Remoção do plugin do Banco do Brasil e alguns PUPs maliciosos

~ Relatório do ZHPDiag v2014.4.8.12 - Nicolas Coolman  (09-04-2014)
~ Iniciado por Utilizador (09-04-2014 21:51:10)
~ Endereço do Website :  http://nicolascoolman.webs.com
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~  Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user


---\\ Navegadores Internet
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)
GCIE: Google Chrome v34.0.1847.116

---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 7 Ultimate, 64-bit  (Build 7600)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Softwares de proteçao do sistema
avast! Internet Security v9.0.2016
Microsoft Security Client PT-PT Language Pack v2.1.1116.0
Windows Defender W7

---\\ Softwares d'optimização do sistema
CCleaner v3.20  =>.Piriform Ltd

---\\ Softwares de partilha do PeerToPeer (P2P)

---\\ Monitoramento dos softwares
Adobe Flash Player 12 Plugin
Adobe Reader XI
Java 7 Update 51

---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 15 Stepping 6, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1022 MB (3% free)
System Restore: Activé (Enable)
System drive C: has 246 GB (82%) free of 298 GB

---\\ Modo de conexão ao sistema
~ Computer Name: TOSHIBAA100
~ User Name: Utilizador
~ All Users Names: Utilizador, Guest, Administrator,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator

---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\Utilizador\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Utilizador\AppData\Roaming\
~ %Desktop% : C:\Users\Utilizador\Desktop\
~ %Favorites% : C:\Users\Utilizador\Favorites\
~ %LocalAppData% : C:\Users\Utilizador\AppData\Local\
~ %StartMenu% : C:\Users\Utilizador\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 246 Go of 298 Go)
D: CD-ROM drive (Not Inserted)



---\\ Estado do Centro de Segurança do Windows
~ Security Center: 49 Legitimates Filtered in 00mn 00s



---\\ Pesquisa particular de ficheiros genéricos
[MD5.0862495E0C825893DB75EF44FAEA8E93] - (.Microsoft Corporation - Explorador do Windows.) (.26-02-2011 - 06:23:14.) -- C:\Windows\Explorer.exe [2870272]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicação de Arranque do Windows.) (.14-07-2009 - 01:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.A4F6142CABA82FB7293ECE5FF864B440] - (.Microsoft Corporation - Extensões da Internet para Win32.) (.22-02-2013 - 06:20:51.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.DA3E2A6FA9660CC75B471530CE88453A] - (.Microsoft Corporation - Aplicação de início de sessão do Windows.) (.28-10-2009 - 06:24:40.) -- C:\Windows\System32\Winlogon.exe [389632]
[MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.14-07-2009 - 01:41:54.) -- C:\Windows\System32\sppcomapi.dll [231936]
[MD5.DB9D6C6B2CD95A9CA414D045B627422E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28-12-2011 - 03:59:11.) -- C:\Windows\system32\Drivers\AFD.sys [499200]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14-07-2009 - 01:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13-07-2009 - 23:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13-07-2009 - 23:19:54.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9C253CE7311CA60FC11C774692A13208] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.27-04-2011 - 02:57:40.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.14-07-2009 - 00:06:13.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Controlador de porta i8042.) (.13-07-2009 - 23:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14-07-2009 - 00:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.040D62A9D8AD28922632137ACDD984F2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04-05-2011 - 02:51:08.) -- C:\Windows\system32\Drivers\MRxSmb.sys [157696]
[MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) (.13-07-2009 - 23:21:29.) -- C:\Windows\system32\Drivers\netBT.sys [259072]
[MD5.9A6089B056EA1B83B36424FC9D0A300E] - (.Microsoft Corporation - Controlador de Sistema de Ficheiros NT.) (.12-04-2013 - 14:36:37.) -- C:\Windows\system32\Drivers\ntfs.sys [1653096]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Controlador de porta paralela.) (.14-07-2009 - 00:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14-07-2009 - 00:10:12.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [130048]
[MD5.9706B84DBABFC4B4CA46C5A82B14DFA3] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.14-07-2009 - 00:18:02.) -- C:\Windows\system32\Drivers\rdpdr.sys [165376]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14-07-2009 - 00:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) (.13-07-2009 - 23:21:15.) -- C:\Windows\system32\Drivers\tdx.sys [99840]
[MD5.9E425AC5C9A5A973273D169F43B4F5E1] - (.Microsoft Corporation - Controlador de cópia sombra do volume.) (.06-09-2012 - 17:38:18.) -- C:\Windows\system32\Drivers\volsnap.sys [295792]
~ Generic Processes:  Scanned in 00mn 01s



---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 1/18
~ Mes musiques (My Musics) : 1/8
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 1/22
~ Mes Documents (My Documents) : 1/2457
~ Mon Bureau (My Desktop) : 10/154
~ Menu demarrer (Programs) : 1/35
~ Hidden Files:  Scanned in 00mn 13s



---\\ Processos lançados
[MD5.CA1EA5BC13E3820624669E8871EA6DFC] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\Utilizador\AppData\Roaming\Dropbox\bin\Dropbox.exe   [32667896] [PID.3644]
[MD5.4BFA1849DC7AA3CB99C160D9EB96C67B] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [3854640] [PID.3900]
[MD5.2EBBBFC120593C683796092F2DDA0EFC] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [841032] [PID.3332]
[MD5.D6D0EB77C43224ABC8E137FACDAED88E] - (.Google - Hangouts Plugin.) -- C:\Users\Utilizador\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe   [64384] [PID.1660]
[MD5.EC15A606D68A99B6911ABB644ACF6654] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8193536] [PID.3228]
[MD5.BEA8D0FA8805CC2E6BB49728166699C7] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [50344] [PID.1296]
[MD5.D58C10AFF2B5C09D615623A4DAC0E330] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe   [109048] [PID.1520]
[MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65432] [PID.1600]
[MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [55624] [PID.1644]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Instalador do Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648] [PID.2012]
~ Processes Running:  Scanned in 00mn 04s



---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\Utilizador\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)

---\\ Pasta de extensão do Google Chrome

~ Google Lines Browser: 17 Legitimates Filtered in 00mn 02s



---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Outras conexões do utilizador (04)
O4 - GS\Desktop [Public]: aTube Catcher.lnk . (.DsNET - aTube Catcher to download and convert video.)  -- C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: Kobo.lnk . (...)  -- C:\Program Files (x86)\Kobo\Kobo.exe
O4 - GS\Desktop [Public]: Video Search.lnk . (.DsNET - aTube Catcher to download and convert video.)  -- C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
O4 - GS\QuickLaunch [Utilizador]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Utilizador]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [Utilizador]: Upgrade to Paltalk Extreme.lnk - Chave orfã
O4 - GS\QuickLaunch [Utilizador]: Viber.lnk . (...)  -- C:\Users\Utilizador\AppData\Local\Viber\Viber.exe
O4 - GS\QuickLaunch [Utilizador]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\Utilizador\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent
O4 - GS\TaskBar [Utilizador]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Utilizador]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [Utilizador]: Viber.lnk . (...)  -- C:\Users\Utilizador\AppData\Local\Viber\Viber.exe
O4 - GS\TaskBar [Utilizador]: ZON NET MOBILE.lnk . (...)  -- C:\Program Files (x86)\ZON NET MOBILE\UIMain.exe
O4 - GS\Program [Utilizador]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Utilizador]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Utilizador]: Viber.lnk . (...)  -- C:\Users\Utilizador\AppData\Local\Viber\Viber.exe
O4 - GS\SystemTools [Utilizador]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Desktop [Utilizador]: Documentos - Atalho.lnk . (...)  -- C:\Users\Utilizador\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
O4 - GS\Desktop [Utilizador]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\Utilizador\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent
O4 - GS\QuickLaunch [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Guest]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Guest]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Program [Guest]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Program [Guest]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Guest]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Desktop [Guest]: FacebookPasswordDecryptor.lnk . (.SecurityXploded - All-in-one Facebook Password Recovery Softw.)  -- C:\Program Files (x86)\SecurityXploded\FacebookPasswordDecryptor\FacebookPasswordDecryptor.exe
~ Global Startup: 91 Legitimates Filtered in 00mn 10s



---\\ Aplicações iniciadas por registo & pastas (04)
O4 - GS\Startup [Guest]: Uninstall Webroot RunOnce.lnk . (.Webroot Software, Inc. - Webroot Installer.)  -- C:\Program Files (x86)\Common Files\wruninstall.exe
O4 - HKCU\..\Run: [ccleaner] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe   =>.Piriform Ltd
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKUS\S-1-5-21-3136738229-3321464536-2784466607-1000\..\Run: [ccleaner] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe   =>.Piriform Ltd
~ Application:  Scanned in 00mn 00s



---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE7A8BE6-057B-4CCA-BAB4-23EEBDAFB2B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{EE7A8BE6-057B-4CCA-BAB4-23EEBDAFB2B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{EE7A8BE6-057B-4CCA-BAB4-23EEBDAFB2B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocolo adicional (018)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll  =>.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Software instalados (042)
O42 - Logiciel: ZON NET MOBILE - (...) [HKLM][64Bits] -- {93D34EE3-99B3-4DB1-8B0A-0A657466F90D}
~ Logic: 6 Legitimates Filtered in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\BancoBest]
[HKCU\Software\POIPedia]
[HKCU\Software\PTEID]
[HKCU\Software\SystemK]  =>PUP.SystemK
[HKLM\Software\Wow6432Node\AutoHelpDesk]
[HKLM\Software\Wow6432Node\SystemK]  =>PUP.SystemK
~ Key Software: 192 Legitimates Filtered in 00mn 00s



---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 05-08-2012 - 22:49:50 - [0] ----D C:\Program Files (x86)\BancoBest
O43 - CFD: 17-03-2014 - 13:58:58 - [0] ----D C:\Program Files (x86)\DriverUpdate
O43 - CFD: 02-04-2014 - 02:04:55 - [19,629] ----D C:\Program Files (x86)\ZON NET MOBILE
O43 - CFD: 07-04-2014 - 04:28:55 - [0] ----D C:\ProgramData\InstallMate  =>PUP.Tarma
O43 - CFD: 03-08-2012 - 18:11:55 - [0] ----D C:\Users\Utilizador\AppData\Roaming\BancoBest
O43 - CFD: 03-08-2012 - 18:11:45 - [0,103] ----D C:\Users\Utilizador\AppData\Local\BancoBest
O43 - CFD: 06-03-2014 - 13:13:35 - [0,407] ----D C:\Users\Utilizador\AppData\Local\BeAnywhere Support Express
O43 - CFD: 11-12-2013 - 16:39:36 - [13,226] ----D C:\Users\Utilizador\AppData\Local\lptmp1402949683
O43 - CFD: 11-01-2014 - 16:07:32 - [7,478] ----D C:\Users\Utilizador\AppData\Local\lptmp890397290
O43 - CFD: 13-03-2014 - 02:06:43 - [0] -SH-D C:\Users\Utilizador\AppData\Local\ms-drivers
O43 - CFD: 09-04-2014 - 00:52:45 - [0,003] ----D C:\Users\Utilizador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter  =>Crapware.SpyHunter
~ Program Folder: 172 Legitimates Filtered in 00mn 30s



---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 05-04-2014 - 20:32:17 ---A- . (...) -- C:\Windows\system.ini   [215]
O44 - LFC:[MD5.C9FFD23F9ED7F6FFDCB9C54BC1149191] - 05-04-2014 - 20:37:30 ---A- . (...) -- C:\ComboFix.txt   [20920]
O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 05-04-2014 - 21:13:38 ---A- . (...) -- C:\Windows\zoek-delete.exe   [24064]
O44 - LFC:[MD5.951970B9A9FCD9494A5054F20E085619] - 05-04-2014 - 21:46:31 ---A- . (...) -- C:\zoek-results.log   [18697]
O44 - LFC:[MD5.ACBF9DA6EE3F6A82EABF2A43008E45EA] - 08-04-2014 - 00:17:09 ---A- . (...) -- C:\Windows\System32\prfc0816.dat   [152656]
O44 - LFC:[MD5.7BA6C05D4CC77D7D5533A2284F5A00A8] - 08-04-2014 - 00:17:09 ---A- . (...) -- C:\Windows\System32\prfh0816.dat   [721734]
O44 - LFC:[MD5.D0A46572F03EFD20C7401DF993CBF5EB] - 09-04-2014 - 06:17:49 ---A- . (...) -- C:\PureRa.txt   [3066]
~ Files: 24 Legitimates Filtered in 00mn 43s



---\\ Enumeração das chaves do registo StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\uTorrent  [Key] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Utilizador\AppData\Roaming\uTorrent\uTorrent.exe  =>P2P.BitTorrent
~ SMSR Keys: 1 Legitimates Filtered in 00mn 00s



---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s



---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s



---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:[MD5.8D4B8BF93C65BDBC133B20706A3B5208] - 05-04-2014 - 19:17:59 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys   [65776]
O58 - SDL:[MD5.F87990FDBDD4DC037343A80BD7E67538] - 13-01-2014 - 12:59:33 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\Drivers\aswTap.sys   [44640]
O58 - SDL:[MD5.0606875650850B0697D662934529F6FC] - 05-04-2014 - 19:17:59 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys   [208928]
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14-07-2009 - 01:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [530496]
O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10-06-2009 - 20:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [31232]
O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14-07-2009 - 01:45:55 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [24656]
O58 - SDL:[MD5.2E3ACFDA0B792707C59B307ABB6A6E95] - 17-03-2014 - 12:24:34 ---A- . (...) -- C:\Windows\System32\Drivers\SWDUMon.sys   [16152]
O58 - SDL:[MD5.2A6F99C1E2D25C4C920A37E07BB26291] - 16-10-2013 - 01:44:42 ---A- . (.Anchorfree Inc. - Anchorfree HSS VPN Adapter.) -- C:\Windows\System32\Drivers\taphss6.sys   [42184]
O58 - SDL:[MD5.8F866DF9A974BFFDCB2001D303BC0695] - 08-05-2013 - 12:52:48 ---A- . (.GAS Tecnologia - GbPlugin Device Driver.) -- C:\Windows\SysWOW64\drivers\gbpkm.sys   [49536]
~ Drivers: 19 Legitimates Filtered in 00mn 05s



---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
~ ADS:  Scanned in 00mn 00s



---\\ Associações Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
~ FASS Keys: 13 Legitimates Filtered in 00mn 00s



---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys:  Scanned in 00mn 00s



---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys:  Scanned in 00mn 00s



---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.04B47DEEB298AE90A0C42DEAED71F8BA] [SPRF][08-04-2014] (...) -- C:\Users\Utilizador\Desktop\adwcleaner.exe   [1426178]
[MD5.FEE1D58C6AD73F25EB0DAD4F690560AD] [SPRF][22-02-2014] (.Facebook Inc. - Setup.) -- C:\Users\Utilizador\Desktop\FacebookVideoCallSetup_v1.2.205.0.exe   [501248]
[MD5.972032F9CA03B3DA1EF34E3E9BD43F71] [SPRF][17-03-2014] (.FLVMPlayer - FLV Media Player Setup.) -- C:\Users\Utilizador\Desktop\FLVMPlayer.exe   [4953944]
[MD5.64BAEC464B396B66A353D8FC2F42A4E3] [SPRF][31-07-2011] (.RaProducts.org - System Purification Tool.) -- C:\Users\Utilizador\Desktop\PureRa.exe   [76565]
[MD5.916EA7F9B2882A6E955DF42D6B037934] [SPRF][17-03-2014] (.BitTorrent Inc. - µTorrent.) -- C:\Users\Utilizador\Desktop\uTorrent-2-.exe   [1852496]  =>P2P.BitTorrent
[MD5.E1E94652EB813EBC06C3867E0D3F5E03] [SPRF][12-12-2013] (.John Drew - Yagi Calculator Setup.) -- C:\Users\Utilizador\Desktop\yagisetup (1).exe   [717209]
~ Files: 8 Legitimates Filtered in 00mn 04s



---\\ Pesquisa dos pacotes WindowsInstaller (WIS) (O93) (NTFS)
[MD5.BBCDC61C8AA8009FED0028798A761EE2] [WIS][17-08-2013] (.Skype Technologies S.A. - Skype Click to Call.) -- C:\Windows\Installer\1877aa5.msi   [10502144]
~ WIS: 125 Legitimates Filtered in 00mn 22s



---\\ Search Tracing Registry Key (O100)
HKLM\SOFTWARE\Microsoft\Tracing\RegHunter_RASAPI32  =>Crapware.RegHunter
HKLM\SOFTWARE\Microsoft\Tracing\RegHunter_RASMANCS  =>Crapware.RegHunter
HKLM\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASAPI32  =>Crapware.SpyHunter
HKLM\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASMANCS  =>Crapware.SpyHunter
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AnyProtectScannerSetup_RASAPI32  =>PUP.AnyProtect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AnyProtectScannerSetup_RASMANCS  =>PUP.AnyProtect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\avg-secure-search-installer_RASAPI32  =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\avg-secure-search-installer_RASMANCS  =>Toolbar.AVGSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\biclient_RASAPI32  =>Adware.MegaSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\biclient_RASMANCS  =>Adware.MegaSearch
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FindRightSetup_RASAPI32  =>Hijacker.FindrToolbar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FindRightSetup_RASMANCS  =>Hijacker.FindrToolbar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FindRight_Setup_RASAPI32  =>Hijacker.FindrToolbar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FindRight_Setup_RASMANCS  =>Hijacker.FindrToolbar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASAPI32  =>Adware.OpenCandy
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASMANCS  =>Adware.OpenCandy
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QtraxInstaller_RASAPI32  =>P2P.Qtrax
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QtraxInstaller_RASMANCS  =>P2P.Qtrax
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RegCurePro_RASAPI32  =>Rogue.RegCure
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RegCurePro_RASMANCS  =>Rogue.RegCure
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\searchprotect_2111-1a12a8ce_RASAPI32  =>Toolbar.Conduit
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\searchprotect_2111-1a12a8ce_RASMANCS  =>Toolbar.Conduit
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\smt_ar_dosearches_RASAPI32  =>PUP.DoSearches
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\smt_ar_dosearches_RASMANCS  =>PUP.DoSearches
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent-2-_RASAPI32  =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent-2-_RASMANCS  =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASAPI32  =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASMANCS  =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VuuPCLicense_RASAPI32  =>PUP.VuuPC
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VuuPCLicense_RASMANCS  =>PUP.VuuPC
~ BTK: 587 Legitimates Filtered in 00mn 01s



---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 18-03-2014 257928 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 17-02-2014 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 17-02-2014 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Auto 23-10-2013 172192 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe

SR - | Auto 21-12-2013 65432 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 07-09-2013 55624 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 05-04-2014 50344 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 05-04-2014 109048 |  (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
SR - | Auto 14-07-2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14-07-2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 06-03-2009 364064 |  (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe
SR - | Auto 14-07-2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 14-07-2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Demand 10-07-1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
SR - | Auto 14-07-2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Services:  Scanned in 00mn 15s



---\\ Scâner Aditional (088)
Database Version : 13044 - (09-04-2014)
Clés trouvées (Keys found) : 1
Valeurs trouvées (Values found) : 2
Dossiers trouvés  (Folders found) : 2
Fichiers trouvés  (Files found) : 3

[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent]   =>P2P.BitTorrent^
C:\ProgramData\InstallMate   =>PUP.Tarma^
C:\Users\Utilizador\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter   =>Crapware.SpyHunter^
[HKCU\Software\SystemK]   =>PUP.SystemK^
[HKLM\Software\Wow6432Node\SystemK]   =>PUP.SystemK^
C:\Users\Utilizador\Desktop\uTorrent-2-.exe   =>P2P.BitTorrent^
~ Additionnel Scan: 212863 Items scanned in 01mn 00s



---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>PUP.Tarma
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>Crapware.SpyHunter
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>Crapware.RegHunter
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>PUP.AnyProtect
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>Adware.MegaSearch
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>Hijacker.FindrToolbar
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>Adware.OpenCandy
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>Toolbar.Conduit
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>PUP.DoSearches
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>PUP.VuuPC
~ MSI: 10 link(s) detected in 00mn 00s



~ 1046 Legitimates filtered by white list
End of the scan (437 lines in 05mn 34s)(0)

Power Max desculpe,ao actualizar ou melhor,tentar actualizar um GPS a porta abriu-se à entrada de maliciosos.Por favo ajude-me a limpar porque o PC está lento e perde a ligação ao roteador etc etc

 Selecione e copie todo o texto destacado em vermelho que te passei.
_____________________________________________________________________________________________________________

 Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta.

Power Max creio que ficou bom.Obrigado.o PC está limpo.

Rapport de ZHPFix 2014.4.7.2 par Nicolas Coolman, Update du 07/04/2014
Fichier d'export Registre :
Run by Utilizador at 10-04-2014 00:09:38
High Elevated Privileges : OK
Windows Vista Ultimate Edition, 64-bit  (Build 6000)

Reciclagem vazia (00mn 04s)
Reparação de atalhos do navegador

========== Chaves do Registo ==========
ELIMINÉ: HKCU\Software\SystemK
ELIMINÉ: HKLM\Software\Wow6432Node\SystemK
ELIMINÉ:* HKLM\SOFTWARE\Microsoft\Tracing\RegHunter_RASAPI32
ELIMINÉ:* HKLM\SOFTWARE\Microsoft\Tracing\RegHunter_RASMANCS
ELIMINÉ:* HKLM\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASAPI32
ELIMINÉ:* HKLM\SOFTWARE\Microsoft\Tracing\SpyHunter4_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AnyProtectScannerSetup_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\AnyProtectScannerSetup_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\avg-secure-search-installer_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\avg-secure-search-installer_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\biclient_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\biclient_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FindRightSetup_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FindRightSetup_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FindRight_Setup_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FindRight_Setup_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LatestDLMgr_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RegCurePro_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\RegCurePro_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\searchprotect_2111-1a12a8ce_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\searchprotect_2111-1a12a8ce_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\smt_ar_dosearches_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\smt_ar_dosearches_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VuuPCLicense_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\VuuPCLicense_RASMANCS

========== Valores do Registo ==========
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\windows\syswow64\drivers\gbpkm.sys
ELIMINÉ Temporários windows (112) (1.755.684 octets)
ELIMINÉ Flash Cookies (0) (0 octets)

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso


========== Recapitulativo ==========
26 : Chaves do Registo
6 : Valores do Registo
1 : Pastas
3 : Ficheiros
1 : Restauração Sistema


End of clean in 02mn 10s

========== Caminho do ficheiro do relatório ==========
C:\Users\Utilizador\AppData\Roaming\ZHP\ZHPFix[R1].txt - 06-04-2014 09:34:11 [3180]
C:\Users\Utilizador\AppData\Roaming\ZHP\ZHPFix[R2].txt - 06-04-2014 22:19:31 [1171]
C:\Users\Utilizador\AppData\Roaming\ZHP\ZHPFix[R3].txt - 10-04-2014 00:09:42 [3251]

 Abra novamente o ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
 
|- Clique "SEARCH" ou "PESQUISAR" e aguarde a conclusão.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
 
|- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

~ Relatório do ZHPDiag v2014.4.9.16 - Nicolas Coolman  (09-04-2014)
~ Iniciado por Utilizador (10-04-2014 08:30:26)
~ Endereço do Website :  http://nicolascoolman.webs.com
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~  Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user


---\\ Navegadores Internet
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)
GCIE: Google Chrome v34.0.1847.116

---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 7 Ultimate, 64-bit  (Build 7600)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Softwares de proteçao do sistema
avast! Internet Security v9.0.2016
Microsoft Security Client PT-PT Language Pack v2.1.1116.0
Windows Defender W7

---\\ Softwares d'optimização do sistema
CCleaner v3.20  =>.Piriform Ltd

---\\ Softwares de partilha do PeerToPeer (P2P)

---\\ Monitoramento dos softwares
Adobe Flash Player 12 Plugin
Adobe Reader XI
Java 7 Update 51

---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 15 Stepping 6, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 1022 MB (25% free)
System Restore: Activé (Enable)
System drive C: has 246 GB (82%) free of 298 GB

---\\ Modo de conexão ao sistema
~ Computer Name: TOSHIBAA100
~ User Name: Utilizador
~ All Users Names: Utilizador, Guest, Administrator,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator

---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\Utilizador\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Utilizador\AppData\Roaming\
~ %Desktop% : C:\Users\Utilizador\Desktop\
~ %Favorites% : C:\Users\Utilizador\Favorites\
~ %LocalAppData% : C:\Users\Utilizador\AppData\Local\
~ %StartMenu% : C:\Users\Utilizador\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 246 Go of 298 Go)
D: CD-ROM drive (Not Inserted)



---\\ Estado do Centro de Segurança do Windows
~ Security Center: 49 Legitimates Filtered in 00mn 00s



---\\ Pesquisa particular de ficheiros genéricos
[MD5.0862495E0C825893DB75EF44FAEA8E93] - (.Microsoft Corporation - Explorador do Windows.) (.26-02-2011 - 06:23:14.) -- C:\Windows\Explorer.exe [2870272]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicação de Arranque do Windows.) (.14-07-2009 - 01:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.A4F6142CABA82FB7293ECE5FF864B440] - (.Microsoft Corporation - Extensões da Internet para Win32.) (.22-02-2013 - 06:20:51.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.DA3E2A6FA9660CC75B471530CE88453A] - (.Microsoft Corporation - Aplicação de início de sessão do Windows.) (.28-10-2009 - 06:24:40.) -- C:\Windows\System32\Winlogon.exe [389632]
[MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.14-07-2009 - 01:41:54.) -- C:\Windows\System32\sppcomapi.dll [231936]
[MD5.DB9D6C6B2CD95A9CA414D045B627422E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28-12-2011 - 03:59:11.) -- C:\Windows\system32\Drivers\AFD.sys [499200]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14-07-2009 - 01:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13-07-2009 - 23:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13-07-2009 - 23:19:54.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9C253CE7311CA60FC11C774692A13208] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.27-04-2011 - 02:57:40.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.14-07-2009 - 00:06:13.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Controlador de porta i8042.) (.13-07-2009 - 23:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14-07-2009 - 00:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.040D62A9D8AD28922632137ACDD984F2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.04-05-2011 - 02:51:08.) -- C:\Windows\system32\Drivers\MRxSmb.sys [157696]
[MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) (.13-07-2009 - 23:21:29.) -- C:\Windows\system32\Drivers\netBT.sys [259072]
[MD5.9A6089B056EA1B83B36424FC9D0A300E] - (.Microsoft Corporation - Controlador de Sistema de Ficheiros NT.) (.12-04-2013 - 14:36:37.) -- C:\Windows\system32\Drivers\ntfs.sys [1653096]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Controlador de porta paralela.) (.14-07-2009 - 00:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14-07-2009 - 00:10:12.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [130048]
[MD5.9706B84DBABFC4B4CA46C5A82B14DFA3] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.14-07-2009 - 00:18:02.) -- C:\Windows\system32\Drivers\rdpdr.sys [165376]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14-07-2009 - 00:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) (.13-07-2009 - 23:21:15.) -- C:\Windows\system32\Drivers\tdx.sys [99840]
[MD5.9E425AC5C9A5A973273D169F43B4F5E1] - (.Microsoft Corporation - Controlador de cópia sombra do volume.) (.06-09-2012 - 17:38:18.) -- C:\Windows\system32\Drivers\volsnap.sys [295792]
~ Generic Processes:  Scanned in 00mn 04s



---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 1/18
~ Mes musiques (My Musics) : 1/8
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 1/22
~ Mes Documents (My Documents) : 1/2457
~ Mon Bureau (My Desktop) : 10/155
~ Menu demarrer (Programs) : 1/33
~ Hidden Files:  Scanned in 00mn 13s



---\\ Processos lançados
[MD5.4BFA1849DC7AA3CB99C160D9EB96C67B] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [3854640] [PID.3800]
[MD5.2EBBBFC120593C683796092F2DDA0EFC] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [841032] [PID.3616]
[MD5.D6D0EB77C43224ABC8E137FACDAED88E] - (.Google - Hangouts Plugin.) -- C:\Users\Utilizador\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe   [64384] [PID.1568]
[MD5.F4651164AA1330735ADEA50AD0A326F2] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8208896] [PID.4244]
[MD5.BEA8D0FA8805CC2E6BB49728166699C7] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [50344] [PID.1364]
[MD5.D58C10AFF2B5C09D615623A4DAC0E330] - (.AVAST Software - avast! firewall service.) -- C:\Program Files\AVAST Software\Avast\afwServ.exe   [109048] [PID.1560]
[MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65432] [PID.1644]
[MD5.30E3850F303EAE5C364782EA78579CC9] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [55624] [PID.1688]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Instalador do Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648] [PID.4016]
[MD5.E5F00579E4DEDB11A322AB7D041C8F54] - (.AVAST Software - avast! Emergency Update.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe   [804840] [PID.204]
~ Processes Running:  Scanned in 00mn 02s



---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\Utilizador\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)

---\\ Pasta de extensão do Google Chrome

~ Google Lines Browser: 17 Legitimates Filtered in 00mn 01s



---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 1



---\\ Outras conexões do utilizador (04)
O4 - GS\Desktop [Public]: aTube Catcher.lnk . (.DsNET - aTube Catcher to download and convert video.)  -- C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: Kobo.lnk . (...)  -- C:\Program Files (x86)\Kobo\Kobo.exe
O4 - GS\Desktop [Public]: Video Search.lnk . (.DsNET - aTube Catcher to download and convert video.)  -- C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
O4 - GS\QuickLaunch [Utilizador]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Utilizador]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [Utilizador]: Upgrade to Paltalk Extreme.lnk - Chave orfã
O4 - GS\QuickLaunch [Utilizador]: Viber.lnk . (...)  -- C:\Users\Utilizador\AppData\Local\Viber\Viber.exe
O4 - GS\QuickLaunch [Utilizador]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\Utilizador\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent
O4 - GS\TaskBar [Utilizador]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Utilizador]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [Utilizador]: Viber.lnk . (...)  -- C:\Users\Utilizador\AppData\Local\Viber\Viber.exe
O4 - GS\TaskBar [Utilizador]: ZON NET MOBILE.lnk . (...)  -- C:\Program Files (x86)\ZON NET MOBILE\UIMain.exe
O4 - GS\Program [Utilizador]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Utilizador]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Utilizador]: Viber.lnk . (...)  -- C:\Users\Utilizador\AppData\Local\Viber\Viber.exe
O4 - GS\SystemTools [Utilizador]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Desktop [Utilizador]: Documentos - Atalho.lnk . (...)  -- C:\Users\Utilizador\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
O4 - GS\Desktop [Utilizador]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\Utilizador\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent
O4 - GS\QuickLaunch [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Guest]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [Guest]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Guest]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Program [Guest]: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Program [Guest]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Guest]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Desktop [Guest]: FacebookPasswordDecryptor.lnk . (.SecurityXploded - All-in-one Facebook Password Recovery Softw.)  -- C:\Program Files (x86)\SecurityXploded\FacebookPasswordDecryptor\FacebookPasswordDecryptor.exe
~ Global Startup: 91 Legitimates Filtered in 00mn 12s



---\\ Aplicações iniciadas por registo & pastas (04)
O4 - GS\Startup [Guest]: Uninstall Webroot RunOnce.lnk . (.Webroot Software, Inc. - Webroot Installer.)  -- C:\Program Files (x86)\Common Files\wruninstall.exe
O4 - HKCU\..\Run: [ccleaner] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe   =>.Piriform Ltd
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKUS\S-1-5-21-3136738229-3321464536-2784466607-1000\..\Run: [ccleaner] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe   =>.Piriform Ltd
~ Application:  Scanned in 00mn 00s



---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE7A8BE6-057B-4CCA-BAB4-23EEBDAFB2B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{EE7A8BE6-057B-4CCA-BAB4-23EEBDAFB2B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{EE7A8BE6-057B-4CCA-BAB4-23EEBDAFB2B1}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 01s



---\\ Protocolo adicional (018)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll  =>.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Software instalados (042)
O42 - Logiciel: ZON NET MOBILE - (...) [HKLM][64Bits] -- {93D34EE3-99B3-4DB1-8B0A-0A657466F90D}
~ Logic: 6 Legitimates Filtered in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\BancoBest]
[HKCU\Software\POIPedia]
[HKCU\Software\PTEID]
[HKLM\Software\Wow6432Node\AutoHelpDesk]
~ Key Software: 194 Legitimates Filtered in 00mn 00s



---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 05-08-2012 - 22:49:50 - [0] ----D C:\Program Files (x86)\BancoBest
O43 - CFD: 17-03-2014 - 13:58:58 - [0] ----D C:\Program Files (x86)\DriverUpdate
O43 - CFD: 02-04-2014 - 02:04:55 - [19,629] ----D C:\Program Files (x86)\ZON NET MOBILE
O43 - CFD: 03-08-2012 - 18:11:55 - [0] ----D C:\Users\Utilizador\AppData\Roaming\BancoBest
O43 - CFD: 03-08-2012 - 18:11:45 - [0,103] ----D C:\Users\Utilizador\AppData\Local\BancoBest
O43 - CFD: 06-03-2014 - 13:13:35 - [0,407] ----D C:\Users\Utilizador\AppData\Local\BeAnywhere Support Express
O43 - CFD: 11-12-2013 - 16:39:36 - [13,226] ----D C:\Users\Utilizador\AppData\Local\lptmp1402949683
O43 - CFD: 11-01-2014 - 16:07:32 - [7,478] ----D C:\Users\Utilizador\AppData\Local\lptmp890397290
O43 - CFD: 13-03-2014 - 02:06:43 - [0] -SH-D C:\Users\Utilizador\AppData\Local\ms-drivers
~ Program Folder: 170 Legitimates Filtered in 00mn 30s



---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 05-04-2014 - 21:13:38 ---A- . (...) -- C:\Windows\zoek-delete.exe   [24064]
O44 - LFC:[MD5.951970B9A9FCD9494A5054F20E085619] - 05-04-2014 - 21:46:31 ---A- . (...) -- C:\zoek-results.log   [18697]
O44 - LFC:[MD5.ACBF9DA6EE3F6A82EABF2A43008E45EA] - 08-04-2014 - 00:17:09 ---A- . (...) -- C:\Windows\System32\prfc0816.dat   [152656]
O44 - LFC:[MD5.7BA6C05D4CC77D7D5533A2284F5A00A8] - 08-04-2014 - 00:17:09 ---A- . (...) -- C:\Windows\System32\prfh0816.dat   [721734]
O44 - LFC:[MD5.D0A46572F03EFD20C7401DF993CBF5EB] - 09-04-2014 - 06:17:49 ---A- . (...) -- C:\PureRa.txt   [3066]
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 09-04-2014 - 22:32:32 ---A- . (...) -- C:\Windows\system.ini   [215]
O44 - LFC:[MD5.AE131991E237113B9A97947EDB3E0004] - 09-04-2014 - 22:36:22 ---A- . (...) -- C:\ComboFix.txt   [20852]
~ Files: 25 Legitimates Filtered in 00mn 38s



---\\ Enumeração das chaves do registo StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\uTorrent  [Key] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Utilizador\AppData\Roaming\uTorrent\uTorrent.exe  =>P2P.BitTorrent
~ SMSR Keys: 1 Legitimates Filtered in 00mn 00s



---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s



---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s



---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:[MD5.8D4B8BF93C65BDBC133B20706A3B5208] - 05-04-2014 - 19:17:59 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys   [65776]
O58 - SDL:[MD5.F87990FDBDD4DC037343A80BD7E67538] - 13-01-2014 - 12:59:33 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\Drivers\aswTap.sys   [44640]
O58 - SDL:[MD5.0606875650850B0697D662934529F6FC] - 05-04-2014 - 19:17:59 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys   [208928]
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 14-07-2009 - 01:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [530496]
O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10-06-2009 - 20:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [31232]
O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 14-07-2009 - 01:45:55 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [24656]
O58 - SDL:[MD5.2E3ACFDA0B792707C59B307ABB6A6E95] - 17-03-2014 - 12:24:34 ---A- . (...) -- C:\Windows\System32\Drivers\SWDUMon.sys   [16152]
O58 - SDL:[MD5.2A6F99C1E2D25C4C920A37E07BB26291] - 16-10-2013 - 01:44:42 ---A- . (.Anchorfree Inc. - Anchorfree HSS VPN Adapter.) -- C:\Windows\System32\Drivers\taphss6.sys   [42184]
~ Drivers: 19 Legitimates Filtered in 00mn 04s



---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
~ ADS:  Scanned in 00mn 00s



---\\ Associações Shell Spawning (O67)
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
~ FASS Keys: 13 Legitimates Filtered in 00mn 01s



---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Opera> <Opera>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys:  Scanned in 00mn 00s



---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys:  Scanned in 00mn 00s



---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.04B47DEEB298AE90A0C42DEAED71F8BA] [SPRF][08-04-2014] (...) -- C:\Users\Utilizador\Desktop\adwcleaner.exe   [1426178]
[MD5.FEE1D58C6AD73F25EB0DAD4F690560AD] [SPRF][22-02-2014] (.Facebook Inc. - Setup.) -- C:\Users\Utilizador\Desktop\FacebookVideoCallSetup_v1.2.205.0.exe   [501248]
[MD5.972032F9CA03B3DA1EF34E3E9BD43F71] [SPRF][17-03-2014] (.FLVMPlayer - FLV Media Player Setup.) -- C:\Users\Utilizador\Desktop\FLVMPlayer.exe   [4953944]
[MD5.64BAEC464B396B66A353D8FC2F42A4E3] [SPRF][31-07-2011] (.RaProducts.org - System Purification Tool.) -- C:\Users\Utilizador\Desktop\PureRa.exe   [76565]
[MD5.916EA7F9B2882A6E955DF42D6B037934] [SPRF][17-03-2014] (.BitTorrent Inc. - µTorrent.) -- C:\Users\Utilizador\Desktop\uTorrent-2-.exe   [1852496]  =>P2P.BitTorrent
[MD5.E1E94652EB813EBC06C3867E0D3F5E03] [SPRF][12-12-2013] (.John Drew - Yagi Calculator Setup.) -- C:\Users\Utilizador\Desktop\yagisetup (1).exe   [717209]
~ Files: 8 Legitimates Filtered in 00mn 02s



---\\ Pesquisa dos pacotes WindowsInstaller (WIS) (O93) (NTFS)
[MD5.BBCDC61C8AA8009FED0028798A761EE2] [WIS][17-08-2013] (.Skype Technologies S.A. - Skype Click to Call.) -- C:\Windows\Installer\1877aa5.msi   [10502144]
~ WIS: 125 Legitimates Filtered in 00mn 21s



---\\ Search Tracing Registry Key (O100)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QtraxInstaller_RASAPI32  =>P2P.Qtrax
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\QtraxInstaller_RASMANCS  =>P2P.Qtrax
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent-2-_RASAPI32  =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent-2-_RASMANCS  =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASAPI32  =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASMANCS  =>P2P.µTorrent
~ BTK: 563 Legitimates Filtered in 00mn 01s



---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 18-03-2014 257928 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 17-02-2014 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 17-02-2014 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Auto 23-10-2013 172192 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe

SR - | Auto 21-12-2013 65432 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 07-09-2013 55624 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 05-04-2014 50344 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 05-04-2014 109048 |  (avast! Firewall) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\afwServ.exe
SR - | Auto 14-07-2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14-07-2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 06-03-2009 364064 |  (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe
SR - | Auto 14-07-2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 14-07-2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Demand 10-07-1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
SR - | Auto 14-07-2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Services:  Scanned in 00mn 15s



---\\ Scâner Aditional (088)
Database Version : 13044 - (09-04-2014)
Clés trouvées (Keys found) : 1
Valeurs trouvées (Values found) : 2
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 1

[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent]   =>P2P.BitTorrent^
C:\Users\Utilizador\Desktop\uTorrent-2-.exe   =>P2P.BitTorrent^
~ Additionnel Scan: 212354 Items scanned in 01mn 10s



---\\ Sumário das deteções encontradas na sua estação
~ MSI: 0 link(s) detected in 00mn 00s



~ 1047 Legitimates filtered by white list
End of the scan (394 lines in 05mn 46s)(0)

 Há programas desnecessários iniciando junto com o Windows, o que torna o seu PC mais lento. Para corrigir isto, siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

De preferência deixe apenas os programas de segurança (anti-vírus/anti-spywares/firewall) iniciarem junto com o Windows.

Use também o programa Ccleaner, indicado neste tutorial acima, para fazer uma limpeza e otimização do PC agora e de tempos em tempos.
______________________________________________________________________________________________________________

 Selecione e copie todo o texto destacado em vermelho que te passei.
_____________________________________________________________________________________________________________

 Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta.

Power Max MUITO OBRIGADO.
Rapport de ZHPFix 2014.4.7.2 par Nicolas Coolman, Update du 07/04/2014
Fichier d'export Registre :
Run by Utilizador at 10-04-2014 12:22:20
High Elevated Privileges : OK
Windows 7 Ultimate Edition, 64-bit  (Build 7600)

Reciclagem vazia (00mn 02s)

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ Temporários windows (2) (94.208 octets)
ELIMINÉ Flash Cookies (0) (0 octets)

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso


========== Recapitulativo ==========
1 : Pastas
2 : Ficheiros
1 : Restauração Sistema


End of clean in 01mn 04s

========== Caminho do ficheiro do relatório ==========
C:\Users\Utilizador\AppData\Roaming\ZHP\ZHPFix[R1].txt - 06-04-2014 09:34:11 [3180]
C:\Users\Utilizador\AppData\Roaming\ZHP\ZHPFix[R2].txt - 06-04-2014 22:19:31 [1171]
C:\Users\Utilizador\AppData\Roaming\ZHP\ZHPFix[R3].txt - 10-04-2014 23:09:42 [3336]
C:\Users\Utilizador\AppData\Roaming\ZHP\ZHPFix[R4].txt - 10-04-2014 12:22:22 [985]

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

# AdwCleaner v3.001 - Report created 26/08/2013 at 18:00:04
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Ultimate  (64 bits)
# Username : Utilizador - TOSHIBAA100
# Running from : C:\Users\Utilizador\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\StarApp

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\tracing\askpartnercobrandingtool_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pdf-xchange-viewer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pdf-xchange-viewer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_free-usb-disk-security_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_free-usb-disk-security_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_registry-booster_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_registry-booster_RASMANCS
Key Deleted : HKLM\Software\Uniblue\DriverScanner

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16476


-\\ Google Chrome v29.0.1547.57

[ File : C:\Users\Utilizador\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2428 octets] - [26/08/2013 17:57:49]
AdwCleaner[S0].txt - [2107 octets] - [26/08/2013 18:00:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2167 octets] ##########

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

Power Max por lapso postei um relatório errado,o que vale é este

# AdwCleaner v3.023 - Report created 10/04/2014 at 15:09:02
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Ultimate  (64 bits)
# Username : Utilizador - TOSHIBAA100
# Running from : C:\Users\Utilizador\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16476


-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Utilizador\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2428 octets] - [26/08/2013 21:57:49]
AdwCleaner[R10].txt - [2352 octets] - [20/10/2013 17:11:35]
AdwCleaner[R11].txt - [5469 octets] - [20/10/2013 21:31:22]
AdwCleaner[R12].txt - [2204 octets] - [21/10/2013 19:40:41]
AdwCleaner[R13].txt - [2326 octets] - [23/10/2013 15:21:51]
AdwCleaner[R14].txt - [2448 octets] - [28/10/2013 21:35:43]
AdwCleaner[R15].txt - [2703 octets] - [06/11/2013 23:07:19]
AdwCleaner[R16].txt - [2693 octets] - [10/11/2013 10:29:16]
AdwCleaner[R17].txt - [3145 octets] - [17/11/2013 01:12:36]
AdwCleaner[R18].txt - [2940 octets] - [20/11/2013 23:44:48]
AdwCleaner[R19].txt - [4518 octets] - [28/11/2013 12:30:36]
AdwCleaner[R1].txt - [879 octets] - [30/08/2013 22:15:59]
AdwCleaner[R20].txt - [4145 octets] - [30/11/2013 16:41:45]
AdwCleaner[R21].txt - [3304 octets] - [09/12/2013 00:32:49]
AdwCleaner[R22].txt - [3755 octets] - [13/02/2014 13:08:26]
AdwCleaner[R23].txt - [4051 octets] - [16/02/2014 00:22:42]
AdwCleaner[R24].txt - [3675 octets] - [16/02/2014 23:57:56]
AdwCleaner[R25].txt - [4773 octets] - [17/02/2014 22:25:34]
AdwCleaner[R26].txt - [3858 octets] - [17/02/2014 22:33:01]
AdwCleaner[R27].txt - [3919 octets] - [19/02/2014 16:13:45]
AdwCleaner[R28].txt - [4041 octets] - [20/02/2014 01:59:38]
AdwCleaner[R29].txt - [4096 octets] - [03/03/2014 17:10:10]
AdwCleaner[R2].txt - [997 octets] - [03/09/2013 23:43:08]
AdwCleaner[R30].txt - [8438 octets] - [05/03/2014 03:57:49]
AdwCleaner[R31].txt - [4279 octets] - [15/03/2014 01:02:06]
AdwCleaner[R32].txt - [4452 octets] - [15/03/2014 02:11:13]
AdwCleaner[R33].txt - [5676 octets] - [19/03/2014 03:13:01]
AdwCleaner[R34].txt - [4584 octets] - [20/03/2014 09:48:36]
AdwCleaner[R35].txt - [4706 octets] - [21/03/2014 22:13:20]
AdwCleaner[R36].txt - [4828 octets] - [24/03/2014 13:08:52]
AdwCleaner[R37].txt - [4950 octets] - [31/03/2014 19:43:00]
AdwCleaner[R38].txt - [12698 octets] - [04/04/2014 12:35:00]
AdwCleaner[R39].txt - [5195 octets] - [09/04/2014 07:57:02]
AdwCleaner[R3].txt - [1165 octets] - [05/10/2013 23:54:21]
AdwCleaner[R40].txt - [5317 octets] - [09/04/2014 21:24:35]
AdwCleaner[R41].txt - [5441 octets] - [10/04/2014 15:07:18]
AdwCleaner[R4].txt - [1648 octets] - [13/10/2013 19:38:30]
AdwCleaner[R5].txt - [1467 octets] - [15/10/2013 21:31:16]
AdwCleaner[R6].txt - [1477 octets] - [17/10/2013 23:15:07]
AdwCleaner[R7].txt - [1598 octets] - [18/10/2013 08:14:41]
AdwCleaner[R8].txt - [4986 octets] - [19/10/2013 16:49:02]
AdwCleaner[R9].txt - [1839 octets] - [19/10/2013 21:15:32]
AdwCleaner[S0].txt - [2247 octets] - [26/08/2013 22:00:04]
AdwCleaner[S10].txt - [2388 octets] - [20/10/2013 17:12:47]
AdwCleaner[S11].txt - [3958 octets] - [20/10/2013 21:33:05]
AdwCleaner[S12].txt - [2267 octets] - [21/10/2013 19:41:45]
AdwCleaner[S13].txt - [2389 octets] - [23/10/2013 19:08:19]
AdwCleaner[S14].txt - [2511 octets] - [28/10/2013 22:50:40]
AdwCleaner[S15].txt - [2769 octets] - [06/11/2013 23:08:44]
AdwCleaner[S16].txt - [2755 octets] - [10/11/2013 10:30:47]
AdwCleaner[S17].txt - [3217 octets] - [17/11/2013 01:18:27]
AdwCleaner[S18].txt - [3002 octets] - [20/11/2013 23:46:06]
AdwCleaner[S19].txt - [4585 octets] - [28/11/2013 12:32:12]
AdwCleaner[S1].txt - [939 octets] - [30/08/2013 22:17:04]
AdwCleaner[S20].txt - [3803 octets] - [30/11/2013 16:42:57]
AdwCleaner[S21].txt - [3366 octets] - [09/12/2013 00:33:54]
AdwCleaner[S22].txt - [3741 octets] - [13/02/2014 13:10:28]
AdwCleaner[S23].txt - [4096 octets] - [16/02/2014 02:53:50]
AdwCleaner[S24].txt - [4827 octets] - [17/02/2014 22:28:08]
AdwCleaner[S25].txt - [3981 octets] - [19/02/2014 16:15:21]
AdwCleaner[S26].txt - [4158 octets] - [03/03/2014 17:11:56]
AdwCleaner[S27].txt - [4516 octets] - [15/03/2014 02:12:15]
AdwCleaner[S28].txt - [5657 octets] - [19/03/2014 03:14:19]
AdwCleaner[S29].txt - [4646 octets] - [20/03/2014 09:49:44]
AdwCleaner[S2].txt - [1057 octets] - [03/09/2013 23:44:27]
AdwCleaner[S30].txt - [4768 octets] - [21/03/2014 22:15:25]
AdwCleaner[S31].txt - [4890 octets] - [24/03/2014 13:13:06]
AdwCleaner[S32].txt - [5012 octets] - [31/03/2014 19:44:33]
AdwCleaner[S33].txt - [7431 octets] - [09/04/2014 01:00:14]
AdwCleaner[S34].txt - [5257 octets] - [09/04/2014 08:01:16]
AdwCleaner[S35].txt - [5379 octets] - [09/04/2014 21:25:46]
AdwCleaner[S36].txt - [4941 octets] - [10/04/2014 15:09:02]
AdwCleaner[S3].txt - [1231 octets] - [06/10/2013 00:02:58]
AdwCleaner[S4].txt - [1641 octets] - [13/10/2013 19:40:09]
AdwCleaner[S5].txt - [1530 octets] - [15/10/2013 21:32:55]
AdwCleaner[S6].txt - [1539 octets] - [17/10/2013 23:16:28]
AdwCleaner[S7].txt - [1659 octets] - [18/10/2013 08:16:24]
AdwCleaner[S8].txt - [3440 octets] - [19/10/2013 16:50:13]
AdwCleaner[S9].txt - [1900 octets] - [19/10/2013 21:16:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S36].txt - [5422 octets] ##########

JoseCarlos escreveu:# AdwCleaner v3.001 - Report created 26/08/2013 at 18:00:04
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Ultimate  (64 bits)
# Username : Utilizador - TOSHIBAA100
# Running from : C:\Users\Utilizador\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\StarApp

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\tracing\askpartnercobrandingtool_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pdf-xchange-viewer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pdf-xchange-viewer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_free-usb-disk-security_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_free-usb-disk-security_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_registry-booster_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_registry-booster_RASMANCS
Key Deleted : HKLM\Software\Uniblue\DriverScanner

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16476


-\\ Google Chrome v29.0.1547.57

[ File : C:\Users\Utilizador\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2428 octets] - [26/08/2013 17:57:49]
AdwCleaner[S0].txt - [2107 octets] - [26/08/2013 18:00:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2167 octets] ##########

é verdade, aquele primeiro relatório é mais antigo. Como está o PC atualmente?

Power Max agora o PC está limpo até esterilizado.Muito obrigado.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by Utilizador on 10-04-2014 at 15:19:56,48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10-04-2014 at 15:33:25,40
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  Fico feliz que o problema tenha sido resolvido.

 Só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

 Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

  Foi um prazer ajudar. Conte sempre conosco!

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.