remoção de Hao 123

nem preciso falar né  quero que isso saia do meu note. O Hao123...

  Olá Anacleto.

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

# AdwCleaner v3.207 - Relatório criado 11/05/2014 às 16:43:00
# Atualizado 05/05/2014 por Xplode
# Sistema Operacional : Windows 8.1 Single Language  (64 bits)
# Usuário : anacleto silva - ANACLETO-PC
# Executando de : C:\Users\anacleto silva\Downloads\AdwCleaner(2).exe
# Opção : Examinar

***** [ Serviços ] *****


***** [ Arquivos / Pastas ] *****


***** [ Atalhos ] *****


***** [ Registro ] *****


***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Mozilla Firefox v30.0 (pt-BR)

[ Arquivo : C:\Users\anacleto silva\AppData\Roaming\Mozilla\Firefox\Profiles\6p95fymi.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1270 octets] - [11/05/2014 16:02:33]
AdwCleaner[R1].txt - [737 octets] - [11/05/2014 16:43:00]
AdwCleaner[S0].txt - [1217 octets] - [11/05/2014 16:04:06]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [856 octets] ##########

Você postou este relatório: C:\AdwCleaner\AdwCleaner[R1].txt

Mas o que precisamos é deste: C:\AdwCleaner\AdwCleaner[S0].txt

# AdwCleaner v3.207 - Relatório criado 11/05/2014 às 16:45:32
# Atualizado 05/05/2014 por Xplode
# Sistema Operacional : Windows 8.1 Single Language  (64 bits)
# Usuário : anacleto silva - ANACLETO-PC
# Executando de : C:\Users\anacleto silva\Downloads\AdwCleaner(2).exe
# Opção : Limpar

***** [ Serviços ] *****


***** [ Arquivos / Pastas ] *****


***** [ Atalhos ] *****


***** [ Registro ] *****


***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Mozilla Firefox v30.0 (pt-BR)

[ Arquivo : C:\Users\anacleto silva\AppData\Roaming\Mozilla\Firefox\Profiles\6p95fymi.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1270 octets] - [11/05/2014 16:02:33]
AdwCleaner[R1].txt - [935 octets] - [11/05/2014 16:43:00]
AdwCleaner[S0].txt - [1217 octets] - [11/05/2014 16:04:06]
AdwCleaner[S1].txt - [854 octets] - [11/05/2014 16:45:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [913 octets] ##########

só ta aparecendo isso

Agora você postou este: C:\AdwCleaner\AdwCleaner[S1].txt

Mas o que precisamos é deste: C:\AdwCleaner\AdwCleaner[S0].txt

to fazendo de novo só um min

só aparece este memso sera que é´prq eu ja tinha feito isso antes  tava vendo o tutoria de uma pessoa aqui e fui fazendo igual mas no fim deu tudo erradpo sera que eu exclui e nao aparece mais? derrepente é isso.

Então não precisa postar o log do Adwcleaner.
____________________________________________________________

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by anacleto silva on 11/05/2014 at 17:27:51,61.
Microsoft Windows 8.1 Single Language 6.3.9600  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\anacleto silva\Downloads\zoek.exe [Scan all users]   [Quick Scan] [Auto Clean]

==== Older Logs ======================

C:\zoek-results2014-03-08-175051.log 18260 bytes
C:\zoek-results2014-03-08-185015.log 463 bytes

==== Empty Folders Check ======================

C:\PROGRA~2\DSP-worx deleted successfully
C:\PROGRA~2\URUSoft deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\4shared Desktop deleted successfully
C:\PROGRA~3\Baidu Security deleted successfully
C:\PROGRA~3\Oracle deleted successfully
C:\Users\anacleto silva\AppData\Roaming\BitTorrent deleted successfully
C:\Users\anacleto silva\AppData\Roaming\DVDVideoSoft deleted successfully
C:\Users\anacleto silva\AppData\Roaming\Nico Mak Computing deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-874636910-2500813232-2263662910-1002\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~3\FileSplitUpLoad.dll deleted
C:\PROGRA~3\InstallMate deleted
C:\Users\anacleto silva\Downloads\SoftonicDownloader_para_tuxguitar.exe deleted

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
2014-05-07 18:12:12 36337E5180839191D130DD4198678AEF 632416307 ----a-w- C:\WINDOWS\MEMORY.DMP
2014-04-16 03:27:59 81394C91B7B5A7C799E249AE82491F13 2373784 ----a-w- C:\WINDOWS\explorer.exe
====== C:\Users\ANACLE~1\AppData\Local\Temp ====
2014-05-08 00:55:27 9091325C023FBFB90F87E582F9520520 5502440 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\14671927_stp.EXE
2014-05-08 00:06:17 16E3E0A74EAAEF33B5DE8201B260E9D4 214722064 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\11722418_stp.EXE
2014-05-08 00:05:28 47F45E29690BB8C74C5C294AD21A23CA 114693340 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\11673117_stp.EXE
2014-05-07 18:51:42 302103AF95A8F43AD85F80DAE14BDB9C 17305616 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\487885_stp.EXE
2014-05-07 18:03:33 2E0323A94915FAAB10A25F3BABF82584 157696 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
2014-05-07 04:54:01 09941D79F2016471254AEA700818A548 4071424 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\Lang_pt-BR.msi
2014-05-06 23:45:35 F310B4DC75C9579FBADEFA79CDA29862 29007536 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\364653323_stp.EXE
2014-05-04 10:15:32 3D0765678274C38ED0DCC6D9581CC716 796160 ------w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\364653616_stp\pm.exe
2014-05-04 10:15:32 3D0765678274C38ED0DCC6D9581CC716 796160 ------w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\14672190_stp\pm.exe
2014-04-30 14:35:28 5305A75169DE417E2336C0D9C54A308B 713008 ------w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\488036_stp\webget_setup.exe
2014-04-30 14:35:28 5305A75169DE417E2336C0D9C54A308B 713008 ------w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\11722714_stp\webget_setup.exe
2014-04-27 22:14:51 3BF3676B6709ABA181E596553BCBB007 287193 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\epom1_nationzoom_20131128171859.exe
====== Java Cache =====
====== C:\WINDOWS\SysWOW64 =====
2014-05-03 00:31:19 5869FBC754578A59C8C8635B99DB79DE 17384448 ----a-w- C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-03 00:28:24 B5B3334F177CED627C2D7FE38235B6B1 2724864 ----a-w- C:\WINDOWS\SysWOW64\mshtml.tlb
====== C:\WINDOWS\SysWOW64\drivers =====
====== C:\WINDOWS\Sysnative =====
2014-05-03 00:31:20 A98DA2EC1E56CF52C682D072F77D9874 23547904 ----a-w- C:\WINDOWS\Sysnative\mshtml.dll
2014-05-03 00:28:21 94C59DD02BC7EA0E421055B9946CA861 2724864 ----a-w- C:\WINDOWS\Sysnative\mshtml.tlb
====== C:\WINDOWS\Sysnative\drivers =====
2014-05-08 00:58:17 8E9E3CBA08EC47245B277110835CF305 38216 ----a-w- C:\WINDOWS\Sysnative\drivers\tap0901.sys
2014-05-07 20:26:31 4F3A38FD04AED5FB02C4375984D21FB2 61112 ----a-w- C:\WINDOWS\Sysnative\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys
2014-05-07 18:54:59 6140163BFE9D8F2DFDBA088ED5521C13 119512 ----a-w- C:\WINDOWS\Sysnative\drivers\MBAMSwissArmy.sys
2014-04-16 04:21:33 3595FBDF25F8BA6256072D103937D7D6 311640 -c--a-w- C:\WINDOWS\Sysnative\drivers\volsnap.sys
2014-04-16 04:20:24 F21B77B4D74092A543807D3CEB711A88 1118552 ----a-w- C:\WINDOWS\Sysnative\drivers\ndis.sys
2014-04-16 04:20:18 9539F7917B4B6D92C90F0FAA6B86C605 539992 -c--a-w- C:\WINDOWS\Sysnative\drivers\acpi.sys
2014-04-16 04:19:59 B2BD017231836DA9F63F41E3A075D73E 590168 ----a-w- C:\WINDOWS\Sysnative\drivers\fvevol.sys
2014-04-16 04:19:43 A26AEC49F318FEE141DDDB2C5F99B3E6 249688 ----a-w- C:\WINDOWS\Sysnative\drivers\rdyboost.sys
2014-04-16 04:19:38 233A4C961703D6B3EBA4EC1A3E85AACE 298496 ----a-w- C:\WINDOWS\Sysnative\drivers\ks.sys
2014-04-16 04:19:31 275AFE3FA35E8D78BE97695DF49817C6 280920 -c--a-w- C:\WINDOWS\Sysnative\drivers\pci.sys
2014-04-16 04:19:27 87765EF43C33BE342F4ACB0E3FBF89A6 384856 -c--a-w- C:\WINDOWS\Sysnative\drivers\spaceport.sys
2014-04-16 04:19:24 8685379B82AC81187813225905531D1E 272896 -c--a-w- C:\WINDOWS\Sysnative\drivers\portcls.sys
2014-04-16 04:19:21 EA23453240137F6773174E0D93F61A69 148824 -c--a-w- C:\WINDOWS\Sysnative\drivers\USBSTOR.SYS
2014-04-16 04:19:20 46D1DF775FFF14585218BBE16E5B2C9A 360792 ----a-w- C:\WINDOWS\Sysnative\drivers\fltMgr.sys
2014-04-16 04:19:00 8F39AFEB255487932DFF14D9E0E0FC24 372568 ----a-w- C:\WINDOWS\Sysnative\drivers\storport.sys
2014-04-16 04:18:57 52E483A3701A5A61A75A06993720347D 551256 -c--a-w- C:\WINDOWS\Sysnative\drivers\vhdmp.sys
2014-04-16 04:18:36 FDEC5799BA499D18AFA3A540538866E7 236888 -c--a-w- C:\WINDOWS\Sysnative\drivers\sdbus.sys
2014-04-16 04:18:31 48430B0313FC1CFE3D2400553F1A93CD 325464 -c--a-w- C:\WINDOWS\Sysnative\drivers\USBXHCI.SYS
2014-04-16 04:18:29 DDEE191AB32DFC22C6465002ECDF5EE4 124416 ----a-w- C:\WINDOWS\Sysnative\drivers\luafv.sys
2014-04-16 04:18:28 0ECEE590F2E2EF969FB74A6FC583A1E6 663040 ----a-w- C:\WINDOWS\Sysnative\drivers\PEAuth.sys
2014-04-16 04:18:25 0527EF6E23B9FAB37DDCBC479C6CFA28 167424 -c--a-w- C:\WINDOWS\Sysnative\drivers\rfcomm.sys
2014-04-16 04:18:24 02836172141D3AFA35B07679E253E503 151384 -c--a-w- C:\WINDOWS\Sysnative\drivers\dumpsd.sys
2014-04-16 04:18:16 EF3AE7773394DF49CE74AF78A1C8D23D 146776 ----a-w- C:\WINDOWS\Sysnative\drivers\msgpioclx.sys
2014-04-16 04:18:14 BCFD8B149B3ADF92D0DB1E909CAF0265 79192 ----a-w- C:\WINDOWS\Sysnative\drivers\fileinfo.sys
2014-04-16 04:18:13 E515A287C8FAE901EB8FB42F168E14F2 924504 ----a-w- C:\WINDOWS\Sysnative\drivers\refs.sys
2014-04-16 04:18:13 AB8CD3914AD779C15B27DDD9F53F7434 1200640 -c--a-w- C:\WINDOWS\Sysnative\drivers\bthport.sys
2014-04-16 04:18:12 38A82F4EE8C416A6744B6D30381ED768 33280 -c--a-w- C:\WINDOWS\Sysnative\drivers\BasicRender.sys
2014-04-16 04:18:10 D30C67473A2E229662D21F27EAA9AAA5 226304 -c--a-w- C:\WINDOWS\Sysnative\drivers\BthLEEnum.sys
2014-04-16 04:18:10 0B1E929D11A8E358106955603FAC65E8 79192 -c--a-w- C:\WINDOWS\Sysnative\drivers\sdstor.sys
2014-04-16 04:18:00 61A1C2641321A6B89A2B41C5D481EF48 71888 ----a-w- C:\WINDOWS\Sysnative\drivers\dumpfve.sys
2014-04-16 04:17:56 C1F564F324685C088ECAB1933576CF91 54816 ----a-w- C:\WINDOWS\Sysnative\drivers\wpcfltr.sys
2014-04-16 04:17:53 B034A41891A36457B994307DFA772293 189784 -c--a-w- C:\WINDOWS\Sysnative\drivers\UCX01000.SYS
2014-04-16 04:17:49 9DDCA7F18983C5410DEFF79F819DF93C 994136 ----a-w- C:\WINDOWS\Sysnative\drivers\http.sys
2014-04-16 04:17:30 9CC0003FB8ED3763B977B43F1012FF63 54272 ----a-w- C:\WINDOWS\Sysnative\drivers\watchdog.sys
2014-04-16 04:17:30 23E75BED9076F856B36F5F934BBD5795 81920 -c--a-w- C:\WINDOWS\Sysnative\drivers\BTHUSB.SYS
2014-04-16 03:28:20 1C80517BE6836A812F6A9B99B8321351 2013016 ----a-w- C:\WINDOWS\Sysnative\drivers\ntfs.sys
2014-04-16 03:28:20 179A41249055D5F039F1B6703F3B6D2B 376152 ----a-w- C:\WINDOWS\Sysnative\drivers\clfs.sys
2014-04-16 03:28:02 FEEFE783D87C9063CDAC6DBDCF95F533 2519384 ----a-w- C:\WINDOWS\Sysnative\drivers\tcpip.sys
2014-04-16 03:27:59 C7D252742946DD395670649742FBD73D 1557848 ----a-w- C:\WINDOWS\Sysnative\drivers\dxgkrnl.sys
2014-04-16 03:27:50 E62EAEF0BAC9DD61BF22D4A7F2F18571 679424 ----a-w- C:\WINDOWS\Sysnative\drivers\srv2.sys
2014-04-16 03:27:47 C997E6A37BA8915224B3FB5024A34F69 402944 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb.sys
2014-04-16 03:27:46 7FC5667DF73D4B04AA457CC3A4180E09 157016 ----a-w- C:\WINDOWS\Sysnative\drivers\wof.sys
2014-04-16 03:27:46 4030CB06B8D963A45CED9E60C9F2A11E 379224 ----a-w- C:\WINDOWS\Sysnative\drivers\dxgmms1.sys
2014-04-16 03:27:44 4627C1FBF2802425A408A2D2AF28CF85 565536 ----a-w- C:\WINDOWS\Sysnative\drivers\cng.sys
2014-04-16 03:27:42 466BDC0006103F2547D308DD3CD64398 245760 ----a-w- C:\WINDOWS\Sysnative\drivers\srvnet.sys
2014-04-16 03:27:40 AC408FA243471C25CDE435C3B83536A9 337752 ----a-w- C:\WINDOWS\Sysnative\drivers\Classpnp.sys
2014-04-16 03:27:40 647C7652FA19F98CADF2BFDA2164BFEC 443392 ----a-w- C:\WINDOWS\Sysnative\drivers\nwifi.sys
2014-04-16 03:27:38 CFC52C49BEFE4D70D87FFA900EAB9777 467800 -c--a-w- C:\WINDOWS\Sysnative\drivers\USBHUB3.SYS
2014-04-16 03:27:36 F88CC88F4A6D8476F1664E805CA18CC2 180056 ----a-w- C:\WINDOWS\Sysnative\drivers\ksecpkg.sys
2014-04-16 03:27:35 C48CDFD48A43E4AEC8170E1E50A3FACD 428888 ----a-w- C:\WINDOWS\Sysnative\drivers\FWPKCLNT.SYS
2014-04-16 03:27:35 A03F362C5557E238CBFA914689C77248 134144 ----a-w- C:\WINDOWS\Sysnative\drivers\dfsc.sys
2014-04-16 03:27:34 BFBE1C5F57FE7A885673A1962D5532B7 136024 ----a-w- C:\WINDOWS\Sysnative\drivers\wfplwfs.sys
2014-04-16 03:27:34 8DB8EAB9D0C6A5DF0BDCADEA239220B4 33280 -c--a-w- C:\WINDOWS\Sysnative\drivers\hidusb.sys
2014-04-16 03:27:34 41CF802064F72E55F50CA0A221FD36D4 49152 ----a-w- C:\WINDOWS\Sysnative\drivers\tcpipreg.sys
2014-04-16 03:27:33 ABB7341766902F5AAB45E15F34D19E15 111616 -c--a-w- C:\WINDOWS\Sysnative\drivers\hidclass.sys
2014-04-16 03:27:32 1D55DADC22D21883A2F80297F5A5AE48 140288 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxdav.sys
2014-04-16 03:27:31 FD9C9E9E3F0ED51502C7E8C066BE26B9 79360 ----a-w- C:\WINDOWS\Sysnative\drivers\IPMIDrv.sys
2014-04-16 03:27:31 3E28B99198B514DFEB152EACF913025E 283648 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb10.sys
====== C:\WINDOWS\Tasks ======
2014-04-23 18:25:50 F072AB51ECC9A9761E290F585292EC39 3220 ----a-w- C:\WINDOWS\Sysnative\Tasks\HPCeeScheduleForanacleto silva
2014-04-23 18:25:50 DB4E035F2D4D9817C82176894C2E01B1 392 ----a-w- C:\WINDOWS\Tasks\HPCeeScheduleForanacleto silva.job
2014-04-18 23:40:51 BBBE2215E97E44130A04F5F093B6AE74 988 ----a-w- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002UA.job
2014-04-18 23:40:51 696C5A6301C3C80C432CDDE78779965F 3854 ----a-w- C:\WINDOWS\Sysnative\Tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002UA
2014-04-18 23:40:50 F2497677AD916E823F2BBBB148F17519 3504 ----a-w- C:\WINDOWS\Sysnative\Tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002Core
2014-04-18 23:40:50 045DA35BB692D7684C653A33B420ABFC 966 ----a-w- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002Core.job
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
======= C:\PROGRA~2 =====
2014-04-23 23:57:04 -------- d-----w- C:\PROGRA~2\MiPony
======= C: =====
====== C:\Users\anacleto silva\AppData\Roaming ======
2014-05-07 05:01:50 -------- d-----w- C:\Users\anacleto silva\AppData\Roaming\rmi
2014-05-07 04:55:40 -------- d-----w- C:\Users\anacleto silva\AppData\Local\TuneUp Software
2014-05-06 23:30:29 -------- d-----w- C:\Users\anacleto silva\AppData\Local\Deployment
2014-05-02 20:18:39 -------- d-sh--w- C:\Users\anacleto silva\AppData\Locallow\EmieUserList
2014-05-02 20:18:39 -------- d-sh--w- C:\Users\anacleto silva\AppData\Locallow\EmieSiteList
2014-04-25 01:21:38 -------- d-sh--w- C:\Users\anacleto silva\AppData\Local\EmieUserList
2014-04-25 01:21:38 -------- d-sh--w- C:\Users\anacleto silva\AppData\Local\EmieSiteList
2014-04-23 23:57:30 -------- d-----w- C:\Users\anacleto silva\AppData\Roaming\Mipony
2014-04-23 23:57:04 -------- d-----w- C:\Users\anacleto silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony
====== C:\Users\anacleto silva ======
2014-05-11 19:52:56 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(3).exe
2014-05-11 19:42:33 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(2).exe
2014-05-11 19:19:53 CA630DBADEB5B6101531F986ADFE46C9 1016261 ----a-w- C:\Users\anacleto silva\Downloads\JRT(2).exe
2014-05-11 19:12:21 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2014-05-11 19:11:02 82A0E48DD3E2F86AD14FCF2CA94A0D14 6780874 ----a-w- C:\Users\anacleto silva\Downloads\ZHPDiag2.exe
2014-05-11 19:01:33 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(1).exe
2014-05-08 00:56:09 9091325C023FBFB90F87E582F9520520 5502440 ----a-w- C:\Users\anacleto silva\Downloads\621-wifiprotector.exe
2014-05-08 00:54:51 7B642B7D572119472E13806116FB7905 639696 ----a-w- C:\Users\anacleto silva\Downloads\wifi-protector-3225185-32-bits.exe
2014-05-07 22:15:59 8DE9F588DFB1641F2C0EA05BD4B60605 218 ----a-w- C:\Users\anacleto silva\.recently-used.xbel
2014-05-07 20:58:48 CA630DBADEB5B6101531F986ADFE46C9 1016261 ----a-w- C:\Users\anacleto silva\Downloads\JRT(1).exe
2014-05-07 18:52:22 302103AF95A8F43AD85F80DAE14BDB9C 17305616 ----a-w- C:\Users\anacleto silva\Downloads\651-mbam-setup-2.0.1.1004.exe
2014-05-07 18:41:23 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner.exe
2014-05-07 18:13:20 -------- d-----w- C:\WINDOWS\serviceprofiles\Localservice\winhttp
2014-05-07 18:03:14 CA630DBADEB5B6101531F986ADFE46C9 1016261 ----a-w- C:\Users\anacleto silva\Downloads\JRT.exe
2014-05-07 05:17:34 160A30D05BBA0E4B4B9F0A6E6CBFC270 8 ----a-w- C:\Users\Public\youwave_size
2014-05-07 05:16:31 -------- d-----w- C:\Users\anacleto silva\youwave
2014-05-07 05:10:12 7EDF5FC6298CFC04582B3A79C7DDB3DC 150246248 ----a-w- C:\Users\anacleto silva\Downloads\YouWave-Android-Home-3-18.exe
2014-05-07 04:53:56 -------- d-sh--w- C:\Users\TODOSO~1\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-05-07 04:53:56 -------- d-sh--w- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-05-06 23:46:29 F310B4DC75C9579FBADEFA79CDA29862 29007536 ----a-w- C:\Users\anacleto silva\Downloads\513-Firefox%20Setup%2029.0.exe
2014-05-02 20:17:35 2B9FE419FCF6ACB88093E0E5C0629324 2449448 ----a-w- C:\Users\anacleto silva\Downloads\DiagnosticoBB(1).exe
2014-04-23 23:57:04 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiPony

====== C: exe-files ==
2014-05-11 19:52:56 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(3).exe
2014-05-11 19:42:33 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(2).exe
2014-05-11 19:12:21 F3A37421DBD1AAA36558C97572C91C5A 147456 ----a-w- C:\Program Files (x86)\ZHPDiag\catchme.exe
2014-05-11 19:12:21 CB2D120A4B72422A8141192831B1F500 80384 ----a-w- C:\Program Files (x86)\ZHPDiag\mbrcheck.exe
2014-05-11 19:12:21 9DAA7218961710008D7385B01BD3F386 89088 ----a-w- C:\Program Files (x86)\ZHPDiag\mbr.exe
2014-05-11 19:12:21 6B8AF3A2A3D9059008B55C444461CA00 61952 ----a-w- C:\Program Files (x86)\ZHPDiag\Lads.exe
2014-05-11 19:12:21 5DAF7081A4BB112FA3F1915819330A3E 61440 ----a-w- C:\Program Files (x86)\ZHPDiag\pv.exe
2014-05-11 19:12:21 53CDBB093B0AEE9FD6CF1CBD25A95077 290304 ----a-w- C:\Program Files (x86)\ZHPDiag\subinacl.exe
2014-05-11 19:12:21 451AE03D3C92777F09840CA56F08AB62 454056 ----a-w- C:\Program Files (x86)\ZHPDiag\setacl32.exe
2014-05-11 19:12:21 3E350EB5DF15C06DEC400A39DD1C6F29 559528 ----a-w- C:\Program Files (x86)\ZHPDiag\setacl64.exe
2014-05-11 19:12:21 2312A38B8B003330DB919FA818C48449 231048 ----a-w- C:\Program Files (x86)\ZHPDiag\sigcheck.exe
2014-05-11 19:12:20 C155A13687144076286989EF078112C2 1917440 ----a-w- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe
2014-05-11 19:12:20 A131FF6AF7E2B2492566FB57683CE6CB 3054592 ----a-w- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPFix.exe
2014-05-11 19:12:19 C155A13687144076286989EF078112C2 1917440 ----a-w- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
2014-05-11 19:12:19 8AE13B97BFCAD6C7D3B8C8A1C298EFB4 694736 ----a-w- C:\Program Files (x86)\ZHPDiag\unins000.exe
2014-05-11 19:12:19 4593394B063EA7447F864444DB48C4AB 7874048 ----a-w- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe
2014-05-11 19:01:33 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(1).exe
2014-05-08 00:56:09 9091325C023FBFB90F87E582F9520520 5502440 ----a-w- C:\Users\anacleto silva\Downloads\621-wifiprotector.exe
2014-05-08 00:55:27 9091325C023FBFB90F87E582F9520520 5502440 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\14671927_stp.EXE
2014-05-08 00:06:17 16E3E0A74EAAEF33B5DE8201B260E9D4 214722064 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\11722418_stp.EXE
2014-05-08 00:05:28 47F45E29690BB8C74C5C294AD21A23CA 114693340 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\11673117_stp.EXE
2014-05-07 20:58:48 CA630DBADEB5B6101531F986ADFE46C9 1016261 ----a-w- C:\Users\anacleto silva\Downloads\JRT(1).exe
2014-05-07 18:52:22 302103AF95A8F43AD85F80DAE14BDB9C 17305616 ----a-w- C:\Users\anacleto silva\Downloads\651-mbam-setup-2.0.1.1004.exe
2014-05-07 18:51:42 302103AF95A8F43AD85F80DAE14BDB9C 17305616 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\487885_stp.EXE
2014-05-07 18:41:23 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner.exe
2014-05-07 18:03:33 2E0323A94915FAAB10A25F3BABF82584 157696 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
2014-05-07 05:02:15 C16645AF6E00A007FFD58B5C2BCCDD4A 10486864 ----a-w- C:\Users\anacleto silva\AppData\Roaming\rmi\bluestacks-0.8.8.8006 Beta.exe
2014-05-06 23:53:31 071C84D6EA2AE14FB634BE1F3DB774C3 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-874636910-2500813232-2263662910-1002\$IXPB0B0.exe
2014-05-06 23:46:29 F310B4DC75C9579FBADEFA79CDA29862 29007536 ----a-w- C:\Users\anacleto silva\Downloads\513-Firefox%20Setup%2029.0.exe
2014-05-06 23:45:35 F310B4DC75C9579FBADEFA79CDA29862 29007536 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\is701137889\364653323_stp.EXE
2014-05-06 23:30:46 B8CCBF22ABB8CB934B85A888D4604EF3 10120 ----a-w- C:\Users\anacleto silva\AppData\Local\Apps\2.0\XM0GZ655.W9B\5C8QG50Q.0V0\inst...app_4fe91ede9f9bdca3_0001.0003_a273437c58519e1b\clickonce_bootstrap.exe
2014-05-06 23:30:46 039DE3F65C7992994F788EAC8E79BF4F 884504 ----a-w- C:\Users\anacleto silva\AppData\Local\Apps\2.0\XM0GZ655.W9B\5C8QG50Q.0V0\inst...app_4fe91ede9f9bdca3_0001.0003_a273437c58519e1b\GoogleUpdateSetup.exe
2014-05-06 23:30:46 039DE3F65C7992994F788EAC8E79BF4F 884504 ----a-w- C:\Users\anacleto silva\AppData\Local\Apps\2.0\XM0GZ655.W9B\5C8QG50Q.0V0\clic...exe_4fe91ede9f9bdca3_0001.0003_none_e0b66a6df1dbb3de\GoogleUpdateSetup.exe
=== C: other files ==
2014-05-08 00:58:17 8E9E3CBA08EC47245B277110835CF305 38216 ----a-w- C:\Windows\System32\drivers\tap0901.sys
2014-05-07 20:26:31 4F3A38FD04AED5FB02C4375984D21FB2 61112 ----a-w- C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys
2014-05-07 18:54:59 6140163BFE9D8F2DFDBA088ED5521C13 119512 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
2014-05-07 18:03:33 DD1E4D974B1672ABD09EFFB225791C4A 1230 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\TDL4.bat
2014-05-07 18:03:33 AD2F52DC72B10AF331692E4A4DD80DFC 18670 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\medfos.bat
2014-05-07 18:03:33 A87CD1BAC46CAC0EEEDB571F07077032 8104 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\modules.bat
2014-05-07 18:03:33 8E6020C14F982CF11B3FE7DBB0CB8EDE 24738 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\searchlnk.bat
2014-05-07 18:03:33 86707BCE5CBB65D9B1C41E249B4423BA 152733 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\firefox.bat
2014-05-07 18:03:33 83F691D8398F0E37E71E9355BF730DB9 719 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\ev_clear.bat
2014-05-07 18:03:33 7D8282EB94B5D639B7378811C1924A8F 9516 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\runvalues.bat
2014-05-07 18:03:33 654E9FE74B930A454EE5BDE165794B65 85 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\delorphans.bat
2014-05-07 18:03:33 5B92615B0CEA08D6BA1217C08CBB1443 15919 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\get.bat
2014-05-07 18:03:33 5B71358F97544D9DE58A9A0893079506 39458 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\prelim.bat
2014-05-07 18:03:33 53B191266B30D57F2F835ABBF54C68C5 13963 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\chrome.bat
2014-05-07 18:03:33 3BC04DEBBE9027060D51901133F60101 154678 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\misc.bat
2014-05-07 18:03:33 38A0BDF322ACCC968B0A824C38D50157 29635 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\ask.bat
2014-05-07 18:03:33 335DFF8F23E5EC02B5426362F0F8509B 31401 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\iexplore.bat
2014-05-07 18:03:33 2F80D807DB405C8F6E0F3706B9FED710 10161 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\JRT.bat
2014-05-07 18:03:33 0D08FBD2E6F6C6AC6A504712C4CE6CE3 1226 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\FWPolicy.bat
2014-05-07 18:03:33 0C4649A62845AB5D5DBCC4998477FF6D 1813 ----a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\delfolders.bat

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-874636910-2500813232-2263662910-1002\Software\Microsoft\Windows\CurrentVersion\Run]
"AccelerometerSysTrayApplet"="C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe"
"uTorrent"="C:\Users\anacleto silva\AppData\Roaming\uTorrent\uTorrent.exe  /MINIMIZED"
"Facebook Update"="C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"
"BtTray"="C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"CLVirtualDrive"="C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe /R"
"RemoteControl10"="C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe"
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AccelerometerSysTrayApplet"="C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe"
"uTorrent"="C:\Users\anacleto silva\AppData\Roaming\uTorrent\uTorrent.exe  /MINIMIZED"
"Facebook Update"="C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "
"SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe"

==== Startup Folders ======================

2013-03-23 03:11:17 1972 ----a-w- C:\Users\anacleto silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3050 J610 series.lnk

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a-------- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [27/10/2013 11:08]
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002Core.job --a-------- C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe [18/04/2014 20:40]
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002UA.job --a-------- C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe [18/04/2014 20:40]
C:\WINDOWS\tasks\HPCeeScheduleForanacleto silva.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [13/09/2010 22:15]
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job --a-------- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [28/08/2012 20:33]

==== Other Scheduled Tasks ======================

"C:\WINDOWS\SysNative\tasks\0" [c:\program files\internet explorer\iexplore.exe]
"C:\WINDOWS\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\WINDOWS\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]
"C:\WINDOWS\SysNative\tasks\CLMLSvc_P2G8" [C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe]
"C:\WINDOWS\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002Core" [C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\WINDOWS\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002UA" [C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe]
"C:\WINDOWS\SysNative\tasks\HPCeeScheduleForanacleto silva" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe]
"C:\WINDOWS\SysNative\tasks\MirageAgent" [C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe]
"C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{31D54692-D9EB-40B5-8642-4BD457C0AA4E}" [C:\Windows\system32\msfeedssync.exe]
"C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{DA76E1D0-272F-4356-8E88-7A68AFCE4A71}" [C:\Windows\system32\msfeedssync.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon" [C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [27/10/2013 11:14]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\anacleto silva\AppData\Roaming\Mozilla\Firefox\Profiles\6p95fymi.default
FF0D6F82A0EC13952E83B9439100E45D - C:\Users\anacleto silva\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
4BF70B35B943BD73BD6E13EB7C1BA4B3 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll - Shockwave Flash


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[27/10/2013 11:14]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"

==== shortcuts on Users Desktops ======================

C:\Users\anacleto silva\Desktop\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe
C:\Users\anacleto silva\Desktop\ZHPDiag.lnk - C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
C:\Users\anacleto silva\Desktop\ZHPFix.lnk - C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe
C:\Users\anacleto silva\Desktop\µTorrent.lnk -  

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\Users\Public\Desktop\CyberLink YouCam.lnk - C:\Program Files (x86)\CyberLink\YouCam\Youcam_webcam_camera_video.exe
C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==== shortcuts in Users Start Menu ======================

C:\Users\anacleto silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3050 J610 series.lnk - C:\Windows\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 3050 J610 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=BR1BOGJ19W05HX;CONNECTION=USB;MONITOR=1;

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk - C:\Program Files (x86)\CCleaner\uninst.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiPony\MiPony.lnk - C:\Program Files (x86)\MiPony\MiPony.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPDiag.lnk - C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPFix.lnk - C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe

==== shortcuts in Quick Launch ======================

C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MiPony.lnk - C:\Program Files (x86)\MiPony\MiPony.exe
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -  
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -  
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\HP Utility Center.lnk - C:\Program Files (x86)\Hewlett-Packard\HP Utility Center\HPPU.exe
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Wordpad.lnk - C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

==== shortcuts After Repair ======================

C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\anacleto silva\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1B7E96AA-3D5A-4A6E-A885-7578C09DB45C} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{23FB86CB-4E21-40AF-A244-0603F818A43D} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{80E5BE6F-9175-497A-AB91-D9575B069C99} deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\anacleto silva\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\anacleto silva\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\anacleto silva\AppData\Local\Mozilla\Firefox\Profiles\6p95fymi.default\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=129 folders=59 7864388 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrador\AppData\Local\Temp emptied successfully
C:\Users\anacleto silva\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\ANACLE~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 11/05/2014 at 18:06:45,06 ======================

Você não seguiu o tutorial.

Desative temporariamente seu antivírus para evitar conflitos.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek.

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

olha se eu nao segui eu nao sei só sei que o aplicativo saiu e nao esta mais noo sistema foi removido

Neste caso é só você desativar temporariamente o antivirus e acessar o endereço abaixo e baixar o Zoek novamente:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Depois disto é só executar ele como lhe passei na postagem acima.

meu windows ta bloqueando o dounload

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Single Language x64
Ran by anacleto silva on 14/05/2014 at 21:44:35,46
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\anacleto silva\AppData\Roaming\mozilla\firefox\profiles\6p95fymi.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14/05/2014 at 21:52:51,59
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Como está o PC atualmente? O Hao 123 ainda está aparecendo?

C:\zoek-results2014-03-08-175051.log 18260 bytes
C:\zoek-results2014-03-08-185015.log 463 bytes
C:\zoek-results2014-05-11-210645.log 37578 bytes

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
2014-05-07 18:12:12 36337E5180839191D130DD4198678AEF 632416307 ----a-w- C:\WINDOWS\MEMORY.DMP
2014-04-16 03:27:59 81394C91B7B5A7C799E249AE82491F13 2373784 ----a-w- C:\WINDOWS\explorer.exe
====== C:\Users\ANACLE~1\AppData\Local\Temp ====
2014-05-15 00:25:37 2E0323A94915FAAB10A25F3BABF82584 157696 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
====== Java Cache =====
====== C:\WINDOWS\SysWOW64 =====
2014-05-14 22:40:54 BA4FA107EF9A728C58A81B2EFCD6FE2B 26784 ----a-w- C:\WINDOWS\SysWOW64\mrt100.dll
2014-05-14 22:40:54 6923D6FAB7CBA8D82BD792182B4F3DE4 80032 ----a-w- C:\WINDOWS\SysWOW64\mrt_map.dll
2014-05-14 22:11:31 EB5347F6149D3FF25F4D609A21A3BD67 17382912 ----a-w- C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-14 22:11:30 FBCF3F01177953EBF1E735643621CCF5 69632 ----a-w- C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-03 00:28:24 B5B3334F177CED627C2D7FE38235B6B1 2724864 ----a-w- C:\WINDOWS\SysWOW64\mshtml.tlb
====== C:\WINDOWS\SysWOW64\drivers =====
====== C:\WINDOWS\Sysnative =====
2014-05-14 22:40:54 D178F55D53B9A10FFBDC134C95517846 28320 ----a-w- C:\WINDOWS\Sysnative\mrt100.dll
2014-05-14 22:40:54 A750229C96A406EE123F43916053F142 86688 ----a-w- C:\WINDOWS\Sysnative\mrt_map.dll
2014-05-14 22:11:33 A920E1336F9FEA95477763E2CC15891B 84992 ----a-w- C:\WINDOWS\Sysnative\mshtmled.dll
2014-05-14 22:11:32 797E2E5C309AFF76990D5B7AF457EACA 23544320 ----a-w- C:\WINDOWS\Sysnative\mshtml.dll
2014-05-03 00:28:21 94C59DD02BC7EA0E421055B9946CA861 2724864 ----a-w- C:\WINDOWS\Sysnative\mshtml.tlb
====== C:\WINDOWS\Sysnative\drivers =====
2014-05-08 00:58:17 8E9E3CBA08EC47245B277110835CF305 38216 ----a-w- C:\WINDOWS\Sysnative\drivers\tap0901.sys
2014-05-07 20:26:31 4F3A38FD04AED5FB02C4375984D21FB2 61112 ----a-w- C:\WINDOWS\Sysnative\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}Gw64.sys
2014-05-07 18:54:59 6140163BFE9D8F2DFDBA088ED5521C13 119512 ----a-w- C:\WINDOWS\Sysnative\drivers\MBAMSwissArmy.sys
2014-04-16 04:21:33 3595FBDF25F8BA6256072D103937D7D6 311640 -c--a-w- C:\WINDOWS\Sysnative\drivers\volsnap.sys
2014-04-16 04:20:24 F21B77B4D74092A543807D3CEB711A88 1118552 ----a-w- C:\WINDOWS\Sysnative\drivers\ndis.sys
2014-04-16 04:20:18 9539F7917B4B6D92C90F0FAA6B86C605 539992 -c--a-w- C:\WINDOWS\Sysnative\drivers\acpi.sys
2014-04-16 04:19:59 B2BD017231836DA9F63F41E3A075D73E 590168 ----a-w- C:\WINDOWS\Sysnative\drivers\fvevol.sys
2014-04-16 04:19:43 A26AEC49F318FEE141DDDB2C5F99B3E6 249688 ----a-w- C:\WINDOWS\Sysnative\drivers\rdyboost.sys
2014-04-16 04:19:38 233A4C961703D6B3EBA4EC1A3E85AACE 298496 ----a-w- C:\WINDOWS\Sysnative\drivers\ks.sys
2014-04-16 04:19:31 275AFE3FA35E8D78BE97695DF49817C6 280920 -c--a-w- C:\WINDOWS\Sysnative\drivers\pci.sys
2014-04-16 04:19:27 87765EF43C33BE342F4ACB0E3FBF89A6 384856 -c--a-w- C:\WINDOWS\Sysnative\drivers\spaceport.sys
2014-04-16 04:19:24 8685379B82AC81187813225905531D1E 272896 -c--a-w- C:\WINDOWS\Sysnative\drivers\portcls.sys
2014-04-16 04:19:21 EA23453240137F6773174E0D93F61A69 148824 -c--a-w- C:\WINDOWS\Sysnative\drivers\USBSTOR.SYS
2014-04-16 04:19:20 46D1DF775FFF14585218BBE16E5B2C9A 360792 ----a-w- C:\WINDOWS\Sysnative\drivers\fltMgr.sys
2014-04-16 04:19:00 8F39AFEB255487932DFF14D9E0E0FC24 372568 ----a-w- C:\WINDOWS\Sysnative\drivers\storport.sys
2014-04-16 04:18:57 52E483A3701A5A61A75A06993720347D 551256 -c--a-w- C:\WINDOWS\Sysnative\drivers\vhdmp.sys
2014-04-16 04:18:36 FDEC5799BA499D18AFA3A540538866E7 236888 -c--a-w- C:\WINDOWS\Sysnative\drivers\sdbus.sys
2014-04-16 04:18:31 48430B0313FC1CFE3D2400553F1A93CD 325464 -c--a-w- C:\WINDOWS\Sysnative\drivers\USBXHCI.SYS
2014-04-16 04:18:29 DDEE191AB32DFC22C6465002ECDF5EE4 124416 ----a-w- C:\WINDOWS\Sysnative\drivers\luafv.sys
2014-04-16 04:18:28 0ECEE590F2E2EF969FB74A6FC583A1E6 663040 ----a-w- C:\WINDOWS\Sysnative\drivers\PEAuth.sys
2014-04-16 04:18:25 0527EF6E23B9FAB37DDCBC479C6CFA28 167424 -c--a-w- C:\WINDOWS\Sysnative\drivers\rfcomm.sys
2014-04-16 04:18:24 02836172141D3AFA35B07679E253E503 151384 -c--a-w- C:\WINDOWS\Sysnative\drivers\dumpsd.sys
2014-04-16 04:18:16 EF3AE7773394DF49CE74AF78A1C8D23D 146776 ----a-w- C:\WINDOWS\Sysnative\drivers\msgpioclx.sys
2014-04-16 04:18:14 BCFD8B149B3ADF92D0DB1E909CAF0265 79192 ----a-w- C:\WINDOWS\Sysnative\drivers\fileinfo.sys
2014-04-16 04:18:13 E515A287C8FAE901EB8FB42F168E14F2 924504 ----a-w- C:\WINDOWS\Sysnative\drivers\refs.sys
2014-04-16 04:18:13 AB8CD3914AD779C15B27DDD9F53F7434 1200640 -c--a-w- C:\WINDOWS\Sysnative\drivers\bthport.sys
2014-04-16 04:18:12 38A82F4EE8C416A6744B6D30381ED768 33280 -c--a-w- C:\WINDOWS\Sysnative\drivers\BasicRender.sys
2014-04-16 04:18:10 D30C67473A2E229662D21F27EAA9AAA5 226304 -c--a-w- C:\WINDOWS\Sysnative\drivers\BthLEEnum.sys
2014-04-16 04:18:10 0B1E929D11A8E358106955603FAC65E8 79192 -c--a-w- C:\WINDOWS\Sysnative\drivers\sdstor.sys
2014-04-16 04:18:00 61A1C2641321A6B89A2B41C5D481EF48 71888 ----a-w- C:\WINDOWS\Sysnative\drivers\dumpfve.sys
2014-04-16 04:17:56 C1F564F324685C088ECAB1933576CF91 54816 ----a-w- C:\WINDOWS\Sysnative\drivers\wpcfltr.sys
2014-04-16 04:17:53 B034A41891A36457B994307DFA772293 189784 -c--a-w- C:\WINDOWS\Sysnative\drivers\UCX01000.SYS
2014-04-16 04:17:49 9DDCA7F18983C5410DEFF79F819DF93C 994136 ----a-w- C:\WINDOWS\Sysnative\drivers\http.sys
2014-04-16 04:17:30 9CC0003FB8ED3763B977B43F1012FF63 54272 ----a-w- C:\WINDOWS\Sysnative\drivers\watchdog.sys
2014-04-16 04:17:30 23E75BED9076F856B36F5F934BBD5795 81920 -c--a-w- C:\WINDOWS\Sysnative\drivers\BTHUSB.SYS
2014-04-16 03:28:20 1C80517BE6836A812F6A9B99B8321351 2013016 ----a-w- C:\WINDOWS\Sysnative\drivers\ntfs.sys
2014-04-16 03:28:20 179A41249055D5F039F1B6703F3B6D2B 376152 ----a-w- C:\WINDOWS\Sysnative\drivers\clfs.sys
2014-04-16 03:28:02 FEEFE783D87C9063CDAC6DBDCF95F533 2519384 ----a-w- C:\WINDOWS\Sysnative\drivers\tcpip.sys
2014-04-16 03:27:59 C7D252742946DD395670649742FBD73D 1557848 ----a-w- C:\WINDOWS\Sysnative\drivers\dxgkrnl.sys
2014-04-16 03:27:50 E62EAEF0BAC9DD61BF22D4A7F2F18571 679424 ----a-w- C:\WINDOWS\Sysnative\drivers\srv2.sys
2014-04-16 03:27:47 C997E6A37BA8915224B3FB5024A34F69 402944 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb.sys
2014-04-16 03:27:46 7FC5667DF73D4B04AA457CC3A4180E09 157016 ----a-w- C:\WINDOWS\Sysnative\drivers\wof.sys
2014-04-16 03:27:46 4030CB06B8D963A45CED9E60C9F2A11E 379224 ----a-w- C:\WINDOWS\Sysnative\drivers\dxgmms1.sys
2014-04-16 03:27:44 4627C1FBF2802425A408A2D2AF28CF85 565536 ----a-w- C:\WINDOWS\Sysnative\drivers\cng.sys
2014-04-16 03:27:42 466BDC0006103F2547D308DD3CD64398 245760 ----a-w- C:\WINDOWS\Sysnative\drivers\srvnet.sys
2014-04-16 03:27:40 AC408FA243471C25CDE435C3B83536A9 337752 ----a-w- C:\WINDOWS\Sysnative\drivers\Classpnp.sys
2014-04-16 03:27:40 647C7652FA19F98CADF2BFDA2164BFEC 443392 ----a-w- C:\WINDOWS\Sysnative\drivers\nwifi.sys
2014-04-16 03:27:38 CFC52C49BEFE4D70D87FFA900EAB9777 467800 -c--a-w- C:\WINDOWS\Sysnative\drivers\USBHUB3.SYS
2014-04-16 03:27:36 F88CC88F4A6D8476F1664E805CA18CC2 180056 ----a-w- C:\WINDOWS\Sysnative\drivers\ksecpkg.sys
2014-04-16 03:27:35 C48CDFD48A43E4AEC8170E1E50A3FACD 428888 ----a-w- C:\WINDOWS\Sysnative\drivers\FWPKCLNT.SYS
2014-04-16 03:27:35 A03F362C5557E238CBFA914689C77248 134144 ----a-w- C:\WINDOWS\Sysnative\drivers\dfsc.sys
2014-04-16 03:27:34 BFBE1C5F57FE7A885673A1962D5532B7 136024 ----a-w- C:\WINDOWS\Sysnative\drivers\wfplwfs.sys
2014-04-16 03:27:34 8DB8EAB9D0C6A5DF0BDCADEA239220B4 33280 -c--a-w- C:\WINDOWS\Sysnative\drivers\hidusb.sys
2014-04-16 03:27:34 41CF802064F72E55F50CA0A221FD36D4 49152 ----a-w- C:\WINDOWS\Sysnative\drivers\tcpipreg.sys
2014-04-16 03:27:33 ABB7341766902F5AAB45E15F34D19E15 111616 -c--a-w- C:\WINDOWS\Sysnative\drivers\hidclass.sys
2014-04-16 03:27:32 1D55DADC22D21883A2F80297F5A5AE48 140288 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxdav.sys
2014-04-16 03:27:31 FD9C9E9E3F0ED51502C7E8C066BE26B9 79360 ----a-w- C:\WINDOWS\Sysnative\drivers\IPMIDrv.sys
2014-04-16 03:27:31 3E28B99198B514DFEB152EACF913025E 283648 ----a-w- C:\WINDOWS\Sysnative\drivers\mrxsmb10.sys
====== C:\WINDOWS\Tasks ======
2014-04-23 18:25:50 F072AB51ECC9A9761E290F585292EC39 3220 ----a-w- C:\WINDOWS\Sysnative\Tasks\HPCeeScheduleForanacleto silva
2014-04-23 18:25:50 204075FC37A9E6755A151014FC880D30 392 ----a-w- C:\WINDOWS\Tasks\HPCeeScheduleForanacleto silva.job
2014-04-18 23:40:51 82C5FCECA909838E0207FB4B5C7BA063 988 ----a-w- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002UA.job
2014-04-18 23:40:51 696C5A6301C3C80C432CDDE78779965F 3854 ----a-w- C:\WINDOWS\Sysnative\Tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002UA
2014-04-18 23:40:50 F2497677AD916E823F2BBBB148F17519 3504 ----a-w- C:\WINDOWS\Sysnative\Tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002Core
2014-04-18 23:40:50 9C44D7340023BC5A65B3B5C0FF14AA06 966 ----a-w- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002Core.job
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
======= C:\PROGRA~2 =====
2014-04-23 23:57:04 -------- d-----w- C:\PROGRA~2\MiPony
======= C: =====
====== C:\Users\anacleto silva\AppData\Roaming ======
2014-05-11 20:58:03 -------- d-----w- C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp
2014-05-11 20:58:03 -------- d-----w- C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp
2014-05-11 20:58:03 -------- d-----w- C:\Users\USURIO~1\AppData\Local\Temp
2014-05-11 20:58:03 -------- d-----w- C:\Users\Default\AppData\Local\Temp
2014-05-11 20:58:03 -------- d-----w- C:\Users\Default User\AppData\Local\Temp
2014-05-11 20:58:02 -------- dc----w- C:\Users\anacleto silva\AppData\Local\Temp
2014-05-11 20:58:02 -------- d-----w- C:\Users\Administrador\AppData\Local\Temp
2014-05-07 05:01:50 -------- d-----w- C:\Users\anacleto silva\AppData\Roaming\rmi
2014-05-07 04:55:40 -------- d-----w- C:\Users\anacleto silva\AppData\Local\TuneUp Software
2014-05-06 23:30:29 -------- d-----w- C:\Users\anacleto silva\AppData\Local\Deployment
2014-05-02 20:18:39 -------- d-sh--w- C:\Users\anacleto silva\AppData\Locallow\EmieUserList
2014-05-02 20:18:39 -------- d-sh--w- C:\Users\anacleto silva\AppData\Locallow\EmieSiteList
2014-04-25 01:21:38 -------- d-sh--w- C:\Users\anacleto silva\AppData\Local\EmieUserList
2014-04-25 01:21:38 -------- d-sh--w- C:\Users\anacleto silva\AppData\Local\EmieSiteList
2014-04-23 23:57:30 -------- d-----w- C:\Users\anacleto silva\AppData\Roaming\Mipony
2014-04-23 23:57:04 -------- d-----w- C:\Users\anacleto silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MiPony
====== C:\Users\anacleto silva ======
2014-05-15 00:43:36 CA630DBADEB5B6101531F986ADFE46C9 1016261 -c--a-w- C:\Users\anacleto silva\Downloads\JRT(4).exe
2014-05-15 00:25:22 CA630DBADEB5B6101531F986ADFE46C9 1016261 -c--a-w- C:\Users\anacleto silva\Downloads\JRT(3).exe
2014-05-11 19:52:56 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(3).exe
2014-05-11 19:42:33 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(2).exe
2014-05-11 19:19:53 CA630DBADEB5B6101531F986ADFE46C9 1016261 ----a-w- C:\Users\anacleto silva\Downloads\JRT(2).exe
2014-05-11 19:12:21 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2014-05-11 19:11:02 82A0E48DD3E2F86AD14FCF2CA94A0D14 6780874 ----a-w- C:\Users\anacleto silva\Downloads\ZHPDiag2.exe
2014-05-11 19:01:33 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(1).exe
2014-05-08 00:56:09 9091325C023FBFB90F87E582F9520520 5502440 ----a-w- C:\Users\anacleto silva\Downloads\621-wifiprotector.exe
2014-05-08 00:54:51 7B642B7D572119472E13806116FB7905 639696 ----a-w- C:\Users\anacleto silva\Downloads\wifi-protector-3225185-32-bits.exe
2014-05-07 22:15:59 8DE9F588DFB1641F2C0EA05BD4B60605 218 ----a-w- C:\Users\anacleto silva\.recently-used.xbel
2014-05-07 20:58:48 CA630DBADEB5B6101531F986ADFE46C9 1016261 ----a-w- C:\Users\anacleto silva\Downloads\JRT(1).exe
2014-05-07 18:52:22 302103AF95A8F43AD85F80DAE14BDB9C 17305616 ----a-w- C:\Users\anacleto silva\Downloads\651-mbam-setup-2.0.1.1004.exe
2014-05-07 18:41:23 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner.exe
2014-05-07 18:13:20 -------- d-----w- C:\WINDOWS\serviceprofiles\Localservice\winhttp
2014-05-07 18:03:14 CA630DBADEB5B6101531F986ADFE46C9 1016261 ----a-w- C:\Users\anacleto silva\Downloads\JRT.exe
2014-05-07 05:17:34 160A30D05BBA0E4B4B9F0A6E6CBFC270 8 ----a-w- C:\Users\Public\youwave_size
2014-05-07 05:16:31 -------- d-----w- C:\Users\anacleto silva\youwave
2014-05-07 05:10:12 7EDF5FC6298CFC04582B3A79C7DDB3DC 150246248 ----a-w- C:\Users\anacleto silva\Downloads\YouWave-Android-Home-3-18.exe
2014-05-07 04:53:56 -------- d-sh--w- C:\Users\TODOSO~1\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-05-07 04:53:56 -------- d-sh--w- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-05-06 23:46:29 F310B4DC75C9579FBADEFA79CDA29862 29007536 ----a-w- C:\Users\anacleto silva\Downloads\513-Firefox%20Setup%2029.0.exe
2014-05-02 20:17:35 2B9FE419FCF6ACB88093E0E5C0629324 2449448 ----a-w- C:\Users\anacleto silva\Downloads\DiagnosticoBB(1).exe
2014-04-23 23:57:04 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiPony

====== C: exe-files ==
2014-05-15 00:43:36 CA630DBADEB5B6101531F986ADFE46C9 1016261 -c--a-w- C:\Users\anacleto silva\Downloads\JRT(4).exe
2014-05-15 00:25:37 2E0323A94915FAAB10A25F3BABF82584 157696 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
2014-05-15 00:25:22 CA630DBADEB5B6101531F986ADFE46C9 1016261 -c--a-w- C:\Users\anacleto silva\Downloads\JRT(3).exe
2014-05-11 19:52:56 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(3).exe
2014-05-11 19:42:33 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(2).exe
2014-05-11 19:19:53 CA630DBADEB5B6101531F986ADFE46C9 1016261 ----a-w- C:\Users\anacleto silva\Downloads\JRT(2).exe
2014-05-11 19:12:21 F3A37421DBD1AAA36558C97572C91C5A 147456 ----a-w- C:\Program Files (x86)\ZHPDiag\catchme.exe
2014-05-11 19:12:21 CB2D120A4B72422A8141192831B1F500 80384 ----a-w- C:\Program Files (x86)\ZHPDiag\mbrcheck.exe
2014-05-11 19:12:21 9DAA7218961710008D7385B01BD3F386 89088 ----a-w- C:\Program Files (x86)\ZHPDiag\mbr.exe
2014-05-11 19:12:21 6B8AF3A2A3D9059008B55C444461CA00 61952 ----a-w- C:\Program Files (x86)\ZHPDiag\Lads.exe
2014-05-11 19:12:21 5DAF7081A4BB112FA3F1915819330A3E 61440 ----a-w- C:\Program Files (x86)\ZHPDiag\pv.exe
2014-05-11 19:12:21 53CDBB093B0AEE9FD6CF1CBD25A95077 290304 ----a-w- C:\Program Files (x86)\ZHPDiag\subinacl.exe
2014-05-11 19:12:21 451AE03D3C92777F09840CA56F08AB62 454056 ----a-w- C:\Program Files (x86)\ZHPDiag\setacl32.exe
2014-05-11 19:12:21 3E350EB5DF15C06DEC400A39DD1C6F29 559528 ----a-w- C:\Program Files (x86)\ZHPDiag\setacl64.exe
2014-05-11 19:12:21 2312A38B8B003330DB919FA818C48449 231048 ----a-w- C:\Program Files (x86)\ZHPDiag\sigcheck.exe
2014-05-11 19:12:20 C155A13687144076286989EF078112C2 1917440 ----a-w- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe
2014-05-11 19:12:20 A131FF6AF7E2B2492566FB57683CE6CB 3054592 ----a-w- C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPFix.exe
2014-05-11 19:12:19 C155A13687144076286989EF078112C2 1917440 ----a-w- C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
2014-05-11 19:12:19 8AE13B97BFCAD6C7D3B8C8A1C298EFB4 694736 ----a-w- C:\Program Files (x86)\ZHPDiag\unins000.exe
2014-05-11 19:12:19 4593394B063EA7447F864444DB48C4AB 7874048 ----a-w- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe
2014-05-11 19:11:02 82A0E48DD3E2F86AD14FCF2CA94A0D14 6780874 ----a-w- C:\Users\anacleto silva\Downloads\ZHPDiag2.exe
2014-05-11 19:01:33 A53555B250CBEDCA6544D13648F83FFE 1316991 ----a-w- C:\Users\anacleto silva\Downloads\AdwCleaner(1).exe
=== C: other files ==
2014-05-15 00:25:36 DD1E4D974B1672ABD09EFFB225791C4A 1230 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\TDL4.bat
2014-05-15 00:25:36 AD2F52DC72B10AF331692E4A4DD80DFC 18670 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\medfos.bat
2014-05-15 00:25:36 A87CD1BAC46CAC0EEEDB571F07077032 8104 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\modules.bat
2014-05-15 00:25:36 8E6020C14F982CF11B3FE7DBB0CB8EDE 24738 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\searchlnk.bat
2014-05-15 00:25:36 86707BCE5CBB65D9B1C41E249B4423BA 152733 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\firefox.bat
2014-05-15 00:25:36 83F691D8398F0E37E71E9355BF730DB9 719 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\ev_clear.bat
2014-05-15 00:25:36 7D8282EB94B5D639B7378811C1924A8F 9516 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\runvalues.bat
2014-05-15 00:25:36 654E9FE74B930A454EE5BDE165794B65 85 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\delorphans.bat
2014-05-15 00:25:36 5B92615B0CEA08D6BA1217C08CBB1443 15919 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\get.bat
2014-05-15 00:25:36 5B71358F97544D9DE58A9A0893079506 39458 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\prelim.bat
2014-05-15 00:25:36 53B191266B30D57F2F835ABBF54C68C5 13963 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\chrome.bat
2014-05-15 00:25:36 3BC04DEBBE9027060D51901133F60101 154678 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\misc.bat
2014-05-15 00:25:36 38A0BDF322ACCC968B0A824C38D50157 29635 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\ask.bat
2014-05-15 00:25:36 335DFF8F23E5EC02B5426362F0F8509B 31401 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\iexplore.bat
2014-05-15 00:25:36 2F80D807DB405C8F6E0F3706B9FED710 10161 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\JRT.bat
2014-05-15 00:25:36 0D08FBD2E6F6C6AC6A504712C4CE6CE3 1226 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\FWPolicy.bat
2014-05-15 00:25:36 0C4649A62845AB5D5DBCC4998477FF6D 1813 -c--a-w- C:\Users\anacleto silva\AppData\Local\Temp\jrt\delfolders.bat
2014-05-12 17:52:12 04778011255A88790CE34645B19F404C 1445833 -c--a-w- C:\Users\anacleto silva\Downloads\afinadordeguitarra.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-874636910-2500813232-2263662910-1002\Software\Microsoft\Windows\CurrentVersion\Run]
"AccelerometerSysTrayApplet"="C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe"
"uTorrent"="C:\Users\anacleto silva\AppData\Roaming\uTorrent\uTorrent.exe  /MINIMIZED"
"Facebook Update"="C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"
"BtTray"="C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"CLVirtualDrive"="C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe /R"
"RemoteControl10"="C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe"
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AccelerometerSysTrayApplet"="C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe"
"uTorrent"="C:\Users\anacleto silva\AppData\Roaming\uTorrent\uTorrent.exe  /MINIMIZED"
"Facebook Update"="C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "
"SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe"

==== Startup Folders ======================

2013-03-23 03:11:17 1972 ----a-w- C:\Users\anacleto silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3050 J610 series.lnk

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a-------- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [27/10/2013 11:08]
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002Core.job --a-------- C:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe [18/04/2014 20:40]
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-874636910-2500813232-2263662910-1002UA.job --a-------- C:IC:\Users\anacleto silva\AppData\Local\Facebook\Update\FacebookUpdate.exe []
C:\WINDOWS\tasks\HPCeeScheduleForanacleto silva.job --a-------- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [13/09/2010 22:15]
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job --a-------- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [28/08/2012 20:33]

==== Other Scheduled Tasks ======================

nao ja ta mehor desde a ultima vez nao aparece mais o hao123 obrigado agora vc pode me ajudar com o  outro problema  do norton? obrigado

Fico feliz que o problema tenha sido resolvido.

Só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

Foi um prazer ajudar. Conte sempre conosco!

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.