Avast and discord

Author: q | 2025-04-24

★★★★☆ (4.3 / 1463 reviews)

Download karaoke one

If Avast is blocking Discord, it indicates that Avast thinks something within your Discord software is malicious, such as a virus or trojan, Unlike antivirus software, Avast’s System Shield

Download unity 2019.2.7

Discord issues? - Avast Free Antivirus / Premium Security - Avast

Claro, aqui está a tradução do seu texto do português para o inglês:"Hello, Dênis, thank you for helping me.To make it easier, I will insert here two versions of the logs: one in safe mode and another normally with the internet. First, I will put the normal mode and then the safe mode, okay?You will probably feel confused because the logs are in Portuguese. If this makes your analysis impossible, please let me know."NORMAL MODE:Resultado do análise da Farbar Recovery Scan Tool (FRST) (x64) Versão: 01.01.2024Executado por Guilherme (administrador) em AFORTUNADO (ASUS System Product Name) (03-01-2024 19:09:22)Executando a partir de C:\Users\Guilherme\Downloads\FRST64.exePerfis Carregados: GuilhermePlataforma: Microsoft Windows 11 Pro Versão 23H2 22631.2861 (X64) Idioma: Português (Portugal) -> Português (Brasil)Navegador padrão: OperaModo da Inicialização: Normal==================== Processos (Whitelisted) =================(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\120.0.2210.91\identity_helper.exe(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe(C:\Program Files\Avast Software\Avast\AvastUI.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler.exe(C:\Program Files\Avast Software\Avast\AvastUI.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler64.exe(C:\Program Files\Avast Software\Avast\AvLaunch.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe(C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe(C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe ->) (Electronic Arts, Inc. -> The Qt Company Ltd.) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\QtWebEngineProcess.exe (C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe(C:\Program Files\RogueKiller\RogueKillerSvc.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKiller64.exe(C:\Users\Guilherme\AppData\Local\Programs\nordpass\NordPass.exe ->) (nordvpn s.a. -> ) C:\Users\Guilherme\AppData\Local\Programs\nordpass\resources\nordpass-background-app.exe(C:\Users\Guilherme\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Guilherme\AppData\Local\Programs\Opera GX\105.0.4970.63\opera_crashreporter.exe(D:\Games\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Games\bin\cef\cef.win7x64\steamwebhelper.exe (Discord Inc. -> Discord Inc.) C:\Users\Guilherme\AppData\Local\Discord\app-1.0.9028\Discord.exe (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvLaunch.exe(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (explorer.exe ->) (nordvpn s.a. -> NordPass Team) C:\Users\Guilherme\AppData\Local\Programs\nordpass\NordPass.exe (explorer.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\NordVPN.exe(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Games\steam.exe(Opera Norway AS -> Opera Software) C:\Users\Guilherme\AppData\Local\Programs\Opera GX\opera.exe (services.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKillerSvc.exe(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe(services.exe ->) (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordUpdater\NordUpdateService.exe(services.exe ->) (nordvpn Online accounts and bank details, can be leaked to cybercriminals,” Holman added.Malware distribution via YouTubeAfter purchasing and compiling their individualized malware sample, some clients use YouTube to market and distribute their malware. Avast researchers have seen clients create a YouTube video supposedly showing information about a cracked game, or game cheat, which they link to. However, the URL really leads to their malware instead. To create trust for their video, they ask other people on Discord to like and leave comments under the video, endorsing it and saying it is genuine. In some cases they even asked other people to comment that if their antivirus software detects the file as malicious, it’s a false positive. “This technique is quite insidious, because instead of fake accounts and bots, real people are used to upvote harmful content. As genuine accounts are working together to positively comment on the content, the malicious link seems more trustworthy, and as such can trick more people into downloading it,” comments Jan Holman.Through monitoring the online communities, Avast discovered that despite group members supporting each other with cybercrime partially meant as pranks, but also as actual information and money stealing, there are also conversations that easily become quite turbulent. A considerable amount of fighting, instability, and bullying amongst users with “cutthroat” competition that goes to the point of appropriating someone else’s codebase and slandering them was observed. Snapshot from Discord conversationMalware builders are tools that allow users to generate malicious files without having to program anything. Typically, users only need to select the functionalities and customize details such as the icon. There are several builder-based malware families that have similar user interfaces with slightly different layouts, color pallets, names, and logos. They are usually short-lived projects based on a source code from GitHub or some other builder, rebranded with a new logo and name, sometimes slightly tweaked or modified with new functionalities.Avast has created detections protecting users from the samples spreading on the servers and reached out to Discord to inform them about these groups. Discord confirmed they take action to address these types of communities, and has banned the servers associated with Avast’s findings.How to Protect Kids from Dark Activities Online:It’s very important to teach children to be critical of attractive offers, such as new game features unavailable in the official stores or pre-release versions of popular games. Parents also need to educate children on the importance of password security and tell them never to share their passwords with others, even if they claim to be their friends or a game master offering help. For the younger kids, it is crucial not to reveal any personal information when playing on multiplayer platforms, such as Discord or

leaked discord DMs between avast and ZP from Avast's stream

S.a. -> nordvpn S.A.) C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\nordvpn-service.exe(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_866484083fc526af\Display.NvContainer\NVDisplay.Container.exe (services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\Guilherme\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2349.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe(svchost.exe ->) (ADLICE -> ) C:\Program Files\Diag\Diag64.exe(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Guilherme\AppData\Local\Microsoft\OneDrive\23.246.1127.0002\FileCoAuth.exe(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe==================== Registro (Whitelisted) ===================(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [417176 2023-12-28] (Avast Software s.r.o. -> AVAST Software)HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [196264 2023-12-12] (ESET, spol. s r.o. -> ESET)HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1131488 2023-12-25] (Adobe Inc. -> Adobe Inc.)HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [MicrosoftEdgeAutoLaunch_2A9BB2E55E40E42DC7AB1C4AF18EE0A3] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [Opera GX Stable] => C:\Users\Guilherme\AppData\Local\Programs\Opera GX\launcher.exe [2296224 2023-12-21] (Opera Norway AS -> Opera Software)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [Steam] => D:\Games\steam.exe [4386664 2023-12-07] (Valve Corp. -> Valve Corporation)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [Discord] => C:\Users\Guilherme\AppData\Local\Discord\Update.exe [1525016 2023-12-19] (Discord Inc. -> GitHub)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2658920 2023-12-08] (Electronic Arts, Inc. -> Electronic Arts)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [electron.app.NordPass] => C:\Users\Guilherme\AppData\Local\Programs\nordpass\NordPass.exe [163417000 2023-12-21] (nordvpn s.a. -> NordPass Team)HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\120.0.6099.130\Installer\chrmstp.exe [2023-12-25] (Google LLC -> Google LLC)HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrição ==================== Tarefas Agendadas (Whitelisted) =================(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)Task: {24E44F03-91B0-4FA3-94F3-FD146355BD63} - System32\Tasks\Adlice Diag => C:\Program Files\Diag\Diag64.exe [33871792 2023-11-02] (ADLICE -> )Task: {EBF896B8-8B18-4FA7-9678-2DF71A4AF841} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5094808 2023-12-28] (Avast Software s.r.o. -> AVAST Software)Task: {436D9DEF-5A2D-4A75-AD9F-01FE8D3A7315} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2144664 2023-12-28] (Avast Software s.r.o. -> Avast Software)Task: {5CD6436E-F1A0-489E-A53A-8ED9F9E65C2F} - System32\Tasks\GoogleUpdateTaskMachineCore{E00BBDDA-8CAD-43DD-9D84-8019B8DC3239} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162080 2023-12-25] (Google LLC -> Google LLC)Task: {73C0547C-42C6-4B87-A028-53C1399BEF2D} - System32\Tasks\GoogleUpdateTaskMachineUA{633ED6BB-EBE2-4B88-B441-3231A2817AE1} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162080 2023-12-25] (Google LLC -> Google LLC)Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Nenhum Arquivo)Task: {691B25C4-DDDA-414D-AF32-9073E9D84AFC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-24] (Microsoft Windows Publisher -> Microsoft Corporation)Task: {3756BE79-1F35-4CC4-8856-6EA2C7664A54} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-24] (Microsoft Windows Publisher -> Microsoft Corporation)Task: {1CE2F2A0-03AE-4EE9-9553-D9DCFEEE84B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-24] (Microsoft Windows Publisher -> Microsoft Corporation)Task: {9DD45E3C-9BF5-46F0-87C6-8398BB56D730} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-24] (Microsoft Windows Publisher -> Microsoft Corporation)Task: {83A18C3C-9957-4E58-897F-CD0192B6BBFD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2023-12-06] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.logTask: {177366FE-E286-4E00-9221-8BD422FA82CE} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2023-12-06] (NVIDIA Corporation -> NVIDIA Corporation)Task: {97114022-874C-452F-AA0B-AC65B0EB93A1} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2023-12-06] (NVIDIA Corporation -> NVIDIA Corporation)Task: {2F8EE6DF-B7F9-4A63-ABD4-7CB0BC1205CD}. If Avast is blocking Discord, it indicates that Avast thinks something within your Discord software is malicious, such as a virus or trojan, Unlike antivirus software, Avast’s System Shield

XatzClient/Discord-x-Avast-Antimalware - GitHub

Prague, Czech Republic, June 28, 2022 - Avast (LSE:AVST), a global leader in digital security and privacy, has discovered an online community of minors constructing, exchanging and spreading malware, including ransomware and a mix of information stealers and cryptominers. The group lures young users by advertising access to different malware builders and tool kits that allow laypeople to construct malware easily. In some cases, people have to buy access to the malware builder tool in order to join the group, and in others, they can become group members where they are offered the tool for a nominal fee of 5 to 25 Euros.Builder for Lunar malwareThe community uses dedicated Discord servers as a discussion board and selling place to spread malware families such as “Lunar”, “Snatch”, or “Rift”, which follow the current trend of malware-as-a-service. The discussion boards unveil that age-related insults are being thrown on a nearly daily basis. Kids also revealed their ages, discussed the idea of hacking teachers and their school systems and mentioned their parents in conversations. In a Discord group focusing on selling “Lunar”, there were over 1.5k users, out of which about 60-100 had a “client” role, meaning they paid for the builder. The prices of the malware builder tools differ depending on the type of tool and duration of access to the tool.Snapshot from a Discord conversationThe types of malware exchanged among teens targets both minors and adults and have options that include password and private information stealing, cryptomining, and even ransomware. For example, if a client buys a builder tool and chooses to use it for data theft, the generated sample will send any stolen data to that particular client who generated and distributed it. Or, if a client uses a tool to generate a ransomware sample, the victim will be asked to send money to that particular client’s cryptowallet. Other prominent features include stealing gaming accounts, deleting Fortnite or Minecraft folders, or repeatedly opening a web browser containing adult content, apparently simply for the sake of pranking others.Lunar malware able to delete Fortnite“These communities may be attractive to children and teens as hacking is seen as cool and fun, malware builders provide an affordable and easy way to hack someone and brag about it to peers, and even a way to make money through ransomware, cryptomining and the sale of user data,” said Avast Malware Researcher Jan Holman. “However, these activities by far aren’t harmless, they are criminal. They can have significant personal and legal consequences, especially if children expose their own and their families’ identities online or if the purchased malware actually infects the kids’ computer, leaving their families vulnerable by letting them use the affected device. Their data, including Es la posibilidad de que Avast pueda analizar nuestra red, pudiendo detectar problemas de vulnerabilidad e incluso inspeccionar los dispositivos que se encuentran conectados a ella, además de avisarnos de cuando un dispositivo nuevo se conecta a la red. Junto a esto también podemos obtener información sobre si nuestro correo electrónico ha sido hallado en alguna brecha de seguridad en sitios web, pudiendo cambiar la contraseña tan pronto como averigüemos esta información. Además, Avast también nos protegerá de que el malware y aplicaciones no deseadas se hagan con las contraseñas que hayamos guardado en el baúl de nuestro navegador.Todas estas funciones hacen de Avast un antivirus muy versátil y escalable, contando con diversas opciones de configuración y pudiendo aplicar nuestras propias excepciones. Sin embargo, me preocupaba un aspecto: el consumo de recursos de nuestro PC. Analizando en profundidad el rendimiento de las aplicaciones de Avast y echándole un ojo a su consumo de recursos, me halaga saber que puedo estar tranquilo también en este aspecto. Suele ser uno de los puntos que más me echan para atrás cuando instalo este tipo de aplicaciones, pero lo cierto es que Avast no requiere de demasiados recursos. De hecho, la gran mayoría de las veces, aplicaciones como Discord o Slack se apropian de manera más agresiva de la RAM. Más aún si hablamos de Google Chrome.Durante un uso en segundo plano, Avast Premium Security consumía alrededor de 80 o 90 MB. A este consumo de memoria hay que agregarle los procesos adicionales del software para que el servicio funcione correctamente y el trabajo de las aplicaciones que se incluyen en el paquete. En total no debería de consumirnos más de 200 o 300 MB de RAM.Analizando su consumo mientras ejecutaba un análisis profundo de mi equipo, las cifras tampoco se han disparado mucho. En este caso veía como el conjunto de todos los procesos de Avast no superaba nunca los 500 MB. Si decides instalar únicamente el antivirus, en este caso no llegarás casi nunca a los 300 MB por lo que menos recursos consumirá el software aún. Este consumo se notará más evidentemente en equipos con 4GB de RAM o menos, puesto que ahí la gestión de la memoria debe de ser mucho más exhaustiva. Sin embargo, para equipos de 8GB de RAM o más, no deberías de notar nada. De hecho, el equipo utilizado para la prueba ha sido un portátil Lenovo Ideapad 330 con 8GB de RAM. Además de la aplicación de antivirus principal, el paquete Ultimate de Avast también incluye un VPN, una herramienta de limpieza de archivos y un bloqueador de rastreadores para navegar de forma segura.Yendo por partes, el VPN es una aplicación bastante sencilla que nos

Discord issues? - Avast Free Antivirus / Premium Security

Downloaded Qualys BrowserCheck STOPDecrypter AuroraDecrypter FilesLockerDecrypter AdwCleaner ComboFix RKill Junkware Removal Tool Deals Categories eLearning IT Certification Courses Gear + Gadgets Security VPNs Popular Best VPNs How to change IP address Access the dark web safely Best VPN for YouTube Forums More Startup Database Uninstall Database Glossary Chat on Discord Send us a Tip! Welcome Guide HomeDownloadsSearch Results 7 8 9 10 11 Offline CryptoMix Ransomware Decryptor Publisher: AVAST Software OS: Windows Category: Ransomware Decryptors Avast released a decryptor for CryptoMix victim's that were encrypted while in offline mode. Offline mode is when the ransomware runs and encrypts a victim's computer while there is no Internet connection or the computer cannot connect to the ransomware's Command & Control server. Total Downloads: 13,802 Downloads last week: 7 March 08, 2017 HP USB Disk Storage Format Tool Publisher: HP Version: 2.2.3 OS: Windows Category: System Utilities The HP USB Disk Storage Format Tool allows you to format a USB Flash drive too FAT, FAT32, and NTFS file systems. It also allows you to create a DOS startup disk, but this is not very useful with modern versions of Windows. Total Downloads: 511,571 Downloads last week: 1,254 April 27, 2017 BTCWareDecrypter Publisher: Michael Gillespie OS: Windows Category: Ransomware Decryptors BTCWareDecrypter is a ransomware decryptor created by Michael Gillespie that decrypts files encrypted by the BTCWare ransomware. Using this decryptor, victims can recover their files for free without having to pay a ransom. Total Downloads: 16,425 Downloads last week: 9 May 20, 2017 BitKangarooDecrypter

Avast Blocking Discord: What It Means and 5 Ways to

Of date) {EB19B86E-3998-C706-90EF-92B41EB091AF}AV: ESET Security (Enabled - Up to date) {26E0861C-6FB9-CEF9-E4F0-531986211ACE}FW: McAfee (Enabled) {2FDD6819-222E-5E9F-F5E7-E13A2241D502}FW: ESET Firewall (Enabled) {1EDB0739-25D6-CFA1-CFAF-FA2C78F25DB5}==================== Programas Instalados ======================(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)7-Zip 23.01 (x64) (HKLM\...\7-Zip) (Version: 23.01 - Igor Pavlov)Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.1.0.587 - Adobe Inc.)AutoHotkey (user) (HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\AutoHotkey) (Version: 2.0.11 - AutoHotkey Foundation LLC)Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 23.12.6094 - Avast Software)Diag version 2.13.4.0 (HKLM\...\10DBD048-433A-4BC3-951F-055296F077B3_is1) (Version: 2.13.4.0 - Adlice Software)Discord (HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Discord) (Version: 1.0.9028 - Discord Inc.)EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.86.0.5599 - Electronic Arts) HiddenEA app (HKLM-x32\...\{20a8704d-f282-4d39-b57c-177ec90557be}) (Version: 13.86.0.5599 - Electronic Arts)ESET Security (HKLM\...\{D49B87B7-D6F4-43F9-8CC5-097B0715F6D3}) (Version: 17.0.16.0 - ESET, spol. s r.o.)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 120.0.6099.130 - Google LLC)Malwarebytes version 4.6.7.301 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.7.301 - Malwarebytes)Microsoft .NET Host - 6.0.6 (x64) (HKLM\...\{F48FB46C-3334-47AA-98ED-D5A47DED33F1}) (Version: 48.27.42327 - Microsoft Corporation) HiddenMicrosoft .NET Host FX Resolver - 6.0.6 (x64) (HKLM\...\{089493D9-430B-4210-8A47-8F611288F461}) (Version: 48.27.42327 - Microsoft Corporation) HiddenMicrosoft .NET Runtime - 6.0.6 (x64) (HKLM\...\{00478901-CD97-4A20-8FF3-3276865A2B44}) (Version: 48.27.42327 - Microsoft Corporation) HiddenMicrosoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 120.0.2210.91 - Microsoft Corporation)Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 120.0.2210.91 - Microsoft Corporation)Microsoft OneDrive (HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\OneDriveSetup.exe) (Version: 23.246.1127.0002 - Microsoft Corporation)Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation)Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation)Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) HiddenMicrosoft Windows Desktop Runtime - 6.0.6 (x64) (HKLM\...\{B9E46F95-AC34-4943-AFE2-B72EFD56C6C0}) (Version: 48.27.42342 - Microsoft Corporation) HiddenMicrosoft Windows Desktop Runtime - 6.0.6 (x64) (HKLM-x32\...\{aad3b888-fde2-48c0-95c2-2f7a729283fb}) (Version: 6.0.6.31318 - Microsoft Corporation)MSI Afterburner 4.6.5 (HKLM-x32\...\Afterburner) (Version: 4.6.5 -. If Avast is blocking Discord, it indicates that Avast thinks something within your Discord software is malicious, such as a virus or trojan, Unlike antivirus software, Avast’s System Shield Why is Avast blocking Discord? If Avast is blocking Discord, it indicates that Avast thinks something within your Discord software is malicious, such as a virus or trojan, and has decided to stop it. Here’s how to add a file to Avast’s whitelist: Open Avast Antivirus, navigate the menu in the top right and click on the Settings tab.

Discord and Chrome Issues - Avast Free Antivirus / Premium

This makes navigation very simple and fast.The interface is also enhanced for Aero Glass if you are using Windows 7 or Vista.Įxtensive work has gone into making Paint.NET the fastest image editor available. The tabs display a live thumbnail of the image instead of a text description.Images easily, Paint.NET uses a tabbed document interface. Other Free Software – Simple, intuitive, and innovative user interfaceĮvery feature and user interface element was designed to be immediately intuitive and quickly learnable without assistance. GPM ANTIVIRUS - KASPERSKY FREE – TRIALS - McAfee free McAfee Stinger - PC Tools AntiVirusįree AntiVirus Protection - Zillya! Scanner – free scan Zillya! Antivirus – free - Free Spam Filter for Outlook, Outlook Express, Thunderbird, Windows Mail and Windows Live Mail AVAST FREE ANTIVIRUS - AVG FREE ANTIVIRUS - Immunet FREE Antivirus - KINGSOFT SECURITY - Avira AntiVir Free - ClamWIn Free Antivirus - Dr.Web CureIt Home COMODO MOBILE SECURITY & ANTIVIRUS FREE for Android Comodo Antivirus for Linux VBA Rescue Free Antivirus Antivirus for Mac Comodo Cleaning Essentials Comodo Cleaning Essentials (CCE) is a set of computer security tools designed to help users identify and remove malware and unsafe processes from infected computers. NO TRIAL – Най-новите версии на безплатни програми за Windows, Linux и Mac File Brother Download.CNET MAJORGEEKS SOFTVISIA Panda Free Antivirus Panda cloud Antivirus Sophos Free Tools Check for security risks, remove viruses and encrypt your sensitive data -Sophos Mobile Security for Android -Sophos Anti-Virus for Mac Home Edition -Virus Removal Tool -Sophos UTM Home Edition -Sophos UTM Essential Firewall -Network Security Scan -Sophos Free Encryption -Sophos Feature Request app -Sophos UTM Bulletin Board app Please review proper Reddiquette before submitting. Some of our other subreddit rules have overlap with the site-wide rules, but such rules provide more information specific to r/discordapp to help you understand what kind of content is allowed. The Reddit content policy and terms of service must be followed at all times. This sub is operated by volunteers that aren't employed by Discord and does not function as an official support forum. If you're having an issue with Discord, please contact support. If you believe a user has violated ToS, please report them.This sub is for talking about Discord as a product, service, or brand in ways that don't break Discord's Terms of Service or Guidelines. Submitting there guarantees higher visibility from the people who can implement the suggestions. To

Comments

User8631

Claro, aqui está a tradução do seu texto do português para o inglês:"Hello, Dênis, thank you for helping me.To make it easier, I will insert here two versions of the logs: one in safe mode and another normally with the internet. First, I will put the normal mode and then the safe mode, okay?You will probably feel confused because the logs are in Portuguese. If this makes your analysis impossible, please let me know."NORMAL MODE:Resultado do análise da Farbar Recovery Scan Tool (FRST) (x64) Versão: 01.01.2024Executado por Guilherme (administrador) em AFORTUNADO (ASUS System Product Name) (03-01-2024 19:09:22)Executando a partir de C:\Users\Guilherme\Downloads\FRST64.exePerfis Carregados: GuilhermePlataforma: Microsoft Windows 11 Pro Versão 23H2 22631.2861 (X64) Idioma: Português (Portugal) -> Português (Brasil)Navegador padrão: OperaModo da Inicialização: Normal==================== Processos (Whitelisted) =================(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\120.0.2210.91\identity_helper.exe(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe(C:\Program Files\Avast Software\Avast\AvastUI.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler.exe(C:\Program Files\Avast Software\Avast\AvastUI.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler64.exe(C:\Program Files\Avast Software\Avast\AvLaunch.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe(C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe(C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe ->) (Electronic Arts, Inc. -> The Qt Company Ltd.) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\QtWebEngineProcess.exe (C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe(C:\Program Files\RogueKiller\RogueKillerSvc.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKiller64.exe(C:\Users\Guilherme\AppData\Local\Programs\nordpass\NordPass.exe ->) (nordvpn s.a. -> ) C:\Users\Guilherme\AppData\Local\Programs\nordpass\resources\nordpass-background-app.exe(C:\Users\Guilherme\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Guilherme\AppData\Local\Programs\Opera GX\105.0.4970.63\opera_crashreporter.exe(D:\Games\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Games\bin\cef\cef.win7x64\steamwebhelper.exe (Discord Inc. -> Discord Inc.) C:\Users\Guilherme\AppData\Local\Discord\app-1.0.9028\Discord.exe (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvLaunch.exe(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (explorer.exe ->) (nordvpn s.a. -> NordPass Team) C:\Users\Guilherme\AppData\Local\Programs\nordpass\NordPass.exe (explorer.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\NordVPN.exe(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Games\steam.exe(Opera Norway AS -> Opera Software) C:\Users\Guilherme\AppData\Local\Programs\Opera GX\opera.exe (services.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKillerSvc.exe(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe(services.exe ->) (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordUpdater\NordUpdateService.exe(services.exe ->) (nordvpn

2025-04-14
User3164

Online accounts and bank details, can be leaked to cybercriminals,” Holman added.Malware distribution via YouTubeAfter purchasing and compiling their individualized malware sample, some clients use YouTube to market and distribute their malware. Avast researchers have seen clients create a YouTube video supposedly showing information about a cracked game, or game cheat, which they link to. However, the URL really leads to their malware instead. To create trust for their video, they ask other people on Discord to like and leave comments under the video, endorsing it and saying it is genuine. In some cases they even asked other people to comment that if their antivirus software detects the file as malicious, it’s a false positive. “This technique is quite insidious, because instead of fake accounts and bots, real people are used to upvote harmful content. As genuine accounts are working together to positively comment on the content, the malicious link seems more trustworthy, and as such can trick more people into downloading it,” comments Jan Holman.Through monitoring the online communities, Avast discovered that despite group members supporting each other with cybercrime partially meant as pranks, but also as actual information and money stealing, there are also conversations that easily become quite turbulent. A considerable amount of fighting, instability, and bullying amongst users with “cutthroat” competition that goes to the point of appropriating someone else’s codebase and slandering them was observed. Snapshot from Discord conversationMalware builders are tools that allow users to generate malicious files without having to program anything. Typically, users only need to select the functionalities and customize details such as the icon. There are several builder-based malware families that have similar user interfaces with slightly different layouts, color pallets, names, and logos. They are usually short-lived projects based on a source code from GitHub or some other builder, rebranded with a new logo and name, sometimes slightly tweaked or modified with new functionalities.Avast has created detections protecting users from the samples spreading on the servers and reached out to Discord to inform them about these groups. Discord confirmed they take action to address these types of communities, and has banned the servers associated with Avast’s findings.How to Protect Kids from Dark Activities Online:It’s very important to teach children to be critical of attractive offers, such as new game features unavailable in the official stores or pre-release versions of popular games. Parents also need to educate children on the importance of password security and tell them never to share their passwords with others, even if they claim to be their friends or a game master offering help. For the younger kids, it is crucial not to reveal any personal information when playing on multiplayer platforms, such as Discord or

2025-04-14
User9060

S.a. -> nordvpn S.A.) C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\nordvpn-service.exe(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_866484083fc526af\Display.NvContainer\NVDisplay.Container.exe (services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\Guilherme\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2349.2.0_x64__cv1g1gvanyjgm\WhatsApp.exe(svchost.exe ->) (ADLICE -> ) C:\Program Files\Diag\Diag64.exe(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Guilherme\AppData\Local\Microsoft\OneDrive\23.246.1127.0002\FileCoAuth.exe(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe==================== Registro (Whitelisted) ===================(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [417176 2023-12-28] (Avast Software s.r.o. -> AVAST Software)HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [196264 2023-12-12] (ESET, spol. s r.o. -> ESET)HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1131488 2023-12-25] (Adobe Inc. -> Adobe Inc.)HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [MicrosoftEdgeAutoLaunch_2A9BB2E55E40E42DC7AB1C4AF18EE0A3] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [Opera GX Stable] => C:\Users\Guilherme\AppData\Local\Programs\Opera GX\launcher.exe [2296224 2023-12-21] (Opera Norway AS -> Opera Software)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [Steam] => D:\Games\steam.exe [4386664 2023-12-07] (Valve Corp. -> Valve Corporation)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [Discord] => C:\Users\Guilherme\AppData\Local\Discord\Update.exe [1525016 2023-12-19] (Discord Inc. -> GitHub)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2658920 2023-12-08] (Electronic Arts, Inc. -> Electronic Arts)HKU\S-1-5-21-1621880047-891243703-2650676046-1001\...\Run: [electron.app.NordPass] => C:\Users\Guilherme\AppData\Local\Programs\nordpass\NordPass.exe [163417000 2023-12-21] (nordvpn s.a. -> NordPass Team)HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\120.0.6099.130\Installer\chrmstp.exe [2023-12-25] (Google LLC -> Google LLC)HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrição ==================== Tarefas Agendadas (Whitelisted) =================(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)Task: {24E44F03-91B0-4FA3-94F3-FD146355BD63} - System32\Tasks\Adlice Diag => C:\Program Files\Diag\Diag64.exe [33871792 2023-11-02] (ADLICE -> )Task: {EBF896B8-8B18-4FA7-9678-2DF71A4AF841} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5094808 2023-12-28] (Avast Software s.r.o. -> AVAST Software)Task: {436D9DEF-5A2D-4A75-AD9F-01FE8D3A7315} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2144664 2023-12-28] (Avast Software s.r.o. -> Avast Software)Task: {5CD6436E-F1A0-489E-A53A-8ED9F9E65C2F} - System32\Tasks\GoogleUpdateTaskMachineCore{E00BBDDA-8CAD-43DD-9D84-8019B8DC3239} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162080 2023-12-25] (Google LLC -> Google LLC)Task: {73C0547C-42C6-4B87-A028-53C1399BEF2D} - System32\Tasks\GoogleUpdateTaskMachineUA{633ED6BB-EBE2-4B88-B441-3231A2817AE1} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162080 2023-12-25] (Google LLC -> Google LLC)Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Nenhum Arquivo)Task: {691B25C4-DDDA-414D-AF32-9073E9D84AFC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-24] (Microsoft Windows Publisher -> Microsoft Corporation)Task: {3756BE79-1F35-4CC4-8856-6EA2C7664A54} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-24] (Microsoft Windows Publisher -> Microsoft Corporation)Task: {1CE2F2A0-03AE-4EE9-9553-D9DCFEEE84B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-24] (Microsoft Windows Publisher -> Microsoft Corporation)Task: {9DD45E3C-9BF5-46F0-87C6-8398BB56D730} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-24] (Microsoft Windows Publisher -> Microsoft Corporation)Task: {83A18C3C-9957-4E58-897F-CD0192B6BBFD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2023-12-06] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.logTask: {177366FE-E286-4E00-9221-8BD422FA82CE} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2023-12-06] (NVIDIA Corporation -> NVIDIA Corporation)Task: {97114022-874C-452F-AA0B-AC65B0EB93A1} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2023-12-06] (NVIDIA Corporation -> NVIDIA Corporation)Task: {2F8EE6DF-B7F9-4A63-ABD4-7CB0BC1205CD}

2025-04-07
User3194

Prague, Czech Republic, June 28, 2022 - Avast (LSE:AVST), a global leader in digital security and privacy, has discovered an online community of minors constructing, exchanging and spreading malware, including ransomware and a mix of information stealers and cryptominers. The group lures young users by advertising access to different malware builders and tool kits that allow laypeople to construct malware easily. In some cases, people have to buy access to the malware builder tool in order to join the group, and in others, they can become group members where they are offered the tool for a nominal fee of 5 to 25 Euros.Builder for Lunar malwareThe community uses dedicated Discord servers as a discussion board and selling place to spread malware families such as “Lunar”, “Snatch”, or “Rift”, which follow the current trend of malware-as-a-service. The discussion boards unveil that age-related insults are being thrown on a nearly daily basis. Kids also revealed their ages, discussed the idea of hacking teachers and their school systems and mentioned their parents in conversations. In a Discord group focusing on selling “Lunar”, there were over 1.5k users, out of which about 60-100 had a “client” role, meaning they paid for the builder. The prices of the malware builder tools differ depending on the type of tool and duration of access to the tool.Snapshot from a Discord conversationThe types of malware exchanged among teens targets both minors and adults and have options that include password and private information stealing, cryptomining, and even ransomware. For example, if a client buys a builder tool and chooses to use it for data theft, the generated sample will send any stolen data to that particular client who generated and distributed it. Or, if a client uses a tool to generate a ransomware sample, the victim will be asked to send money to that particular client’s cryptowallet. Other prominent features include stealing gaming accounts, deleting Fortnite or Minecraft folders, or repeatedly opening a web browser containing adult content, apparently simply for the sake of pranking others.Lunar malware able to delete Fortnite“These communities may be attractive to children and teens as hacking is seen as cool and fun, malware builders provide an affordable and easy way to hack someone and brag about it to peers, and even a way to make money through ransomware, cryptomining and the sale of user data,” said Avast Malware Researcher Jan Holman. “However, these activities by far aren’t harmless, they are criminal. They can have significant personal and legal consequences, especially if children expose their own and their families’ identities online or if the purchased malware actually infects the kids’ computer, leaving their families vulnerable by letting them use the affected device. Their data, including

2025-04-09

Add Comment