Análise log FRST

Question

Boa noite,
Poderiam analisar os logs em anexo?
Estou com alguns problemas no PC e desconfio que seja v&iacute;rus.

Obrigada!

Answer

/_ Bom Dia![COLOR=#0000ff] lake [/COLOR]_\

> Desinstale:[COLOR=#ff0000] Spybot - Search & Destroy [/COLOR]  Copie estas informa&ccedil;&otilde;es que est&atilde;o em vermelho,para o Bloco de Notas.
> Salve-as com o nome [COLOR=green]fixlist[/COLOR].  Salve-as ao desktop! ( &Aacute;rea de trabalho ... )
> Mova a ferramenta [COLOR=#006666]FRST.exe[/COLOR] ao desktop! ( C:\Users\Vendas 6\[COLOR=#ff0000]Downloads[/COLOR])  {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-3368821618-3246057849-4117450610-1001\...\Run: [SpybotSD TeaTimer] => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2144088 2009-01-26] (Safer Networking Limited)
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S1 gbpddfac; system32\drivers\gbpddfac64.sys [X]
S0 gbpddreg; system32\drivers\gbpddreg64.sys [X]
2017-01-04 00:38 - 2017-01-04 00:38 - 00001338 _____ C:\Users\Vendas 6\Desktop\Spybot - Search & Destroy.lnk
2017-01-04 00:38 - 2017-01-04 00:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
2017-01-04 00:38 - 2017-01-04 00:38 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2017-01-04 00:38 - 2016-01-02 12:52 - 05643309 ____R (Swearware) C:\Users\Vendas 6\Desktop\ComboFix.exe
2017-01-04 00:37 - 2010-07-14 05:24 - 16409960 _____ (Safer Networking Limited ) C:\Users\Vendas 6\Desktop\spybotsd162.exe
2017-01-04 00:33 - 2017-01-04 00:46 - 00000000 ____D C:\Users\Todos os Usu&aacute;rios\Spybot - Search & Destroy
2017-01-04 00:33 - 2017-01-04 00:46 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-01-04 00:33 - 2017-01-04 00:33 - 00001471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2017-01-04 00:33 - 2017-01-04 00:33 - 00001459 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2017-01-04 00:33 - 2017-01-04 00:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-01-04 00:33 - 2017-01-04 00:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-01-04 00:33 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2017-01-04 00:32 - 2017-01-04 00:33 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-01-04 00:31 - 2017-01-04 00:31 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Vendas 6\Desktop\spybot-2.4.exe
2017-01-04 00:18 - 2017-01-04 00:31 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Vendas 6\Downloads\spybot-2.4.exe
2017-01-04 00:33 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-01-04 00:33 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-01-04 00:33 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2017-01-04 00:33 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2017-01-04 00:33 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [1198]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\Users\Todos os Usu&aacute;rios\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usu&aacute;rios\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
Task: {FCDBD9D8-C42B-4E99-99A9-AD7C6BBFEDD9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
CMD: sfc /scannow
CreateRestorePoint:
RemoveProxy:
EmptyTemp:
Reboot:
Hosts:
end[/COLOR]

> Execute FRST/FRST64 >> Clique Corrigir  Na mensagem,clique Executar.
> Poste o relat&oacute;rio! ([COLOR=green]Fixlog.txt[/COLOR])
> Este e outros relat&oacute;rios,podem ser encontrados na pasta: Disco Local (C) > FRST > Logs

https://www.hardware.com.br/static/c/m/bda2ffa2e92f7f2a44c02bfd0ae2986b
< [COLOR=red]Pe&ccedil;o aos visitantes que n&atilde;o utilizem este script em outros computadores,sob risco de danos aos mesmos![/COLOR] >

[Abs]

Answer

Bom dia [COLOR=#0000b3]joram,[/COLOR]

Obrigada pela ajuda!

Segue o relat&oacute;rio.

Answer

/_ Boa Tarde![COLOR=#0000ff] lake[/COLOR] _\ > Baixe: < https://www.hardware.com.br/static/c/m/2697510fe6261bb2d5e10923659cec65 > ( [COLOR=#00b300]... par Xplode[/COLOR] ) > Ou daqui: < [COLOR=blue]AdwCleaner[/COLOR] > Ao acessar,clique em Download Now. > Salve-o no desktop! > Desabilite seu antivírus! < https://www.hardware.com.br/static/c/m/98c82b3e1db496fd82db39f077c8ce36 > > Clique direito em adwcleaner.exe,e escolha sua execução como administrador. https://www.hardware.com.br/static/c/m/ee31aaa88f47c1dffaf314d93174942b > Clique Ferramentas >> Opções. https://www.hardware.com.br/static/c/m/6331cd7ee6c4c2125446f0334d13fc4a > Estando em Opções,deixe as configurações conforme este banner. > Clique Ok. https://www.hardware.com.br/static/c/m/3aabfabc43145e226e6ae773636cf55e > Ps: Dê início ao scan,clicando em Verificar. https://www.hardware.com.br/static/c/m/e580854a497f60b560c96916d42741a2 > Ao concluir,clique Limpar ou Cleaning >> Ok >> Ok >> Ok. > Copie o log ou clique Relatorio. > Poste: < C:\AdwCleaner\AdwCleaner[COLOR=red][C0][/COLOR].txt > [Abs]

Answer

Boa noite [COLOR=#0000b3]joram[/COLOR]
[COLOR=#0000b3][/COLOR]
[COLOR=#000000]Segue o relat&oacute;rio.

Obrigada!

Abs.[/COLOR]

Answer

/_ Boa Noite![COLOR=#0000ff] lake[/COLOR] _\

Seu computador n&atilde;o apresenta malwares em potencial.
Tudo Ok?  :isso_ai:

[Abs]

Answer

[COLOR=#0000ff]joram[/COLOR] muito, muito obrigada pela ajuda!! :);):);)

Abs!

Answer

[color=green]Caso Resolvido![/color]

https://www.hardware.com.br/static/c/m/bed9ab39d571a2ac9cb6b9f1f362c3c5

[color=darkred]Para sua Seguran&ccedil;a![/color]

Leia as dicas ou orienta&ccedil;&otilde;es contidas na Cartilha de Seguran&ccedil;a para Internet.

[color=green]Caso Resolvido![/color]

Ferramentas

Mover Tópico