joram
Highlander
Registrado
5.4K Mensagens
2.5K Curtidas
/!\ Boa Noite! felipestoker /!\
> Copie estas informações que estão no Spoiler,para o Bloco de Notas.
> Salve-as com o nome fixlist. << Texto ou Unicode,caso solicite!
> Salve-as ao desktop! ( Área de trabalho ... )
> Recorte ou Mova o arquivo FRST64.exe, ao desktop! (C:\Users\Felipe\Downloads\FRST64.exe)
fixlist
Start::
CloseProcesses:
HKU\S-1-5-21-3633606873-1387218457-3474124247-1001\...\Run: [GalaxyClient] => [X]
HKLM\...\Print\Monitors\CutePDF Writer Monitor: cpwmon64.dll (No File)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706344 2021-09-27] (Oracle America, Inc. -> Oracle Corporation)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {B1E8BCBC-12B8-4278-9E16-2581C82CF2B8} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {E7CEEA14-C774-41CB-8E87-94A904BC11F4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {10C880B9-04D4-4D5D-9331-E174F9B185A8} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {99F1ECDF-9E7A-4363-87D6-42A3970BFE41} - System32\Tasks\update-S-1-5-21-3633606873-1387218457-3474124247-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: )
Task: {29A8ABB9-59E6-4000-99A2-AC2610B23885} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: )
Task: C:\Windows\Tasks\update-S-1-5-21-3633606873-1387218457-3474124247-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
S3 xldr_crossfire_br; "C:\Program Files\Common Files\Uncheater\xldr_crossfire_br.exe" [X]
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
HKU\S-1-5-21-3633606873-1387218457-3474124247-1001\Software\Classes\regfile: <==== ATTENTION
HKU\S-1-5-21-3633606873-1387218457-3474124247-1001\Software\Classes\.reg: => <==== ATTENTION
HKU\S-1-5-21-3633606873-1387218457-3474124247-1001\Software\Classes\.bat: => <==== ATTENTION
HKU\S-1-5-21-3633606873-1387218457-3474124247-1001\Software\Classes\.cmd: => <==== ATTENTION
StartPowershell:
DISM /Online /Cleanup-image /Restorehealth
sfc /scannow
EndPowershell:
CreateRestorePoint:
RemoveProxy:
EmptyTemp:
Reboot:
Hosts:
End::
> Execute FRST/FRST64 >> Clique "Corrigir" << Aguarde!
> Poste o relatório "Resultado da Correção pela Farbar Recovery Scan Tool". (Fixlog.txt)
< Peço aos visitantes que não utilizem este script em outros computadores,sob risco de danos aos mesmos! >
A+
felipestoker
Veterano
Registrado
1.3K Mensagens
22 Curtidas
Muito obrigado pela sua ajuda.
Tive que renomear o arquivo Fixlog.txt para fix.txt pois não estava conseguindo fazer upload.
Anexos
joram
Highlander
Registrado
5.4K Mensagens
2.5K Curtidas
joram
Highlander
Registrado
5.4K Mensagens
2.5K Curtidas
/!\ Boa Tarde! felipestoker /!\
---\ Summary of the elements found (15)
https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserHistoric
https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserCache
https://nicolascoolman.eu/forum/Topic/booking-logiciel-potentiellement-indesirable-pup-lpi/ =>PUP.Optional.Booking
https://nicolascoolman.eu/forum/Topic/searchdonkey-logiciel-potentiellement-indesirable-pup-lpi/ =>PUP.Optional.SearchDonkey
https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.ABTeam
https://nicolascoolman.eu/2020/10/01/preferences-navigateurs-chromium/ =>ChromiumPreference
https://nicolascoolman.eu/2017/02/06/superfluous-conduit/ =>SUP.Optional.Conduit
https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.IronSourceLtd
https://nicolascoolman.eu/forum/Topic/Discord-logiciel-potentiellement-superflu-lps/ =>.SUP.Discord
https://nicolascoolman.eu/2019/01/sup-skillbrains =>SUP.Optional.Skillbrains
https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Empty
https://nicolascoolman.eu/2017/02/26/superfluous-popcorntime/ =>.SUP.PopcornTime
https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/ =>Adware.Navipromo
superfluous-virtualgirl =>.SUP.VirtualGirl
https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/ =>PUP.Optional.SimpleSearches
>
>
> Pelo sumário das detecções, peço-lhe que execute, novamente, a ZHPCleaner e remova estes PUPs, Superfluos e Adware.
> Ao concluir, poste o relatório!
[]s
Anexos
