AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

por rodrigobnu Sáb 17 maio 2014, 18:25

Amigos é o seguinte , comprei um not tem uns 2 meses, ele veio com o WINDOWS 8 , mas a uma semana começei a ter o seguinte problema: Os navegadores dele google chorme, firefox , internet explorer , não conseguem carregar algumas paginas como: uol,terra,submarino, vou dar um exemplo claro e facil pois sou leigo no assunto.

entro no CHAT UOL coloco meu nome o digito de segurança e aperto para entrar na sala...ele entra porem não aparece a lista de pessoas na sala e nem meu nick..outro exemplo vou no site do submarino e clico na opção para fazer o cartão submarino mas ele não abre a pagina do cartão, qualquer dos 3 navegadores fazem isso..já fiz de tudo e nada adiantou, ontem atualizei para o windows 8.1..mas tudo ficou na mesma...

em fim se alguem conseguir me ajudar ficarei agradecido pois não sei mais pra onde correr!

Abraço.

por **Power Max** Sáb 17 maio 2014, 18:36

AJUDA PAGINAS NÃO CARREGAM POR COMPLETO 648673379

Olá Rodrigo.

AJUDA PAGINAS NÃO CARREGAM POR COMPLETO 772309

Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

Para instalá-lo e executá-lo corretamente siga as dicas deste artigo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a sua verificação, copie todo o conteúdo do seu relatório ZHPDiag.txt e poste em sua próxima resposta.

por rodrigobnu Sáb 17 maio 2014, 19:13

amigo meu anti-vurus bloqueia a instalação dele...

por **Power Max** Sáb 17 maio 2014, 19:15

Desative temporariamente o antivirus.

por rodrigobnu Sáb 17 maio 2014, 19:20

ok...consegui instalar..tem tipo de uma siringa na area de trabalho..abri ela..e agora?

por **Power Max** Sáb 17 maio 2014, 19:21

Neste tutorial que te passei mostra o passo a passo de como usá-lo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

por rodrigobnu Sáb 17 maio 2014, 19:23

certo..o relatorio que ele deixou foi o seguinte:

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by Thaisa - Design at 17/05/2014 19:19:12
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Reciclagem vazia (Cancelado pelo utilizador)

========== Chaves do Registo ==========
CTFDisabledCTFMON desativado padrão

========== Recapitulativo ==========
1 : Chaves do Registo

End of clean in 19mn 13s

========== Caminho do ficheiro do relatório ==========
C:\Users\Thaisa - Design\AppData\Roaming\ZHP\ZHPFix[R1].txt - 17/05/2014 19:19:13 [524]

por **Power Max** Sáb 17 maio 2014, 19:24

Você não fez como está no tutorial, você usou o ZHPfix e o que precisamos é que você use o ZHPDiag como é mostrado no tutorial.

por rodrigobnu Sáb 17 maio 2014, 19:31

certo...agora fiz como o tutorial...tenho que colar aqui o resultado completo?

por **Power Max** Sáb 17 maio 2014, 19:41

Sim, cole ele aqui por gentileza para podermos analisar.

por rodrigobnu Sáb 17 maio 2014, 23:38

vou colar em partes

~ Relatório do ZHPDiag v2014.5.17.66 - Nicolas Coolman (17/05/2014)
~ Iniciado por Thaisa - Design (17/05/2014 19:31:04)
~ Endereço do Website : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Blog de análise de software : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~ Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Deactivate by program

---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.17105
MFIE: Mozilla Firefox 29.0.1
GCIE: Google Chrome v34.0.1847.137 (Defaut)
OPIE: Opera vStable 21.0.1432.67

---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 8.1 Single Language, 64-bit (Build 9600)
Windows Server License Manager Script : OK

---\\ Softwares de proteçao do sistema
AVG 2014 v14.0.3950
McAfee Security Scan Plus v3.8.141.11
Windows Defender W8

---\\ Softwares d'optimização do sistema

---\\ Softwares de partilha do PeerToPeer (P2P)

---\\ Monitoramento dos softwares
Adobe Flash Player 13 Plugin
Adobe Reader X
Java 7 Update 55

---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6029 MB (69% free)
System Restore: Activé (Enable)
System drive C: has 143 GB (76%) free of 186 GB

---\\ Modo de conexão ao sistema
~ Computer Name: THAISA
~ User Name: Thaisa - Design
~ All Users Names: Thaisa - Design, HomeGroupUser$, Convidado, Administrador,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator

---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\Thaisa - Design\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Thaisa - Design\AppData\Roaming\
~ %Desktop% : C:\Users\Thaisa - Design\Desktop\
~ %Favorites% : C:\Users\Thaisa - Design\Favorites\
~ %LocalAppData% : C:\Users\Thaisa - Design\AppData\Local\
~ %StartMenu% : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 143 Go of 186 Go)
D: Hard drive, Flash drive, Thumb drive (Free 258 Go of 258 Go)
E: CD-ROM drive (Not Inserted)

---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 45 Legitimates Filtered in 00mn 00s

---\\ Pesquisa particular de ficheiros genéricos
[MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - Windows Explorer.) (.16/05/2014 - 18:46:17.) -- C:\Windows\Explorer.exe [2373784]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.22/08/2013 - 06:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.65C36A29A131A3A5D64B29FAC4EF6DD6] - (.Microsoft Corporation - Internet Extensions para Win32.) (.18/03/2014 - 07:18:18.) -- C:\Windows\System32\wininet.dll [2262016]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.18/03/2014 - 07:18:16.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.18/03/2014 - 07:18:16.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.7C7BE474915166B61B84C025F1F10157] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.16/05/2014 - 18:42:09.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 09:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 08:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 05:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.16/05/2014 - 18:46:17.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.498288DD5CA42C2D36D125893E968C53] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.16/05/2014 - 18:42:09.) -- C:\Windows\system32\Drivers\HDAudBus.sys [77312]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Driver de porta i8042.) (.22/08/2013 - 08:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.18/03/2014 - 07:18:19.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.0696F66E4D423793951A60562F794D14] - (.Microsoft Corporation - Minirdr SMB do Windows NT.) (.16/05/2014 - 18:42:09.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 08:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.16/05/2014 - 18:46:17.) -- C:\Windows\system32\Drivers\ntfs.sys [2013016]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Driver de porta paralela.) (.22/08/2013 - 08:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 08:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecionador do Dispositivo RDP da Microsoft.) (.18/03/2014 - 06:44:42.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.4BB9BC49DEE1A319EC58274A7BBED663] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.16/05/2014 - 18:42:09.) -- C:\Windows\system32\Drivers\volsnap.sys [310616]
~ Generic Processes: Scanned in 00mn 00s

---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 2/183
~ Mes musiques (My Musics) : 1/91
~ Mes Favoris (My Favorites) : 1/7
~ Mes Documents (My Documents) : 1/127
~ Mon Bureau (My Desktop) : 2/86
~ Menu demarrer (Programs) : 1/53
~ Hidden Files: Scanned in 00mn 00s

---\\ Processos lançados
[MD5.A74558989E0624989C5B21E442788ED3] - (.Activeris - Activeris AntiMalware.) -- C:\Program Files (x86)\Activeris AntiMalware\ActiverisAntiMalware.exe [6292472] [PID.3888] =>PUP.Activeris
[MD5.C570FD825751F7805CE226F68C4605DE] - (.ASUS - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [54488] [PID.3896]
[MD5.97432AB9F1B3B3E63E778C1E69E71E91] - (.ASUSTek Computer Inc. - ASUS USB Charger Plus.) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [1124032] [PID.3904]
[MD5.C6D3BB61E24F66EB976C6CC55346B5F2] - (.ASUS - ASUS InstantOn.) -- C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [1196416] [PID.3912]
[MD5.B07086D59443DAC6A668D691B27B968C] - (.ASUSTeK Computer Inc. - ASUS Color Engine.) -- C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [176240] [PID.3944]
[MD5.498622161649098034DA1893F00E9762] - (.ASUSTeK Computer Inc. - ASUS Quick Gesture Exe.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe [20792] [PID.4428]
[MD5.6F5C1B268FE5D190F356C6EFD2E8B53A] - (.PC Health Labs - PC Health Kit Smart Scan.) -- C:\Program Files (x86)\PC Health Kit\PCHKSmartScan.exe [489584] [PID.4436] =>PUP.DealPly
[MD5.2D32F0EF950AED6AD007D042676FD39E] - (.ASUSTek Computer Inc. - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [328064] [PID.5452]
[MD5.0B50F07E63EE15383CDFDC26D7A3D3E3] - (.ASUSTek Computer Inc. - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [205184] [PID.5500]
[MD5.4F9236BE13917B89F7A03DEA85F220FA] - (.No owner - WebPlayer.) -- C:\Users\Thaisa - Design\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe [202752] [PID.5924] =>Adware.SocialSkinz
[MD5.ADDFB090DE67FB6251ABD242104BAEB5] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\Thaisa - Design\AppData\Roaming\uTorrent\uTorrent.exe [1270352] [PID.5992] =>P2P.BitTorrent
[MD5.6F86F989CF0F416999F6D83EC36D51CE] - (...) -- C:\Users\Thaisa - Design\AppData\Roaming\Avg_Update_0214d\AVG-Secure-Search-Update_0214d.exe [2642456] [PID.4348] =>Toolbar.AVGSearch
[MD5.5FA7D3322DA8E6A6D92B49130E48A0D7] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5180432] [PID.6088]
[MD5.2214FCB2ADDCCA4C6A85A3A814EC6FD0] - (.Software Updater - Software Updater.) -- C:\Program Files (x86)\Software Updater\SoftwareUpdater.exe [1934016] [PID.4128] =>PUP.Eorezo
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.1784]
[MD5.8FC6461C4ACC389E6D394687D88B9CF6] - (.APN - Ask Toolbar Notifier.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1801168] [PID.5920] =>Toolbar.Ask
[MD5.DB0C938BC311B31CF90C13821AE682B3] - (.ASUSTeK Computer Inc. - ASUS Live Update.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [1559936] [PID.6784]
[MD5.345B1798395CEA9C178AFF1784FA2A37] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032] [PID.8044]
[MD5.1F0D27B7142CDEA3FBEC7A7DE56D3D1B] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7877120] [PID.7852]
~ Processes Running: Scanned in 00mn 00s

---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\Thaisa - Design\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [aaaaabcbmongicmdegkmmfgdickgnnob] Movies Toolbar v.35.3, (Désactivé) =>PUP.MoviesToolbar
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [bopakagnckmlgajfccecajhnimjiiedh] McAfee Security Scan+ v.3.8.141.12 (Désactivé)
G2 - GCE: Preference [User Data\Default] [mfffpogegjflfpflabcdkioaeobkgjik] GaiaAuthExtension v.0.0.1, (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [pelmeidfhdlhlbjimpabfcbnnojbboma] Quick Start v.3.2.5, (Désactivé) =>PUP.QuickStart

---\\ Pasta de extensão do Google Chrome
~ Google Lines Browser: 18 Legitimates Filtered in 00mn 01s

---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
C:\Users\Thaisa - Design\AppData\Roaming\Mozilla\Firefox\Profiles\b4shhzer.default-1400354541088\prefs.js
~ Firefox Browser: 3 Legitimates Filtered in 00mn 00s

---\\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
~ IE Browser: 17 Legitimates Filtered in 00mn 00s

---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:59253;https=127.0.0.1:59253 =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s

---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s

---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 0

---\\ Browser Helper Objects do navegador (02)
O2 - BHO: toolbox [64Bits] - {063D037D-F7F6-4D75-940F-54EE0011F82B} . (.No owner - toolbox.) -- C:\Users\Thaisa - Design\AppData\LocalLow\ToolBox\26.1.6666.420\toolbox.dll
O2 - BHO: SaveSense [64Bits] - {0f21b1e5-5afc-43c9-9c66-515046e92ec2} . (.SaveSense - SaveSense for IE.) -- C:\Program Files (x86)\SaveSense\SaveSenseIE.dll =>PUP.SaveSense
O2 - BHO: 2rs3 [64Bits] - {10AD2C61-0898-4348-8600-14A342F22AC3} . (...) -- C:\Program Files (x86)\SupraSavings\2rs3.dll =>PUP.SupraSavings
O2 - BHO: SaveSense [64Bits] - {71e129ff-6c2a-4984-818c-7e2c998b8d99} . (.SaveSense - SaveSense for IE.) -- C:\Users\Thaisa - Design\AppData\Local\SaveSense\SaveSenseIE.dll =>PUP.SaveSense
O2 - BHO: Highlightly [64Bits] - {83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} . (.Highlightly - Highlightly Client BHO x86.) -- C:\Program Files (x86)\Highlightly\IE\HighlightlyClientIE.dll
O2 - BHO: (no name) [64Bits] - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} Chave orfã
O2 - BHO: Movies Toolbar (Dist. by Bandoo Media, Inc.) [64Bits] - {d1dac034-9fd9-4c13-a388-d2e10e57707f} Chave orfã =>PUP.MoviesToolbar
~ BHO: 12 Legitimates Filtered in 00mn 00s

---\\ Barras do Internet Explorer (03))
O3 - Toolbar: Movies Toolbar (Dist. by Bandoo Media, Inc.) - [HKLM]{d1dac034-9fd9-4c13-a388-d2e10e57707f} . (.No owner - dtx Dynamic Link Library.) -- C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\searchresultsDx64.dll =>PUP.Datamngr
~ Toolbar: Scanned in 00mn 00s

---\\ Outras conexões do utilizador (04)
O4 - GS\Desktop [Public]: Activeris AntiMalware.lnk . (.Activeris - Activeris AntiMalware.) -- C:\Program Files (x86)\Activeris AntiMalware\ActiverisAntiMalware.exe =>PUP.Activeris
O4 - GS\Desktop [Public]: Baidu Spark Browser.lnk . (...) -- C:\Program Files (x86)\baidu\Spark26.5.9999.3313\Spark.exe =>Adware.BDSearch
O4 - GS\Desktop [Public]: Facebook.lnk . (...) -- C:\Program Files (x86)\baidu\Spark26.5.9999.3313\Spark.exe =>Adware.BDSearch
O4 - GS\Desktop [Public]: Google.lnk . (...) -- C:\Program Files (x86)\baidu\Spark26.5.9999.3313\Spark.exe =>Adware.BDSearch
O4 - GS\QuickLaunch [Thaisa - Design]: Baidu Spark Browser.lnk . (...) -- C:\Program Files (x86)\baidu\Spark26.5.9999.3313\Spark.exe =>Adware.BDSearch
O4 - GS\QuickLaunch [Thaisa - Design]: iLivid.lnk . (.Bandoo Media Inc. - iLivid Download Manager.) -- C:\Users\Thaisa - Design\AppData\Local\iLivid\iLivid.exe =>Adware.Bandoo
O4 - GS\QuickLaunch [Thaisa - Design]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
O4 - GS\QuickLaunch [Thaisa - Design]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Thaisa - Design\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - GS\TaskBar [Thaisa - Design]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
O4 - GS\TaskBar [Thaisa - Design]: Mobogenie.lnk . (...) -- C:\Program Files (x86)\Mobogenie\Mobogenie.exe =>PUP.Mobogenie
O4 - GS\Program [Thaisa - Design]: iLivid.lnk . (.Bandoo Media Inc. - iLivid Download Manager.) -- C:\Users\Thaisa - Design\AppData\Local\iLivid\iLivid.exe =>Adware.Bandoo
O4 - GS\Program [Thaisa - Design]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
O4 - GS\Desktop [Thaisa - Design]: iLivid.lnk . (.Bandoo Media Inc. - iLivid Download Manager.) -- C:\Users\Thaisa - Design\AppData\Local\iLivid\iLivid.exe =>Adware.Bandoo
O4 - GS\Desktop [Thaisa - Design]: Optimizer Pro.lnk . (.PC Utilities Software Limited - Optimizer Pro.) -- C:\Program Files (x86)\Optimizer Pro\OptimizerPro.exe =>PUP.OptimizerPro
O4 - GS\Desktop [Thaisa - Design]: PC App Store.lnk . (.Baidu Inc. - Baidu PC App Store.) -- C:\Program Files (x86)\Baidu Security\PC App Store\4.3.1.5719\PCAppStore.exe =>Adware.BDSearch
O4 - GS\Desktop [Thaisa - Design]: Sync Folder.lnk . (.MyPCBackup.com - MyPC Backup.) -- C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe =>PUP.MyPCBackup
~ Global Startup: 19 Legitimates Filtered in 00mn 01s

---\\ Aplicações iniciadas por registo & pastas (04)
O4 - GS\Startup [Public]: SoftwareUpdater.lnk . (.Software Updater - Software Updater.) -- C:\Program Files (x86)\Software Updater\SoftwareUpdater.exe =>PUP.Eorezo
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKCU\..\Run: [FLV Player] . (.No owner - WebPlayer.) -- C:\Users\Thaisa - Design\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz
O4 - HKCU\..\Run: [ContentExplorer] . (.ContentExplorer - ContentExplorer.) -- C:\Users\Thaisa - Design\AppData\Roaming\ContentExplorer\ContentExplorer.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Thaisa - Design\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKCU\..\Run: [AVG-Secure-Search-Update_0214d] . (...) -- C:\Users\Thaisa - Design\AppData\Roaming\Avg_Update_0214d\AVG-Secure-Search-Update_0214d.exe =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [mobilegeni daemon] . (...) -- C:\Program Files (x86)\Mobogenie\DaemonProcess.exe =>PUP.Mobogenie
O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2014\avgui.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O4 - HKLM\..\Wow6432Node\Run: [ApnTBMon] . (.APN - Ask Toolbar Notifier.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.Ask
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKUS\S-1-5-21-2897439766-3630492051-1551879281-1001\..\Run: [FLV Player] . (.No owner - WebPlayer.) -- C:\Users\Thaisa - Design\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz
O4 - HKUS\S-1-5-21-2897439766-3630492051-1551879281-1001\..\Run: [ContentExplorer] . (.ContentExplorer - ContentExplorer.) -- C:\Users\Thaisa - Design\AppData\Roaming\ContentExplorer\ContentExplorer.exe
O4 - HKUS\S-1-5-21-2897439766-3630492051-1551879281-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Thaisa - Design\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKUS\S-1-5-21-2897439766-3630492051-1551879281-1001\..\Run: [AVG-Secure-Search-Update_0214d] . (...) -- C:\Users\Thaisa - Design\AppData\Roaming\Avg_Update_0214d\AVG-Secure-Search-Update_0214d.exe =>Toolbar.AVGSearch
~ Application: Scanned in 00mn 00s

---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{5CD3041E-E171-4BBE-BD35-3551C7C59B99}: DhcpNameServer = 189.7.0.32 189.7.0.52
O17 - HKLM\System\CCS\Services\Tcpip\..\{82F166D9-12B0-4917-A08D-EEA5864CB35A}: DhcpNameServer = 189.7.0.32 189.7.0.52
O17 - HKLM\System\CS1\Services\Tcpip\..\{5CD3041E-E171-4BBE-BD35-3551C7C59B99}: DhcpNameServer = 189.7.0.32 189.7.0.52
O17 - HKLM\System\CS1\Services\Tcpip\..\{82F166D9-12B0-4917-A08D-EEA5864CB35A}: DhcpNameServer = 189.7.0.32 189.7.0.52
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 189.7.0.32 189.7.0.52
~ Domain: Scanned in 00mn 00s

---\\ Protocolo adicional (018)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s

---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s

---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (.not file.) =>Toolbar.Conduit
~ AppInit DLL: Scanned in 00mn 00s

por rodrigobnu Sáb 17 maio 2014, 23:39

---\\ Lista dos serviços NT não Microsoft e não desativados (023)
O23 - Service: Serviço de atualização Ask (APNMCP) . (.APN LLC. - APN Updater.) - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask
O23 - Service: Asus WebStorage Windows Service (Asus WebStorage Windows Service) . (.No owner - Asus WebStorage Windows Service.) - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) . (.Just Develop It - Backup Stack.) - C:\Program Files (x86)\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup
O23 - Service: Highlightly Client Service (hlsvc) . (.Highlightly - Highlightly Client Service.) - C:\Program Files (x86)\Highlightly\Service\hlsvc.exe
O23 - Service: Baidu PC App Store Service 4.3.1.5719 (PCAppStoreSvc_{PCAppStore_4.3.1.5719}) . (.Baidu Inc. - Baidu PC App Store Service.) - C:\Program Files (x86)\Baidu Security\PC App Store\4.3.1.5719\PCAppStoreSvc.exe =>Adware.BDSearch
O23 - Service: Baidu PC Faster Service 4.0.0.0 (PCFasterSvc_{PCFaster_4.0.0.0}) . (.Baidu Inc. - Baidu PC Faster Service.) - C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\PCFasterSvc.exe =>Adware.BDSearch
O23 - Service: Protect Monitor (ProtectMonitor) . (...) - C:\Program Files\PCDApp\StartHelp.exe =>Trojan.BitCoinMiner
O23 - Service: SaveSenseLive Service (savesenselive) (savesenselive) . (.SaveSense - SaveSenseLive Update.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense
O23 - Service: SecureAssist (SecureAssist) . (.SecureAssist - No Comment.) - c:\Program Files\SupraSavings\SecureAssist.exe =>PUP.SupraSavings
O23 - Service: Baidu Spark Service (SparkSvc) . (.Baidu Inc. - spark.) - C:\Program Files (x86)\baidu\Spark26.5.9999.3313\sparkservice.exe =>Adware.BDSearch
O23 - Service: ToolBox Service (ToolBoxService) . (.Baidu Inc. - ToolBox Service.) - C:\Program Files (x86)\ToolBox\26.1.6666.420\ToolBoxService.exe =>Adware.BDSearch
O23 - Service: xmkysecqun64 (xmkysecqun64) . (...) - C:\Program Files\003\xmkysecqun64.exe =>PUP.AdPeak
~ Services: 25 Legitimates Filtered in 00mn 04s

---\\ Tarefas planificadas automaticamente (039)
[MD5.A74558989E0624989C5B21E442788ED3] [APT] [Activeris AntiMalware_startup] (.Activeris.) -- C:\Program Files (x86)\Activeris AntiMalware\ActiverisAntiMalware.exe [6292472] =>PUP.Activeris
[MD5.6F86F989CF0F416999F6D83EC36D51CE] [APT] [AVG_SYS_TASK_0214d] (...) -- C:\ProgramData\Avg_Update_0214d\AVG-Secure-Search-Update_0214d.exe [2642456] =>Toolbar.AVGSearch
[MD5.6F86F989CF0F416999F6D83EC36D51CE] [APT] [AVG_SYS_TASK_0214d_DELETE] (...) -- C:\ProgramData\Avg_Update_0214d\AVG-Secure-Search-Update_0214d.exe [2642456] =>Toolbar.AVGSearch
[MD5.FB06411EF82CF1DEFBCE919C0FB00238] [APT] [Baidu PC Faster Update] (.Baidu Inc..) -- C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\Updater.exe [1250800] =>Adware.BDSearch
[MD5.C2B0DDD97D8126355DAB99FC65909310] [APT] [PC Health Kit Schedule] (.PC Health Labs.) -- C:\Program Files (x86)\PC Health Kit\PCHKLauncher.exe [199792] =>PUP.DealPly
[MD5.00000000000000000000000000000000] [APT] [pricemeterdownloader] (...) -- C:\Users\Thaisa - Design\AppData\Local\PriceMeter\pricemeterd.exe (.not file.) [0] =>PUP.PriceMeter
[MD5.00000000000000000000000000000000] [APT] [PriceMeterLiveUpdateUpdateTaskMachineCore] (...) -- C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe (.not file.) [0] =>PUP.PriceMeter
[MD5.00000000000000000000000000000000] [APT] [PriceMeterLiveUpdateUpdateTaskMachineUA] (...) -- C:\Program Files (x86)\PriceMeterLiveUpdate\Update\PriceMeterLiveUpdate.exe (.not file.) [0] =>PUP.PriceMeter
[MD5.00000000000000000000000000000000] [APT] [pricemetertask] (...) -- C:\Users\Thaisa - Design\AppData\Local\PriceMeter\pricemeter.exe (.not file.) [0] =>PUP.PriceMeter
[MD5.00000000000000000000000000000000] [APT] [PriceMeterUpdater] (...) -- C:\Users\Thaisa - Design\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.exe (.not file.) [0] =>PUP.PriceMeter
[MD5.00000000000000000000000000000000] [APT] [pricemeterwatcher] (...) -- C:\Users\Thaisa - Design\AppData\Local\PriceMeter\pricemeterw.exe (.not file.) [0] =>PUP.PriceMeter
[MD5.6F2939B1EC17A6631106CFD013A9CD77] [APT] [SaveSense] (...) -- C:\Users\Thaisa - Design\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.exe [199176] =>PUP.SaveSense
[MD5.C495D8665A32539660625182D23D5C59] [APT] [SaveSenseLiveUpdateTaskMachineCore] (.SaveSense.) -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920] =>PUP.SaveSense
[MD5.C495D8665A32539660625182D23D5C59] [APT] [SaveSenseLiveUpdateTaskMachineUA] (.SaveSense.) -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920] =>PUP.SaveSense
[MD5.00000000000000000000000000000000] [APT] [SomotoUpdateCheckerAutoStart] (...) -- C:\Users\Thaisa - Design\AppData\Local\FilesFrog Update Checker\update_checker.exe (.not file.) [0] =>Adware.MegaSearch
[MD5.B25BE24F9B2E40C48C32D9CC79D638D1] [APT] [SparkUpdater] (.Baidu.com, Inc..) -- C:\Program Files (x86)\baidu\Spark26.5.9999.3313\SparkUpdate.exe [1628352] =>Adware.BDSearch
[MD5.354B869D0C2707DB12F1666F1EB0C3A9] [APT] [{16A6CC0A-23C5-43D0-B7C2-BEAFDFBA2278}] (...) -- C:\Users\Thaisa - Design\Downloads\CS 1.6 - 2013.exe [280279178]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]
O39 - APT: AVG_SYS_TASK_0214d - (...) -- C:\Windows\Tasks\AVG_SYS_TASK_0214d.job [536]
O39 - APT: AVG_SYS_TASK_0214d - (...) -- C:\Windows\System32\Tasks\AVG_SYS_TASK_0214d [536]
O39 - APT: AVG_SYS_TASK_0214d_DELETE - (...) -- C:\Windows\Tasks\AVG_SYS_TASK_0214d_DELETE.job [406]
O39 - APT: AVG_SYS_TASK_0214d_DELETE - (...) -- C:\Windows\System32\Tasks\AVG_SYS_TASK_0214d_DELETE [406]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2897439766-3630492051-1551879281-1001Core [960]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2897439766-3630492051-1551879281-1001UA [982]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1096]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1100]
O39 - APT: PriceMeterLiveUpdateUpdateTaskMachineCore - (...) -- C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job [994] =>PUP.PriceMeter
O39 - APT: PriceMeterLiveUpdateUpdateTaskMachineCore - (...) -- C:\Windows\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore [994] =>PUP.PriceMeter
O39 - APT: PriceMeterLiveUpdateUpdateTaskMachineUA - (...) -- C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job [998] =>PUP.PriceMeter
O39 - APT: PriceMeterLiveUpdateUpdateTaskMachineUA - (...) -- C:\Windows\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA [998] =>PUP.PriceMeter
O39 - APT: PriceMeterUpdater - (...) -- C:\Windows\Tasks\PriceMeterUpdater.job [332] =>PUP.PriceMeter
O39 - APT: PriceMeterUpdater - (...) -- C:\Windows\System32\Tasks\PriceMeterUpdater [332] =>PUP.PriceMeter
O39 - APT: SaveSense - (...) -- C:\Windows\Tasks\SaveSense.job [332] =>Hijacker.iHaveNet
O39 - APT: SaveSense - (...) -- C:\Windows\System32\Tasks\SaveSense [332] =>PUP.SaveSense
O39 - APT: SaveSenseLiveUpdateTaskMachineCore - (.SaveSense.) -- C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job [960] =>PUP.SaveSense
O39 - APT: SaveSenseLiveUpdateTaskMachineCore - (.SaveSense.) -- C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore [960] =>PUP.SaveSense
O39 - APT: SaveSenseLiveUpdateTaskMachineUA - (.SaveSense.) -- C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job [964] =>PUP.SaveSense
O39 - APT: SaveSenseLiveUpdateTaskMachineUA - (.SaveSense.) -- C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA [964] =>PUP.SaveSense
~ Scheduled Task: 50 Legitimates Filtered in 00mn 08s

---\\ Drivers lançados ao arranque do sistema (041)
O41 - Driver: (Bfilter) . (. - .) - C:\Windows\system32\drivers\Bfilter.sys (.not file.)
O41 - Driver: (Bfmon) . (. - .) - C:\Windows\system32\drivers\Bfmon.sys (.not file.)
O41 - Driver: (Bnbase) . (. - .) - C:\Windows\System32\drivers\bnbasex64.sys (.not file.)
O41 - Driver: (Bndef) . (. - .) - C:\Windows\system32\drivers\bndef64.sys (.not file.)
O41 - Driver: (Bprotect) . (. - .) - C:\Windows\system32\drivers\Bprotect.sys (.not file.)
O41 - Driver: (BprotectEx) . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) - C:\Windows\system32\drivers\BprotectEx.sys
O41 - Driver: (hlnfd) . (.Highlightly - Highlightly Driver x64.) - C:\Windows\System32\drivers\hlnfd.sys
~ Drivers: 56 Legitimates Filtered in 00mn 00s

---\\ Software instalados (042)
O42 - Logiciel: 18 Wheels of Steel American Long Haul 1.00 - (...) [HKLM][64Bits] -- 18 Wheels of Steel American Long Haul 1.00
O42 - Logiciel: Activeris AntiMalware - (.Activeris.) [HKLM][64Bits] -- 94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1 =>PUP.Activeris
O42 - Logiciel: Ask Toolbar - (.APN, LLC.) [HKLM][64Bits] -- {4F524A2D-5637-4300-76A7-A758B70C0A06} =>Adware.Bandoo
O42 - Logiciel: Bizzybolt - (.Bizzybolt.) [HKLM][64Bits] -- Bizzybolt =>PUP.Bizzybolt
O42 - Logiciel: ContentExplorer - (.ContentExplorer.net.) [HKLM][64Bits] -- ContentExplorer
O42 - Logiciel: Counter Strike 1.6 - 2013 - (...) [HKLM][64Bits] -- Counter Strike 1.6 - 2013
O42 - Logiciel: Highlightly - (.Highlightly.) [HKLM][64Bits] -- Highlightly
O42 - Logiciel: Lollipop - (.Lollipop Network, S.L..) [HKCU][64Bits] -- lollipop =>Adware.Lollipop
O42 - Logiciel: MyPC Backup - (.JDi Backup Ltd.) [HKLM][64Bits] -- MyPC Backup =>PUP.MyPCBackup
O42 - Logiciel: PC Data App - (...) [HKLM][64Bits] -- PCData App =>Trojan.BitCoinMiner
O42 - Logiciel: PC Health Kit v3.2 - (.PC Health Labs.) [HKLM][64Bits] -- PC Health Kit_is1 =>PUP.DealPly
O42 - Logiciel: Price Meter (remove only) - (.Price Meter.) [HKCU][64Bits] -- Price Meter =>PUP.PriceMeter
O42 - Logiciel: Promob Plus 2011 + Render-UP 2011 - (...) [HKLM][64Bits] -- Promob Plus 2011 + Render-UP 2011
O42 - Logiciel: SaveSense (remove only) - (.SaveSense.) [HKLM][64Bits] -- SaveSense =>PUP.SaveSense
O42 - Logiciel: SaveSense - (.SaveSense.) [HKCU][64Bits] -- SaveSense =>PUP.SaveSense
O42 - Logiciel: SupraSavings - (.SupraSavings.) [HKLM][64Bits] -- {E6B105B8-1F65-4428-9397-1DFD8A03B94D} =>PUP.SupraSavings
O42 - Logiciel: Update for PriceMeter - (.Update for PriceMeter.) [HKCU][64Bits] -- PriceMeterUpdater =>PUP.PriceMeter
O42 - Logiciel: fst_br_103 - (.free_soft_to_day.) [HKLM][64Bits] -- fst_br_103_is1 =>Adware.FreeSoftToday
O42 - Logiciel: iLivid - (.Bandoo Media Inc.) [HKCU][64Bits] -- iLivid =>Adware.Bandoo
O42 - Logiciel: suprasavings - (.suprasavings.) [HKLM][64Bits] -- suprasavings =>PUP.SupraSavings
O42 - Logiciel: webssearches uninstaller - (.webssearches.) [HKLM][64Bits] -- webssearches uninstaller =>Hijacker.WebsSearches
~ Logic: 56 Legitimates Filtered in 00mn 01s

---\\ HKCU & HKLM Software Keys
[HKCU\Software\APNDTX] =>Toolbar.Ask
[HKCU\Software\Activeris] =>PUP.Activeris
[HKCU\Software\AskPartnerNetwork]
[HKCU\Software\AutoHelpDesk]
[HKCU\Software\Baidu Security] =>Adware.BDSearch
[HKCU\Software\Baidu] =>Adware.BDSearch
[HKCU\Software\Bizzybolt] =>PUP.Bizzybolt
[HKCU\Software\ContentExplorer]
[HKCU\Software\Datamngr] =>PUP.Datamngr
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKCU\Software\PC Health Kit] =>PUP.DealPly
[HKCU\Software\PCDataApp]
[HKCU\Software\PriceMeter] =>PUP.PriceMeter
[HKCU\Software\SaveSenseLive] =>PUP.SaveSense
[HKCU\Software\SupraSavings] =>PUP.SupraSavings
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive
[HKCU\Software\Tutorials] =>PUP.AgenceExclusive
[HKCU\Software\freesofttoday] =>Adware.FreeSoftToday
[HKCU\Software\ilivid] =>Adware.Bandoo
[HKLM\Software\Baidu Security] =>Adware.BDSearch
[HKLM\Software\LevelQualityWatcher] =>PUP.LevelQualityWatcher
[HKLM\Software\Rr Savings] =>PUP.SupraSavings
[HKLM\Software\Wow6432Node\Activeris] =>PUP.Activeris
[HKLM\Software\Wow6432Node\AskPartnerNetwork]
[HKLM\Software\Wow6432Node\AutoHelpDesk]
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Baidu_Drp_pos] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Bizzybolt] =>PUP.Bizzybolt
[HKLM\Software\Wow6432Node\Datamngr] =>PUP.Datamngr
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\PCDataApp]
[HKLM\Software\Wow6432Node\SaveSenseLive] =>PUP.SaveSense
[HKLM\Software\Wow6432Node\SupraSavings] =>PUP.SupraSavings
[HKLM\Software\Wow6432Node\ToolBox]
[HKLM\Software\Wow6432Node\Tutorials] =>PUP.AgenceExclusive
[HKLM\Software\Wow6432Node\baidu] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\free_soft_to_day] =>Adware.FreeSoftToday
~ Key Software: 367 Legitimates Filtered in 00mn 01s

---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 07/05/2014 - 19:04:13 - [] ----D C:\Program Files (x86)\Activeris AntiMalware =>PUP.Activeris
O43 - CFD: 17/05/2014 - 13:32:57 - [] ----D C:\Program Files (x86)\AskPartnerNetwork
O43 - CFD: 13/05/2014 - 21:29:13 - [] ----D C:\Program Files (x86)\baidu =>Adware.BDSearch
O43 - CFD: 07/01/2014 - 01:27:32 - [] ----D C:\Program Files (x86)\Baidu Security =>Adware.BDSearch
O43 - CFD: 13/05/2014 - 21:42:11 - [] ----D C:\Program Files (x86)\Bizzybolt =>PUP.Bizzybolt
O43 - CFD: 16/03/2014 - 18:02:30 - [] ----D C:\Program Files (x86)\Counter Strike 1.6
O43 - CFD: 11/05/2014 - 21:23:33 - [] ----D C:\Program Files (x86)\fst_br_103
O43 - CFD: 01/04/2014 - 20:55:29 - [] ----D C:\Program Files (x86)\Highlightly
O43 - CFD: 07/01/2014 - 18:05:38 - [0] ----D C:\Program Files (x86)\IminentToolbar =>Adware.IMBooster
O43 - CFD: 01/04/2014 - 21:00:00 - [] ----D C:\Program Files (x86)\Movies Toolbar =>PUP.MoviesToolbar
O43 - CFD: 27/04/2014 - 22:26:35 - [] ----D C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 27/04/2014 - 14:28:11 - [] ----D C:\Program Files (x86)\PC Health Kit =>PUP.DealPly
O43 - CFD: 25/03/2014 - 19:38:09 - [] ----D C:\Program Files (x86)\SaveSense =>PUP.SaveSense
O43 - CFD: 24/02/2014 - 19:44:07 - [] ----D C:\Program Files (x86)\SaveSenseLive =>PUP.SaveSense
O43 - CFD: 01/04/2014 - 20:58:37 - [] ----D C:\Program Files (x86)\SupraSavings =>PUP.SupraSavings
O43 - CFD: 11/05/2014 - 06:51:25 - [] ----D C:\Program Files (x86)\ToolBox
O43 - CFD: 07/05/2014 - 21:08:37 - [] ----D C:\Program Files (x86)\Uninstaller
O43 - CFD: 07/05/2014 - 19:04:02 - [] ----D C:\ProgramData\Activeris =>PUP.Activeris
O43 - CFD: 17/05/2014 - 13:32:52 - [] ----D C:\ProgramData\APN
O43 - CFD: 17/05/2014 - 13:32:57 - [] ----D C:\ProgramData\AskPartnerNetwork
O43 - CFD: 13/05/2014 - 21:28:04 - [] ----D C:\ProgramData\baidu =>Adware.BDSearch
O43 - CFD: 05/03/2014 - 00:23:40 - [] ----D C:\ProgramData\Baidu Security =>Adware.BDSearch
O43 - CFD: 10/04/2014 - 21:54:19 - [] ----D C:\ProgramData\Datamngr =>PUP.Datamngr
O43 - CFD: 19/11/2013 - 22:31:18 - [] ----D C:\ProgramData\Pads
O43 - CFD: 19/11/2013 - 22:12:10 - [] ----D C:\ProgramData\PadsVs
O43 - CFD: 19/11/2013 - 22:11:18 - [] --H-D C:\ProgramData\Permission
O43 - CFD: 19/11/2013 - 22:11:18 - [] ----D C:\ProgramData\Procad
O43 - CFD: 24/02/2014 - 19:44:06 - [] ----D C:\ProgramData\SaveSenseLive =>PUP.SaveSense
O43 - CFD: 16/05/2014 - 18:23:51 - [] ----D C:\ProgramData\TorchCrashHandler
O43 - CFD: 07/05/2014 - 19:04:26 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\Activeris =>PUP.Activeris
O43 - CFD: 13/05/2014 - 21:57:38 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\baidu =>Adware.BDSearch
O43 - CFD: 07/01/2014 - 01:27:30 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\Baidu Security =>Adware.BDSearch
O43 - CFD: 09/05/2014 - 07:19:54 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\ContentExplorer
O43 - CFD: 05/01/2014 - 14:42:23 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\IminentToolbar =>Adware.IMBooster
O43 - CFD: 11/05/2014 - 22:01:07 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\newnext.me =>PUP.NextLive
O43 - CFD: 27/04/2014 - 14:28:18 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\PC Health Kit =>PUP.DealPly
O43 - CFD: 27/04/2014 - 14:29:59 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\PriceMeterUpdater =>PUP.PriceMeter
O43 - CFD: 24/02/2014 - 19:43:47 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\SaveSense =>PUP.SaveSense
O43 - CFD: 25/03/2014 - 19:39:56 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\webssearches =>Hijacker.WebsSearches
O43 - CFD: 15/05/2014 - 23:54:47 - [] ----D C:\Users\Thaisa - Design\AppData\Local\fst_br_103
O43 - CFD: 15/04/2014 - 19:15:50 - [0] ----D C:\Users\Thaisa - Design\AppData\Local\genienext =>PUP.NextLive
O43 - CFD: 11/05/2014 - 22:05:46 - [] ----D C:\Users\Thaisa - Design\AppData\Local\iLivid =>Adware.Bandoo
O43 - CFD: 07/01/2014 - 21:12:44 - [] ----D C:\Users\Thaisa - Design\AppData\Local\Lollipop =>Adware.Lollipop
O43 - CFD: 11/05/2014 - 22:13:56 - [] ----D C:\Users\Thaisa - Design\AppData\Local\PriceMeter =>PUP.PriceMeter
O43 - CFD: 24/02/2014 - 19:43:31 - [] ----D C:\Users\Thaisa - Design\AppData\Local\SaveSense =>PUP.SaveSense
O43 - CFD: 24/02/2014 - 19:44:06 - [] ----D C:\Users\Thaisa - Design\AppData\Local\SaveSenseLive =>PUP.SaveSense
O43 - CFD: 21/12/2013 - 15:50:37 - [0] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\18 Wheels of Steel American Long Haul
O43 - CFD: 16/05/2014 - 19:09:13 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Baidu PC App Store =>Adware.BDSearch
O43 - CFD: 16/05/2014 - 19:09:13 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Baidu PC Faster =>Adware.BDSearch
O43 - CFD: 16/05/2014 - 19:09:13 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013
O43 - CFD: 16/05/2014 - 19:09:13 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =>PUP.MyPCBackup
O43 - CFD: 16/05/2014 - 19:09:13 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter =>PUP.PriceMeter
O43 - CFD: 19/11/2013 - 21:02:18 - [0] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Promob Plus 2011 + Render-UP 2011
O43 - CFD: 16/05/2014 - 19:09:13 - [] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense =>PUP.SaveSense
O43 - CFD: 04/01/2014 - 16:10:50 - [0] ----D C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop =>Adware.Lollipop
~ Program Folder: 222 Legitimates Filtered in 00mn 00s

---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.110BEF03ACD02079B62CD8B99DD8604B] - 07/05/2014 - 19:03:46 ---A- . (...) -- C:\Windows\System32\acrisnative64.exe [20480]
O44 - LFC:[MD5.EFA9474B90288DD38C6156D67ADB89EA] - 13/05/2014 - 18:35:30 ---A- . (...) -- C:\Windows\win.ini [324]
O44 - LFC:[MD5.ABC6A7B9710205BEF090156DFDB0C1FC] - 16/05/2014 - 18:20:26 ---A- . (...) -- C:\Windows\WindowsUpdate (1).log [402435]
O44 - LFC:[MD5.12B0701B1CEC1A7BB0E4C71D97661E23] - 16/05/2014 - 18:46:17 ---A- . (...) -- C:\Windows\System32\ApnDatabase.xml [387210]
O44 - LFC:[MD5.8BAAEB485A25179E4A1E0A74924A501D] - 16/05/2014 - 18:53:38 ---A- . (...) -- C:\Windows\System32\Drivers\RTWAVES30.dat [81908]
O44 - LFC:[MD5.0724B2A1F75FE85446CC8EEF2F15F11D] - 16/05/2014 - 19:08:08 ---A- . (...) -- C:\Windows\DtcInstall.log [4893]
O44 - LFC:[MD5.D5C6AFFE8D0D57753952C9584A54764A] - 16/05/2014 - 19:19:07 ---A- . (...) -- C:\Windows\System32\emptyregdb.dat [22956]
O44 - LFC:[MD5.104B8C687522011A65339FE025C126CA] - 16/05/2014 - 19:19:31 ---A- . (...) -- C:\Windows\comsetup.log [6571]
O44 - LFC:[MD5.F0E857AA9EFCC374C1931F7E9978C480] - 16/05/2014 - 19:19:33 ---A- . (...) -- C:\Windows\diagerr.xml [24768]
O44 - LFC:[MD5.F0E857AA9EFCC374C1931F7E9978C480] - 16/05/2014 - 19:19:33 ---A- . (...) -- C:\Windows\diagwrn.xml [24768]
O44 - LFC:[MD5.3BC13E1C233E3AE1892F77D474DBFEEB] - 17/05/2014 - 18:04:03 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [158494]
O44 - LFC:[MD5.7BF12277266C39E0B456E522184D8CD1] - 17/05/2014 - 18:04:03 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [774900]
~ Files: 221 Legitimates Filtered in 00mn 05s

---\\ Image File Execution Options (IFEO) (O50)
O50 - IFEO:Image File Execution Options - bitguard.exe - tasklist.exe =>PUP.BitGuard
O50 - IFEO:Image File Execution Options - bprotect.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - bpsvc.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - browserdefender.exe - tasklist.exe =>Hijacker.Eazel
O50 - IFEO:Image File Execution Options - browserprotect.exe - tasklist.exe =>Hijacker.Eazel
O50 - IFEO:Image File Execution Options - browsersafeguard.exe - tasklist.exe =>PUP.BrowserSafeguard
O50 - IFEO:Image File Execution Options - dprotectsvc.exe - tasklist.exe =>Trojan.Staser
O50 - IFEO:Image File Execution Options - jumpflip - tasklist.exe =>PUP.JumpFlip
O50 - IFEO:Image File Execution Options - protectedsearch.exe - tasklist.exe =>Spyware.ProtectedSearch
O50 - IFEO:Image File Execution Options - searchinstaller.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - searchprotection.exe - tasklist.exe =>Toolbar.Conduit
O50 - IFEO:Image File Execution Options - searchprotector.exe - tasklist.exe =>Toolbar.Conduit
O50 - IFEO:Image File Execution Options - searchsettings.exe - tasklist.exe =>Adware.SearchSettings
O50 - IFEO:Image File Execution Options - searchsettings64.exe - tasklist.exe =>Adware.SearchSettings
O50 - IFEO:Image File Execution Options - snapdo.exe - tasklist.exe =>Hijacker.SmartBar
O50 - IFEO:Image File Execution Options - stinst32.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - stinst64.exe - tasklist.exe
O50 - IFEO:Image File Execution Options - umbrella.exe - tasklist.exe =>Adware.IMBooster
O50 - IFEO:Image File Execution Options - utiljumpflip.exe - tasklist.exe =>PUP.JumpFlip
O50 - IFEO:Image File Execution Options - volaro - tasklist.exe =>Trojan.Vonteera
O50 - IFEO:Image File Execution Options - vonteera - tasklist.exe =>Trojan.Vonteera
O50 - IFEO:Image File Execution Options - websteroids.exe - tasklist.exe =>PUP.TubeDimmer
O50 - IFEO:Image File Execution Options - websteroidsservice.exe - tasklist.exe =>PUP.TubeDimmer
~ IFEO: Scanned in 00mn 00s

---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)

por rodrigobnu Sáb 17 maio 2014, 23:40

---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s

---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 8 Legitimates Filtered in 00mn 00s

---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:12/08/2013 - 20:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624]
O58 - SDL:22/03/2014 - 03:05:21 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\BProtectEx.sys [85824]
O58 - SDL:04/12/2013 - 16:46:36 ---A- . (.Highlightly - Highlightly Driver x64.) -- C:\Windows\System32\Drivers\hlnfd.sys [58256]
O58 - SDL:02/08/2012 - 00:22:48 ---A- . (.No owner - Keyboard Filter Driver.) -- C:\Windows\System32\Drivers\kbfiltr.sys [14992]
O58 - SDL:18/03/2014 - 15:12:04 ---A- . (.SecureAssist - WFP driver.) -- C:\Windows\System32\Drivers\SAWFP64.sys [41768] =>PUP.SupraSavings
O58 - SDL:22/08/2013 - 09:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072]
~ Drivers: 57 Legitimates Filtered in 00mn 04s

---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s

---\\ Associações Shell Spawning (O67)
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.No owner - spark.) -- C:\Program Files (x86)\baidu\Spark26.5.9999.3313\Spark.exe =>Adware.BDSearch
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s

---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.No owner - spark.) -- C:\Program Files (x86)\baidu\Spark26.5.9999.3313\Spark.exe =>Adware.BDSearch
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Baidu Inc. - Spark.) -- C:\Program Files (x86)\baidu\Spark\Spark.exe =>Adware.BDSearch
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys: Scanned in 00mn 00s

---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] Web - (Web) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (webssearches) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
O69 - SBI: SearchScopes [HKCU] {86c83f9e-48a4-4cd2-a763-64fea5df35f7} - (Baixaki) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} - (Ask.com) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys: Scanned in 00mn 00s

---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.F1AAAD57373832346B367E3B91916984] [SPRF][22/11/2013] (.Baidu, Inc. - Baidu Antivirus FileSplitUpLoad Library.) -- C:\ProgramData\FileSplitUpLoad.dll [170344]
[MD5.4A93070098539B54FDA391D4D551C880] [SPRF][22/07/2009] (...) -- C:\ProgramData\SetStretch.exe [24576]
[MD5.1B774DF3D6D4EB5D2481368B6654005B] [SPRF][17/05/2014] (...) -- C:\Users\Thaisa - Design\AppData\Roaming\sp_data.sys [74]
[MD5.7AD417F4184635CC4C1E3140AED83E13] [SPRF][05/01/2014] (.BitTorrent Inc. - µTorrent.) -- C:\Users\Thaisa - Design\Desktop\utorrent.exe [1340496] =>P2P.BitTorrent
~ Files: 4 Legitimates Filtered in 00mn 00s

---\\ Lista das exceções do FireWall (FirewallRules) (O87)
O87 - FAEL: "{74664068-9DF7-46AF-845B-7D3BDA38BD9E}" | In - None - P17 - TRUE | .(.Bandoo Media Inc. - iLivid Download Manager.) -- C:\Users\Thaisa - Design\AppData\Local\iLivid\iLivid.exe =>Adware.Bandoo
O87 - FAEL: "{AFCB874F-45D4-4C05-B682-44D3F43850D9}" | In - None - P6 - TRUE | .(.Bandoo Media Inc. - iLivid Download Manager.) -- C:\Users\Thaisa - Design\AppData\Local\iLivid\iLivid.exe =>Adware.Bandoo
O87 - FAEL: "{33FB3C95-AD65-471D-9882-04BAE1746ADA}" | In - Private - P17 - TRUE | .(.Baidu Inc. - Spark dumper.) -- C:\Program Files (x86)\baidu\Spark\baidu_dumper.exe =>Adware.BDSearch
O87 - FAEL: "{17F089FB-B737-456B-A206-D738E3C83F78}" | In - Private - P6 - TRUE | .(.Baidu Inc. - Spark dumper.) -- C:\Program Files (x86)\baidu\Spark\baidu_dumper.exe =>Adware.BDSearch
O87 - FAEL: "{BA32F73E-8F06-4146-9EF6-97B1A734CADB}" | In - Private - P17 - TRUE | .(.Baidu Inc. - Spark.) -- C:\Program Files (x86)\baidu\Spark\Spark.exe =>Adware.BDSearch
O87 - FAEL: "{EF800C64-603D-43A8-BB88-7CF23089B2B4}" | In - Private - P6 - TRUE | .(.Baidu Inc. - Spark.) -- C:\Program Files (x86)\baidu\Spark\Spark.exe =>Adware.BDSearch
O87 - FAEL: "{0FC17C3B-6842-48E4-8B09-18DF8EA8EA3E}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Thaisa - Design\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{193F4E54-7477-45B0-95A7-E49A240AB75E}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Thaisa - Design\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 8 Legitimates Filtered in 00mn 01s

---\\ Listagem dos códigos dos software (PUC) (090)
O90 - PUC: "8B501B6E56F182443979D1DFA8309BD4" . (.SupraSavings.) -- c:\Windows\Installer\{E6B105B8-1F65-4428-9397-1DFD8A03B94D}\icon64.ico =>PUP.SupraSavings
O90 - PUC: "BD04C21DD7DC68D42958E5F22E63394E" . (.SupraSavings.) -- c:\Windows\Installer\{D12C40DB-CD7D-4D86-9285-5E2FE23693E4}\icon64.ico =>PUP.SupraSavings
O90 - PUC: "D2A425F473650034677A7A857BC0A060" . (.Ask Toolbar.) -- C:\WINDOWS\Installer\{4F524A2D-5637-4300-76A7-A758B70C0A06}\ToolbarIcon.exe =>Toolbar.Ask
~ Update Products: 3 Legitimates Filtered in 00mn 00s

---\\ Pesquisa dos pacotes WindowsInstaller (WIS) (O93) (NTFS)
[MD5.243F07CA5C356CDE711E3893E3849801] [WIS][26/03/2014] (.APN, LLC - Ask Toolbar.) -- C:\Windows\Installer\38e8157.msi [464384] =>Adware.Bandoo
[MD5.647E5482890BFC9035251CD4E05FD052] [WIS][01/04/2014] (.SupraSavings - SupraSavings.) -- C:\Windows\Installer\5b18ae0.msi [3158016] =>PUP.SupraSavings
[MD5.9A5263D3C011F34BFA10C5458CF27197] [WIS][01/04/2014] (.SupraSavings - SupraSavings.) -- C:\Windows\Installer\5b40371.msi [4997120] =>PUP.SupraSavings
~ WIS: 3 Legitimates Filtered in 00mn 01s

---\\ Search Tracing Registry Key (O100)
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.MyPCBackup
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ActiverisAntiMalware_RASAPI32 =>PUP.Activeris
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ActiverisAntiMalware_RASMANCS =>PUP.Activeris
~ BTK: 25 Legitimates Filtered in 00mn 00s

---\\ Search CLSID Registry Key (O101)
[HKCR\CLSID\{d1dac034-9fd9-4c13-a388-d2e10e57707f}] (Movies Toolbar (Dist. by Bandoo Media, Inc.)) =>PUP.MoviesToolbar
~ BCK: 5170 Legitimates Filtered in 00mn 05s

---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 17/05/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 18/04/2014 3645456 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
SS - | Demand 01/10/2013 279000 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
SS - | Auto 17/05/2014 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 17/05/2014 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 15/01/2014 289256 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe
SS - | Demand 06/05/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 02/05/2014 97112 | (ProtectMonitor) . (...) - C:\Program Files\PCDApp\StartHelp.exe =>Trojan.BitCoinMiner
SS - | Auto 24/02/2014 146920 | (savesenselive) . (.SaveSense.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense
SS - | Demand 24/02/2014 146920 | (savesenselivem) . (.SaveSense.) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense
SS - | Demand 07/05/2014 1628352 | (SparkUpdater) . (.Baidu.com, Inc..) - C:\Program Files (x86)\Baidu\SparkUpdate\Sparkupdate.exe =>Adware.BDSearch
SS - | Demand 22/08/2013 37768 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 08/05/2014 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 26/03/2014 166352 | (APNMCP) . (.APN LLC..) - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask
SR - | Auto 05/10/2012 110976 | (ASLDRService) . (.ASUSTek Computer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
SR - | Auto 13/04/2012 277120 | (ASUS InstantOn) . (.ASUS.) - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
SR - | Auto 19/12/2012 72192 | (Asus WebStorage Windows Service) . (...) - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
SR - | Auto 21/11/2011 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
SR - | Auto 27/03/2014 291912 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
SR - | Auto 14/03/2014 36392 | (BackupStack) . (.Just Develop It.) - C:\Program Files (x86)\MyPC Backup\BackupStack.exe =>PUP.MyPCBackup
SR - | Auto 04/12/2013 273000 | (hlsvc) . (.Highlightly.) - C:\Program Files (x86)\Highlightly\Service\hlsvc.exe
SR - | Demand 24/04/2012 169752 | (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
SR - | Auto 13/09/2012 2466448 | (IconMan_R) . (.Realsil Microelectronics Inc..) - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Auto 27/06/2012 129856 | (Intel(R) ME Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
SR - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 08/05/2014 576032 | (PCAppStoreSvc_{PCAppStore_4.3.1.5719}) . (.Baidu Inc..) - C:\Program Files (x86)\Baidu Security\PC App Store\4.3.1.5719\PCAppStoreSvc.exe =>Adware.BDSearch
SR - | Auto 27/03/2014 664560 | (PCFasterSvc_{PCFaster_4.0.0.0}) . (.Baidu Inc..) - C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\PCFasterSvc.exe =>Adware.BDSearch
SR - | Auto 12/03/2014 1558032 | (SecureAssist) . (.SecureAssist.) - c:\Program Files\SupraSavings\SecureAssist.exe =>PUP.SupraSavings
SR - | Auto 07/05/2014 80576 | (SparkSvc) . (.Baidu Inc..) - C:\Program Files (x86)\baidu\Spark26.5.9999.3313\sparkservice.exe =>Adware.BDSearch
SR - | Auto 07/05/2014 80576 | (ToolBoxService) . (.Baidu Inc..) - C:\Program Files (x86)\ToolBox\26.1.6666.420\ToolBoxService.exe =>Adware.BDSearch
SR - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Demand 10/07/1658 0 | (WdNisSvc) . (...) - C:\Program Files (x86)\Windows Defender\NisSrv.exe
SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe
SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 01/04/2014 706560 | (xmkysecqun64) . (...) - C:\Program Files\003\xmkysecqun64.exe =>PUP.AdPeak
~ Services: Scanned in 00mn 06s

---\\ Scâner Aditional (088)
Database Version : 13045 - (17/05/2014)
Clés trouvées (Keys found) : 64
Valeurs trouvées (Values found) : 4
Dossiers trouvés (Folders found) : 48
Fichiers trouvés (Files found) : 54

[HKLM\Software\Google\Chrome\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob] =>PUP.MoviesToolbar^
[HKLM\Software\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma] =>PUP.QuickStart^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F21B1E5-5AFC-43C9-9C66-515046E92EC2}] =>PUP.SaveSense^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10AD2C61-0898-4348-8600-14A342F22AC3}] =>PUP.SupraSavings^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71E129FF-6C2A-4984-818C-7E2C998B8D99}] =>PUP.SaveSense^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}] =>PUP.MoviesToolbar^
[HKLM\SYSTEM\CurrentControlSet\Services\APNMCP] =>Toolbar.Ask^
[HKLM\SYSTEM\CurrentControlSet\Services\MyPC Backup) (BackupStack] =>PUP.MyPCBackup^
[HKLM\SYSTEM\CurrentControlSet\Services\PCAppStoreSvc_{PCAppStore_4.3.1.5719}] =>Adware.BDSearch^
[HKLM\SYSTEM\CurrentControlSet\Services\PCFasterSvc_{PCFaster_4.0.0.0}] =>Adware.BDSearch^
[HKLM\SYSTEM\CurrentControlSet\Services\ProtectMonitor] =>Trojan.BitCoinMiner^
[HKLM\SYSTEM\CurrentControlSet\Services\savesenselive) (savesenselive] =>PUP.SaveSense^
[HKLM\SYSTEM\CurrentControlSet\Services\SecureAssist] =>PUP.SupraSavings^
[HKLM\SYSTEM\CurrentControlSet\Services\SparkSvc] =>Adware.BDSearch^
[HKLM\SYSTEM\CurrentControlSet\Services\ToolBoxService] =>Adware.BDSearch^
[HKLM\SYSTEM\CurrentControlSet\Services\xmkysecqun64] =>PUP.AdPeak^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\94EAE98D-444B-4817-858C-13DB943DF4F1_Activeris_A~741EE3A2_is1] =>PUP.Activeris^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5637-4300-76A7-A758B70C0A06}] =>Adware.Bandoo^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bizzybolt] =>PUP.Bizzybolt^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop] =>Adware.Lollipop^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup] =>PUP.MyPCBackup^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PCData App] =>Trojan.BitCoinMiner^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PC Health Kit_is1] =>PUP.DealPly^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Price Meter] =>PUP.PriceMeter^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense] =>PUP.SaveSense^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense] =>PUP.SaveSense^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E6B105B8-1F65-4428-9397-1DFD8A03B94D}] =>PUP.SupraSavings^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceMeterUpdater] =>PUP.PriceMeter^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\fst_br_103_is1] =>Adware.FreeSoftToday^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\iLivid] =>Adware.Bandoo^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\suprasavings] =>PUP.SupraSavings^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstaller] =>Hijacker.WebsSearches^
[HKLM\Software\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}] =>Adware.Bandoo
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] =>PUP.V9Software
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster
[HKLM\Software\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}] =>Adware.Bandoo
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}] =>Adware.Bandoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A7F05EE4-0426-454F-8013-C41E3596E9E9}] =>Adware.BDPlugin
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E5D5D4A1-17F0-41D7-B1C6-0979F91E6F46}] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster
[HKCU\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\DataMngr] =>Adware.Bandoo
[HKCU\Software\lollipop] =>Adware.Lollipop
[HKCU\Software\ilivid] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKCU\Software\Tutorials] =>Spyware.AgenceExclusive
[HKLM\Software\Wow6432Node\Tutorials] =>Spyware.AgenceExclusive
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\Software\Wow6432Node\AVG SafeGuard toolbar] =>Toolbar.AVGSafeGuard
[HKCU\Software\AskPartnerNetwork] =>Toolbar.Ask

por rodrigobnu Sáb 17 maio 2014, 23:41

[HKLM\Software\Wow6432Node\AskPartnerNetwork] =>Toolbar.Ask
[HKCU\Software\SoftwareUpdater] =>Hijacker.Eazel
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC Health Kit_is1] =>PUP.DealPly
[HKCU\Software\PC Health Kit] =>PUP.DealPly
[HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Wow6432Node\{1146AC44-2F03-4431-B4FD-889BC837521F}] =>PUP.OptimizerPro
[HKLM\Software\Classes\BaiduBarX.ToolBand.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\BaiduBarX.ToolBand.1] =>Toolbar.Agent
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{d1dac034-9fd9-4c13-a388-d2e10e57707f} =>PUP.Datamngr^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:FLV Player =>Adware.SocialSkinz^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:mobilegeni daemon =>PUP.Mobogenie^
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{84FF7BD6-B47F-46F8-9130-01B2696B36CB} =>Adware.IMBooster
C:\Users\Thaisa - Design\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob =>PUP.MoviesToolbar^
C:\Users\Thaisa - Design\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma =>PUP.QuickStart^
C:\Program Files (x86)\Activeris AntiMalware =>PUP.Activeris^
C:\Program Files (x86)\baidu =>Adware.BDSearch^
C:\Program Files (x86)\Baidu Security =>Adware.BDSearch^
C:\Program Files (x86)\Bizzybolt =>PUP.Bizzybolt^
C:\Program Files (x86)\IminentToolbar =>Adware.IMBooster^
C:\Program Files (x86)\Movies Toolbar =>PUP.MoviesToolbar^
C:\Program Files (x86)\MyPC Backup =>PUP.MyPCBackup^
C:\Program Files (x86)\PC Health Kit =>PUP.DealPly^
C:\Program Files (x86)\SaveSense =>PUP.SaveSense^
C:\Program Files (x86)\SaveSenseLive =>PUP.SaveSense^
C:\Program Files (x86)\SupraSavings =>PUP.SupraSavings^
C:\ProgramData\Activeris =>PUP.Activeris^
C:\ProgramData\baidu =>Adware.BDSearch^
C:\ProgramData\Baidu Security =>Adware.BDSearch^
C:\ProgramData\Datamngr =>PUP.Datamngr^
C:\ProgramData\SaveSenseLive =>PUP.SaveSense^
C:\Users\Thaisa - Design\AppData\Roaming\Activeris =>PUP.Activeris^
C:\Users\Thaisa - Design\AppData\Roaming\baidu =>Adware.BDSearch^
C:\Users\Thaisa - Design\AppData\Roaming\Baidu Security =>Adware.BDSearch^
C:\Users\Thaisa - Design\AppData\Roaming\IminentToolbar =>Adware.IMBooster^
C:\Users\Thaisa - Design\AppData\Roaming\newnext.me =>PUP.NextLive^
C:\Users\Thaisa - Design\AppData\Roaming\PC Health Kit =>PUP.DealPly^
C:\Users\Thaisa - Design\AppData\Roaming\PriceMeterUpdater =>PUP.PriceMeter^
C:\Users\Thaisa - Design\AppData\Roaming\SaveSense =>PUP.SaveSense^
C:\Users\Thaisa - Design\AppData\Roaming\webssearches =>Hijacker.WebsSearches^
C:\Users\Thaisa - Design\AppData\Local\genienext =>PUP.NextLive^
C:\Users\Thaisa - Design\AppData\Local\iLivid =>Adware.Bandoo^
C:\Users\Thaisa - Design\AppData\Local\Lollipop =>Adware.Lollipop^
C:\Users\Thaisa - Design\AppData\Local\PriceMeter =>PUP.PriceMeter^
C:\Users\Thaisa - Design\AppData\Local\SaveSense =>PUP.SaveSense^
C:\Users\Thaisa - Design\AppData\Local\SaveSenseLive =>PUP.SaveSense^
C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Baidu PC App Store =>Adware.BDSearch^
C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Baidu PC Faster =>Adware.BDSearch^
C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup =>PUP.MyPCBackup^
C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter =>PUP.PriceMeter^
C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense =>PUP.SaveSense^
C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop =>Adware.Lollipop^
C:\Program Files (x86)\Optimizer Pro =>PUP.OptimizerPro
C:\Program Files (x86)\AskPartnerNetwork =>Toolbar.Ask
C:\ProgramData\AskPartnerNetwork =>Toolbar.Ask
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit =>PUP.DealPly
C:\Users\Thaisa - Design\AppData\Roaming\Optimizer Pro =>PUP.OptimizerPro
C:\Users\Thaisa - Design\AppData\Local\SearchProtect =>Toolbar.Conduit
C:\Users\Thaisa - Design\AppData\LocalLow\searchresultstb =>Toolbar.Agent
C:\Users\Thaisa - Design\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\Thaisa - Design\AppData\Local\Temp\Baidu =>Adware.BDSearch
C:\Program Files (x86)\Activeris AntiMalware\ActiverisAntiMalware.exe =>PUP.Activeris^
C:\Program Files (x86)\PC Health Kit\PCHKSmartScan.exe =>PUP.DealPly^
C:\Users\Thaisa - Design\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe =>Adware.SocialSkinz^
C:\Users\Thaisa - Design\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent^
C:\Users\Thaisa - Design\AppData\Roaming\Avg_Update_0214d\AVG-Secure-Search-Update_0214d.exe =>Toolbar.AVGSearch^
C:\Program Files (x86)\Software Updater\SoftwareUpdater.exe =>PUP.Eorezo^
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe =>Toolbar.Ask^
O2 - BHO: Movies Toolbar (Dist. by Bandoo Media, Inc.) [64Bits] - {d1dac034-9fd9-4c13-a388-d2e10e57707f} Chave orfã =>PUP.MoviesToolbar^
C:\ProgramData\Avg_Update_0214d\AVG-Secure-Search-Update_0214d.exe =>Toolbar.AVGSearch^
C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\Updater.exe =>Adware.BDSearch^
C:\Program Files (x86)\PC Health Kit\PCHKLauncher.exe =>PUP.DealPly^
C:\Users\Thaisa - Design\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.exe =>PUP.SaveSense^
C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense^
C:\Program Files (x86)\baidu\Spark26.5.9999.3313\SparkUpdate.exe =>Adware.BDSearch^
C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job =>PUP.PriceMeter^
C:\Windows\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore =>PUP.PriceMeter^
C:\Windows\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job =>PUP.PriceMeter^
C:\Windows\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA =>PUP.PriceMeter^
C:\Windows\Tasks\PriceMeterUpdater.job =>PUP.PriceMeter^
C:\Windows\System32\Tasks\PriceMeterUpdater =>PUP.PriceMeter^
C:\Windows\Tasks\SaveSense.job =>Hijacker.iHaveNet^
C:\Windows\System32\Tasks\SaveSense =>PUP.SaveSense^
C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job =>PUP.SaveSense^
C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore =>PUP.SaveSense^
C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job =>PUP.SaveSense^
C:\Windows\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA =>PUP.SaveSense^
[HKCU\Software\APNDTX] =>Toolbar.Ask^
[HKCU\Software\Activeris] =>PUP.Activeris^
[HKCU\Software\Baidu Security] =>Adware.BDSearch^
[HKCU\Software\Baidu] =>Adware.BDSearch^
[HKCU\Software\Bizzybolt] =>PUP.Bizzybolt^
[HKCU\Software\Datamngr] =>PUP.Datamngr^
[HKCU\Software\PriceMeter] =>PUP.PriceMeter^
[HKCU\Software\SaveSenseLive] =>PUP.SaveSense^
[HKCU\Software\SupraSavings] =>PUP.SupraSavings^
[HKCU\Software\TutoTag] =>PUP.AgenceExclusive^
[HKCU\Software\freesofttoday] =>Adware.FreeSoftToday^
[HKLM\Software\Baidu Security] =>Adware.BDSearch^
[HKLM\Software\LevelQualityWatcher] =>PUP.LevelQualityWatcher^
[HKLM\Software\Rr Savings] =>PUP.SupraSavings^
[HKLM\Software\Wow6432Node\Activeris] =>PUP.Activeris^
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\Baidu_Drp_pos] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\Bizzybolt] =>PUP.Bizzybolt^
[HKLM\Software\Wow6432Node\Datamngr] =>PUP.Datamngr^
[HKLM\Software\Wow6432Node\SaveSenseLive] =>PUP.SaveSense^
[HKLM\Software\Wow6432Node\SupraSavings] =>PUP.SupraSavings^
[HKLM\Software\Wow6432Node\baidu] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\free_soft_to_day] =>Adware.FreeSoftToday^
C:\Users\Thaisa - Design\Desktop\utorrent.exe =>P2P.BitTorrent^
C:\Windows\Installer\38e8157.msi =>Adware.Bandoo^
C:\Windows\Installer\5b18ae0.msi =>PUP.SupraSavings^
C:\Windows\Installer\5b40371.msi =>PUP.SupraSavings^
[HKCR\CLSID\{d1dac034-9fd9-4c13-a388-d2e10e57707f}] (Movies Toolbar (Dist. by Bandoo Media, Inc.)) =>PUP.MoviesToolbar^
~ Additionnel Scan: 237963 Items scanned in 00mn 26s

---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Activeris
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.DealPly
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.SocialSkinz
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Eorezo
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Toolbar.Ask
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.MoviesToolbar
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.QuickStart
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.WebsSearches
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.Proxy
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.SaveSense
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.SupraSavings
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Datamngr
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.BDSearch
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.Bandoo
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Mobogenie
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.OptimizerPro
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.MyPCBackup
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Toolbar.Conduit
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Trojan.BitCoinMiner
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.AdPeak
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.PriceMeter
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.MegaSearch
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.iHaveNet
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Bizzybolt
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.Lollipop
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.FreeSoftToday
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.InstallCore
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.AgenceExclusive
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.IMBooster
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.NextLive
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.BitGuard
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.Eazel
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.BrowserSafeguard
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Trojan.Staser
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.JumpFlip
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Spyware.ProtectedSearch
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.SearchSettings
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.SmartBar
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Trojan.Vonteera
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.TubeDimmer
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.V9Software
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.BDPlugin
~ MSI: 42 link(s) detected in 00mn 00s

~ 1062 Legitimates filtered by white list
End of the scan (919 lines in 01mn 12s)(0)

por **Power Max** Sáb 17 maio 2014, 23:57

Seu computador está bem infectado.

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

AJUDA PAGINAS NÃO CARREGAM POR COMPLETO 772309

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

por rodrigobnu Dom 18 maio 2014, 16:30

Amigo segue abaixo relatorio..

# AdwCleaner v3.209 - Relatório criado 18/05/2014 às 16:17:21
# Atualizado 18/05/2014 por Xplode
# Sistema Operacional : Windows 8.1 Single Language (64 bits)
# Usuário : Thaisa - Design - THAISA
# Executando de : C:\Users\Thaisa - Design\Downloads\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

Serviço Deletada : APNMCP
Serviço Deletada : BackupStack
Serviço Deletada : hlnfd
Serviço Deletada : hlsvc
[#] Serviço Deletada : savesenselive
[#] Serviço Deletada : savesenselivem
[#] Serviço Deletada : SECUREASSIST
Serviço Deletada : xmkysecqun64

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\Activeris
Pasta Deletada : C:\ProgramData\apn
Pasta Deletada : C:\ProgramData\AskPartnerNetwork
Pasta Deletada : C:\ProgramData\baidu
Pasta Deletada : C:\ProgramData\DataMngr
Pasta Deletada : C:\ProgramData\PriceMeterLiveUpdate
Pasta Deletada : C:\ProgramData\SaveSenseLive
Pasta Deletada : C:\ProgramData\torchcrashhandler
Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activeris AntiMalware
Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free_soft_to_day
Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2
Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Kit
Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Updater
Pasta Deletada : C:\Program Files (x86)\Activeris AntiMalware
Pasta Deletada : C:\Program Files (x86)\AskPartnerNetwork
Pasta Deletada : C:\Program Files (x86)\baidu
Pasta Deletada : C:\Program Files (x86)\Bizzybolt
Pasta Deletada : C:\Program Files (x86)\Highlightly
Pasta Deletada : C:\Program Files (x86)\IminentToolbar
Pasta Deletada : C:\Program Files (x86)\Mobogenie
Pasta Deletada : C:\Program Files (x86)\Movies Toolbar
Pasta Deletada : C:\Program Files (x86)\MyPC Backup
Pasta Deletada : C:\Program Files (x86)\Optimizer Pro
Pasta Deletada : C:\Program Files (x86)\PC Health Kit
Pasta Deletada : C:\Program Files (x86)\PriceMeterLiveUpdate
Pasta Deletada : C:\Program Files (x86)\SaveSense
Pasta Deletada : C:\Program Files (x86)\SaveSenseLive
Pasta Deletada : C:\Program Files (x86)\SmartTweak
Pasta Deletada : C:\Program Files (x86)\Software Updater
Pasta Deletada : C:\Program Files (x86)\SupraSavings
Pasta Deletada : C:\Program Files (x86)\Uninstaller
Pasta Deletada : C:\Program Files (x86)\fst_br_103
Pasta Deletada : C:\Program Files\003
Pasta Deletada : C:\Program Files\Highlightly
Pasta Deletada : C:\Program Files\SupraSavings
Pasta Deletada : C:\Users\THAISA~1\AppData\Local\Temp\apn
Pasta Deletada : C:\Users\THAISA~1\AppData\Local\Temp\baidu
Pasta Deletada : C:\Users\Public\Documents\baidu
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\genienext
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\iLivid
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\ilividmoviestoolbar181
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\lollipop
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\Mobogenie
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\NativeMessaging
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\Pokki
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\PriceMeter
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\PriceMeterLiveUpdate
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\SaveSense
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\SaveSenseLive
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\SearchProtect
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\torch
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\webplayer
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Local\fst_br_103
Pasta Deletada : C:\Users\Thaisa - Design\AppData\LocalLow\Conduit
Pasta Deletada : C:\Users\Thaisa - Design\AppData\LocalLow\DataMngr
Pasta Deletada : C:\Users\Thaisa - Design\AppData\LocalLow\ilividmoviestoolbar181
Pasta Deletada : C:\Users\Thaisa - Design\AppData\LocalLow\IminentToolbar
Pasta Deletada : C:\Users\Thaisa - Design\AppData\LocalLow\searchresultstb
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Activeris
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\baidu
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\IminentToolbar
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\newnext.me
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Optimizer Pro
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\PC Health Kit
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\PriceMeterUpdater
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\SaveSense
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\webssearches
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop
Pasta Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\torch
Pasta Deletada : C:\Users\Thaisa - Design\Documents\Mobogenie
Pasta Deletada : C:\Users\Thaisa - Design\Documents\Optimizer Pro
Pasta Deletada : C:\Users\Thaisa - Design\Documents\PC Health Kit
Arquivo Deletada : C:\END
Arquivo Deletada : C:\Users\Public\Desktop\Activeris AntiMalware.lnk
Arquivo Deletada : C:\Users\Public\Desktop\Facebook.lnk
Arquivo Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftwareUpdater.lnk
Arquivo Deletada : C:\WINDOWS\SysWOW64\SecureAssist.ini
Arquivo Deletada : C:\WINDOWS\SysWOW64\SecureAssistOff.ini
Arquivo Deletada : C:\WINDOWS\System32\acrisnative64.exe
Arquivo Deletada : C:\WINDOWS\System32\drivers\SAWFP64.sys
Arquivo Deletada : C:\WINDOWS\System32\SecureAssist.ini
Arquivo Deletada : C:\WINDOWS\System32\SecureAssistOff.ini
Arquivo Deletada : C:\Users\Thaisa - Design\daemonprocess.txt
Arquivo Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
Arquivo Deletada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torch.lnk
Arquivo Deletada : C:\Users\Thaisa - Design\Desktop\iLivid.lnk
Arquivo Deletada : C:\Users\Thaisa - Design\Desktop\MyPC Backup.lnk
Arquivo Deletada : C:\Users\Thaisa - Design\Desktop\Optimizer Pro.lnk
Arquivo Deletada : C:\Users\Thaisa - Design\Desktop\Sync Folder.lnk
Arquivo Deletada : C:\Users\Thaisa - Design\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
Arquivo Deletada : C:\Users\Thaisa - Design\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemeterdownloader
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemetertask
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterUpdater.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterUpdater
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemeterwatcher
Arquivo Deletada : C:\WINDOWS\Tasks\SaveSense.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\SaveSense
Arquivo Deletada : C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\SaveSenseLiveUpdateTaskMachineCore
Arquivo Deletada : C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\SaveSenseLiveUpdateTaskMachineUA
Arquivo Deletada : C:\WINDOWS\System32\Tasks\SomotoUpdateCheckerAutoStart

***** [ Atalhos ] *****

Atalho Desinfectada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Atalho Desinfectada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player\Uninstall.lnk
Atalho Desinfectada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Atalho Desinfectada : C:\Users\Thaisa - Design\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registro ] *****

Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaabcbmongicmdegkmmfgdickgnnob
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\dgbjdgnkkchgleommaaapafcigjjbnmg
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Chave Deletedo : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Chave Deletedo : HKCU\Software\Classes\Applications\lollipop.exe
Chave Deletedo : HKCU\Software\Classes\Directory\shell\pokki
Chave Deletedo : HKCU\Software\Classes\Drive\shell\pokki
Chave Deletedo : HKCU\Software\Classes\iLivid.torrent
Chave Deletedo : HKCU\Software\Classes\lnkfile\shell\pokki
Chave Deletedo : HKCU\Software\Classes\pokki
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [FLV Player]
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\SaveSenseLive.exe
Chave Deletedo : HKLM\SOFTWARE\Classes\Applications\Torch.exe
Chave Deletedo : HKLM\SOFTWARE\Classes\BaiduBarEx.BDHomePage
Chave Deletedo : HKLM\SOFTWARE\Classes\BaiduBarEx.BDHomePage.4
Chave Deletedo : HKLM\SOFTWARE\Classes\iLivid.torrent
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreClass
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3COMClassService
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3COMClassService.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLive.OneClickCtrl.9
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLive.OneClickProcessLauncherMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLive.OneClickProcessLauncherMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLive.Update3WebControl.3
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoCreateAsync
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoCreateAsync.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoreClass
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoreClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoreMachineClass
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CoreMachineClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CredentialDialogMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.CredentialDialogMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassMachineFallback.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.OnDemandCOMClassSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.ProcessLauncher
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.ProcessLauncher.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3COMClassService
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3COMClassService.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebMachineFallback
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebMachineFallback.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\SaveSenseLiveUpdate.Update3WebSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\ActiverisAntiMalware_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\ActiverisAntiMalware_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=3
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=9
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=3
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=9
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\TorchVLC
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{76A60138-58B3-4E27-85FB-8FEF344A8998}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{A2D3FB7A-6873-45E8-AF96-57092D721828}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{0F21B1E5-5AFC-43C9-9C66-515046E92EC2}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{10AD2C61-0898-4348-8600-14A342F22AC3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{71E129FF-6C2A-4984-818C-7E2C998B8D99}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{998745A3-2AE4-488D-8092-B98FB20A00C2}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{A2D3FB7A-6873-45E8-AF96-57092D721828}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{A7F05EE4-0426-454F-8013-C41E3596E9E9}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{B580CF65-E151-49C3-B73F-70B13FCA8E86}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{C1424421-D274-491E-9D47-11C8D8CB5F9A}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{9863E762-BACC-46E4-8CAA-2A6ADA06B65B}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0F21B1E5-5AFC-43C9-9C66-515046E92EC2}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10AD2C61-0898-4348-8600-14A342F22AC3}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71E129FF-6C2A-4984-818C-7E2C998B8D99}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0F21B1E5-5AFC-43C9-9C66-515046E92EC2}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10AD2C61-0898-4348-8600-14A342F22AC3}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{71E129FF-6C2A-4984-818C-7E2C998B8D99}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0F21B1E5-5AFC-43C9-9C66-515046E92EC2}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10AD2C61-0898-4348-8600-14A342F22AC3}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{71E129FF-6C2A-4984-818C-7E2C998B8D99}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A7F05EE4-0426-454F-8013-C41E3596E9E9}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A18D16ED-27B2-4B83-B70C-15E73F099546}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BEE7E029-5037-4DAD-A2DB-82E397AB1A44}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D1DAC034-9FD9-4C13-A388-D2E10E57707F}]
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EF41A4-BA24-4E49-A2C0-E1D047299287}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{130CCD34-0382-48E5-B307-0E7E72166828}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{26D25DD5-F17A-4D93-9A94-997E2124EEB4}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{30279F40-D76B-443C-A34D-F43B35B35CE1}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{796D0AA0-DC0E-44C9-A398-C874F04D55A4}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{CE2102F0-DF63-452E-9CA7-0F75FF4DDD4B}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{DADFCC6F-66D2-4E1D-A01B-7064CAD2F583}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{EBE666C3-F26C-4CF6-8ABA-3D5F5D2625E1}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D1DAC034-9FD9-4C13-A388-D2E10E57707F}
Valor Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D1DAC034-9FD9-4C13-A388-D2E10E57707F}]
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Chave Deletedo : HKCU\Software\APNDTX
Chave Deletedo : HKCU\Software\AskPartnerNetwork
Chave Deletedo : HKCU\Software\DataMngr
Chave Deletedo : HKCU\Software\FreeSoftToday
Chave Deletedo : HKCU\Software\ilivid
Chave Deletedo : HKCU\Software\ilividmoviestoolbar181
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\lollipop
Chave Deletedo : HKCU\Software\Optimizer Pro
Chave Deletedo : HKCU\Software\PC Health Kit
Chave Deletedo : HKCU\Software\Pokki
Chave Deletedo : HKCU\Software\SaveSense
Chave Deletedo : HKCU\Software\SaveSenseLive
Chave Deletedo : HKCU\Software\smarttweak
Chave Deletedo : HKCU\Software\SoftwareUpdater
Chave Deletedo : HKCU\Software\suprasavings
Chave Deletedo : HKCU\Software\torch
Chave Deletedo : HKCU\Software\Tutorials
Chave Deletedo : HKCU\Software\TutoTag
Chave Deletedo : HKCU\Software\Webplayer
Chave Deletedo : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKCU\Software\AppDataLow\Software\Conduit
Chave Deletedo : HKCU\Software\AppDataLow\Software\ilividmoviestoolbar181
Chave Deletedo : HKCU\Software\AppDataLow\Software\Rr Savings
Chave Deletedo : HKCU\Software\AppDataLow\Software\Supra Savings
Chave Deletedo : HKCU\Software\AppDataLow\Software\suprasavings
Chave Deletedo : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Chave Deletedo : HKLM\Software\AskPartnerNetwork
Chave Deletedo : HKLM\Software\AVG SafeGuard toolbar
Chave Deletedo : HKLM\Software\DataMngr
Chave Deletedo : HKLM\Software\free_soft_to_day
Chave Deletedo : HKLM\Software\Iminent
Chave Deletedo : HKLM\Software\SaveSense
Chave Deletedo : HKLM\Software\SaveSenseLive
Chave Deletedo : HKLM\Software\suprasavings
Chave Deletedo : HKLM\Software\torch
Chave Deletedo : HKLM\Software\Tutorials
Chave Deletedo : HKLM\Software\webssearchesSoftware
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\torch
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DMUninstaller
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbar181CR
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbar181IE
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Health Kit_is1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SaveSense
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Software Updater_is1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpeedUpMyComputer
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstaller
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fst_br_103_is1
Chave Deletedo : [x64] HKLM\SOFTWARE\LevelQualityWatcher
Chave Deletedo : [x64] HKLM\SOFTWARE\Rr Savings
Chave Deletedo : [x64] HKLM\SOFTWARE\suprasavings
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\suprasavings
Dados Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Dados Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\OPTIMI~1\OPTPRO~3.DLL
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SaveSenseLive.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.17037

Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v29.0.1 (pt-BR)

[ Arquivo : C:\Users\Thaisa - Design\AppData\Roaming\Mozilla\Firefox\Profiles\b4shhzer.default-1400354541088\prefs.js ]

-\\ Google Chrome v34.0.1847.137

[ Arquivo : C:\Users\Thaisa - Design\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deletedo [Extension] : aaaaabcbmongicmdegkmmfgdickgnnob
Deletedo [Extension] : bopakagnckmlgajfccecajhnimjiiedh
Deletedo [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma

*************************

AdwCleaner[R0].txt - [32791 octets] - [18/05/2014 16:15:17]
AdwCleaner[S0].txt - [29114 octets] - [18/05/2014 16:17:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [29175 octets] ##########

por **Power Max** Dom 18 maio 2014, 16:33

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

AJUDA PAGINAS NÃO CARREGAM POR COMPLETO 772309

Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

por rodrigobnu Dom 18 maio 2014, 16:38

amigo...voltou tudo ao normal...ainda preciso fazer o procedimento que vc solicitou?

por **Power Max** Dom 18 maio 2014, 16:50

rodrigobnu escreveu:amigo...voltou tudo ao normal...ainda preciso fazer o procedimento que vc solicitou?

Ainda há adwares no seu PC, é importante usar o Zoek como lhe passei.

por **Danii** Ter 03 Jun 2014, 19:09

TÓPICO ARQUIVADO

Como o autor não respondeu por mais de 15 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.

por Conteúdo patrocinado

AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Re: AJUDA PAGINAS NÃO CARREGAM POR COMPLETO

Seg	Ter	Qua	Qui	Sex	Sáb	Dom
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31