Análise de LOG do HiJackThis

Bom dia.

Podem analisar meu LOG do HiJackThis abaixo:

Código:


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 07:51:15, on 19/02/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16455)
Boot mode: Normal

Running processes:
C:\WINDOWS\vVX1000.exe
C:\Users\Eduardo Agostinho\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Pandion\Application\pandion.exe
C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Users\Eduardo Agostinho\AppData\Local\Akamai\netsession_win.exe
C:\Users\Eduardo Agostinho\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Google Talk\googletalk.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Users\Eduardo Agostinho\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eduardo Agostinho\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eduardo Agostinho\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eduardo Agostinho\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eduardo Agostinho\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Eduardo Agostinho\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USSMB/5
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com.br/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USSMB/5
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USSMB/5
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Auxiliar de Conexão do Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [googletalk] C:\Program Files (x86)\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [vmware-tray.exe] "C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe"
O4 - HKLM\..\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\9df534d8-aa54-4d79-a383-eb8cb6ad89f4.exe /check
O4 - HKCU\..\Run: [Google Update] "C:\Users\Eduardo Agostinho\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\WINDOWS\System32\StikyNot.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Eduardo Agostinho\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [HP Officejet Pro 8600 (NET)] "C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" -deviceID "CN272BS1JN05KC:NW" -scfn "HP Officejet Pro 8600 (NET)" -AutoStart 1
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
O4 - Startup: Dropbox.lnk = C:\Users\Eduardo Agostinho\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: OneNote 2010 Screen Clipper and Launcher.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: Pandion.lnk = C:\Program Files (x86)\Pandion\Application\pandion.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra button: Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files (x86)\Fiddler2\Fiddler.exe" (file missing)
O9 - Extra 'Tools' menuitem: Fiddler - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files (x86)\Fiddler2\Fiddler.exe" (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.eduardo
O17 - HKLM\System\CCS\Services\Tcpip\..\{E45397EC-5FE4-473F-ACB0-03117485702C}: NameServer = 200.189.80.113,200.189.80.127
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Net Client Service - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastNet.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Nexcode Policy Server (NexcodePolicyServer) - Unknown owner - C:\Program Files (x86)\Nexcode Systems\Access\Nexcode.PolicyServer.exe (file missing)
O23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\Oracle\product\11.2.0\client_2\bin\omtsreco.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: VMware Workstation Server (VMwareHostd) - Unknown owner - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.20\bin\mysqld.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14475 bytes



Desde já agradeço!

  Olá Eduardo. Seja bem vindo ao Fórum PC Brasil.

 Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >  < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

|- Desabilite temporariamente seu antivírus para evitar conflitos e execute "ZHPDiag2.exe", para instalar a ferramenta.
 
|- Execute o ícone do pergaminho. ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
 
|- Clique "SEARCH" ou "PESQUISAR" e aguarde a conclusão!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
 
|- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Power Max, bom dia!

Conforme solicitado, segue o log do ZHP anexo.

 Copie todo o texto destacado em vermelho que te passei (começando em script zhpfix e indo até SysRestore)
_____________________________________________________________________________________________________________

 Vá no menu: Iniciar > Todos os programas > ZHP > Abra o Zhpfix > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta.

Power Max

Segue o resultado:

Código:


Rapport de ZHPFix 2014.2.16.5 par Nicolas Coolman, Update du 16/02/2014
Fichier d'export Registre :
Run by Eduardo Agostinho at 19/02/2014 11:04:38
High Elevated Privileges : OK
Windows 7 Business Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 12s)
Reparação de atalhos do navegador

========== Chaves do Registo ==========
ELIMINÉ: [HKLM\SOFTWARE\Classes\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f}]
ELIMINÉ: [HKLM\SOFTWARE\Classes\CLSID\{1984DD45-52CF-49cd-AB77-18F378FEA264}]
ELIMINÉ: HKCU\Software\Baidu Security
ELIMINÉ: HKCU\Software\InstallCore
ELIMINÉ:* HKLM\Software\Iminent
ELIMINÉ: HKLM\Software\Wow6432Node\Baidu Security
ELIMINÉ: HKLM\Software\Wow6432Node\Baidu_Drp_pos
ELIMINÉ: HKLM\Software\Wow6432Node\InstallCore
ELIMINÉ CLSID MPSK: {7e52747b-f359-11e1-b688-d4ae52fd79d1}
ELIMINÉ: [HKLM\Software\Classes\Installer\Products\\617DD6FF01B79624F991FF0BA74CDC59]
ELIMINÉ: [HKLM\Software\Classes\Installer\Features\617DD6FF01B79624F991FF0BA74CDC59]
ELIMINÉ: Service: BBSvc
ELIMINÉ: Service: BBUpdate
ELIMINÉ: HKLM\Software\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
ELIMINÉ: HKLM\Software\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
ELIMINÉ:* HKLM\Software\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}
ELIMINÉ:* HKLM\Software\Classes\Interface\{7697BC38-D0FA-454B-AC75-968B4CCABFCE}
ELIMINÉ:* HKLM\Software\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
ELIMINÉ: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
ELIMINÉ:* HKLM\Software\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
ELIMINÉ:* HKLM\Software\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
ELIMINÉ:* HKLM\Software\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
ELIMINÉ: HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS
ELIMINÉ: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv
ELIMINÉ: HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32
ELIMINÉ: HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASAPI32
ELIMINÉ: HKLM\Software\Wow6432Node\Microsoft\Tracing\apnstub_RASMANCS

========== Valores do Registo ==========
ELIMINÉ: Toolbar: {8dcb7100-df86-4384-8842-8fa844297b3f}
ELIMINÉ RunValue: AdobeBridge
ELIMINÉ RunValue: TVTray
ELIMINÉ SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264}
ELIMINÉ AAKE KeyValue: C:\WINDOWS\SysWOW64\Taskcall.exe
ELIMINÉ: TCP Query User{484050FD-D1E7-4A7F-8769-E7698D7AF2D9}C:\users\eduardo agostinho\documents\publico\nadia\utilitários\accessexpteste3.exe
ELIMINÉ: UDP Query User{88F8789A-9531-45CA-BA09-13C701892BBB}C:\users\eduardo agostinho\documents\publico\nadia\utilitários\accessexpteste3.exe
ELIMINÉ: TCP Query User{BDAF6EC9-3ACD-42CC-A7D6-5258C1648DE5}C:\users\eduardo agostinho\documents\publico\nadia\utilitários\accessexpteste5.exe
ELIMINÉ: UDP Query User{F4463A37-2721-481A-8BD9-FE748EFA62B7}C:\users\eduardo agostinho\documents\publico\nadia\utilitários\accessexpteste5.exe
ELIMINÉ: {C1CD0DB6-8DDD-471A-87F8-1BDCA1896DC2}
ELIMINÉ: {A8618C9E-A06B-4C74-B75D-510692EB7328}
ELIMINÉ: {0ACBFC5F-FB2C-4454-8A4D-D54879B5554B}
ELIMINÉ: {F7A492C7-02DC-4BFD-ABFB-2BABD597CA27}
ELIMINÉ: {999F9AD5-B75D-4858-88A2-002392F93A75}
ELIMINÉ: {058A041E-7F40-420C-BAAB-561A28527FCA}
ELIMINÉ: {042B6ABA-8693-475A-AFF1-E281C0C2DCA5}
ELIMINÉ: {1E4F2F13-0E39-4629-BB26-8091FA71F0B0}
ELIMINÉ: {8E3A7C22-75F7-49FD-B9BE-519C8EDA7E13}
ELIMINÉ: {7F96768F-FBF5-4C99-A91D-6522212C6DC6}
ELIMINÉ: {7A5DCD10-B165-487E-8C93-6CDEB69E8A22}
ELIMINÉ: {EC0E6A3F-9E29-4AAC-BCC4-3B71FD80E02C}
ELIMINÉ: {068AF868-5D01-454B-953C-C848BEEBFE38}
ELIMINÉ: {F90ED80E-D298-411C-92FE-CFBE66AFA005}
ELIMINÉ: {C41357FE-C29C-42BB-9783-8A865EE2C0CC}
ELIMINÉ: {30099C6B-E62F-43AB-8E7F-E05539414F9E}
ELIMINÉ: {48DE7710-E396-4A09-BE89-F6A0F357A79D}
ELIMINÉ: {B24584B7-A28C-47E2-BE12-86642566B621}
ELIMINÉ: {F0A203B8-53C8-4B69-919B-7F8C10A8556A}
ELIMINÉ: {41A9A02E-B3A0-4CFE-831A-522391D18A0F}
ELIMINÉ: {E95DF62C-F517-40AD-BED7-8D939033505A}
ELIMINÉ: {B2536191-0662-4F4C-9CB1-278607A9B465}
ELIMINÉ: {E897FD8C-3030-4BEA-A63F-40B11A63FB2D}
ELIMINÉ: {695FFDCD-2DE5-448D-B3EB-2D8A0195CB1A}
Ausente Valor Perfil Padrão: FirewallRaz :
Ausente Valor Perfil Domínio FirewallRaz :
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value

========== Elementos dos dados do Registo ==========
SUBSTITUI Value Start_ShowHelp :  Good (1) - Bad (0)
ELIMINÉ: R0 - Main,Start Page = KLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page

========== Pastas ==========
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{003193ED-8802-4F03-B939-5642560A507E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{00CF8636-0138-4004-A7FE-4664379A5C2D}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{03734258-FF2F-449E-9578-5E81866ADD59}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{045538B2-2B19-455B-AB30-944550283CDC}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{0636691C-36AC-4040-901E-AA56D48C9444}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{06631B99-0C42-4F30-9884-6E2A9820CB37}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{0850ABF0-4895-4383-8F4C-4013F0BB0EC1}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{0946FC26-150B-4F7F-9CD4-8F378F3CAB14}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{0A03DF05-35C1-4619-B95D-C15E3E680639}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{11371A7D-E893-4F7C-BADE-1D18B9CEEFFA}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{12877E28-D357-4865-8DAF-D058EB823B09}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{13268F3F-32FE-4665-A8A5-DADB360A05E4}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{138E57FA-4E93-499F-B3C6-FB77808766EB}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{16AE7283-A8A9-4441-BC42-9DF662A1EC90}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{18221211-9E1B-47CB-99BB-4BA7715BEA2F}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{184D59B2-D43E-458B-9625-2852509D8E75}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{1892D054-883D-4F1B-8ACD-068165455033}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{18BAF4C3-2DE9-4902-A2F3-D325F339059F}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{18FC5767-5BDD-4857-B917-B22F96EC7B0D}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{1A2BAF85-A208-4B14-BE80-17586748F318}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{1A79BFF3-D7C4-4022-82DD-ABDFEA504EB3}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{1AD685EE-CB76-4CC8-BC5A-31D6F22A2064}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{1CCA93CB-4609-4B5F-B54E-A13C92F8FCD1}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{1DEE3E85-E6F4-4B2F-BB13-8D185F4EC1D1}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{1E723F44-F5B2-4E08-87F8-1EAE2B25515A}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{24739128-93B3-4B78-B6DA-25D472B34EA7}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{256DA5B3-D6C5-40C0-98A0-861EF5D3CB68}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{2835E84E-169E-4A61-BDAA-AC858E10BEA5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{286DF816-CAB4-49A7-8ED7-F28652140302}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{28B53337-1FE8-46DF-B681-817AD80D0C14}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{28C90A5E-C789-47E0-9B72-CCD9CC49382C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{29653082-DF12-420F-A73A-DFC9F2CE2453}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{2AAC2059-6B6A-4485-9FBE-415E65EE5E7E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{2C1480E0-D420-4025-A560-3F2FECD31ACE}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{2DE5FD18-D878-4FFB-B43B-98EE96BA255C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{2EF8C712-8D45-48AB-9E26-7EC165AFAAC5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{306845C1-C32B-4DB4-9591-A140640ED944}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{3123958B-C274-42C7-91C4-B97418500893}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{319FD98D-8828-4A64-913D-F130B341F82C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{325E4AE3-B051-4F23-B7BB-F351C7937F4D}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{35E80C68-FF43-41F1-90D2-7547BC299706}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{3761F186-D597-4806-85E9-4D29A5C67858}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{38BC6C48-0781-45E8-93A7-F2BEAB8BAAE6}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{3A21EB03-E922-4F00-92CC-B7FD1556289E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{3B19E7E6-AB13-4129-8214-37D7555E3EA6}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{3B8F29C3-F0A8-4053-A344-61F930AD64DE}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{3D3D105D-9B52-45A0-8388-DF0C9B35C717}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{3F2487A5-F7CE-48DD-A5D8-774481DC002F}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{3FF83307-DF52-4794-A49D-129E25F56BAC}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{410EF976-7646-4088-9590-133660205D49}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{42E165ED-6298-4234-8D39-72060643D0CC}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{4762A838-0ADB-42C0-B026-DA87AA4E1145}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{476ED731-123A-4F80-A082-404966CFDB04}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{48A98181-56D6-48FE-8A69-14872F94E2B3}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{494C8C90-D911-4FF2-B634-59AC91BCCD0F}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{49763920-B904-4584-9F78-B49D99EBB7C3}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{49B4CA8D-0BBA-49FF-A647-AAABC3F4AF55}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{4A266FF7-AB4A-459D-8B41-FD4E9FF8A9CA}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{4B380D67-45FF-41F3-A5FE-746E837FF6AF}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{4EE3A062-4D7C-458E-BC3B-A977FC0B34B5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{4EF0C489-AA3B-472F-BF52-8EA3B4A85770}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{4F64448A-439C-4D4A-814F-45A3B0C9A4D2}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{4F98C357-89A8-4119-B69E-47023412FD19}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{4FA34908-2BF4-4376-B6E4-6341044A495E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5006DA6E-0CAB-4555-82F3-2138A96611F0}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5061C925-7006-411A-98AF-033DD4479FE2}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{50B9BEE5-15D5-4CC9-BDC3-8A623AAB11D7}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{50D23E23-B2EF-4976-917E-80A0BB618D1E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{522B8072-12E6-4D1C-BB16-BB9600BD0571}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{53D51C87-BD54-4CBC-AC87-7C5246ABDC48}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{53F23156-8A4E-44C6-AF93-F9E4A44C3C2E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{54145D8F-F5A2-4621-A3EA-1DA411A45889}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{55796CE6-AF1A-4E3B-8208-9EC6135AEF5C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5608DEF2-DA07-4696-9778-1FD0E1661F76}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{582828B3-4D88-416E-B621-C558FC78EE86}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{59B6AD63-3708-48EC-B9DE-A1C63ABCADF5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{59BF4F65-87C8-470E-BA95-2F3ECEF8D2C7}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{59F2EF91-F910-4EF2-B36C-DA48C9C5F542}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5AA670A5-686F-4AD6-A138-14D3623B2F5C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5BE1899D-DBDA-4047-B877-DB8907A61A37}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5C417D37-1D46-4EB1-A23D-FB5661F05EAB}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5CA84151-FA3A-49E7-B2B3-825EA09E0C56}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5D1DA787-4610-4B44-8CB4-7D666DEA0F42}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{5E42E0B5-1F86-487E-B056-27FDFE1BC8C8}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{62E093CF-1CCB-4E13-9B0C-7166B542357E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{65ABAD8C-BAB1-4B66-9F77-397559C8F21B}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6606F404-C3A9-48CC-9A94-2077EA7C71A5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6632BFED-B34C-41A5-BAA5-2022E6E4D30A}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{670707E7-E110-4DB5-A474-AD4E56DD4798}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{69D280C0-57F1-460D-BB94-A45180C60EFA}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6AA88BC8-7D8E-4C53-A183-21F288338920}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6ABAD66A-F6A4-47AC-8C53-2339107C81D8}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6C0907B7-409C-4186-9F2D-6C1DFFEBBCEE}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6C8EB5F9-50D3-416F-AC60-050F1AC57177}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6CFE829B-ABA4-481C-BD33-A061FFC30988}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6D41262D-A2FE-49EA-9261-59512E628485}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{6F0CF666-97FF-448F-BA4A-0175419714F9}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{72CE0E7F-30FD-4234-8F46-6A64136E578C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{7474C956-3C8C-454A-A127-3D8402E9D30A}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{7694AFE2-8F30-42A7-8D12-65FB51F07D31}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{77F1AF3C-6AFD-4C57-9E67-32E2843C0256}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{782178F8-AF19-4C47-ADD2-B84A796394F4}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{789BBEEB-6734-44DE-A4E1-6EEB434CDAE4}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{7BB747BC-252C-4D29-B0CE-970F96394DBF}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{7BEBF6DA-770A-4F20-92A6-837D66612ED9}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{7C5754B4-C6C4-4474-B2B2-A144BE254268}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{7E938965-E878-4339-8425-6C3C6B5587B1}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{7F288671-1AC2-46FD-A10D-484CA8C78BA1}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{843E07EA-A85C-4031-80C8-0430E28FDAFF}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{84848B78-D1EF-429B-9FB6-5E5712F4C4A1}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{863BB9C7-4556-4714-AB63-6A7C4479DF1D}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{8771AAE3-42F8-4F1D-A7AB-DC313215F738}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{8B9AA073-6B1C-4CE4-9883-B3736EBF4F71}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{8C290E22-D2DB-4C65-81CB-C8C1EEBB9D56}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{8C343F8C-2B6B-491F-BA35-CF5CF57C0155}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{8D3EC426-FBAD-4A4F-93B6-323E41E67557}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{9261E364-C13A-49FF-89F6-F019ED1F876F}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{93A317C2-98C4-4275-AA43-8422C6E704C1}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{948FB913-55E4-48B3-9ADC-3C03D51FFCD5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{954468E6-E38D-498D-85B7-0BCB3E16EF59}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{9592940C-852B-4457-856B-79BFEF07AF1A}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{96CE980D-A7C5-40A2-B53D-A0DBD9E2BC53}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{97784966-D204-4984-B636-CAC9DE17C64B}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{9950999C-CDE3-4845-A026-1F880772727C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{9A202479-84FD-40FB-8D00-CC73D0557E4D}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{9AC69975-F856-4003-B491-1EF9E73443E4}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{9B85A09F-A39C-4A8B-9BA2-7393EA5D72FA}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{9BA29FCC-87E7-49FF-BA5C-B3A2E83C5ECE}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{9F21FD46-8E36-4046-94D1-1A7A5947D3E6}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{A236814E-1183-458D-87DA-6B6082450779}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{A394F985-0E93-4EC3-8F51-C322E2D367AC}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{A50F3482-D4F5-497B-BDAD-0F2D89D1474D}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{A66463D2-6C34-4F3B-B075-4F8EDC3BAE5C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{A82FF5C5-26E8-4B4B-BD85-849E7DD78AE7}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{A8984E85-B124-428C-9FF0-B9B78470A08B}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{AA38377A-C387-4EBB-9131-4575AEF963FA}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{AAB30821-3615-4B5A-B9BC-8F7C81C7450E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{AC4A4CF6-7022-4A99-B73C-AFF3C90C05FE}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{B46AB764-8425-4F47-A69A-05323DA76B83}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{B4E02CE5-3586-46EC-A2A7-6A6DDE2F7797}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{B4ECA024-1141-44C8-B0C4-5EBD11AAC1A5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{B4F6B870-629A-47F6-A051-9109857B2906}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{B5CFEB40-020D-40F2-88CB-1393525ED1A5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{B70F9050-247B-4373-AC6A-07AA9C63A147}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{B81185B0-0AFD-429F-A171-E230C94D6C21}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{B89429C1-3BEF-4438-B5FF-CD7B598E6B2C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{BA0090D3-8378-474D-83CE-81CFE5290539}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{BA6B87A7-F1BF-4072-B75D-B0F1D20333A6}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{BB735BC6-4F9C-4952-B0BA-8D4E26D35D05}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{BDB727B5-746F-4668-AA81-2DDF1B91C4C1}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{BE6E855C-0C37-4ADF-9541-CFBAE8B169FD}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C145B22C-6CE3-48E4-BE78-8BBBC45EEA52}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C3013743-0595-4BED-A2B6-A15118E573C5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C456E779-E4A1-44A1-971B-C2DC7D6D9287}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C4E15F80-6CF7-4F6F-94C6-7781BE48ED31}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C55BA65A-C703-4C54-8F4B-E80BEB82A010}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C6DC871D-9361-46A7-BFA5-61CC2DF5F5DA}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C76F2506-CB41-48E3-81DA-B103B37162AA}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C79BBB15-E4DE-45A9-A194-8D69394575B8}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C8B8C436-ABCA-4A12-8987-0145BBC89DA5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{C8DEED54-57AB-4D3C-BB09-D28184D0B2B6}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{CB345873-E238-4AC3-9D7E-74825A4D88CA}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{CB6F9C18-73B5-4263-8E3B-AF1461CE3FB3}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{CD3CECD5-9941-46D2-9FF6-1590C5D00C7E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{CEC9B5A9-A0CE-4EA0-BF9C-81A4A560E0E6}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{CF98C3CB-CBB1-4EF6-B3C1-DD0A650B5E88}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D2A0C3B5-64E6-483B-AFA9-A1A75594AF9F}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D39CD5C3-C65A-4930-B677-CBF578065165}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D535D36E-4905-49C2-B612-C7CECE9F85A2}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D5AD29F0-4242-4B48-A5AF-1B6F8F79865E}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D5E06551-11B7-4EBF-9928-8C6266C9F577}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D5EBCF09-9058-470E-9618-AA1F788B27BB}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D695046F-1A45-4978-A1CD-6B2DCC2D29C7}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D7349085-6234-4F4F-A20B-6FF1C4107385}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D7736CC8-9BAF-4F06-8B24-9486670825C8}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D7BA8672-C411-4695-A3EF-DE9B2B7E38B2}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D7C025F3-1D92-4B44-BA24-AD2976E62D7A}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D7E35EDB-C3FF-46E5-B2DB-19D17F721053}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D7EF273D-1F04-44EF-9B36-892DDAE1A9A2}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{D84D8137-A11E-47DB-B560-1B66C3295843}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{DBDB21D5-77CE-4F1F-9511-28D0BE4ECF15}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{DDE51AA5-A025-443A-AE3D-E9586E608B95}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{DDF7E859-37DF-45F5-A000-7DEC24B130B6}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{DEA535EB-E9E7-41F5-98B3-F8FD6CEE353F}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{E05367C0-3EE1-4F5C-AB85-961B782508B3}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{E09FD62F-09C3-4A9B-B765-AEE2E4F1C0E5}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{E149464F-5A1C-4E81-BD19-4F8500EEC119}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{E41E2F8B-A5D5-4294-85EC-4C9FC2A01B88}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{E55B7FB9-67CB-4CA0-B9B4-00DB9C501373}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{E81ECA98-D055-453A-93FC-FE1CC533F03A}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{E9629C8E-A2A0-4A97-AA3D-91AD66813FB8}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{EC2A88FC-B308-499C-A344-ED129ADD7FD6}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{EDAF6762-1250-46E5-ACF4-61A84C7A8670}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{F6E3C55C-5985-4BF3-A92C-F933E2C71F48}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{F7340DF7-08D6-47DA-875E-2577F8E2A9F9}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{F7A4C5B8-3B49-4D24-B99C-5E3C1CD13D72}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{F94C17F4-2EA0-4E70-8636-C0F22952885C}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{F9B81E4D-6869-41FB-B303-EF37AE2B4F0F}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{FA15A858-FC45-4638-996A-87BDC7FD035A}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{FA57252D-E74E-4853-B1B5-D2919D75A8E0}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{FA6AF815-3E9D-412E-97DE-EA1936EDE9C3}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{FAF0F603-4AF4-4537-B8D7-4E34460CA3ED}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{FC2A330F-E90D-4648-A770-3B382C4AE82B}
ELIMINÉ: C:\Users\Eduardo Agostinho\AppData\Local\{FF0AD482-68A2-4DB3-BADC-73A45E7F4FCB}

========== Ficheiros ==========
ELIMINÉ: c:\programdata\microsoft\windows\start menu\programs\documentação de ajuda da dell.lnk
ELIMINÉ: c:\users\eduardo agostinho\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\service configuration editor.lnk
ELIMINÉ: c:\program files (x86)\microsoft\bingbar\7.3.124.0\bbsvc.exe
ELIMINA REINICIAR: c:\program files (x86)\microsoft\bingbar\7.3.124.0\seaport.exe
ELIMINÉ Temporários windows (11764) (3.380.509.921 octets)
ELIMINÉ Flash Cookies (0) (0 octets)

========== Tarefa planificada ==========
ELIMINÉ: Funmoods
ELIMINÉ: {1995A7E6-3428-4CF3-950A-656E4FD27D02}
ELIMINÉ: {5E2ED898-FB46-4782-AECD-60C6030B1F9C}
ELIMINÉ: {7035C306-6FD9-4C3C-91B8-C665C8C6D2CE}
ELIMINÉ: {9935C82A-4329-4060-8D96-90FDF865A48B}
ELIMINÉ: {ADAB75CD-4D62-46B1-9679-1AA2BA4297A0}
ELIMINÉ: {AFECAA69-B814-4110-98B9-B8351482C8E4}
ELIMINÉ: {C3FA4364-8504-4891-8477-2B8DC7200D82}
ELIMINÉ: {D6E5E51C-F643-4072-BB4C-C502AA525612}
ELIMINÉ: {D797A4EC-BDF7-4D8F-806B-5D464EE0B372}
ELIMINÉ: {ED4C34D7-EA48-4193-84F4-8081D57955EA}

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso


========== Recapitulativo ==========
31 : Chaves do Registo
41 : Valores do Registo
2 : Elementos dos dados do Registo
204 : Pastas
6 : Ficheiros
11 : Tarefa planificada
1 : Restauração Sistema


End of clean in 02mn 07s

========== Caminho do ficheiro do relatório ==========
C:\Users\Eduardo Agostinho\AppData\Roaming\ZHP\ZHPFix[R1].txt - 19/02/2014 11:04:51 [25029]



 Siga, por gentileza, as dicas do tutorial abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste, por gentileza, o log do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

Segue o LOG do AdwCleaner abaixo:

Código:


# AdwCleaner v3.019 - Relatório criado 19/02/2014 às 12:09:22
# Atualizado 17/02/2014 por Xplode
# Sistema Operacional : Windows 7 Professional Service Pack 1 (64 bits)
# Usuário : Eduardo Agostinho - EDUARDO
# Executando de : C:\TEMP2\AnaliseV\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****


***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Pasta Deletada : C:\Program Files (x86)\myfree codec
Pasta Deletada : C:\Users\Eduardo Agostinho\AppData\Local\PackageAware
Pasta Deletada : C:\Users\Eduardo Agostinho\AppData\LocalLow\IminentToolbar

***** [ Atalhos ] *****


***** [ Registro ] *****

Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
Chave Deletedo : HKCU\Software\anchorfree
Chave Deletedo : HKCU\Software\Myfree Codec
Chave Deletedo : HKLM\Software\Myfree Codec
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Chave Deletedo : [x64] HKLM\SOFTWARE\Description

***** [ Navegadores ] *****

-\\ Internet Explorer v9.0.8112.16455


-\\ Mozilla Firefox v27.0.1 (pt-BR)

[ Arquivo : C:\Users\Eduardo Agostinho\AppData\Roaming\Mozilla\Firefox\Profiles\vbjb6o97.default\prefs.js ]


-\\ Google Chrome v

[ Arquivo : C:\Users\Eduardo Agostinho\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2580 octets] - [19/02/2014 12:07:46]
AdwCleaner[S0].txt - [2356 octets] - [19/02/2014 12:09:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2416 octets] ##########



 Siga, por gentileza, as dicas do tutorial abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste, por gentileza, o log do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

Segue LOG do JRT abaixo:

Código:


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Professional x64
Ran by Eduardo Agostinho on 19/02/2014 at 13:09:45,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASMANCS



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Eduardo Agostinho\AppData\Roaming\getrighttogo"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19/02/2014 at 13:14:53,20
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Como está seu PC após estas limpezas?

Power Max

Melhorou consideravelmente...
Antes de você solicitar o último LOG, eu reiniciei o computador e já percebi a diferença!

Vou utilizar entre hoje e amanhã, ai então lhe dou um feed back aqui neste tópico.

Agradeço a ajuda!

Abraço

Outra coisa importante:

 Há programas desnecessários iniciando junto com o Windows, o que torna o seu PC mais lento. Para corrigir isto, siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

De preferência deixe apenas os programas de segurança (anti-vírus/anti-spywares/firewall) iniciarem junto com o Windows.

Use também o programa Ccleaner, indicado neste tutorial acima, para fazer uma limpeza e otimização do PC agora e de tempos em tempos.
_______________________________________________________________________________________________________________

 Faça a atualização (update) do Malwarebytes que você tem instalado em seu PC > Faça uma Verificação Completa com ele e remova os problemas que ele encontrar.

Só para finalizar faça estes últimos procedimentos, por gentileza:

Abra o Ccleaner > clique no botão Limpeza > clique na opção Executar Limpeza. Isto é demonstrado na imagem abaixo:


Confirme a operação acima clicando no botão OK. Aguarde a conclusão do procedimento.

Depois disto, clique no botão botão Registro > Procurar Erros > Corrigir erro(s) selecionado(s) > neste momento você poderá optar por fazer uma cópia das alterações que serão feitas no registro (por motivos de segurança), escolha a opção que desejar (sim ou não) > e confirme a limpeza clicando no botão Corrigir todos os erros selecionados > clique no botão Fechar (ou OK):

__________________________________________________________________________________________________________________

Depois disto siga também as dicas deste tutorial abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

 Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (...de Xplode) e salve no Desktop (Área de Trabalho)

*Depois disto é só executá-lo, deixar selecionadas as opções  Remove disinfection tools e Purge system restore

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Clique em [Run]

Depois de executar o Delfix conforme descrito acima, é só deletar o DelFix e o arquivo C:\DelFix.txt
_______________________________________________________________________________________________________________________

  Foi um prazer ajudar. Conte sempre conosco!

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.