eric9450

Pessoal, estou com problemas também abaixo o aviso que abre quando tento acessar meu HD externo samsung de 64gb. Nome do Evento de Problema: APPCRASH Nome do Aplicativo: ISFMgr.exe Versão do Aplicativo: 4.1.428.0 Carimbo de Data/Hora do Aplicativo: 4a0d2740 Nome do Módulo de Falhas: KERNELBASE.dll Versão do Módulo de Falhas: 6.1.7601.17651 Carimbo de Data/Hora do Módulo de Falhas: 4e2111c0 Código de Exceção: e06d7363 Deslocamento de Exceção: 0000d36f Versão do sistema operacional: 6.1.7601.2.1.0.256.1 Identificação da Localidade: 1046 Informações Adicionais 1: 0a9e Informações Adicionais 2: 0a9e372d3b4ad19135b953a78882e789 Informações Adicionais 3: 0a9e Informações Adicionais 4: 0a9e372d3b4ad19135b953a78882e789 Aqui vai o relatório do combofix: ComboFix 12-10-04.02 - ERIC FERNANDO 07/10/2012 10:35:38.1.1 - x86 Microsoft Windows 7 Professional 6.1.7601.1.1252.55.1046.18.1982.809 [GMT -3:00] Executando de: c:\users\ERIC FERNANDO\Downloads\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ADS - system32: deleted 2 bytes in 1 streams. ADS - drivers: deleted 212 bytes in 1 streams. . ((((((((((((((((((((((((((((((((((((( Outras Exclusões ))))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\Topckit c:\program files\Topckit\ObjClsID.dll c:\program files\Topckit\Topckit_2012.exe c:\program files\Topckit\unins000.dat c:\program files\Topckit\unins000.exe c:\program files\Topckit\UpdateInfo.ini c:\program files\Topckit\UpdatePro.exe E:\Autorun.inf . . (((((((((((((((( Arquivos/Ficheiros criados de 2012-09-07 to 2012-10-07 )))))))))))))))))))))))))))) . . 2012-10-07 13:55 . 2012-10-07 13:55 -------- d-----w- c:\users\ERIC FERNANDO\AppData\Local\temp 2012-10-07 13:55 . 2012-10-07 13:55 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-10-07 13:27 . 2012-10-07 13:27 12568 ----a-w- c:\windows\system32\drivers\PROCEXP113.SYS 2012-10-07 13:20 . 2012-10-07 13:20 -------- d-----w- c:\users\ERIC FERNANDO\PSafe 2012-10-07 13:20 . 2012-09-17 22:58 152880 ----a-r- c:\windows\system32\drivers\360FileOem.sys 2012-10-07 13:20 . 2012-09-17 22:58 64048 ----a-r- c:\windows\system32\drivers\360SpOEM.sys 2012-10-07 13:20 . 2012-09-17 22:58 29744 ----a-r- c:\windows\system32\drivers\360RegOem.sys 2012-10-07 13:19 . 2012-10-07 14:03 -------- d-----w- c:\programdata\PSafe 2012-10-07 13:19 . 2012-09-17 22:58 61488 ----a-r- c:\windows\system32\drivers\360HookOem.sys 2012-10-07 12:41 . 2012-10-07 12:41 -------- d-----w- c:\users\ERIC FERNANDO\AppData\Roaming\RadarSync 2012-10-07 12:41 . 2012-10-07 12:41 -------- d-----w- c:\program files\Conduit 2012-10-07 10:37 . 2012-10-07 10:37 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C9D11ABC-B9DC-44A8-95C5-0FDB4F05CB23}\offreg.dll 2012-10-06 19:07 . 2012-10-06 19:07 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll 2012-10-04 16:22 . 2012-10-04 16:22 -------- d-----w- c:\users\ERIC FERNANDO\AppData\Local\CrashRpt 2012-10-04 14:37 . 2012-10-04 14:37 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2012-10-04 13:15 . 2012-08-24 06:52 387584 ----a-w- c:\program files\Internet Explorer\jsdbgui.dll 2012-10-04 13:15 . 2012-08-24 06:53 678912 ----a-w- c:\program files\Internet Explorer\iedvtool.dll 2012-10-04 13:15 . 2012-08-24 06:51 1427968 ----a-w- c:\windows\system32\inetcpl.cpl 2012-10-04 13:15 . 2012-10-04 13:15 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help 2012-10-04 12:51 . 2012-08-22 17:16 1292144 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-10-04 12:51 . 2012-08-22 17:16 240496 ----a-w- c:\windows\system32\drivers\netio.sys 2012-10-04 12:51 . 2012-08-22 17:16 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2012-10-04 12:51 . 2012-07-18 17:47 2345984 ----a-w- c:\windows\system32\win32k.sys 2012-10-04 12:49 . 2012-07-04 21:14 102912 ----a-w- c:\windows\system32\browser.dll 2012-10-04 12:49 . 2012-07-04 21:14 41984 ----a-w- c:\windows\system32\browcli.dll 2012-10-04 12:49 . 2012-05-14 04:33 769024 ----a-w- c:\windows\system32\localspl.dll 2012-09-28 19:02 . 2012-09-28 19:02 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll 2012-09-28 19:01 . 2012-09-28 19:01 578896 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2012-09-26 14:50 . 2012-09-26 14:50 -------- d-----w- c:\program files\CCleaner 2012-09-24 17:44 . 2012-08-21 16:01 26840 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2012-09-24 17:43 . 2012-09-24 17:43 -------- d-----w- c:\program files\iPod 2012-09-24 17:43 . 2012-09-24 17:44 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1 2012-09-24 17:43 . 2012-09-24 17:44 -------- d-----w- c:\program files\iTunes 2012-09-17 22:51 . 2012-08-21 09:13 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2012-09-17 22:51 . 2012-08-21 09:13 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys 2012-09-17 22:51 . 2012-08-21 09:13 44784 ----a-w- c:\windows\system32\drivers\aswRdr2.sys 2012-09-17 22:50 . 2012-08-21 09:13 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2012-09-17 22:50 . 2012-08-21 09:13 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-09-17 22:50 . 2012-08-21 09:13 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-09-17 22:50 . 2012-08-21 09:12 41224 ----a-w- c:\windows\avastSS.scr 2012-09-17 22:50 . 2012-08-21 09:12 227648 ----a-w- c:\windows\system32\aswBoot.exe 2012-09-17 22:49 . 2012-09-17 22:49 -------- d-----w- c:\programdata\AVAST Software 2012-09-17 22:49 . 2012-09-17 22:49 -------- d-----w- c:\program files\AVAST Software 2012-09-11 12:37 . 2012-09-11 12:37 -------- d-----w- C:\AVG2012 2012-09-10 13:32 . 2012-09-10 13:32 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2012-09-10 13:32 . 2012-09-10 13:32 -------- d-----w- c:\program files\Java . . . ((((((((((((((((((((((((((((((((((((( Relatório Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-10 13:32 . 2012-08-07 18:32 746984 ----a-w- c:\windows\system32\deployJava1.dll 2012-09-10 13:32 . 2012-08-07 18:32 821736 ----a-w- c:\windows\system32\npDeployJava1.dll 2012-09-07 20:04 . 2012-09-01 15:20 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-08-21 16:01 . 2012-07-08 22:24 106928 ----a-w- c:\windows\system32\GEARAspi.dll 2012-07-28 06:09 . 2012-07-28 06:09 57792 ----a-w- c:\windows\system32\sirenacm.dll 2012-07-28 05:54 . 2012-07-28 05:54 321472 ----a-w- c:\windows\WLXPGSS.SCR 2012-07-28 05:53 . 2012-09-05 11:31 49088 ----a-w- c:\windows\system32\drivers\fssfltr.sys 2012-07-26 22:08 . 2012-07-26 22:08 862664 ----a-w- c:\windows\system32\msvcr110.dll 2012-07-26 22:08 . 2012-07-26 22:08 534480 ----a-w- c:\windows\system32\msvcp110.dll 2012-07-26 22:08 . 2012-07-26 22:08 251864 ----a-w- c:\windows\system32\vccorlib110.dll 2012-07-26 22:08 . 2012-07-26 22:08 153536 ----a-w- c:\windows\system32\atl110.dll 2012-07-26 22:08 . 2012-07-26 22:08 115656 ----a-w- c:\windows\system32\vcomp110.dll 2012-07-17 17:49 . 2012-07-17 17:49 209648 ----a-w- c:\windows\system32\LIVESSP.DLL 2012-07-17 17:37 . 2012-07-17 17:37 19736 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2012-07-09 16:42 . 2012-07-09 16:42 4547984 ----a-w- c:\windows\system32\usbaaplrc.dll 2012-07-09 16:42 . 2012-07-09 16:42 44032 ----a-w- c:\windows\system32\drivers\usbaapl.sys . . (((((((((((((((((((((((((( Pontos de Carregamento do Registro ))))))))))))))))))))))))))))))))))))))) . . *Nota* entradas vazias e legítimas por padrão não são apresentadas. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2012-09-03 18:44 220608 ----a-w- c:\users\ERIC FERNANDO\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2012-09-03 18:44 220608 ----a-w- c:\users\ERIC FERNANDO\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2012-09-03 18:44 220608 ----a-w- c:\users\ERIC FERNANDO\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1PSafeOverlaySync] @="{A48EC0D3-3DDF-4A75-B35E-B1AFBC6E40F7}" [HKEY_CLASSES_ROOT\CLSID\{A48EC0D3-3DDF-4A75-B35E-B1AFBC6E40F7}] 2012-09-17 23:32 2050824 ----a-w- c:\program files\PSafe\shell\v3.1.1209.17401\PSafeShellExtensionx86.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2PSafeOverlayOk] @="{A48EC0D3-4DDF-4A75-B35E-B1AFBC6E40F7}" [HKEY_CLASSES_ROOT\CLSID\{A48EC0D3-4DDF-4A75-B35E-B1AFBC6E40F7}] 2012-09-17 23:32 2050824 ----a-w- c:\program files\PSafe\shell\v3.1.1209.17401\PSafeShellExtensionx86.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3PSafeOverlayOut] @="{A48EC0D3-5DDF-4A75-B35E-B1AFBC6E40F7}" [HKEY_CLASSES_ROOT\CLSID\{A48EC0D3-5DDF-4A75-B35E-B1AFBC6E40F7}] 2012-09-17 23:32 2050824 ----a-w- c:\program files\PSafe\shell\v3.1.1209.17401\PSafeShellExtensionx86.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "3E4DDABB3BBF1C889B9E8C2E3E2B23F66F136E77._service_run"="c:\program files\Google\Chrome\Application\chrome.exe" [2012-09-25 1239064] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2012-06-11 10996368] "snpstd3"="c:\windows\vsnpstd3.exe" [2006-09-18 843776] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-28 59280] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-09-10 421776] "PSafeSysTray"="c:\program files\PSafe\PSafeSysTray.exe" [2012-09-17 5428488] . c:\users\ERIC FERNANDO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Samsung Auto Backup Guage.lnk - c:\program files\Clarus\Samsung Auto Backup\ISFGuage.exe [2012-9-1 888832] Samsung Auto Backup Real-Time Daemon.lnk - c:\program files\Clarus\Samsung Auto Backup\ISFRealTimeD.exe [2012-9-1 77824] Samsung Auto Backup Scheduler.lnk - c:\program files\Clarus\Samsung Auto Backup\ISFTimerD.exe [2012-9-1 94208] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{E37CB5F0-51F5-4395-A808-5FA49E399008}"= "c:\program files\GbPlugin\gbiehuni.dll" [2012-06-06 615104] . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ GbPluginUni] 2012-06-06 21:49 615104 ----a-w- c:\program files\GbPlugin\gbiehuni.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "3E4DDABB3BBF1C889B9E8C2E3E2B23F66F136E77._service_run"="c:\program files\Google\Chrome\Application\chrome.exe" --type=service "SpeedUpMyPC"="c:\program files\Uniblue\SpeedUpMyPC\launcher.exe" -d 20000 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" "tsnpstd3"=c:\windows\tsnpstd3.exe "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" "BDRegion"=c:\program files\Cyberlink\Shared files\brs.exe "PMBVolumeWatcher"=c:\program files\Sony\PlayMemories Home\PMBVolumeWatcher.exe "RemoteControl10"="c:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe" "NeroFilterCheck"=c:\program files\Common Files\Ahead\Lib\NeroCheck.exe "vProt"="c:\program files\AVG Secure Search\vprot.exe" . R2 gupdate;Serviço do Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x] R3 gupdatem;Serviço do Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x] R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x] R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 WatAdminSvc;Serviço de Tecnologias de Ativação do Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x] S0 360HookOem;360HookOem;c:\windows\system32\drivers\360HookOEM.sys [x] S0 GbpKm;Gbp KernelMode;c:\windows\system32\drivers\gbpkm.sys [x] S1 360FileOem;360FileOem;c:\windows\system32\drivers\360FileOem.sys [x] S1 360RegOem;360RegOem;c:\windows\system32\drivers\360RegOem.sys [x] S1 360SpOEM;360SpOEM;c:\windows\system32\drivers\360SpOEM.sys [x] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x] S2 GbpSv;Gbp Service;c:\progra~1\GbPlugin\GbpSv.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x] S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [x] S2 PSafeLockBoxSvc;PSafeLockBoxSvc;c:\program files\PSafe\PSafeCategoryFinder.exe [x] S2 PSafeSVC;PSafeSVC;c:\program files\PSafe\PSafesvc.exe [x] S2 PSafeWD;PSafeWD;c:\program files\PSafe\PSafeWD.exe [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [x] S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [x] S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [x] . . --- =Outros Serviços/Drivers Na Memória --- . *NewlyCreated* - 360FILEOEM *NewlyCreated* - 360HOOKOEM *NewlyCreated* - 360REGOEM *NewlyCreated* - 360SPOEM . Conteúdo da pasta 'Tarefas Agendadas' . 2012-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-07-04 16:38] . 2012-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2012-07-04 16:38] . . ------- Scan Suplementar ------- . uStart Page = about:blank uInternet Settings,ProxyOverride = *.local IE: E&xportar para o Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000 Trusted Zone: itau.com.br\bankline Trusted Zone: itau.com.br\guardiao Trusted Zone: itau.com.br\www TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{58B55ABA-DF19-4552-A39E-625B095700C9}\373796462686: NameServer = 192.168.192.1 . - - - - ORFÃOS REMOVIDOS - - - - . URLSearchHooks-{6edc3889-b841-4127-a2bf-c5fc48f972c7} - (no file) WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) WebBrowser-{6EDC3889-B841-4127-A2BF-C5FC48F972C7} - (no file) AddRemove-{A6546D9D-7890-4A2D-ADDB-29DF0EB1DD4B}_is1 - c:\program files\Topckit\unins000.exe . . . --------------------- CHAVES DO REGISTRO BLOQUEADAS --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Tempo para conclusão: 2012-10-07 11:08:51 ComboFix-quarantined-files.txt 2012-10-07 14:08 . Pré-execução: 16.584.601.600 bytes disponíveis Pós execução: 16.555.360.256 bytes disponíveis . - - End Of File - - AE37405901E0F0C7FA73C2E2A14CB062 Aguardo um retorno do que devo fazer...