Tem algum programa desativando meu firewall.

Question

Buenas....

Esse programa que o Avast encontra tenta desativar meu firewall e ele n&atilde;o consegue elimina-lo completamente. Como proceder?

[ATTACH]98801[/ATTACH]

Answer

Boa noite prezado autor  !

Execute os necess&aacute;rios assistentes:

A eset on line; marcando todas as op&ccedil;&otilde;es em configura&ccedil;&otilde;es avan&ccedil;adas.
https://www.eset.com/br/antivirus-domestico/online-scanner/

Caso n&atilde;o consiga atrav&eacute;s do link supra ( conforme acima ) . Obtenha o download daqui infra ( cfe. abaixo ):

https://www.eset.com/int/home/online-scanner/

Depois a fam&iacute;lia malwarebytes:
Adwcleanerhttps://br.malwarebytes.com/adwcleaner/
JRThttps://www.bleepingcomputer.com/download/junkware-removal-tool/
E o pr&oacute;prio malwarebytes:

https://malwarebytes-anti-malware.br.uptodown.com/windows

Por fineza; poste os relat&oacute;rios; prezado autor .
Abra&ccedil;os.

Answer

Log do Malwarebytes

# -------------------------------
# Malwarebytes AdwCleaner 7.2.6.0
# -------------------------------
# Build:    12-18-2018
# Database: 2019-01-25.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    01-29-2019
# Duration: 00:00:29
# OS:       Windows 10 Home Single Language
# Scanned:  31744
# Detected: 36

***** [ Services ] *****

Adware.Tuto4PC                  EventSvc
PUP.Optional.Legacy             WCAssistantService

***** [ Folders ] *****

Adware.OnlineIO                 C:\Program Files (x86)\Microleaves
Adware.OnlineIO                 C:\Users\diego\AppData\Roaming\Microleaves
Adware.Tuto4PC                  C:\Users\diego\AppData\Local\NtvHost
Adware.Tuto4PC                  C:\Users\diego\AppData\Local\Temp\cleanComputerNew
Adware.Tuto4PC                  C:\Users\diego\AppData\Local\Temp\publicHotsp
Adware.Tuto4PC                  C:\Users\diego\AppData\Local\Temp\bestDownloader
Adware.Tuto4PC                  C:\Users\diego\AppData\Local\Temp\ShutdownTime
PUP.Optional.Legacy             C:\Program Files\RunBooster
PUP.Optional.Legacy             C:\Windows\Syswow64\SSL
PUP.Optional.SafeFinder         C:\ProgramData\PrefsSecure

***** [ Files ] *****

Adware.Tuto4PC                  C:\ProgramData\Microsoft\Windows\EventSvc\eventsvc.exe
PUP.Optional.BrowserHijack      C:\Program Files (x86)\MOZILLA FIREFOX\DEFAULTS\PREF\SECURE_CERT.JS
PUP.Optional.Legacy             C:\Users\diego\appdata\local\installationconfiguration.xml
PUP.Optional.Legacy             C:\Users\diego\AppData\Local\Main.dat

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

Adware.ICLoader                 HKLM\Software\MICROSOFT\TechnologyDesktopnew
Adware.ICLoader                 HKLM\SOFTWARE\MICROSOFT\Speedycar
Adware.Tuto4PC                  HKLM\System\CurrentControlSet\Services\EventLog\Application\EventSvc
PUP.Optional.BestCleaner        HKCU\Software\Microsoft\BigTime
PUP.Optional.Foldershare        HKLM\Software\foldershare
PUP.Optional.Legacy             HKLM\Software\Microsoft\DMunversion
PUP.Optional.Legacy             HKLM\System\CurrentControlSet\Services\EventLog\Application\Application Hosting
PUP.Optional.Microleaves        HKU\S-1-5-18\Software\Caphyon\Advanced Updater\{F039D4A9-14D3-4425-A4FA-F2F9D5B0E014}
PUP.Optional.Microleaves        HKU\.DEFAULT\Software\Caphyon\Advanced Updater\{F039D4A9-14D3-4425-A4FA-F2F9D5B0E014}
PUP.Optional.Tuto4PC            HKCU\Software\MICROSOFT\wewewe
PUP.Optional.Wajam              HKLM\Software\Wow6432Node\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9
PUP.Optional.Wajam              HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9
PUP.Optional.WeatherAlerts      HKCU\Software\Microsoft\{cc6eb6d8-85b7-435p-8b86-51e4d16ea76d}
PUP.Optional.WeatherAlerts      HKLM\Software\Microsoft\PrIncub
PUP.Optional.WeatherAlerts      HKLM\Software\Microsoft\MPrForShutT
PUP.Optional.WeatherAlerts      HKLM\Software\Microsoft\PrAmNP
PUP.Optional.WeatherAlerts      HKLM\Software\Microsoft\NSaveA
PUP.Optional.WeatherAlerts      HKLM\Software\Microsoft\APreSam
PUP.Optional.WebCompanion       HKLM\Software\Wow6432Node\Lavasoft\Web Companion
PUP.Optional.WebCompanion       HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Vou atualizando conforme for fazendo.

Log depois de efetuado a limpeza

# -------------------------------
# Malwarebytes AdwCleaner 7.2.6.0
# -------------------------------
# Build:    12-18-2018
# Database: 2019-01-25.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    01-29-2019
# Duration: 00:00:05
# OS:       Windows 10 Home Single Language
# Cleaned:  36
# Failed:   0

***** [ Services ] *****

Deleted       EventSvc
Deleted       WCAssistantService

***** [ Folders ] *****

Deleted       C:\Program Files (x86)\Microleaves
Deleted       C:\Users\diego\AppData\Roaming\Microleaves
Deleted       C:\Users\diego\AppData\Local\NtvHost
Deleted       C:\Users\diego\AppData\Local\Temp\cleanComputerNew
Deleted       C:\Users\diego\AppData\Local\Temp\publicHotsp
Deleted       C:\Users\diego\AppData\Local\Temp\bestDownloader
Deleted       C:\Users\diego\AppData\Local\Temp\ShutdownTime
Deleted       C:\Program Files\RunBooster
Deleted       C:\Windows\Syswow64\SSL
Deleted       C:\ProgramData\PrefsSecure

***** [ Files ] *****

Deleted       C:\ProgramData\Microsoft\Windows\EventSvc\eventsvc.exe
Deleted       C:\Program Files (x86)\MOZILLA FIREFOX\DEFAULTS\PREF\SECURE_CERT.JS
Deleted       C:\Users\diego\appdata\local\installationconfiguration.xml
Deleted       C:\Users\diego\AppData\Local\Main.dat

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKLM\Software\MICROSOFT\TechnologyDesktopnew
Deleted       HKLM\SOFTWARE\MICROSOFT\Speedycar
Deleted       HKLM\System\CurrentControlSet\Services\EventLog\Application\EventSvc
Deleted       HKCU\Software\Microsoft\BigTime
Deleted       HKLM\Software\foldershare
Deleted       HKLM\Software\Microsoft\DMunversion
Deleted       HKLM\System\CurrentControlSet\Services\EventLog\Application\Application Hosting
Deleted       HKU\S-1-5-18\Software\Caphyon\Advanced Updater\{F039D4A9-14D3-4425-A4FA-F2F9D5B0E014}
Deleted       HKU\.DEFAULT\Software\Caphyon\Advanced Updater\{F039D4A9-14D3-4425-A4FA-F2F9D5B0E014}
Deleted       HKCU\Software\MICROSOFT\wewewe
Deleted       HKLM\Software\Wow6432Node\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9
Deleted       HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9
Deleted       HKCU\Software\Microsoft\{cc6eb6d8-85b7-435p-8b86-51e4d16ea76d}
Deleted       HKLM\Software\Microsoft\PrIncub
Deleted       HKLM\Software\Microsoft\MPrForShutT
Deleted       HKLM\Software\Microsoft\PrAmNP
Deleted       HKLM\Software\Microsoft\NSaveA
Deleted       HKLM\Software\Microsoft\APreSam
Deleted       HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4006 octets] - [29/01/2019 23:31:08]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Log Junkware

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64 
Ran by diego (Administrator) on 29/01/2019 at 23:54:18,58
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 1

Failed to delete: C:\WINDOWS\system32\drivers\windivert64.sys (File)

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30/01/2019 at  0:09:47,04
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log Malwarebytes
www.malwarebytes.com

-Detalhes de registro-
Data da an&aacute;lise: 30/01/2019
Hora da an&aacute;lise: 00:12
Arquivo de registro: 9a917e08-244d-11e9-b17a-14dda904dbe3.json

-Informa&ccedil;&atilde;o do software-
Vers&atilde;o: 3.6.1.2711
Vers&atilde;o de componentes: 1.0.463
Vers&atilde;o do pacote de defini&ccedil;&otilde;es: 1.0.6913
Licen&ccedil;a: Vers&atilde;o de Avalia&ccedil;&atilde;o

-Informa&ccedil;&atilde;o do sistema-
Sistema operacional: Windows 10 (Build 17134.523)
CPU: x64
Sistema de arquivos: NTFS
Usu&aacute;rio: DESKTOP-6HQMKCD\diego

-Resumo da an&aacute;lise-
Tipo de an&aacute;lise: An&aacute;lise de Amea&ccedil;as
An&aacute;lise Iniciada Por: Manual
Resultado: Conclu&iacute;do
Objetos verificados: 319936
Amea&ccedil;as detectadas: 55
Amea&ccedil;as em quarentena: 55
Tempo decorrido: 5 min, 48 seg

-Op&ccedil;&otilde;es da an&aacute;lise-
Mem&oacute;ria: Habilitado
Inicializa&ccedil;&atilde;o: Habilitado
Sistema de arquivos: Habilitado
Arquivos compactados: Habilitado
Rootkits: Desabilitado
Heur&iacute;stica: Habilitado
PUP: Detectar
PUM: Detectar

-Detalhes da an&aacute;lise-
Processo: 0
(Nenhum item malicioso detectado)

M&oacute;dulo: 0
(Nenhum item malicioso detectado)

Chave de registro: 4
Adware.Wajam, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, Quarentena, [461], [-1],0.0.0
Adware.Tuto4PC, HKU\S-1-5-21-17426284-215658461-993522186-1001\SOFTWARE\MICROSOFT\EWMON, Quarentena, [2774], [411543],1.0.6913
Adware.ICLoader, HKLM\SOFTWARE\MICROSOFT\campaign9961, Quarentena, [424], [518478],1.0.6913
Adware.ICLoader, HKLM\SOFTWARE\MICROSOFT\multitimercampaign84170, Quarentena, [424], [518476],1.0.6913

Valor de registro: 7
Adware.Wajam, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarentena, [461], [-1],0.0.0
Adware.Wajam, HKU\S-1-5-19\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarentena, [461], [-1],0.0.0
Adware.Wajam, HKU\S-1-5-20\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarentena, [461], [-1],0.0.0
Adware.Wajam, HKU\S-1-5-21-17426284-215658461-993522186-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarentena, [461], [-1],0.0.0
Adware.Wajam, HKU\S-1-5-21-17426284-215658461-993522186-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYSERVER, Quarentena, [461], [-1],0.0.0
Adware.Wajam, HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Quarentena, [461], [-1],0.0.0
Adware.Tuto4PC, HKU\S-1-5-21-17426284-215658461-993522186-1001\SOFTWARE\MICROSOFT\EWMON|PARTNER, Quarentena, [2774], [411543],1.0.6913

Dados de registro: 0
(Nenhum item malicioso detectado)

Fluxo de dados: 0
(Nenhum item malicioso detectado)

Pasta: 11
Adware.Tuto4PC, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\RSBJ23NP8C, Quarentena, [2774], [487472],1.0.6913
Adware.Wajam, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\wjmD69B.tmp, Quarentena, [461], [511084],1.0.6913
Adware.Wajam, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\wjmDE24.tmp, Quarentena, [461], [511084],1.0.6913
Adware.Wajam, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\wjmE042.tmp, Quarentena, [461], [511084],1.0.6913
Adware.Wajam, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\wjmE617.tmp, Quarentena, [461], [511084],1.0.6913
Adware.Tuto4PC, C:\PROGRAM FILES (X86)\FOLDERSHARE, Quarentena, [2774], [474043],1.0.6913
Adware.Tuto4PC, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\BOOSTPC, Quarentena, [2774], [515830],1.0.6913
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\XPFXLQ2TUA, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\4XZLD8M8QG, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\4OL1U7M00I, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\ZRVBOQ0YJE, Quarentena, [3704], [357599],1.0.6913

Arquivo: 33
Adware.Linkury.Generic, C:\USERS\DIEGO\APPDATA\LOCAL\NOAH.DAT, Quarentena, [3740], [404865],1.0.6913
Adware.Linkury.Generic, C:\USERS\DIEGO\APPDATA\LOCAL\Dom-In.tst, Quarentena, [3740], [404871],1.0.6913
Adware.Linkury.Generic, C:\USERS\DIEGO\APPDATA\LOCAL\MD.XML, Quarentena, [3740], [404866],1.0.6913
Adware.Linkury.Generic, C:\USERS\DIEGO\APPDATA\LOCAL\AGENT.DAT, Quarentena, [3740], [404872],1.0.6913
Adware.Tuto4PC, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\RSBJ23NP8C\up.exe.config, Quarentena, [2774], [487472],1.0.6913
Adware.Tuto4PC, C:\Users\diego\AppData\Local\Temp\RSBJ23NP8C\OneTwo.exe.config, Quarentena, [2774], [487472],1.0.6913
Adware.Tuto4PC, C:\Users\diego\AppData\Local\Temp\RSBJ23NP8C\SecondL.exe.config, Quarentena, [2774], [487472],1.0.6913
Adware.Wajam, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\wjmD69B.tmp\update.exe, Quarentena, [461], [511084],1.0.6913
Adware.Wajam, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\wjmDE24.tmp\update.exe, Quarentena, [461], [511084],1.0.6913
Adware.Wajam, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\wjmE042.tmp\update.exe, Quarentena, [461], [511084],1.0.6913
Adware.Wajam, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\wjmE617.tmp\update.exe, Quarentena, [461], [511084],1.0.6913
Adware.Tuto4PC, C:\PROGRAM FILES (X86)\FOLDERSHARE\FOLDERSHARE.EXE.CONFIG, Quarentena, [2774], [474043],1.0.6913
Adware.Tuto4PC, C:\Program Files (x86)\foldershare\foldershare.exe, Quarentena, [2774], [474043],1.0.6913
Adware.Linkury.Generic, C:\USERS\DIEGO\APPDATA\LOCAL\SHAM.DB, Quarentena, [3740], [516191],1.0.6913
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\XPFXLQ2TUA\CAST.CONFIG, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\Program Files\XPFXLQ2TUA\OQUAFEYR4.exe.config, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\Program Files\XPFXLQ2TUA\uninstaller.exe.config, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\4XZLD8M8QG\CAST.CONFIG, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\Program Files\4XZLD8M8QG\4XZLD8M8Q.exe.config, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\Program Files\4XZLD8M8QG\uninstaller.exe.config, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\4OL1U7M00I\CAST.CONFIG, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\Program Files\4OL1U7M00I\4OL1U7M00.exe.config, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\Program Files\4OL1U7M00I\uninstaller.exe.config, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\PROGRAM FILES\ZRVBOQ0YJE\CAST.CONFIG, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\Program Files\ZRVBOQ0YJE\uninstaller.exe.config, Quarentena, [3704], [357599],1.0.6913
Adware.Tuto4PC.Generic, C:\Program Files\ZRVBOQ0YJE\ZRVBOQ0YJ.exe.config, Quarentena, [3704], [357599],1.0.6913
Adware.Linkury.Generic, C:\USERS\DIEGO\APPDATA\LOCAL\CONFIG.XML, Quarentena, [3740], [404859],1.0.6913
Generic.Malware/Suspicious, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\0OSYGXN3BX4\INSTALL.EXE, Quarentena, [0], [392686],1.0.6913
Generic.Malware/Suspicious, C:\USERS\DIEGO\APPDATA\LOCAL\TEMP\ND4EENCR4SW\INSTALL.EXE, Quarentena, [0], [392686],1.0.6913
MachineLearning/Anomalous.100%, C:\WINDOWS\YZAXMWZMNZVJMWRMY.EXE, Quarentena, [0], [392687],1.0.6913
PUP.Optional.InstallCore.Generic, C:\DOCUMENTS AND SETTINGS\PUBLIC\Desktop\aTube Catcher.lnk, Quarentena, [528], [621110],1.0.6913
PUP.Optional.InstallCore.Generic, C:\USERS\PUBLIC\DESKTOP\aTube Catcher.lnk, Quarentena, [528], [621110],1.0.6913
PUP.Optional.InstallCore.Generic, C:\PROGRAM FILES (X86)\DSNET CORP\ATUBE CATCHER 2.0\YCT.EXE, Quarentena, [528], [621110],1.0.6913

Setor f&iacute;sico: 0
(Nenhum item malicioso detectado)

Instrumenta&ccedil;&atilde;o do Windows (WMI): 0
(Nenhum item malicioso detectado)

(end)

Answer

Bom dia prezado autor  !

Imediatamente  use a delfix; assinalando desinstalar ferramentas de desinfec&ccedil;&atilde;o e limpar pontos de restaura&ccedil;&atilde;o.
https://www.bleepingcomputer.com/download/delfix/

Ap&oacute;s este feito:
N&atilde;o esque&ccedil;a de criar um ponto de restaura&ccedil;&atilde;o manualmente.
Todavia antes de criar o mesmo; desinstale o malwarebytes com o revo uninstaller usando a op&ccedil;&atilde;o avan&ccedil;ado; que os itens quarentenados ir&atilde;o embora junto.

No aguardo do relat&oacute;rio da  eset on line.

E diga como est&aacute; o PC; dando uma &ecirc;nfase no comportamento atual do firewall.

Abra&ccedil;os.

Answer

Buenas! Desculpe a demora, adoeci e n&atilde;o andei usando o computador.

Delfix

# DelFix v1.010 - Relat&oacute;rio criado 31/01/2019 &agrave;s 23:31:17
# Atualizado 26/04/2015 por Xplode
# Usu&aacute;rio : diego - DESKTOP-6HQMKCD
# Sistema Operacional : Windows 10 Home  (64 bits)

~ Removendo ferramentas de desinfec&ccedil;&atilde;o ...

Removido : C:\AdwCleaner

~ Limpando pontos da restaura&ccedil;&atilde;o do sistema ...

Removido : RP #84 [Windows Update | 01/15/2019 17:07:29]
Removido : RP #85 [Windows Update | 01/18/2019 20:24:38]
Removido : RP #86 [Ponto de Verifica&ccedil;&atilde;o Agendado | 01/25/2019 22:56:19]
Removido : RP #87 [Removed Foxit PhantomPDF | 01/29/2019 17:02:09]
Removido : RP #88 [JRT Pre-Junkware Removal | 01/30/2019 04:41:22]
Removido : RP #89 [JRT Pre-Junkware Removal | 01/30/2019 04:54:19]

Novo ponto de restaura&ccedil;&atilde;o criado !

########## - EOF - ##########

Putz... n&atilde;o apaguei o Malwarebytes com o Revo, ser&aacute; que d&aacute; alguma coisa? Limpei os registros com o Cclear.

O Eset a &uacute;nica coisa que que gerou foi isso aqui.

29/01/2019 23:11:59
Arquivos rastreados: 280998
Arquivos infectados: 82
Amea&ccedil;as limpas: 82
Tempo total do rastreamento 03:03:43
Status do rastreamento: Conclu&iacute;do
------------------------------------------------------------------------------------------------------------------------------
Aparentemente resolvido TmfeijoMMonroe, o windows n&atilde;o t&aacute; mais notificando que o firewall foi desligado, nem o Avast fica dando mensagem que um item suspeito foi colocado em quarentena de cinco em cinco minutos.

Obrigado! Vou deixar o t&oacute;pico em aberto por uns dias para analisar o comportamento.

Valeu mesmo!

Answer

Bom dia prezado autor  !

Perfeito.
&Eacute; s&oacute; desinstalar primeiro o malwarebytes e rodar a delfix novamente; mas desta vez; marque apenas limpar pontos de restaura&ccedil;&atilde;o.
Mas n&atilde;o esque&ccedil;a de criar um ponto de restaura&ccedil;&atilde;o manualmente/novamente.

Abra&ccedil;os.

[QUOTE=TmfeijoMMonroe, post: 8144529, member: 713513]Bom dia prezado autor  !

Imediatamente  use a delfix; assinalando desinstalar ferramentas de desinfec&ccedil;&atilde;o e limpar pontos de restaura&ccedil;&atilde;o.
https://www.bleepingcomputer.com/download/delfix/

Ap&oacute;s este feito:
N&atilde;o esque&ccedil;a de criar um ponto de restaura&ccedil;&atilde;o manualmente.
Todavia antes de criar o mesmo; desinstale o malwarebytes com o revo uninstaller usando a op&ccedil;&atilde;o avan&ccedil;ado; que os itens quarentenados ir&atilde;o embora junto.

No aguardo do relat&oacute;rio da  eset on line.

E diga como est&aacute; o PC; dando uma &ecirc;nfase no comportamento atual do firewall.

Abra&ccedil;os.[/QUOTE]

[QUOTE=Bastardo honrado, post: 8145847, member: 882114]Buenas! Desculpe a demora, adoeci e n&atilde;o andei usando o computador.

Delfix

# DelFix v1.010 - Relat&oacute;rio criado 31/01/2019 &agrave;s 23:31:17
# Atualizado 26/04/2015 por Xplode
# Usu&aacute;rio : diego - DESKTOP-6HQMKCD
# Sistema Operacional : Windows 10 Home  (64 bits)

~ Removendo ferramentas de desinfec&ccedil;&atilde;o ...

Removido : C:\AdwCleaner

~ Limpando pontos da restaura&ccedil;&atilde;o do sistema ...

Removido : RP #84 [Windows Update | 01/15/2019 17:07:29]
Removido : RP #85 [Windows Update | 01/18/2019 20:24:38]
Removido : RP #86 [Ponto de Verifica&ccedil;&atilde;o Agendado | 01/25/2019 22:56:19]
Removido : RP #87 [Removed Foxit PhantomPDF | 01/29/2019 17:02:09]
Removido : RP #88 [JRT Pre-Junkware Removal | 01/30/2019 04:41:22]
Removido : RP #89 [JRT Pre-Junkware Removal | 01/30/2019 04:54:19]

Novo ponto de restaura&ccedil;&atilde;o criado !

########## - EOF - ##########

Putz... n&atilde;o apaguei o Malwarebytes com o Revo, ser&aacute; que d&aacute; alguma coisa? Limpei os registros com o Cclear.

O Eset a &uacute;nica coisa que que gerou foi isso aqui.

29/01/2019 23:11:59
Arquivos rastreados: 280998
Arquivos infectados: 82
Amea&ccedil;as limpas: 82
Tempo total do rastreamento 03:03:43
Status do rastreamento: Conclu&iacute;do
------------------------------------------------------------------------------------------------------------------------------
Aparentemente resolvido TmfeijoMMonroe, o windows n&atilde;o t&aacute; mais notificando que o firewall foi desligado, nem o Avast fica dando mensagem que um item suspeito foi colocado em quarentena de cinco em cinco minutos.

Obrigado! Vou deixar o t&oacute;pico em aberto por uns dias para analisar o comportamento.

Valeu mesmo![/QUOTE]

Ferramentas

Mover Tópico