Sem instalar o MSE

Boa  noite !

Tinha  aqui  o anti virus MSE da MS; o  mesmo não estava atualizando; dava erro << 0x80073b01 .       Resolvi desinstalar e instalar novamente ; porém agora consta a msg <<< 0x80070643 .        Possuo aqui o Windows seven original .

Editando :

Resolvi restaurar o sistema para um ponto no qual eu ainda o possuía (  o  anti  virus  ); mesmo  sendo já  um software desinstalado o mesmo voltou normalmente para o pc; pois é uma atualização do sistema operacional windows .    Só que neste exato momento; consta o erro anterior de atualização o 0x80073b01 .  



Abraços

Estes erros do MSE são terríveis e considero difíceis de solucionar.

Vc tem outro antivírus instalado? Ele acusa algo?


Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de Tweaking.com)

*Extraia o seu conteúdo

*Na pasta Tweaking.com-Windows Repair, execute o Repair_Windows

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  

Clique na aba [Start Repairs]

*Clique [Start]

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  

*Selecione Restart/Shutdown System When Finished e marque Restart System

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique [Unselect All] e selecione:

Repair WMI
Repair MSI (Windows Installer)


*Clique [Start]

*Ao término o PC será reiniciado automaticamente

Boa tarde !   Wings


Não .   Apenas o  MSE .     Como ao clicar para abri - lo, nem abre e já dá o mesmo erro da atualização ; o 0x80073b01  .      Desinstalei novamente e dá o mesmo erro tbm ; o   0x80070643   .       Neste momento está rodando esta ferramenta; qualquer desfecho postarei ou editarei aqui .



Nada de resolver !!!


[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]



Abraços

Microsoft vem a público confirmar a já conhecida fraqueza do Security Essentials....

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

A recomendação da microsoft da utilização do seu aplicativo junto com outro antivirus não se aplica... então manda logo esse MSE para o abismo.

Boa tarde ! Meus colegas Wings e Fenix


A origem deste problema pode ser de restos do mesmo ou do windows defender; pois o próprio não quer ativar . Antes de rodar esta ferramenta indicada pelo nosso colega wings; dava uma mensagem de erro numérica; após a execução da ferramenta; ao tentar ativar o WD abre se o arquivo system32 . Atualizações podem ser !! Pois inclusive no windows 8; o MSE passou/passa a se/ser chamar/o windows defender - leia se uma atualização para o WD .



Abraços

Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e salve-o no Desktop

*Clique com o botão direito do mouse no FRST e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Aceite o contrato, desmarque a opção Addition.txt e clique [Scan]

*Cole o relatório FRST.txt criado no Desktop


Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de OldTimer) e salve-o no Desktop (Área de Trabalho)

*Clique com o botão direito do mouse no OTL e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Selecione:

Verificar All Users
Ignorar Arquivos Microsoft
Verificar Lop
Verificar Purity

*Clique [Verificar] e aguarde o término

*Serão criados dois relatórios no Desktop (Área de Trabalho): OTL.txt e Extras.txt


Acesse [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique [Selecionar arquivo...]

*Localize o relatório OTL.txt criado no Desktop, e clique [Abrir]

*Selecione 4 jours e clique [Créer le lien Cjoint]

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  

*Cole o link criado ao lado de Le lien a été créé:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Repita o procedimento para o relatório Extras.txt e cole o link

Boa tarde !    Wings

Enquanto voçe respondia;  instalei o  AVG 2014 e pegou um rootkit :

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]




Este Farbar não pára de scanear e vai  dando  isto  direto :


[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]       ;   porém :


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-10-2013
Ran by EDSON (administrator) on EDSON-PC on 17-10-2013 16:33:51
Running from C:\Users\EDSON\Downloads
Microsoft Windows 7 Home Basic  Service Pack 1 (X86) OS Language: Portuguese Brazilian
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(GAS Tecnologia) C:\PROGRA~1\GbPlugin\GbpSv.exe
() C:\Program Files\Comodo\Dragon\dragon_updater.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Gadwin Systems, Inc) C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(OldTimer Tools) C:\Users\EDSON\Downloads\OTL.exe
(Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4851248 2013-08-26] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\ GbPluginBb: C:\Program Files\GbPlugin\gbieh.dll (Banco do Brasil)
Winlogon\Notify\ GbPluginCef: C:\Program Files\GbPlugin\gbiehCef.dll (Caixa Economica Federal)
HKCU\...\Winlogon: [Shell] Explorer.exe <==== ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x72D722BFAF4CCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-br
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages =
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - URL [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKLM - SuggestionsURL_JSON [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKLM - TopResultURLFallback [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKCU - URL [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKCU - SuggestionsURL_JSON [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKCU - TopResultURLFallback [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\PROGRAM FILES\GBPLUGIN\gbieh.dll (Banco do Brasil)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {5D6F45B3-9043-443D-A792-115447494D24} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files\GbPlugin\gbiehcef.dll [1652584 2012-12-26] (Caixa Economica Federal)
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES\GBPLUGIN\gbieh.dll [1410088 2013-07-15] (Banco do Brasil)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\EDSON\AppData\Roaming\Mozilla\Firefox\Profiles\i2mqgjan.default
FF Homepage: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL No File
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: gastecnologia.com.br/sf/bb - C:\Users\EDSON\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll (GAS Tecnologia)
FF HKCU\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886C}] - C:\Users\EDSON\AppData\Local\GAS Tecnologia\GBBD\bb\xpi
FF Extension: Modulo de Seguranca - Banco do Brasil - C:\Users\EDSON\AppData\Local\GAS Tecnologia\GBBD\bb\xpi

========================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3534896 2013-08-27] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [300640 2013-08-20] (AVG Technologies CZ, s.r.o.)
R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2104968 2013-10-09] ()
R2 GbpSv; C:\PROGRA~1\GbPlugin\GbpSv.exe [409640 2013-07-15] (GAS Tecnologia)

==================== Drivers (Whitelisted) ====================

R1 360FileOem; C:\Windows\system32\drivers\360FileOem.sys [152880 2013-01-17] (360.cn)
R0 360HookOem; C:\Windows\System32\drivers\360HookOEM.sys [61488 2013-01-17] (360安全中心)
R1 360RegOem; C:\Windows\system32\drivers\360RegOem.sys [29744 2013-01-17] (360安全中心)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120120 2013-08-01] ()
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209208 2013-08-22] ()
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [146232 2013-08-22] ()
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-08-01] ()
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-08-22] ()
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [223032 2013-08-22] ()
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102200 2013-08-20] ()
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [26936 2013-08-01] ()
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] ()
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-13] (Microsoft Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20072 2013-04-15] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [581912 2013-04-15] (COMODO)
S3 cxbu0wdm; C:\Windows\System32\DRIVERS\cxbu0wdm.sys [119040 2011-09-06] (HID Global Corporation)
R0 GbpKm; C:\Windows\System32\drivers\gbpkm.sys [49536 2013-05-08] (GAS Tecnologia)
S3 Ndisrd; C:\Windows\System32\DRIVERS\gbpndisrd.sys [31088 2013-10-17] (GbPlugin NDIS Device Driver)
R3 NdisrdMP; C:\Windows\System32\DRIVERS\gbpndisrd.sys [31088 2013-10-17] (GbPlugin NDIS Device Driver)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [107392 2013-06-18] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\Users\EDSON\AppData\Local\Temp\catchme.sys [x]
S0 tvelms; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-17 16:28 - 2013-10-17 16:28 - 00602112 _____ (OldTimer Tools) C:\Users\EDSON\Downloads\OTL.exe
2013-10-17 16:25 - 2013-10-17 16:25 - 00000000 ____D C:\FRST
2013-10-17 16:23 - 2013-10-17 16:23 - 01087213 _____ (Farbar) C:\Users\EDSON\Downloads\FRST.exe
2013-10-17 15:48 - 2013-10-17 15:48 - 00000913 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-10-17 15:48 - 2013-10-17 15:48 - 00000000 ____D C:\Users\EDSON\AppData\Roaming\TuneUp Software
2013-10-17 15:48 - 2013-10-17 15:48 - 00000000 ____D C:\Users\EDSON\AppData\Roaming\AVG2014
2013-10-17 15:47 - 2013-10-17 15:48 - 00000000 ____D C:\Users\Todos os Usuários\AVG2014
2013-10-17 15:47 - 2013-10-17 15:48 - 00000000 ____D C:\ProgramData\AVG2014
2013-10-17 15:47 - 2013-10-17 15:47 - 00000000 ___HD C:\$AVG
2013-10-17 15:46 - 2013-10-17 15:46 - 00000000 ____D C:\Program Files\AVG
2013-10-17 15:42 - 2013-10-17 15:52 - 00000000 ____D C:\Users\EDSON\AppData\Local\Avg2014
2013-10-17 15:42 - 2013-10-17 15:50 - 00000000 ____D C:\Users\Todos os Usuários\MFAData
2013-10-17 15:42 - 2013-10-17 15:50 - 00000000 ____D C:\ProgramData\MFAData
2013-10-17 15:42 - 2013-10-17 15:42 - 04436576 _____ (AVG Technologies) C:\Users\EDSON\Desktop\avg_free_stb_all_2014_4158_softonic.exe
2013-10-17 15:42 - 2013-10-17 15:42 - 00000000 ____D C:\Users\EDSON\AppData\Local\MFAData
2013-10-17 15:41 - 2013-10-17 15:41 - 00400728 _____ (Softonic                                        ) C:\Users\EDSON\Downloads\SoftonicDownloader_para_avg-antivirus-free-2014.exe
2013-10-16 23:18 - 2013-10-16 23:18 - 00000000 ____D C:\Windows\Temp310D6E10-6202-21DA-EEFC-009F4AAFD9D7-Signatures
2013-10-16 22:42 - 2013-10-16 22:42 - 00000000 ____D C:\Windows\TempCE0FCCC1-B757-F28C-5B94-7F44EE15C49E-Signatures
2013-10-16 20:13 - 2013-10-16 20:13 - 00000000 ____D C:\Windows\Temp8ED74881-8380-FA4F-18F7-D0D7A04C6856-Signatures
2013-10-16 20:10 - 2013-10-17 13:24 - 00000224 _____ C:\Windows\setupact.log
2013-10-16 20:10 - 2013-10-16 20:10 - 00000000 _____ C:\Windows\setuperr.log
2013-10-16 20:09 - 2013-10-17 12:53 - 00008672 _____ C:\Windows\PFRO.log
2013-10-16 19:36 - 2013-10-16 19:36 - 00000000 ____D C:\Windows\TempA141F15C-922B-765E-F0C1-6AF5566CB8EA-Signatures
2013-10-16 19:35 - 2013-09-03 22:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-16 19:35 - 2013-09-03 22:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-16 19:35 - 2013-09-03 22:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-16 19:35 - 2013-09-03 22:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-16 19:35 - 2013-09-03 22:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-16 19:35 - 2013-09-03 22:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-16 19:35 - 2013-09-03 22:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-16 19:17 - 2013-09-22 20:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-16 19:17 - 2013-09-22 20:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-16 19:17 - 2013-09-22 20:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-16 19:17 - 2013-09-22 20:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-16 19:17 - 2013-09-22 20:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-16 19:17 - 2013-09-21 00:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-16 19:17 - 2013-09-20 23:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-16 19:14 - 2013-10-16 19:14 - 00000000 ____D C:\Windows\TempB9E91D3E-B549-1FFD-DE11-7D8C731D5702-Signatures
2013-10-16 19:07 - 2013-09-13 21:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-16 19:07 - 2013-09-07 23:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-16 19:07 - 2013-09-07 23:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-16 19:07 - 2013-07-04 08:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-16 19:07 - 2013-07-03 00:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-16 19:07 - 2013-07-03 00:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-16 19:06 - 2013-08-28 22:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-10-16 19:06 - 2013-08-28 22:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-16 19:06 - 2013-08-28 22:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-16 19:06 - 2013-08-28 22:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-16 19:06 - 2013-08-28 22:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-16 19:06 - 2013-08-27 21:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-16 19:06 - 2013-08-01 08:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-16 19:06 - 2013-07-20 07:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-16 19:06 - 2013-06-06 01:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-16 19:06 - 2013-06-06 01:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-16 19:06 - 2013-06-06 01:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-16 19:06 - 2013-06-06 00:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-16 19:06 - 2013-06-06 00:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-16 19:04 - 2013-07-04 08:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-16 19:04 - 2013-07-04 08:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-16 19:04 - 2013-07-04 06:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-16 19:04 - 2013-06-25 19:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-16 19:03 - 2013-07-12 07:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-16 16:57 - 2013-10-16 16:57 - 00000000 ____D C:\Users\EDSON\AppData\Local\Apple Computer
2013-10-16 16:21 - 2013-10-16 16:21 - 00000000 ____D C:\Users\EDSON\AppData\Local\Apple
2013-10-16 11:13 - 2013-10-16 18:54 - 00000000 ____D C:\Windows\TempCC690F54-96A0-1F0C-47BE-A4F2AD3987AE-Signatures
2013-10-16 11:12 - 2013-10-16 18:54 - 00000000 ____D C:\Windows\Temp79AAFFEF-2186-BDDA-B4FC-510A79378584-Signatures
2013-10-16 10:56 - 2013-10-16 10:56 - 00000000 ____D C:\797f75c2074f4aa41ca8
2013-10-13 21:18 - 2013-10-13 21:18 - 00000000 ____D C:\Users\EDSON\AppData\Local\Adobe
2013-10-09 10:46 - 2013-10-16 18:54 - 00000000 ____D C:\Windows\Temp7732EA1A-22CF-705A-C8EC-07D3C5D7E32C-Signatures
2013-10-09 08:54 - 2013-08-27 22:04 - 02348544 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-02 20:25 - 2013-10-16 19:25 - 00594960 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-02 11:16 - 2013-10-02 11:17 - 00000021 _____ C:\runcheck.txt
2013-09-29 09:39 - 2004-11-14 15:28 - 01056768 _____ C:\Users\EDSON\AppData\Local\libmysql.dll
2013-09-22 14:34 - 2013-09-22 14:35 - 00000000 ____D C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2013-10-17 16:29 - 2012-06-17 17:03 - 00000000 ____D C:\Users\EDSON\Documents\PrintScreen Files
2013-10-17 16:28 - 2013-10-17 16:28 - 00602112 _____ (OldTimer Tools) C:\Users\EDSON\Downloads\OTL.exe
2013-10-17 16:25 - 2013-10-17 16:25 - 00000000 ____D C:\FRST
2013-10-17 16:25 - 2012-07-28 15:44 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-17 16:23 - 2013-10-17 16:23 - 01087213 _____ (Farbar) C:\Users\EDSON\Downloads\FRST.exe
2013-10-17 16:19 - 2012-09-22 18:29 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-17 15:54 - 2012-10-22 12:28 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat
2013-10-17 15:52 - 2013-10-17 15:42 - 00000000 ____D C:\Users\EDSON\AppData\Local\Avg2014
2013-10-17 15:50 - 2013-10-17 15:42 - 00000000 ____D C:\Users\Todos os Usuários\MFAData
2013-10-17 15:50 - 2013-10-17 15:42 - 00000000 ____D C:\ProgramData\MFAData
2013-10-17 15:48 - 2013-10-17 15:48 - 00000913 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-10-17 15:48 - 2013-10-17 15:48 - 00000000 ____D C:\Users\EDSON\AppData\Roaming\TuneUp Software
2013-10-17 15:48 - 2013-10-17 15:48 - 00000000 ____D C:\Users\EDSON\AppData\Roaming\AVG2014
2013-10-17 15:48 - 2013-10-17 15:47 - 00000000 ____D C:\Users\Todos os Usuários\AVG2014
2013-10-17 15:48 - 2013-10-17 15:47 - 00000000 ____D C:\ProgramData\AVG2014
2013-10-17 15:47 - 2013-10-17 15:47 - 00000000 ___HD C:\$AVG
2013-10-17 15:46 - 2013-10-17 15:46 - 00000000 ____D C:\Program Files\AVG
2013-10-17 15:42 - 2013-10-17 15:42 - 04436576 _____ (AVG Technologies) C:\Users\EDSON\Desktop\avg_free_stb_all_2014_4158_softonic.exe
2013-10-17 15:42 - 2013-10-17 15:42 - 00000000 ____D C:\Users\EDSON\AppData\Local\MFAData
2013-10-17 15:41 - 2013-10-17 15:41 - 00400728 _____ (Softonic                                        ) C:\Users\EDSON\Downloads\SoftonicDownloader_para_avg-antivirus-free-2014.exe
2013-10-17 15:41 - 2009-07-13 23:37 - 00000000 ___RD C:\Users\Public
2013-10-17 14:22 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-10-17 14:05 - 2012-06-17 14:23 - 01294280 _____ C:\Windows\WindowsUpdate.log
2013-10-17 13:29 - 2009-07-14 01:34 - 00026944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-17 13:29 - 2009-07-14 01:34 - 00026944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-17 13:28 - 2011-04-12 01:47 - 00663606 _____ C:\Windows\system32\prfh0416.dat
2013-10-17 13:28 - 2011-04-12 01:47 - 00127896 _____ C:\Windows\system32\prfc0416.dat
2013-10-17 13:28 - 2010-11-20 18:01 - 01517030 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-17 13:27 - 2012-06-17 15:42 - 00002122 _____ C:\Windows\epplauncher.mif
2013-10-17 13:24 - 2013-10-16 20:10 - 00000224 _____ C:\Windows\setupact.log
2013-10-17 13:24 - 2013-07-12 08:36 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\Windows\system32\Drivers\GbpNdisrd.sys
2013-10-17 13:24 - 2012-07-28 15:44 - 00001050 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-17 13:24 - 2009-07-14 01:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-17 13:22 - 2013-04-25 19:03 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-10-17 12:55 - 2013-06-19 18:30 - 00000000 ____D C:\Users\Todos os Usuários\GAS Tecnologia
2013-10-17 12:55 - 2013-06-19 18:30 - 00000000 ____D C:\ProgramData\GAS Tecnologia
2013-10-17 12:53 - 2013-10-16 20:09 - 00008672 _____ C:\Windows\PFRO.log
2013-10-17 12:53 - 2013-09-03 19:13 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-10-17 02:46 - 2012-11-12 10:59 - 00000000 ____D C:\Users\EDSON\AppData\Roaming\Skype
2013-10-16 23:18 - 2013-10-16 23:18 - 00000000 ____D C:\Windows\Temp310D6E10-6202-21DA-EEFC-009F4AAFD9D7-Signatures
2013-10-16 22:42 - 2013-10-16 22:42 - 00000000 ____D C:\Windows\TempCE0FCCC1-B757-F28C-5B94-7F44EE15C49E-Signatures
2013-10-16 20:13 - 2013-10-16 20:13 - 00000000 ____D C:\Windows\Temp8ED74881-8380-FA4F-18F7-D0D7A04C6856-Signatures
2013-10-16 20:10 - 2013-10-16 20:10 - 00000000 _____ C:\Windows\setuperr.log
2013-10-16 19:57 - 2012-06-17 14:19 - 00000000 ____D C:\Windows\Panther
2013-10-16 19:36 - 2013-10-16 19:36 - 00000000 ____D C:\Windows\TempA141F15C-922B-765E-F0C1-6AF5566CB8EA-Signatures
2013-10-16 19:34 - 2012-09-22 18:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-10-16 19:34 - 2012-09-22 18:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-10-16 19:25 - 2013-10-02 20:25 - 00594960 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-16 19:25 - 2012-06-17 16:23 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-16 19:24 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\system32\pt-BR
2013-10-16 19:22 - 2013-04-16 16:28 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2013-10-16 19:22 - 2013-04-16 16:28 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-16 19:20 - 2013-07-15 16:50 - 00000000 ____D C:\Windows\system32\MRT
2013-10-16 19:19 - 2012-06-17 15:23 - 78106760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-16 19:14 - 2013-10-16 19:14 - 00000000 ____D C:\Windows\TempB9E91D3E-B549-1FFD-DE11-7D8C731D5702-Signatures
2013-10-16 19:00 - 2012-10-21 15:49 - 00048392 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-10-16 19:00 - 2012-10-21 15:49 - 00000000 ____D C:\Program Files\Comodo
2013-10-16 18:56 - 2012-06-17 14:35 - 00000000 ____D C:\Users\EDSON
2013-10-16 18:55 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\system32\wfp
2013-10-16 18:54 - 2013-10-16 11:13 - 00000000 ____D C:\Windows\TempCC690F54-96A0-1F0C-47BE-A4F2AD3987AE-Signatures
2013-10-16 18:54 - 2013-10-16 11:12 - 00000000 ____D C:\Windows\Temp79AAFFEF-2186-BDDA-B4FC-510A79378584-Signatures
2013-10-16 18:54 - 2013-10-09 10:46 - 00000000 ____D C:\Windows\Temp7732EA1A-22CF-705A-C8EC-07D3C5D7E32C-Signatures
2013-10-16 18:54 - 2013-04-08 21:26 - 00000000 ____D C:\Program Files\Common Files\Skype
2013-10-16 18:54 - 2013-02-12 11:58 - 00000000 ___RD C:\Program Files\Skype
2013-10-16 18:54 - 2012-11-12 10:59 - 00000000 ____D C:\Users\Todos os Usuários\Skype
2013-10-16 18:54 - 2012-11-12 10:59 - 00000000 ____D C:\ProgramData\Skype
2013-10-16 18:54 - 2012-10-13 08:50 - 00000000 ____D C:\Users\EDSON\AppData\Local\Comodo
2013-10-16 18:54 - 2012-07-21 11:51 - 00000000 ____D C:\Users\EDSON\AppData\Local\Apps\2.0
2013-10-16 18:54 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\rescache
2013-10-16 18:54 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\registration
2013-10-16 18:54 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\AppCompat
2013-10-16 18:54 - 2009-07-13 23:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-10-16 18:53 - 2013-06-19 18:30 - 00000000 ____D C:\Users\EDSON\AppData\Local\GAS Tecnologia
2013-10-16 18:52 - 2013-03-26 15:47 - 00000000 ____D C:\Users\Todos os Usuários\Apple
2013-10-16 18:52 - 2013-03-26 15:47 - 00000000 ____D C:\ProgramData\Apple
2013-10-16 16:57 - 2013-10-16 16:57 - 00000000 ____D C:\Users\EDSON\AppData\Local\Apple Computer
2013-10-16 16:21 - 2013-10-16 16:21 - 00000000 ____D C:\Users\EDSON\AppData\Local\Apple
2013-10-16 10:56 - 2013-10-16 10:56 - 00000000 ____D C:\797f75c2074f4aa41ca8
2013-10-14 11:21 - 2012-10-29 21:43 - 00000000 ____D C:\Users\Todos os Usuários\GbPlugin
2013-10-14 11:21 - 2012-10-29 21:43 - 00000000 ____D C:\ProgramData\GbPlugin
2013-10-13 21:18 - 2013-10-13 21:18 - 00000000 ____D C:\Users\EDSON\AppData\Local\Adobe
2013-10-02 11:17 - 2013-10-02 11:16 - 00000021 _____ C:\runcheck.txt
2013-09-29 09:52 - 2009-07-14 01:52 - 00000000 ____D C:\Windows\twain_32
2013-09-27 22:52 - 2012-07-16 12:56 - 00000000 ____D C:\Program Files\GbPlugin
2013-09-26 16:24 - 2009-07-13 23:37 - 00000000 ____D C:\Windows\system32\NDF
2013-09-24 19:18 - 2013-03-26 15:48 - 00000000 ____D C:\Users\EDSON\AppData\Roaming\Apple Computer
2013-09-22 20:28 - 2013-10-16 19:17 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-22 20:28 - 2013-10-16 19:17 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-22 20:28 - 2013-10-16 19:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-22 20:27 - 2013-10-16 19:17 - 14335488 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 02876928 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-22 20:27 - 2013-10-16 19:17 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-22 14:35 - 2013-09-22 14:34 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-09-22 14:35 - 2012-06-17 15:19 - 00000000 ____D C:\Users\EDSON\AppData\Local\Mozilla
2013-09-21 00:30 - 2013-10-16 19:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-20 23:39 - 2013-10-16 19:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

Some content of TEMP:
====================
C:\Users\EDSON\AppData\Local\temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-12 10:34

==================== End Of Log ============================



 OTL . :


[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]


Abraços

Baixe o arquivo fixlist.txt e salve-o no mesmo local onde encontra-se o FRST.

*Clique com o botão direito do mouse no FRST e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Clique [Fix] e cole o relatório Fixlog.txt criado no Desktop


Baixe o arquivo OTLFix.txt e abra-o

*Execute o OTL

*Copie e cole o conteúdo do OTLFix.txt no espaço abaixo de Exames Personalizados/Correções

*Clique [Consertar]

*Clique [OK] para reiniciar o PC

*Ao reiniciar, surgirá uma janela de Aviso de Segurança do Windows, perguntando se deseja executar o OTL. Clique [Executar]

*Cole o relatório C:\_OTL\MovedFiles\mêsdiaano_horaminutossegundos.log


Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e salve-o C:\Windows

*Baixe o arquivo list.zip e extraia o seu conteúdo

*Clique com o botão direito do mouse no list.bat e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Cole o relatório C:\log.txt

Boa noite !   Wings


O OTL ao executar o mesmo não responde; e haja gerenciador de tarefa .



Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-10-2013
Ran by EDSON at 2013-10-17 18:47:32 Run:1
Running from C:\Users\EDSON\Downloads
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
HKCU\...\Winlogon: [Shell] Explorer.exe
S3 catchme; \??\C:\Users\EDSON\AppData\Local\Temp\catchme.sys
DeleteJunctionsIndirectory: C:\Program Files\Microsoft Security Client
DeleteJunctionsIndirectory: C:\Program Files\Windows Defender




*****************

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully.
catchme => Service deleted successfully.
"C:\Program Files\Microsoft Security Client" => Deleting reparse point and unlocking started.
"C:\Program Files\Microsoft Security Client" => Deleting reparse point and unlocking completed.
"C:\Program Files\Windows Defender" => Deleting reparse point and unlocking started.
"C:\Program Files\Windows Defender" => Deleting reparse point and unlocking completed.

==== End of Fixlog ====


O outro log.txt não encontro - o .


Editando :


Após o problema com o MSE ; teve outras alterações aqui com o windows . Pelo menos aqui a melhor coisa à fazer/feita foi trocar de antivirus; coloquei o AVG não gostei depois :


[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]




Abraços

Boa noite ! Wings


Pelo menos aqui a melhor solução foi trocar pelo NOD 32; pois mexendo no sistema alterou a aero do seven e mexeu com o drive da placa de video .

Estou visualizando tudo um pouco claro .



Abraços

Delete o FRST, seu relatório (FRST.txt) e a pasta C:\FRST


Um abraço....

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.