placa de rede não esta mais mostrando velocidade contratada...seria virus?

taki26 · 18 de dezembro de 2023

Ola a todos...fiz o teste de velocidade e meu pc que tem 400mb de velocidade contratada, mostra apenas 160/140 (aproximadamente e pra menos) fiz o teste no meu outro pc e mostrou 600/600 bem acima da contratada, se fosse problema de fiação acho que não daria os seiscentos de velocidade que deu nesse outro pc...

eu jogo e meu jogo tem sites que temos que interagir com eles seria possível mandar algum virus por paginas da web as que interagimos com eles? é possível hacker do jogo limitar a velocidade da internet do jogador? porque no meu outro pc eu não joguei com ele e a velocidade estava normal...

Teve uma vez logo no inicio que comecei a jogar ao clicar no site que eles pedem pra poder fazer saque o malwarebytes avisou que o site tinha não lembro o nome do virus que roubava dados, eu deveria ter salvado mas na hora não lembrei de salvar e não apareceu mais a msg.

minha pergunta é: seria virus então? trojan?

Qual seria um bom antivirus pra detectar se tem algum virus/trojan?

obrigada...

Elias Pereira · 19 de dezembro de 2023

Por favor, atente para o seguinte:

Sobre o Fórum: Este é um espaço privado, não público. Seu uso é um privilégio, não um direito;
O que será passado aqui, somente será com relação ao problema do seu computador portanto, não faça mais em nenhum outro;
IMPORTANTE: Caso tenha programas de ativação do windows ou de compartilhamento to44ent, sugiro desinstalar. Só irei dar procedimento na analise após a remoção. Regras do forum;
Siga, por favor, atentamente as instruções passadas e em caso de dúvidas não hesite em perguntá-las;
Respeite a ordem das instruções passadas;
Observação: Não tome outra medida além das passadas aqui; atente para que, caso peça ajuda em outro fórum, não deixe de nos informar, sob risco de desconfigurar seu computador!

Regras da Área de Remoção de Malware << IMPORTANTE A LEITURA

Regras Gerais do Forum Clube do Hardware << IMPORTANTE A LEITURA

Siga os passos abaixo:

Desative temporariamente seu antivirus, antispywares e firewall, para não causar conflitos.

ETAPA 1

Faça o download do AdwCleaner de um dos links abaixo e salve no desktop.

https://toolslib.net/downloads/viewdownload/1-adwcleaner/

http://www.bleepingcomputer.com/download/adwcleaner/

Clique em DOWNLOAD NOW para baixar o arquivo.

Execute o adwcleaner.exe

OBS: Usuários do Windows Vista, 7, 8/8.1 e windows 10 clique com o direito sobre o arquivo AdwCleaner.exe, depois clique em

Clique em VERIFICAR AGORA/SCAN NOW. Após o termino clique em LIMPAR/CLEAN e aguarde.

Será aberto o bloco de notas com o resultado.

ATENÇÃO: Selecione, copie e cole o seu conteúdo na próxima resposta.

ETAPA 2

Faça o download do ZHPCleaner no link abaixo e salve em sua Área de trabalho (Desktop)

https://www.majorgeeks.com/files/details/zhpcleaner.html

Execute o arquivo ZHPCleaner.exe Como Administrador

Clique no botão Scanner.
A ferramenta começara o exame do seu sistema.
Tenha paciência pois pode demorar um pouco dependendo da quantidades de itens a examinar.
Em seguida clique no botão Reparar.
Será gerado um log chamado ZHPCleaner.txt

ATENÇÃO: Selecione, copie e cole o seu conteúdo na próxima resposta.

taki26 · 20 de dezembro de 2023

Eu passei esses dois antivirus outro dia no pc e tenho o resultado...vou colocar aqui pra você ver...mas ainda persiste o problema mesmo depois de ter passados os antivirus.

ZHPCleaner (R).txt ZHPCleaner (S).txt AdwCleaner[S00].txt AdwCleaner[S01].txt AdwCleaner[S02].txt AdwCleaner[C00].txt

Elias Pereira · 20 de dezembro de 2023

Abra cada log em separado, copie e cole o seu conteudo na sua proxima resposta.

taki26 · 21 de dezembro de 2023

~ ZHPCleaner v2023.12.13.64 by Nicolas Coolman (2023/12/13)
~ Run by TANIA (Administrator) (16/12/2023 17:00:07)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version :
~ Type : Repair
~ Report : C:\Users\TANIA\Desktop\ZHPCleaner (R).txt
~ Quarantine : C:\Users\TANIA\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ System Restore Point :
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601)

---\\ Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.

---\\ Services (0)
~ No malicious or unnecessary items found.

---\\ Browser internet (0)

---\\ Hosts file (1)
~ The hosts file is legitimate (21)

---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.

---\\ Explorer ( File, Folder) (5)
MOVED file: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\History =>.SUP.BrowserHistoric
MOVED file: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>Préférences Chromium
MOVED folder: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache
MOVED folder: C:\Users\TANIA\AppData\Local\Mozilla\Firefox\Profiles\x94p6wtl.default\Cache2 =>.SUP.BrowserCache
MOVED folder: C:\Users\TANIA\AppData\Local\Mozilla\Firefox\Profiles\nmunlaat.default-esr\Cache2 =>.SUP.BrowserCache

~ ZHPCleaner v2023.12.13.64 by Nicolas Coolman (2023/12/13)
~ Run by TANIA (Administrator) (16/12/2023 17:03:43)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version :
~ Type : Scan
~ Report : C:\Users\TANIA\Desktop\ZHPCleaner (S).txt
~ Quarantine : C:\Users\TANIA\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ System Restore Point :
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601)

---\\ Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.

---\\ Services (0)
~ No malicious or unnecessary items found.

---\\ Browser internet (3)
FOUND folder: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache
FOUND folder: C:\Users\TANIA\AppData\Local\Mozilla\Firefox\Profiles\x94p6wtl.default\Cache2 =>.SUP.BrowserCache
FOUND folder: C:\Users\TANIA\AppData\Local\Mozilla\Firefox\Profiles\nmunlaat.default-esr\Cache2 =>.SUP.BrowserCache

---\\ Hosts file (1)
~ The hosts file is legitimate (21)

---\\ Scheduled automatic tasks. (0)
~ No malicious or unnecessary items found.

---\\ Explorer ( File, Folder) (3)
FOUND file: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\storage\default\https+++zhpcleaner.softonic.com.br\.metadata-v2    =>SUP.Optional.Softonic
FOUND file: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\storage\default\https+++zhpcleaner.softonic.com.br\ls\data.sqlite    =>SUP.Optional.Softonic
FOUND file: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\storage\default\https+++zhpcleaner.softonic.com.br\ls\usage    =>SUP.Optional.Softonic

---\\ Registry ( Key, Value, Data) (0)
~ No malicious or unnecessary items found.

---\\ Summary of the elements found (2)
https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserCache
https://nicolascoolman.eu/forum/Topic/softonic-logiciel-potentiellement-superflu-lps/ =>SUP.Optional.Softonic

---\\ Result of repair
~ Any repair made
~ Microsoft Edge OK
~ Mozilla Firefox OK
~ Microsoft Internet Explorer OK

---\\ Statistics
~ Items scanned : 71171
~ Items found : 6
~ Items cancelled : 0
~ Space saving (bytes) : 0
~ Items options : 10/18

---\\ OPTIONS NOT ACTIVES
~ Temporary file analysis
~ Temporary folder analysis
~ Empty Folder CLSID Analysis
~ Empty Other Folder Analysis
~ Empty LocalLow Folder Analysis
~ Empty Local Folder Analysis
~ Obsolete Installer File Analysis
~ Start browsers with extensions removed

~ End of search in 00h08mn08s

---\\ Reports (3)
ZHPCleaner-[R]-16122023-17_01_42.txt
ZHPCleaner-[S]-16122023-16_56_38.txt
ZHPCleaner-[S]-16122023-17_11_51.txt

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    12-16-2023
# Duration: 00:00:11
# OS:       Windows 7 Service Pack 1
# Scanned: 32109
# Detected: 4

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.Legacy             C:\Program Files\Genesis
PUP.Optional.Legacy             C:\Users\TANIA\AppData\Local\Genesis
PUP.Optional.Legacy             C:\Users\TANIA\AppData\Roaming\Genesis

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\genesis

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    12-16-2023
# Duration: 00:00:11
# OS:       Windows 7 Service Pack 1
# Scanned: 32109
# Detected: 0

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    12-20-2023
# Duration: 00:00:12
# OS:       Windows 7 Service Pack 1
# Scanned: 32109
# Detected: 0

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.

AdwCleaner[S00].txt - [1646 octets] - [16/12/2023 16:44:28]
AdwCleaner[C00].txt - [1760 octets] - [16/12/2023 16:45:55]
AdwCleaner[S01].txt - [1537 octets] - [16/12/2023 17:17:51]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S02].txt ##########

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    12-16-2023
# Duration: 00:00:06
# OS:       Windows 7 Service Pack 1
# Cleaned: 4
# Failed:   0

***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\Program Files\Genesis
Deleted       C:\Users\TANIA\AppData\Local\Genesis
Deleted       C:\Users\TANIA\AppData\Roaming\Genesis

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\genesis

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1646 octets] - [16/12/2023 16:44:28]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Elias Pereira · 21 de dezembro de 2023

Baixe o Farbar Recovery Scan do link abaixo e salve na sua área de trabalho.
https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Clique com o direito sobre o arquivo FRST64.EXE, depois clique em http://i.imgur.com/VRIfczU.png .

Aceite o contrato e depois clique no botão Scan/Examinar.Aguarde e ao final, os logs FRST.txt e Addition.txt serão salvos no seu desktop.

Abra cada arquivo em separado, copie seu conteúdo e cole na sua próxima resposta.

taki26 · 24 de dezembro de 2023

Resultado da análise adicional Farbar Recovery Scan Tool (x64) Versão: 22-12-2023
Executado por TANIA (24-12-2023 17:34:38)
Executando a partir de C:\Users\TANIA\Downloads
Microsoft Windows 7 Ultimate Service Pack 1 (X64) (2023-11-16 22:05:33)
Modo da Inicialização: Normal
==========================================================

==================== Contas: =============================

(Se uma entrada for incluída na fixlist, será removida.)

Administrador (S-1-5-21-2908120070-3248990571-1962529074-500 - Administrator - Disabled)
Convidado (S-1-5-21-2908120070-3248990571-1962529074-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2908120070-3248990571-1962529074-1002 - Limited - Enabled)
TANIA (S-1-5-21-2908120070-3248990571-1962529074-1000 - Administrator - Enabled) => C:\Users\TANIA

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

Atualização do produto Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{717C9095-8AAE-41CB-B046-BD6E8399F4F3}) (Version: - Microsoft)
Atualização do produto Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{5016CB22-B9A7-44FB-AA72-AF28B27B15EA}) (Version: - Microsoft)
Atualização do produto Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{BE3A7C0C-0081-4694-B5F9-980DD66BDDF8}) (Version: - Microsoft)
Atualização do produto Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{7297E3A9-FCD4-4E0E-A306-7A90359E50E3}) (Version: - Microsoft)
CatznipViewer (HKLM\...\CatznipViewer) (Version: 13.2.0.51006 - Kitty Barnett)
CPUID CPU-Z 2.08 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.08 - CPUID, Inc.)
Free Desktop Timer 1.21 (HKLM-x32\...\Free Desktop Timer_is1) (Version: - Drive Software Company)
Intel Driver && Support Assistant (HKLM-x32\...\{89AC6487-3878-456A-9BE8-D7DAA3B01799}) (Version: 23.4.39.9 - Intel) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{acb264b6-ac63-44a6-bd16-70375ad0e036}) (Version: 23.4.39.9 - Intel)
Malwarebytes version 4.6.7.301 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.7.301 - Malwarebytes)
Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft .NET Framework 4.8 (Português (Brasil)) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft .NET Framework 4.8 (PTB) (HKLM\...\{22B6E072-FA42-3E2A-BF84-B43578E3C422}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 83.0.478.50 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0416-1000-0000000FF1CE}_ENTERPRISE_{51530CD1-8244-4E0F-B536-BCCC05325C7F}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-0416-0000-0000000FF1CE}_ENTERPRISE_{51530CD1-8244-4E0F-B536-BCCC05325C7F}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00BA-0416-0000-0000000FF1CE}_ENTERPRISE_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0015-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Excel MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0016-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-00BA-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0044-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (HKLM\...\{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-00A1-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-001A-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0018-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-001F-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (HKLM-x32\...\{90120000-001F-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-002C-0416-0000-0000000FF1CE}) (Version: 12.0.4518.1019 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0416-0000-0000000FF1CE}_ENTERPRISE_{8A524694-0CA4-476A-9301-B1E9D70FC952}) (Version: - Microsoft) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}) (Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-0019-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (Portuguese (Brazil)) 2007 (HKLM\...\{90120000-002A-0416-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-006E-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Portuguese (Brazil)) 2007 (HKLM-x32\...\{90120000-001B-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130 (HKLM-x32\...\{1de5e707-82da-4db6-b810-5d140cc4cbb3}) (Version: 14.38.33130.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33130 (HKLM\...\{C31777DB-51C1-4B19-9F80-38EF5C1D7C89}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33130 (HKLM\...\{1CA7421F-A225-4A9C-B320-A36981A2B789}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Mozilla Firefox ESR (x86 en-US) (HKLM-x32\...\Mozilla Firefox 115.6.0 ESR (x86 en-US)) (Version: 115.6.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 115.4.0 - Mozilla)
Radegast 2.12 (HKLM-x32\...\Radegast) (Version: 2.12 - Radegast Development Team)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.142.811.2021 - Realtek)
Revo Uninstaller 2.4.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.4.5 - VS Revo Group, Ltd.)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Telegram Desktop (HKU\S-1-5-21-2908120070-3248990571-1962529074-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 4.12.2 - Telegram FZ-LLC)
TP-LINK TL-WN821N Driver (HKLM-x32\...\{26B52E5B-1620-4676-9B46-B6C56B8105CE}) (Version: 1.2.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.2.1 - TP-LINK)
Transmission 4.0.5 (a6fe2a64aa) (x64) (HKLM\...\{85F159EB-B0F7-41D2-8BB8-4E310102F63A}) (Version: 4.0.5 - Transmission Project)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)

==================== Análise Personalizada CLSID (Whitelisted): ==============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-11-17] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-07-21] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-11-17] (Malwarebytes Inc. -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Atalhos & WMI ========================

==================== Módulos Carregados (Whitelisted) =============

2023-11-20 06:59 - 2023-11-20 06:59 - 000096256 _____ (Microsoft Corporation) [Arquivo não assinado] C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL80.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Modo de Segurança (Whitelisted) ==================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Associação (Whitelisted) =================

==================== Internet Explorer (Versão 11) (Whitelisted) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Conteúdo: =========================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2009-07-13 23:34 - 2023-11-16 21:42 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Outras Áreas ===========================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-2908120070-3248990571-1962529074-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\TANIA\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

(Se uma entrada for incluída na fixlist, será removida.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK Wireless Configuration Utility.lnk => C:\Windows\pss\TP-LINK Wireless Configuration Utility.lnk.CommonStartup
MSCONFIG\startupreg: FreeDesktopTimer => C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe

==================== Regras do Firewall (Whitelisted) ================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [TCP Query User{C7ACBE30-161D-4612-A01B-610853A2A4BA}C:\program files\transmission\transmission-qt.exe] => (Allow) C:\program files\transmission\transmission-qt.exe (SignPath Foundation -> Transmission Project)
FirewallRules: [UDP Query User{60571DE2-7A13-4FC7-A183-B478BD2A1002}C:\program files\transmission\transmission-qt.exe] => (Allow) C:\program files\transmission\transmission-qt.exe (SignPath Foundation -> Transmission Project)
FirewallRules: [{D5B7E729-CBF1-4CDE-825A-FD295B0301F2}] => (Allow) C:\Users\TANIA\Downloads\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [TCP Query User{8928A220-F8B7-47C7-9559-3912D32B652E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{64907FF7-4699-4F20-9E71-AB4AF33480B6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5037551F-F714-4092-B618-3D17C4A849BF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{45F61A35-4360-474D-9578-09A03322EAD2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

==================== Pontos de Restauração =========================

24-12-2023 16:34:40 Ponto de Verificação Agendado

==================== Dispositivos Apresentando Falhas No Gerenciador ============

==================== Erros no Log de eventos: ========================

Erros em Aplicativos:
==================
Error: (12/24/2023 04:58:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Radegast.exe, versão: 2.12.1354.0, carimbo de hora: 0x515883ed
Nome do módulo de falhas: openjpeg-dotnet.dll, versão: 1.1.0.0, carimbo de hora: 0x50491ef5
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00012e91
Identificação do processo com falha: 0x%9
Hora de início do aplicativo com falha: 0xRadegast.exe0
Caminho do aplicativo com falha: Radegast.exe1
FCaminho do módulo de falhas: Radegast.exe2
Identificação do Relatório: Radegast.exe3

Error: (12/24/2023 03:32:36 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID de Processo: 20a8

Hora de Início: 01da362eee7400ba

Hora de Término: 905

Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe

Id do Relatório: e9413895-a225-11ee-8853-485b39f86656

Error: (12/24/2023 03:03:33 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID de Processo: 143c

Hora de Início: 01da360256ec9767

Hora de Término: 1155

Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe

Id do Relatório: 25cc7f5b-a222-11ee-8853-485b39f86656

Error: (12/24/2023 12:55:32 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID de Processo: 26d0

Hora de Início: 01da36155c26b35b

Hora de Término: 836

Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe

Id do Relatório: 441712bc-a210-11ee-8853-485b39f86656

Error: (12/24/2023 12:40:35 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID de Processo: b4c

Hora de Início: 01da36167b774eed

Hora de Término: 234

Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe

Id do Relatório: 0c614706-a20e-11ee-8853-485b39f86656

Error: (12/23/2023 06:32:22 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: TANIA-PC)
Description: O aplicativo ou serviço 'Catznip' não pôde ser encerrado.

Error: (12/23/2023 04:24:38 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa Radegast.exe versão 2.12.1354.0 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID de Processo: f54

Hora de Início: 01da35661b076a90

Hora de Término: 404

Caminho do Aplicativo: C:\Program Files (x86)\Radegast\Radegast.exe

Id do Relatório: 0449173a-a164-11ee-87d5-485b39f86656

Error: (12/22/2023 11:10:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa CatznipViewer.exe versão 13.2.0.51006 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID de Processo: e20

Hora de Início: 01da351d662c0ca6

Hora de Término: 60000

Caminho do Aplicativo: C:\Program Files\CatznipViewer\CatznipViewer.exe

Id do Relatório: 51d6b781-a138-11ee-87d5-485b39f86656

Erros de Sistema:
=============
Error: (12/24/2023 05:36:52 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {BB6DF56B-CACE-11DC-9992-0019B93A3A84} não se registrou com o DCOM dentro do tempo limite requerido.

Error: (12/24/2023 04:40:12 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 40.

Error: (12/24/2023 04:37:07 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 40.

Error: (12/24/2023 04:34:17 PM) (Source: volsnap) (EventID: 36) (User: )
Description: As cópias de sombra do volume foram anuladas porque o armazenamento de cópia de sombra não pôde crescer devido a um limite imposto pelo usuário.

Error: (12/24/2023 04:27:46 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 40.

Error: (12/24/2023 04:27:46 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 70.

Error: (12/24/2023 04:27:45 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 40.

Error: (12/24/2023 04:27:45 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 70.

==================== Informações da Memória ===========================

BIOS: American Megatrends Inc. 0308 02/05/2010
placa-mãe: ASUSTeK Computer INC. P5G41T-M LX2/BR
Processador: Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz
Percentagem de memória em uso: 39%
RAM física total: 8157.05 MB
RAM física disponível: 4915.11 MB
Virtual Total: 16312.25 MB
Virtual disponível: 12700.34 MB

==================== Drives ================================

Drive (TANIA) (Fixed) (Total:111.69 GB) (Free:61.74 GB) (Model: TGT-EGNT2-120 ATA Device) NTFS

\\?\Volume{aacc7f56-84cb-11ee-b562-806e6f6e6963}\ (Reservado pelo Sistema) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Tabela de Partições ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 82CFE222)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt =======================

taki26 · 24 de dezembro de 2023

Resultado do análise da Farbar Recovery Scan Tool (FRST) (x64) Versão: 22-12-2023
Executado por TANIA (administrador) em TANIA-PC (24-12-2023 17:34:02)
Executando a partir de C:\Users\TANIA\Downloads\FRST64(1).exe
Perfis Carregados: TANIA
Plataforma: Microsoft Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil)
Navegador padrão: FF
Modo da Inicialização: Normal

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(C:\Program Files (x86)\Mozilla Firefox\firefox.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(explorer.exe ->) () [Arquivo não assinado] C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <16>
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(taskeng.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
Falha ao acessar processo -> csrss.exe
Falha ao acessar processo -> csrss.exe
Falha ao acessar processo -> WmiPrvSE.exe

==================== Registro (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (Nenhum Arquivo)
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (Nenhum Arquivo)
HKU\S-1-5-21-2908120070-3248990571-1962529074-1000\...\Run: [FreeDesktopTimer] => C:\Program Files (x86)\Free Desktop Timer\DesktopTimer.exe [634880 2015-07-25] () [Arquivo não assinado]
GroupPolicy: Restrição ? <==== ATENÇÃO
Policies: C:\ProgramData\NTUSER.pol: Restrição <==== ATENÇÃO

==================== Tarefas Agendadas (Whitelisted) =================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0E27822B-2699-42C8-A108-3A5482EF5655}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0E27822B-2699-42C8-A108-3A5482EF5655}: [DhcpDomain] intelbras.local
Tcpip\..\Interfaces\{74E9C92B-2374-4AA0-8D9E-0B8076D13DBC}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{74E9C92B-2374-4AA0-8D9E-0B8076D13DBC}\94E44554C424251435: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{74E9C92B-2374-4AA0-8D9E-0B8076D13DBC}\94E44554C424251435: [DhcpDomain] intelbras.local

Edge:
=======
Edge Profile: C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-16]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\TANIA\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2023-11-18]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

FireFox:
========
FF DefaultProfile: x94p6wtl.default
FF ProfilePath: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\x94p6wtl.default [2023-11-16]
FF ProfilePath: C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr [2023-12-24]
FF Extension: (Language: Português (BR)) - C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\Extensions\[email protected] [2023-11-16]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\TANIA\AppData\Roaming\Mozilla\Firefox\Profiles\nmunlaat.default-esr\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2023-12-19]
FF Plugin: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Nenhum Arquivo]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Serviços (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [43784 2023-12-12] (Intel Corporation -> Intel)
R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [240392 2023-12-12] (Intel Corporation -> Intel)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9405400 2023-12-20] (Malwarebytes Inc. -> Malwarebytes)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [222784 2023-12-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239576 2023-11-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] (ASUSTeK Computer Inc. -> )
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
S3 cpuz149; \??\C:\Users\TANIA\AppData\Local\Temp\cpuz149\cpuz149_x64.sys [X] <==== ATENÇÃO
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

==================== Um mês (criados) (Whitelisted) =========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2023-12-24 17:34 - 2023-12-24 17:34 - 000006839 _____ C:\Users\TANIA\Downloads\FRST.txt
2023-12-24 17:29 - 2023-12-24 17:34 - 000000000 ____D C:\FRST
2023-12-24 17:29 - 2023-12-24 17:29 - 002387456 _____ (Farbar) C:\Users\TANIA\Downloads\FRST64(1).exe
2023-12-24 17:20 - 2023-12-24 17:20 - 002387456 _____ (Farbar) C:\Users\TANIA\Downloads\FRST64.exe
2023-12-24 08:20 - 2023-12-24 08:20 - 000025066 _____ C:\Users\TANIA\Downloads\PedidoRevisao.pdf
2023-12-24 07:55 - 2023-12-24 07:55 - 000174756 _____ C:\Users\TANIA\Downloads\Pgto processador.pdf
2023-12-21 19:05 - 2023-12-21 19:05 - 000000434 __RSH C:\ProgramData\ntuser.pol
2023-12-21 17:56 - 2023-12-21 17:56 - 000001760 _____ C:\Users\TANIA\Downloads\AdwCleaner[C00].txt
2023-12-21 17:56 - 2023-12-21 17:56 - 000001760 _____ C:\Users\TANIA\Downloads\AdwCleaner[C00](1).txt
2023-12-21 17:55 - 2023-12-21 17:55 - 000001598 _____ C:\Users\TANIA\Downloads\AdwCleaner[S02](1).txt
2023-12-21 17:54 - 2023-12-21 17:54 - 000001537 _____ C:\Users\TANIA\Downloads\AdwCleaner[S01].txt
2023-12-21 17:53 - 2023-12-21 17:53 - 000001646 _____ C:\Users\TANIA\Downloads\AdwCleaner[S00].txt
2023-12-21 17:51 - 2023-12-21 17:51 - 000002885 _____ C:\Users\TANIA\Downloads\ZHPCleaner (S).txt
2023-12-21 17:49 - 2023-12-21 17:49 - 000002895 _____ C:\Users\TANIA\Downloads\ZHPCleaner (R)(1).txt
2023-12-20 16:35 - 2023-12-20 16:35 - 000001598 _____ C:\Users\TANIA\Downloads\AdwCleaner[S02].txt
2023-12-20 16:14 - 2023-12-20 16:14 - 000000000 ____D C:\Users\TANIA\Downloads\resultado antivirus
2023-12-20 16:13 - 2023-12-20 16:13 - 000001172 _____ C:\Users\TANIA\Documents\antivirus.txt
2023-12-18 10:51 - 2023-12-18 10:51 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Microsoft\Vault
2023-12-18 10:49 - 2023-12-18 10:50 - 000000000 ____D C:\Users\TANIA\Downloads\winalguma coisa
2023-12-17 21:51 - 2023-12-17 21:51 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2023-12-17 17:51 - 2023-12-17 18:04 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\AnyDesk
2023-12-17 17:49 - 2023-12-17 17:49 - 005525576 _____ (AnyDesk Software GmbH) C:\Users\TANIA\Downloads\AnyDesk.exe
2023-12-16 16:47 - 2023-12-16 17:11 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\ZHP
2023-12-16 16:47 - 2023-12-16 16:47 - 000000000 ____D C:\Users\TANIA\AppData\Local\ZHP
2023-12-16 16:44 - 2023-12-16 16:45 - 000000000 ____D C:\AdwCleaner
2023-12-16 01:28 - 2023-12-16 01:28 - 003362976 _____ (Nicolas Coolman) C:\Users\TANIA\Downloads\ZHPCleaner.exe
2023-12-16 01:26 - 2023-12-16 01:26 - 008791352 _____ (Malwarebytes) C:\Users\TANIA\Downloads\adwcleaner_8.4.0.exe
2023-12-16 01:23 - 2023-12-16 01:23 - 000002525 _____ C:\Users\TANIA\Downloads\ZHPCleaner (R).txt
2023-12-15 11:33 - 2023-12-15 11:33 - 000026952 _____ C:\Users\TANIA\Downloads\1476831-1 NOTA FISCAL PC.pdf
2023-12-15 11:29 - 2023-12-15 11:29 - 000026952 _____ C:\Users\TANIA\Downloads\1476831.pdf
2023-12-14 18:19 - 2023-12-14 18:19 - 000014555 _____ C:\Users\TANIA\Downloads\42231109376495000122550020014768311399806581-nfe.xml
2023-12-14 15:20 - 2023-12-14 15:21 - 000213779 _____ C:\Users\TANIA\Downloads\WhatsApp Image 2023-12-14 at 15.13.50.jpeg
2023-12-14 11:53 - 2021-12-20 04:51 - 000127352 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2023-12-14 11:52 - 2023-12-14 11:53 - 005097344 _____ C:\Users\TANIA\Downloads\Install_Win7_7142_12222021.zip
2023-12-14 11:49 - 2023-12-14 11:49 - 006280872 _____ (Intel) C:\Users\TANIA\Downloads\Intel-Driver-and-Support-Assistant-Installer(2).exe
2023-12-14 11:37 - 2023-12-14 11:37 - 006280872 _____ (Intel) C:\Users\TANIA\Downloads\Intel-Driver-and-Support-Assistant-Installer(1).exe
2023-12-14 11:29 - 2023-12-14 11:40 - 000001526 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk
2023-12-14 11:29 - 2023-12-14 11:29 - 000000000 ____D C:\ProgramData\Intel
2023-12-14 11:28 - 2023-12-14 11:28 - 006280872 _____ (Intel) C:\Users\TANIA\Downloads\Intel-Driver-and-Support-Assistant-Installer.exe
2023-12-12 21:17 - 2023-12-12 21:17 - 048236784 _____ (AMD Inc.) C:\Users\TANIA\Downloads\amd-software-adrenalin-edition-23.12.1-minimalsetup-231205_web.exe
2023-12-12 17:43 - 2023-12-12 17:43 - 000000000 ____D C:\Users\TANIA\Downloads\Windows 11 X64 23H2 22631.2715 Pro en-US OCT 2023
2023-12-12 17:42 - 2023-12-12 21:42 - 000000000 ____D C:\ProgramData\Transmission
2023-12-12 17:41 - 2023-12-12 21:42 - 000000000 ____D C:\Users\TANIA\AppData\Local\transmission
2023-12-12 17:39 - 2023-12-12 17:39 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transmission Qt Client.lnk
2023-12-12 17:39 - 2023-12-12 17:39 - 000002443 _____ C:\Users\Public\Desktop\Transmission Qt Client.lnk
2023-12-12 17:39 - 2023-12-12 17:39 - 000000000 ____D C:\Program Files\Transmission
2023-12-12 17:38 - 2023-12-12 17:38 - 018112512 _____ C:\Users\TANIA\Downloads\transmission-4.0.5-qt5-x64.msi
2023-12-12 17:35 - 2023-12-12 17:35 - 018829312 _____ C:\Users\TANIA\Downloads\transmission-4.0.5-x64.msi
2023-12-12 15:07 - 2023-12-12 15:07 - 000000000 ____D C:\Windows\pss
2023-11-29 01:06 - 2023-11-30 09:32 - 000000000 ____D C:\Users\TANIA\Documents\Digitalização
2023-11-27 06:25 - 2023-11-27 06:25 - 000001531 _____ C:\Users\TANIA\Documents\msg a bruxa da klara sl.txt
2023-11-25 08:58 - 2023-12-19 15:02 - 000000000 ____D C:\Users\TANIA\Documents\Receitas
2023-11-25 02:19 - 2023-11-25 07:17 - 000000377 _____ C:\Users\TANIA\Documents\AHT msg grupo cond..txt
2023-11-24 20:32 - 2023-11-24 20:36 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\TP-LINK
2023-11-24 20:31 - 2023-11-24 20:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2023-11-24 20:31 - 2023-11-24 20:31 - 000002276 _____ C:\Users\Public\Desktop\TP-LINK Wireless Configuration Utility.lnk
2023-11-24 20:31 - 2023-11-24 20:31 - 000000000 ____D C:\Program Files (x86)\TP-LINK
2023-11-24 20:30 - 2012-05-14 17:41 - 000926824 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\rtl8192cu.sys
2023-11-24 20:30 - 2012-05-14 17:41 - 000926824 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTL8192cu.sys
2023-11-24 20:26 - 2023-11-24 20:43 - 000000000 ____D C:\ProgramData\TP-LINK

==================== Um mês (modificados) ==================

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2023-12-24 17:23 - 2009-07-14 01:45 - 000024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2023-12-24 17:23 - 2009-07-14 01:45 - 000024416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2023-12-24 17:20 - 2023-11-16 19:53 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-12-24 17:18 - 2023-11-17 18:49 - 000000000 ____D C:\Users\TANIA\AppData\Local\Catznip64
2023-12-24 16:35 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\rescache
2023-12-24 16:14 - 2009-07-14 14:55 - 000705066 _____ C:\Windows\system32\prfh0416.dat
2023-12-24 16:14 - 2009-07-14 14:55 - 000146910 _____ C:\Windows\system32\prfc0416.dat
2023-12-24 16:14 - 2009-07-14 02:13 - 001633530 _____ C:\Windows\system32\PerfStringBackup.INI
2023-12-24 16:14 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\inf
2023-12-24 16:11 - 2023-11-17 01:16 - 000000000 ____D C:\Users\TANIA\AppData\Local\Malwarebytes
2023-12-24 16:10 - 2009-07-14 02:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-12-24 07:10 - 2023-11-17 10:52 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Radegast
2023-12-24 06:42 - 2023-11-17 07:23 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Telegram Desktop
2023-12-24 04:23 - 2023-11-18 04:33 - 000000000 ____D C:\Users\TANIA\Downloads\Telegram Desktop
2023-12-21 19:03 - 2009-07-14 00:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2023-12-21 17:00 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\PolicyDefinitions
2023-12-21 16:53 - 2023-11-20 22:30 - 000000000 ____D C:\Users\TANIA\AppData\Local\ElevatedDiagnostics
2023-12-19 22:31 - 2023-11-21 19:34 - 000000000 ____D C:\Users\TANIA\AppData\Local\CrashDumps
2023-12-19 13:18 - 2023-11-16 19:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-12-19 13:18 - 2023-11-16 19:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2023-12-19 13:17 - 2009-07-14 02:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2023-12-19 13:17 - 2009-07-14 02:32 - 000000000 ____D C:\Program Files\DVD Maker
2023-12-18 10:50 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\system32\NDF
2023-12-15 11:39 - 2023-11-17 00:34 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Microsoft\UProof
2023-12-14 11:53 - 2023-11-16 19:27 - 000000000 ____D C:\Program Files (x86)\Realtek
2023-12-14 11:40 - 2023-11-17 01:28 - 001598148 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2023-12-14 11:40 - 2023-11-16 23:24 - 000000000 ____D C:\ProgramData\Package Cache
2023-12-14 11:29 - 2023-11-16 19:26 - 000000000 ____D C:\Program Files (x86)\Intel
2023-12-13 18:55 - 2023-11-16 23:25 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Catznip
2023-12-09 23:08 - 2023-11-17 01:29 - 000000000 ____D C:\Users\TANIA\Documents\PROTOCOLOS
2023-12-01 21:42 - 2023-11-17 00:34 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Microsoft\Word
2023-11-25 21:37 - 2023-11-17 00:34 - 000000000 ____D C:\Users\TANIA\AppData\Roaming\Microsoft\Office
2023-11-24 20:31 - 2023-11-16 19:26 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2023-11-24 20:23 - 2023-11-16 19:29 - 000015260 _____ C:\Windows\system32\results.xml
2023-11-24 20:22 - 2023-11-16 19:25 - 000025329 _____ C:\Windows\Ascd_log.ini
2023-11-24 20:20 - 2023-11-16 19:25 - 000001769 _____ C:\Windows\Language_trs.ini
2023-11-24 20:19 - 2023-11-16 19:25 - 000018742 _____ C:\Windows\Ascd_tmp.ini

==================== Arquivos na raiz de alguns diretórios ========

2023-11-18 03:09 - 2023-11-18 03:09 - 000007611 _____ () C:\Users\TANIA\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Não há correção automática para arquivos que não passaram na verificação.)

LastRegBack: 2023-12-18 12:47
==================== Fim de FRST.txt ========================

Elias Pereira · 28 de dezembro de 2023

Desative temporariamente seu antivírus, antispywares e firewall, para não causar conflitos.

Abra o seu Bloco de Notas, copie (control + c) e cole (control + v) todo o texto que está no CODE abaixo:

Start::
SystemRestore: On 
CreateRestorePoint: 
CloseProcesses: 

StartBatch:
  pushd\windows\system32
  bcdedit.exe /export C:\exportBCDfile
  bcdedit.exe /set {default} recoveryenabled yes
  bcdedit /enum
  sfc /scannow
  DISM.exe /Online /Cleanup-image /Restorehealth
  sfc /scannow
Endbatch:

StartBatch:
 SETLOCAL ENABLEEXTENSIONS
 echo userprofile=%USERPROFILE%
 if not defined userprofile echo no userprofile&goto :eof
  del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.dl*"
  del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.ex*"
  del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.zi*"
  del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.sy*"
  del /f /q "%userprofile%\AppData\Roaming\{*.*"
  rd /s /q "%userprofile%\AppData\Roaming\discord\Cache"
  rd /s /q "%userprofile%\AppData\Roaming\discord\code cache"
  rd /s /q "%userprofile%\AppData\Roaming\discord\gpucache"
  del /s /q "%userprofile%\AppData\Local\Temp\*.*"
  del /f /q "%userprofile%\AppData\Local\*-gui"
  del /f /q "%userprofile%\AppData\Roaming\*-gui"
 :eof
EndBatch:

C:\Windows\Temp\*.*
C:\WINDOWS\system32\*.tmp
C:\WINDOWS\system32\drivers\*.tmp
C:\WINDOWS\syswow64\*.tmp
 
startbatch:
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\Js\*.*"
del /s /q "%userprofile%\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*.*"
del /s /q "%userprofile%\AppData\Local\Temp\*.exe"
 
endbatch:
 
CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R 
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R 
CMD: "C:\Windows\SysWOW64\lodctr.exe" /R 
CMD: "C:\Windows\SYSTEM32\lodctr.exe" /R 
CMD: fltmc instances
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset C:\resettcpip.txt
CMD: Bitsadmin /Reset /Allusers
 
EMPTYTEMP:
End::

Salve este arquivo na na sua área de trabalho com o nome fixlist

OBS: É de extrema importância que o arquivo "fixlist" seja salvo na sua Área de Trabalho/Desktop. Verifique também se o FRST.exe encontra-se na Área de Trabalho/Desktop.

** Clique com o direito sobre o arquivo FRST.EXE, depois clique em

Clique no botão CORRIGIR

Aguarde e ao final, o log Fixlog.txt será salvo no seu desktop.

Abra o arquivo Fixlog.txt, copie e cole seu conteudo na sua proxima resposta.

taki26 · 29 de dezembro de 2023

@Elias Pereira

4 horas atrás, Elias Pereira disse:

http://i.imgur.com/VRIfczU.png eu não entendi muito bem sobre esse http...não aparece pra mim...

E como desativo o firewall?

Elias Pereira · 29 de dezembro de 2023

Não precisa desabilitar o firewall.

Execute o FRST.exe como administrador.

** Clique com o direito sobre o arquivo FRST.EXE, depois clique em

taki26 · 29 de dezembro de 2023

Esqueci de executar como administrador...

Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 28-12-2023
Executado por TANIA (29-12-2023 18:04:00) Run:2
Executando a partir de C:\Users\TANIA\Desktop
Perfis Carregados: TANIA
Modo da Inicialização: Normal
==============================================

fixlist Conteúdo:
*****************
SystemRestore: On
CreateRestorePoint:
CloseProcesses:
StartBatch:
pushd\windows\system32
bcdedit.exe /export C:\exportBCDfile
bcdedit.exe /set {default} recoveryenabled yes
bcdedit /enum
sfc /scannow
DISM.exe /Online /Cleanup-image /Restorehealth
sfc /scannow
Endbatch:
StartBatch:
SETLOCAL ENABLEEXTENSIONS
echo userprofile=%USERPROFILE%
if not defined userprofile echo no userprofile&goto :eof
del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.dl*"
del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.ex*"
del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.zi*"
del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.sy*"
del /f /q "%userprofile%\AppData\Roaming\{*.*"
rd /s /q "%userprofile%\AppData\Roaming\discord\Cache"
rd /s /q "%userprofile%\AppData\Roaming\discord\code cache"
rd /s /q "%userprofile%\AppData\Roaming\discord\gpucache"
del /s /q "%userprofile%\AppData\Local\Temp\*.*"
del /f /q "%userprofile%\AppData\Local\*-gui"
del /f /q "%userprofile%\AppData\Roaming\*-gui"
:eof
EndBatch:
C:\Windows\Temp\*.*
C:\WINDOWS\system32\*.tmp
C:\WINDOWS\system32\drivers\*.tmp
C:\WINDOWS\syswow64\*.tmp

startbatch:
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\Js\*.*"
del /s /q "%userprofile%\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*.*"
del /s /q "%userprofile%\AppData\Local\Temp\*.exe"

endbatch:

CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R
CMD: "C:\Windows\SysWOW64\lodctr.exe" /R
CMD: "C:\Windows\SYSTEM32\lodctr.exe" /R
CMD: fltmc instances
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset C:\resettcpip.txt
CMD: Bitsadmin /Reset /Allusers

EMPTYTEMP:

*****************

SystemRestore: On => completado
Ponto de Restauração criado com sucesso.
Processos fechados com sucesso.

========= Batch: =========
0

A opera‡Æo foi conclu¡da com ˆxito.

Gerenciador de Inicializa‡Æo do Windows
--------------------
identificador           {bootmgr}
device                  partition=\Device\HarddiskVolume1
description             Windows Boot Manager
locale                  pt-BR
inherit                 {globalsettings}
default                 {current}
resumeobject            {f60b2f13-84d3-11ee-b4f7-c9008dfcbf89}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Carregador de Inicializa‡Æo do Windows
-------------------
identificador           {current}
device                  partition=C:
path                    \Windows\system32\winload.exe
description             Windows 7
locale                  pt-BR
inherit                 {bootloadersettings}
recoverysequence        {f60b2f15-84d3-11ee-b4f7-c9008dfcbf89}
recoveryenabled         Yes
osdevice                partition=C:
systemroot              \Windows
resumeobject            {f60b2f13-84d3-11ee-b4f7-c9008dfcbf89}
nx                      OptIn

Iniciando verifica‡Æo de arquivos. O processo levar alguns minutos para ser conclu¡do.

Iniciando fase de verifica‡Æo de verifica‡Æo do sistema.

Verifica‡Æo 0% conclu¡da.Verifica‡Æo 1% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 3% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 5% conclu¡da.Verifica‡Æo 6% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 8% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 10% conclu¡da.Verifica‡Æo 11% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 13% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 15% conclu¡da.Verifica‡Æo 16% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 18% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 20% conclu¡da.Verifica‡Æo 21% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 23% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 25% conclu¡da.Verifica‡Æo 26% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 28% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 30% conclu¡da.Verifica‡Æo 31% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 33% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 35% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 37% conclu¡da.Verifica‡Æo 38% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 40% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 42% conclu¡da.Verifica‡Æo 43% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 45% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 47% conclu¡da.Verifica‡Æo 48% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 50% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 52% conclu¡da.Verifica‡Æo 53% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 55% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 57% conclu¡da.Verifica‡Æo 58% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 60% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 62% conclu¡da.Verifica‡Æo 63% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 65% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 67% conclu¡da.Verifica‡Æo 68% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 70% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 72% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 74% conclu¡da.Verifica‡Æo 75% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 77% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 79% conclu¡da.Verifica‡Æo 80% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 82% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 84% conclu¡da.Verifica‡Æo 85% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 87% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 89% conclu¡da.Verifica‡Æo 90% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 92% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 94% conclu¡da.Verifica‡Æo 95% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 97% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 99% conclu¡da.Verifica‡Æo 100% conclu¡da.

A Prote‡Æo de Recursos do Windows nÆo encontrou nenhuma viola‡Æo de integridade.

Ferramenta de Gerenciamento e Manuten‡Æo de Imagens de Implanta‡Æo
VersÆo: 6.1.7601.24499

EU ACHO QUE ESSE SEGUNDO QUE REPASSEI ESTA MAIS COMPLETO...

Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 28-12-2023
Executado por TANIA (29-12-2023 18:38:01) Run:3
Executando a partir de C:\Users\TANIA\Desktop
Perfis Carregados: TANIA
Modo da Inicialização: Normal
==============================================

fixlist Conteúdo:
*****************
Start::
SystemRestore: On
CreateRestorePoint:
CloseProcesses:

StartBatch:
pushd\windows\system32
bcdedit.exe /export C:\exportBCDfile
bcdedit.exe /set {default} recoveryenabled yes
bcdedit /enum
sfc /scannow
DISM.exe /Online /Cleanup-image /Restorehealth
sfc /scannow
Endbatch:

StartBatch:
SETLOCAL ENABLEEXTENSIONS
echo userprofile=%USERPROFILE%
if not defined userprofile echo no userprofile&goto :eof
del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.dl*"
del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.ex*"
del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.zi*"
del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.sy*"
del /f /q "%userprofile%\AppData\Roaming\{*.*"
rd /s /q "%userprofile%\AppData\Roaming\discord\Cache"
rd /s /q "%userprofile%\AppData\Roaming\discord\code cache"
rd /s /q "%userprofile%\AppData\Roaming\discord\gpucache"
del /s /q "%userprofile%\AppData\Local\Temp\*.*"
del /f /q "%userprofile%\AppData\Local\*-gui"
del /f /q "%userprofile%\AppData\Roaming\*-gui"
:eof
EndBatch:

C:\Windows\Temp\*.*
C:\WINDOWS\system32\*.tmp
C:\WINDOWS\system32\drivers\*.tmp
C:\WINDOWS\syswow64\*.tmp

startbatch:
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\Js\*.*"
del /s /q "%userprofile%\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*.*"
del /s /q "%userprofile%\AppData\Local\Temp\*.exe"

endbatch:

CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R
CMD: "C:\Windows\SysWOW64\lodctr.exe" /R
CMD: "C:\Windows\SYSTEM32\lodctr.exe" /R
CMD: fltmc instances
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset C:\resettcpip.txt
CMD: Bitsadmin /Reset /Allusers

EMPTYTEMP:
End::
*****************

SystemRestore: On => completado
Ponto de Restauração criado com sucesso.
Processos fechados com sucesso.

========= Batch: =========
0

A opera‡Æo foi conclu¡da com ˆxito.

Gerenciador de Inicializa‡Æo do Windows
--------------------
identificador           {bootmgr}
device                  partition=\Device\HarddiskVolume1
description             Windows Boot Manager
locale                  pt-BR
inherit                 {globalsettings}
default                 {current}
resumeobject            {f60b2f13-84d3-11ee-b4f7-c9008dfcbf89}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Carregador de Inicializa‡Æo do Windows
-------------------
identificador           {current}
device                  partition=C:
path                    \Windows\system32\winload.exe
description             Windows 7
locale                  pt-BR
inherit                 {bootloadersettings}
recoverysequence        {f60b2f15-84d3-11ee-b4f7-c9008dfcbf89}
recoveryenabled         Yes
osdevice                partition=C:
systemroot              \Windows
resumeobject            {f60b2f13-84d3-11ee-b4f7-c9008dfcbf89}
nx                      OptIn

Iniciando verifica‡Æo de arquivos. O processo levar alguns minutos para ser conclu¡do.

Iniciando fase de verifica‡Æo de verifica‡Æo do sistema.

Verifica‡Æo 0% conclu¡da.Verifica‡Æo 1% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 3% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 5% conclu¡da.Verifica‡Æo 6% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 8% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 10% conclu¡da.Verifica‡Æo 11% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 13% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 15% conclu¡da.Verifica‡Æo 16% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 18% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 20% conclu¡da.Verifica‡Æo 21% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 23% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 25% conclu¡da.Verifica‡Æo 26% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 28% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 30% conclu¡da.Verifica‡Æo 31% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 33% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 35% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 37% conclu¡da.Verifica‡Æo 38% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 40% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 42% conclu¡da.Verifica‡Æo 43% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 45% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 47% conclu¡da.Verifica‡Æo 48% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 50% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 52% conclu¡da.Verifica‡Æo 53% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 55% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 57% conclu¡da.Verifica‡Æo 58% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 60% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 62% conclu¡da.Verifica‡Æo 63% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 65% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 67% conclu¡da.Verifica‡Æo 68% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 70% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 72% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 74% conclu¡da.Verifica‡Æo 75% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 77% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 79% conclu¡da.Verifica‡Æo 80% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 82% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 84% conclu¡da.Verifica‡Æo 85% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 87% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 89% conclu¡da.Verifica‡Æo 90% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 92% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 94% conclu¡da.Verifica‡Æo 95% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 97% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 99% conclu¡da.Verifica‡Æo 100% conclu¡da.

A Prote‡Æo de Recursos do Windows nÆo encontrou nenhuma viola‡Æo de integridade.

Ferramenta de Gerenciamento e Manuten‡Æo de Imagens de Implanta‡Æo
VersÆo: 6.1.7601.24499

VersÆo da Imagem: 6.1.7601.24499

Erro: 87

A op‡Æo restorehealth nÆo ‚ reconhecida neste contexto.
Para obter mais informa‡äes, consulte a ajuda.

O arquivo de log do DISM pode ser localizado em C:\Windows\Logs\DISM\dism.log

Iniciando verifica‡Æo de arquivos. O processo levar alguns minutos para ser conclu¡do.

Iniciando fase de verifica‡Æo de verifica‡Æo do sistema.

Verifica‡Æo 0% conclu¡da.Verifica‡Æo 1% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 2% conclu¡da.Verifica‡Æo 3% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 4% conclu¡da.Verifica‡Æo 5% conclu¡da.Verifica‡Æo 6% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 7% conclu¡da.Verifica‡Æo 8% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 9% conclu¡da.Verifica‡Æo 10% conclu¡da.Verifica‡Æo 11% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 12% conclu¡da.Verifica‡Æo 13% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 14% conclu¡da.Verifica‡Æo 15% conclu¡da.Verifica‡Æo 16% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 17% conclu¡da.Verifica‡Æo 18% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 19% conclu¡da.Verifica‡Æo 20% conclu¡da.Verifica‡Æo 21% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 22% conclu¡da.Verifica‡Æo 23% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 24% conclu¡da.Verifica‡Æo 25% conclu¡da.Verifica‡Æo 26% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 27% conclu¡da.Verifica‡Æo 28% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 29% conclu¡da.Verifica‡Æo 30% conclu¡da.Verifica‡Æo 31% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 32% conclu¡da.Verifica‡Æo 33% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 34% conclu¡da.Verifica‡Æo 35% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 36% conclu¡da.Verifica‡Æo 37% conclu¡da.Verifica‡Æo 38% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 39% conclu¡da.Verifica‡Æo 40% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 41% conclu¡da.Verifica‡Æo 42% conclu¡da.Verifica‡Æo 43% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 44% conclu¡da.Verifica‡Æo 45% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 46% conclu¡da.Verifica‡Æo 47% conclu¡da.Verifica‡Æo 48% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 49% conclu¡da.Verifica‡Æo 50% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 51% conclu¡da.Verifica‡Æo 52% conclu¡da.Verifica‡Æo 53% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 54% conclu¡da.Verifica‡Æo 55% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 56% conclu¡da.Verifica‡Æo 57% conclu¡da.Verifica‡Æo 58% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 59% conclu¡da.Verifica‡Æo 60% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 61% conclu¡da.Verifica‡Æo 62% conclu¡da.Verifica‡Æo 63% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 64% conclu¡da.Verifica‡Æo 65% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 66% conclu¡da.Verifica‡Æo 67% conclu¡da.Verifica‡Æo 68% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 69% conclu¡da.Verifica‡Æo 70% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 71% conclu¡da.Verifica‡Æo 72% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 73% conclu¡da.Verifica‡Æo 74% conclu¡da.Verifica‡Æo 75% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 76% conclu¡da.Verifica‡Æo 77% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 78% conclu¡da.Verifica‡Æo 79% conclu¡da.Verifica‡Æo 80% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 81% conclu¡da.Verifica‡Æo 82% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 83% conclu¡da.Verifica‡Æo 84% conclu¡da.Verifica‡Æo 85% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 86% conclu¡da.Verifica‡Æo 87% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 88% conclu¡da.Verifica‡Æo 89% conclu¡da.Verifica‡Æo 90% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 91% conclu¡da.Verifica‡Æo 92% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 93% conclu¡da.Verifica‡Æo 94% conclu¡da.Verifica‡Æo 95% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 96% conclu¡da.Verifica‡Æo 97% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 98% conclu¡da.Verifica‡Æo 99% conclu¡da.Verifica‡Æo 100% conclu¡da.

A Prote‡Æo de Recursos do Windows nÆo encontrou nenhuma viola‡Æo de integridade.

========= Fim de Batch: =========

========= Batch: =========
0

userprofile=C:\Users\TANIA

0

Nꏃ漀昀漀椀瀀漀猀猀쌀vel encontrar C:\Users\TANIA\AppData\Roaming\Microsoft\*.dl*

Nꏃ漀昀漀椀瀀漀猀猀쌀vel encontrar C:\Users\TANIA\AppData\Roaming\Microsoft\*.ex*

Nꏃ漀昀漀椀瀀漀猀猀쌀vel encontrar C:\Users\TANIA\AppData\Roaming\Microsoft\*.zi*

Nꏃ漀昀漀椀瀀漀猀猀쌀vel encontrar C:\Users\TANIA\AppData\Roaming\Microsoft\*.sy*

Nꏃ漀昀漀椀瀀漀猀猀쌀vel encontrar C:\Users\TANIA\AppData\Roaming\{*.*

伀猀椀猀琀攀洀愀渀쎣o pode encontrar o caminho especificado.

0

Nꏃ漀昀漀椀瀀漀猀猀쌀vel encontrar C:\Users\TANIA\AppData\Local\*-gui

Nꏃ漀昀漀椀瀀漀猀猀쌀vel encontrar C:\Users\TANIA\AppData\Roaming\*-gui

0

========= Fim de Batch: =========

=========== "C:\Windows\Temp\*.*" ==========

não encontrado (a)

========= Fim -> "C:\Windows\Temp\*.*" ========

=========== "C:\WINDOWS\system32\*.tmp" ==========

não encontrado (a)

========= Fim -> "C:\WINDOWS\system32\*.tmp" ========

=========== "C:\WINDOWS\system32\drivers\*.tmp" ==========

não encontrado (a)

========= Fim -> "C:\WINDOWS\system32\drivers\*.tmp" ========

=========== "C:\WINDOWS\syswow64\*.tmp" ==========

não encontrado (a)

========= Fim -> "C:\WINDOWS\syswow64\*.tmp" ========

========= Batch: =========
0

0

伀猀椀猀琀攀洀愀渀쎣o pode encontrar o caminho especificado.

Nꏃ漀昀漀椀瀀漀猀猀쌀vel encontrar C:\Users\TANIA\AppData\Local\Temp\*.exe

0

========= Fim de Batch: =========

========= "%WINDIR%\SYSTEM32\lodctr.exe" /R =========

Info: Configura‡Æo do contador de desempenho reconstru¡da com sucesso a partir do reposit¢rio de backup do sistema