Propagandas a todo momento no PC

por lilian.asa Seg 04 Nov 2013, 16:45

Olá Pessoal!
Acabei de me cadastrar no forum e preciso de ajuda.
Meu PC está me enlouquecendo com propagandas entrando a todo
momento. Várias janelas se abrem com propagandas diversas.
Já passei anti vírus e o PC não detecta vírus algum.
Já fui desinstalar o babylon e o Hao 123 que já conhecemos bem
mas na hora de excluir eles não aparecem nos arquivos. Não sei
qual site posso ter acessado que causou isso.

Obrigada!

por Convidado Seg 04 Nov 2013, 16:56

Siga, por gentileza, as dicas do tutorial abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Copie e cole o log do Adwcleaner aqui no seu topico!

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Depois faça!

1: Faça o download do ((RunScanner)) No link Abaixo e salve no desktop.
Link do Download--> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

2: executa-o, e clique em Ok.

3: Em seguida clique no botão ((Scan Computer)) aguarde o termino aparecerá os arquivos listados.

4: Ao termino do scam, clique em ((save. log file)), salve com qualquer nome que você quiser, quando salvar abrirá um log automatico copia ele todo e cole aqui.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Editado:
O seu caso é bem simples de resolver, caso queira minha ajuda estou no aguardo até 20:30 da noite.

Até Brando lee!

por lilian.asa Qua 13 Nov 2013, 15:24

Oi amigo!

Copiar e colar o logo em cima daquelas setas?
Perdão, não entendi. Qual o logo?

por R. Turbo Qua 13 Nov 2013, 15:36

lilian.asa escreveu:Oi amigo!

Copiar e colar o logo em cima daquelas setas?
Perdão, não entendi. Qual o logo?

Oi Lilian!

O log que o Brando lee disse é o relatório que o programa cria, aí é só você copiar o relatório criado pelo AdwCleaner e também pelo RunScanner e postar eles aqui no seu tópico para que estes relatórios possam ser analisados.

por Convidado Qua 13 Nov 2013, 15:37

lilian.asa escreveu:Oi amigo!

Copiar e colar o logo em cima daquelas setas?
Perdão, não entendi. Qual o logo?

Não..., é para colar o Log (Relatório) em um "Bloco de Notas" do Adwarecleanner na sua próxima resposta!

Você executou o Adwarecleanner ?

por lilian.asa Qua 13 Nov 2013, 16:11

Olá! Segue o log que apareceu no meu PC. Aguardo o que fazer na sequência ok?

Runscanner logfile [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* = signed file
- = file not found

General info
------------
Computer name : SPEEDAMILTON
Creation time : 13/11/2013 16:08:34
Hosts <> 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 9.10.9200.16721
OS : Windows 7 Home Premium
OS Build : 7601
OS SP : Service Pack 1
RunScanner Version : 2.0.0.60
User Language : Português (Brasil)
User rights : Administrator
Windows folder : C:\windows

Running processes
-----------------
* C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
* C:\Windows\System32\wininit.exe (Microsoft Corporation)
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG)
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation)
C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Intel Corporation)
C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation)
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation)
* C:\Windows\System32\dllhost.exe (Microsoft Corporation)
* C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
C:\Program Files (x86)\Samsung\Easy Settings\dmhkcore.exe (Samsung Electronics Co., Ltd.)
C:\Program Files (x86)\Samsung\Easy Settings\EasySpeedUpManager.exe (Samsung Electronics)
* C:\Program Files\Samsung\Easy Support Center\SamoyedAgent.exe (Samsung Electronics CO., LTD.)
* C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe (Eastman Kodak Company)
* C:\PROGRA~2\GbPlugin\gbpsv.exe (GAS Tecnologia)
* C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
* C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
* C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) Corporation)
* C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
* C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
* C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel Corporation)
* C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel® Corporation)
* C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files (x86)\Internet Explorer\ielowutil.exe (Microsoft Corporation)
* C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
* C:\Windows\System32\taskeng.exe (Microsoft Corporation)
* C:\Windows\System32\taskeng.exe (Microsoft Corporation)
* C:\Windows\System32\taskeng.exe (Microsoft Corporation)
* C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe (CyberLink Corp.)
* C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
* C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
* C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation)
* C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
* C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe (Samsung Electronics Co., Ltd.)
* C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe (Nero AG)
* C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
* C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation)
C:\Windows\SysWOW64\IoctlSvc.exe (Prolific Technology Inc.)
* C:\Windows\System32\rundll32.exe (Microsoft Corporation)
* C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
C:\Windows\SysWOW64\qttask.exe (Apple Computer, Inc.)
C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
* C:\Users\amilton\Desktop\runscanner.exe (Runscanner.net)
* C:\Program Files\Samsung\S Agent\CommonAgent.exe (Samsung Electronics CO., LTD.)
* C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe (Samsung Electronics Co., Ltd.)
C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe
C:\Program Files (x86)\Samsung\Easy Settings\SmartSetting.exe (Samsung Electronics Co., Ltd.)
* C:\Windows\System32\spool\drivers\x64\3\EKIJ5000MUI.exe (Eastman Kodak Company)
* C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe (Eastman Kodak Company)
* C:\ProgramData\SAMSUNG\SW Update Service\SWMAgent.exe (Samsung Electronics CO., LTD.)
* C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics Incorporated)
* C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
* C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
* C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
* C:\Windows\explorer.exe (Microsoft Corporation)
* C:\Windows\System32\wlanext.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
* C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (CyberLink)

Unrated items
-------------
002 * C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
002 C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
002 C:\Windows\SysWOW64\qttask.exe (Apple Computer, Inc.)
003 * C:\Users\amilton\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
010 * C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Acrobat Update Service)
010 * C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe® Flash® Player Update Service 11.9 r900)
010 C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira On-Access Service)
010 C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Scheduler)
010 C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Bluetooth Device Monitor)
010 C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Bluetooth Media Service)
010 C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Bluetooth OBEX Service)
010 * C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe (EKAiOHostService Module for Kodak AiO Printers)
010 * C:\PROGRA~2\GbPlugin\GbpSv.exe (G-Buster Browser Defense - Service)
010 * C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel(R) BlueTooth(R) HS Security Manager Service)
010 * C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) PROSet/Wireless Event Log Service)
010 * C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) PROSet/Wireless Registry Service)
010 * C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter)
010 * C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel® PROSet/Wireless Zero Configure Service)
010 * C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (maintenanceservice.exe)
010 C:\windows\SysWOW64\IoctlSvc.exe (PLFlash DeviceIoControl Service)
010 C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (RichVideo Module)
010 C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe (SamsungDeviceConfiguration.exe)
010 * C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Updater Service)
010 * C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe (Status Monitor SDK for KODAK AiO Printer (32-Bit Intel(R) Pentium(TM) 4 Optimized Build))
010 * C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe (SW Update Agent)
010 * C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer Remote Control Application)
011 * C:\windows\system32\drivers\GbpKm.sys (GbPlugin Device Driver)
013 * C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe (Eastman Kodak Company)
031 * C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}
035 * C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe (Google Inc.) {8A69D345-D564-463c-AFF1-A69D9E530F96}
042 GUID / CLSID not found {328ECD19-C167-40eb-A0C7-16FE7634105E}
047 Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] : *.www.bancobrasil.com.br
047 Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] : *.www.bb.com.br
047 Zone: www14.bancobrasil.com.br : *.www14.bancobrasil.com.br
047 Zone: www2.bancobrasil.com.br : *.www2.bancobrasil.com.br
050 * C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll (Banco do Brasil) {E37CB5F0-51F5-4395-A808-5FA49E399F83}
052 GUID / CLSID not found {7473b6bd-4691-4744-a82b-7854eb3d70b6}
052 C:\Program Files (x86)\ViewPassword\134.dll {dd000e12-c224-49a5-899e-0b37dbd95f15}
052 * C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll (Banco do Brasil) {C41A1C0E-EA6C-11D4-B1B8-444553540000}
052 * C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
052 * C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) {DBC80044-A445-435b-BC74-9C25C1C588A9}
052 C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll {AA609D72-8482-4076-8991-8CDAE5B93BCB}
060 GUID / CLSID not found {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
061 C:\Program Files (x86)\7-Zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
061 * C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll (Banco do Brasil) {E37CB5F0-51F5-4395-A808-5FA49E399F83}
061 C:\Program Files\Samsung AnyWeb Print\W2PDeskband.dll {E99987AC-6311-4686-B095-EB30B69F9258}
061 C:\Program Files (x86)\ACE Mega CoDecS Pack\SystemS\RealMedia\rpshell.dll (RealNetworks, Inc.) {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
062 * C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (Adobe Systems, Inc.) {F9DB5320-233E-11D1-9F84-707F02C10627}
067 * C:\Program Files (x86)\GbPlugin\gbieh.dll (Banco do Brasil)
073 Adobe Flash Player Updater.job : C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
073 FacebookUpdateTaskUserS-1-5-21-580441236-439076865-2119370448-1001Core.job : C:\Users\amilton\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
073 FacebookUpdateTaskUserS-1-5-21-580441236-439076865-2119370448-1001UA.job : C:\Users\amilton\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
073 PrintProjects Communicator.job : C:\ProgramData\PrintProjects\Communicator.exe
073 ViewPassword Update.job : C:\Program Files (x86)\ViewPassword\ViewPassword.exe
100 Default_Page_URL HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Default_Page_URL HKLM : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Search Page HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 SearchAssistant HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Start Page HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Start Page HKLM : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
104 * C:\windows\SysWOW64\Macromed\Flash\Flash32_11_9_900_117.ocx (Adobe Systems, Inc.) {D27CDB6E-AE6D-11CF-96B8-444553540000}
105 Free YouTube Download : C:\Users\amilton\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
173 GUID / CLSID not found {0A7D34C2-E9DA-48A1-9E34-0CDFC2DE3B44}
173 GUID / CLSID not found {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
173 GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
173 GUID / CLSID not found {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
173 C:\Program Files (x86)\7-Zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
173 GUID / CLSID not found
173 C:\Program Files\WinRAR\rarext32.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
220 GUID / CLSID not found {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
221 GUID / CLSID not found {0A7D34C2-E9DA-48A1-9E34-0CDFC2DE3B44}
221 GUID / CLSID not found {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
221 GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
221 C:\Program Files (x86)\7-Zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
221 GUID / CLSID not found
221 C:\Program Files\WinRAR\rarext32.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 GUID / CLSID not found {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
225 GUID / CLSID not found {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
225 GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
225 GUID / CLSID not found {B41DB860-64E4-11D2-9906-E49FADC173CA}
225 GUID / CLSID not found
225 GUID / CLSID not found
225 C:\Program Files\WinRAR\rarext32.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext32.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
226 GUID / CLSID not found {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
227 C:\Program Files (x86)\7-Zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
227 GUID / CLSID not found
228 GUID / CLSID not found {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}
229 GUID / CLSID not found {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}
229 GUID / CLSID not found {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9}
231 * C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (Adobe Systems, Inc.) PDF Column Info
241 GUID / CLSID not found {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}
241 GUID / CLSID not found {BBACC218-34EA-4666-9D7A-C78F2274A524}
241 GUID / CLSID not found {F241C880-6982-4CE5-8CF7-7085BA96DA5A}
241 GUID / CLSID not found {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}
251 C:\Program Files (x86)\7-Zip\7-zip.dll (Igor Pavlov) {23170F69-40C1-278A-1000-000100020000}
001 C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe
001 C:\Windows\System32\winlogon.exe
001 C:\Windows\System32\services.exe
001 C:\Windows\System32\spoolsv.exe
001 audiodg.exe
001 C:\Windows\System32\dwm.exe
001 C:\Windows\System32\smss.exe
001 C:\Windows\System32\hkcmd.exe
001 C:\Windows\System32\conhost.exe
001 C:\Windows\System32\igfxext.exe
001 C:\Windows\System32\lsass.exe
001 C:\Windows\System32\MsSpellCheckingFacility.exe
001 C:\Windows\System32\nvvsvc.exe
001 C:\Windows\System32\igfxpers.exe
001 C:\Windows\System32\taskhost.exe
001 C:\Windows\System32\csrss.exe
001 C:\Windows\System32\csrss.exe
001 C:\Windows\System32\lsm.exe
001 C:\Windows\System32\wbem\unsecapp.exe
001 C:\Windows\System32\WUDFHost.exe

Missing files
-------------
010 C:\windows\System32\spoolsv.exe
010 C:\windows\system32\trkwks.dll
010 C:\windows\system32\ipnathlp.dll
010 C:\windows\system32\ui0detect.exe
010 C:\windows\system32\pnrpauto.dll
010 C:\windows\system32\seclogon.dll
010 C:\windows\system32\srvsvc.dll
010 C:\windows\system32\browser.dll
010 C:\windows\system32\pnrpsvc.dll
010 C:\windows\system32\pnrpsvc.dll
010 C:\windows\system32\lmhsvc.dll
010 C:\windows\system32\IPBusEnum.dll
010 C:\windows\System32\wlansvc.dll
010 C:\windows\system32\wkssvc.dll
010 C:\windows\System32\themeservice.dll
010 C:\windows\system32\ssdpsrv.dll
010 C:\windows\system32\samsrv.dll
010 C:\windows\system32\wpdbusenum.dll
010 C:\windows\system32\wbengine.exe
010 C:\windows\system32\ikeext.dll
010 C:\windows\system32\rasmans.dll
010 C:\windows\system32\netman.dll
010 C:\windows\System32\termsrv.dll
010 C:\windows\system32\rasauto.dll
010 C:\windows\system32\dwm.exe
010 C:\windows\system32\sysmain.dll
010 C:\windows\system32\snmptrap.exe
010 C:\windows\system32\Locator.exe
010 C:\windows\system32\RpcEpMap.dll
010 C:\windows\system32\bfe.dll
010 C:\windows\system32\defragsvc.dll
010 C:\Program Files (x86)\Windows Defender\MsMpRes.dll
010 C:\windows\system32\nvvsvc.exe
010 C:\windows\system32\sstpsvc.dll
010 C:\windows\System32\SUPDSvc2.exe
010 C:\windows\system32\profsvc.dll
010 C:\windows\System32\swprv.dll
010 C:\windows\System32\nlasvc.dll
010 C:\windows\system32\lltdres.dll
010 regsvc.dll
010 C:\windows\System32\wercplsupport.dll
010 C:\windows\system32\mmcss.dll
010 C:\windows\system32\mmcss.dll
010 C:\windows\system32\schedsvc.dll
010 C:\windows\system32\pcasvc.dll
010 C:\windows\system32\bdesvc.dll
010 C:\windows\System32\wscsvc.dll
010 C:\windows\system32\wecsvc.dll
010 C:\windows\system32\sppsvc.exe
010 C:\windows\System32\audiosrv.dll
010 C:\windows\System32\audiosrv.dll
010 C:\windows\system32\sdrsvc.dll
010 C:\windows\system32\wbiosrvc.dll
010 C:\windows\system32\FntCache.dll
010 C:\windows\system32\dot3svc.dll
010 C:\windows\System32\wwansvc.dll
010 C:\windows\system32\vssvc.exe
010 C:\windows\system32\dps.dll
010 C:\windows\system32\vds.exe
010 C:\windows\system32\umpo.dll
010 C:\windows\system32\TabSvc.dll
010 C:\windows\system32\aelupsvc.dll
010 C:\windows\system32\kmsvc.dll
010 C:\windows\system32\vaultsvc.dll
010 C:\windows\system32\fdPHost.dll
010 C:\windows\system32\appidsvc.dll
010 C:\windows\system32\appinfo.dll
010 C:\windows\system32\wevtsvc.dll
010 C:\windows\System32\sensrsvc.dll
010 C:\windows\system32\sppuinotify.dll
010 C:\windows\System32\certprop.dll
010 C:\windows\System32\certprop.dll
010 C:\windows\system32\fdrespub.dll
010 C:\windows\System32\wersvc.dll
010 C:\windows\System32\bthserv.dll
010 C:\windows\system32\w32time.dll
010 C:\windows\system32\qmgr.dll
010 C:\windows\system32\wiaservc.dll
010 C:\windows\system32\efssvc.dll
010 C:\windows\system32\Alg.exe
010 C:\windows\system32\AxInstSV.dll
010 C:\windows\system32\eapsvc.dll
010 C:\windows\system32\umpnpmgr.dll
010 C:\windows\system32\iphlpsvc.dll
010 C:\windows\system32\tbssvc.dll
010 C:\windows\system32\p2psvc.dll
010 C:\windows\System32\SCardSvr.dll
010 C:\windows\system32\nsisvc.dll
010 C:\windows\system32\qagentrt.dll
010 C:\windows\system32\Wat\WatUX.exe
010 C:\windows\system32\wudfsvc.dll
010 C:\windows\System32\ListSvc.dll
010 C:\windows\system32\wuaueng.dll
010 C:\windows\system32\wbem\wmisvc.dll
010 C:\windows\system32\wbem\wmiapsrv.exe
010 C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
011 c:\windows\system32\drivers\1394ohci.sys
011 c:\windows\system32\drivers\ohci1394.sys
011 c:\windows\system32\drivers\ACPI.sys
011 c:\windows\system32\drivers\acpipmi.sys
011 c:\windows\system32\drivers\adp94xx.sys
011 c:\windows\system32\drivers\adpahci.sys
011 c:\windows\system32\drivers\adpu320.sys
011 C:\windows\System32\drivers\pacer.sys
011 c:\windows\system32\drivers\aliide.sys
011 c:\windows\system32\drivers\amdide.sys
011 c:\windows\system32\drivers\amdsata.sys
011 c:\windows\system32\drivers\amdsbs.sys
011 c:\windows\system32\drivers\amdxata.sys
011 C:\windows\system32\drivers\afd.sys
011 c:\windows\system32\drivers\arc.sys
011 c:\windows\system32\drivers\arcsas.sys
011 c:\windows\system32\drivers\atapi.sys
011 c:\windows\system32\DRIVERS\athrx.sys
011 c:\windows\system32\DRIVERS\avipbb.sys
011 c:\windows\system32\DRIVERS\avkmgr.sys
011 c:\windows\system32\DRIVERS\avgntflt.sys
011 C:\windows\system32\drivers\Beep.sys
011 C:\windows\system32\drivers\fvevol.sys
011 c:\windows\system32\DRIVERS\blbdrive.sys
011 c:\windows\system32\drivers\btmaud.sys
011 c:\windows\system32\DRIVERS\btmaux.sys
011 c:\windows\system32\drivers\bthmodem.sys
011 c:\windows\system32\DRIVERS\bthpan.sys
011 c:\windows\system32\DRIVERS\rfcomm.sys
011 c:\windows\system32\DRIVERS\b57nd60a.sys
011 c:\windows\system32\drivers\evbda.sys
011 c:\windows\system32\drivers\bxvbda.sys
011 c:\windows\System32\Drivers\BrSerWdm.sys
011 c:\windows\System32\Drivers\Brserid.sys
011 c:\windows\System32\Drivers\BrUsbMdm.sys
011 c:\windows\System32\Drivers\BrUsbSer.sys
011 c:\windows\system32\DRIVERS\btfilter.sys
011 c:\windows\system32\DRIVERS\btmhsf.sys
011 c:\windows\system32\DRIVERS\cdfs.sys
011 c:\windows\system32\drivers\cmdide.sys
011 System32\Drivers\cng.sys
011 C:\windows\system32\clfs.sys
011 c:\windows\system32\DRIVERS\compbatt.sys
011 c:\windows\system32\drivers\circlass.sys
011 c:\windows\system32\DRIVERS\CmBatt.sys
011 c:\windows\system32\DRIVERS\clwvd.sys
011 c:\windows\system32\DRIVERS\usbhub.sys
011 C:\windows\system32\drivers\dfsc.sys
011 c:\windows\System32\drivers\dxgkrnl.sys
011 c:\windows\system32\drivers\crcdisk.sys
011 C:\windows\system32\srvsvc.dll
011 C:\windows\system32\srvsvc.dll
011 C:\windows\system32\browser.dll
011 C:\windows\system32\wkssvc.dll
011 C:\windows\system32\wkssvc.dll
011 C:\windows\system32\wkssvc.dll
011 C:\windows\system32\wkssvc.dll
011 c:\windows\system32\DRIVERS\nwifi.sys
011 C:\windows\system32\drivers\RDPWD.sys
011 c:\windows\System32\Drivers\BTHport.sys
011 c:\windows\system32\DRIVERS\vwifibus.sys
011 c:\windows\system32\DRIVERS\kbdclass.sys
011 c:\windows\system32\DRIVERS\mouclass.sys
011 c:\windows\system32\drivers\volsnap.sys
011 c:\windows\system32\drivers\modem.sys
011 c:\windows\system32\DRIVERS\ndisuio.sys
011 C:\windows\system32\drivers\volmgrx.sys
011 C:\windows\System32\drivers\scfilter.sys
011 c:\windows\system32\DRIVERS\tunnel.sys
011 c:\windows\System32\Drivers\BTHUSB.sys
011 c:\windows\system32\drivers\hidbth.sys
011 c:\windows\system32\drivers\sermouse.sys
011 c:\windows\system32\DRIVERS\i8042prt.sys
011 c:\windows\system32\drivers\parport.sys
011 C:\windows\system32\drivers\qwavedrv.sys
011 C:\windows\system32\drivers\luafv.sys
011 C:\windows\system32\drivers\Ntfs.sys
011 c:\windows\system32\drivers\MTConfig.sys
011 C:\windows\system32\drivers\ndis.sys
011 c:\windows\system32\DRIVERS\tcpip.sys
011 c:\windows\system32\drivers\usbehci.sys
011 c:\windows\system32\drivers\elxstor.sys
011 c:\windows\system32\drivers\pci.sys
011 c:\windows\system32\drivers\vdrvroot.sys
011 c:\windows\system32\drivers\errdev.sys
011 c:\windows\system32\drivers\BthEnum.sys
011 C:\windows\system32\drivers\fastfat.sys
011 C:\windows\system32\drivers\fsdepends.sys
011 C:\windows\system32\drivers\filetrace.sys
011 C:\windows\system32\drivers\fileinfo.sys
011 c:\windows\system32\drivers\agp440.sys
011 c:\windows\system32\drivers\gagp30kx.sys
011 c:\windows\system32\drivers\uliagpkx.sys
011 c:\windows\system32\drivers\uagp35.sys
011 c:\windows\system32\drivers\nv_agp.sys
011 c:\windows\system32\drivers\fdc.sys
011 c:\windows\system32\drivers\flpydisk.sys
011 c:\windows\system32\drivers\umpass.sys
011 C:\windows\system32\drivers\fltmgr.sys
011 C:\windows\system32\drivers\mountmgr.sys
011 C:\windows\system32\drivers\hwpolicy.sys
011 c:\windows\system32\drivers\hcw85cir.sys
011 c:\windows\system32\drivers\HidBatt.sys
011 c:\windows\system32\DRIVERS\mouhid.sys
011 c:\windows\system32\drivers\kbdhid.sys
011 c:\windows\system32\DRIVERS\HDAudBus.sys
011 c:\windows\system32\drivers\HdAudio.sys
011 c:\windows\system32\drivers\HpSAMD.sys
011 c:\windows\system32\DRIVERS\iBtFltCoex.sys
011 c:\windows\system32\DRIVERS\igdkmd64.sys
011 c:\windows\system32\drivers\iirsp.sys
011 C:\windows\system32\drivers\irenum.sys
011 c:\windows\system32\drivers\hidir.sys
011 c:\windows\system32\drivers\iaStorV.sys
011 c:\windows\system32\DRIVERS\iaStor.sys
011 c:\windows\system32\DRIVERS\IntcDAud.sys
011 c:\windows\system32\DRIVERS\HECIx64.sys
011 c:\windows\system32\DRIVERS\AMPPAL.sys
011 c:\windows\system32\DRIVERS\amppal.sys
011 c:\windows\system32\DRIVERS\Netwsw00.sys
011 c:\windows\system32\drivers\intelide.sys
011 c:\windows\system32\drivers\IPMIDrv.sys
011 System32\drivers\ipnat.sys
011 c:\windows\system32\drivers\isapnp.sys
011 c:\windows\system32\drivers\ksthunk.sys
011 System32\Drivers\ksecdd.sys
011 System32\Drivers\ksecpkg.sys
011 c:\windows\system32\DRIVERS\lltdio.sys
011 c:\windows\system32\DRIVERS\rspndr.sys
011 C:\windows\system32\drivers\spldr.sys
011 c:\windows\system32\drivers\lsi_fc.sys
011 c:\windows\system32\drivers\lsi_sas.sys
011 c:\windows\system32\drivers\lsi_sas2.sys
011 c:\windows\system32\drivers\lsi_scsi.sys
011 c:\windows\system32\DRIVERS\bridge.sys
011 C:\windows\system32\drivers\secdrv.sys
011 C:\windows\system32\drivers\netbt.sys
011 c:\windows\system32\drivers\megasas.sys
011 c:\windows\system32\drivers\MegaSR.sys
011 c:\windows\system32\DRIVERS\Sftfslh.sys
011 c:\windows\system32\DRIVERS\Sftplaylh.sys
011 c:\windows\system32\DRIVERS\Sftredirlh.sys
011 c:\windows\system32\DRIVERS\Sftvollh.sys
011 C:\windows\system32\drivers\exfat.sys
011 c:\windows\system32\drivers\msiscsi.sys
011 c:\windows\system32\drivers\rdpbus.sys
011 c:\windows\system32\drivers\drmkaud.sys
011 c:\windows\system32\DRIVERS\monitor.sys
011 c:\windows\system32\drivers\mpio.sys
011 c:\windows\system32\drivers\MSKSSRV.sys
011 c:\windows\system32\drivers\MSPCLOCK.sys
011 c:\windows\system32\drivers\MSPQM.sys
011 c:\windows\system32\drivers\msahci.sys
011 c:\windows\system32\drivers\msdsm.sys
011 C:\windows\system32\drivers\Msfs.sys
011 c:\windows\system32\drivers\msisadrv.sys
011 C:\windows\system32\drivers\MsRPC.sys
011 C:\windows\system32\drivers\mup.sys
011 c:\windows\system32\DRIVERS\CompositeBus.sys
011 c:\windows\system32\drivers\tdpipe.sys
011 c:\windows\system32\DRIVERS\ndiscap.sys
011 C:\windows\system32\drivers\NDProxy.sys
011 c:\windows\system32\DRIVERS\netbios.sys
011 c:\windows\system32\drivers\nfrd960.sys
011 c:\windows\system32\drivers\ccdcmbx64.sys
011 C:\windows\system32\drivers\Npfs.sys
011 C:\windows\system32\drivers\nsiproxy.sys
011 C:\windows\system32\drivers\Null.sys
011 c:\windows\system32\DRIVERS\nvlddmkm.sys
011 c:\windows\system32\DRIVERS\nvpciflt.sys
011 c:\windows\system32\drivers\nvraid.sys
011 c:\windows\system32\drivers\nvstor.sys
011 C:\windows\system32\sstpsvc.dll
011 c:\windows\system32\drivers\usbohci.sys
011 C:\windows\system32\drivers\partmgr.sys
011 C:\windows\system32\drivers\mshidkmdf.sys
011 c:\windows\system32\drivers\pciide.sys
011 c:\windows\system32\drivers\pcmcia.sys
011 System32\drivers\pcw.sys
011 C:\windows\system32\drivers\http.sys
011 c:\windows\system32\DRIVERS\MarvinBus64.sys
011 c:\windows\system32\DRIVERS\swenum.sys
011 c:\windows\system32\drivers\disk.sys
011 c:\windows\system32\drivers\amdppm.sys
011 c:\windows\system32\drivers\amdk8.sys
011 c:\windows\system32\drivers\processr.sys
011 c:\windows\system32\DRIVERS\intelppm.sys
011 c:\windows\system32\drivers\peauth.sys
011 c:\windows\system32\drivers\ql2300.sys
011 c:\windows\system32\drivers\ql40xx.sys
011 c:\windows\system32\DRIVERS\AgileVpn.sys
011 System32\DRIVERS\rasacd.sys
011 C:\windows\system32\drivers\RDPENCDD.sys
011 C:\windows\system32\DRIVERS\RDPCDD.sys
011 C:\windows\system32\drivers\RdpRefMp.sys
011 System32\drivers\rdpvideominiport.sys
011 System32\drivers\rdyboost.sys
011 c:\windows\system32\DRIVERS\Rt64win7.sys
011 c:\windows\system32\drivers\RTKVHD64.sys
011 c:\windows\system32\drivers\TsUsbGD.sys
011 c:\windows\system32\DRIVERS\termdd.sys
011 C:\windows\system32\drivers\tsusbflt.sys
011 C:\windows\system32\Drivers\SABI.sys
011 C:\Users\amilton\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys
011 c:\windows\system32\drivers\sbp2port.sys
011 c:\windows\system32\DRIVERS\cdrom.sys
011 c:\windows\system32\drivers\sfloppy.sys
011 c:\windows\system32\DRIVERS\SGdrv64.sys
011 c:\windows\system32\drivers\serial.sys
011 c:\windows\system32\DRIVERS\serscan.sys
011 c:\windows\system32\drivers\serenum.sys
011 C:\windows\system32\appidsvc.dll
011 c:\windows\system32\drivers\SiSRaid2.sys
011 c:\windows\system32\drivers\sisraid4.sys
011 c:\windows\system32\drivers\sffdisk.sys
011 c:\windows\system32\drivers\sffp_mmc.sys
011 c:\windows\system32\drivers\sffp_sd.sys
011 System32\DRIVERS\srvnet.sys
011 c:\windows\system32\drivers\stexstor.sys
011 c:\windows\system32\DRIVERS\SynTP.sys
011 C:\windows\system32\drivers\discache.sys
011 c:\windows\system32\DRIVERS\mssmbios.sys
011 c:\windows\system32\drivers\tdtcp.sys
011 System32\drivers\tcpipreg.sys
011 c:\windows\system32\drivers\Wdf01000.sys
011 C:\windows\System32\DRIVERS\tssecsrv.sys
011 c:\windows\system32\DRIVERS\udfs.sys
011 c:\windows\system32\drivers\usbuhci.sys
011 c:\windows\system32\DRIVERS\usbccgp.sys
011 c:\windows\system32\drivers\usbcir.sys
011 c:\windows\system32\DRIVERS\USBSTOR.SYS
011 c:\windows\system32\drivers\hidusb.sys
011 c:\windows\system32\DRIVERS\usbprint.sys
011 c:\windows\system32\DRIVERS\usbscan.sys
011 c:\windows\System32\Drivers\usbvideo.sys
011 c:\windows\system32\DRIVERS\umbus.sys
011 c:\windows\system32\DRIVERS\vgapnp.sys
011 c:\windows\System32\drivers\vga.sys
011 c:\windows\system32\drivers\vhdmp.sys
011 c:\windows\system32\drivers\viaide.sys
011 c:\windows\system32\DRIVERS\vwififlt.sys
011 c:\windows\system32\DRIVERS\vwifimp.sys
011 c:\windows\system32\drivers\volmgr.sys
011 c:\windows\system32\drivers\vsmraid.sys
011 c:\windows\system32\drivers\wacompen.sys
011 c:\windows\system32\drivers\wd.sys
011 c:\windows\system32\drivers\MSTEE.sys
011 c:\windows\system32\DRIVERS\wfplwf.sys
011 c:\windows\system32\drivers\WudfPf.sys
011 c:\windows\system32\DRIVERS\wmiacpi.sys
011 c:\windows\system32\drivers\BrFiltLo.sys
011 c:\windows\system32\drivers\BrFiltUp.sys
011 c:\windows\system32\DRIVERS\WinUsb.sys
011 C:\windows\System32\drivers\ws2ifsl.sys
011 c:\windows\system32\DRIVERS\WUDFRd.sys
032 rdpclip
069 E_ILMFOA.DLL
069 EKIJ5000MON.dll
069 localspl.dll
069 FXSMON.DLL
069 spd__l.dll
069 tcpmon.dll
069 usbmon.dll
069 WSDMon.dll
073 C:\Users\amilton\AppData\Local\SwvUpdater\Updater.exe
145 kbdclass.sys
210 C:\windows\system32\sdclt.exe

por R. Turbo Qua 13 Nov 2013, 17:16

Faltou você postar só o log do Adwcleaner que deverá estar em C:\AdwCleaner\AdwCleaner[S0].tx

por lilian.asa Qua 13 Nov 2013, 17:26

Amigo, estou procurando mas não está no C\. Coloquei em pesquisar e ele não encontra. Onde será que ele ficou?

por **Power Max** Qua 13 Nov 2013, 17:34

lilian.asa escreveu:Amigo, estou procurando mas não está no C\. Coloquei em pesquisar e ele não encontra. Onde será que ele ficou?

Primeiro é preciso saber se você executou o AdwCleaner, porque o relatório só é criado depois que você o executa. Caso não tenha executado ele, é só executar seguindo as dicas deste tutorial:

Remova adwares e toolbars maliciosas com o Adwcleaner
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Depois de executá-lo, confira se em C:/ tem uma pasta com o nome de AdwCleaner. O relatório deverá estar nesta pasta e ele tem o nome de AdwCleaner[S0].txt

Caso você não encontre este arquivo que citei acima, você pode seguir estes outros tutoriais abaixo e depois postar aqui no seu tópico o relatório que cada um deles irá criar:

Remova adwares e itens desnecessários com o Junkware Removal Tool
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Exclua adwares e outras ameaças de seus browsers com o aplicativo Zoek
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

por lilian.asa Qua 13 Nov 2013, 17:44

Como já estamos fechando vou fazer isso amanhã ok? Realmente não tem no C\ a pasta com o arquivo. Obrigada
e até amanhã. Abraços.

por Convidado Qua 13 Nov 2013, 18:24

lilian.asa escreveu:Como já estamos fechando vou fazer isso amanhã ok? Realmente não tem no C\ a pasta com o arquivo. Obrigada
e até amanhã. Abraços.

Espero que você volte amanhã, pois o relatório do RunScanner apresenta um Trojan (Malware) instalado em seu sistema!
Aguardamos sua presença amanhã para remoção do malware!
Esse é o Malware -> C:\Program Files (x86)\ViewPassword\ViewPassword.exe <-- trojan

Até Brando lee!

por lilian.asa Qui 14 Nov 2013, 09:34

Bom dia Brando!
Já estou no outro PC baixando os arquivos como você falou.
Volto! Abraço

por lilian.asa Qui 14 Nov 2013, 09:50

Este é o resultado (relatório) do primeiro programa que você indicou.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by amilton on 14/11/2013 at 9:32:34,74
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113}
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Bar
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\searchURL\\Default
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babsolution
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dsiteproducts
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminent
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smarttweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitsearchscopes
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\search settings
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\toolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-580441236-439076865-2119370448-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\iminent
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\v9software
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iminent_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iminent_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iminentsetup_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iminentsetup_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\mybabylontb_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\snapdo_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\snapdo_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\webcakedesktop_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\webcakedesktop_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\searchthewebarp
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{99c91fc5-db5b-4aa0-bb70-5d89c5a4df96}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\UpdateTask_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\UpdateTask_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_para_advanced-systemcare_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_para_advanced-systemcare_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\UpdateTask_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\UpdateTask_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_advanced-systemcare_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_advanced-systemcare_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dd000e12-c224-49a5-899e-0b37dbd95f15}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{dd000e12-c224-49a5-899e-0b37dbd95f15}

~~~ Files

Successfully deleted: [File] C:\windows\Tasks\amiupdxp.job

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\tarma installer"
Successfully deleted: [Folder] "C:\Users\amilton\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\amilton\AppData\Roaming\baidu"
Successfully deleted: [Folder] "C:\Users\amilton\AppData\Roaming\dealply"
Successfully deleted: [Folder] "C:\Users\amilton\AppData\Roaming\dsite"
Successfully deleted: [Folder] "C:\Users\amilton\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\amilton\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\amilton\AppData\Roaming\yourfiledownloader"
Successfully deleted: [Folder] "C:\Users\amilton\appdata\local\conduit"
Successfully deleted: [Folder] "C:\Users\amilton\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\amilton\appdata\local\lollipop"
Successfully deleted: [Folder] "C:\Users\amilton\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\amilton\appdata\locallow\babylontoolbar"
Successfully deleted: [Folder] "C:\Users\amilton\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\amilton\appdata\locallow\pricegong"
Successfully deleted: [Folder] "C:\Users\amilton\appdata\locallow\utorrentcontrol_v2"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\iminent"
Successfully deleted: [Folder] "C:\Program Files (x86)\Common Files\spigot"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dealply"
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{00CD0801-3BFD-47DB-A70E-92C9D8A3F25F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0164E7F2-1741-42BE-B449-53F456C52B6E}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{01F97CD6-F9E9-4F8D-95F6-F2838F9273C5}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{03526BB9-8C33-4536-B5EA-359FBFA11E1E}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{04861BCA-3867-431F-8CAF-C528A4B2CF10}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{04DABB09-110B-45F3-BA48-3AACECDFFD3C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0681E2D4-D8EC-4223-A6EE-AEF3CCBB0B8A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{06D89666-2F4F-408A-84D3-F57F7A6E4A38}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{095F6588-6B94-40CF-91C7-6DC2C31C1CFD}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0A198127-51DD-4CA9-8D6C-213C68ACD4CC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0AA5DFBB-D5D4-422D-A3FD-5F3A9E35C423}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0AAD9CE8-F515-441C-8450-036FB06F0E1C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0C68A44D-6528-4EC9-B231-811CFE6F39BC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0CF85ADF-5D67-4DA1-A532-178779419B18}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0E06D268-26DC-49E7-9B41-AD42371C8C34}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0E6AF16B-ABF1-404E-8AD1-3A7679D565B2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{0EB5BC65-0116-4423-AE42-66EF58EE6510}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{14A72848-81CD-483D-B1F8-9C7C3A992D49}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{15691C2C-0716-4D43-A45C-D27D8DB18A17}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1614AC48-91F1-4A12-BFFB-8D35F20E07EB}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{169C12C1-1AF0-49D3-B7D1-A3AE3CD91E61}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{16D19228-919E-4546-99A5-D74AC816AA48}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{18A48C9C-06D3-4FB9-ADDA-74E934ABD016}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{18AE6CAC-1D34-40B1-B58F-9CBD403F9FE7}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1A5074CA-5561-42A4-807E-651A92F841A3}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1A7ADA78-7B8A-4828-BBC5-AE12D5925F28}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1B85D8AC-A75C-4F1C-AA0D-43CA3DE1C28F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1C463CBC-EA33-43FF-9DD0-FA630A3600D2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1D3837B1-6D5C-48CF-98D6-EFFA6C48AFE8}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1D8D6535-DBF5-4D2B-8D4B-53CC50DE21C4}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1ED0DFD4-6DBF-42D0-A684-4C523DD27017}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{1FB98A45-84F6-42B6-8DA2-A7AB174F449D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{205E4B17-2158-4BD0-AC69-8B411EA40551}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{207ECA89-2F3A-440F-AA8E-21F2E6C6E233}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{20AA1CCB-7CA7-4E2A-8E51-041A7061ECA2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{213A0104-AAFB-470E-9265-9969A95F9EA5}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{217DCEED-2838-471A-979A-047A1A41031F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{2228BAA8-49A6-4317-8B41-ECA2C718200A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{233D653A-DF5A-4595-B35A-B1301BAF5A8B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{234E73E0-2E2A-40DC-B8C3-23397BF3AFAD}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{266DC8C2-A820-4741-BEEB-6440055EE672}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{27F30509-F070-43E4-9CC7-60E9C8F49A47}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{28E88DAD-976F-4C95-90AF-385135480A7D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{29DCF9EA-C123-488F-8532-8D50BCAD22BC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{2C5B1971-2DC3-4FA7-A412-4107FF83A4E2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{2CBB3936-4651-4F66-A94A-25CDCF8E9524}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{314410D6-3AF1-40C6-8315-F031510EEDEA}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{319ACEF4-4594-4E61-B8F0-AC605C1AD97C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{31C54003-6F6C-47D4-837A-605FC6A31E83}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{34707156-F66D-46EC-BC29-303CFC027712}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{3566A070-51A2-4614-9AE6-23CF479A8DBC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{35A6BBE6-3F38-4E52-B313-50B6BBAFB0BD}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{3778F705-88D9-459C-8EBF-1D5DFAEB7A7D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{37913A68-3631-4E5E-9E79-B2145FF9C9ED}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{38FF77EF-440B-4109-9B68-5B728AF13DD4}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{3ADA631C-C171-4162-BCC8-88A07A735217}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{3B63F669-FAC9-4CC0-A723-6066DA56DA11}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{3BF3058E-147A-4136-A323-B0B52F60552B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{3F2EC154-DD8E-4E81-AFB0-45B37BCF9504}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{40374C31-7CAC-4F92-AB32-B30853470EFD}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{40382CBC-B329-47C6-A32B-69B5575E4422}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{41F262D3-DBF4-4899-8E4F-CCF318BFC2EB}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{42468638-2104-49C3-BAD3-6B61E9D8B5D5}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{42B18A8A-9FA3-4AED-AE46-1CA17C223B44}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{452BEE6F-E136-4B03-9A7A-6064AAD75FBC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{463C3C0E-DC16-408C-8399-C828592D72FB}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{46F2C50C-410E-4AF5-8128-0BC8A3AA0200}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{484E74E7-7C4E-406E-BC6F-6A3326318C18}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{48628C1E-E2DB-4B5C-983C-B389611E0D26}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{4865CE82-8FC4-4740-8825-759EB4C765F7}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{48FDB91D-5BD0-4F2D-A637-3B9C486C1B38}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{49B67136-EC90-4C9D-9FFA-7A9BE94775F6}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{49FFA03F-82ED-4AC8-B5B9-5C83B26A5F2D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{4A683C42-0830-40E2-8C2C-FB38B8D42F0A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{4BF0977F-C2C1-4981-85F6-4C26573F78C3}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{4CA5DA01-07AF-4FEC-850F-4F9B1814171F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{516B4CD0-984C-49AB-AEEF-4B1B7983EA94}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{55561BDB-A389-423E-95F7-05C421E8C427}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5659F789-8946-4394-B63E-06F616984CC6}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{56766268-5DD0-4B17-895C-DEB7D9B8629F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{570396BE-9DEE-4D6C-8F59-88747F6E700C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5851DDA5-DA5B-401F-99FC-5BA459AC9E2D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{58CB1D46-CDE5-471C-BBC1-E7CEC17C4FAE}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5A1636A7-11B2-4F6E-B15C-6C909ACEA84E}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5AAF83DC-DE40-4338-991B-8D55D0C27314}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5BB9C181-BF48-4B51-9D9D-A8D1EBF0EEDC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5C0D7915-1810-4452-A838-6777857A5EBA}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5DEFA63B-7E69-4D21-8B51-04B08ADD5476}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5E0F0B7B-A065-4C2F-8A92-40E878D9E90F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{5F65ED94-B37B-497E-8F63-76042003B05E}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{6051001D-5C07-452D-B2AF-1FF6C9A35CA9}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{611F0127-99EA-4C45-93F3-DDF73E19232B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{615279E0-2D0A-4634-B68D-18365F6ED486}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{62017C8E-5966-4BB1-9DEA-1768FD06196A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{63099A2F-8E3B-415D-99D6-9E757A6B079E}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{64810FEF-DF10-4CFD-A6C6-FF5AEB2EC30C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{64A20A3C-4F69-426D-91A5-A1D5DE1C1FE4}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{64A25AC8-296D-4203-B266-DE20A2630595}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{6532D831-9F31-49B2-B00D-B5E63BD457EA}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{658B9F41-4D74-47E7-ACB2-B1AE95522502}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{65AFD1C3-9CA1-4FDE-81F2-DCBF02FF25C3}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{679F25D7-AA7A-4067-AC19-DA33EB8FF884}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{68082513-B694-426F-95B2-0808886D23AB}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{6BEC2BEC-BD23-4207-A394-A99CD9A5D10C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{6C439E06-DD63-4965-8AC3-316231E09C20}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{6DA61EA9-23CE-49F9-95D4-375461E88D7B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{70D3A65C-D28A-4FB6-A89C-AC578ECEF445}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{72E2A402-AEEA-4EDB-A1B0-DAB926116D2B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{74303DA4-DDE0-4F0B-9BC4-7124EE302F41}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{74315615-23A8-4F71-BCEF-7B1D1BB25A65}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{74922080-269E-4A08-8C5B-6E5D93F5F5F1}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{781DB669-E785-4E80-92DB-9569A933F53C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{78CA70B1-836F-4301-BD20-72DBDB3C5E92}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{792542C4-F870-4A6F-AA5F-3C3D34BE6BEA}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{792E6596-BE5C-45D9-AC29-96427A98CB21}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{7A136328-BAF2-403A-A12E-38BF8291A6A2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{7A3EFDCD-D657-42B6-B4F7-A9403B557BFB}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{7AB6D108-37F6-4893-B308-11D459CFC43B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{7AD3A0D0-06C9-41D6-B0CC-F835F7742510}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{7FC228FC-A996-4132-892B-18221D3EB6FC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{8394D890-B827-4927-8448-1EF269904E6B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{840153FE-187D-4CBA-A990-17EAB2295CF2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{84AFAAA0-B340-4C3C-94B3-5889C2EADC8F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{859C02FF-0578-4082-B10B-8DCCEAE4301D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{8619A690-F80B-4EC7-A191-F8F0C2E4D82E}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{88235AFC-4840-464D-8647-D55C5C274E59}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{88D06EF2-E0BE-4BFC-8CF9-6FCC81ED66CE}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{89B0A9BB-CC55-41CF-A13D-D915BB67A129}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{8B2CB751-96E2-46F5-8704-8123B201896C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{8B536A6E-27DA-4754-88D8-6585587305AE}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{8B66DBEB-15E8-419A-BF87-731AB7888A45}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{8E20350D-C179-46F5-9744-1162D2C03D86}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{8F93A27C-3789-4173-B735-4C7C0E135580}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{8FD8CDD1-123B-4A23-AC7F-3760B480ECB9}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{907F111D-B4DE-47F4-8367-734628EC701F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{90AD3642-AA37-47E6-90AF-ED38FEBEF67D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{91FB4BE8-7027-41CD-92CB-77F8DE210977}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{92CDF45C-4428-448A-9CDE-45A0D620C0C2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{93440AB2-EFB0-4148-9586-00438A82FAA7}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{960E2DB5-6111-4889-81B8-AACE8F9E5CAE}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{968468F6-543C-42F1-8D52-89BDF3E4B52D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{970FB07F-B621-414B-986D-3E0A7B4C63F6}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{987AB343-DABF-4D81-8411-DCBFED00C534}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{998EDE57-1F50-45BC-9998-4351B3A5613A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{9BC411DE-A8C8-401E-88EA-4CF37361BEC8}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{9C3EAE78-D2A1-4DD4-9EB0-2635F7481658}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{9C9EA34D-0880-4642-95C9-646B9A970FEE}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{9E7065E5-32CD-45A9-9739-5923983B3B3B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{9F5AF3DE-7677-4E0C-8E51-D724141EBD54}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A2510F0C-C6E2-4D9D-8A81-B7647EF2D945}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A260E07B-819E-491C-ABDF-5BEE3CE5AB8A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A347A527-A369-4F58-B7DA-E64B013FA285}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A4964116-0D1F-4A27-9AE2-4306E512AA73}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A4DF4FFE-4D63-46E3-B569-B19AAB16DC54}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A59EB8A0-7B4A-4993-870B-B07683A9BBD6}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A6FB1862-5DA8-4EF8-913B-C5A061D9BAEC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A7B0BC67-FA3B-475A-94FC-9FE35C5D5AFF}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A7C717BF-1DF5-443D-96E0-8D4163AE29E5}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A7DBAB9D-0E75-43EE-86BF-D6891150C51D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A88CB3D7-BED3-40D2-976A-218C8CB0A031}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A9051E91-7D92-4E89-943E-21BEC07EE1D2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{A921E378-3282-4099-83AC-01F4CFD6C256}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{AA518868-2C24-4BD3-9368-94B001EB2F5E}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{AB1C1852-2EA1-4EA2-9FC7-B62A5A5BF51A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{AB8078FE-FB2E-4E3B-9875-10891C000CAC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{ABA92445-04CD-4A83-A41B-40009287BAFA}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{AC5F8349-EC2B-4C75-8332-255D3194278A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{ACDF3CEF-075B-4AD7-97D4-CC24FDE1324A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{AD3C0C35-9D49-4529-86C0-12F0C0B7D55B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{B24FC088-0A78-4BF7-966A-1BEF0512740F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{B266BD8A-416A-4B3A-9D94-4159B5FA00AB}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{B4CC075D-2FA8-4C72-A814-513B720752A2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{B4EF71C5-6B3D-4BF2-B4F3-C95DE5DC7B22}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{B65558FF-F136-4863-B600-CB944C76258A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{B7AC97B4-BAC5-4028-8A0B-351E39C3D840}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{BAA4BA69-9464-4B1A-A9DB-1167912AC486}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{BDE8F003-3651-4162-BA30-2EA8E66F7817}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{BEC836E3-F54E-45F3-B751-624314FD845D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{BF33CC99-3711-4962-B816-A829668B609D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C0001C90-0960-4651-AE57-828DF1D7AC38}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C17773FE-88C3-4C51-B18E-7374742069FC}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C19007E5-1DAC-4BD0-ABF7-D3978F03D04F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C3C247C7-85F9-40B4-AEF5-6E4D1DCCA57C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C43A93EB-D5CA-4DB6-889C-C72D5835369B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C4D9A85E-D5E4-41DF-957E-DE34092097BA}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C5A482B3-C503-4BDA-9C9D-EFB2D2B24AB2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C5F02569-B1C3-43FA-885C-77B24985B3AE}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C5FE2848-EBDD-44EE-B26E-ED2A651776D2}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C69D5EDA-F56B-4776-AD12-2BE1BE07D07D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C6E91865-4908-4B0F-B615-F9748C670B25}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{C7E3F8C5-6F57-49AB-A01B-26EA6F4500C4}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{CB1358FF-36BF-4F67-B921-4147921CC10A}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{CC5ACF9B-36D1-4FCC-A00A-82069BF0D384}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{CE5DC280-4057-4041-8B32-DB0FE1D33508}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D0146F41-F6E4-4D1A-90BB-384DFFA4DA76}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D0B39A7E-0DB8-4811-93AC-DEC220AE3D0C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D30FC9C8-56E2-456D-B9AD-23EF97B72D43}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D357C098-619E-4C73-9E4E-938B38BA945B}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D441245A-8B4D-44D9-B1B3-DA0A93D97138}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D5424CA4-F222-4B3D-AA74-DE94BA4944FA}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D6DD4399-0837-4C1E-AAA9-BF05A9D35ED4}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D79C9049-FC92-438E-9880-1BCB6E3CCDE4}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D7BE6D2D-3AAF-4E4D-9CC0-3E698753E2E5}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{D861AE1A-8379-4D5B-AF1A-B9DFD5E32A91}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{DB0CCBB2-4CE5-4E21-8F5B-14F2216E0364}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{DBC49D18-5697-430B-AB46-F9B40459DF9D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{DD3963F1-C0FC-4754-B194-C136C9ED6FC8}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{DE113526-5645-47AE-B668-6EDE153045F3}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{E1E197DA-5926-4711-85F1-D811AB47F90C}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{E2B6BE21-1083-4249-AF43-A12BD43BF5EF}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{E3BDA716-F398-4EED-9E77-B1230EB94F7F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{E506C0A3-4095-45E5-8181-76691B915494}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{E7E9C97B-3BF1-48A9-8BCD-268199F9593D}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{E984576B-D1B7-421F-BD39-8E1F2FAC3B60}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{EC19DF5D-9D70-440D-82F2-6AB11A668061}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{F12BB7ED-68E9-4981-AA84-6E5C9F853C54}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{F183DE9C-540B-48AC-91E5-1E2D1E824ECF}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{F30F99FD-91E6-4877-A92F-CB73338B8759}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{F379F198-6838-4873-AD0A-BFD378D93955}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{F6018C22-357C-4ABB-9FD3-2F0D0DFD17D0}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{F7D40740-EE44-4E1F-8908-706E2BC6D51F}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{F8C4DD3D-2669-418A-B5C1-81D7B65922AB}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{F9D997BF-9937-4C28-A2CA-4739B93EB9F4}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{FD63A2B3-51D3-4E08-962D-312094A96A53}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{FDD86484-501A-40FB-8BC3-B969EDC88803}
Successfully deleted: [Empty Folder] C:\Users\amilton\appdata\local\{FE5A04BA-1434-4358-A7B6-328B4FCC555D}

~~~ FireFox

Successfully deleted: [File] C:\Users\amilton\AppData\Roaming\mozilla\firefox\profiles\zrky3f9n.default\user.js
Successfully deleted: [File] C:\Users\amilton\AppData\Roaming\mozilla\firefox\profiles\zrky3f9n.default\invalidprefs.js
Successfully deleted: [File] C:\Users\amilton\AppData\Roaming\mozilla\firefox\profiles\zrky3f9n.default\searchplugins\babylon.xml
Successfully deleted: [File] C:\Users\amilton\AppData\Roaming\mozilla\firefox\profiles\zrky3f9n.default\searchplugins\delta.xml
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{acaa314b-eeba-48e4-ad47-84e31c44796c}
Successfully deleted the following from C:\Users\amilton\AppData\Roaming\mozilla\firefox\profiles\zrky3f9n.default\prefs.js

user_pref("extensions.crossrider.bic", "1420f6dce5d235c0e0485cd6878121e5");
user_pref("extensions.delta.admin", false);
user_pref("extensions.delta.aflt", "babsst");
user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
user_pref("extensions.delta.autoRvrt", "false");
user_pref("extensions.delta.dfltLng", "en");
user_pref("extensions.delta.excTlbr", false);
user_pref("extensions.delta.ffxUnstlRst", true);
user_pref("extensions.delta.id", "c46067e0000000000000b80305ac4d7a");
user_pref("extensions.delta.instlDay", "15854");
user_pref("extensions.delta.instlRef", "sst");
user_pref("extensions.delta.newTab", false);
user_pref("extensions.delta.prdct", "delta");
user_pref("extensions.delta.prtnrId", "delta");
user_pref("extensions.delta.rvrt", "false");
user_pref("extensions.delta.smplGrp", "none");
user_pref("extensions.delta.tlbrId", "base");
user_pref("extensions.delta.tlbrSrchUrl", "");
user_pref("extensions.delta.vrsn", "1.8.21.5");
user_pref("extensions.delta.vrsnTs", "1.8.21.510:01:07");
user_pref("extensions.delta.vrsni", "1.8.21.5");
user_pref("extensions.delta_i.babExt", "");
user_pref("extensions.delta_i.babTrack", "affID=119816&tt=gc_");
user_pref("extensions.delta_i.srcExt", "ss");
Emptied folder: C:\Users\amilton\AppData\Roaming\mozilla\firefox\profiles\zrky3f9n.default\minidumps [9 files]

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14/11/2013 at 9:38:19,26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

por Convidado Qui 14 Nov 2013, 10:26

Muito bom!!

Em seguida faça esses procedimentos indicados acima:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Depois faça o seguinte:

Vamos analisar um arquivo suspeito no site VirusTotal.

Siga as isntruções abaixo:

---------------------------------------------------------------------

1) Copie o caminho do arquivo abaixo em Azul.
C:\Program Files (x86)\ViewPassword\ViewPassword.exe

2) Acesse ao site -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e clique no botão (Selecionar Arquivo)
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

3) Abrindo uma janela pequena coloque o caminho do arquivo conforme ilustrado na imagem abaixo com uma seta, e clique em (Abrir)
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*E por último clique no botão --> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Aguarde a análise, ao finalizar, copie o link do endereço e cole aqui em seu tópico para eu verificar juntamente com o log do AdwCleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt e o log do Zoek que estará em C:\zoek-results

por lilian.asa Qui 14 Nov 2013, 11:21

Este é o do Zoek.

Zoek.exe Version 4.0.0.5 Updated 09-November-2013
Tool run by amilton on 14/11/2013 at 10:38:53,27.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\amilton\Desktop\zoek.exe [Script inserted]

==== Older Logs ======================

C:\zoek-results2013-11-14-122805.log 20305 bytes

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\mozilla firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\amilton\AppData\Roaming\Mozilla\Firefox\Profiles\zrky3f9n.default
4BF70B35B943BD73BD6E13EB7C1BA4B3 - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll - Shockwave Flash
2EE9DCAE1D70ABF4D058688DE35F8221 - C:\windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.250.16
575820ED1CB017382CC109E410E8A527 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll - RocketLife Secure Plug-In Layer
E7BC792810EC02DD1F7ED25D830E9324 - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll - Shockwave Flash
0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Users\amilton\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
15E298B5EC5B89C5994A59863969D9FF - C:\windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
hbcennhacfaagdopikcegfcobcadeocj - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx[]
icdlfehblmklkikfigmjhbmmpmkmpooj - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx[]
jmojojliiicbbihpjmiepllaiflnjobc - C:\Program Files (x86)\ViewPassword\134.crx[]
mhkaekfpcppmmioggniknbnbdbcigpkk - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx[]
pfndaklgolladniicklehhancnlgocpp - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.terra.com.br/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.terra.com.br/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== shortcuts on Users Desktops ======================

C:\Users\amilton\Desktop\Continue Flv Player Installation.lnk - C:\Users\amilton\AppData\Local\Temp\ICReinstall_FlvPlayerSetup.exe /RR
C:\Users\amilton\Desktop\DVD Shrink 3.2.lnk - C:\Program Files (x86)\DVD Shrink\DVD Shrink 3.2.exe
C:\Users\amilton\Desktop\Free YouTube Download.lnk - C:\Program Files (x86)\DVDVideoSoft\Free YouTube Download\FreeYTVDownloader.exe
C:\Users\amilton\Desktop\FSViewer.exe - Atalho.lnk - C:\Program Files (x86)\FastStone Image Viewer\FSViewer.exe
C:\Users\amilton\Desktop\HD SPEED.lnk - D:\
C:\Users\amilton\Desktop\Revo Uninstaller.lnk - C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Users\amilton\Desktop\ATALHO\Advanced SystemCare 6.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASC.exe
C:\Users\amilton\Desktop\ATALHO\Avira Control Center.lnk - C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
C:\Users\amilton\Desktop\ATALHO\Easy Settings.lnk - C:\Program Files (x86)\Samsung\Easy Settings\ControlCenter.exe
C:\Users\amilton\Desktop\ATALHO\Easy Support Center.lnk - C:\Program Files (x86)\Samsung\Easy Support Center\SamoyedMain.exe
C:\Users\amilton\Desktop\ATALHO\Format Factory.lnk - C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
C:\Users\amilton\Desktop\ATALHO\Manual da PictureMate Charm.lnk - C:\Program Files (x86)\epson\guide\pmcharm_p\manual.pdf
C:\Users\amilton\Desktop\ATALHO\MediaCoder - Extrai audio DVD.lnk - C:\Program Files (x86)\MediaCoder\MediaCoder.exe
C:\Users\amilton\Desktop\ATALHO\Multimedia POP.lnk - C:\Program Files\Samsung\MultimediaPOP\MultimediaPOP.exe
C:\Users\amilton\Desktop\ATALHO\Photoshop CS3.lnk - C:\Program Files (x86)\Adobe\Adobe Photoshop CS3\Photoshop.exe
C:\Users\amilton\Desktop\ATALHO\PrintProjects.lnk - C:\Program Files (x86)\PrintProjects\PhotoProduct.exe
C:\Users\amilton\Desktop\ATALHO\Samsung AllShare.lnk - C:\Program Files (x86)\Samsung\AllShare\AllShare.exe
C:\Users\amilton\Desktop\ATALHO\Samsung Recovery Solution 5.lnk - C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Manager1.exe
C:\Users\amilton\Desktop\ATALHO\Skype.lnk - C:\windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe
C:\Users\amilton\Desktop\ATALHO\Smart Defrag 2.lnk - C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Users\amilton\Desktop\ATALHO\SW Update.lnk - C:\Program Files (x86)\Samsung\SW Update\sManager.exe
C:\Users\amilton\Desktop\ATALHO\TeamViewer - Atalho.lnk - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
C:\Users\amilton\Desktop\ATALHO\µTorrent.lnk - C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Users\UpdatusUser\Desktop\DVD Shrink 3.2.lnk - C:\Program Files (x86)\DVD Shrink\DVD Shrink 3.2.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Bluephotos.lnk - C:\Program Files (x86)\Sigi Profissional\Bluephotos\SIGIPROFISSIONAL.exe
C:\Users\Public\Desktop\Easy File Share.lnk - C:\Program Files (x86)\Samsung\Easy File Share\EasyFileShare.exe
C:\Users\Public\Desktop\Epson Easy Photo Print.lnk - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPQuicker.exe
C:\Users\Public\Desktop\FastStone Photo Resizer.lnk - C:\Program Files (x86)\FastStone Photo Resizer\FSResizer.exe
C:\Users\Public\Desktop\Home Center da Impressora Multifuncional KODAK.lnk - C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
C:\Users\Public\Desktop\Manual da PictureMate Charm.lnk - C:\Program Files (x86)\epson\guide\pmcharm_p\manual.pdf
C:\Users\Public\Desktop\Nero StartSmart.lnk - C:\Program Files (x86)\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8
C:\Users\Public\Desktop\Quick Starter.lnk - C:\Program Files (x86)\Samsung\Quick Starter\Quick Starter.exe
C:\Users\Public\Desktop\SW Update.lnk - C:\Program Files (x86)\Samsung\SW Update\sManager.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung\SW Update.lnk - C:\Program Files (x86)\Samsung\SW Update\sManager.exe

==== shortcuts in Quick Launch ======================

C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ACE Mega CoDecS Pack DashBoard.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\DashBoard\DashBoard.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BSPlayer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\BSPlayer\bsplayer.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Media Player Classic.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Media Player Classic\mplayerc.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero Home.lnk - C:\Program Files (x86)\Nero\Nero 7\Nero Home\NeroHome.exe -ScParameter=8
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart.lnk - C:\Program Files (x86)\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Samsung AllShare.lnk - C:\Program Files (x86)\Samsung\AllShare\AllShare.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk - C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\6ae9253151c0e794\PrintProjects.lnk - C:\Program Files (x86)\PrintProjects\PhotoProduct.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\windows\system32\control.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Format Factory.lnk - C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\mozilla firefox\firefox.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\windows\explorer.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Photo Gallery.lnk - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
C:\Users\amilton\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ACE Mega CoDecS Pack DashBoard.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\DashBoard\DashBoard.exe
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BSPlayer.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\BSPlayer\bsplayer.exe
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Media Player Classic.lnk - C:\Program Files (x86)\ACE Mega CoDecS Pack\Media Player Classic\mplayerc.exe
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jmojojliiicbbihpjmiepllaiflnjobc deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings deleted successfully

==== Empty IE Cache ======================

C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\amilton\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\amilton\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\amilton\AppData\Local\Mozilla\Firefox\Profiles\zrky3f9n.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\amilton\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\amilton\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 14/11/2013 at 11:18:11,96 ======================

por R. Turbo Qui 14 Nov 2013, 11:28

Falta só fazer o procedimento com o Adwcleaner e o envio do arquivo para o VirusTotal.

por lilian.asa Qui 14 Nov 2013, 12:13

Dúvida:
O Adwcleaner me pede para desmarcar o que eu não quero excluir. Não sei onde desmarcar.

por lilian.asa Qui 14 Nov 2013, 12:14

Tô com medo de excluir o que não devo.

por **Power Max** Qui 14 Nov 2013, 12:18

lilian.asa escreveu:Dúvida:
O Adwcleaner me pede para desmarcar o que eu não quero excluir. Não sei onde desmarcar.

Ele é um programa seguro, não precisa desmarcar nada, é só clicar no botão Limpar.

E depois é só postar o log dele aqui no seu tópico.

por lilian.asa Qui 14 Nov 2013, 14:08

Espero ter concluído!

# AdwCleaner v3.012 - Relatório criado 14/11/2013 às 12:22:36
# Atualizado 11/11/2013 por Xplode
# Sistema Operacional : Windows 7 Home Premium Service Pack 1 (64 bits)
# Usuário : amilton - SPEEDAMILTON
# Executando de : C:\Users\amilton\Desktop\adwcleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\Users\amilton\AppData\LocalLow\Plus-HD-1.6
Arquivo Deletada : C:\Users\amilton\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
Arquivo Deletada : C:\Users\amilton\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage

***** [ Atalhos ] *****

***** [ Registro ] *****

Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Chave Deletedo : HKLM\SOFTWARE\Classes\AmiBs.Installer
Chave Deletedo : HKLM\SOFTWARE\Classes\AmiBs.Installer.1
Chave Deletedo : HKCU\Software\82d8d9b23bb941
Chave Deletedo : HKLM\SOFTWARE\82d8d9b23bb941
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{A6FEED89-3BCD-4D19-9DC2-3E613A80A2A4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{1C1356DA-1E98-4810-A9F6-18D89BD1C0C0}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90DEFAB2-B6EF-4086-A4FE-372EC4E24275}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24DBDBC0-3CFE-4A1F-9C75-C747BA99340C}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Chave Deletedo : HKCU\Software\lollipop
Chave Deletedo : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKCU\Software\AppDataLow\Software\uTorrentControl_v2
Chave Deletedo : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Chave Deletedo : HKLM\Software\uTorrentControl_v2
Chave Deletedo : [x64] HKLM\SOFTWARE\Tarma Installer
Chave Deletedo : [x64] HKLM\SOFTWARE\V9Software

***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16720

-\\ Mozilla Firefox v23.0.1 (pt-BR)

[ Arquivo : C:\Users\amilton\AppData\Roaming\Mozilla\Firefox\Profiles\zrky3f9n.default\prefs.js ]

-\\ Google Chrome v30.0.1599.101

[ Arquivo : C:\Users\amilton\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [4862 octets] - [14/11/2013 11:45:53]
AdwCleaner[R1].txt - [4922 octets] - [14/11/2013 12:10:52]
AdwCleaner[R2].txt - [4982 octets] - [14/11/2013 12:22:01]
AdwCleaner[S0].txt - [4699 octets] - [14/11/2013 12:22:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4759 octets] ##########

por **Power Max** Qui 14 Nov 2013, 14:22

Propagandas a todo momento no PC 648673379

Mais problemas foram removidos pelo AdwCleaner.
______________________

:veja:Faltou você postar o link com a análise do arquivo abaixo no site VirusTotal:

C:\Program Files (x86)\ViewPassword\ViewPassword.exe
__________________

:veja:Siga, por gentileza, as dicas deste tutorial para fazer uma limpeza de seu PC com o Malwarebytes:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log do Malwarebytes e nos diga como está o seu PC após este procedimento.

Ficamos no aguardo.

por lilian.asa Qui 14 Nov 2013, 14:54

Senhor!!!!

Quando eu coloco o nome do arquivo cfe. a seta indica e mando abrir ele me diz que o
caminho é inexistente ou inválido.
_________________________

Foi concluído o escaneamento com o Malwarebytes! Falta fazer alguma coisa mais?

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Versão da Base de Dados: v2013.11.14.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
amilton :: SPEEDAMILTON [administrador]

Proteção: Permitir

14/11/2013 15:23:04
mbam-log-2013-11-14 (15-23-04).txt

Tipo de Verificação: Verificação Rápida
Opções de verificações ativadas: Memória | Inicialização | Registro | Sistema de arquivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
Opções de verificação desativadas: P2P
Objetos escaneados: 230097
Tempo decorrido: 7 minuto(s), 38 segundo(s)

Processos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)

Módulos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)

Chaves de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Valores de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Itens de Dados no Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Pastas Detectadas: 0
(Não foram detectados ítens maliciosos)

Arquivos Detectados: 1
C:\Users\amilton\Downloads\913-aTubeCatcher.exe (PUP.Optional.Spigot.A) -> Enviado para a Quarentena e deletado com sucesso.

(fim)

por **Power Max** Qui 14 Nov 2013, 16:00

Quando eu coloco o nome do arquivo cfe. a seta indica e mando abrir ele me diz que o
caminho é inexistente ou inválido.

Então é porque certamente o arquivo não existe mais.
___________________________

Propagandas a todo momento no PC 648673379

Mais um problema foi removido pelo Malwarebytes.
____________________

:veja:Só que no seu log do Malwarebytes está constando que você fez só uma verificação rápida com ele e é importante fazer a verificação completa que é mais abrangente.

Importante: como está o seu PC após estes procedimentos?

por lilian.asa Qui 14 Nov 2013, 17:21

Olha! O meu PC até agora está ótimo! Não abriu nenhuma propaganda indesejada mais desde que
fiz os procedimentos. Espero ter resolvido!
Agradeço imensamente à tua atenção.
Um grande abraço!

por **Power Max** Qui 14 Nov 2013, 17:30

Olha! O meu PC até agora está ótimo! Não abriu nenhuma propaganda indesejada mais desde que
fiz os procedimentos. Espero ter resolvido!
Agradeço imensamente à tua atenção.

Ficamos felizes que o problema tenha sido resolvido.
_____________________

Propagandas a todo momento no PC 772309

Delete o Zoek e o arquivo C:\zoek-results.txt

Pode desinstalar também o Malwarebytes.
_______________________

Para remover as ferramentas utilizadas na limpeza de seu computador e para criar um novo ponto de restauração limpo e sem problemas, faça o seguinte:

:veja:Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de Xplode) e salve-o no Desktop (Área de Trabalho)

*Execute-o, deixe selecionadas as opções Remove disinfection tools e Purge system restore

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Clique [Run]
______________________

isso aí!

Foi um prazer ajudar, conte sempre conosco! Propagandas a todo momento no PC 960671

por Conteúdo patrocinado

Propagandas a todo momento no PC

Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Re: Propagandas a todo momento no PC

Seg	Ter	Qua	Qui	Sex	Sáb	Dom
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31