-
Posts
367 -
Cadastrado em
-
Última visita
Reputação
318Sobre Elias Pereira

-
Jon3ves começou a seguir Elias Pereira
-
HELEN APARECIDA SANTOS começou a seguir Elias Pereira
-
STAR ALPHA começou a seguir Elias Pereira
-
Marcos1707 começou a seguir Elias Pereira
-
Nickolas_K_C começou a seguir Elias Pereira
-
Prompt de comando abrindo páginas ao iniciar a máquina.
Elias Pereira respondeu ao tópico de Samuel Roger em Vírus, malware, invasões e afins
Problema resolvido! Caso o autor necessite, o mesmo será reaberto, para isso deverá entrar em contato com um Analista de Segurança ou Coordenador solicitando o desbloqueio. -
Prompt de comando abrindo páginas ao iniciar a máquina.
Elias Pereira respondeu ao tópico de Samuel Roger em Vírus, malware, invasões e afins
Obrigado!!! Bom 2024 pra você e sua familia também!! Sim, é normal. -
Prompt de comando abrindo páginas ao iniciar a máquina.
Elias Pereira respondeu ao tópico de Samuel Roger em Vírus, malware, invasões e afins
Ok. No aguardo. -
Prompt de comando abrindo páginas ao iniciar a máquina.
Elias Pereira respondeu ao tópico de Samuel Roger em Vírus, malware, invasões e afins
Refez os passos agora? O ideal é que você deixe o firewall do windows ativo. Verifique no link abaixo se algum dos passos resolve. https://guiatecnico.com/por-que-minha-barra-de-tarefas-não-esta-aparecendo/ -
Prompt de comando abrindo páginas ao iniciar a máquina.
Elias Pereira respondeu ao tópico de Samuel Roger em Vírus, malware, invasões e afins
Em relação a malwares, não temos mais problemas. Se não tiver mais problema em relação a malwares, clique em Denunciar Post localizado no topo da pagina e diga que seu topico está RESOLVIDO. Se você tiver alguma dúvida relacionada a informática e tecnologia, sinta-se à vontade para postar em qualquer área do CdH. -
Prompt de comando abrindo páginas ao iniciar a máquina.
Elias Pereira respondeu ao tópico de Samuel Roger em Vírus, malware, invasões e afins
Os problemas iniciais persistem? -
Prompt de comando abrindo páginas ao iniciar a máquina.
Elias Pereira respondeu ao tópico de Samuel Roger em Vírus, malware, invasões e afins
Desative temporariamente seu antivírus, antispywares e firewall, para não causar conflitos. Abra o seu Bloco de Notas, copie (control + c) e cole (control + v) todo o texto que está no CODE abaixo: Start:: SystemRestore: On CreateRestorePoint: CloseProcesses: Task: {A4E3EBEF-D0AC-4DAA-9A4C-58C593F1F5EA} - System32\Tasks\FreeDownloadManagerHelperService => C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe [129536 2023-05-19] (Softdeluxe) [Arquivo não assinado] Task: {51E3B084-1A38-4EE3-AC2E-DDAFD0EE3086} - System32\Tasks\GoogleUpdateTaskMachineCore{B6328745-B059-46A7-91AD-45A3F93B5FAF} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162072 2023-08-26] (Google LLC -> Google LLC) Task: {6498F76B-477F-4718-90E7-D8A2D4870943} - System32\Tasks\GoogleUpdateTaskMachineUA{C61F8866-83B2-44C6-BE21-147C10640057} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162072 2023-08-26] (Google LLC -> Google LLC) Task: {D384E84B-D4F4-4251-9645-6737A5E36782} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-11-14] (Microsoft Corporation -> Microsoft Corporation) Task: {AB798639-EEF3-4C99-ADAA-927698C88FB2} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-11-14] (Microsoft Corporation -> Microsoft Corporation) Task: {CFB00084-92CC-4526-9B59-99D9A1D74871} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-07] (Microsoft Corporation -> Microsoft Corporation) Task: {F29AD30A-BBE0-463E-A666-4E080A676872} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-07] (Microsoft Corporation -> Microsoft Corporation) Task: {07470781-79A1-4AA3-B53E-25E1151A7E2C} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169144 2023-12-07] (Microsoft Corporation -> Microsoft Corporation) Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Nenhum Arquivo) Task: {A3953871-B9D7-4E35-9CDD-6F6DF11009DD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {D4BD820D-4758-4178-A20A-883495C34639} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {5DC142D8-969D-4EFE-B399-A16C725B2794} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {69825534-0297-49C0-B6EB-AFFB8C283E2E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {68C0B37F-47F8-494B-9697-A09E281BDCFB} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {AD15E877-2F4B-4EFC-A44B-62B368F9AC2E} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {36A48EE7-05C3-451E-83E8-30C9745892FF} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {4585A3FA-A235-411A-A927-612C80758332} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {9DA87DD4-6977-4625-88F5-3170045842F4} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {D71D6B40-5895-4249-B06C-F20D1FDF97D8} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {A67CCF3B-3F50-4BFF-9258-9DA1AA22B6E5} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {59ED1C84-C1B1-406C-A6E4-39E3E46DFC0E} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {9378BD7F-501B-43B1-8661-382A900AA24C} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {52D624C0-C582-4391-BAE4-0E2376CFD3AB} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-16] (Microsoft Corporation -> Microsoft Corporation) Task: {69F2E8A7-E561-4834-986E-55418DDE6EFE} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3956414198-1852685487-3734134944-1000 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-16] (Microsoft Corporation -> Microsoft Corporation) Task: {B2636CCB-18E1-4D5B-90C8-AE5D44CE0F9D} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1703008161 => C:\Users\PC\AppData\Local\Programs\Opera GX\launcher.exe [2296224 2023-12-21] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\PC\AppData\Local\Programs\Opera GX\assistant" $(Arg0) Task: {C9B8D428-9A88-44B2-A982-BA2D9835C801} - System32\Tasks\Opera GX scheduled Autoupdate 1702257299 => C:\Users\PC\AppData\Local\Programs\Opera GX\launcher.exe [2296224 2023-12-21] (Opera Norway AS -> Opera Software) Task: {4F178481-AC77-4547-92FA-EAEF6226E7B5} - System32\Tasks\Opera scheduled Autoupdate 1703606968 => C:\Users\PC\AppData\Local\Programs\Opera\launcher.exe [2350496 2023-12-22] (Opera Norway AS -> Opera Software) Task: {3D30FB78-65A7-484B-BC6F-BE1336B889BF} - System32\Tasks\PC => C:\Windows\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v PC /t REG_SZ /d "cmd.exe /c start www.exinariuminix.info" <==== ATENÇÃO Task: {DE2287B4-EF12-48B9-9F3F-5E3C30A6D0F2} - System32\Tasks\WindhawkRunUITask => C:\Program Files\Windhawk\windhawk.exe [762840 2023-09-08] (Michael Maltsev -> Ramen Software) Task: {1CCF9C43-3FF0-4FC2-9626-BEC19619E421} - System32\Tasks\WindhawkUpdateTask => C:\Program Files\Windhawk\windhawk.exe [762840 2023-09-08] (Michael Maltsev -> Ramen Software) S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X] HKU\S-1-5-21-3956414198-1852685487-3734134944-1000\...\MountPoints2: {5400f56c-8982-11ee-8479-18c04df2884d} - "E:\Ultimate_Edition_Installer.exe" E:\Ultimate_Edition_Installer.exe AlternateDataStreams: C:\ProgramData:NT [40] AlternateDataStreams: C:\ProgramData:NT2 [732] AlternateDataStreams: C:\Users\All Users:NT [40] AlternateDataStreams: C:\Users\All Users:NT2 [732] AlternateDataStreams: C:\Users\Todos os Usuários:NT [40] AlternateDataStreams: C:\Users\Todos os Usuários:NT2 [732] AlternateDataStreams: C:\ProgramData\Dados de Aplicativos:NT [40] AlternateDataStreams: C:\ProgramData\Dados de Aplicativos:NT2 [732] AlternateDataStreams: C:\ProgramData\DP45977C.lfl:677104FCAA [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks Multi-Instance Manager.lnk:FE00AE19CB [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk:8096E45125 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk:E77773B271 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk:159ADC9AA1 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk:4E42ED6D31 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk:60EC9648C0 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk:5465085A2F [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk:1DC1525F34 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk:104946E0EA [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultra Ego FPS.lnk:100E6785F5 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk:7AD7FA8AB1 [3442] AlternateDataStreams: C:\Users\PC\Dados de Aplicativos:NT [40] AlternateDataStreams: C:\Users\PC\Dados de Aplicativos:NT2 [732] AlternateDataStreams: C:\Users\PC\AppData\Roaming:NT [40] AlternateDataStreams: C:\Users\PC\AppData\Roaming:NT2 [732] AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [6996] StartBatch: pushd\windows\system32 bcdedit.exe /export C:\exportBCDfile bcdedit.exe /set {default} recoveryenabled yes bcdedit /enum sfc /scannow DISM.exe /Online /Cleanup-image /Restorehealth sfc /scannow Endbatch: StartBatch: SETLOCAL ENABLEEXTENSIONS echo userprofile=%USERPROFILE% if not defined userprofile echo no userprofile&goto :eof del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.dl*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.ex*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.zi*" del /f /q "%userprofile%\AppData\Roaming\Microsoft\*.sy*" del /f /q "%userprofile%\AppData\Roaming\{*.*" rd /s /q "%userprofile%\AppData\Roaming\discord\Cache" rd /s /q "%userprofile%\AppData\Roaming\discord\code cache" rd /s /q "%userprofile%\AppData\Roaming\discord\gpucache" del /s /q "%userprofile%\AppData\Local\Temp\*.*" del /f /q "%userprofile%\AppData\Local\*-gui" del /f /q "%userprofile%\AppData\Roaming\*-gui" :eof EndBatch: C:\Windows\Temp\*.* C:\WINDOWS\system32\*.tmp C:\WINDOWS\system32\drivers\*.tmp C:\WINDOWS\syswow64\*.tmp startbatch: del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*" del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\Js\*.*" del /s /q "%userprofile%\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\*.*" del /s /q "%userprofile%\AppData\Local\Temp\*.exe" endbatch: CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R CMD: "C:\Windows\SysWOW64\lodctr.exe" /R CMD: "C:\Windows\SYSTEM32\lodctr.exe" /R CMD: fltmc instances CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset C:\resettcpip.txt CMD: Bitsadmin /Reset /Allusers EMPTYTEMP: End:: Salve este arquivo na na sua área de trabalho com o nome fixlist OBS: É de extrema importância que o arquivo "fixlist" seja salvo na sua Área de Trabalho/Desktop. Verifique também se o FRST.exe encontra-se na Área de Trabalho/Desktop. ** Clique com o direito sobre o arquivo FRST.EXE, depois clique em Clique no botão CORRIGIR Aguarde e ao final, o log Fixlog.txt será salvo no seu desktop. Abra o arquivo Fixlog.txt, copie e cole seu conteudo na sua proxima resposta. -
Prompt de comando abrindo páginas ao iniciar a máquina.
Elias Pereira respondeu ao tópico de Samuel Roger em Vírus, malware, invasões e afins
Tudo certo. Executou a etapa 2? Baixe o Farbar Recovery Scan do link abaixo e salve na sua área de trabalho. https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Clique com o direito sobre o arquivo FRST64.EXE, depois clique em http://i.imgur.com/VRIfczU.png . Aceite o contrato e depois clique no botão Scan/Examinar.Aguarde e ao final, os logs FRST.txt e Addition.txt serão salvos no seu desktop. Abra cada arquivo em separado, copie seu conteúdo e cole na sua próxima resposta.
Sobre o Clube do Hardware
No ar desde 1996, o Clube do Hardware é uma das maiores, mais antigas e mais respeitadas comunidades sobre tecnologia do Brasil. Leia mais
Direitos autorais
Não permitimos a cópia ou reprodução do conteúdo do nosso site, fórum, newsletters e redes sociais, mesmo citando-se a fonte. Leia mais