Tela azul "win32k.sys"

por otavio.dosv Qua 04 Jun 2014, 20:20

Deu tela azul, como de costume... várias vezes com a mesma mensagem

"win32k.sys"
Por favor me ajude!

Código:: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:17:29, on 04/06/2014 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe C:\Program Files\V-bates\notifier.exe C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files\AVAST Software\Avast\avastui.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Otavio\Downloads\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file) F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: V-bates Helper - {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - C:\Program Files\V-bates\Extension32.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE') O15 - Trusted Zone: *.clonewarsadventures.com O15 - Trusted Zone: *.freerealms.com O15 - Trusted Zone: *.soe.com O15 - Trusted Zone: *.sony.com O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: BattlEye Service (BEService) - Unknown owner - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe O23 - Service: eBoostr Service (EBOOSTRSVC) - eBoostr.com - C:\Program Files\eBoostr\EBstrSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe O23 - Service: Mext Guard - Wajamu - C:\Program Files\V-bates\guardsvc.exe O23 - Service: Motorola Device Manager Service (Motorola Device Manager) - Motorola Mobility LLC - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: PST Service - Motorola - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: V-bates Updater - Unknown owner - C:\Program Files\V-bates\ExtensionUpdaterService.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9874 bytes

por **Power Max** Qua 04 Jun 2014, 20:29

Olá Otavio.

Tela azul "win32k.sys" 772309

Desinstale este programa: V-bates
________________________________________________________________________

Tela azul "win32k.sys" 772309

Depois de desinstalar o programa acima, faça o download do Malwarebytes em um destes links abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para instalá-lo e executá-lo corretamente siga, por gentileza, as dicas desta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log (relatório) do Malwarebytes.

Ficamos no aguardo.

por otavio.dosv Qua 04 Jun 2014, 22:48

Ai está. Segui conforme pediu.

Código:: Malwarebytes Anti-Malware www.malwarebytes.org Data de Verificação: 04/06/2014 Hora da Verificação: 20:49:17 Logfile: LOG.txt Administrador: Sim Versão: 2.00.2.1012 Malware Database: v2014.03.04.09 Rootkit Database: v2014.06.02.01 Licença: Trial Proteção de Malware: Enabled Proteção de Site Malicioso: Enabled Self-protection: Desabilitado OS: Windows 7 CPU: x64 Sistema de Arquivo: NTFS Usuário: Otavio Tipo da Verificação: Verificação Personalizada Resultado: Completado Arquivos Verificados: 403883 Tempo Decorrido: 1 hr, 12 min, 37 seg Memória: Enabled Inicialização: Enabled Filesystem: Enabled Arquivos: Enabled Rootkits: Desabilitado Heuristics: Enabled PUP: Enabled PUM: Enabled Processos: 0 (No malicious items detected) Módulos: 0 (No malicious items detected) Chaves de Registro: 6 PUP.Optional.Iminent.A, HKU\S-1-5-21-1515256812-1842429688-2436314066-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [2a1fc43b6911d264cd11393aa55d9e62], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, Quarantined, [76d307f8ea900234ca7f01731be741bf], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, Quarantined, [7fcacb343248251174d6f38157ab8878], Adware.LolliPop.IT, HKU\S-1-5-21-1515256812-1842429688-2436314066-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\lollipop, Quarantined, [aa9f35cac8b257dfcb6dbdd6d62d28d8], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, Quarantined, [f4556c93c8b2b680e1913d58956dd52b], PUP.Optional.Iminent.A, HKU\S-1-5-21-1515256812-1842429688-2436314066-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Iminent, Quarantined, [76d38f7089f13303cda6851003ff8b75], Valores de Registro: 6 PUP.Optional.Iminent.A, HKU\S-1-5-21-1515256812-1842429688-2436314066-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [2a1fc43b6911d264cd11393aa55d9e62], PUP.Optional.Iminent.A, HKU\S-1-5-21-1515256812-1842429688-2436314066-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Quarantined, [95b4d926b6c4b185dc022b484db56f91], PUP.Optional.VBates, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, Quarantined, [361312ed5d1d0630f39d4af640c2b947], PUP.Optional.VBates, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, Quarantined, [361312ed5d1d0630f39d4af640c2b947] PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}, C:\Program Files\V-bates\Firefox, Quarantined, [361312ed5d1d0630f39d4af640c2b947] PUP.Optional.VBates, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}, Quarantined, [5ceddf20f1899f97533d0b35659dec14], Dados do Registro: 0 (No malicious items detected) Pastas: 2 Adware.LolliPop.IT, C:\Users\Otavio\AppData\Local\Lollipop, Quarantined, [aa9f35cac8b257dfcb6dbdd6d62d28d8], PUP.Optional.Iminent.A, C:\Users\Otavio\AppData\Roaming\IminentToolbar, Quarantined, [c386a25de892c571bba3dbadc141748c], Arquivos: 10 RiskWare.Tool.HCK, C:\Program Files\Sony\Vegas Pro 11.0\Keygen.exe, Quarantined, [89c052ad3149f83e930e728678894ab6], Malware.Packer.Gen, C:\Program Files (x86)\Adobe Photoshop CS3\Msvcrt.dll, Quarantined, [28215ea1403af046978d2f5e817fd030], PUP.Optional.Soft32.A, C:\Users\Otavio\Downloads\spotflux setup.exe, Quarantined, [d574a35cb6c47fb7d208750489782ed2], PUP.Optional.OpenCandy, C:\Users\Otavio\Downloads\56-DTLite4491-0356.exe, Quarantined, [c1880df2cbaf5dd927bfc38eda2aec14], Adware.LolliPop.IT, C:\Users\Otavio\AppData\Local\Lollipop\lollipop.bat, Quarantined, [aa9f35cac8b257dfcb6dbdd6d62d28d8], Adware.LolliPop.IT, C:\Users\Otavio\AppData\Local\Lollipop\lollipop.dat, Quarantined, [aa9f35cac8b257dfcb6dbdd6d62d28d8], Adware.LolliPop.IT, C:\Users\Otavio\AppData\Local\Lollipop\lollipop.lpd, Quarantined, [aa9f35cac8b257dfcb6dbdd6d62d28d8], Adware.LolliPop.IT, C:\Users\Otavio\AppData\Local\Lollipop\lollipop_cfg.lpd, Quarantined, [aa9f35cac8b257dfcb6dbdd6d62d28d8], Adware.LolliPop.IT, C:\Users\Otavio\AppData\Local\Lollipop\lollipop_ps.lpd, Quarantined, [aa9f35cac8b257dfcb6dbdd6d62d28d8], PUP.Optional.Iminent.A, C:\Users\Otavio\AppData\Roaming\IminentToolbar\sqlite3.dll, Quarantined, [c386a25de892c571bba3dbadc141748c], Physical Sectors: 0 (No malicious items detected) (end)

por **Power Max** Qua 04 Jun 2014, 23:10

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

por otavio.dosv Qua 04 Jun 2014, 23:19

Ai está:

Código:: # AdwCleaner v3.211 - Relatório criado 04/06/2014 às 23:16:10 # Atualizado 26/05/2014 por Xplode # Sistema Operacional : Windows 7 Ultimate (64 bits) # Usuário : Otavio - OTAVIO-PC # Executando de : C:\Users\Otavio\Downloads\AdwCleaner.exe # Opção : Limpar ***** [ Serviços ] ***** ***** [ Arquivos / Pastas ] ***** [!] Pasta Deletada : C:\Program Files\V-bates Arquivo Deletada : C:\Users\Otavio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\lollipop.lnk Arquivo Deletada : C:\Users\Otavio\AppData\Roaming\Mozilla\Firefox\Profiles\rdwbq0fo.default\user.js Arquivo Deletada : C:\Users\Otavio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage ***** [ Atalhos ] ***** ***** [ Registro ] ***** Chave Deletedo : HKCU\Software\Classes\Applications\lollipop.exe Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\IMinentToolbar_RASAPI32 Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\IMinentToolbar_RASMANCS Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Lollipop_RASAPI32 Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Lollipop_RASMANCS Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_raidcall_RASAPI32 Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_raidcall_RASMANCS Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_realtek-hd-audio-drivers_RASAPI32 Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_realtek-hd-audio-drivers_RASMANCS Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB} Chave Deletedo : HKCU\Software\anchorfree Chave Deletedo : HKCU\Software\lollipop Chave Deletedo : HKCU\Software\Softonic Chave Deletedo : HKCU\Software\WEDLMNGR Chave Deletedo : HKCU\Software\AppDataLow\Software ***** [ Navegadores ] ***** -\\ Internet Explorer v8.0.7600.16385 -\\ Mozilla Firefox v29.0 (pt-BR) [ Arquivo : C:\Users\Otavio\AppData\Roaming\Mozilla\Firefox\Profiles\rdwbq0fo.default\prefs.js ] -\\ Google Chrome v35.0.1916.114 [ Arquivo : C:\Users\Otavio\AppData\Local\Google\Chrome\User Data\Default\preferences ] Deletedo [Search Provider] : hxxp://www.doko-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=10020018E7283470&affID=125836&tsp=5040 Deletedo [Search Provider] : hxxp://br.ask.com/web?q={searchTerms} Deletedo [Search Provider] : hxxp://www.softonic.com.br/s/{searchTerms} Deletedo [Startup_urls] : hxxp://www.doko-search.com/?babsrc=HP_ss&mntrId=10020018E7283470&affID=125836&tsp=5040 ************************* AdwCleaner[R0].txt - [2861 octets] - [04/06/2014 23:15:23] AdwCleaner[S0].txt - [2811 octets] - [04/06/2014 23:16:10] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2871 octets] ##########

por **Power Max** Qua 04 Jun 2014, 23:30

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Tela azul "win32k.sys" 772309

Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

por otavio.dosv Qui 05 Jun 2014, 00:01

Código:: Zoek.exe v5.0.0.0 Updated 02-June-2014 Tool run by Otavio on 04/06/2014 at 23:40:14,15. Microsoft Windows 7 Ultimate 6.1.7600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Otavio\Downloads\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 04/06/2014 23:41:15 Zoek.exe System Restore Point Created Succesfully. ==== Reset Hosts File ====================== # Copyright (c) 1993-2006 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host # localhost name resolution is handle within DNS itself. 127.0.0.1 localhost ::1 localhost ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== FireFox Fix ====================== Deleted from C:\Users\Otavio\AppData\Roaming\Mozilla\Firefox\Profiles\rdwbq0fo.default\prefs.js: Added to C:\Users\Otavio\AppData\Roaming\Mozilla\Firefox\Profiles\rdwbq0fo.default\prefs.js: user_pref("browser.startup.homepage", "http://www.google.com"); user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.newtab.url", "http://www.google.com/"); user_pref("browser.search.defaultengine", "Google"); user_pref("browser.search.defaultenginename", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.search.suggest.enabled", true); user_pref("browser.search.useDBForOrder", true); ==== Deleting Files \ Folders ====================== C:\Users\Otavio\.android deleted C:\PROGRA~2\GUTBD46.tmp deleted C:\PROGRA~2\GUMBD45.tmp deleted C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\Hotspot Shield deleted C:\PROGRA~3\Package Cache deleted C:\Users\Otavio\Downloads\HSS-3.41-install-hss-561-conduit.exe deleted "C:\Windows\Installer\bf4b77.msi" deleted "C:\ProgramData\droidcam-settings" deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [22/04/2014 23:46] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Otavio\AppData\Roaming\Mozilla\Firefox\Profiles\rdwbq0fo.default - avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF - Undetermined - C:\Program Files\V-bates\Firefox AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Otavio\AppData\Roaming\Mozilla\Firefox\Profiles\rdwbq0fo.default C10124951491578DDFDF44B33CA41C6F - C:\Users\Otavio\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer CE936F5D5A19A82627DBC3381658CD2F - C:\Users\Otavio\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin A58DE0A570148AF5FF3512B2A340D09F - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll - Shockwave Flash 785105A23650755A8F7A72405EB0D923 - C:\Users\Otavio\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll - Google Update 84A176D49D40379AEDF123008E27BA33 - C:\Users\Otavio\AppData\Roaming\raidcall\plugins\nprcplugin.dll - Raidcall plugin DDC58F83CB93B89F7261CDFCFC6E7832 - C:\Users\Otavio\AppData\Roaming\rcru\plugins\nprcplugin.dll - Raidcall plugin ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[22/04/2014 23:46] Google Drive - Otavio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Otavio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Otavio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf SaveFrom.net helper - Otavio\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdpljndcmbeikfnlflcggaipgnhiedbl Google Wallet - Otavio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Battlefield Play4Free - Otavio\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh Gmail - Otavio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Reset Google Chrome ====================== C:\Users\Otavio\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Otavio\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== shortcuts on Users Desktops ====================== C:\Users\Otavio\Desktop\7DaysToDie - Atalho.lnk - C:\Program Files (x86)\7DaysToDie\p2p-7days\7DaysToDie.exe C:\Users\Otavio\Desktop\AikaOnline.lnk - C:\T3fun\AikaOnline\AIKALauncher.exe C:\Users\Otavio\Desktop\Dragon's Prophet.lnk - C:\Users\Public\Sony Online Entertainment\Installed Games\Dragons Prophet\LaunchPad.exe C:\Users\Otavio\Desktop\League Of Legends.lnk - C:\Riot Games\League of Legends\lol.launcher.admin.exe C:\Users\Otavio\Desktop\Play SimCity 2013 Offline.lnk - C:\Program Files (x86)\SimCity 2013 Offline\play-SimCity.exe C:\Users\Otavio\Desktop\PointBlank.lnk - C:\ongame\Pointblank\PBLauncher.exe C:\Users\Otavio\Desktop\Tudo\CCleaner.lnk - C:\Program Files (x86)\CCleaner\CCleaner64.exe C:\Users\Otavio\Desktop\Tudo\Photoshop.lnk - C:\Program Files (x86)\Adobe Photoshop CS3\Photoshop.exe ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Action.lnk - C:\Users\Public\Desktop\Need for Speed World.lnk - C:\Program Files (x86)\Origin Games\Need for Speed World\GameLauncher.exe C:\Users\Public\Desktop\Plants vs. Zombies.lnk - C:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe C:\Users\Public\Desktop\Tibia.lnk - C:\Program Files (x86)\Tibia\Tibia.exe C:\Users\Public\Desktop\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe ==== shortcuts in Users Start Menu ====================== C:\Users\Otavio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Battlefield 1942™ .lnk - ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk - C:\Windows\Installer\{AC76BA86-7AD7-1046-7B44-AB0000000001}\SC_Reader.ico C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AikaOnline\AikaOnline.lnk - C:\T3fun\AikaOnline\AIKALauncher.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AikaOnline\Uninstall.lnk - C:\T3fun\AikaOnline\uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\DAEMON Tools Lite.lnk - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\DTGadget.lnk - C:\Program Files (x86)\DAEMON Tools Lite\DT.gadget C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite\SPTD Setup.lnk - C:\Program Files (x86)\DAEMON Tools Lite\SPTDinst-x64.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Need For Speed™ World.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Plants vs. Zombies™.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\LogMeIn Hamachi.lnk - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\Uninstall.lnk - C:\Windows\SysWOW64\msiexec.exe /i {C22378E6-9A65-438E-964C-7DB8FBB568DE} REMOVE=ALL C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed World\Contrato de Licença para Usuário Final da Need for Speed World.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed World\Leia-me.lnk - C:\Program Files (x86)\Origin Games\Need for Speed World\Support\readme\Leiame.pt-br.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed World\Need for Speed World.lnk - C:\Program Files (x86)\Origin Games\Need for Speed World\GameLauncher.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed World\Suporte Técnico.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero ControlCenter.lnk - C:\Windows\Installer\{ABC88553-8770-4B97-B43E-5A90647A5B63}\ScControlCenterSta_FC2653898C5047A6A872CAF6433C43A8.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 2014\Nero Burning ROM.lnk - C:\Windows\Installer\{F2B9C8D6-C69C-4BA7-95D2-66F1C68D15DA}\ARPPRODUCTICON.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\GFExperience.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision Photo Viewer.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\3D Vision preview pack 1.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /show C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Disable 3D Vision.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /disable C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\3D Vision\Enable 3D Vision.lnk - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstlink.exe /enable C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plants vs. Zombies\Plants vs. Zombies End User License Agreement.lnk - C:\Program Files (x86)\Origin Games\Plants vs. Zombies\Plants vs. Zombies EN\eula.rtf C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plants vs. Zombies\Plants vs. Zombies.lnk - C:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plants vs. Zombies\Read Me.lnk - C:\Program Files (x86)\Origin Games\Plants vs. Zombies\Plants vs. Zombies EN\readme.html C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plants vs. Zombies\Technical Support.lnk - C:\Program Files (x86)\Origin Games\Plants vs. Zombies\Support\EA Help\Technical Support.en_US.rtf C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia\Tibia Website.lnk - C:\Program Files (x86)\Tibia\Tibia.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia\Tibia.lnk - C:\Program Files (x86)\Tibia\Tibia.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia\Uninstall Tibia.lnk - C:\Program Files (x86)\Tibia\unins000.exe ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk - C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Action.lnk - C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\lol.launcher.lnk - C:\Riot Games\League of Legends\lol.launcher.admin.exe C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Minecraft.lnk - C:\Users\Otavio\Desktop\Minecraft.exe C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PointBlank.lnk - C:\ongame\Pointblank\PBLauncher.exe C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Skype.lnk - C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Users\Otavio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - ==== Reset IE Proxy ====================== Value(s) before fix: "ProxyOverride"="<local>;192.168.*.*" "ProxyEnable"=dword:00000000 Value(s) after fix: "ProxyEnable"=dword:00000000 ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8E20A97294C06C549A608EFD5A4B62D1 deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{279A02E8-0C49-45C6-A906-E8DFA5B4261D} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8E20A97294C06C549A608EFD5A4B62D1 deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD AVT deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Autodesk Sync deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MKLOL deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Otavio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Otavio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I5PVEVB4 will be deleted at reboot C:\Users\Otavio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KUW9RP5L will be deleted at reboot C:\Users\Otavio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Otavio\AppData\Local\Mozilla\Firefox\Profiles\rdwbq0fo.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Otavio\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=88 folders=19 306189041 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Otavio\AppData\Local\Temp will be emptied at reboot C:\Users\USURIO~1\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Otavio\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Otavio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Users\Otavio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I5PVEVB4" not found "C:\Users\Otavio\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KUW9RP5L" not found ==== EOF on 04/06/2014 at 23:58:13,90 ======================

por otavio.dosv Qui 05 Jun 2014, 00:01

Desculpe a copia.

por **Power Max** Qui 05 Jun 2014, 00:04

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

por otavio.dosv Qui 05 Jun 2014, 00:14

Código:: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Ultimate x64 Ran by Otavio on 05/06/2014 at 0:05:09,34 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASAPI32 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASMANCS ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 05/06/2014 at 0:14:19,96 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

por **Power Max** Qui 05 Jun 2014, 00:16

Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

Para instalá-lo e executá-lo corretamente siga as dicas deste artigo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a sua verificação, copie todo o conteúdo do seu relatório ZHPDiag.txt e poste em sua próxima resposta.

por otavio.dosv Qui 05 Jun 2014, 00:21

Código:: ~ Relatório do ZHPDiag v2014.5.30.78 - Nicolas Coolman (30/05/2014) ~ Iniciado por Otavio (05/06/2014 00:19:05) ~ Endereço do Website : http://nicolascoolman.fr ~ Tradução pelo utilizador ~ Estatuto da versão : Nova Versão disponivel ~ Lista Branca : Ativado pelo programa ~ Elevação dos Privilégios : OK ~ Controle de Conta de Utilizador : Deactivate by user ---\\ Navegadores Internet MSIE: Internet Explorer v8.0.7600.16385 MFIE: Mozilla Firefox 29.0 GCIE: Google Chrome v35.0.1916.114 (Defaut) ---\\ Informações sobre os produtos Windows ~ Langage: Portugais Windows 7 Ultimate, 64-bit (Build 7600) Windows Server License Manager Script : OK Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Softwares de proteçao do sistema avast! Free Antivirus v9.0.2018 Windows Defender W7 (Activate) ---\\ Softwares d'optimização do sistema CCleaner v4.09 ---\\ Softwares de partilha do PeerToPeer (P2P) ---\\ Monitoramento dos softwares Adobe Flash Player 13 Plugin Adobe Reader XI Java 7 Update 55 ---\\ Informações sobre o sistema ~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 4095 MB (46% free) System Restore: Activé (Enable) System drive C: has 189 GB (63%) free of 298 GB ---\\ Modo de conexão ao sistema ~ Computer Name: OTAVIO-PC ~ User Name: Otavio ~ All Users Names: Otavio, HomeGroupUser$, Convidado, Administrador, ~ Unselected Option: 045,061,O62,065,066,080,O82,089 Logged in as Administrator ---\\ As variáveis de ambiente ~ System Unit : C:\ ~ %AppZHP% : C:\Users\Otavio\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\Otavio\AppData\Roaming\ ~ %Desktop% : C:\Users\Otavio\Desktop\ ~ %Favorites% : C:\Users\Otavio\Favorites\ ~ %LocalAppData% : C:\Users\Otavio\AppData\Local\ ~ %StartMenu% : C:\Users\Otavio\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumeração das unidades dos discos A: Floppy drive, Flash card reader, USB Key (Not Inserted) C: Hard drive, Flash drive, Thumb drive (Free 189 Go of 298 Go) D: CD-ROM drive (Not Inserted) E: CD-ROM drive (Not Inserted) ---\\ Estado do Centro de Segurança do Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ~ Security Center: 48 Legitimates Filtered in 00mn 00s ---\\ Pesquisa particular de ficheiros genéricos [MD5.C235A51CB740E45FFA0EBFB9BAFCDA64] - (.Microsoft Corporation - Windows Explorer.) (.13/07/2009 - 22:39:10.) -- C:\Windows\Explorer.exe [2868224] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 22:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.B1037F0131C9A010D611F6914E03CD92] - (.Microsoft Corporation - Internet Extensions para Win32.) (.13/07/2009 - 22:41:56.) -- C:\Windows\System32\wininet.dll [1193472] [MD5.132328DF455B0028F13BF0ABEE51A63A] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.13/07/2009 - 22:39:52.) -- C:\Windows\System32\Winlogon.exe [389120] [MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.13/07/2009 - 22:41:54.) -- C:\Windows\System32\sppcomapi.dll [231936] [MD5.B9384E03479D2506BC924C16A3DB87BC] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.13/07/2009 - 20:21:42.) -- C:\Windows\system32\Drivers\AFD.sys [500224] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 22:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 20:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/07/2009 - 20:19:54.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.3F1DC527070ACB87E40AFE46EF6DA749] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.13/07/2009 - 20:23:44.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.13/07/2009 - 21:06:13.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 20:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 21:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.CFDCD8CA87C2A657DEBC150AC35B5E08] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.13/07/2009 - 20:24:00.) -- C:\Windows\system32\Drivers\MRxSmb.sys [157184] [MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) (.13/07/2009 - 20:21:29.) -- C:\Windows\system32\Drivers\netBT.sys [259072] [MD5.356698A13C4630D5B31C37378D469196] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.13/07/2009 - 22:48:27.) -- C:\Windows\system32\Drivers\ntfs.sys [1659984] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 21:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/07/2009 - 21:10:12.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [130048] [MD5.9706B84DBABFC4B4CA46C5A82B14DFA3] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/07/2009 - 21:18:02.) -- C:\Windows\system32\Drivers\rdpdr.sys [165376] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 21:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) (.13/07/2009 - 20:21:15.) -- C:\Windows\system32\Drivers\tdx.sys [99840] [MD5.58F82EED8CA24B461441F9C3E4F0BF5C] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.13/07/2009 - 22:45:55.) -- C:\Windows\system32\Drivers\volsnap.sys [294992] ~ Generic Processes: Scanned in 00mn 00s ---\\ Estatuto dos ficheiros ocultos (Oculto/Total) ~ Mes images (My Pictures) : 1/75 ~ Mes musiques (My Musics) : 61/165 ~ Mes Videos (My Videos) : 1/2 ~ Mes Favoris (My Favorites) : 1/2 ~ Mes Documents (My Documents) : 1/66 ~ Mon Bureau (My Desktop) : 1/338 ~ Menu demarrer (Programs) : 1/48 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processos lançados [MD5.44FE94FCDF97E574B6986C5A81758628] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840] [PID.2544] [MD5.CAA0C16ADCCE6142A43AD83BFA20B38B] - (.Motorola Mobility LLC - MotoHelperAgent.) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe [698680] [PID.2652] [MD5.CC78200C3ECFFA178E78308A0E160D80] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe [4672920] [PID.3040] [MD5.9D4A0ECBF734E2EECDD5B473A2D705FE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016] [PID.3228] [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.3348] [MD5.92BC91BEB19BE1F03DB9664AD47120B2] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [3888648] [PID.3400] [MD5.1620FE36666F4BBC2314B7F360FB1965] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488] [PID.4192] [MD5.6D652B06EB3916DC41A9DBBBC4EDEED1] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8020480] [PID.3444] [MD5.718D79F2E7EC3AFFD3661DA81F93BBEA] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [413128] [PID.828] [MD5.37D17AE2936867F88EB3C4CBCBC6B8A1] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1284] [MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.1952] [MD5.3817558D8D5BBC8B0F190CF0D7C4720F] - (.Autodesk, Inc. - Content Service.) -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288] [PID.1044] [MD5.7ED3A9C3763725BD700946971215EE77] - (.Motorola Mobility LLC - MotoHelper Service.) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528] [PID.2204] [MD5.C22ADABFABBC2B7AC189C87D87B1ABD6] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696] [PID.2424] [MD5.3A2E85F7D90D15460C337CE80C2E3B29] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.2756] [MD5.EA735BF6DF13A857A83C99BF27A422AD] - (.Motorola - ForwardDemon.) -- C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657] [PID.2780] [MD5.E59AFB64C2F6E0C99350E1C944C75088] - (.Nero AG - NeroUpdate.) -- C:\Program Files (x86)\Nero\Update\NASvc.exe [762192] [PID.3600] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2) C:\Users\Otavio\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé) ---\\ Pasta de extensão do Google Chrome ~ Google Lines Browser: 16 Legitimates Filtered in 00mn 01s ---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3) C:\Users\Otavio\AppData\Roaming\Mozilla\Firefox\Profiles\rdwbq0fo.default\prefs.js ~ Firefox Browser: 7 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Gestão do Proxy (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;192.168.*.* R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Redireção do ficheiro Hosts (01) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Outras conexões do utilizador (04) O4 - GS\QuickLaunch [Otavio]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Global Startup: 1 Legitimates Filtered in 00mn 01s ---\\ Aplicações iniciadas por registo & pastas (04) O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe O4 - HKLM\..\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-1515256812-1842429688-2436314066-1001\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe O4 - HKUS\S-1-5-21-1515256812-1842429688-2436314066-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. ~ Application: Scanned in 00mn 00s ---\\ Site na zona confiavél do Internet Explorer (05) O15 - Trusted Zone: [HKCU\...\Domains] *.clonewarsadventures.com O15 - Trusted Zone: [HKCU\...\Domains] *.freerealms.com O15 - Trusted Zone: [HKCU\...\Domains] *.soe.com O15 - Trusted Zone: [HKCU\...\Domains] *.sony.com ~ IE Zone Confiance: Scanned in 00mn 00s ---\\ Alteração Dominio/Clientes DNS (017) O17 - HKLM\System\CCS\Services\Tcpip\..\{8258A647-1D19-495F-8332-1ED96E25BAB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{8258A647-1D19-495F-8332-1ED96E25BAB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{8258A647-1D19-495F-8332-1ED96E25BAB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocolo adicional (018) O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\system32\urlmon.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Lista dos serviços NT não Microsoft e não desativados (023) O23 - Service: eBoostr Service (EBOOSTRSVC) . (.eBoostr.com - eBoostr cache generator.) - C:\Program Files\eBoostr\EBstrSvc.exe ~ Services: 16 Legitimates Filtered in 00mn 05s ---\\ Tarefas planificadas automaticamente (039) [MD5.E8AF385B8C4B7EDAF5BDB4785DCAA3F1] [APT] [EVGAPrecision] (...) -- C:\Program Files (x86)\EVGA Precision\EVGAPrecision.exe [355432] [MD5.B6037110B175707A353B12C814D34968] [APT] [Motorola Device Manager Engine] (...) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [196920] [MD5.B6037110B175707A353B12C814D34968] [APT] [Motorola Device Manager Initial Update] (...) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [196920] [MD5.B6037110B175707A353B12C814D34968] [APT] [Motorola Device Manager Update] (...) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [196920] [MD5.22F9E234C56AE680A36F59BA48B456BD] [APT] [{37C5B73F-F771-4DAC-A58B-97B045184C55}] (...) -- C:\Users\Otavio\Downloads\clonedvd.exe [1459348] O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1064] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1068] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1515256812-1842429688-2436314066-1001Core [1030] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1515256812-1842429688-2436314066-1001UA [1082] O39 - APT: - (..) -- C:\Windows\Tasks\SlimDrivers Startup.job [412] O39 - APT: - (..) -- C:\Windows\System32\Tasks\SlimDrivers Startup [412] ~ Scheduled Task: 27 Legitimates Filtered in 00mn 03s ---\\ Software instalados (042) O42 - Logiciel: AikaOnline - (.HanbitSoft.) [HKLM][64Bits] -- AikaOnline O42 - Logiciel: Global - (...) [HKCU][64Bits] -- Global O42 - Logiciel: MKLOL - (...) [HKCU][64Bits] -- MKLOL O42 - Logiciel: Warface - (.Level Up! Games.) [HKLM][64Bits] -- {094FAADD-5A39-4C64-911A-B4C9AD818484}_is1 O42 - Logiciel: eBoostr 4 - (.eBoostr.) [HKLM][64Bits] -- eBoostr 1 ~ Logic: 28 Legitimates Filtered in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\Baidu Security] [HKCU\Software\Drivers] [HKCU\Software\LeNinjaZ] [HKCU\Software\System32] [HKCU\Software\Win] [HKCU\Software\eboostr] [HKLM\Software\Wow6432Node\Baidu Security] [HKLM\Software\Wow6432Node\Baidu_Drp_pos] [HKLM\Software\Wow6432Node\DroidCam] [HKLM\Software\Wow6432Node\RCBR] [HKLM\Software\Wow6432Node\agamemnon] [HKLM\Software\eBoostr] [HKLM\Software\v7slicldr] ~ Key Software: 332 Legitimates Filtered in 00mn 00s ---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 17/05/2014 - 17:50:59 - [] ----D C:\Program Files (x86)\7DaysToDie O43 - CFD: 20/12/2013 - 14:28:42 - [] ----D C:\ProgramData\Baidu Security O43 - CFD: 05/06/2014 - 00:19:19 - [] ----D C:\ProgramData\eboostr O43 - CFD: 12/01/2014 - 22:20:11 - [] ----D C:\ProgramData\FARO O43 - CFD: 01/06/2014 - 18:10:44 - [] ----D C:\Users\Otavio\AppData\Roaming\.technic O43 - CFD: 02/03/2014 - 22:05:52 - [] ----D C:\Users\Otavio\AppData\Roaming\rcru O43 - CFD: 01/06/2014 - 13:05:44 - [] ----D C:\Users\Otavio\AppData\Local\DayZ O43 - CFD: 17/01/2014 - 08:28:11 - [] ----D C:\Users\Otavio\AppData\Local\DeathZ Entertainment O43 - CFD: 23/04/2014 - 23:00:12 - [] ----D C:\Users\Otavio\AppData\Local\LeNinja Z - Game O43 - CFD: 07/01/2014 - 09:17:14 - [] ----D C:\Users\Otavio\AppData\Local\OtLand O43 - CFD: 30/05/2014 - 19:12:04 - [0] ----D C:\Users\Otavio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AikaOnline O43 - CFD: 07/01/2014 - 09:08:06 - [] ----D C:\Users\Otavio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Global ~ Program Folder: 211 Legitimates Filtered in 00mn 00s ---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044) O44 - LFC:[MD5.9FA44E747737A8E1C78F32D3B31EB7E2] - 02/06/2014 - 23:42:38 ---A- . (...) -- C:\Windows\System32\nvcoproc.bin [3774821] O44 - LFC:[MD5.D882241777E509EE536B48B3A3B413A7] - 03/06/2014 - 20:36:34 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [146056] O44 - LFC:[MD5.40AA9F0CDC4840C9683F56A905892A4D] - 03/06/2014 - 20:36:34 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [703270] O44 - LFC:[MD5.9CFEFD62D86DABFAC12D1C5ED72BA6A4] - 04/06/2014 - 23:18:00 ---A- . (...) -- C:\Windows\System32\Drivers\SWDUMon.sys [16152] O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 04/06/2014 - 23:40:02 ---A- . (...) -- C:\Windows\zoek-delete.exe [24064] O44 - LFC:[MD5.3C55BDAF538552B86802618761D675DE] - 04/06/2014 - 23:58:13 ---A- . (...) -- C:\zoek-results.log [20009] ~ Files: 28 Legitimates Filtered in 00mn 02s ---\\ Chave do registo Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{19d0d024-b90c-11e3-9c06-9b899fcc63eb}\AutoRun\command. (...) -- E:\MotorolaDeviceManagerSetup.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Pesquisa de infeções nos drivers (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"VIDC.FICV"="ficvdec_x64.dll" . (...) -- C:\Windows\System32\ficvdec_x64.dll ~ TDSD: 5 Legitimates Filtered in 00mn 00s ---\\ Enumeração das chaves do registo StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\RaidCall [Key] . (.RAIDCALL.COM - Raidcall.) -- C:\Program Files (x86)\RaidCall\raidcall.exe O53 - SMSR:HKLM\...\startupreg\uTorrent [Key] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ SMSR Keys: 5 Legitimates Filtered in 00mn 00s ---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 18 Legitimates Filtered in 00mn 00s ---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s ---\\ Lista dos drivers do sistema (SDL) (O58) O58 - SDL:22/04/2014 - 23:46:40 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208] =>.ALWIL Software O58 - SDL:22/04/2014 - 23:46:40 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776] =>.ALWIL Software O58 - SDL:22/04/2014 - 23:46:40 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [208416] =>.ALWIL Software O58 - SDL:19/04/2014 - 13:44:53 ---A- . (.Dev47Apps - Virtual Audio Device.) -- C:\Windows\System32\Drivers\droidcam.sys [25216] O58 - SDL:17/04/2012 - 09:37:26 ---A- . (.eBoostr.com - eBoostr Filter Driver.) -- C:\Windows\System32\Drivers\eBoost.sys [189816] O58 - SDL:13/07/2009 - 22:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:10/06/2009 - 17:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:13/07/2009 - 22:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:04/06/2014 - 23:18:00 ---A- . (...) -- C:\Windows\System32\Drivers\SWDUMon.sys [16152] O58 - SDL:16/05/2014 - 21:42:38 ---A- . (.Anchorfree Inc. - Anchorfree HSS VPN Adapter.) -- C:\Windows\System32\Drivers\taphss6.sys [42184] O58 - SDL:28/05/2013 - 20:12:28 ---A- . (.Spotflux, Inc. - Spotflux Network Device Driver.) -- C:\Windows\System32\Drivers\tapSF0901.sys [39104] ~ Drivers: 74 Legitimates Filtered in 00mn 02s ---\\ Lista das ferramentas de remoção de vírus (LAT) (063) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Lista dos serviços Legacy du registo (064) O64 - Services: CurCS - 22/04/2014 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID O64 - Services: CurCS - 22/04/2014 - C:\Windows\System32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM O64 - Services: CurCS - 17/04/2012 - C:\Windows\System32\drivers\eBoost.sys (eBoost) .(.eBoostr.com - eBoostr Filter Driver.) - LEGACY_EBOOST O64 - Services: CurCS - 30/04/2014 - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys (NvStreamKms) .(.NVIDIA Corporation - Nvidia Streaming Kernel Service.) - LEGACY_NVSTREAMKMS O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV ~ Legacy: 83 Legitimates Filtered in 00mn 00s ---\\ Associações Shell Spawning (O67) O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 12 Legitimates Filtered in 00mn 00s ---\\ Menu de inicialização Internet (068) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84) [MD5.3C166BAE84553D4CB27AF8ABDC61712D] [SPRF][17/12/2013] (...) -- C:\Users\Otavio\Desktop\Minecraft.exe [675988] [MD5.30965ACD7FBA179254E0311B17A491D1] [SPRF][19/03/2014] (...) -- C:\Program Files (x86)\update-simcity.bat [226] ~ Files: 3 Legitimates Filtered in 00mn 00s ---\\ Lista das exceções do FireWall (FirewallRules) (O87) O87 - FAEL: "{4A665055-A68A-4C0C-B1B2-678E3AA5BD47}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{9567337C-E7FB-47B4-BF9C-A344CAC37FD4}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{CDB64437-D99D-48FC-9D75-EEA872140600}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{9F3D0753-2DB6-4755-94B9-F6566A75224F}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Firewall: 4 Legitimates Filtered in 00mn 01s ---\\ Search Tracing Registry Key (O100) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentUninstall_RASAPI32 =>Adware.IMBooster HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentUninstall_RASMANCS =>Adware.IMBooster HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_1712-b2fcad5e_RASAPI32 =>Adware.IMBooster HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_1712-b2fcad5e_RASMANCS =>Adware.IMBooster HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_14657_RASAPI32 =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_14657_RASMANCS =>Adware.Lollipop HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utorrent_RASAPI32 =>P2P.µTorrent HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utorrent_RASMANCS =>P2P.µTorrent ~ BTK: 270 Legitimates Filtered in 00mn 00s ---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados) SS - | Demand 13/05/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 06/01/2014 49152 | (BEService) . (...) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe SS - | Demand 12/01/2014 1471352 | (FlexNet Licensing Service 64) . (.Flexera Software LLC.) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe SS - | Auto 20/12/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 20/12/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 22/04/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 26/11/2013 569768 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SS - | Disabled 13/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 21/12/2013 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - | Auto 30/04/2013 238080 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 13/12/2012 12288 | (Autodesk Content Service) . (.Autodesk, Inc..) - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe SR - | Auto 22/04/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Auto 17/04/2012 814328 | (EBOOSTRSVC) . (.eBoostr.com.) - C:\Program Files\eBoostr\EBstrSvc.exe SR - | Auto 15/11/2013 137528 | (Motorola Device Manager) . (.Motorola Mobility LLC.) - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe SR - | Auto 18/07/2013 762192 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe SR - | Auto 30/04/2014 1617696 | (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe SR - | Auto 30/04/2014 21007192 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe SR - | Auto 19/05/2014 927520 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SR - | Auto 02/09/2011 65657 | (PST Service) . (.Motorola.) - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe SR - | Auto 19/05/2014 413128 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SR - | Auto 31/12/1999 27768 | (VIAKaraokeService) . (.VIA Technologies, Inc..) - C:\Windows\System32\viakaraokesrv.exe SR - | Auto 13/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation ~ Services: Scanned in 00mn 07s ---\\ Scâner Aditional (088) Database Version : 13026 - (30/05/2014) Clés trouvées (Keys found) : 2 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent] =>P2P.BitTorrent^ [HKLM\Software\v7slicldr] =>Trojan.Dropper ~ Additionnel Scan: 233281 Items scanned in 00mn 33s ---\\ Sumário das deteções encontradas na sua estação http://nicolascoolman.fr/adware-imbooster =>Adware.IMBooster http://nicolascoolman.fr/adware-lollipop =>Adware.Lollipop http://nicolascoolman.fr/32616924-trojan-dropper =>Trojan.Dropper ~ MSI: 3 link(s) detected in 00mn 00s ~ 898 Legitimates filtered by white list End of the scan (477 lines in 01mn 20s)(0)

por **Power Max** Qui 05 Jun 2014, 00:42

Há programas desnecessários iniciando junto com o Windows, o que torna o seu PC mais lento. Para corrigir isto, siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

De preferência deixe apenas os programas de segurança (anti-vírus/anti-spywares/firewall) iniciarem junto com o Windows.

Use também o programa Ccleaner, indicado neste tutorial acima, para fazer uma limpeza e otimização do PC agora e de tempos em tempos.
_____________________________________________________________________________________________________________

Acesse o site [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e envie este arquivo destacado em negrito abaixo para ser analisado:
C:\Users\Otavio\Downloads\clonedvd.exe

Assim que a análise dele for concluída, copie o link que aparecerá na barra de endereços de seu navegador e poste este link em sua próxima resposta juntamente com o relatório do ZHPFix pedido abaixo nesta postagem.

Maiores informações de como analisar arquivos no site Virus Total você encontra neste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_________________________________________________________________________________________________________________

Tela azul "win32k.sys" 772309

Selecione e copie todo o texto destacado em vermelho abaixo que te passei.

_____________________________________________________________________________________________________________

Tela azul "win32k.sys" 772309

Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta juntamente com o link da análise do arquivo no site Virus Total.

por otavio.dosv Qui 05 Jun 2014, 12:52

Link VirusTotal:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

ZHPFix:

Código:: Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014 Fichier d'export Registre : Run by Otavio at 05/06/2014 12:49:13 High Elevated Privileges : OK Windows 7 Ultimate Edition, 64-bit (Build 7600) Reciclagem vazia (00mn 02s) Reparação de atalhos do navegador ========== Chaves do Registo ========== ELIMINÉ: HKCU\Software\Baidu Security ELIMINÉ: HKLM\Software\Wow6432Node\Baidu Security ELIMINÉ: HKLM\Software\Wow6432Node\Baidu_Drp_pos ELIMINÉ:* HKLM\Software\v7slicldr ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentUninstall_RASAPI32 ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentUninstall_RASMANCS ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_1712-b2fcad5e_RASAPI32 ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Iminent_1712-b2fcad5e_RASMANCS ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_14657_RASAPI32 ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\LollipopInstaller_14657_RASMANCS ========== Valores do Registo ========== ProxyFix : Configuração proxy removida com sucesso ELIMINÉ ProxyServer Value ELIMINÉ ProxyEnable Value ELIMINÉ EnableHttp1_1 Value ELIMINÉ ProxyHttp1.1 Value ELIMINÉ ProxyOverride Value ========== Pastas ========== Nenhuma pasta CLSID local utilizador vazia ========== Ficheiros ========== ELIMINÉ Temporários windows (121) (1.884.550 octets) ELIMINÉ Flash Cookies (0) (0 octets) ========== Restauração Sistema ========== Ponto de restauro do sistema criado com sucesso ========== Recapitulativo ========== 10 : Chaves do Registo 6 : Valores do Registo 1 : Pastas 2 : Ficheiros 1 : Restauração Sistema End of clean in 00mn 25s ========== Caminho do ficheiro do relatório ========== C:\Users\Otavio\AppData\Roaming\ZHP\ZHPFix[R1].txt - 05/06/2014 12:49:15 [1773]

por **Power Max** Qui 05 Jun 2014, 12:56

Abra novamente o ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Clique "SEARCH" ou "PESQUISAR" e aguarde a conclusão.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

por otavio.dosv Qui 05 Jun 2014, 13:01

Código:: ~ Relatório do ZHPDiag v2014.5.30.78 - Nicolas Coolman (30/05/2014) ~ Iniciado por Otavio (05/06/2014 12:59:22) ~ Endereço do Website : http://nicolascoolman.fr ~ Tradução pelo utilizador ~ Estatuto da versão : Nova Versão disponivel ~ Lista Branca : Ativado pelo programa ~ Elevação dos Privilégios : OK ~ Controle de Conta de Utilizador : Deactivate by user ---\\ Navegadores Internet MSIE: Internet Explorer v8.0.7600.16385 MFIE: Mozilla Firefox 29.0 GCIE: Google Chrome v35.0.1916.114 (Defaut) ---\\ Informações sobre os produtos Windows ~ Langage: Portugais Windows 7 Ultimate, 64-bit (Build 7600) Windows Server License Manager Script : OK Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Softwares de proteçao do sistema avast! Free Antivirus v9.0.2018 Windows Defender W7 (Activate) ---\\ Softwares d'optimização do sistema CCleaner v4.09 ---\\ Softwares de partilha do PeerToPeer (P2P) ---\\ Monitoramento dos softwares Adobe Flash Player 13 Plugin Adobe Reader XI Java 7 Update 55 ---\\ Informações sobre o sistema ~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 4095 MB (45% free) System Restore: Activé (Enable) System drive C: has 189 GB (63%) free of 298 GB ---\\ Modo de conexão ao sistema ~ Computer Name: OTAVIO-PC ~ User Name: Otavio ~ All Users Names: Otavio, HomeGroupUser$, Convidado, Administrador, ~ Unselected Option: 045,061,O62,065,066,080,O82,089 Logged in as Administrator ---\\ As variáveis de ambiente ~ System Unit : C:\ ~ %AppZHP% : C:\Users\Otavio\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\Otavio\AppData\Roaming\ ~ %Desktop% : C:\Users\Otavio\Desktop\ ~ %Favorites% : C:\Users\Otavio\Favorites\ ~ %LocalAppData% : C:\Users\Otavio\AppData\Local\ ~ %StartMenu% : C:\Users\Otavio\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumeração das unidades dos discos A: Floppy drive, Flash card reader, USB Key (Not Inserted) C: Hard drive, Flash drive, Thumb drive (Free 189 Go of 298 Go) D: CD-ROM drive (Not Inserted) E: CD-ROM drive (Not Inserted) ---\\ Estado do Centro de Segurança do Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ~ Security Center: 48 Legitimates Filtered in 00mn 00s ---\\ Pesquisa particular de ficheiros genéricos [MD5.C235A51CB740E45FFA0EBFB9BAFCDA64] - (.Microsoft Corporation - Windows Explorer.) (.13/07/2009 - 22:39:10.) -- C:\Windows\Explorer.exe [2868224] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 22:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.B1037F0131C9A010D611F6914E03CD92] - (.Microsoft Corporation - Internet Extensions para Win32.) (.13/07/2009 - 22:41:56.) -- C:\Windows\System32\wininet.dll [1193472] [MD5.132328DF455B0028F13BF0ABEE51A63A] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.13/07/2009 - 22:39:52.) -- C:\Windows\System32\Winlogon.exe [389120] [MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.13/07/2009 - 22:41:54.) -- C:\Windows\System32\sppcomapi.dll [231936] [MD5.B9384E03479D2506BC924C16A3DB87BC] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.13/07/2009 - 20:21:42.) -- C:\Windows\system32\Drivers\AFD.sys [500224] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 22:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 20:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/07/2009 - 20:19:54.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.3F1DC527070ACB87E40AFE46EF6DA749] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.13/07/2009 - 20:23:44.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.13/07/2009 - 21:06:13.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 20:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 21:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.CFDCD8CA87C2A657DEBC150AC35B5E08] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.13/07/2009 - 20:24:00.) -- C:\Windows\system32\Drivers\MRxSmb.sys [157184] [MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) (.13/07/2009 - 20:21:29.) -- C:\Windows\system32\Drivers\netBT.sys [259072] [MD5.356698A13C4630D5B31C37378D469196] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.13/07/2009 - 22:48:27.) -- C:\Windows\system32\Drivers\ntfs.sys [1659984] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 21:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/07/2009 - 21:10:12.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [130048] [MD5.9706B84DBABFC4B4CA46C5A82B14DFA3] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/07/2009 - 21:18:02.) -- C:\Windows\system32\Drivers\rdpdr.sys [165376] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 21:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) (.13/07/2009 - 20:21:15.) -- C:\Windows\system32\Drivers\tdx.sys [99840] [MD5.58F82EED8CA24B461441F9C3E4F0BF5C] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.13/07/2009 - 22:45:55.) -- C:\Windows\system32\Drivers\volsnap.sys [294992] ~ Generic Processes: Scanned in 00mn 00s ---\\ Estatuto dos ficheiros ocultos (Oculto/Total) ~ Mes images (My Pictures) : 1/75 ~ Mes musiques (My Musics) : 61/165 ~ Mes Videos (My Videos) : 1/2 ~ Mes Favoris (My Favorites) : 1/2 ~ Mes Documents (My Documents) : 1/66 ~ Mon Bureau (My Desktop) : 1/339 ~ Menu demarrer (Programs) : 1/48 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processos lançados [MD5.44FE94FCDF97E574B6986C5A81758628] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840] [PID.1568] [MD5.CC78200C3ECFFA178E78308A0E160D80] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe [4672920] [PID.1688] [MD5.9D4A0ECBF734E2EECDD5B473A2D705FE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016] [PID.1712] [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.2360] [MD5.92BC91BEB19BE1F03DB9664AD47120B2] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [3888648] [PID.2500] [MD5.CAA0C16ADCCE6142A43AD83BFA20B38B] - (.Motorola Mobility LLC - MotoHelperAgent.) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe [698680] [PID.296] [MD5.1620FE36666F4BBC2314B7F360FB1965] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488] [PID.1268] [MD5.6D652B06EB3916DC41A9DBBBC4EDEED1] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8020480] [PID.4312] [MD5.718D79F2E7EC3AFFD3661DA81F93BBEA] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [413128] [PID.856] [MD5.37D17AE2936867F88EB3C4CBCBC6B8A1] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344] [PID.1448] [MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.1852] [MD5.3817558D8D5BBC8B0F190CF0D7C4720F] - (.Autodesk, Inc. - Content Service.) -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288] [PID.1996] [MD5.7ED3A9C3763725BD700946971215EE77] - (.Motorola Mobility LLC - MotoHelper Service.) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528] [PID.2792] [MD5.C22ADABFABBC2B7AC189C87D87B1ABD6] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696] [PID.2356] [MD5.3A2E85F7D90D15460C337CE80C2E3B29] - (...) -- C:\Windows\SysWOW64\PnkBstrA.exe [76888] [PID.2980] [MD5.EA735BF6DF13A857A83C99BF27A422AD] - (.Motorola - ForwardDemon.) -- C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657] [PID.2148] [MD5.E59AFB64C2F6E0C99350E1C944C75088] - (.Nero AG - NeroUpdate.) -- C:\Program Files (x86)\Nero\Update\NASvc.exe [762192] [PID.2348] ~ Processes Running: Scanned in 00mn 00s ---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2) C:\Users\Otavio\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé) G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé) ---\\ Pasta de extensão do Google Chrome ~ Google Lines Browser: 16 Legitimates Filtered in 00mn 01s ---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3) C:\Users\Otavio\AppData\Roaming\Mozilla\Firefox\Profiles\rdwbq0fo.default\prefs.js ~ Firefox Browser: 7 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Gestão do Proxy (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Redireção do ficheiro Hosts (01) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Outras conexões do utilizador (04) O4 - GS\QuickLaunch [Otavio]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Global Startup: 1 Legitimates Filtered in 00mn 01s ---\\ Aplicações iniciadas por registo & pastas (04) O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe O4 - HKLM\..\Run: [HDAudDeck] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-1515256812-1842429688-2436314066-1001\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Otavio\AppData\Local\Akamai\netsession_win.exe O4 - HKUS\S-1-5-21-1515256812-1842429688-2436314066-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. ~ Application: Scanned in 00mn 00s ---\\ Site na zona confiavél do Internet Explorer (05) O15 - Trusted Zone: [HKCU\...\Domains] *.clonewarsadventures.com O15 - Trusted Zone: [HKCU\...\Domains] *.freerealms.com O15 - Trusted Zone: [HKCU\...\Domains] *.soe.com O15 - Trusted Zone: [HKCU\...\Domains] *.sony.com ~ IE Zone Confiance: Scanned in 00mn 00s ---\\ Alteração Dominio/Clientes DNS (017) O17 - HKLM\System\CCS\Services\Tcpip\..\{8258A647-1D19-495F-8332-1ED96E25BAB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{8258A647-1D19-495F-8332-1ED96E25BAB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{8258A647-1D19-495F-8332-1ED96E25BAB3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocolo adicional (018) O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\system32\urlmon.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Lista dos serviços NT não Microsoft e não desativados (023) O23 - Service: eBoostr Service (EBOOSTRSVC) . (.eBoostr.com - eBoostr cache generator.) - C:\Program Files\eBoostr\EBstrSvc.exe ~ Services: 16 Legitimates Filtered in 00mn 06s ---\\ Tarefas planificadas automaticamente (039) [MD5.E8AF385B8C4B7EDAF5BDB4785DCAA3F1] [APT] [EVGAPrecision] (...) -- C:\Program Files (x86)\EVGA Precision\EVGAPrecision.exe [355432] [MD5.B6037110B175707A353B12C814D34968] [APT] [Motorola Device Manager Engine] (...) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [196920] [MD5.B6037110B175707A353B12C814D34968] [APT] [Motorola Device Manager Initial Update] (...) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [196920] [MD5.B6037110B175707A353B12C814D34968] [APT] [Motorola Device Manager Update] (...) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [196920] [MD5.00000000000000000000000000000000] [APT] [{37C5B73F-F771-4DAC-A58B-97B045184C55}] (...) -- C:\Users\Otavio\Downloads\clonedvd.exe (.not file.) [0] O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1064] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1068] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1515256812-1842429688-2436314066-1001Core [1030] O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1515256812-1842429688-2436314066-1001UA [1082] O39 - APT: - (..) -- C:\Windows\Tasks\SlimDrivers Startup.job [412] O39 - APT: - (..) -- C:\Windows\System32\Tasks\SlimDrivers Startup [412] ~ Scheduled Task: 27 Legitimates Filtered in 00mn 03s ---\\ Software instalados (042) O42 - Logiciel: AikaOnline - (.HanbitSoft.) [HKLM][64Bits] -- AikaOnline O42 - Logiciel: Global - (...) [HKCU][64Bits] -- Global O42 - Logiciel: MKLOL - (...) [HKCU][64Bits] -- MKLOL O42 - Logiciel: Warface - (.Level Up! Games.) [HKLM][64Bits] -- {094FAADD-5A39-4C64-911A-B4C9AD818484}_is1 O42 - Logiciel: eBoostr 4 - (.eBoostr.) [HKLM][64Bits] -- eBoostr 1 ~ Logic: 28 Legitimates Filtered in 00mn 00s ---\\ HKCU & HKLM Software Keys [HKCU\Software\Drivers] [HKCU\Software\LeNinjaZ] [HKCU\Software\System32] [HKCU\Software\Win] [HKCU\Software\eboostr] [HKLM\Software\Wow6432Node\DroidCam] [HKLM\Software\Wow6432Node\RCBR] [HKLM\Software\Wow6432Node\agamemnon] [HKLM\Software\eBoostr] ~ Key Software: 328 Legitimates Filtered in 00mn 00s ---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 17/05/2014 - 17:50:59 - [] ----D C:\Program Files (x86)\7DaysToDie O43 - CFD: 05/06/2014 - 12:59:34 - [] ----D C:\ProgramData\eboostr O43 - CFD: 12/01/2014 - 22:20:11 - [] ----D C:\ProgramData\FARO O43 - CFD: 01/06/2014 - 18:10:44 - [] ----D C:\Users\Otavio\AppData\Roaming\.technic O43 - CFD: 02/03/2014 - 22:05:52 - [] ----D C:\Users\Otavio\AppData\Roaming\rcru O43 - CFD: 01/06/2014 - 13:05:44 - [] ----D C:\Users\Otavio\AppData\Local\DayZ O43 - CFD: 17/01/2014 - 08:28:11 - [] ----D C:\Users\Otavio\AppData\Local\DeathZ Entertainment O43 - CFD: 23/04/2014 - 23:00:12 - [] ----D C:\Users\Otavio\AppData\Local\LeNinja Z - Game O43 - CFD: 07/01/2014 - 09:17:14 - [] ----D C:\Users\Otavio\AppData\Local\OtLand O43 - CFD: 30/05/2014 - 19:12:04 - [0] ----D C:\Users\Otavio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AikaOnline O43 - CFD: 07/01/2014 - 09:08:06 - [] ----D C:\Users\Otavio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Global ~ Program Folder: 210 Legitimates Filtered in 00mn 00s ---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044) O44 - LFC:[MD5.9FA44E747737A8E1C78F32D3B31EB7E2] - 02/06/2014 - 23:42:38 ---A- . (...) -- C:\Windows\System32\nvcoproc.bin [3774821] O44 - LFC:[MD5.D882241777E509EE536B48B3A3B413A7] - 03/06/2014 - 20:36:34 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [146056] O44 - LFC:[MD5.40AA9F0CDC4840C9683F56A905892A4D] - 03/06/2014 - 20:36:34 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [703270] O44 - LFC:[MD5.9CFEFD62D86DABFAC12D1C5ED72BA6A4] - 04/06/2014 - 23:18:00 ---A- . (...) -- C:\Windows\System32\Drivers\SWDUMon.sys [16152] O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 04/06/2014 - 23:40:02 ---A- . (...) -- C:\Windows\zoek-delete.exe [24064] O44 - LFC:[MD5.3C55BDAF538552B86802618761D675DE] - 04/06/2014 - 23:58:13 ---A- . (...) -- C:\zoek-results.log [20009] ~ Files: 28 Legitimates Filtered in 00mn 02s ---\\ Chave do registo Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{19d0d024-b90c-11e3-9c06-9b899fcc63eb}\AutoRun\command. (...) -- E:\MotorolaDeviceManagerSetup.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Pesquisa de infeções nos drivers (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"VIDC.FICV"="ficvdec_x64.dll" . (...) -- C:\Windows\System32\ficvdec_x64.dll ~ TDSD: 5 Legitimates Filtered in 00mn 00s ---\\ Enumeração das chaves do registo StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\RaidCall [Key] . (.RAIDCALL.COM - Raidcall.) -- C:\Program Files (x86)\RaidCall\raidcall.exe O53 - SMSR:HKLM\...\startupreg\uTorrent [Key] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ SMSR Keys: 5 Legitimates Filtered in 00mn 00s ---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 18 Legitimates Filtered in 00mn 00s ---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s ---\\ Lista dos drivers do sistema (SDL) (O58) O58 - SDL:22/04/2014 - 23:46:40 ---A- . (...) -- C:\Windows\System32\Drivers\aswHwid.sys [29208] =>.ALWIL Software O58 - SDL:22/04/2014 - 23:46:40 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys [65776] =>.ALWIL Software O58 - SDL:22/04/2014 - 23:46:40 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys [208416] =>.ALWIL Software O58 - SDL:19/04/2014 - 13:44:53 ---A- . (.Dev47Apps - Virtual Audio Device.) -- C:\Windows\System32\Drivers\droidcam.sys [25216] O58 - SDL:17/04/2012 - 09:37:26 ---A- . (.eBoostr.com - eBoostr Filter Driver.) -- C:\Windows\System32\Drivers\eBoost.sys [189816] O58 - SDL:13/07/2009 - 22:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:10/06/2009 - 17:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:13/07/2009 - 22:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:04/06/2014 - 23:18:00 ---A- . (...) -- C:\Windows\System32\Drivers\SWDUMon.sys [16152] O58 - SDL:16/05/2014 - 21:42:38 ---A- . (.Anchorfree Inc. - Anchorfree HSS VPN Adapter.) -- C:\Windows\System32\Drivers\taphss6.sys [42184] O58 - SDL:28/05/2013 - 20:12:28 ---A- . (.Spotflux, Inc. - Spotflux Network Device Driver.) -- C:\Windows\System32\Drivers\tapSF0901.sys [39104] ~ Drivers: 74 Legitimates Filtered in 00mn 02s ---\\ Lista das ferramentas de remoção de vírus (LAT) (063) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Lista dos serviços Legacy du registo (064) O64 - Services: CurCS - 22/04/2014 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid) .(...) - LEGACY_ASWHWID O64 - Services: CurCS - 22/04/2014 - C:\Windows\System32\Drivers\aswVmm.sys (aswVmm) .(...) - LEGACY_ASWVMM O64 - Services: CurCS - 17/04/2012 - C:\Windows\System32\drivers\eBoost.sys (eBoost) .(.eBoostr.com - eBoostr Filter Driver.) - LEGACY_EBOOST O64 - Services: CurCS - 30/04/2014 - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys (NvStreamKms) .(.NVIDIA Corporation - Nvidia Streaming Kernel Service.) - LEGACY_NVSTREAMKMS O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV ~ Legacy: 83 Legitimates Filtered in 00mn 00s ---\\ Associações Shell Spawning (O67) O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 12 Legitimates Filtered in 00mn 00s ---\\ Menu de inicialização Internet (068) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com ~ Keys: Scanned in 00mn 00s ---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84) [MD5.3C166BAE84553D4CB27AF8ABDC61712D] [SPRF][17/12/2013] (...) -- C:\Users\Otavio\Desktop\Minecraft.exe [675988] [MD5.30965ACD7FBA179254E0311B17A491D1] [SPRF][19/03/2014] (...) -- C:\Program Files (x86)\update-simcity.bat [226] ~ Files: 3 Legitimates Filtered in 00mn 00s ---\\ Lista das exceções do FireWall (FirewallRules) (O87) O87 - FAEL: "{4A665055-A68A-4C0C-B1B2-678E3AA5BD47}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{9567337C-E7FB-47B4-BF9C-A344CAC37FD4}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{CDB64437-D99D-48FC-9D75-EEA872140600}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent O87 - FAEL: "{9F3D0753-2DB6-4755-94B9-F6566A75224F}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Otavio\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent ~ Firewall: 4 Legitimates Filtered in 00mn 01s ---\\ Search Tracing Registry Key (O100) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utorrent_RASAPI32 =>P2P.µTorrent HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utorrent_RASMANCS =>P2P.µTorrent ~ BTK: 264 Legitimates Filtered in 00mn 00s ---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados) SS - | Demand 13/05/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 06/01/2014 49152 | (BEService) . (...) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe SS - | Demand 12/01/2014 1471352 | (FlexNet Licensing Service 64) . (.Flexera Software LLC.) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe SS - | Auto 20/12/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 20/12/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 22/04/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 26/11/2013 569768 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SS - | Disabled 13/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 21/12/2013 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - | Auto 30/04/2013 238080 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 13/12/2012 12288 | (Autodesk Content Service) . (.Autodesk, Inc..) - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe SR - | Auto 22/04/2014 50344 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - | Auto 17/04/2012 814328 | (EBOOSTRSVC) . (.eBoostr.com.) - C:\Program Files\eBoostr\EBstrSvc.exe SR - | Auto 15/11/2013 137528 | (Motorola Device Manager) . (.Motorola Mobility LLC.) - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe SR - | Auto 18/07/2013 762192 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe SR - | Auto 30/04/2014 1617696 | (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe SR - | Auto 30/04/2014 21007192 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe SR - | Auto 19/05/2014 927520 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe SR - | Auto 02/09/2011 65657 | (PST Service) . (.Motorola.) - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe SR - | Auto 19/05/2014 413128 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SR - | Auto 31/12/1999 27768 | (VIAKaraokeService) . (.VIA Technologies, Inc..) - C:\Windows\System32\viakaraokesrv.exe SR - | Auto 13/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation ~ Services: Scanned in 00mn 06s ---\\ Scâner Aditional (088) Database Version : 13026 - (30/05/2014) Clés trouvées (Keys found) : 1 Valeurs trouvées (Values found) : 1 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 [HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent] =>P2P.BitTorrent^ ~ Additionnel Scan: 233048 Items scanned in 00mn 25s ---\\ Sumário das deteções encontradas na sua estação ~ MSI: 0 link(s) detected in 00mn 00s ~ 893 Legitimates filtered by white list End of the scan (462 lines in 01mn 10s)(0)

por **Power Max** Qui 05 Jun 2014, 13:55

Programas desnecessários continuam iniciando junto com o Windows, seria importante seguir aquele tutorial que te passei para corrigir esta questão.
______________________________________________________________________

Tela azul "win32k.sys" 772309

Selecione e copie todo o texto destacado em vermelho abaixo que te passei.
____________________________________________________________________________________________________________

Tela azul "win32k.sys" 772309

Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta e nos diga como está o PC depois disto.

por otavio.dosv Qui 05 Jun 2014, 15:17

Código:: Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014 Fichier d'export Registre : Run by Otavio at 05/06/2014 15:14:57 High Elevated Privileges : OK Windows 7 Ultimate Edition, 64-bit (Build 7600) Reciclagem vazia (00mn 03s) Reparação de atalhos do navegador ========== Pastas ========== Nenhuma pasta CLSID local utilizador vazia ========== Ficheiros ========== ELIMINÉ Temporários windows (4) (26.684 octets) ELIMINÉ Flash Cookies (0) (0 octets) ========== Tarefa planificada ========== ELIMINÉ: {37C5B73F-F771-4DAC-A58B-97B045184C55} ========== Restauração Sistema ========== Ponto de restauro do sistema criado com sucesso ========== Recapitulativo ========== 1 : Pastas 2 : Ficheiros 1 : Tarefa planificada 1 : Restauração Sistema End of clean in 00mn 30s ========== Caminho do ficheiro do relatório ========== C:\Users\Otavio\AppData\Roaming\ZHP\ZHPFix[R1].txt - 05/06/2014 12:49:15 [1854] C:\Users\Otavio\AppData\Roaming\ZHP\ZHPFix[R2].txt - 05/06/2014 15:15:01 [960]

por **Power Max** Qui 05 Jun 2014, 15:18

como está o PC?

por otavio.dosv Dom 08 Jun 2014, 13:04

Novamente deu o mesmo problema, tela azul com a mesma mensagem.

por **Power Max** Dom 08 Jun 2014, 13:29

Desative temporariamente seu antivirus para evitar conflitos.

Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( de g3n-h@ckm@n )
|- Ao acessar o link acima, role a página e clique em Télécharger para fazer o download: [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Execute-o da forma indicada nesta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Assim que a limpeza for concluída, poste o log (relatório) que estará em C:\Shortcut_Module_07_05_2014_17_05_22.txt (estes números em vermelho irão variar pois eles mostram a data e hora em que o escaneamento foi realizado).

por **Danii** Seg 23 Jun 2014, 11:27

TÓPICO ARQUIVADO

Como o autor não respondeu por mais de 15 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.

por Conteúdo patrocinado

Tela azul "win32k.sys"

Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Re: Tela azul "win32k.sys"

Seg	Ter	Qua	Qui	Sex	Sáb	Dom
1	2	3	4	5	6	7
8	9	10	11	12	13	14
15	16	17	18	19	20	21
22	23	24	25	26	27	28
29	30