62% conclu¡da.Verifica‡Æo 63% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 65% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 67% conclu¡da.Verifica‡Æo 68% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 70% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 72% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 74% conclu¡da.Verifica‡Æo 75% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 77% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 79% conclu¡da.Verifica‡Æo 80% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 82% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 84% conclu¡da.Verifica‡Æo 85% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 87% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 89% conclu¡da.Verifica‡Æo 90% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 92% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 94% conclu¡da.Verifica‡Æo 95% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 97% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 99% conclu¡da.Verifica‡Æo 100% conclu¡da. A Prote‡Æo de Recursos do Windows nÆo encontrou nenhuma viola‡Æo de integridade. Ferramenta de Gerenciamento e Manuten‡Æo de Imagens de Implanta‡Æo VersÆo: 6.1.7601.24499 EU ACHO QUE ESSE SEGUNDO QUE REPASSEI ESTA MAIS COMPLETO... Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 28-12-2023 Executado por TANIA (29-12-2023 18:38:01) Run:3 Executando a partir de C:\Users\TANIA\Desktop Perfis Carregados: TANIA Modo da Inicialização: Normal ============================================== fixlist Conteúdo: ***************** Start:: SystemRestore: On CreateRestorePoint: CloseProcesses: StartBatch: pushd\windows\system32 bcdedit.exe /export C:\exportBCDfile bcdedit.exe /set {default} recoveryenabled yes bcdedit /enum sfc /scannow DISM.exe /Online /Cleanup-image /Restorehealth sfc /scannow Endbatch: StartBatch: SETLOCAL ENABLEEXTENSIONS echo userprofile=%USERPROFILE% if not defined userprofile echo no userprofile&goto :eof del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.dl*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.ex*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.zi*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.sy*" del /f /q "%userprofile%\AppData\Roaming\{*.*" rd /s /q "%userprofile%\AppData\Roaming\discord\Cache" rd /s /q "%userprofile%\AppData\Roaming\discord\code cache" rd /s /q "%userprofile%\AppData\Roaming\discord\gpucache" del /s /q "%userprofile%\AppData\Local\Temp\*.*" del /f /q "%userprofile%\AppData\Local\*-gui" del /f /q "%userprofile%\AppData\Roaming\*-gui" :eof EndBatch: C:\Windows\Temp\*.* C:\WINDOWS\system32\*.tmp C:\WINDOWS\system32\drivers\*.tmp C:\WINDOWS\syswow64\*.tmp startbatch: del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*" del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\Js\*.*" del /s /q "%userprofile%\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*.*" del /s /q "%userprofile%\AppData\Local\Temp\*.exe" endbatch: CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R CMD: "C:\Windows\SysWOW64\lodctr.exe" /R CMD: "C:\Windows\SYSTEM32\lodctr.exe" /R CMD: fltmc instances CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset C:\resettcpip.txt CMD: Bitsadmin /Reset /Allusers EMPTYTEMP: End:: ***************** SystemRestore: On => completado Ponto de Restauração criado com sucesso. Processos fechados com sucesso. ========= Batch: ========= 0 A opera‡Æo foi conclu¡da com ˆxito. A opera‡Æo foi conclu¡da com ˆxito. Gerenciador de Inicializa‡Æo do Windows -------------------- identificador {bootmgr} device partition=\Device\HarddiskVolume1 description Windows Boot Manager locale pt-BR inherit {globalsettings} default {current} resumeobject {f60b2f13-84d3-11ee-b4f7-c9008dfcbf89} displayorder {current} toolsdisplayorder {memdiag} timeout 30 Carregador de Inicializa‡Æo do Windows ------------------- identificador {current} device partition=C: path \Windows\system32\winload.exe description Windows 7 locale pt-BR inherit {bootloadersettings} recoverysequence {f60b2f15-84d3-11ee-b4f7-c9008dfcbf89} recoveryenabled Yes osdevice partition=C: systemroot \Windows resumeobject {f60b2f13-84d3-11ee-b4f7-c9008dfcbf89} nx OptIn Iniciando verifica‡Æo de arquivos. O processo levar alguns minutos para ser conclu¡do. Iniciando fase de verifica‡Æo de verifica‡Æo do sistema. Verifica‡Æo 0% conclu¡da.Verifica‡Æo 1% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 3% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 5% conclu¡da.Verifica‡Æo 6% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 8% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 10% conclu¡da.Verifica‡Æo 11% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 13% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 15% conclu¡da.Verifica‡Æo 16% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 18% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 20% conclu¡da.Verifica‡Æo 21% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 23% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 25% conclu¡da.Verifica‡Æo 26% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 28% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 30% conclu¡da.Verifica‡Æo 31% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 33% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 35% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 37% conclu¡da.Verifica‡Æo 38% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 40% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 42% conclu¡da.Verifica‡Æo 43% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 45% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 47% conclu¡da.Verifica‡Æo 48% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 50% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 52% conclu¡da.Verifica‡Æo 53% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 55% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 57% conclu¡da.Verifica‡Æo 58% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 60% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 62% conclu¡da.Verifica‡Æo 63% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 65% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 67% conclu¡da.Verifica‡Æo 68% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 70% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 72% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 74% conclu¡da.Verifica‡Æo 75% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 77% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 79% conclu¡da.Verifica‡Æo 80% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 82% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 84% conclu¡da.Verifica‡Æo 85% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 87% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 89% conclu¡da.Verifica‡Æo 90% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 92% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 94% conclu¡da.Verifica‡Æo 95% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 97% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 99% conclu¡da.Verifica‡Æo 100% conclu¡da. A Prote‡Æo de Recursos do Windows nÆo encontrou nenhuma viola‡Æo de integridade. Ferramenta de Gerenciamento e Manuten‡Æo de Imagens de Implanta‡Æo VersÆo: 6.1.7601.24499 VersÆo da Imagem: 6.1.7601.24499 Erro: 87 A op‡Æo restorehealth nÆo ‚ reconhecida neste contexto. Para obter mais informa‡äes, consulte a ajuda. O arquivo de log do DISM pode ser localizado em C:\Windows\Logs\DISM\dism.log Iniciando verifica‡Æo de arquivos. O processo levar alguns minutos para ser conclu¡do. Iniciando fase de verifica‡Æo de verifica‡Æo do sistema. Verifica‡Æo 0% conclu¡da.Verifica‡Æo 1% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 3% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 5% conclu¡da.Verifica‡Æo 6% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 8% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 10% conclu¡da.Verifica‡Æo 11% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 13% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 15% conclu¡da.Verifica‡Æo 16% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 18% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 20% conclu¡da.Verifica‡Æo 21% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 23% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 25% conclu¡da.Verifica‡Æo 26% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 28% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 30% conclu¡da.Verifica‡Æo 31% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 33% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 35% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 37% conclu¡da.Verifica‡Æo 38% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 40% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 42% conclu¡da.Verifica‡Æo 43% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 45% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 47% conclu¡da.Verifica‡Æo 48% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 50% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 52% conclu¡da.Verifica‡Æo 53% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 55% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 57% conclu¡da.Verifica‡Æo 58% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 60% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 62% conclu¡da.Verifica‡Æo 63% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 65% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 67% conclu¡da.Verifica‡Æo 68% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 70% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 72% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 74% conclu¡da.Verifica‡Æo 75% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 77% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 79% conclu¡da.Verifica‡Æo 80% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 82% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 84% conclu¡da.Verifica‡Æo 85% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 87% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 89% conclu¡da.Verifica‡Æo 90% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 92% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 94% conclu¡da.Verifica‡Æo 95% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 97% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 99% conclu¡da.Verifica‡Æo 100% conclu¡da. A Prote‡Æo de Recursos do Windows nÆo encontrou nenhuma viola‡Æo de integridade. ========= Fim de Batch: ========= ========= Batch: ========= 0 userprofile=C:\Users\TANIA 0 Nꏃ漀 昀漀椀 瀀漀猀猀쌀­vel encontrar C:\Users\TANIA\AppData\Roaming\Microsoft\*.dl* Nꏃ漀 昀漀椀 瀀漀猀猀쌀­vel encontrar C:\Users\TANIA\AppData\Roaming\Microsoft\*.ex* Nꏃ漀 昀漀椀 瀀漀猀猀쌀­vel encontrar C:\Users\TANIA\AppData\Roaming\Microsoft\*.zi* Nꏃ漀 昀漀椀 瀀漀猀猀쌀­vel encontrar C:\Users\TANIA\AppData\Roaming\Microsoft\*.sy* Nꏃ漀 昀漀椀 瀀漀猀猀쌀­vel encontrar C:\Users\TANIA\AppData\Roaming\{*.* 伀 猀椀猀琀攀洀愀 渀쎣o pode encontrar o caminho especificado. 伀 猀椀猀琀攀洀愀 渀쎣o pode encontrar o caminho especificado. 伀 猀椀猀琀攀洀愀 渀쎣o pode encontrar o caminho especificado. 0 Nꏃ漀 昀漀椀 瀀漀猀猀쌀­vel encontrar C:\Users\TANIA\AppData\Local\*-gui Nꏃ漀 昀漀椀 瀀漀猀猀쌀­vel encontrar C:\Users\TANIA\AppData\Roaming\*-gui 0 ========= Fim de Batch: ========= =========== "C:\Windows\Temp\*.*" ========== não encontrado (a) ========= Fim -> "C:\Windows\Temp\*.*" ======== =========== "C:\WINDOWS\system32\*.tmp" ========== não encontrado (a) ========= Fim -> "C:\WINDOWS\system32\*.tmp" ======== =========== "C:\WINDOWS\system32\drivers\*.tmp" ========== não encontrado (a) ========= Fim -> "C:\WINDOWS\system32\drivers\*.tmp" ======== =========== "C:\WINDOWS\syswow64\*.tmp" ========== não encontrado (a) ========= Fim -> "C:\WINDOWS\syswow64\*.tmp" ======== ========= Batch: ========= 0 0 伀 猀椀猀琀攀洀愀 渀쎣o pode encontrar o caminho especificado. Nꏃ漀 昀漀椀 瀀漀猀猀쌀­vel encontrar C:\Users\TANIA\AppData\Local\Temp\*.exe 0 ========= Fim de Batch: ========= ========= "%WINDIR%\SYSTEM32\lodctr.exe" /R ========= Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema ========= Fim de CMD: ========= ========= "%WINDIR%\SysWOW64\lodctr.exe" /R ========= Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema ========= Fim de CMD: ========= ========= "C:\Windows\SysWOW64\lodctr.exe" /R ========= Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema ========= Fim de CMD: ========= ========= "C:\Windows\SYSTEM32\lodctr.exe" /R ========= Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema ========= Fim de CMD: ========= ========= fltmc instances ========= Filtro Nome do volume Altitude Nome da instƒncia Quadro VlStatus -------------------- ------------------------------------- ------------ --------------------- ----- -------- MBAMChameleon 400900 MBAMChameleon 0 MBAMChameleon 400900 MBAMChameleon 0 MBAMChameleon \Device\HarddiskVolumeShadowCopy2 400900 MBAMChameleon 0 MBAMChameleon \Device\HarddiskVolumeShadowCopy3 400900 MBAMChameleon 0 luafv 135000 luafv 0 FileInfo \Device\Mup 45000 FileInfo 0 FileInfo 45000 FileInfo 0 FileInfo 45000 FileInfo 0 FileInfo \Device\HarddiskVolumeShadowCopy2 45000 FileInfo 0 FileInfo \Device\HarddiskVolumeShadowCopy3 45000 FileInfo 0 ========= Fim de CMD: ========= ========= netsh advfirewall reset ========= Ok. ========= Fim de CMD: ========= ========= netsh advfirewall set allprofiles state ON ========= Ok. ========= Fim de CMD: ========= ========= ipconfig /flushdns ========= Configura‡Æo de IP do Windows Libera‡Æo do Cache do DNS Resolver bem-sucedida. ========= Fim de CMD: ========= ========= netsh winsock reset catalog ========= Cat logo Winsock redefinido com ˆxito. Reinicie o computador para concluir a redefini‡Æo. ========= Fim de CMD: ========= ========= netsh int ip reset C:\resettcpip.txt ========= Redefinindo Interface, OK! Reinicie o computador para concluir esta a‡Æo. ========= Fim de CMD: ========= ========= Bitsadmin /Reset /Allusers ========= BITSADMIN version 3.0 [ 7.5.7601 ] BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. 0 out of 0 jobs canceled. ========= Fim de CMD: ========= =========== EmptyTemp: ========== FlushDNS => completado BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 1051928 B Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B Windows/system/drivers => 0 B Edge => 0 B Firefox => 40694890 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Public => 0 B ProgramData => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 0 B TANIA => 25008 B RecycleBin => 0 B EmptyTemp: => 39.8 MB de dados temporários Removidos. ================================ O sistema precisou ser reiniciado. ==== Fim de Fixlog 18:45:11 ====

@Elias Pereira

@Mega Blaster Eu ja fiz o teste nesse simet que você falou...o problema esta só nesse pc, eu jogo e eles fazem de tudo mas de tudo mesmo pra me tirarem do jogo, e como o outro pc era novo nunca tinha jogado nele...a velocidade nele estava top... Acontece que este pc mais velho sempre mostrou a velocidade de download 400...e upload 400... Agora estou navegando a 96/96...não consigo descobrir a causa... No provedor de internet eles dizem que não tem nada a ver com eles... Não consigo imaginar o que pode ser....Mas imagino que sejam hackers porque eles sempre pedem pra eu verificar alguma coisa que tem que ser verificado no jogo atraves de sites.

Não lembro se comentei...mas já tinha feito o teste no outro pc quando fiz nesse...e deu velocidade de 600/600 bem acima da velocidade contratada...que é 400mb....o problema é só nesse pc mesmo...to vendo em um outro grupo aqui sobre a possibilidade de virus/trojan no pc...

Resultado do análise da Farbar Recovery Scan Tool (FRST) (x64) Versão: 22-12-2023 Executado por TANIA (administrador) em TANIA-PC (24-12-2023 17:34:02) Executando a partir de C:\Users\TANIA\Downloads\FRST64(1).exe Perfis Carregados: TANIA Plataforma: Microsoft Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil) Navegador padrão: FF Modo da Inicialização: Normal ==================== Processos (Whitelisted) ================= (Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.) (C:\Program Files (x86)\Mozilla Firefox\firefox.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe (C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (explorer.exe ->) () [Arquivo não assinado] C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <16> (services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe (services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe (services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (taskeng.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe Falha ao acessar processo -> csrss.exe Falha ao acessar processo -> csrss.exe Falha ao acessar processo -> WmiPrvSE.exe ==================== Registro (Whitelisted) =================== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.) HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (Nenhum Arquivo) HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (Nenhum Arquivo) HKU\S-1-5-21-2908120070-3248990571-1962529074-1000\...\Run: [FreeDesktopTimer] => C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe [634880 2015-07-25] () [Arquivo não assinado] GroupPolicy: Restrição ? <==== ATENÇÃO Policies: C:\ProgramData\NTUSER.pol: Restrição <==== ATENÇÃO ==================== Tarefas Agendadas (Whitelisted) ================= (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) (Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.) ==================== Internet (Whitelisted) ==================== (Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{0E27822B-2699-42C8-A108-3A5482EF5655}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{0E27822B-2699-42C8-A108-3A5482EF5655}: [DhcpDomain] intelbras.local Tcpip\..\Interfaces\{74E9C92B-2374-4AA0-8D9E-0B8076D13DBC}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{74E9C92B-2374-4AA0-8D9E-0B8076D13DBC}\94E44554C424251435: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{74E9C92B-2374-4AA0-8D9E-0B8076D13DBC}\94E44554C424251435: [DhcpDomain] intelbras.local Edge: ======= Edge Profile: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-16] Edge Extension: (Malwarebytes Browser Guard) - C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2023-11-18] Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn] Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn] FireFox: ======== FF DefaultProfile: x94p6wtl.default FF ProfilePath: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\x94p6wtl.default [2023-11-16] FF ProfilePath: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr [2023-12-24] FF Extension: (Language: Português (BR)) - C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\Extensions\[email protected] [2023-11-16] FF Extension: (Malwarebytes Browser Guard) - C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2023-12-19] FF Plugin: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo] Chrome: ======= CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] ==================== Serviços (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [43784 2023-12-12] (Intel Corporation -> Intel) R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [240392 2023-12-12] (Intel Corporation -> Intel) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9405400 2023-12-20] (Malwarebytes Inc. -> Malwarebytes) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation) ===================== Drivers (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [222784 2023-12-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239576 2023-11-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] (ASUSTeK Computer Inc. -> ) R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) S3 cpuz149; \??\C:\Users\TANIA\AppData\Local\Temp\cpuz149\cpuz149_x64.sys [X] <==== ATENÇÃO S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) ==================== Um mês (criados) (Whitelisted) ========= (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2023-12-24 17:34 - 2023-12-24 17:34 - 000006839 _____ C:\Users\TANIA\Downloads\FRST.txt 2023-12-24 17:29 - 2023-12-24 17:34 - 000000000 ____D C:\FRST 2023-12-24 17:29 - 2023-12-24 17:29 - 002387456 _____ (Farbar) C:\Users\TANIA\Downloads\FRST64(1).exe 2023-12-24 17:20 - 2023-12-24 17:20 - 002387456 _____ (Farbar) C:\Users\TANIA\Downloads\FRST64.exe 2023-12-24 08:20 - 2023-12-24 08:20 - 000025066 _____ C:\Users\TANIA\Downloads\PedidoRevisao.pdf 2023-12-24 07:55 - 2023-12-24 07:55 - 000174756 _____ C:\Users\TANIA\Downloads\Pgto processador.pdf 2023-12-21 19:05 - 2023-12-21 19:05 - 000000434 __RSH C:\ProgramData\ntuser.pol 2023-12-21 17:56 - 2023-12-21 17:56 - 000001760 _____ C:\Users\TANIA\Downloads\AdwCleaner[C00].txt 2023-12-21 17:56 - 2023-12-21 17:56 - 000001760 _____ C:\Users\TANIA\Downloads\AdwCleaner[C00](1).txt 2023-12-21 17:55 - 2023-12-21 17:55 - 000001598 _____ C:\Users\TANIA\Downloads\AdwCleaner[S02](1).txt 2023-12-21 17:54 - 2023-12-21 17:54 - 000001537 _____ C:\Users\TANIA\Downloads\AdwCleaner[S01].txt 2023-12-21 17:53 - 2023-12-21 17:53 - 000001646 _____ C:\Users\TANIA\Downloads\AdwCleaner[S00].txt 2023-12-21 17:51 - 2023-12-21 17:51 - 000002885 _____ C:\Users\TANIA\Downloads\ZHPCleaner (S).txt 2023-12-21 17:49 - 2023-12-21 17:49 - 000002895 _____ C:\Users\TANIA\Downloads\ZHPCleaner (R)(1).txt 2023-12-20 16:35 - 2023-12-20 16:35 - 000001598 _____ C:\Users\TANIA\Downloads\AdwCleaner[S02].txt 2023-12-20 16:14 - 2023-12-20 16:14 - 000000000 ____D C:\Users\TANIA\Downloads\resultado antivirus 2023-12-20 16:13 - 2023-12-20 16:13 - 000001172 _____ C:\Users\TANIA\Documents\antivirus.txt 2023-12-18 10:51 - 2023-12-18 10:51 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Microsoft\Vault 2023-12-18 10:49 - 2023-12-18 10:50 - 000000000 ____D C:\Users\TANIA\Downloads\winalguma coisa 2023-12-17 21:51 - 2023-12-17 21:51 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2023-12-17 17:51 - 2023-12-17 18:04 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\AnyDesk 2023-12-17 17:49 - 2023-12-17 17:49 - 005525576 _____ (AnyDesk Software GmbH) C:\Users\TANIA\Downloads\AnyDesk.exe 2023-12-16 16:47 - 2023-12-16 17:11 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\ZHP 2023-12-16 16:47 - 2023-12-16 16:47 - 000000000 ____D C:\Users\TANIA\AppData\Local\ZHP 2023-12-16 16:44 - 2023-12-16 16:45 - 000000000 ____D C:\AdwCleaner 2023-12-16 01:28 - 2023-12-16 01:28 - 003362976 _____ (Nicolas Coolman) C:\Users\TANIA\Downloads\ZHPCleaner.exe 2023-12-16 01:26 - 2023-12-16 01:26 - 008791352 _____ (Malwarebytes) C:\Users\TANIA\Downloads\adwcleaner_8.4.0.exe 2023-12-16 01:23 - 2023-12-16 01:23 - 000002525 _____ C:\Users\TANIA\Downloads\ZHPCleaner (R).txt 2023-12-15 11:33 - 2023-12-15 11:33 - 000026952 _____ C:\Users\TANIA\Downloads\1476831-1 NOTA FISCAL PC.pdf 2023-12-15 11:29 - 2023-12-15 11:29 - 000026952 _____ C:\Users\TANIA\Downloads\1476831.pdf 2023-12-14 18:19 - 2023-12-14 18:19 - 000014555 _____ C:\Users\TANIA\Downloads\42231109376495000122550020014768311399806581-nfe.xml 2023-12-14 15:20 - 2023-12-14 15:21 - 000213779 _____ C:\Users\TANIA\Downloads\WhatsApp Image 2023-12-14 at 15.13.50.jpeg 2023-12-14 11:53 - 2021-12-20 04:51 - 000127352 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2023-12-14 11:52 - 2023-12-14 11:53 - 005097344 _____ C:\Users\TANIA\Downloads\Install_Win7_7142_12222021.zip 2023-12-14 11:49 - 2023-12-14 11:49 - 006280872 _____ (Intel) C:\Users\TANIA\Downloads\Intel-Driver-and-Support-Assistant-Installer(2).exe 2023-12-14 11:37 - 2023-12-14 11:37 - 006280872 _____ (Intel) C:\Users\TANIA\Downloads\Intel-Driver-and-Support-Assistant-Installer(1).exe 2023-12-14 11:29 - 2023-12-14 11:40 - 000001526 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk 2023-12-14 11:29 - 2023-12-14 11:29 - 000000000 ____D C:\ProgramData\Intel 2023-12-14 11:28 - 2023-12-14 11:28 - 006280872 _____ (Intel) C:\Users\TANIA\Downloads\Intel-Driver-and-Support-Assistant-Installer.exe 2023-12-12 21:17 - 2023-12-12 21:17 - 048236784 _____ (AMD Inc.) C:\Users\TANIA\Downloads\amd-software-adrenalin-edition-23.12.1-minimalsetup-231205_web.exe 2023-12-12 17:43 - 2023-12-12 17:43 - 000000000 ____D C:\Users\TANIA\Downloads\Windows 11 X64 23H2 22631.2715 Pro en-US OCT 2023 2023-12-12 17:42 - 2023-12-12 21:42 - 000000000 ____D C:\ProgramData\Transmission 2023-12-12 17:41 - 2023-12-12 21:42 - 000000000 ____D C:\Users\TANIA\AppData\Local\transmission 2023-12-12 17:39 - 2023-12-12 17:39 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transmission Qt Client.lnk 2023-12-12 17:39 - 2023-12-12 17:39 - 000002443 _____ C:\Users\Public\Desktop\Transmission Qt Client.lnk 2023-12-12 17:39 - 2023-12-12 17:39 - 000000000 ____D C:\Program Files\Transmission 2023-12-12 17:38 - 2023-12-12 17:38 - 018112512 _____ C:\Users\TANIA\Downloads\transmission-4.0.5-qt5-x64.msi 2023-12-12 17:35 - 2023-12-12 17:35 - 018829312 _____ C:\Users\TANIA\Downloads\transmission-4.0.5-x64.msi 2023-12-12 15:07 - 2023-12-12 15:07 - 000000000 ____D C:\Windows\pss 2023-11-29 01:06 - 2023-11-30 09:32 - 000000000 ____D C:\Users\TANIA\Documents\Digitalização 2023-11-27 06:25 - 2023-11-27 06:25 - 000001531 _____ C:\Users\TANIA\Documents\msg a bruxa da klara sl.txt 2023-11-25 08:58 - 2023-12-19 15:02 - 000000000 ____D C:\Users\TANIA\Documents\Receitas 2023-11-25 02:19 - 2023-11-25 07:17 - 000000377 _____ C:\Users\TANIA\Documents\AHT msg grupo cond..txt 2023-11-24 20:32 - 2023-11-24 20:36 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\TP-LINK 2023-11-24 20:31 - 2023-11-24 20:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK 2023-11-24 20:31 - 2023-11-24 20:31 - 000002276 _____ C:\Users\Public\Desktop\TP-LINK Wireless Configuration Utility.lnk 2023-11-24 20:31 - 2023-11-24 20:31 - 000000000 ____D C:\Program Files (x86)\TP-LINK 2023-11-24 20:30 - 2012-05-14 17:41 - 000926824 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\rtl8192cu.sys 2023-11-24 20:30 - 2012-05-14 17:41 - 000926824 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTL8192cu.sys 2023-11-24 20:26 - 2023-11-24 20:43 - 000000000 ____D C:\ProgramData\TP-LINK ==================== Um mês (modificados) ================== (Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.) 2023-12-24 17:23 - 2009-07-14 01:45 - 000024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2023-12-24 17:23 - 2009-07-14 01:45 - 000024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2023-12-24 17:20 - 2023-11-16 19:53 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2023-12-24 17:18 - 2023-11-17 18:49 - 000000000 ____D C:\Users\TANIA\AppData\Local\Catznip64 2023-12-24 16:35 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\rescache 2023-12-24 16:14 - 2009-07-14 14:55 - 000705066 _____ C:\Windows\system32\prfh0416.dat 2023-12-24 16:14 - 2009-07-14 14:55 - 000146910 _____ C:\Windows\system32\prfc0416.dat 2023-12-24 16:14 - 2009-07-14 02:13 - 001633530 _____ C:\Windows\system32\PerfStringBackup.INI 2023-12-24 16:14 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\inf 2023-12-24 16:11 - 2023-11-17 01:16 - 000000000 ____D C:\Users\TANIA\AppData\Local\Malwarebytes 2023-12-24 16:10 - 2009-07-14 02:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2023-12-24 07:10 - 2023-11-17 10:52 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Radegast 2023-12-24 06:42 - 2023-11-17 07:23 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Telegram Desktop 2023-12-24 04:23 - 2023-11-18 04:33 - 000000000 ____D C:\Users\TANIA\Downloads\Telegram Desktop 2023-12-21 19:03 - 2009-07-14 00:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2023-12-21 17:00 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\PolicyDefinitions 2023-12-21 16:53 - 2023-11-20 22:30 - 000000000 ____D C:\Users\TANIA\AppData\Local\ElevatedDiagnostics 2023-12-19 22:31 - 2023-11-21 19:34 - 000000000 ____D C:\Users\TANIA\AppData\Local\CrashDumps 2023-12-19 13:18 - 2023-11-16 19:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2023-12-19 13:18 - 2023-11-16 19:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2023-12-19 13:17 - 2009-07-14 02:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2023-12-19 13:17 - 2009-07-14 02:32 - 000000000 ____D C:\Program Files\DVD Maker 2023-12-18 10:50 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\system32\NDF 2023-12-15 11:39 - 2023-11-17 00:34 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Microsoft\UProof 2023-12-14 11:53 - 2023-11-16 19:27 - 000000000 ____D C:\Program Files (x86)\Realtek 2023-12-14 11:40 - 2023-11-17 01:28 - 001598148 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2023-12-14 11:40 - 2023-11-16 23:24 - 000000000 ____D C:\ProgramData\Package Cache 2023-12-14 11:29 - 2023-11-16 19:26 - 000000000 ____D C:\Program Files (x86)\Intel 2023-12-13 18:55 - 2023-11-16 23:25 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Catznip 2023-12-09 23:08 - 2023-11-17 01:29 - 000000000 ____D C:\Users\TANIA\Documents\PROTOCOLOS 2023-12-01 21:42 - 2023-11-17 00:34 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Microsoft\Word 2023-11-25 21:37 - 2023-11-17 00:34 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Microsoft\Office 2023-11-24 20:31 - 2023-11-16 19:26 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2023-11-24 20:23 - 2023-11-16 19:29 - 000015260 _____ C:\Windows\system32\results.xml 2023-11-24 20:22 - 2023-11-16 19:25 - 000025329 _____ C:\Windows\Ascd_log.ini 2023-11-24 20:20 - 2023-11-16 19:25 - 000001769 _____ C:\Windows\Language_trs.ini 2023-11-24 20:19 - 2023-11-16 19:25 - 000018742 _____ C:\Windows\Ascd_tmp.ini ==================== Arquivos na raiz de alguns diretórios ======== 2023-11-18 03:09 - 2023-11-18 03:09 - 000007611 _____ () C:\Users\TANIA\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (Não há correção automática para arquivos que não passaram na verificação.) LastRegBack: 2023-12-18 12:47 ==================== Fim de FRST.txt ========================

Resultado da análise adicional Farbar Recovery Scan Tool (x64) Versão: 22-12-2023 Executado por TANIA (24-12-2023 17:34:38) Executando a partir de C:\Users\TANIA\Downloads Microsoft Windows 7 Ultimate Service Pack 1 (X64) (2023-11-16 22:05:33) Modo da Inicialização: Normal ========================================================== ==================== Contas: ============================= (Se uma entrada for incluída na fixlist, será removida.) Administrador (S-1-5-21-2908120070-3248990571-1962529074-500 - Administrator - Disabled) Convidado (S-1-5-21-2908120070-3248990571-1962529074-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2908120070-3248990571-1962529074-1002 - Limited - Enabled) TANIA (S-1-5-21-2908120070-3248990571-1962529074-1000 - Administrator - Enabled) => C:\Users\TANIA ==================== Central de Segurança ======================== (Se uma entrada for incluída na fixlist, será removida.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programas Instalados ====================== (Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.) Atualização do produto Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{717C9095-8AAE-41CB-B046-BD6E8399F4F3}) (Version: - Microsoft) Atualização do produto Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{5016CB22-B9A7-44FB-AA72-AF28B27B15EA}) (Version: - Microsoft) Atualização do produto Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{BE3A7C0C-0081-4694-B5F9-980DD66BDDF8}) (Version: - Microsoft) Atualização do produto Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{7297E3A9-FCD4-4E0E-A306-7A90359E50E3}) (Version: - Microsoft) CatznipViewer (HKLM\...\CatznipViewer) (Version: 13.2.0.51006 - Kitty Barnett) CPUID CPU-Z 2.08 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.08 - CPUID, Inc.) Free Desktop Timer 1.21 (HKLM-x32\...\Free Desktop Timer_is1) (Version: - Drive Software Company) Intel Driver && Support Assistant (HKLM-x32\...\{89AC6487-3878-456A-9BE8-D7DAA3B01799}) (Version: 23.4.39.9 - Intel) Hidden Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation) Intel® Driver & Support Assistant (HKLM-x32\...\{acb264b6-ac63-44a6-bd16-70375ad0e036}) (Version: 23.4.39.9 - Intel) Malwarebytes version 4.6.7.301 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.7.301 - Malwarebytes) Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation) Microsoft .NET Framework 4.8 (Português (Brasil)) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.8.03761 - Microsoft Corporation) Microsoft .NET Framework 4.8 (PTB) (HKLM\...\{22B6E072-FA42-3E2A-BF84-B43578E3C422}) (Version: 4.8.03761 - Microsoft Corporation) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 83.0.478.50 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0416-1000-0000000FF1CE}_ENTERPRISE_{51530CD1-8244-4E0F-B536-BCCC05325C7F}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0416-0000-0000000FF1CE}_ENTERPRISE_{51530CD1-8244-4E0F-B536-BCCC05325C7F}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00BA-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden Microsoft Office Access MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0015-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Excel MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0016-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-00BA-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0044-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-00A1-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-001A-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0018-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-001F-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Spanish) 2007 (HKLM-x32\...\{90120000-001F-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-002C-0416-0000-0000000FF1CE}) (Version: 12.0.4518.1019 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0416-0000-0000000FF1CE}_ENTERPRISE_{8A524694-0CA4-476A-9301-B1E9D70FC952}) (Version: - Microsoft) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0019-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (Portuguese (Brazil)) 2007 (HKLM\...\{90120000-002A-0416-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-006E-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-001B-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130 (HKLM-x32\...\{1de5e707-82da-4db6-b810-5d140cc4cbb3}) (Version: 14.38.33130.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33130 (HKLM\...\{C31777DB-51C1-4B19-9F80-38EF5C1D7C89}) (Version: 14.38.33130 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33130 (HKLM\...\{1CA7421F-A225-4A9C-B320-A36981A2B789}) (Version: 14.38.33130 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden Mozilla Firefox ESR (x86 en-US) (HKLM-x32\...\Mozilla Firefox 115.6.0 ESR (x86 en-US)) (Version: 115.6.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 115.4.0 - Mozilla) Radegast 2.12 (HKLM-x32\...\Radegast) (Version: 2.12 - Radegast Development Team) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.142.811.2021 - Realtek) Revo Uninstaller 2.4.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.4.5 - VS Revo Group, Ltd.) Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform) Telegram Desktop (HKU\S-1-5-21-2908120070-3248990571-1962529074-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 4.12.2 - Telegram FZ-LLC) TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK) TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.2.1 - TP-LINK) Transmission 4.0.5 (a6fe2a64aa) (x64) (HKLM\...\{85F159EB-B0F7-41D2-8BB8-4E310102F63A}) (Version: 4.0.5 - Transmission Project) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) ==================== Análise Personalizada CLSID (Whitelisted): ============== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-11-17] (Malwarebytes Inc. -> Malwarebytes) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-07-21] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-11-17] (Malwarebytes Inc. -> Malwarebytes) ==================== Codecs (Whitelisted) ==================== ==================== Atalhos & WMI ======================== ==================== Módulos Carregados (Whitelisted) ============= 2023-11-20 06:59 - 2023-11-20 06:59 - 000096256 _____ (Microsoft Corporation) [Arquivo não assinado] C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL80.DLL ==================== Alternate Data Streams (Whitelisted) ======== ==================== Modo de Segurança (Whitelisted) ================== (Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Associação (Whitelisted) ================= ==================== Internet Explorer (Versão 11) (Whitelisted) ========== HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts Conteúdo: ========================= (Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.) 2009-07-13 23:34 - 2023-11-16 21:42 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts ==================== Outras Áreas =========================== (Atualmente não há nenhuma correção automática para esta seção.) HKU\S-1-5-21-2908120070-3248990571-1962529074-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\TANIA\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Firewall do Windows está habilitado. ==================== MSCONFIG/TASK MANAGER ítens desabilitados == (Se uma entrada for incluída na fixlist, será removida.) MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK Wireless Configuration Utility.lnk => C:\Windows\pss\TP-LINK Wireless Configuration Utility.lnk.CommonStartup MSCONFIG\startupreg: FreeDesktopTimer => C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe ==================== Regras do Firewall (Whitelisted) ================ (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) FirewallRules: [TCP Query User{C7ACBE30-161D-4612-A01B-610853A2A4BA}C:\program files\transmission\transmission-qt.exe] => (Allow) C:\program files\transmission\transmission-qt.exe (SignPath Foundation -> Transmission Project) FirewallRules: [UDP Query User{60571DE2-7A13-4FC7-A183-B478BD2A1002}C:\program files\transmission\transmission-qt.exe] => (Allow) C:\program files\transmission\transmission-qt.exe (SignPath Foundation -> Transmission Project) FirewallRules: [{D5B7E729-CBF1-4CDE-825A-FD295B0301F2}] => (Allow) C:\Users\TANIA\Downloads\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH) FirewallRules: [TCP Query User{8928A220-F8B7-47C7-9559-3912D32B652E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [UDP Query User{64907FF7-4699-4F20-9E71-AB4AF33480B6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{5037551F-F714-4092-B618-3D17C4A849BF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{45F61A35-4360-474D-9578-09A03322EAD2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) ==================== Pontos de Restauração ========================= 24-12-2023 16:34:40 Ponto de Verificação Agendado ==================== Dispositivos Apresentando Falhas No Gerenciador ============ ==================== Erros no Log de eventos: ======================== Erros em Aplicativos: ================== Error: (12/24/2023 04:58:19 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome de aplicativo com falha: Radegast.exe, versão: 2.12.1354.0, carimbo de hora: 0x515883ed Nome do módulo de falhas: openjpeg-dotnet.dll, versão: 1.1.0.0, carimbo de hora: 0x50491ef5 Código de exceção: 0xc0000005 Deslocamento com falha: 0x00012e91 Identificação do processo com falha: 0x%9 Hora de início do aplicativo com falha: 0xRadegast.exe0 Caminho do aplicativo com falha: Radegast.exe1 FCaminho do módulo de falhas: Radegast.exe2 Identificação do Relatório: Radegast.exe3 Error: (12/24/2023 03:32:36 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: 20a8 Hora de Início: 01da362eee7400ba Hora de Término: 905 Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe Id do Relatório: e9413895-a225-11ee-8853-485b39f86656 Error: (12/24/2023 03:03:33 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: 143c Hora de Início: 01da360256ec9767 Hora de Término: 1155 Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe Id do Relatório: 25cc7f5b-a222-11ee-8853-485b39f86656 Error: (12/24/2023 12:55:32 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: 26d0 Hora de Início: 01da36155c26b35b Hora de Término: 836 Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe Id do Relatório: 441712bc-a210-11ee-8853-485b39f86656 Error: (12/24/2023 12:40:35 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: b4c Hora de Início: 01da36167b774eed Hora de Término: 234 Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe Id do Relatório: 0c614706-a20e-11ee-8853-485b39f86656 Error: (12/23/2023 06:32:22 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: TANIA-PC) Description: O aplicativo ou serviço 'Catznip' não pôde ser encerrado. Error: (12/23/2023 04:24:38 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: f54 Hora de Início: 01da35661b076a90 Hora de Término: 404 Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe Id do Relatório: 0449173a-a164-11ee-87d5-485b39f86656 Error: (12/22/2023 11:10:49 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa CatznipViewer.exe versão 13.2.0.51006 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: e20 Hora de Início: 01da351d662c0ca6 Hora de Término: 60000 Caminho do Aplicativo: C:\Program Files\CatznipViewer\CatznipViewer.exe Id do Relatório: 51d6b781-a138-11ee-87d5-485b39f86656 Erros de Sistema: ============= Error: (12/24/2023 05:36:52 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: O servidor {BB6DF56B-CACE-11DC-9992-0019B93A3A84} não se registrou com o DCOM dentro do tempo limite requerido. Error: (12/24/2023 04:40:12 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT) Description: O seguinte alerta fatal foi recebido: 40. Error: (12/24/2023 04:37:07 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT) Description: O seguinte alerta fatal foi recebido: 40. Error: (12/24/2023 04:34:17 PM) (Source: volsnap) (EventID: 36) (User: ) Description: As cópias de sombra do volume foram anuladas porque o armazenamento de cópia de sombra não pôde crescer devido a um limite imposto pelo usuário. Error: (12/24/2023 04:27:46 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT) Description: O seguinte alerta fatal foi recebido: 40. Error: (12/24/2023 04:27:46 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT) Description: O seguinte alerta fatal foi recebido: 70. Error: (12/24/2023 04:27:45 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT) Description: O seguinte alerta fatal foi recebido: 40. Error: (12/24/2023 04:27:45 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT) Description: O seguinte alerta fatal foi recebido: 70. ==================== Informações da Memória =========================== BIOS: American Megatrends Inc. 0308 02/05/2010 placa-mãe: ASUSTeK Computer INC. P5G41T-M LX2/BR Processador: Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz Percentagem de memória em uso: 39% RAM física total: 8157.05 MB RAM física disponível: 4915.11 MB Virtual Total: 16312.25 MB Virtual disponível: 12700.34 MB ==================== Drives ================================ Drive (TANIA) (Fixed) (Total:111.69 GB) (Free:61.74 GB) (Model: TGT-EGNT2-120 ATA Device) NTFS \\?\Volume{aacc7f56-84cb-11ee-b562-806e6f6e6963}\ (Reservado pelo Sistema) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==================== MBR & Tabela de Partições ==================== ========================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 82CFE222) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS) ==================== Fim de Addition.txt =======================

~ ZHPCleaner v2023.12.13.64 by Nicolas Coolman (2023/12/13) ~ Run by TANIA (Administrator) (16/12/2023 17:00:07) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : ~ Type : Repair ~ Report : C:\Users\TANIA\Desktop\ZHPCleaner (R).txt ~ Quarantine : C:\Users\TANIA\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ System Restore Point : ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (0) ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (5) MOVED file: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\History =>.SUP.BrowserHistoric MOVED file: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>Préférences Chromium MOVED folder: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache MOVED folder: C:\Users\TANIA\AppData\Local\Mozilla\Firefox\Profiles\x94p6wtl.default\Cache2 =>.SUP.BrowserCache MOVED folder: C:\Users\TANIA\AppData\Local\Mozilla\Firefox\Profiles\nmunlaat.default-esr\Cache2 =>.SUP.BrowserCache ~ ZHPCleaner v2023.12.13.64 by Nicolas Coolman (2023/12/13) ~ Run by TANIA (Administrator) (16/12/2023 17:03:43) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : ~ Type : Scan ~ Report : C:\Users\TANIA\Desktop\ZHPCleaner (S).txt ~ Quarantine : C:\Users\TANIA\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ System Restore Point : ~ UAC : Deactivate ~ Boot Mode : Normal (Normal boot) Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601) ---\\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. ---\\ Services (0) ~ No malicious or unnecessary items found. ---\\ Browser internet (3) FOUND folder: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache FOUND folder: C:\Users\TANIA\AppData\Local\Mozilla\Firefox\Profiles\x94p6wtl.default\Cache2 =>.SUP.BrowserCache FOUND folder: C:\Users\TANIA\AppData\Local\Mozilla\Firefox\Profiles\nmunlaat.default-esr\Cache2 =>.SUP.BrowserCache ---\\ Hosts file (1) ~ The hosts file is legitimate (21) ---\\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. ---\\ Explorer ( File, Folder) (3) FOUND file: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\storage\default\https+++zhpcleaner.softonic.com.br\.metadata-v2 =>SUP.Optional.Softonic FOUND file: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\storage\default\https+++zhpcleaner.softonic.com.br\ls\data.sqlite =>SUP.Optional.Softonic FOUND file: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\storage\default\https+++zhpcleaner.softonic.com.br\ls\usage =>SUP.Optional.Softonic ---\\ Registry ( Key, Value, Data) (0) ~ No malicious or unnecessary items found. ---\\ Summary of the elements found (2) https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserCache https://nicolascoolman.eu/forum/Topic/softonic-logiciel-potentiellement-superflu-lps/ =>SUP.Optional.Softonic ---\\ Result of repair ~ Any repair made ~ Microsoft Edge OK ~ Mozilla Firefox OK ~ Microsoft Internet Explorer OK ---\\ Statistics ~ Items scanned : 71171 ~ Items found : 6 ~ Items cancelled : 0 ~ Space saving (bytes) : 0 ~ Items options : 10/18 ---\\ OPTIONS NOT ACTIVES ~ Temporary file analysis ~ Temporary folder analysis ~ Empty Folder CLSID Analysis ~ Empty Other Folder Analysis ~ Empty LocalLow Folder Analysis ~ Empty Local Folder Analysis ~ Obsolete Installer File Analysis ~ Start browsers with extensions removed ~ End of search in 00h08mn08s ---\\ Reports (3) ZHPCleaner-[R]-16122023-17_01_42.txt ZHPCleaner-[S]-16122023-16_56_38.txt ZHPCleaner-[S]-16122023-17_11_51.txt # ------------------------------- # Malwarebytes AdwCleaner 8.4.0.0 # ------------------------------- # Build: 08-30-2022 # Database: 2023-07-19.3 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 12-16-2023 # Duration: 00:00:11 # OS: Windows 7 Service Pack 1 # Scanned: 32109 # Detected: 4 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** PUP.Optional.Legacy C:\Program Files\Genesis PUP.Optional.Legacy C:\Users\TANIA\AppData\Local\Genesis PUP.Optional.Legacy C:\Users\TANIA\AppData\Roaming\Genesis ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.Legacy HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\genesis ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. ***** [ Hosts File Entries ] ***** No malicious hosts file entries found. ***** [ Preinstalled Software ] ***** No Preinstalled Software found. ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ########## # ------------------------------- # Malwarebytes AdwCleaner 8.4.0.0 # ------------------------------- # Build: 08-30-2022 # Database: 2023-07-19.3 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 12-16-2023 # Duration: 00:00:11 # OS: Windows 7 Service Pack 1 # Scanned: 32109 # Detected: 0 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. # ------------------------------- # Malwarebytes AdwCleaner 8.4.0.0 # ------------------------------- # Build: 08-30-2022 # Database: 2023-07-19.3 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Scan # ------------------------------- # Start: 12-20-2023 # Duration: 00:00:12 # OS: Windows 7 Service Pack 1 # Scanned: 32109 # Detected: 0 ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries found. ***** [ Chromium URLs ] ***** No malicious Chromium URLs found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries found. ***** [ Firefox URLs ] ***** No malicious Firefox URLs found. ***** [ Hosts File Entries ] ***** No malicious hosts file entries found. ***** [ Preinstalled Software ] ***** No Preinstalled Software found. AdwCleaner[S00].txt - [1646 octets] - [16/12/2023 16:44:28] AdwCleaner[C00].txt - [1760 octets] - [16/12/2023 16:45:55] AdwCleaner[S01].txt - [1537 octets] - [16/12/2023 17:17:51] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S02].txt ########## # ------------------------------- # Malwarebytes AdwCleaner 8.4.0.0 # ------------------------------- # Build: 08-30-2022 # Database: 2023-07-19.3 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 12-16-2023 # Duration: 00:00:06 # OS: Windows 7 Service Pack 1 # Cleaned: 4 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** Deleted C:\Program Files\Genesis Deleted C:\Users\TANIA\AppData\Local\Genesis Deleted C:\Users\TANIA\AppData\Roaming\Genesis ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\genesis ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries cleaned. ***** [ Chromium URLs ] ***** No malicious Chromium URLs cleaned. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ***** [ Hosts File Entries ] ***** No malicious hosts file entries cleaned. ***** [ Preinstalled Software ] ***** No Preinstalled Software cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [1646 octets] - [16/12/2023 16:44:28] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Eu passei esses dois antivirus outro dia no pc e tenho o resultado...vou colocar aqui pra você ver...mas ainda persiste o problema mesmo depois de ter passados os antivirus. ZHPCleaner (R).txt ZHPCleaner (S).txt AdwCleaner[S00].txt AdwCleaner[S01].txt AdwCleaner[S02].txt AdwCleaner[C00].txt