Remocão do Baidu Antivírus

Como está o computador depois destes procedimentos?

Ainda aparece a mensagem de "não respondendo", inclusive nessa página do fórum e pergunta se quer recuperar a página

Desative temporariamente seu antivirus para evitar conflitos.

Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( de g3n-h@ckm@n )
|- Ao acessar o link acima, role a página e clique em Télécharger para fazer o download: [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Execute-o da forma indicada nesta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Assim que a limpeza for concluída, poste o log (relatório) que estará em C:\Pre_Scan\Pre_Scan_07_05_2014_17_05_22.txt (estes números em vermelho irão variar pois eles mostram a data e hora em que o escaneamento foi realizado).

Segue relatório do Pre Scan


¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan | g3n-h@ckm@n | 04.07.20.1 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤ XP | Vista | 7 | 8 - 32/64 bits ¤¤¤¤¤ - Start 11:55:49

Updated 20/07/2014 | 13.55 by g3n-h@ckm@n
Contact : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Pre_Script Infos : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Pre_scan Feedbacks : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

[Marta (Administrator)] - [MARTA-HP]
SID = S-1-5-21-1564383174-651765971-1828009225-1001

Starting up : Normal
System : Windows 7 Professional (32 bits) Professional Service Pack 1
ProcessorNameString : AMD E-350 Processor
Identifier : x86 Family 20 Model 1 Stepping 0


Memory RAM = Total (MB) : 1690 | Free (MB) : 1027
Pagefile = Total (MB) : 3380 | Free (MB) : 2527
Virtual = Total (MB) : 2097 | Free (MB) : 1962

¤¤¤¤¤¤¤¤¤¤ | Components of starting up

C:\Windows\Setup\Scripts\oobe.cmd
C:\Windows\Setup\Scripts\SetupComplete.cmd

¤¤¤¤¤¤¤¤¤¤¤ | Drives

C:\-> [Fixed] | [OS] | Total : 466540 Mo | Free : 401310 Mo -> NTFS
D:\-> [Fixed] | [HP_RECOVERY] | Total : 10300 Mo | Free : 1250 Mo -> NTFS

¤¤¤¤¤¤¤¤¤¤ | Windows updates

Last detection : 2014-07-22 14:20:27
Downloaded last ones : 2014-07-11 16:18:45
Installed last ones : 2014-07-11 16:46:57
Next search : 2014-07-23 09:40:11


¤¤¤¤¤¤¤¤¤¤ | Sessions

C:\Windows\system32\config\systemprofile
C:\Windows\ServiceProfiles\LocalService
C:\Windows\ServiceProfiles\NetworkService
C:\Users\Marta

Registry saved , to restore : C:\Pre_Scan\Save\Scan\ERDNT.exe

stand-by mode deleted !


¤¤¤¤¤¤¤¤¤¤ | Browsers

IE : 11.0.9600.17207 (© Microsoft Corporation. Todos os direitos reservados.)

¤¤¤¤¤¤¤¤¤¤ | FlashPlayer

FlashPlayer ActiveX : 14.0.0.145

¤¤¤¤¤¤¤¤¤¤ | Security

AV : Norton 360 Premier Edition Disabled
AS : Windows Defender Disabled
FW : Norton 360 Premier Edition Disabled
WMI : OK
WU: Windows Update Service [Auto(2)] = Running
AS: Windows Defender [Manual(3)] = stopped
FW: Windows FireWall Service [Auto(2)] = Running

¤¤¤¤¤¤¤¤¤¤ | Stopped processes

768 | [Owner : |Parent : 516] - (.AMD - AMD External Events Service Module.) - (6.14.11.1077) = C:\Windows\System32\atiesrxx.exe
1268 | [Owner : |Parent : 768] - (.AMD - AMD External Events Client Module.) - (6.14.11.1077) = C:\Windows\System32\atieclxx.exe
1536 | [Owner : |Parent : 516] - (.Microsoft Corporation - Aplicativo de subsistema de spooler.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe
1744 | [Owner : SISTEMA |Parent : 516] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) = C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
1796 | [Owner : SISTEMA |Parent : 516] - (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - (1.0.32.10) = C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
1824 | [Owner : SISTEMA |Parent : 516] - (.Advanced Micro Devices - RM Application.) - (1.0.7.0) = C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
1848 | [Owner : SISTEMA |Parent : 516] - (.Apple Inc. - YSLoader.exe.) - (17.327.4.35) = C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
1868 | [Owner : SISTEMA |Parent : 516] - (.Apple Inc. - Bonjour Service.) - (3.0.0.10) = C:\Program Files\Bonjour\mDNSResponder.exe
1912 | [Owner : SISTEMA |Parent : 516] - (.HP - HP LaserJet Service.) - (2.15.602.0) = C:\Program Files\hp\HPLaserJetService\HPLaserJetService.exe
1964 | [Owner : SISTEMA |Parent : 516] - (.Hewlett-Packard Company - HP Client Services.) - (1.1.0.3539) = C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
2004 | [Owner : SISTEMA |Parent : 516] - (.Hewlett-Packard Company - LightScribe Service.) - (1.18.20.1) = C:\Program Files\Common Files\LightScribe\LSSrvc.exe
396 | [Owner : SISTEMA |Parent : 516] - (.Symantec Corporation - Norton 360.) - (12.11.2.9) = C:\Program Files\Norton 360\Engine\21.4.0.13\n360.exe
592 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Microsoft® Windows Live ID Service.) - (6.500.3165.0) = C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
2156 | [Owner : SISTEMA |Parent : 516] - (.Advanced Micro Devices, Inc. - AMD Fuel Service.) - (1.0.0.0) = C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
3108 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Indexador do Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe
3396 | [Owner : SISTEMA |Parent : 592] - (.Microsoft Corporation - Microsoft® Windows Live ID Service Monitor.) - (6.500.3165.0) = C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
1740 | [Owner : SISTEMA |Parent : 516] - (.Hewlett-Packard Company - HP Support Assistant Service.) - (7.0.39.14) = C:\Program Files\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
3540 | [Owner : Marta |Parent : 396] - (.Symantec Corporation - Norton 360.) - (12.11.2.9) = C:\Program Files\Norton 360\Engine\21.4.0.13\n360.exe
3480 | [Owner : Marta |Parent : 3696] - (.Microsoft Corporation - Windows Explorer.) - (6.1.7601.17567) = C:\Windows\explorer.exe
636 | [Owner : Marta |Parent : 1016] - (.Microsoft Corporation - Mecanismo do Agendador de Tarefas.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
3268 | [Owner : Marta |Parent : 516] - (.Microsoft Corporation - Processo de Host para Tarefas do Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe
3788 | [Owner : Marta |Parent : 636] - (. - Monitor LED Key.) - (4.3.0.3) = C:\Program Files\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe
3556 | [Owner : Marta |Parent : 3480] - (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) - (1.0.0.669) = C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
3892 | [Owner : Marta |Parent : 3480] - (.Hewlett-Packard - hpsysdrv.) - (2.10.0.0) = C:\Program Files\Hewlett-Packard\HP Odometer\hpsysdrv.exe
2100 | [Owner : Marta |Parent : 3480] - (.Hewlett-Packard - HP Keyboard Kit OSD.) - (1.0.0.13) = C:\Program Files\Hewlett-Packard\HP Desktop Keyboard\HPKEYBOARDx.EXE
1732 | [Owner : Marta |Parent : 3480] - (.Hewlett-Packard - HP Remote Solution.) - (1.0.1.0) = C:\Program Files\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
1492 | [Owner : Marta |Parent : 3480] - (.Hewlett-Packard - HP BATTERY INDICATOR.) - (0.0.1.0) = C:\Program Files\Hewlett-Packard\HP MAINSTREAM KEYBOARD\BATINDICATOR.exe
3348 | [Owner : Marta |Parent : 3480] - (.Hewlett-Packard - hpwuSchd Application.) - (80.1.1.0) = C:\Program Files\hp\HP Software Update\hpwuschd2.exe
1620 | [Owner : Marta |Parent : 3480] - (.Oracle Corporation - Java(TM) Update Scheduler.) - (2.1.65.20) = C:\Program Files\Common Files\Java\Java Update\jusched.exe
1120 | [Owner : Marta |Parent : 3480] - (.Apple Inc. - iTunesHelper.) - (11.3.0.54) = C:\Program Files\iTunes\iTunesHelper.exe
3732 | [Owner : Marta |Parent : 2100] - (. - Caps Lock | Num Lock | Scroll Lock State.) - (1.0.0.4) = C:\Program Files\Hewlett-Packard\HP Desktop Keyboard\Keystatus.exe
2460 | [Owner : SISTEMA |Parent : 516] - (.Apple Inc. - iPodService Module (32-bit).) - (11.3.0.54) = C:\Program Files\iPod\bin\iPodService.exe
3532 | [Owner : Marta |Parent : 3216] - (.Hewlett-Packard - HP LED INDICATOR.) - (0.0.12.0) = C:\Program Files\Hewlett-Packard\HP MAINSTREAM KEYBOARD\CNYHKEY.exe
3956 | [Owner : SERVIÇO DE REDE |Parent : 516] - (.Microsoft Corporation - Serviço de Compartilhamento de Rede do Windows Media Player.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe
200 | [Owner : Marta |Parent : 3480] - (.Microsoft Corporation - Internet Explorer.) - (11.0.9600.17207) = C:\Program Files\Internet Explorer\iexplore.exe
916 | [Owner : Marta |Parent : 2568] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) - (2.0.0.0) = C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
3640 | [Owner : Marta |Parent : 916] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) - (3.5.0.0) = C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
4152 | [Owner : SERVIÇO LOCAL |Parent : 516] - (.Microsoft Corporation - PresentationFontCache.exe.) - (3.0.6920.4902) = C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
1632 | [Owner : Marta |Parent : 3480] - (.Wisdom Software Inc. - ScreenHunter 6.0 Free.) - (6.0.229.32) = C:\Program Files\Wisdom-soft ScreenHunter 6.0 Free\ScreenHunter.exe
4452 | [Owner : Marta |Parent : 648] - (.Microsoft Corporation - Microsoft Spell Checking Facility.) - (6.3.9600.17207) = C:\Windows\System32\MsSpellCheckingFacility.exe

¤¤¤¤¤¤¤¤¤¤ | Running processes

276 | [Owner : SISTEMA |Parent : 4] - (.Microsoft Corporation - Gerenciador de Sessão do Windows.) - (6.1.7601.18113) = C:\Windows\System32\smss.exe
400 | [Owner : SISTEMA |Parent : 348] - (.Microsoft Corporation - Processo do tempo de Execução do Servidor do Cliente.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe
460 | [Owner : SISTEMA |Parent : 348] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) - (6.1.7600.16385) = C:\Windows\System32\wininit.exe
468 | [Owner : SISTEMA |Parent : 452] - (.Microsoft Corporation - Processo do tempo de Execução do Servidor do Cliente.) - (6.1.7600.16385) = C:\Windows\System32\csrss.exe
516 | [Owner : SISTEMA |Parent : 460] - (.Microsoft Corporation - Aplicativo de serviços e controle.) - (6.1.7600.16385) = C:\Windows\System32\services.exe
532 | [Owner : SISTEMA |Parent : 460] - (.Microsoft Corporation - Local Security Authority Process.) - (6.1.7601.18443) = C:\Windows\System32\lsass.exe
540 | [Owner : SISTEMA |Parent : 460] - (.Microsoft Corporation - Serviço do Gerenciador de Sessão Local.) - (6.1.7601.17514) = C:\Windows\System32\lsm.exe
648 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
720 | [Owner : SERVIÇO DE REDE |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
824 | [Owner : SISTEMA |Parent : 452] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) - (6.1.7601.18409) = C:\Windows\System32\winlogon.exe
872 | [Owner : SERVIÇO LOCAL |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
928 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
980 | [Owner : SERVIÇO LOCAL |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1016 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1132 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1292 | [Owner : SERVIÇO DE REDE |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1576 | [Owner : SERVIÇO LOCAL |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
396 | [Owner : SISTEMA |Parent : 516] - (.Symantec Corporation - Norton 360.) - (12.11.2.9) = C:\Program Files\Norton 360\Engine\21.4.0.13\n360.exe
472 | [Owner : SERVIÇO LOCAL |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
1076 | [Owner : SERVIÇO LOCAL |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
3208 | [Owner : SERVIÇO DE REDE |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
2528 | [Owner : SERVIÇO LOCAL |Parent : 516] - (.Microsoft Corporation - Processo de Host para Serviços do Windows.) - (6.1.7600.16385) = C:\Windows\System32\svchost.exe
2432 | [Owner : Marta |Parent : 928] - (.Microsoft Corporation - Gerenciador de Janelas da Área de Trabalho.) - (6.1.7600.16385) = C:\Windows\System32\dwm.exe
3540 | [Owner : Marta |Parent : 396] - (.Symantec Corporation - Norton 360.) - (12.11.2.9) = C:\Program Files\Norton 360\Engine\21.4.0.13\n360.exe
2588 | [Owner : Marta |Parent : 3480] - (. - .) - (0.0.0.0) = C:\Users\Marta\Desktop\Pre_Scan.exe
5808 | [Owner : SERVIÇO LOCAL |Parent : 516] - (.Microsoft Corporation - PresentationFontCache.exe.) - (3.0.6920.4902) = C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
3012 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Microsoft® Windows Live ID Service.) - (6.500.3165.0) = C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
1860 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Indexador do Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe
5728 | [Owner : SISTEMA |Parent : 3012] - (.Microsoft Corporation - Microsoft® Windows Live ID Service Monitor.) - (6.500.3165.0) = C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
3368 | [Owner : SERVIÇO DE REDE |Parent : 516] - (.Microsoft Corporation - Serviço de Compartilhamento de Rede do Windows Media Player.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe
3260 | [Owner : SISTEMA |Parent : 516] - (.Hewlett-Packard Company - HP Support Assistant Service.) - (7.0.39.14) = C:\Program Files\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
2928 | [Owner : SISTEMA |Parent : 516] - (.Microsoft Corporation - Aplicativo de subsistema de spooler.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe
4264 | [Owner : SISTEMA |Parent : 516] - (.Apple Inc. - YSLoader.exe.) - (17.327.4.35) = C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe


¤¤¤¤¤¤¤¤¤¤ | Winlogon user : OK !


¤¤¤¤¤¤¤¤¤¤ | Winlogon machine : OK !


¤¤¤¤¤¤¤¤¤¤
Associations

Repaired : [HKLM\Software\Classes\Folder\shell\open\command] : C:\Windows\Explorer.exe -> C:\Windows\Explorer.exe


¤

Repaired : [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

¤¤¤¤¤¤¤¤¤¤
Registry

Repaired : [HKLM\software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
[{9343812e-1c37-4a49-a12e-4b2d810d956b}] : 1 -> 0
Repaired : [HKLM\software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
[{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}] : 1 -> 0
Repaired : [HKLM\software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
[{20D04FE0-3AEA-1069-A2D8-08002B30309D}] : 1 -> 0
Repaired : [HKLM\software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
[{208D2C60-3AEA-1069-A2D7-08002B30309D}] : 1 -> 0
Repaired : [HKLM\software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
[{871C5380-42A0-1069-A2EA-08002B30309D}] : 1 -> 0
Repaired : [HKLM\software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
[{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}] : 1 -> 0
Repaired : [HKLM\software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
[{59031a47-3f72-44a7-89c5-5595fe6b30ee}] : 1 -> 0
Repaired : [HKU\S-1-5-21-1564383174-651765971-1828009225-1001\software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
[Hidden] : 2 -> 0

¤¤¤¤¤¤¤¤¤¤
Access to the registry and to the administrator of the tasks



¤¤¤¤¤¤¤¤¤¤ | SafeBoot

Safeboot Keys are O.K

Alternate shell is OK !

¤

Safeboot Minimal Subkeys : O.K !

¤

Safeboot Network Subkeys : O.K !

¤¤¤¤¤¤¤¤¤¤ | IFEO


¤¤¤¤¤¤¤¤¤¤ | Mountpoints2

Deleted : HKU\S-1-5-21-1564383174-651765971-1828009225-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Mountpoints2\{312627d7-582c-11e3-9b83-101f742a95f6} | AutoRun\command : G:\Autorun.exe
Deleted : HKU\S-1-5-21-1564383174-651765971-1828009225-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Mountpoints2\{6a3276c3-a2d6-11e0-b4ef-806e6f6e6963} | AutoRun\command : E:\Autorun.exe


¤¤¤¤¤¤¤¤¤¤ | Windows

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\Boot]|[Shell] : SYS:Microsoft\Windows NT\CurrentVersion\Winlogon
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\win.ini]|[winlogon] : SYS:Microsoft\Windows NT\CurrentVersion\Winlogon

Winsrv : OK !


[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[AppInit_DLLS] :
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1

[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[Programs] : com exe bat pif cmd

¤¤¤¤¤¤¤¤¤¤ | Security center

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{003e0278-eca8-4bb8-a256-3689ca1c2600}]|[Autostart] : C:\Windows\system32\shell32.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{3BF043EF-A974-49B3-8322-B853CF1E5EC5}]|[Autostart] : C:\Windows\System32\SndVolSSO.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{566296fe-e0e8-475f-ba9c-a31ad31620b1}]|[Autostart] : C:\Windows\system32\dxp.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{68ddbb56-9d1d-4fd9-89c5-c0da2a625392}]|[Autostart] : C:\Windows\system32\stobject.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{6FDEDD65-AC51-43CA-B2D0-9EB5D1155D03}]|[Autostart] : C:\Windows\System32\C:\Windows\ehome\ehSSO.dll [X]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{7007ACCF-3202-11D1-AAD2-00805FC1270E}]|[Autostart] : C:\Windows\System32\netshell.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{7849596a-48ea-486e-8937-a2a3009f31a9}]|[Autostart] : C:\Windows\system32\shell32.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{900c0763-5cad-4a34-bc1f-40cd513679d5}]|[No 'Autostart'] : C:\Windows\System32\hcproviders.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{900c0763-5cad-4a34-bc1f-40cd513679d5}]|[No 'Autostart'] : C:\Windows\System32\hcproviders.dll C:\Windows\System32\hcproviders.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{A1607060-5D4C-467a-B711-2B59A6F25957}]|[Autostart] : C:\Windows\System32\AltTab.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{AAA288BA-9A4C-45B0-95D7-94D524869DB5}]|[Autostart] : C:\Windows\system32\wpdshserviceobj.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{C2796011-81BA-4148-8FCA-C6643245113F}]|[Autostart] : C:\Windows\System32\pnidui.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{C51F0A6B-2A63-4cf4-8938-24404EAEF422}]|[Autostart] : C:\Windows\System32\cscui.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{DA67B8AD-E81B-4c70-9B91-B417B5E33527}]|[Autostart] : C:\Windows\System32\srchadmin.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{EF4D1E1A-1C87-4AA8-8934-E68E4367468D}]|[Autostart] : C:\Windows\system32\shdocvw.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F08C5AC2-E722-4116-ADB7-CE41B527994B}]|[Autostart] : C:\Windows\System32\bthprops.cpl [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F20487CC-FC04-4B1E-863F-D9801796130B}]|[Autostart] : C:\Windows\System32\SyncCenter.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}]|[Autostart] : C:\Windows\System32\Actioncenter.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{fbeb8a05-beee-4442-804e-409d6c4515e9}]|[Autostart] : C:\Windows\system32\shell32.dll [ok]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{ff363bfe-4941-4179-a81c-f3f1ca72d820}]|[Autostart] : C:\Windows\System32\hgcpl.dll [ok]


Repaired : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]|[EnableFirewall] : 1 -> 0
Repaired : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]|[EnableFirewall] : 1 -> 0
Repaired : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]|[EnableFirewall] : 1 -> 0

¤¤¤¤¤¤¤¤¤¤ | Correction of the services


Repaired : [Compbatt] : 3 -> 0
Repaired : [agp440] : 3 -> 2
Repaired : [EapHost] : 3 -> 2
Repaired : [SharedAccess] : 4 -> 2
Repaired : [windefend] : 3 -> 2
Repaired : [wudfsvc] : 3 -> 2
Repaired : [WerSvc] : 3 -> 2

¤¤¤¤¤¤¤¤¤¤ | Internet Explorer


Users browser settings : OK

Repaired : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Repaired : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Search Page] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

¤

Repaired : [HKU\S-1-5-21-1564383174-651765971-1828009225-1001\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 -> 1

¤¤¤¤¤¤¤¤¤¤ | Hosts

C:\Windows\System32\Drivers\etc\hosts : Cleaned

¤¤¤¤¤¤¤¤¤¤ | reparsepoint



¤¤¤¤¤¤¤¤¤¤ | Detection of offsets


¤¤¤¤¤¤¤¤¤¤ | Files | Folders | Registry


Deleted : C:\$Recycle.bin\S-1-5-21-1564383174-651765971-1828009225-1001

Moved to quarantine successfully : C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job
Moved to quarantine successfully : C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator
Deleted : [HKCR\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}]
Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Run : iTunesHelper -> "C:\Program Files\iTunes\iTunesHelper.exe"

Will be moved in quarantine in the restart : C:\Users\Marta\AppData\Local\microsoft\windows\WebCacheLock.dat
Moved to quarantine successfully : C:\Users\Marta\AppData\Roaming\WildTangent
Moved to quarantine successfully : C:\Windows\assembly\tmp\
Moved to quarantine successfully : C:\Users\Marta\AppData\LocalLow\Sun\Java\Deployment\cache\

¤¤¤¤¤¤¤¤¤¤ | ADS


Prefetch -> cleaned



D:\ : Vaccinated (Vaccin created by Pre_Scan)

¤¤¤¤¤¤¤¤¤¤ | Hidden files

~ [Drive D:] : Hidden : 17 | Restored : 17
~ [Drive C:] : Hidden : 1 | Restored : 1
~ [Program Files] : Hidden : 4 | Restored : 4
~ [Users] : Hidden : 2 | Restored : 2
~ [Music] : Hidden : 453 | Restored : 453
~ [Documents] : Hidden : 63 | Restored : 63
~ [Searches] : Hidden : 1 | Restored : 1
~ [Windows] : Hidden : 70 | Restored : 70
~ [Start Menu | Programs | Startup] : Hidden : 1 | Restored : 1
~ [Libraries] : Hidden : 37 | Restored : 37


¤¤¤¤¤¤¤¤¤¤ | Control of the partitions

Disk: 0 Size=477G
Pos MBRndx Type/Name Size Active Hide Start Sector Sectors
--- ------ ---------- ---- ------ ---- ------------ ------------
0 0 07-NTFS 100M Yes No 2,048 204,800
1 1 07-NTFS 467G No No 206,848 955,465,728
2 2 07-NTFS 10G No No 955,672,576 21,098,496

¤¤¤¤¤¤¤¤¤¤

[HKLM | Winlogon] | AutoRestartShell : 0 -> 1

End : 12:15:06


Standby-mode restored
¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤ - 345

Como está o PC?

Esta bem melhor, até agora não apreceu o aviso de "não está respondendo", abri outlook e também esta normal, as paginas iniciais do meu PC voltaram a aparecer, pois antes só abria o websearches, agora abre o Ig e o Google, as duas páginas iniciais.

Fico feliz que o problema tenha sido resolvido.

Só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

Foi um prazer ajudar. Conte sempre conosco!

Segue relatório


RaProducts' PureRa v1.7
Log created at 13:36 on 22/07/2014 (Marta)

C:\Config.MSI emptied.
C:\Users\Marta\AppData\LocalLow\Microsoft\CryptNetURLCache\Content emptied.
C:\Users\Marta\AppData\LocalLow\Microsoft\CryptNetURLCache\MetaData emptied.
C:\Windows\system32\FNTCACHE.DAT <- Successfully deleted.
Recycle bin emptied.
C:\Windows\SoftwareDistribution\DataStore\Logs emptied.
C:\Windows\SoftwareDistribution\Download emptied.
C:\Windows\SoftwareDistribution\SelfUpdate\Default emptied.
C:\Windows\SoftwareDistribution\WuRedir emptied.
C:\Windows\SoftwareDistribution\ReportingEvents.log <- O arquivo já está sendo usado por outro processo.
C:\Users\Marta\AppData\Local\Temp emptied.
C:\Windows\TEMP emptied.
C:\hp\hpqware\BTBHost\Images\Thumbs.db <- Successfully deleted.
C:\hp\support\Thumbs.db <- Successfully deleted.
C:\Program Files\Hewlett-Packard\HP Setup\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Bejeweled 2 Deluxe\wtmui_zh\chsimages\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Bejeweled 2 Deluxe\wtmui_zh\data\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Bejeweled 2 Deluxe\wtmui_zh\images\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Bejeweled 2 Deluxe\wtmui_zh\images\backdrops\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Bejeweled 2 Deluxe\wtmui_zh\puzzles\Galaxy One\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Cake Mania\wtmui_es\help\img\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Chuzzle Deluxe\wtmui_fr\textures\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Chuzzle Deluxe\wtmui_ko\Fonts\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Heartwild Solitaire\data\extra\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\onplay\pt\Thumbs.db <- Acesso negado.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_de\levels\underover\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_default\levels\perm_thumbnails\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_default\levels\underover\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_es\levels\underover\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_fr\levels\underover\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_it\levels\underover\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_ko\levels\underover\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_zh\fonts\Thumbs.db <- Successfully deleted.
C:\Program Files\HP Games\Zuma Deluxe\wtmui_zh\images\Thumbs.db <- Successfully deleted.
C:\Program Files\Online Services\ask_icon\Thumbs.db <- Successfully deleted.
C:\Program Files\Online Services\Huddle\Thumbs.db <- Successfully deleted.
C:\Program Files\Online Services\myhpgames\Thumbs.db <- Successfully deleted.
C:\Program Files\Online Services\Omnifone\Thumbs.db <- Successfully deleted.
C:\swsetup\APP\Applications\HP\LightScribeLSS\1.18.20.1\src\Common\Thumbs.db <- Successfully deleted.
C:\swsetup\DRV\Graphics\AMD\UMAGraphics\8.792Patch\src\Packages\Apps\VC10RTx86\vcredist_x86\Graphics\Thumbs.db <- Successfully deleted.
C:\Users\Marta\AppData\Local\IconCache.db <- Successfully deleted.
C:\Users\Marta\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db <- Successfully deleted.
C:\Users\Marta\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db <- Successfully deleted.
C:\Users\Marta\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db <- Successfully deleted.
C:\Users\Marta\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db <- Successfully deleted.
C:\Users\Marta\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db <- Acesso negado.
C:\Users\Marta\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db <- Successfully deleted.
C:\Users\Marta\Documents\Diversos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\CAPA\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Documentos\Cozinha1\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Documentos\Cozinha2\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Minhas figuras\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Minhas figuras\Horses\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Minhas figuras\Horses Membros\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Minhas figuras\Horses Membros\Horses Membros GIF\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Minhas figuras\Logos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Trab. Graduação\1o. Semestre\Figuras Estágio\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Trab. Graduação\2o. Semestre\Apresentação\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Equinocultura\Trab. Graduação\2o. Semestre\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\CHS\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\CHT\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\CSY\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\DEU\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\ENU\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\ESM\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\ESP\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\FIN\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\FRA\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\FRC\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\HUN\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\ITA\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\JPN\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\KOR\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\KRN\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\NLD\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\PLK\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\PTB\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\PTG\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\RUS\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\CorelDRAW Graphics Suite X3\Bin\SVE\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\DesktopSpyCamera\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\Nextel - Fatura Web\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\Portable ScreenHunter Free\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Aplicativos\Portable ScreenHunter Free\Screen\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Angela\Assinaturas\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Angela\Cartões\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Backup Bíblia\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Casa Cor 2010\FOTOS\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Casa Cor 2010\FOTOS\17.05.2010\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Casa Cor 2010\FOTOS\24.05.2010\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Casa Cor 2010\FOTOS\Casa Cor - Media resolução\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Casa Cor 2010\Fotos Folder\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Contabilidade\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Contabilidade\Murilo\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Contabilidade\Pagamentos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\CNPJ\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Contrato\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Diversos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Escritura\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Exame Adriana\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Firma Individual\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Luciana\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Odamar\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Digitalização\Receita Federal\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Documentos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Documentos\Diversos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Exame Marcelo\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Escritório\Funcionárias\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Apartamento\Blanco\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Apartamento\Blanco\Closed\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Apartamento\Blanco\Cozinha\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Apartamento\Blanco\Home\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Apartamento\Closet\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Apartamento\Cozinha1\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Apartamento\Cozinha2\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Apartamento\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\CAPA\Animais\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\CAPA\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\CAPA\Trabalhos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Equinocultura\Minhas figuras\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Equinocultura\Minhas figuras\Horses\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Equinocultura\Minhas figuras\Horses Membros\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Equinocultura\Minhas figuras\Horses Membros\Horses Membros GIF\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Equinocultura\Minhas figuras\Logos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Equinocultura\Trab. Graduação\1o. Semestre\Figuras Estágio\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Equinocultura\Trab. Graduação\2o. Semestre\Apresentação\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Equinocultura\Trab. Graduação\2o. Semestre\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Stud Piccollino\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Vendas\Treinamentos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Vendas\Treinamentos\Aqüicultura\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Vendas\Treinamentos\Avestruz\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Vendas\Treinamentos\Bovinos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Vendas\Treinamentos\Cooperavestruz\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Vendas\Treinamentos\Insumos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Vendas\Treinamentos\Mineral\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Cavalos\Vendas\Treinamentos\Projeto Pacu\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Documentos\Escritura\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Documentos\Etiquetas\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Documentos\Relógio\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Guarujá 2010\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Jogos Excel\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Microsoft Media Gallery\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Navio 2010\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Navio 2010\Fotos Gi\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Navio 2010\Fotos Mi\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Portable ScreenHunter Free\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Vendas\Treinamentos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Vendas\Treinamentos\Aqüicultura\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Vendas\Treinamentos\Avestruz\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Vendas\Treinamentos\Bovinos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Vendas\Treinamentos\Cooperavestruz\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Vendas\Treinamentos\Insumos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Vendas\Treinamentos\Mineral\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\Vendas\Treinamentos\Projeto Pacu\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\CAPA\Animais\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\CAPA\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\CAPA\Trabalhos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Horses\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Horses Membros\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Horses Membros\Horses Membros GIF\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Logos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Pen Drive Preta\Marta\Pessoal\WM_Servidor2 Synchronized Files\Equinocultura\Trab. Graduação\2o. Semestre\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Apartamento\Blanco\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Apartamento\Blanco\Closed\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Apartamento\Blanco\Cozinha\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Apartamento\Blanco\Home\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Apartamento\Closet\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Apartamento\Cozinha1\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Apartamento\Cozinha2\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Apartamento\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\CAPA\Animais\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\CAPA\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\CAPA\Trabalhos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Equinocultura\Minhas figuras\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Equinocultura\Minhas figuras\Horses\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Equinocultura\Minhas figuras\Horses Membros\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Equinocultura\Minhas figuras\Horses Membros\Horses Membros GIF\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Equinocultura\Minhas figuras\Logos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Equinocultura\Trab. Graduação\2o. Semestre\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Stud Piccollino\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Vendas\Treinamentos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Vendas\Treinamentos\Aqüicultura\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Vendas\Treinamentos\Avestruz\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Vendas\Treinamentos\Bovinos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Vendas\Treinamentos\Cooperavestruz\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Vendas\Treinamentos\Insumos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Vendas\Treinamentos\Mineral\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Cavalos\Vendas\Treinamentos\Projeto Pacu\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Documentos\Escritura\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Documentos\Etiquetas\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Documentos\Relógio\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Guarujá 2010\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Microsoft Media Gallery\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Navio 2010\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Navio 2010\Fotos Gi\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Navio 2010\Fotos Mi\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Portable ScreenHunter Free\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Vendas\Treinamentos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Vendas\Treinamentos\Aqüicultura\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Vendas\Treinamentos\Avestruz\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Vendas\Treinamentos\Bovinos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Vendas\Treinamentos\Cooperavestruz\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Vendas\Treinamentos\Insumos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Vendas\Treinamentos\Mineral\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\Vendas\Treinamentos\Projeto Pacu\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\CAPA\Animais\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\CAPA\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\CAPA\Trabalhos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Horses\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Horses Membros\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Horses Membros\Horses Membros GIF\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\Equinocultura\Minhas figuras\Logos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\PESSOAL\WM_Servidor2 Synchronized Files\Equinocultura\Trab. Graduação\2o. Semestre\Fotos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Documents\Sal Mineral\Sal Mineral\Formulação\700 Formulas\Conceitos Básicos Nutrição\Conceitos básicos em nutrição animal_arquivos\Thumbs.db <- Successfully deleted.
C:\Users\Marta\Music\Zé Ramalho\Thumbs.db <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog00.sqm <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog01.sqm <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices\wpdlog02.sqm <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup0.sqm <- Successfully deleted.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\SQM\iesqmdata_setup1.sqm <- Successfully deleted.

Total space cleaned: 312.79 MB

-=E.O.F=-

está tudo certo. Felicidades!   

Agora gostaria de saber qual o procedimento para colocar o tópico em resolvido, se sou eu que faço isso ou se é o pessoal da colaboração ou moderadores do site

CASO RESOLVIDO

Caso a autora do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.