Adwares com propagandas de jogos

Bem melhor.

Agora Power Max, não entendi o que você me pediu em relação aos arquivos C:\ProgramData\d0feb669ee8aa93?

Renato L. Galeno escreveu:Agora Power Max, não entendi o que você me pediu em relação aos arquivos C:\ProgramData\d0feb669ee8aa93?

é porque esta pasta é meio suspeita. Então pedi que você enviasse os arquivos desta pasta para serem analisados no site Virus Total (que é um site que analisa o arquivo com vários antivirus ao mesmo tempo) para vermos se há virus nesta pasta ou não.
________________________________________________________________________________________

 Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e salve-o no Desktop (Área de Trabalho)

Obs: Ao acessar o link acima, clique no botão Download Now 32-Bit Version

*Execute o FRST e aceite o contrato


*Clique [Scan]


*Ao término clique [OK] > [OK]



*Serão criados dois relatórios no Desktop: FRST.txt e Addition.txt

Poste estes dois relatórios em sua próxima resposta. (Obs: se não couber em uma só resposta, pode dividi-la em mais postagens).

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by Renato at 2014-04-09 00:41:53
Running from C:\Users\Renato\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Out of date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

„Windows Live Essentials“ (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
„Windows Live Mail“ (Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden
„Windows Live Messenger“ (Version: 15.4.3538.0513 - „Microsoft Corporation“) Hidden
„Windows Live“ fotogalerija (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Adobe Flash Player 11 ActiveX (HKLM\...\{41042E28-CCA1-4147-869F-9E928B38F04C}) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader 9.1 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.)
Atheros Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
awesomehp uninstaller (HKLM\...\awesomehp uninstaller) (Version: - awesomehp) <==== ATTENTION
BatteryLifeExtender (HKLM\...\{FFD0E594-823B-4E2B-B680-720B3C852588}) (Version: 1.0.11 - Samsung)
CyberLink Media Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2227 - CyberLink Corp.)
CyberLink Media Suite (Version: 8.0.2227 - CyberLink Corp.) Hidden
CyberLink Media+ Player10 (HKLM\...\InstallShield_{34FBC7C4-CD31-4D93-A428-0E524EAC4586}) (Version: 10.0.1110.00 - CyberLink Corp.)
CyberLink Media+ Player10 (Version: 10.0.1110.00 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1130a - CyberLink Corp.)
CyberLink MediaShow (Version: 5.0.1130a - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3802 - CyberLink Corp.)
CyberLink Power2Go (Version: 6.1.3802 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3306 - CyberLink Corp.)
CyberLink PowerDirector (Version: 8.0.3306 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3509 - CyberLink Corp.)
CyberLink YouCam (Version: 3.1.3509 - CyberLink Corp.) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Easy Content Share (HKLM\...\{2DDC70C1-C77A-4D08-89D2-9AB648504533}) (Version: 1.0 - Samsung Electronics Co., LTD)
Easy Display Manager (HKLM\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.2 - Samsung Electronics Co., Ltd.)
Easy Network Manager (HKLM\...\{8732818E-CA78-4ACB-B077-22311BF4C0E4}) (Version: 4.4.7 - Samsung)
Easy SpeedUp Manager (HKLM\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.1.1.1 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (HKLM\...\{607DA1C8-34EC-4D7A-AD83-F8E5C70736DF}) (Version: 4.0.0.4 - Samsung)
EasyFileShare (HKLM\...\{16880765-677F-440B-B16A-BFD9B9C00012}) (Version: 1.0.12 - Samsung)
ETDWare PS/2-X86 8.0.7.2_WHQL (HKLM\...\Elantech) (Version: 8.0.7.2 - ELAN Microelectronic Corp.)
Fast Start (HKLM\...\{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}) (Version: 2.2.0.1 - SAMSUNG)
Fotogalerija Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Intel(R) Control Center (HKLM\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2266 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{3C41721F-AF0F-4086-AA1C-4C7F29076228}) (Version: 14.01.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.5.1001 - Intel Corporation)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LibreOffice 3.5 (HKLM\...\{EF790F1C-CB0C-4B95-8C54-60783F3B6661}) (Version: 3.5.4.2 - The Document Foundation)
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (PTB) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office com Clique para Executar 2010 (HKLM\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office com Clique para Executar 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Português (Brasil) (HKLM\...\{90140011-0066-0416-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
Multimedia POP (HKLM\...\{331ECF61-69AF-4F57-AC35-AFED610231C3}) (Version: 1.0 - )
Norton Internet Security (HKLM\...\NIS) (Version: 18.7.2.3 - Symantec Corporation)
Norton Online Backup (HKLM\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Poczta usługi Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PrivitizeVPN (HKLM\...\PrivitizeVPN) (Version: 1.0.0 - OOO Industry) <==== ATTENTION
PSafe Suite Desktop (HKLM\...\PSafe Suite Desktop) (Version: 1.1.61403.19101 - PSafe Tecnologia)
Raccolta foto di Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.40.126.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6499 - Realtek Semiconductor Corp.)
Samsung AnyWeb Print (HKLM\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 2.0.67.1 - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM\...\Samsung Printer Live Update) (Version: - Samsung Electronics Co., Ltd.)
Samsung Recovery Solution 5 (HKLM\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 5.0.1.0 - Samsung)
Samsung Support Center 1.0 (HKLM\...\{F687E657-F636-44DF-8125-9FEEA2C362F5}) (Version: 1.1.40 - Samsung)
Samsung Universal Print Driver (HKLM\...\Samsung Universal Print Driver) (Version: 2.02.05.00:27 - Samsung Electronics Co., Ltd.)
Samsung Universal Scan Driver (HKLM\...\Samsung Universal Scan Driver) (Version: 1.2.5.0 - Samsung Electronics Co., Ltd.)
Samsung Update Plus (HKLM\...\{142D8CA7-2C6F-45A7-83E3-099AAFD99133}) (Version: 3.0.0.17 - Samsung Electronics Co., Ltd.)
Skype™ 4.2 (HKLM\...\{D103C4BA-F905-437A-8049-DB24763BBE36}) (Version: 4.2.169 - Skype Technologies S.A.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
User Guide (HKLM\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.7 - )
VDownloader 3.9.1421 (HKLM\...\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1) (Version: - Vitzo Limited)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live fotoattēlu galerija (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Foto-galerija (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Pošta (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 메일 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 사진 갤러리 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 필수 패키지 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 照片库 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (HKLM\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live 程式集 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 软件包 (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinPcap 4.1.1 (HKLM\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
ZHPDiag 2014 (HKLM\...\ZHPDiag_is1) (Version: 2014 - Nicolas Coolman)
Συλλογή φωτογραφιών του Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Restore Points =========================

25-03-2014 19:27:24 Windows Update
01-04-2014 19:13:13 Windows Update
05-04-2014 01:52:22 Windows Update
07-04-2014 03:01:09 zoek.exe restore point
09-04-2014 02:24:37 ZHPFix Restore System Point
09-04-2014 03:11:47 Windows Update

==================== Hosts content: ==========================

2009-07-13 23:04 - 2014-04-07 00:01 - 00000840 ____A C:\windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {01569673-EB8A-48C5-ACC3-EA0967799050} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3950813928-957304356-2887969799-1000
Task: {02851449-868A-4286-AC77-A5619B5913C3} - System32\Tasks\MirageAgent => C:\Program Files\CyberLink\YouCam\YCMMirage.exe [2010-11-10] (CyberLink)
Task: {16D37B73-068C-4766-9B5A-50DF17782951} - System32\Tasks\EasySpeedUpManager => C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager2.exe [2010-12-22] (Samsung Electronics)
Task: {17EBF5EC-AC98-4176-B071-086D9488D6BD} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2011-10-12] (SAMSUNG Electronics)
Task: {25CBB77D-75B5-46DF-8D33-44C202623B7F} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2011-08-18] (Samsung Electronics Co., Ltd.)
Task: {2A1F2722-5B34-4065-B790-722405FB2CB5} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-20] (Adobe Systems Incorporated)
Task: {2A35A6D3-1ED8-47E1-9D63-DBD88550F26C} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files\Norton Internet Security\Engine\18.7.2.3\SymErr.exe [2012-06-07] (Symantec Corporation)
Task: {3F2FA91A-6621-4C1B-9447-11E652B923EB} - System32\Tasks\advSRS5 => C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe [2011-02-14] (SEC)
Task: {413C9F90-7EEA-4B01-BE53-EB3D17FD5870} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-08-26] (Samsung Electronics)
Task: {514E3C4D-3042-4CD4-BE9C-3093BAF136D9} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-12-17] (Samsung Electronics. Co. Ltd.)
Task: {5E4CB860-97AC-4F6A-80CD-08758A324516} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-02] (Google Inc.)
Task: {749B6C55-DB36-4AFF-B02A-46DBA097DFF1} - System32\Tasks\MovieColorEnhancer => C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-11-29] (Samsung Electronics Co., Ltd.)
Task: {AE4273ED-BC7A-4943-B98F-45DF27CAF496} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.)
Task: {B89A46D8-825A-40C4-9C8F-EDF543B4FA11} - System32\Tasks\WifiManager => C:\Program Files\Samsung\Easy Display Manager\WifiManager.exe [2011-02-15] (Samsung Electronics Co., Ltd.)
Task: {B9F7C053-E901-4B1E-9628-6C35C4E67AAF} - System32\Tasks\Symantec\Norton Error Processor 18.7.2.3 => C:\Program Files\Norton Internet Security\Engine\18.7.2.3\SymErr.exe [2012-06-07] (Symantec Corporation)
Task: {CCD262A4-B0C9-4C22-99D0-458C0978F0A6} - System32\Tasks\SmartSetting => C:\Program Files\Samsung\Easy Display Manager\SmartSetting.exe [2011-07-29] (Samsung Electronics Co., Ltd.)
Task: {CDEDDAD9-49D9-42D3-8BC9-039436708F72} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe [2010-08-05] (Samsung Electronics Co., Ltd.)
Task: {ED9ED2E1-76A8-4D8F-A2B9-D9151563CCB6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-06-02] (Google Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-12-03 21:34 - 2008-06-04 20:53 - 00026624 _____ () C:\windows\System32\spd__l.dll
2014-03-04 23:24 - 2014-03-19 19:51 - 00127688 _____ () C:\Program Files\PSafe\CrashLib.dll
2011-11-28 05:22 - 2009-12-01 04:21 - 00244904 _____ () C:\Program Files\CyberLink\Shared files\RichVideo.exe
2011-11-28 05:29 - 2010-07-05 07:42 - 00203776 ____N () C:\Program Files\Samsung\Movie Color Enhancer\WinCRT.dll
2014-03-04 23:24 - 2013-08-25 17:05 - 00838656 _____ () C:\Program Files\PSafe\plugins\platforms\qwindows.dll
2014-03-04 23:24 - 2013-08-25 17:04 - 00022016 _____ () C:\Program Files\PSafe\plugins\imageformats\qgif.dll
2014-03-04 23:24 - 2013-08-25 17:04 - 00021504 _____ () C:\Program Files\PSafe\plugins\imageformats\qico.dll
2014-03-04 23:24 - 2013-08-25 17:04 - 00205312 _____ () C:\Program Files\PSafe\plugins\imageformats\qjpeg.dll
2014-03-04 23:24 - 2014-02-05 19:34 - 09814968 ____R () C:\windows\system32\macromed\Flash\NPSWF32_11_4_402_287.dll
2012-01-13 02:56 - 2006-08-12 00:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
2011-11-28 05:37 - 2010-05-07 11:22 - 01636864 _____ () C:\Program Files\Samsung\Samsung Recovery Solution 5\Resdll.dll
2011-12-03 21:34 - 2010-10-21 15:24 - 00557056 _____ () C:\windows\system32\SnMinDrv.dll
2009-11-02 02:20 - 2009-11-02 02:20 - 00619816 _____ () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 02:23 - 2009-11-02 02:23 - 00013096 _____ () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
2010-12-16 05:37 - 2010-12-16 05:37 - 00094208 _____ () C:\windows\system32\IccLibDll.dll
2013-12-05 22:20 - 2013-12-03 23:47 - 00702416 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-05 22:20 - 2013-12-03 23:47 - 00099792 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-05 22:20 - 2013-12-03 23:48 - 04055504 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-05 22:20 - 2013-12-03 23:48 - 00399312 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-05 22:19 - 2013-12-03 23:47 - 01619408 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-05 22:20 - 2013-12-03 23:48 - 13586896 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptador de Túnel Teredo da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/09/2014 00:11:55 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..


Details:
AddWin32ServiceFiles: Unable to back up image of service SeaPort since QueryServiceConfig API failed

System Error:
O sistema não pode encontrar o arquivo especificado.
.

Error: (04/09/2014 00:11:55 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..


Details:
AddWin32ServiceFiles: Unable to back up image of service Bing Bar Update Service since QueryServiceConfig API failed

System Error:
O sistema não pode encontrar o arquivo especificado.
.

Error: (04/09/2014 00:11:55 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..


Details:
AddLegacyDriverFiles: Unable to back up image of binary wStLib.

System Error:
O sistema não pode encontrar o arquivo especificado.
.

Error: (04/09/2014 00:11:55 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..


Details:
AddLegacyDriverFiles: Unable to back up image of binary EfiSystemMon.

System Error:
O sistema não pode encontrar o arquivo especificado.
.

Error: (04/08/2014 11:24:37 PM) (Source: VSS) (User: )
Description: Erro do Serviço de Cópias de Sombra de Volume: erro inesperado ao consultar a interface IVssWriterCallback. hr = 0x80070005, Acesso negado.
.
Muitas vezes, isso é causado por configurações de segurança incorretas no processo gravador ou solicitante.


Operação:
Obtendo Dados do Gravador

Contexto:
Id de Classe de Gravador: {e8132975-6f93-4464-a53e-1050253ae220}
Nome do Gravador: System Writer
ID de Instância de Gravador: {ceff6b06-7418-4981-8667-a5238cd421c1}

Error: (04/08/2014 11:24:19 PM) (Source: MsiInstaller) (User: Renato-PC)
Description: Produto: Ask Toolbar -- Erro 25001. Os aplicativos a seguir deverão estar fechados para continuar a desinstalação:

Google Chrome

Error: (04/08/2014 11:24:08 PM) (Source: MsiInstaller) (User: Renato-PC)
Description: Produto: Ask Toolbar -- Erro 25001. Os aplicativos a seguir deverão estar fechados para continuar a desinstalação:

Google Chrome


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (04/09/2014 00:11:55 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service SeaPort since QueryServiceConfig API failed

System Error:
O sistema não pode encontrar o arquivo especificado.

Error: (04/09/2014 00:11:55 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddWin32ServiceFiles: Unable to back up image of service Bing Bar Update Service since QueryServiceConfig API failed

System Error:
O sistema não pode encontrar o arquivo especificado.

Error: (04/09/2014 00:11:55 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary wStLib.

System Error:
O sistema não pode encontrar o arquivo especificado.

Error: (04/09/2014 00:11:55 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary EfiSystemMon.

System Error:
O sistema não pode encontrar o arquivo especificado.

Error: (04/08/2014 11:24:37 PM) (Source: VSS)(User: )
Description: 0x80070005, Acesso negado.


Operação:
Obtendo Dados do Gravador

Contexto:
Id de Classe de Gravador: {e8132975-6f93-4464-a53e-1050253ae220}
Nome do Gravador: System Writer
ID de Instância de Gravador: {ceff6b06-7418-4981-8667-a5238cd421c1}

Error: (04/08/2014 11:24:19 PM) (Source: MsiInstaller)(User: Renato-PC)
Description: Produto: Ask Toolbar -- Erro 25001. Os aplicativos a seguir deverão estar fechados para continuar a desinstalação:

Google Chrome (NULL)(NULL)(NULL)(NULL)(NULL)

Error: (04/08/2014 11:24:08 PM) (Source: MsiInstaller)(User: Renato-PC)
Description: Produto: Ask Toolbar -- Erro 25001. Os aplicativos a seguir deverão estar fechados para continuar a desinstalação:

Google Chrome (NULL)(NULL)(NULL)(NULL)(NULL)


==================== Memory info ===========================

Percentage of memory in use: 73%
Total physical RAM: 1955.55 MB
Available physical RAM: 515.73 MB
Total Pagefile: 3911.09 MB
Available Pagefile: 2123.6 MB
Total Virtual: 2047.88 MB
Available Virtual: 1908.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:180 GB) (Free:139.61 GB) NTFS
Drive d: () (Fixed) (Total:267.76 GB) (Free:243.35 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 8977A38C)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=180 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=268 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=18 GB) - (Type=27)

==================== End Of Log ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01 (ATTENTION: ====> FRST version is 27 days old and could be outdated)
Ran by Renato (administrator) on RENATO-PC on 09-04-2014 00:41:07
Running from C:\Users\Renato\Downloads
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Portuguese Brazilian
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link for 64-Bit Version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

==================== Processes (Whitelisted) =================

(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
(PSafe S/A) C:\Program Files\PSafe\psafesvc.exe
(PSafe S.A.) C:\Program Files\PSafe\PSafeWD.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(PSafe) C:\Program Files\PSafe\PSafeSysTray.exe
(PSafe S.A.) C:\Program Files\PSafe\PSafeWDS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(PSafe S/A) C:\Program Files\PSafe\SearchDesk\psSearchDesk.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(CyberLink) C:\Program Files\CyberLink\YouCam\YCMMirage.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\WifiManager.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(Intel Corporation) C:\windows\system32\hkcmd.exe
(Intel Corporation) C:\windows\system32\igfxpers.exe
(CyberLink Corp.) C:\Program Files\CyberLink\Media+Player10\Media+Player10Serv.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
(Samsung Electronics) C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11463272 2011-11-04] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [1812264 2010-11-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [VDownloader] - C:\Program Files\VDownloader\VDownloader.exe [879104 2013-03-27] (Vitzo)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [PSafeTray] - C:\Program Files\PSafe\PSafeSysTray.exe [3688136 2014-03-19] (PSafe)
HKLM\...\Run: [PSafeWDS] - C:\Program Files\PSafe\PSafeWDS.exe [144072 2014-03-19] (PSafe S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome:
=======
CHR DefaultSearchKeyword: google.com.br
CHR Extension: (Google Docs) - C:\Users\Renato\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-06]
CHR Extension: (Google Drive) - C:\Users\Renato\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-06]
CHR Extension: (YouTube) - C:\Users\Renato\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-06]
CHR Extension: (Pesquisa do Google) - C:\Users\Renato\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-06]
CHR Extension: (Google Wallet) - C:\Users\Renato\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-30]
CHR Extension: (Gmail) - C:\Users\Renato\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-06]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 NIS; C:\Program Files\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation)
R2 NOBU; C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe [2057560 2010-06-01] (Symantec Corporation)
R2 PSafeSVC; C:\Program Files\PSafe\psafesvc.exe [2710216 2014-03-19] (PSafe S/A)
R2 PSafeWD; C:\Program Files\PSafe\PSafeWD.exe [266952 2014-03-19] (PSafe S.A.)
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] ()
S3 Samsung UPD Service; C:\windows\System32\SUPDSvc.exe [131888 2010-08-09] (Samsung Electronics CO., LTD.)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20120711.002\BHDrvx86.sys [821920 2012-06-18] (Symantec Corporation)
S3 BtFilter; C:\windows\System32\DRIVERS\btfilter.sys [249504 2011-04-29] (Atheros)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376480 2012-05-31] (Symantec Corporation)
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [116008 2010-11-12] (ELAN Microelectronics Corp.)
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20120720.001\IDSvix86.sys [382624 2012-06-14] (Symantec Corporation)
R3 MEI; C:\windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20120723.002\NAVENG.SYS [87928 2012-07-04] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20120723.002\NAVEX15.SYS [1589752 2012-07-04] (Symantec Corporation)
R2 npf; C:\windows\System32\drivers\npf.sys [50704 2010-01-26] (CACE Technologies, Inc.)
S3 rtport; C:\windows\system32\drivers\rtport.sys [15656 2012-05-02] (Windows (R) 2003 DDK 3790 provider)
S3 SRTSP; C:\windows\System32\Drivers\NIS\1207020.003\SRTSP.SYS [516216 2011-03-31] (Symantec Corporation)
R1 SRTSPX; C:\windows\system32\drivers\NIS\1207020.003\SRTSPX.SYS [50168 2011-03-31] (Symantec Corporation)
R0 SymDS; C:\windows\System32\drivers\NIS\1207020.003\SYMDS.SYS [340088 2011-01-27] (Symantec Corporation)
R0 SymEFA; C:\windows\System32\drivers\NIS\1207020.003\SYMEFA.SYS [744568 2011-03-14] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT.SYS [126584 2012-05-25] (Symantec Corporation)
R1 SymIRON; C:\windows\system32\drivers\NIS\1207020.003\Ironx86.SYS [136312 2011-01-27] (Symantec Corporation)
R1 SymNetS; C:\windows\System32\Drivers\NIS\1207020.003\SYMNETS.SYS [299640 2011-04-20] (Symantec Corporation)
R0 HookPort; System32\Drivers\Hookport.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-09 00:41 - 2014-04-09 00:41 - 00010631 _____ () C:\Users\Renato\Downloads\FRST.txt
2014-04-09 00:40 - 2014-04-09 00:41 - 00000000 ____D () C:\FRST
2014-04-09 00:40 - 2014-04-09 00:40 - 01145856 _____ (Farbar) C:\Users\Renato\Downloads\FRST.exe
2014-04-08 23:42 - 2014-04-08 23:42 - 00028435 _____ () C:\Users\Renato\Desktop\ZHPDiag.txt
2014-04-08 23:25 - 2014-04-08 23:25 - 00005190 _____ () C:\Users\Renato\Desktop\ZHPFixReport.txt
2014-04-08 23:24 - 2014-04-08 23:24 - 00000000 ____D () C:\ProgramData\d0feb669ee8aa93
2014-04-08 23:24 - 2014-04-08 23:24 - 00000000 ____D () C:\Program Files\ClickForeSaale
2014-04-08 22:45 - 2014-04-08 23:39 - 00000000 ____D () C:\Users\Renato\AppData\Roaming\ZHP
2014-04-08 22:45 - 2014-04-08 23:38 - 00000000 ____D () C:\Program Files\ZHPDiag
2014-04-08 22:45 - 2014-04-08 22:45 - 00001933 _____ () C:\Users\Renato\Desktop\ZHPFix.lnk
2014-04-08 22:45 - 2014-04-08 22:45 - 00001806 _____ () C:\Users\Renato\Desktop\ZHPDiag.lnk
2014-04-08 22:42 - 2014-04-08 22:44 - 06862039 _____ (Nicolas Coolman ) C:\Users\Renato\Downloads\ZHPDiag2.exe
2014-04-08 22:26 - 2014-04-08 22:26 - 00002492 _____ () C:\Users\Renato\Desktop\JRT.txt
2014-04-08 22:21 - 2014-04-08 22:21 - 00000000 ____D () C:\windows\ERUNT
2014-04-08 22:20 - 2014-04-08 22:20 - 01016261 _____ (Thisisu) C:\Users\Renato\Downloads\JRT (1).exe
2014-04-08 16:45 - 2014-04-08 16:45 - 01016261 _____ (Thisisu) C:\Users\Renato\Downloads\JRT.exe
2014-04-07 23:29 - 2014-04-07 23:30 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000 (4).zip
2014-04-07 22:41 - 2014-04-07 22:41 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000 (3).zip
2014-04-07 22:40 - 2014-04-07 22:40 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000.zip
2014-04-07 22:40 - 2014-04-07 22:40 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000 (2).zip
2014-04-07 22:40 - 2014-04-07 22:40 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000 (1).zip
2014-04-07 22:38 - 2014-04-07 22:38 - 00000000 ____D () C:\Users\Renato\Desktop\Nova pasta
2014-04-07 00:24 - 2014-04-06 23:35 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-04-07 00:01 - 2014-04-07 00:30 - 00021017 _____ () C:\zoek-results.log
2014-04-06 23:35 - 2014-04-07 00:18 - 00000000 ____D () C:\zoek_backup
2014-04-06 23:35 - 2014-04-06 23:36 - 01285120 _____ () C:\Users\Renato\Downloads\zoek (4).exe
2014-04-06 23:34 - 2014-04-06 23:35 - 01285120 _____ () C:\Users\Renato\Downloads\zoek (3).exe
2014-04-06 23:26 - 2014-04-06 23:26 - 01285120 _____ () C:\Users\Renato\Downloads\zoek (2).exe
2014-04-06 23:26 - 2014-04-06 23:26 - 01285120 _____ () C:\Users\Renato\Downloads\zoek (1).exe
2014-04-06 23:20 - 2014-04-06 23:20 - 01285120 _____ () C:\Users\Renato\Downloads\zoek.exe
2014-04-06 22:24 - 2014-04-06 22:24 - 01426178 _____ () C:\Users\Renato\Downloads\AdwCleaner (2).exe
2014-04-06 21:40 - 2014-04-06 21:40 - 01426178 _____ () C:\Users\Renato\Downloads\AdwCleaner (1).exe
2014-04-06 19:58 - 2014-04-06 22:26 - 00000000 ____D () C:\AdwCleaner
2014-04-06 19:55 - 2014-04-06 19:57 - 01426178 _____ () C:\Users\Renato\Downloads\AdwCleaner.exe
2014-04-06 00:43 - 2014-04-06 00:44 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (2).exe
2014-04-06 00:12 - 2014-04-06 00:12 - 00902264 _____ () C:\Users\Renato\Downloads\yet_another_cleaner_bro.exe
2014-04-05 23:57 - 2014-04-05 23:57 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (1).exe
2014-04-05 22:43 - 2014-04-05 22:44 - 00902264 _____ () C:\Users\Renato\Downloads\yet_another_cleaner_kwo (1).exe
2014-04-05 19:24 - 2014-04-05 19:24 - 00902264 _____ () C:\Users\Renato\Downloads\yet_another_cleaner_kwo.exe
2014-04-04 17:48 - 2014-04-04 17:50 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571.exe
2014-03-19 23:28 - 2014-03-20 16:56 - 00001344 _____ () C:\Users\Renato\Desktop\Limpeza Grátis de Registros!.lnk
2014-03-13 16:54 - 2014-03-01 01:30 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-13 16:54 - 2014-03-01 01:11 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-13 16:54 - 2014-03-01 01:10 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-13 16:54 - 2014-03-01 00:52 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-13 16:54 - 2014-03-01 00:51 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-13 16:54 - 2014-03-01 00:47 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-13 16:54 - 2014-03-01 00:43 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-13 16:54 - 2014-03-01 00:43 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-13 16:54 - 2014-03-01 00:40 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-13 16:54 - 2014-03-01 00:38 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-13 16:54 - 2014-03-01 00:38 - 00108032 ____N (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-13 16:54 - 2014-03-01 00:37 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-13 16:54 - 2014-03-01 00:31 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-13 16:54 - 2014-03-01 00:25 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-13 16:54 - 2014-03-01 00:16 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-13 16:54 - 2014-03-01 00:14 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-13 16:54 - 2014-03-01 00:03 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-13 16:54 - 2014-03-01 00:00 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-13 16:54 - 2014-02-28 23:57 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-13 16:54 - 2014-02-28 23:32 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-13 16:54 - 2014-02-28 23:27 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-13 16:54 - 2014-02-28 23:25 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-03-13 16:50 - 2014-02-03 23:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-13 16:50 - 2014-01-27 23:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-13 00:29 - 2014-02-06 22:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-13 00:28 - 2014-02-03 23:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-13 00:18 - 2014-01-28 23:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll

==================== One Month Modified Files and Folders =======

2014-04-09 00:41 - 2014-04-09 00:41 - 00010631 _____ () C:\Users\Renato\Downloads\FRST.txt
2014-04-09 00:41 - 2014-04-09 00:40 - 00000000 ____D () C:\FRST
2014-04-09 00:40 - 2014-04-09 00:40 - 01145856 _____ (Farbar) C:\Users\Renato\Downloads\FRST.exe
2014-04-09 00:38 - 2014-02-20 23:12 - 00000902 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-04-09 00:21 - 2011-11-28 05:15 - 01993921 _____ () C:\windows\WindowsUpdate.log
2014-04-09 00:15 - 2012-06-02 21:42 - 00001056 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-08 23:43 - 2009-07-14 01:34 - 00016160 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-08 23:43 - 2009-07-14 01:34 - 00016160 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-08 23:42 - 2014-04-08 23:42 - 00028435 _____ () C:\Users\Renato\Desktop\ZHPDiag.txt
2014-04-08 23:39 - 2014-04-08 22:45 - 00000000 ____D () C:\Users\Renato\AppData\Roaming\ZHP
2014-04-08 23:38 - 2014-04-08 22:45 - 00000000 ____D () C:\Program Files\ZHPDiag
2014-04-08 23:25 - 2014-04-08 23:25 - 00005190 _____ () C:\Users\Renato\Desktop\ZHPFixReport.txt
2014-04-08 23:24 - 2014-04-08 23:24 - 00000000 ____D () C:\ProgramData\d0feb669ee8aa93
2014-04-08 23:24 - 2014-04-08 23:24 - 00000000 ____D () C:\Program Files\ClickForeSaale
2014-04-08 22:45 - 2014-04-08 22:45 - 00001933 _____ () C:\Users\Renato\Desktop\ZHPFix.lnk
2014-04-08 22:45 - 2014-04-08 22:45 - 00001806 _____ () C:\Users\Renato\Desktop\ZHPDiag.lnk
2014-04-08 22:44 - 2014-04-08 22:42 - 06862039 _____ (Nicolas Coolman ) C:\Users\Renato\Downloads\ZHPDiag2.exe
2014-04-08 22:26 - 2014-04-08 22:26 - 00002492 _____ () C:\Users\Renato\Desktop\JRT.txt
2014-04-08 22:21 - 2014-04-08 22:21 - 00000000 ____D () C:\windows\ERUNT
2014-04-08 22:20 - 2014-04-08 22:20 - 01016261 _____ (Thisisu) C:\Users\Renato\Downloads\JRT (1).exe
2014-04-08 22:14 - 2012-06-02 21:42 - 00001052 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-08 22:14 - 2009-07-14 01:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-04-08 22:14 - 2009-07-14 01:39 - 00177955 _____ () C:\windows\setupact.log
2014-04-08 16:45 - 2014-04-08 16:45 - 01016261 _____ (Thisisu) C:\Users\Renato\Downloads\JRT.exe
2014-04-07 23:30 - 2014-04-07 23:29 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000 (4).zip
2014-04-07 22:41 - 2014-04-07 22:41 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000 (3).zip
2014-04-07 22:40 - 2014-04-07 22:40 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000.zip
2014-04-07 22:40 - 2014-04-07 22:40 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000 (2).zip
2014-04-07 22:40 - 2014-04-07 22:40 - 01440846 _____ () C:\Users\Renato\Downloads\mbam-chameleon-1.62.1.1000 (1).zip
2014-04-07 22:38 - 2014-04-07 22:38 - 00000000 ____D () C:\Users\Renato\Desktop\Nova pasta
2014-04-07 00:30 - 2014-04-07 00:01 - 00021017 _____ () C:\zoek-results.log
2014-04-07 00:30 - 2014-03-04 23:11 - 00000000 ____D () C:\Program Files\PSafe
2014-04-07 00:26 - 2010-11-20 18:48 - 00145608 _____ () C:\windows\PFRO.log
2014-04-07 00:18 - 2014-04-06 23:35 - 00000000 ____D () C:\zoek_backup
2014-04-07 00:17 - 2012-05-24 19:29 - 00000000 ____D () C:\Users\Renato
2014-04-06 23:36 - 2014-04-06 23:35 - 01285120 _____ () C:\Users\Renato\Downloads\zoek (4).exe
2014-04-06 23:35 - 2014-04-07 00:24 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-04-06 23:35 - 2014-04-06 23:34 - 01285120 _____ () C:\Users\Renato\Downloads\zoek (3).exe
2014-04-06 23:26 - 2014-04-06 23:26 - 01285120 _____ () C:\Users\Renato\Downloads\zoek (2).exe
2014-04-06 23:26 - 2014-04-06 23:26 - 01285120 _____ () C:\Users\Renato\Downloads\zoek (1).exe
2014-04-06 23:20 - 2014-04-06 23:20 - 01285120 _____ () C:\Users\Renato\Downloads\zoek.exe
2014-04-06 22:26 - 2014-04-06 19:58 - 00000000 ____D () C:\AdwCleaner
2014-04-06 22:24 - 2014-04-06 22:24 - 01426178 _____ () C:\Users\Renato\Downloads\AdwCleaner (2).exe
2014-04-06 21:40 - 2014-04-06 21:40 - 01426178 _____ () C:\Users\Renato\Downloads\AdwCleaner (1).exe
2014-04-06 21:03 - 2009-07-13 23:04 - 00000603 _____ () C:\windows\win.ini
2014-04-06 20:58 - 2012-07-30 18:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-06 20:58 - 2012-06-02 21:43 - 00001242 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-06 20:58 - 2012-05-24 19:37 - 00001120 _____ () C:\Users\Renato\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-06 19:57 - 2014-04-06 19:55 - 01426178 _____ () C:\Users\Renato\Downloads\AdwCleaner.exe
2014-04-06 17:12 - 2012-05-25 13:25 - 00000000 ____D () C:\Users\Renato\AppData\Local\CrashDumps
2014-04-06 00:44 - 2014-04-06 00:43 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (2).exe
2014-04-06 00:12 - 2014-04-06 00:12 - 00902264 _____ () C:\Users\Renato\Downloads\yet_another_cleaner_bro.exe
2014-04-05 23:57 - 2014-04-05 23:57 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (1).exe
2014-04-05 22:44 - 2014-04-05 22:43 - 00902264 _____ () C:\Users\Renato\Downloads\yet_another_cleaner_kwo (1).exe
2014-04-05 19:24 - 2014-04-05 19:24 - 00902264 _____ () C:\Users\Renato\Downloads\yet_another_cleaner_kwo.exe
2014-04-04 17:50 - 2014-04-04 17:48 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571.exe
2014-03-31 09:35 - 2012-07-24 00:42 - 00231584 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-03-20 16:56 - 2014-03-19 23:28 - 00001344 _____ () C:\Users\Renato\Desktop\Limpeza Grátis de Registros!.lnk
2014-03-18 19:10 - 2013-07-16 23:25 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 19:05 - 2012-10-19 03:00 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-13 22:50 - 2009-07-14 01:33 - 00312976 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-11 22:45 - 2009-07-14 01:53 - 00032608 _____ () C:\windows\Tasks\SCHEDLGU.TXT

==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe
[2011-11-28 05:55] - [2011-03-01 05:05] - 0021504 ____A (Microsoft Corporation) ECDB182F885292145826C58252B53000

C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-23 13:17

==================== End Of Log ============================

 Baixe o arquivo fixlist.txt que está anexado nesta postagem e salve-o no mesmo lugar onde você deixou o Farbar (FRST) que é este local abaixo:
C:\Users\Renato\Downloads

Execute o FRST. Clique no botão Fix.

Aguarde e ao final, o log Fixlog.txt será salvo no seu desktop.

Selecione, copie e cole o conteúdo deste Fixlog.txt em sua próxima resposta.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01
Ran by Renato at 2014-04-09 23:17:18 Run:1
Running from C:\Users\Renato\Downloads
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
awesomehp uninstaller (HKLM\...\awesomehp uninstaller) (Version: - awesomehp) <==== ATTENTION
PrivitizeVPN (HKLM\...\PrivitizeVPN) (Version: 1.0.0 - OOO Industry) <==== ATTENTION
PSafe Suite Desktop (HKLM\...\PSafe Suite Desktop) (Version: 1.1.61403.19101 - PSafe Tecnologia)
2014-03-04 23:24 - 2014-03-19 19:51 - 00127688 _____ () C:\Program Files\PSafe\CrashLib.dll
2014-03-04 23:24 - 2013-08-25 17:05 - 00838656 _____ () C:\Program Files\PSafe\plugins\platforms\qwindows.dll
2014-03-04 23:24 - 2013-08-25 17:04 - 00022016 _____ () C:\Program Files\PSafe\plugins\imageformats\qgif.dll
2014-03-04 23:24 - 2013-08-25 17:04 - 00021504 _____ () C:\Program Files\PSafe\plugins\imageformats\qico.dll
2014-03-04 23:24 - 2013-08-25 17:04 - 00205312 _____ () C:\Program Files\PSafe\plugins\imageformats\qjpeg.dll
(PSafe S/A) C:\Program Files\PSafe\psafesvc.exe
(PSafe S.A.) C:\Program Files\PSafe\PSafeWD.exe
(PSafe) C:\Program Files\PSafe\PSafeSysTray.exe
(PSafe S.A.) C:\Program Files\PSafe\PSafeWDS.exe
(PSafe S/A) C:\Program Files\PSafe\SearchDesk\psSearchDesk.exe
HKLM\...\Run: [PSafeTray] - C:\Program Files\PSafe\PSafeSysTray.exe [3688136 2014-03-19] (PSafe)
HKLM\...\Run: [PSafeWDS] - C:\Program Files\PSafe\PSafeWDS.exe [144072 2014-03-19] (PSafe S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
R2 PSafeSVC; C:\Program Files\PSafe\psafesvc.exe [2710216 2014-03-19] (PSafe S/A)
R2 PSafeWD; C:\Program Files\PSafe\PSafeWD.exe [266952 2014-03-19] (PSafe S.A.)
2014-04-08 23:24 - 2014-04-08 23:24 - 00000000 ____D () C:\Program Files\ClickForeSaale
2014-04-06 00:43 - 2014-04-06 00:44 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (2).exe
2014-04-05 23:57 - 2014-04-05 23:57 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (1).exe
2014-04-04 17:48 - 2014-04-04 17:50 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571.exe
2014-04-06 00:44 - 2014-04-06 00:43 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (2).exe
2014-04-05 23:57 - 2014-04-05 23:57 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (1).exe
2014-04-04 17:50 - 2014-04-04 17:48 - 01572384 _____ (Baidu Inc.) C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571.exe
end
*****************

C:\Program Files\PSafe\CrashLib.dll => Moved successfully.
C:\Program Files\PSafe\plugins\platforms\qwindows.dll => Moved successfully.
C:\Program Files\PSafe\plugins\imageformats\qgif.dll => Moved successfully.
C:\Program Files\PSafe\plugins\imageformats\qico.dll => Moved successfully.
C:\Program Files\PSafe\plugins\imageformats\qjpeg.dll => Moved successfully.
[1756] C:\Program Files\PSafe\psafesvc.exe => Process closed successfully.
[1884] C:\Program Files\PSafe\PSafeWD.exe => Process closed successfully.
[2676] C:\Program Files\PSafe\PSafeSysTray.exe => Process closed successfully.
[2776] C:\Program Files\PSafe\PSafeWDS.exe => Process closed successfully.
[3288] C:\Program Files\PSafe\SearchDesk\psSearchDesk.exe => Process closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\PSafeTray => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\PSafeWDS => Value deleted successfully.
C:\windows\system32\GroupPolicy\Machine => Moved successfully.
C:\windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
PSafeSVC => Service deleted successfully.
PSafeWD => Service deleted successfully.
C:\Program Files\ClickForeSaale => Moved successfully.
C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (2).exe => Moved successfully.
C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (1).exe => Moved successfully.
C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571.exe => Moved successfully.
"C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (2).exe" => File/Directory not found.
"C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571 (1).exe" => File/Directory not found.
"C:\Users\Renato\Downloads\PC_Faster_Setup_Mini_B89_840891571.exe" => File/Directory not found.


The system needed a reboot.

==== End of Fixlog ====

Caso o PC não tenha reiniciado depois deste último procedimento, reinicie-o e depois nos diga como está o computador atualmente.

Power max, ele iniciou outra vez. O computador está muito melhor!

  Fico feliz que o problema tenha sido resolvido.

 Só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

 Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

  Foi um prazer ajudar. Conte sempre conosco!

Power Max, na parte para abrir o Ccleaner quando eu cliquei no botão limpar, não aconteceu nada!

Power Max, na parte para abrir o Ccleaner quando eu cliquei no botão limpar, não aconteceu nada!

No caso do Ccleaner você precisará clicar no botão Executar limpeza.

Eu sei, mais quando eu cliquei no botão limpar, não apareceu o botão "executar limpeza". Não aconteceu nada. Eu vou fazer o procedimento outra vez.

Faça novamente. Mas quando for abrir o Ccleaner clique com o botão direito sobre ele e escolha a opção de Executar como administrador.

Desta vez foi Power Max.

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.