sweet-page.com

por cristiane_noberto Ter 14 Jan 2014, 01:28

meu computador é um itautec, tenho windows starter e ele nunca foi la essas coisas rapidas quando navego na internet, porem agora a coisa ficou seria, ele instalou sozinho esses malwere o sweet-page.com . li sobre na internet e estou com os sintomas , meu sistema nao esta tao lento porem os navegadores (TODOS) estao extremamente lentos que ate perdem a conexao. ja passei o antivirus avast fiz escaneamento minuscioso com ele e nada de melhorar ou desqparecer. ja tentei excluir nas propriedades mas ele sempre volta. ja tentri procurar nas extensoes e nada dele... nao sei mais o que fazer, se tento formatar ou se existe algum programa q posso desinstala-lo. mas vale lembrar q meu computador ta tao lento que mal consigo acessar o google! nao sei mais o que fazer!!!
obrigada!

por Banido Ter 14 Jan 2014, 09:43

1) Faça o download do ((RunScanner)) No link Abaixo e salve no desktop.
Link do Download--> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

2) executa-o, e clique em Ok.

3) Em seguida clique no botão ((Scan Computer)) aguarde o termino aparecerá os arquivos listados.

4) Ao termino do scam, clique em ((save. log file)), salve com qualquer nome que você quiser, quando salvar abrirá um log automatico copia ele todo e cole aqui.

=========================================

Depois faça o procedimento abaixo:

(1) Faça o Download do AdwareCleanner no link abaixo:
Download --> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

2) Clique com o botão direito do mouse em AdwCleaner.exe e escolha a opção Executar como administrador.

3) clique no botão Examinar e aguarde o termino:

4) Assim que a verificação tiver sido concluída, clique no botão Limpar, ao termino clique me OK -> OK, o PC será reiniciado!

* Ao iniciar o PC novamente abrir um relatório do AdwareCleaner, Copie ele todo e cole aqui no seu tópico.

por cristiane_noberto Ter 14 Jan 2014, 14:43

estou tentando mas o navegador ta tao lerdo q ten uns 5 min q digitei e nao sai da pagina do sweet page.... estou acessando do celular... mas me diz, o q sao estes links q vc me pediu pra postar?? pra q serve?? obrigaaaaada!!

por Banido Ter 14 Jan 2014, 15:00

cristiane_noberto escreveu:estou tentando mas o navegador ta tao lerdo q ten uns 5 min q digitei e nao sai da pagina do sweet page.... estou acessando do celular... mas me diz, o q sao estes links q vc me pediu pra postar?? pra q serve?? obrigaaaaada!!

Queres a minha ajuda ou não ??

*O primeiro é para fazer um analise, para verificar se existe malwares em seu sistema!
*O Segundo programa ADWCleanner, é para limpar o navegador e remover Adwares instalado em seu navegador.

Tente instalar outro navegador diferente, e veja se consegue baixar os programas, Caso não consiga faça o Download dos programas em outro computador e salve os programas em um Pendrive, e faça os procedimentos no computador com problemas.

Aguardo!

por cristiane_noberto Ter 14 Jan 2014, 15:08

me desculpe, sou um pouco curiosa, e como não sei como peguei esse malware fiquei meio receosa, já instalei o programa estou esperando a conclusão, já posto!

por cristiane_noberto Ter 14 Jan 2014, 15:09

Esse é o relatório do primeiro programa:

Runscanner logfile [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* = signed file
- = file not found

General info
------------
Computer name : USUARIO-PC
Creation time : 14/01/2014 15:04:15
Hosts <> 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 9.10.9200.16750
OS : Windows 7 Starter
OS Build : 7601
OS SP : Service Pack 1
RunScanner Version : 2.0.0.60
User Language : Português (Brasil)
User rights : Administrator
Windows folder : C:\windows

Running processes
-----------------
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
* C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
* C:\Windows\System32\atieclxx.exe (AMD)
* C:\Windows\System32\atiesrxx.exe (AMD)
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
* C:\Windows\System32\wininit.exe (Microsoft Corporation)
* C:\Windows\System32\winlogon.exe (Microsoft Corporation)
* C:\Windows\System32\services.exe (Microsoft Corporation)
* C:\Windows\System32\spoolsv.exe (Microsoft Corporation)
* C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
* C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
* C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe (Motorola Solutions, Inc.)
* C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe (Motorola Solutions, Inc.)
* C:\Program Files\Motorola\Bluetooth\audiosrv.exe (Motorola Solutions, Inc.)
* C:\Program Files\Motorola\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.)
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Advanced Micro Devices Inc.)
* C:\Program Files\ChiconyCam\CECAPLF.exe (Chicony)
* C:\Users\usuario\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
* C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)
* C:\Windows\System32\dwm.exe (Microsoft Corporation)
* C:\Windows\System32\smss.exe (Microsoft Corporation)
* C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
* C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
* C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
* C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
* C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
* C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
* C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
C:\Program Files\Hotkey\Hotkey.exe
* C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
* C:\ProgramData\InstallBrainService\ibsvc.exe
* C:\windows\system32\audiodg.exe (Microsoft Corporation)
* C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
* C:\Windows\System32\lsass.exe (Microsoft Corporation)
* C:\Windows\System32\SearchFilterHost.exe (Microsoft Corporation)
* C:\Windows\System32\SearchProtocolHost.exe (Microsoft Corporation)
C:\Program Files\Hotkey\PowerBiosServer.exe
* C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
* C:\Windows\System32\rundll32.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\taskhost.exe (Microsoft Corporation)
* C:\Windows\System32\csrss.exe (Microsoft Corporation)
* C:\Windows\System32\csrss.exe (Microsoft Corporation)
* C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
* C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
* C:\Users\usuario\Downloads\runscanner.exe (Runscanner.net)
* C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
* C:\Windows\System32\lsm.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation)
C:\Program Files\Oceanis\SystemSetting\WallPaperAgent.exe (Oceanis)
* C:\Windows\explorer.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)

Unrated items
-------------
002 * C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
002 * C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
002 * C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola Solutions, Inc.)
002 * C:\Program Files\ChiconyCam\CECAPLF.exe (Chicony)
002 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
002 * c:\program files\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
003 * C:\Users\usuario\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
005 C:\PROGRA~1\Hotkey\Hotkey.exe
006 C:\PROGRA~1\Hotkey\Hotkey.exe
010 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Activation Licensing Service)
010 * C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Acrobat Update Service)
010 * C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe® Flash® Player Update Service 11.9 r900)
010 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (AMD Fuel Service)
010 * C:\Program Files\AVAST Software\Avast\AvastSvc.exe (avast! Service)
010 * C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe (Bluetooth Device Manager)
010 * C:\Program Files\Motorola\Bluetooth\audiosrv.exe (Bluetooth Media Service)
010 * C:\Program Files\Motorola\Bluetooth\obexsrv.exe (Bluetooth OBEX Service)
010 * C:\ProgramData\InstallBrainService\ibsvc.exe (Installer)
010 * C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (maintenanceservice.exe)
010 C:\Program Files\Hotkey\PowerBiosServer.exe (PowerBiosServer)
010 * C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe (rndlresolversvc.exe)
011 * C:\windows\system32\drivers\aswRvrt.sys (aswRvrt.sys)
011 * C:\windows\system32\drivers\aswVmm.sys (aswVmm.sys)
011 * C:\windows\system32\drivers\aswMonFlt.sys (avast! File System Minifilter for Windows 2003/Vista)
011 * C:\windows\system32\drivers\aswSP.sys (avast! self protection module)
011 * C:\windows\system32\drivers\aswTdi.sys (avast! TDI Filter Driver)
011 * C:\windows\system32\drivers\aswSnx.sys (avast! Virtualization Driver)
011 * C:\windows\system32\drivers\aswRdr2.sys (avast! WFP Redirect Driver)
011 * C:\windows\system32\drivers\gbpkm.sys (GbPlugin Device Driver)
011 * C:\windows\system32\DRIVERS\gbpndisrd.sys (GbPlugin NDIS Device Driver)
011 * C:\windows\system32\DRIVERS\jmcr.sys (JMCR)
011 * C:\windows\system32\DRIVERS\JME.sys (JMicron NDIS6.20 Driver)
011 * C:\windows\system32\DRIVERS\gbpndisrd.sys (NdisrdMP)
011 * C:\windows\system32\drivers\aswStm.sys (Stream Filter)
035 * C:\Program Files\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe (Google Inc.) {8A69D345-D564-463c-AFF1-A69D9E530F96}
041 * C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}
041 C:\Program Files\BabylonToolbar\BabylonToolbar\1.8.4.9\BabylonToolbarTlbr.dll (Babylon Ltd.) {98889811-442D-49dd-99D7-DC866BE87DBC}
042 GUID / CLSID not found {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}
042 GUID / CLSID not found {bd707fe6-39f6-4bda-9265-86a76719bdc5}
042 GUID / CLSID not found {2670000A-7350-4f3c-8081-5663EE0C6C49}
047 Zone: imagem.caixa.gov.br : *.imagem.caixa.gov.br
047 Zone: internetbanking.caixa.gov.br : *.internetbanking.caixa.gov.br
047 Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] : *.www.caixa.gov.br
050 * C:\Program Files\GbPlugin\gbiehcef.dll (Caixa Economica Federal) {E37CB5F0-51F5-4395-A808-5FA49E399003}
052 C:\Program Files\BabylonToolbar\BabylonToolbar\1.8.4.9\bh\BabylonToolbar.dll (Babylon BHO) {2EECD738-5844-4a99-B4B6-146BF802613B}
052 * C:\Users\usuario\AppData\Roaming\Complitly\Complitly.dll (SimplyGen) {0FB6A909-6086-458F-BD92-1F8EE10042A0}
052 * C:\Program Files\GbPlugin\gbiehcef.dll (Caixa Economica Federal) {C41A1C0E-EA6C-11D4-B1B8-444553540003}
052 * C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
052 C:\windows\system32\Newtabs_v9.dll (Newtabs. inc) {F386E548-C533-472E-8C61-C026FB14FEA9}
052 * C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) {3049C3E9-B461-4BC5-8870-4C09146192CA}
052 C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll (Oceanis) {D381FF29-7CFB-4D4E-B92A-C4EDDC696614}
060 GUID / CLSID not found {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
061 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
061 * C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola Solutions, Inc.) {0A7D34C2-E9DA-48A1-9E34-0CDFC2DE3B44}
061 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll (Advanced Micro Devices, Inc.) {5E2121EE-0300-11D4-8D3B-444553540000}
061 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiamaxx.dll (Advanced Micro Devices, Inc.) {872A9397-E0D6-4e28-B64D-52B8D0A7EA35}
061 * C:\Program Files\GbPlugin\gbiehCef.dll (Caixa Economica Federal) {98C11555-BC81-40aa-A053-DAADC5630003}
061 * C:\Program Files\GbPlugin\gbiehcef.dll (Caixa Economica Federal) {E37CB5F0-51F5-4395-A808-5FA49E399003}
061 * C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola Solutions, Inc.) {862D80CE-A2A4-45D4-8008-7F40766F5FEA}
061 * c:\program files\real\realplayer\rpshell.dll (RealNetworks, Inc.) {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}
061 C:\Program Files\WinRAR\rarext.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
062 * C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (Adobe Systems, Inc.) {F9DB5320-233E-11D1-9F84-707F02C10627}
067 * C:\Program Files\GbPlugin\gbiehCef.dll (Caixa Economica Federal)
073 Adobe Flash Player Updater.job : C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
073 FacebookUpdateTaskUserS-1-5-21-1006929421-292827822-3567958955-1001Core.job : C:\Users\usuario\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
073 FacebookUpdateTaskUserS-1-5-21-1006929421-292827822-3567958955-1001UA.job : C:\Users\usuario\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
100 Default_Page_URL HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Default_Page_URL HKLM : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Default_Search_URL HKLM : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Search Page HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Search Page HKLM : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 SearchAssistant HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Start Page HKCU : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
100 Start Page HKLM : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
104 * C:\windows\system32\Macromed\Flash\Flash32_11_9_900_170.ocx (Adobe Systems, Inc.) {D27CDB6E-AE6D-11CF-96B8-444553540000}
105 &Enviar para o OneNote : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
105 E&xportar para o Microsoft Excel : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
170 {2e46dd22-dcdc-11e2-b5d1-000df0a28a8c} : E:\AutoRun.exe
170 {86147be6-a94f-11e2-b6df-f46d31b61a9c} : E:\AutoRun.exe
170 {99b33da0-a63e-11e2-8299-0040a724da05} : E:\AutoRun.exe
170 {99b33db4-a63e-11e2-8299-0040a724da05} : E:\AutoRun.exe
173 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
173 * C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola Solutions, Inc.) {0A7D34C2-E9DA-48A1-9E34-0CDFC2DE3B44}
173 C:\Program Files\WinRAR\rarext.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
221 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
221 * C:\Program Files\Motorola\Bluetooth\btmshell.dll (Motorola Solutions, Inc.) {0A7D34C2-E9DA-48A1-9E34-0CDFC2DE3B44}
221 C:\Program Files\WinRAR\rarext.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
223 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
225 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
225 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
225 C:\Program Files\WinRAR\rarext.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext.dll (Alexander Roshal) {B41DB860-8EE4-11D2-9906-E49FADC173CA}
229 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll (Advanced Micro Devices, Inc.) {5E2121EE-0300-11D4-8D3B-444553540000}
231 * C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll (Adobe Systems, Inc.) PDF Column Info
241 GUID / CLSID not found {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}
241 * C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software) {472083B0-C522-11CF-8763-00608CC02F24}
254 * C:\Program Files\GbPlugin\gbiehCef.dll (Caixa Economica Federal) {98C11555-BC81-40aa-A053-DAADC5630003}

Missing files
-------------
002 C:\Program Files\BrowserCompanion\BCHelper.exe
003 C:\Program Files\Windows Live\Messenger\msnmsgr.exe
011 c:\windows\system32\DRIVERS\ew_hwusbdev.sys
011 c:\windows\system32\DRIVERS\ew_usbenumfilter.sys
011 c:\windows\system32\DRIVERS\ew_jucdcacm.sys
011 c:\windows\system32\DRIVERS\ew_jubusenum.sys
011 c:\windows\system32\DRIVERS\ew_juextctrl.sys
011 c:\windows\system32\DRIVERS\ew_juwwanecm.sys
011 c:\windows\system32\DRIVERS\pccsmcfd.sys
032 rdpclip
034 C:\Program
034 Files\Oceanis\SystemSetting\WallPaperAgent.exe
041 C:\PROGRA~1\Funmoods\1.5.23.22\escorTlbr.dll
052 C:\PROGRA~1\Funmoods\1.5.23.22\bh\escort.dll

por cristiane_noberto Ter 14 Jan 2014, 15:11

brandon, o segundo link corrompeu, pode me passar de novo??

por Banido Ter 14 Jan 2014, 15:16

Aqui -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Está com problemas para executar o AdwCleaner ?
Siga os procedimentos acima do AdwCleaner, e cole o relatório aqui.
Existe infecção em seu sistema para remover!

Aguardo!

por cristiane_noberto Ter 14 Jan 2014, 16:19

Relatório do software AdwCleaner:

# AdwCleaner v3.017 - Relatório criado 14/01/2014 às 16:05:31
# Atualizado 12/01/2014 por Xplode
# Sistema Operacional : Windows 7 Starter Service Pack 1 (32 bits)
# Usuário : usuario - USUARIO-PC
# Executando de : C:\Users\usuario\Downloads\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

Serviço Deletada : InstallBrainService

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\Babylon
Pasta Deletada : C:\ProgramData\boost_interprocess
Pasta Deletada : C:\ProgramData\eSafe
Pasta Deletada : C:\ProgramData\FantastiGames
Pasta Deletada : C:\ProgramData\InstallBrainService
Pasta Deletada : C:\ProgramData\WPM
Pasta Deletada : C:\Program Files\BabylonToolbar
Pasta Deletada : C:\Program Files\Claro
Pasta Deletada : C:\Program Files\Complitly
Pasta Deletada : C:\Program Files\Desk 365
Pasta Deletada : C:\Program Files\Iminent
Pasta Deletada : C:\Program Files\Mobogenie
Pasta Deletada : C:\Program Files\MyPC Backup
Pasta Deletada : C:\Program Files\Omiga Plus
Pasta Deletada : C:\Program Files\Playbryte
Pasta Deletada : C:\Program Files\WinZipper
Pasta Deletada : C:\Program Files\Common Files\337
Pasta Deletada : C:\windows\system32\BrowserProtect
Pasta Deletada : C:\Users\usuario\AppData\Local\apn
Pasta Deletada : C:\Users\usuario\AppData\Local\Ilivid Player
Pasta Deletada : C:\Users\usuario\AppData\Local\lollipop
Pasta Deletada : C:\Users\usuario\AppData\Local\Wajam
Pasta Deletada : C:\Users\usuario\AppData\LocalLow\BabylonToolbar
Pasta Deletada : C:\Users\usuario\AppData\LocalLow\Playbryte
Pasta Deletada : C:\Users\usuario\AppData\Roaming\337
Pasta Deletada : C:\Users\usuario\AppData\Roaming\B1Toolbar
Pasta Deletada : C:\Users\usuario\AppData\Roaming\Babylon
Pasta Deletada : C:\Users\usuario\AppData\Roaming\baidu
Pasta Deletada : C:\Users\usuario\AppData\Roaming\Claro
Pasta Deletada : C:\Users\usuario\AppData\Roaming\Complitly
Pasta Deletada : C:\Users\usuario\AppData\Roaming\Desk 365
Pasta Deletada : C:\Users\usuario\AppData\Roaming\eDownload
Pasta Deletada : C:\Users\usuario\AppData\Roaming\Omiga Plus
Pasta Deletada : C:\Users\usuario\AppData\Roaming\WinZipper
Pasta Deletada : C:\Users\usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Ride Games
Pasta Deletada : C:\Users\usuario\Documents\optimizer pro
Pasta Deletada : C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Arquivo Deletada : C:\END
Arquivo Deletada : C:\windows\system32\Newtabs_v9.dll
Arquivo Deletada : C:\Users\usuario\AppData\Local\funmoods.crx
Arquivo Deletada : C:\Users\usuario\AppData\Local\funmoods-speeddial.crx
Arquivo Deletada : C:\Users\usuario\AppData\Roaming\Mozilla\Firefox\Profiles\2wtutjur.default\searchplugins\Askcom.xml
Arquivo Deletada : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml
Arquivo Deletada : C:\Users\usuario\AppData\Roaming\Mozilla\Firefox\Profiles\2wtutjur.default\searchplugins\babylon1.xml
Arquivo Deletada : C:\Users\usuario\AppData\Roaming\Mozilla\Firefox\Profiles\2wtutjur.default\searchplugins\Messenger Plus Smartbar Search.xml
Arquivo Deletada : C:\Users\usuario\AppData\Roaming\Mozilla\Firefox\Profiles\2wtutjur.default\searchplugins\search.xml
Arquivo Deletada : C:\Users\usuario\AppData\Roaming\Mozilla\Firefox\Profiles\2wtutjur.default\user.js
Arquivo Deletada : C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
Arquivo Deletada : C:\windows\System32\Tasks\Desk 365 RunAsStdUser
Arquivo Deletada : C:\windows\System32\Tasks\Omiga Plus RunAsStdUser

***** [ Atalhos ] *****

Atalho Desinfectada : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Atalho Desinfectada : C:\Users\usuario\Desktop\Internet Explorer.lnk
Atalho Desinfectada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Atalho Desinfectada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Atalho Desinfectada : C:\Users\usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Atalho Desinfectada : C:\Users\usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Atalho Desinfectada : C:\Users\usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Atalho Desinfectada : C:\Users\usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Atalho Desinfectada : C:\Users\usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Atalho Desinfectada : C:\Users\usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Atalho Desinfectada : C:\Users\usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk

***** [ Registro ] *****

Chave Deletedo : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Chave Deletedo : HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\ijblflkdjdopkpdgllkmlbgcffjbnfda
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\kolgnaidildmdbfgdnoapjdianbpajne
[#] Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{664C167B-D2AF-4B3C-B5E5-EFD9A0F6F938}
[#] Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{664C167B-D2AF-4B3C-B5E5-EFD9A0F6F938}
[#] Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{165362E7-3FFC-412E-B106-FC5217FA4142}
[#] Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{165362E7-3FFC-412E-B106-FC5217FA4142}
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.old.Start Page]
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Chave Deletedo : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Chave Deletedo : HKLM\SOFTWARE\Classes\b
Chave Deletedo : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Chave Deletedo : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Chave Deletedo : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Chave Deletedo : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Chave Deletedo : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Chave Deletedo : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Chave Deletedo : HKLM\SOFTWARE\Classes\escort.escortIEPane
Chave Deletedo : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Chave Deletedo : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Chave Deletedo : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Chave Deletedo : HKLM\SOFTWARE\Classes\f
Chave Deletedo : HKLM\SOFTWARE\Classes\funmoods.dskBnd
Chave Deletedo : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
Chave Deletedo : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
Chave Deletedo : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
Chave Deletedo : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
Chave Deletedo : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
Chave Deletedo : HKLM\SOFTWARE\Classes\Prod.cap
Chave Deletedo : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Chave Deletedo : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\desk365_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\desk365_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Browser companion helper]
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\omigaplussvc
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Chave Deletedo : HKCU\Software\5c688d1b63ee817
Chave Deletedo : HKLM\SOFTWARE\5c688d1b63ee817
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_photofiltre-studio-x (1)_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_photofiltre-studio-x (1)_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_photofiltre-studio-x_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_photofiltre-studio-x_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{61E0EF7A-9BC0-45EA-9B2F-F3E9F02692BD}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{F386E548-C533-472E-8C61-C026FB14FEA9}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{61E0EF7A-9BC0-45EA-9B2F-F3E9F02692BD}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F386E548-C533-472E-8C61-C026FB14FEA9}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{61E0EF7A-9BC0-45EA-9B2F-F3E9F02692BD}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F386E548-C533-472E-8C61-C026FB14FEA9}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{61E0EF7A-9BC0-45EA-9B2F-F3E9F02692BD}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F386E548-C533-472E-8C61-C026FB14FEA9}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{91607FA7-3C2F-4F90-93E3-D5337A6B0AC2}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}]
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{B278D9F8-0FA9-465E-9938-0C392605D8E3}]
Dados Restaurada : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Dados Restaurada : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Dados Restaurada : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Chave Deletedo : HKCU\Software\BabylonToolbar
Chave Deletedo : HKCU\Software\BrowserCompanion
Chave Deletedo : HKCU\Software\Complitly
Chave Deletedo : HKCU\Software\Cr_Installer
Chave Deletedo : HKCU\Software\DataMngr
[#] Chave Deletedo : HKCU\Software\DataMngr_Toolbar
Chave Deletedo : HKCU\Software\Iminent
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\lollipop
Chave Deletedo : HKCU\Software\SmartBar
Chave Deletedo : HKCU\Software\Softonic
Chave Deletedo : HKCU\Software\V9
Chave Deletedo : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKCU\Software\AppDataLow\Software\Crossrider
Chave Deletedo : HKCU\Software\AppDataLow\Software\PriceGong
Chave Deletedo : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Chave Deletedo : HKLM\Software\Babylon
Chave Deletedo : HKLM\Software\BabylonToolbar
Chave Deletedo : HKLM\Software\DataMngr
Chave Deletedo : HKLM\Software\delta-homesSoftware
Chave Deletedo : HKLM\Software\Desksvc
Chave Deletedo : HKLM\Software\hdcode
Chave Deletedo : HKLM\Software\Iminent
Chave Deletedo : HKLM\Software\omigaplusSvc
Chave Deletedo : HKLM\Software\Playbryte
Chave Deletedo : HKLM\Software\SimplyGen
Chave Deletedo : HKLM\Software\supWPM
Chave Deletedo : HKLM\Software\sweet-pageSoftware
Chave Deletedo : HKLM\Software\V9
Chave Deletedo : HKLM\Software\V9Software
Chave Deletedo : HKLM\Software\winzipersvc
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Playbryte
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7

***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16750

Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.Old.Start Page]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v26.0 (pt-BR)

[ Arquivo : C:\Users\usuario\AppData\Roaming\Mozilla\Firefox\Profiles\2wtutjur.default\prefs.js ]

Linha deletada : user_pref("browser.newtab.url", "hxxp://www.sweet-page.com/newtab/?type=nt&ts=1389638498&from=tugs&uid=SAMSUNGXHN-M500MBB_S2SKJ56BB14760");
Linha deletada : user_pref("browser.search.defaultenginename", "sweet-page");
Linha deletada : user_pref("browser.search.selectedEngine", "sweet-page");
Linha deletada : user_pref("browser.startup.homepage", "hxxp://www.sweet-page.com/?type=hp&ts=1389638498&from=tugs&uid=SAMSUNGXHN-M500MBB_S2SKJ56BB14760");
Linha deletada : user_pref("extensions.BabylonToolbar.admin", false);
Linha deletada : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Linha deletada : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Linha deletada : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Linha deletada : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Linha deletada : user_pref("extensions.BabylonToolbar.excTlbr", false);
Linha deletada : user_pref("extensions.BabylonToolbar.id", "70f8224f000000000000000df0a28a8c");
Linha deletada : user_pref("extensions.BabylonToolbar.instlDay", "15687");
Linha deletada : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Linha deletada : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Linha deletada : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Linha deletada : user_pref("extensions.BabylonToolbar.rvrt", "false");
Linha deletada : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Linha deletada : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=70f8224f000000000000000df0a28a8c&q=");
Linha deletada : user_pref("extensions.BabylonToolbar.vrsn", "1.8.4.9");
Linha deletada : user_pref("extensions.BabylonToolbar.vrsni", "1.8.4.9");
Linha deletada : user_pref("extensions.BabylonToolbar_i.babExt", "");
Linha deletada : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110824&tt=5012_5");
Linha deletada : user_pref("extensions.BabylonToolbar_i.excTlbr", false);
Linha deletada : user_pref("extensions.BabylonToolbar_i.newTab", false);
Linha deletada : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Linha deletada : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Linha deletada : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.4.923:38:47");

-\\ Google Chrome v31.0.1650.63

[ Arquivo : C:\Users\usuario\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [35357 octets] - [14/01/2014 15:27:31]
AdwCleaner[S0].txt - [31914 octets] - [14/01/2014 16:05:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [31975 octets] ##########

por cristiane_noberto Ter 14 Jan 2014, 16:22

me desculpe a demora, estava esperando o programar acabar de escanear. então, prece que o sweet-page foi removido, porém a navegação ainda continua um pouco lenta... o que fazer agora?

por Banido Ter 14 Jan 2014, 16:25

Depois faremos a limpeza ao finalizar.

===================================

1) Copie o caminho abaixo em Azul..

C:\Program Files\Hotkey\Hotkey.exe

2) Acesse ao site -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e cloqie no botão (Selecionar Arquivo)
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

3) Abrindo uma janela pequena colque o caminho do aquivo conforme inlustrado na imagem abaixo com uma seta, e clique em (Abrir)
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*E por último clique no botão --> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Aguarde a analise, ao finalizar, copie o link do endereço e cole aqui em seu tópico para eu verificar!

========================

Depois faça o mesmo procedimento com esse arquivo abaixo:

C:\ProgramData\InstallBrainService\ibsvc.exe

por cristiane_noberto Ter 14 Jan 2014, 16:29

Arquivo já analisado
This file was last analysed by VirusTotal on 2013-05-03 13:02:57 UTC, it was first analysed by VirusTotal on 2011-04-03 05:02:29 UTC.

Taxa de detecção: 0/46

Você pode visualizar a última análise ou analisá-lo novamente.

o segundo não consegue achar no meu computador, abre uma caixinha de comando dizendo que o caminho não existe, verificar o caminho

por Banido Ter 14 Jan 2014, 16:34

cristiane_noberto escreveu:Arquivo já analisado
This file was last analysed by VirusTotal on 2013-05-03 13:02:57 UTC, it was first analysed by VirusTotal on 2011-04-03 05:02:29 UTC.

Taxa de detecção: 0/46

Você pode visualizar a última análise ou analisá-lo novamente.

Clique em Reanalisar novamente

Faça o mesmo com esse arquivo abaixo:
C:\ProgramData\InstallBrainService\ibsvc.exe

por cristiane_noberto Ter 14 Jan 2014, 16:36

acho q o link era esse, certo?
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

por Banido Ter 14 Jan 2014, 16:38

cristiane_noberto escreveu:acho q o link era esse, certo?
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Correto!!

Faça o mesmo com esse arquivo abaixo:
C:\ProgramData\InstallBrainService\ibsvc.exe

por cristiane_noberto Ter 14 Jan 2014, 16:39

quando eu coloco o segundo aparece isso aqui

por Banido Ter 14 Jan 2014, 16:45

cristiane_noberto escreveu:quando eu coloco o segundo aparece isso aqui

O arquivo não existe mais, talvez o AdwCleaner removeu. era um Adware.
*Execute o AdwCleaner, e clique em (Desinstalar)

---------------------------------------
Download -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

1)
Extraia o arquivo compactado HJTScanlis.zip, para o Desktop (Área de trabalho), clique com o botão direito do mouse sobre o arquivo HJTScanlist.bat e clique em (Executar como Administrador)

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

2)
Tecle na letra [V] e (Enter)
Tecle o numero [1] -> (Enter)
*Aguarde o escaneamento. Ao terminar apresentará dois relatórios no Desktop chamados -> HJTScanlist.txt -->> HJTScanlist2.txt

por cristiane_noberto Ter 14 Jan 2014, 16:57

parece que o escaneamento acabou mas não apareceu nenhum documento .txt
o que está escrito dentro da mesma caixinha azul é isso

por cristiane_noberto Ter 14 Jan 2014, 16:59

perdãaaooo, apareceu aqui os dois docs, como vc disse, o que eu faço com eles?

por Banido Ter 14 Jan 2014, 17:00

cristiane_noberto escreveu:parece que o escaneamento acabou mas não apareceu nenhum documento .txt
o que está escrito dentro da mesma caixinha azul é isso

Aguarde, o Scan pode demorar quando terminar, abrirá dois "Bloco de Notas", são os Relatório.., copie e cole aqui..

Estou suspeitando que seu sistema foi infectado por vírus de Pendrive!

por cristiane_noberto Ter 14 Jan 2014, 17:05

brando, não suspeite, foi isso mesmo, o que aconteceu foi o seguinte: eu tinha um pendrive e ai pegaram e apagaram os arquivos que tinha nele e colocaram outros, o de um programa de autocad, meu computador estava pedindo pra fazer um backup e decidi fazer com esse pendrive, entretanto assim que eu coloquei e copiei os arquivos pro meu computador ele já começou a ficar lento, quando passei o antivirus apareceu várias extensões com o nome Auto.... então só pode ter sido isso mesmo! e agora??? Crying or Very sad

por cristiane_noberto Ter 14 Jan 2014, 17:07

Relatório da ferramenta hjtscanlist:

Spoiler:

uma conta · por cristiane_noberto Ter 14 Jan 2014, 17:08

Relatório do hjtscanlist 2:

Spoiler:

sweet-page.com

sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Re: sweet-page.com

Seg	Ter	Qua	Qui	Sex	Sáb	Dom
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30