Remover malwares !

Relatorio do adwcleaner

# AdwCleaner v3.020 - Relatório criado 08/03/2014 às 23:04:42
# Atualizado 27/02/2014 por Xplode
# Sistema Operacional : Windows 7 Home Basic Service Pack 1 (64 bits)
# Usuário : Wallace - WALLACE-PC
# Executando de : C:\Users\Wallace\Downloads\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****


***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\ParetoLogic
Pasta Deletada : C:\Program Files (x86)\ParetoLogic
Pasta Deletada : C:\Program Files (x86)\Common Files\ParetoLogic
Pasta Deletada : C:\Users\Wallace\AppData\Roaming\DriverCure
Pasta Deletada : C:\Users\Wallace\AppData\Roaming\ParetoLogic
Pasta Deletada : C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParetoLogic
Arquivo Deletada : C:\Windows\System32\roboot64.exe
Arquivo Deletada : C:\Windows\System32\Tasks\NCH Software
Arquivo Deletada : C:\Windows\Tasks\paretologic registration3.job
Arquivo Deletada : C:\Windows\System32\Tasks\paretologic registration3
Arquivo Deletada : C:\Windows\Tasks\paretologic update version3.job
Arquivo Deletada : C:\Windows\System32\Tasks\paretologic update version3

***** [ Atalhos ] *****


***** [ Registro ] *****

Chave Deletedo : HKCU\Software\ParetoLogic
Chave Deletedo : HKLM\Software\ParetoLogic

***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Google Chrome v33.0.1750.146

[ Arquivo : C:\Users\Wallace\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2657 octets] - [02/03/2014 02:35:56]
AdwCleaner[R1].txt - [1849 octets] - [08/03/2014 23:03:03]
AdwCleaner[S0].txt - [2527 octets] - [02/03/2014 02:36:34]
AdwCleaner[S1].txt - [1699 octets] - [08/03/2014 23:04:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1759 octets] ##########

  Olá Wallace.

Caso ainda não tenha feito uma limpeza com o Malwarebytes, faça seguindo esta dica abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log do Malwarebytes.

Ficamos no aguardo.

Vai demorar um pouco porque tenho muitos arquivos no Computador amanha posto o relatorio ! eu estou tentando remover malware pelo motivo do erro 0xc00007b algo assim ! dizem que e malware eu fiz quele tuto que tu me passou ja e n funcionou !

Realmente pode ser malware, porque o AdwCleaner já removeu alguns problemas.

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Versão da Base de Dados: v2014.03.09.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
Wallace :: WALLACE-PC [administrador]

Proteção: Não permitir

09/03/2014 00:39:53
mbam-log-2014-03-09 (00-39-53).txt

Tipo de Verificação: Verificação Completa (C:\|D:\|E:\|F:\|G:\|H:\|)
Opções de verificações ativadas: Memória | Inicialização | Registro | Sistema de arquivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
Opções de verificação desativadas: P2P
Objetos escaneados: 415944
Tempo decorrido: 43 minuto(s), 19 segundo(s)

Processos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)

Módulos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)

Chaves de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Valores de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Itens de Dados no Registro Detectadas: 0
(Não foram detectados ítens maliciosos)

Pastas Detectadas: 0
(Não foram detectados ítens maliciosos)

Arquivos Detectados: 2
C:\Program Files (x86)\Call of Duty Black Ops 2\buddha.dll (Malware.Gen.SKR) -> Enviado para a Quarentena e deletado com sucesso.
C:\Users\Wallace\AppData\Local\Google\Chrome\User Data\Default\File System\002\t\00\00000001 (PUP.Optional.OneClickDownloader.A) -> Enviado para a Quarentena e deletado com sucesso.

(fim)

 Caso não tenha o ZHP instalado, faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >  < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

|- Desabilite temporariamente seu antivírus para evitar conflitos e execute "ZHPDiag2.exe", para instalar a ferramenta.
 
|- Execute o ícone do pergaminho. ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
 
|- Clique "SEARCH" ou "PESQUISAR" e aguarde a conclusão!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
 
|- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

~ Relatório do ZHPDiag v2014.3.2.6 - Nicolas Coolman (03/03/2014)
~ Iniciado por Wallace (09/03/2014 15:28:26)
~ Endereço do Website : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~ Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user


---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.16518
GCIE: Google Chrome v33.0.1750.146 (Defaut)

---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 7 Home Basic, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
System - Enable Open file C:\Users\Wallace\AppData\Roaming\ZHP\Licence.txt =>.Nicolas Coolman

---\\ Softwares de proteçao do sistema
Malwarebytes Anti-Malware versão 1.75.0.1300
Microsoft Security Client v4.4.0304.0
Windows Defender W7

---\\ Softwares d'optimização do sistema
CCleaner v4.10 =>Piriform Ltd
RegCure Pro v3.1.7.0 =>Rogue.RegCurePro

---\\ Softwares de partilha do PeerToPeer (P2P)

---\\ Monitoramento dos softwares
Adobe Flash Player 12 ActiveX
Java 7 Update 51

---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6033 MB (76% free)
System Restore: Activé (Enable)
System drive C: has 129 GB (53%) free of 244 GB

---\\ Modo de conexão ao sistema
~ Computer Name: WALLACE-PC
~ User Name: Wallace
~ All Users Names: Wallace, Convidado, Administrador,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator

---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\Wallace\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Wallace\AppData\Roaming\
~ %Desktop% : C:\Users\Wallace\Desktop\
~ %Favorites% : C:\Users\Wallace\Favorites\
~ %LocalAppData% : C:\Users\Wallace\AppData\Local\
~ %StartMenu% : C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 129 Go of 244 Go)
D: CD-ROM drive (Not Inserted)
E: Hard drive, Flash drive, Thumb drive (Free 222 Go of 222 Go)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
G: CD-ROM drive (Not Inserted)
H: CD-ROM drive (Not Inserted)



---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 41 Legitimates Filtered in 00mn 00s



---\\ Pesquisa particular de ficheiros genéricos
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Windows Explorer.) (.25/02/2011 - 03:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 22:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.263B6E451526A90FF8B1CEC759F22956] - (.Microsoft Corporation - Internet Extensions para Win32.) (.06/02/2014 - 06:24:52.) -- C:\Windows\System32\wininet.dll [2334208]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.21/11/2010 - 00:24:29.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.21/11/2010 - 00:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.27/09/2013 - 22:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 22:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 20:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 00:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 00:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 00:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 20:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 21:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.26/04/2011 - 23:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 00:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.12/04/2013 - 11:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 21:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 00:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 21:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 00:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.21/11/2010 - 00:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s



---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 1/11
~ Mes Favoris (My Favorites) : 1/23
~ Mes Documents (My Documents) : 1/98
~ Mon Bureau (My Desktop) : 1/2773
~ Menu demarrer (Programs) : 1/73
~ Hidden Files: Scanned in 00mn 06s



---\\ Processos lançados
[MD5.56610873BA9E3306CFEE23DC51CC948B] - (.No owner - GUI MFC Application.) -- C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe [219760] [PID.3300]
[MD5.9D4A0ECBF734E2EECDD5B473A2D705FE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016] [PID.3664]
[MD5.026C4CA19FAE1F84894A99735B15AACA] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [859464] [PID.3788]
[MD5.66EA3B698F9A7EA2DBF0E4B246B6C958] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8349696] [PID.1756]
[MD5.A3A35EE79C64A640152B3113E6E254E2] - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) -- C:\Windows\SysWOW64\cscript.exe [126976] [PID.2408]
[MD5.205E1B699FD3F2F9B036EEA2EC30C620] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.1736]
[MD5.33D4D4A24791587E83F7EE05A446FB7E] - (.Intel Corporation - Intel(R) Integrated Clock Controller Servic.) -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256] [PID.3544]
[MD5.2C24DC448DBE8DB9BE1441B824C57E79] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [277824] [PID.3524]
~ Processes Running: Scanned in 00mn 00s



---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\Wallace\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
~ Google Browser: 15 Legitimates Filtered in 00mn 30s



---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Outras conexões do utilizador (04)
O4 - GS\Desktop [Public]: ET6.lnk . (...) -- C:\Program Files (x86)\GIGABYTE\ET6\ET6SC.exe
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: Warface.lnk . (.Level Up! Interactive S.A. - Launcher Warface.) -- C:\Level Up! Games\Warface\Launcher\Launcher.exe
O4 - GS\QuickLaunch [Wallace]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Wallace]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [Wallace]: Registry Easy.lnk . (.CheeseSoft Inc. - Registry Easy.) -- C:\Program Files\Registry Easy\RegEasyCleaner.exe
O4 - GS\QuickLaunch [Wallace]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Wallace\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - GS\TaskBar [Wallace]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Wallace]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Program [Wallace]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Wallace]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SendTo [Wallace]: Transferência de Arquivo Bluetooth.LNK . (.Microsoft Corporation - No Comment.) -- C:\Windows\System32\fsquirt.exe
O4 - GS\Desktop [Wallace]: RegCure Pro.lnk . (...) -- C:\Program Files (x86)\ParetoLogic\RegCure Pro\RegCurePro.exe (.not file.) =>Rogue.RegCurePro
~ Global Startup: 57 Legitimates Filtered in 00mn 03s



---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- C:\Program Files\Microsoft Security Client\msseces.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKLM\..\Wow6432Node\RunOnce: [EasyTuneVI] . (.No owner - ETcall MFC Application.) -- C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-166550370-635326975-3656828218-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
~ Application: Scanned in 00mn 00s



---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{593C7CF7-8938-4C9B-A870-0B8B246B296B}: NameServer = 198.153.194.1,198.153.192.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{B31DA6C1-EC2A-4046-9FA6-5D7678A91E85}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{593C7CF7-8938-4C9B-A870-0B8B246B296B}: NameServer = 198.153.194.1,198.153.192.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{B31DA6C1-EC2A-4046-9FA6-5D7678A91E85}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{593C7CF7-8938-4C9B-A870-0B8B246B296B}: NameServer = 198.153.194.1,198.153.192.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{B31DA6C1-EC2A-4046-9FA6-5D7678A91E85}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocolo adicional (018)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Tarefas planificadas automaticamente (039)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job [498] =>PUP.Paretologic
[MD5.00000000000000000000000000000000] [APT] [ParetoLogic Update Version3 Startup Task] (...) -- C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe (.not file.) [0] =>PUP.Paretologic
[MD5.354B869D0C2707DB12F1666F1EB0C3A9] [APT] [{79903705-30A4-407D-BB60-ACF8BA1BAA50}] (...) -- C:\Users\Wallace\Downloads\CS 1.6 - 2013.exe [280279178]
~ Scheduled Task: 15 Legitimates Filtered in 00mn 06s



---\\ Software instalados (042)
O42 - Logiciel: Counter Strike 1.6 - 2013 - (...) [HKLM][64Bits] -- Counter Strike 1.6 - 2013
O42 - Logiciel: PacSteamT - (.PaCmAn_Packs.) [HKLM][64Bits] -- PacSteamT
O42 - Logiciel: RegCure Pro - (.ParetoLogic, Inc..) [HKLM][64Bits] -- {C547F361-5750-4CD1-9FB6-BC93827CB6C1} =>Rogue.RegCurePro
O42 - Logiciel: Registry Easy v5.6 - (.CheeseSoft Inc..) [HKLM][64Bits] -- Registry Easy_is1
O42 - Logiciel: Warface - (.Level Up! Games.) [HKLM][64Bits] -- {094FAADD-5A39-4C64-911A-B4C9AD818484}_is1
~ Logic: 24 Legitimates Filtered in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Baidu Security] =>Adware.BDSearch
[HKCU\Software\CoolROM]
[HKCU\Software\RegistryEasy]
[HKCU\Software\RobloxReg]
[HKCU\Software\StudioQTRobloxReg]
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Baidu_Drp_pos] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Level Up! Interactive]
~ Key Software: 218 Legitimates Filtered in 00mn 00s



---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 23/02/2014 - 23:20:59 - [534,070] ----D C:\Program Files (x86)\Counter Strike 1.6
O43 - CFD: 02/03/2014 - 02:31:35 - [0] ----D C:\ProgramData\Baidu Security =>Adware.BDSearch
O43 - CFD: 02/03/2014 - 02:31:53 - [2,821] ----D C:\Users\Wallace\AppData\Roaming\Baidu Security =>Adware.BDSearch
O43 - CFD: 23/02/2014 - 15:36:30 - [0] ----D C:\Users\Wallace\AppData\Roaming\libraries
O43 - CFD: 22/02/2014 - 15:58:02 - [58,951] ----D C:\Users\Wallace\AppData\Roaming\pxgclient
O43 - CFD: 23/02/2014 - 15:36:29 - [4,529] ----D C:\Users\Wallace\AppData\Roaming\versions
O43 - CFD: 22/02/2014 - 17:55:05 - [152,791] ----D C:\Users\Wallace\AppData\Local\Roblox
O43 - CFD: 23/02/2014 - 23:19:07 - [0,006] ----D C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013
O43 - CFD: 07/03/2014 - 20:54:18 - [0,004] ----D C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PacSteamT
O43 - CFD: 27/02/2014 - 19:24:13 - [0,002] ----D C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
~ Program Folder: 139 Legitimates Filtered in 00mn 19s



---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.0F58CCD58A29827B5D406874360E4C08] - 06/03/2014 - 21:45:36 ---A- . (...) -- C:\Windows\System32\dsetup32.dll [1801048]
O44 - LFC:[MD5.286B6AD418744DF0545AD9951858B562] - 08/03/2014 - 17:23:19 ---A- . (.No owner - Create a ZIP archive.) -- C:\Windows\System32\LiteZip.dll [40448]
O44 - LFC:[MD5.CC356317FECEAEB3F98DD72170E0B279] - 08/03/2014 - 17:24:50 ---A- . (...) -- C:\Windows\System32\7ZipDLL.dll [548352]
O44 - LFC:[MD5.2E02C33404EBD304BA241C684465C759] - 09/03/2014 - 00:43:11 ---A- . (...) -- C:\Windows\DirectX.log [231615]
O44 - LFC:[MD5.8126331FBD4ED29EB3B356F9C905064D] - 09/03/2014 - 01:39:31 ---A- . (...) -- C:\Windows\GVTDrv64.sys [30528]
O44 - LFC:[MD5.91C8F87BB657A10820ED9E94738C5CA6] - 09/03/2014 - 01:45:07 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [147638]
O44 - LFC:[MD5.532624033715F8A5B83980460F31E993] - 09/03/2014 - 01:45:07 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [705798]
O44 - LFC:[MD5.F862CD08F1AD4EE39BD506853F3C6103] - 22/02/2014 - 19:51:38 ---A- . (...) -- C:\Windows\System32\ieuinit.inf [16284]
O44 - LFC:[MD5.598AB642A2B685EB427D3C9FE0B60776] - 25/02/2014 - 13:41:44 ----- . (...) -- C:\Windows\hpomdl46.dat [601]
O44 - LFC:[MD5.3E6F24B5319C375DD219EE357D9BAB06] - 25/02/2014 - 13:52:27 ---A- . (...) -- C:\Windows\win.ini [438]
O44 - LFC:[MD5.7B5788896A7F8BBE4022EA54C64D9192] - 25/02/2014 - 13:52:46 ---A- . (...) -- C:\Windows\hpoins46.dat [209908]
O44 - LFC:[MD5.2925153AD27D835B26B0928F3DF51947] - 26/02/2014 - 23:17:57 --HA- . (...) -- C:\7E66CB832104 [40]
~ Files: 276 Legitimates Filtered in 00mn 08s



---\\ Chave do registo Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{3eae79ae-a1cd-11e3-a0c2-902b34fc861d}\AutoRun\command. (...) -- G:\Setup.exe (.not file.)
O51 - MPSK:{e18709de-9bd7-11e3-b379-806e6f6e6963}\AutoRun\command. (...) -- D:\Run.exe (.not file.)
~ Keys: Scanned in 00mn 00s



---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s



---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:[MD5.51D50A9A72C18E4629891BF381D123BA] - 13/12/2012 - 12:41:10 ---A- . (.Windows (R) Win 7 DDK provider - Explore Systems Virtual Audio Device.) -- C:\Windows\System32\Drivers\dfx11_1x64.sys [28008]
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 13/07/2009 - 22:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 17:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 13/07/2009 - 22:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
~ Drivers: 16 Legitimates Filtered in 00mn 16s



---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s



---\\ Associações Shell Spawning (O67)
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s



---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s



---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys: Scanned in 00mn 00s



---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.F9FDE0F4772EF5C609AF3ACC4E6EE364] [SPRF][23/02/2014] (...) -- C:\Users\Wallace\Desktop\KeiNett Launcher.exe [1157447]
~ Files: 1 Legitimates Filtered in 00mn 00s



---\\ Lista das exceções do FireWall (FirewallRules) (O87)
O87 - FAEL: "TCP Query User{B335BF05-AF3B-438F-AFD1-D845D2E1E629}C:\users\wallace\downloads\garrys.mod.13.v163\garry's mod\hl2.exe" | In - Private - P6 - TRUE | .(...) -- C:\users\wallace\downloads\garrys.mod.13.v163\garry's mod\hl2.exe
O87 - FAEL: "UDP Query User{EE91E209-6A59-451D-B21E-AF214D2AE78B}C:\users\wallace\downloads\garrys.mod.13.v163\garry's mod\hl2.exe" | In - Private - P17 - TRUE | .(...) -- C:\users\wallace\downloads\garrys.mod.13.v163\garry's mod\hl2.exe
O87 - FAEL: "{EEA18ED4-713F-4A57-95B2-508327361FB3}" | In - Public - P17 - TRUE | .(...) -- C:\users\wallace\downloads\garrys.mod.13.v163\garry's mod\hl2.exe
O87 - FAEL: "{60F71F7E-CD73-4590-8E92-A65C1AB21317}" | In - Public - P6 - TRUE | .(...) -- C:\users\wallace\downloads\garrys.mod.13.v163\garry's mod\hl2.exe
~ Firewall: 173 Legitimates Filtered in 00mn 02s



---\\ Pesquisa dos pacotes WindowsInstaller (WIS) (O93) (NTFS)
[MD5.0907B6D7F137D3C6F401A2F85398DB93] [WIS][10/09/2012] (.HP - HP Unified IO.) -- C:\Windows\Installer\219be11.msi [1916928]
[MD5.55AE59D648BE8E81535D97ED48D14678] [WIS][18/11/2009] (.Builds the Destinations MSI - Builds the Destinations MSI.) -- C:\Windows\Installer\240ae8b.msi [522752]
~ WIS: 57 Legitimates Filtered in 00mn 06s



---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 22/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 29/01/2014 279000 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SS - | Auto 22/02/2014 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 22/02/2014 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 04/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
SS - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SS - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
SS - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
SS - | Auto 13/07/2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Auto 13/07/2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 25/02/2014 568512 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SS - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SS - | Demand 13/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

SR - | Auto 26/02/2014 2224976 | (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
SR - | Demand 13/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 13/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 13/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Demand 30/08/2011 160256 | (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Auto 26/02/2014 377616 | (LMIGuardianSvc) . (.LogMeIn, Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 23/10/2013 23808 | (MsMpSvc) . (.Microsoft Corporation.) - C:\Program Files\Microsoft Security Client\MsMpEng.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SR - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 13/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Services: Scanned in 00mn 07s



---\\ Scâner Aditional (088)
Database Version : 13031 - (03/03/2014)
Clés trouvées (Keys found) : 2
Valeurs trouvées (Values found) : 2
Dossiers trouvés (Folders found) : 2
Fichiers trouvés (Files found) : 6

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C547F361-5750-4CD1-9FB6-BC93827CB6C1}] =>Rogue.RegCurePro^
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C547F361-5750-4CD1-9FB6-BC93827CB6C1}] =>Rogue.RegCurePro
C:\ProgramData\Baidu Security =>Adware.BDSearch^
C:\Users\Wallace\AppData\Roaming\Baidu Security =>Adware.BDSearch^
C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job =>PUP.Paretologic^
[HKCU\Software\Baidu Security] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\Baidu_Drp_pos] =>Adware.BDSearch^
C:\Windows\Tasks\RegCure Pro Startup.job =>Rogue.RegCurePro
C:\Windows\Tasks\RegCure Pro.job =>Rogue.RegCurePro
~ Additionnel Scan: 218630 Items scanned in 00mn 17s



---\\ Sumário das deteções encontradas na sua estação
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Paretologic
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.BDSearch
~ MSI: 2 link(s) detected in 00mn 17s



~ 1147 Legitimates filtered by white list
End of the scan (422 lines in 02mn 07s)(0)

 Copie todo o texto destacado em vermelho que te passei (começando em script zhpfix e indo até emptyclsid)
_____________________________________________________________________________________________________________

 Vá no menu: Iniciar > Todos os programas > ZHP > Abra o Zhpfix > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta.

Rapport de ZHPFix 2014.2.16.5 par Nicolas Coolman, Update du 16/02/2014
Fichier d'export Registre :
Run by Wallace at 09/03/2014 16:47:41
High Elevated Privileges : OK
Windows 7 Home Basic Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 08s)
Reparação de atalhos do navegador

========== Softwares ==========
AUSENTE Uninstall Process: c:\program files (x86)\paretologic\regcure pro\uninstall.exe

========== Chaves do Registo ==========
ELIMINÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C547F361-5750-4CD1-9FB6-BC93827CB6C1}]
ELIMINÉ: HKCU\Software\Baidu Security
ELIMINÉ: HKLM\Software\Wow6432Node\Baidu Security
ELIMINÉ: HKLM\Software\Wow6432Node\Baidu_Drp_pos
ELIMINÉ CLSID MPSK: {3eae79ae-a1cd-11e3-a0c2-902b34fc861d}
ELIMINÉ CLSID MPSK: {e18709de-9bd7-11e3-b379-806e6f6e6963}

========== Valores do Registo ==========
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\users\wallace\appdata\roaming\microsoft\internet explorer\quick launch\registry easy.lnk
ELIMINÉ: c:\program files\registry easy\regeasycleaner.exe
ELIMINÉ: c:\users\wallace\desktop\regcure pro.lnk
ELIMINÉ: c:\windows\tasks\paretologic update version3 startup task.job
ELIMINÉ: C:\Windows\Tasks\RegCure Pro Startup.job
ELIMINÉ: C:\Windows\Tasks\RegCure Pro.job
ELIMINÉ Temporários windows (92) (1.116.522.407 octets)
ELIMINÉ Flash Cookies (0) (0 octets)

========== Script do Registo ==========
File: RegCure Pro v3.1.7.0Extensão do ficheiro do registo inválida:

========== Tarefa planificada ==========
ELIMINÉ: ParetoLogic Update Version3 Startup Task

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso


========== Recapitulativo ==========
6 : Chaves do Registo
6 : Valores do Registo
1 : Pastas
8 : Ficheiros
1 : Softwares
1 : Tarefa planificada
1 : Restauração Sistema


End of clean in 00mn 24s

========== Caminho do ficheiro do relatório ==========
C:\Users\Wallace\AppData\Roaming\ZHP\ZHPFix[R1].txt - 09/03/2014 16:47:50 [2255]

 Siga, por gentileza, as dicas do tutorial abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste, por gentileza, o log do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Basic x64
Ran by Wallace on 09/03/2014 at 18:41:41,69
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09/03/2014 at 18:45:54,83
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Como está o PC atualmente?

Continua com o mesmo erro !

 Desative temporariamente seu antivírus para evitar conflitos.

Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Wallace on 09/03/2014 at 19:31:14,27.
Microsoft Windows 7 Home Basic 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Wallace\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

09/03/2014 19:31:57 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\Wallace\AppData\Roaming\rustlauncher.ini deleted
C:\PROGRA~3\Package Cache deleted
"C:\Users\Wallace\AppData\Roaming\vlc\vlcrc" deleted
"C:\Users\Wallace\AppData\Roaming\vlc" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [25/02/2014 13:50]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [25/02/2014 13:50]

==== Chrome Look ======================

Google Docs - Wallace\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Wallace\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Wallace\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Wallace\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Wallet - Wallace\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Wallace\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.com.br/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.com.br/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Wallace\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Wallace\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\Wallace\Desktop\ZHPDiag.lnk - C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
C:\Users\Wallace\Desktop\ZHPFix.lnk - C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe
C:\Users\Wallace\Desktop\PacSteamT\PacSteam Inventory.lnk - C:\PacSteamT\Inventory.exe
C:\Users\Wallace\Desktop\PacSteamT\ReadMe.lnk - C:\PacSteamT\ReadMe.txt
C:\Users\Wallace\Desktop\PacSteamT\PacSteamT\AutoUpdator.lnk - C:\Program Files (x86)\Common Files\Thraex Software\AutoUpdator\AutoUpdator.exe
C:\Users\Wallace\Desktop\PacSteamT\PacSteamT\PacSteamT Uninstalller.lnk - C:\PacSteamT\PacSteamT-Uninstall.bat
C:\Users\Wallace\Desktop\Tudo do Wallace\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\Users\Wallace\Desktop\Tudo do Wallace\Combat Arms.lnk - C:\Level Up Games\Combat Arms\CombatArms.exe
C:\Users\Wallace\Desktop\Tudo do Wallace\Counter Strike 1.6.lnk - C:\Program Files (x86)\Counter Strike 1.6\hl.exe -nomaster -game cstrike
C:\Users\Wallace\Desktop\Tudo do Wallace\Dedicated Server.lnk - C:\Program Files (x86)\Counter Strike 1.6\hlds.exe -nomaster -game cstrike -insecure
C:\Users\Wallace\Desktop\Tudo do Wallace\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\Wallace\Desktop\Tudo do Wallace\I-Doser Premium.lnk - C:\Program Files (x86)\I-Doser Premium\IDoser.exe
C:\Users\Wallace\Desktop\Tudo do Wallace\Loja de Suprimentos HP.lnk - C:\Program Files (x86)\HP\HPSSUPPLY\hpqSSupply.exe
C:\Users\Wallace\Desktop\Tudo do Wallace\ROBLOX Player.lnk - C:\Users\Wallace\AppData\Local\Roblox\Versions\version-7cb30356092f43ac\RobloxPlayerLauncher.exe -browser
C:\Users\Wallace\Desktop\Tudo do Wallace\ROBLOX Studio 2013.lnk - C:\Users\Wallace\AppData\Local\Roblox\Versions\RobloxStudioLauncherBeta.exe -ide
C:\Users\Wallace\Desktop\Tudo do Wallace\µTorrent.lnk -

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Camtasia Studio 8.lnk - C:\Program Files (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
C:\Users\Public\Desktop\DAEMON Tools Lite.lnk - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\Public\Desktop\ET6.lnk - C:\Program Files (x86)\GIGABYTE\ET6\ET6SC.exe
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe
C:\Users\Public\Desktop\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Public\Desktop\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe -extoff
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Burn Recorder.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind ExpressBurn
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Rip Extractor.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Rip
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Crescendo Music Notation.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Crescendo
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Dictation Recorder.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Express
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\DJ Mixing Software.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Zulu
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Multitrack Mixer.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Record to CD or Mp3 Wizard.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Golden
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Switch
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Editor.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind WavePad
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Recorder.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind RecordPad
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Recorder.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind SoundTap
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Server.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind BroadWave
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Text-to-Speech Reader.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Verbose
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Voice Changing Software.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Voxal
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013\Counter Strike Curitiba.lnk - C:\Program Files (x86)\Counter Strike 1.6\CS Curitiba.url
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013\Jogar - CS 1.6 - 2013.lnk - C:\Program Files (x86)\Counter Strike 1.6\hl.exe -nomaster -game cstrike
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013\Remover - CS 1.6 - 2013.lnk - C:\Program Files (x86)\Counter Strike 1.6\remover.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013\Servidor - CS 1.6 - 2013.lnk - C:\Program Files (x86)\Counter Strike 1.6\hlds.exe -nomaster -game cstrike -insecure
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Steam Half-life 2 Deathmatch™.lnk -
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP\HP ePrint\Desinstalar software do produto.lnk - C:\Program Files (x86)\HP\csiInstaller\2794875B-6CCF-48B8-84A5-5B10DB98BEE6\Setup.exe /Uninstall
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind ExpressAccounts
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Classic FTP Software.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind ClassicFTP
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Doxillion Document Converter.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Doxillion
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Burn CD, DVD or Blu-Ray.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind ExpressBurn
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Dictate Recorder.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Express
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Rip CD Ripper.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Rip
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Zip File Compression.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind ExpressZip
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Graphics File Converter.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Pixillion
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind ExpressInvoice
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Prism
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind RecordPad
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind SoundTap
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Switch
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind Debut
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind VideoPad
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe -extfind WavePad
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PacSteamT\PacSteam Inventory.lnk - C:\PacSteamT\Inventory.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PacSteamT\ReadMe.lnk - C:\PacSteamT\ReadMe.txt
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PacSteamT\PacSteamT\AutoUpdator.lnk - C:\Program Files (x86)\Common Files\Thraex Software\AutoUpdator\AutoUpdator.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PacSteamT\PacSteamT\PacSteamT Uninstalller.lnk - C:\PacSteamT\PacSteamT-Uninstall.bat
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox\ROBLOX Player.lnk - C:\Users\Wallace\AppData\Local\Roblox\Versions\version-9dddd6d1e4534c53\RobloxPlayerLauncher.exe -browser
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox\ROBLOX Studio 2013.lnk - C:\Users\Wallace\AppData\Local\Roblox\Versions\RobloxStudioLauncherBeta.exe -ide
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Ajuda do WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.chm
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Manual do Console RAR.lnk - C:\Program Files (x86)\WinRAR\Rar.txt
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\O que há de novo na última versão.lnk -
C:\Users\Wallace\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Central de Soluções HP.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk - C:\Program Files (x86)\Microsoft Security Client\msseces.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad.lnk - C:\Program Files (x86)\NCH Software\MixPad\mixpad.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Sound Editor.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Bluetooth File Transfer Wizard.lnk - C:\Windows\System32\fsquirt.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Mobility Center.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk - C:\Windows\system32\mstsc.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Burn Recorder.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind ExpressBurn
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Rip Extractor.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Rip
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Crescendo Music Notation.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Crescendo
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Dictation Recorder.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Express
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\DJ Mixing Software.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Zulu
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Multitrack Mixer.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind MixPad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Record to CD or Mp3 Wizard.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Golden
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Switch
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Editor.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Recorder.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind RecordPad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Recorder.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind SoundTap
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Server.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind BroadWave
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Text-to-Speech Reader.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Verbose
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Voice Changing Software.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Voxal
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive\ArmA 2 Free\BattlEye\Uninstall BattlEye.lnk - C:\Program Files (x86)\Steam\SteamApps\common\ARMA 2 Free\BattlEye\UnInstallBE.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Black Ops 2\Call of Duty Black Ops 2.lnk - C:\Program Files (x86)\Call of Duty Black Ops 2\t6sp.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk - C:\Program Files\CCleaner\uninst.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013\Counter Strike Curitiba.lnk - C:\Program Files (x86)\Counter Strike 1.6\CS Curitiba.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013\Jogar - CS 1.6 - 2013.lnk - C:\Program Files (x86)\Counter Strike 1.6\hl.exe -nomaster -game cstrike
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013\Remover - CS 1.6 - 2013.lnk - C:\Program Files (x86)\Counter Strike 1.6\remover.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013\Servidor - CS 1.6 - 2013.lnk - C:\Program Files (x86)\Counter Strike 1.6\hlds.exe -nomaster -game cstrike -insecure
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\DTGadget.lnk - C:\Program Files (x86)\DAEMON Tools Lite\DT.gadget
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\SPTD Setup.lnk - C:\Program Files (x86)\DAEMON Tools Lite\SPTDinst-x64.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\@BIOS.lnk - C:\Program Files (x86)\Gigabyte\@BIOS\BIOS_Run.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\AutoGreen\AutoGreen.lnk - C:\Windows\Installer\{C75FAD21-EC08-42F3-92D6-C9C0AB355345}\CallAG.exe_C75FAD21EC0842F392D6C9C0AB355345.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\ET6\ET6.lnk - C:\Windows\Installer\{457D7505-D665-4F95-91C3-ECB8C56E9ACA}\ET6SC.exe_457D7505D6654F9591C3ECB8C56E9ACA.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\ET6\Help.lnk - C:\Program Files (x86)\GIGABYTE\ET6\et6help.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE\ET6\UnInstall.lnk - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriver.exe /M{457D7505-D665-4F95-91C3-ECB8C56E9ACA}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Atualização HP.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Central de Soluções HP.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Loja de Suprimentos HP.lnk - C:\Program Files (x86)\HP\HPSSUPPLY\hpqSSupply.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Smart Web Printing\Ajuda da HP Smart Web Printing.lnk - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\Help\hpsmartprint.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Photosmart D110 series\Adicionar dispositivo.lnk - C:\Program Files (x86)\HP\Digital Imaging\{14BC6853-A74E-4874-B50D-679889D1544D}\hpzstub.exe -addadevice
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Photosmart D110 series\Ajuda.lnk - C:\Program Files (x86)\HP\Digital Imaging\HelpViewer\hpqhvshm.exe /product-class=HP Photosmart D110 series
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Photosmart D110 series\Desinstalar.lnk - C:\Program Files (x86)\HP\Digital Imaging\{14BC6853-A74E-4874-B50D-679889D1544D}\setup\hpzscr40.exe -datfile hposcr46.dat -onestop -forcereboot
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Photosmart D110 series\Leiame.lnk - C:\Program Files (x86)\HP\Digital Imaging\help\PS_AIO_07_D110_readme\readme.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Photosmart D110 series\Registro do produto.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe "HP Photosmart D110 series"
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Photosmart D110 series\Site de suporte a produtos.lnk - C:\Program Files (x86)\HP\Digital Imaging\HP Photosmart D110 series\help\HP Product Support Website.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Photosmart D110 series\USB para sem fio.lnk - C:\Program Files (x86)\HP\Digital Imaging\{14BC6853-A74E-4874-B50D-679889D1544D}\hpzstub.exe -addadevice -usbtowireless
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk - C:\Program Files (x86)\Java\jre7\bin\javacpl.exe -tab about
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk - C:\Program Files (x86)\Java\jre7\bin\javacpl.exe -tab update
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk - C:\Program Files (x86)\Java\jre7\bin\javacpl.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Level Up\Combat Arms.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Level Up Games\Warface\Warface.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\LogMeIn Hamachi.lnk - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\Uninstall.lnk - C:\Windows\SysWOW64\msiexec.exe /i {91BA5476-8B26-49E4-84B2-9EFE10917B33} REMOVE=ALL
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Desinstalar Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware Help.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\chameleon.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\Silverlight.Configuration.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind ExpressAccounts
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Classic FTP Software.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind ClassicFTP
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Doxillion Document Converter.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Doxillion
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Burn CD, DVD or Blu-Ray.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind ExpressBurn
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Dictate Recorder.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Express
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Rip CD Ripper.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Rip
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Zip File Compression.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind ExpressZip
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Graphics File Converter.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Pixillion
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind ExpressInvoice
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind MixPad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Prism
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind RecordPad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind SoundTap
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Switch
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind Debut
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe -extfind VideoPad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk - C:\Program Files (x86)\NCH Software\WavePad\wavepad.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PacSteamT\PacSteam Inventory.lnk - C:\PacSteamT\Inventory.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PacSteamT\ReadMe.lnk - C:\PacSteamT\ReadMe.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PacSteamT\PacSteamT\AutoUpdator.lnk - C:\Program Files (x86)\Common Files\Thraex Software\AutoUpdator\AutoUpdator.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PacSteamT\PacSteamT\PacSteamT Uninstalller.lnk - C:\PacSteamT\PacSteamT-Uninstall.bat
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registry Easy\Registry Easy Help.lnk - C:\Program Files\Registry Easy\EasyHelp.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registry Easy\Registry Easy on the Web.lnk - C:\Program Files\Registry Easy\RegistryEasy.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registry Easy\Registry Easy.lnk - C:\Program Files\Registry Easy\RegEasyCleaner.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Registry Easy\Uninstall Registry Easy.lnk - C:\Program Files\Registry Easy\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk - C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.lnk - C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}\Icon048298C92.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\Camtasia Recorder 8.lnk - C:\Windows\Installer\{5303CFB5-D635-44F0-A94B-9611E81F07C4}\CamtasiaIcons.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\Camtasia Studio 8.lnk - C:\Windows\Installer\{5303CFB5-D635-44F0-A94B-9611E81F07C4}\CamtasiaIcons.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Ajuda do WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Manual do Console RAR.lnk - C:\Program Files (x86)\WinRAR\Rar.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\O que há de novo na última versão.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPDiag.lnk - C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPFix.lnk - C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Wallace\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\04UOZLG8 will be deleted at reboot
C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2VGM8A73 will be deleted at reboot
C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5UDQ8M4J will be deleted at reboot
C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9E9V3R49 will be deleted at reboot
C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V8ADQB8S will be deleted at reboot
C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W2TOC2GR will be deleted at reboot
C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZWT2RPYK will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Wallace\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=21 folders=23 21470694 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Wallace\AppData\Local\Temp will be emptied at reboot
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Wallace\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\04UOZLG8" not found
"C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2VGM8A73" not found
"C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5UDQ8M4J" not found
"C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9E9V3R49" not found
"C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V8ADQB8S" not found
"C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W2TOC2GR" not found
"C:\Users\Wallace\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZWT2RPYK" not found

==== EOF on 09/03/2014 at 19:41:29,18 ======================

e o erro continua !

Siga, por gentileza, as dicas deste tutorial para fazer um escaneamento de seu PC pelo Nod32 Online:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Após o término do escaneamento será gerado um relatório (log) que estará no seguinte local do seu computador:
C:\Arquivos de programas\Eset\Eset Online Scanner\log.txt

Na sua próxima resposta poste este log do Nod32 Online.

Ficamos no aguardo de sua resposta.

Cara eu entro no NOD32 la pelo IE e n acho esse botão qe dizem pra eu clicar só aparece um negocio de free trial e talz

Você pode fazer o escaneamento com ele por qualquer navegador.

Ja resolvi valeu sou burro mesmo heuheahueua

Ta escaneando vai demorar bastante ainda ta em 14% quando acabar posto o relatorio !

Como você informou via MP que o site do Nod32 está com problema neste momento, siga esta outra dica abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log do Kaspersky Virus Removal Tool.

Ficamos no aguardo.

ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK


é so isso ? LOL

O NOD FUNCIONOU !

Só que o log dele ficou com problema, tem vezes que acontece isto no relatório dele. Mas você viu se ele detectou e removeu alguns vírus?

Bom no final de tudo tinha 14 ou 16 virus ai n tinha tipo um botão escrito CLEAN ou nada nem no tutorial mostro então apareceu lá os virus e eu dei finish unica solução