Quando entro em sites aparece "Attention Required! Cloudflare"?

Boa Noite amigos, mesmo problema que os demais ao acessar alguns blogs...

aqui o meu relatório do Hijackthis ... fiz os processos com antivirus ativos mas não tive sucesso em remover os virus...


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:33:45, on 27/10/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17344)
Boot mode: Normal

Running processes:
C:\PROGRA~2\GbPlugin\GbpSv.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\PROGRA~2\McAfee.com\Agent\mcagent.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\KimEPaulo\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\Program Files (x86)\GbPlugin\gbieh.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKUS\S-1-5-18\..\RunOnce: [WLStart] "C:\Program Files (x86)\Windows Live\Installer\wlstart.exe" /nosearch /nohomepage (User 'SISTEMA')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SISTEMA')
O4 - HKUS\.DEFAULT\..\RunOnce: [WLStart] "C:\Program Files (x86)\Windows Live\Installer\wlstart.exe" /nosearch /nohomepage (User 'Default user')
O8 - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Enviar página para Dispositivo &Bluetooth ... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar para Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Enviar para Dispositivo &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O15 - Trusted Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O20 - Winlogon Notify:  GbPluginBb - C:\Program Files (x86)\GbPlugin\gbieh.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe
O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Conexant SmartAudio service (SAService) - Unknown owner - C:\windows\system32\SAsrv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9943 bytes

Boa Noite! Paul Victor

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >  < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] > ( ... de Nicolas Coolman )
> Ou [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] << Link!
> Salve-o no disco local! ( C ou D )
> Desabilite seu antivírus e execute "ZHPDiag2.exe",para instalar a ferramenta.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Execute o ícone do pergaminho. ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Clique "COMPLETA" e aguarde a conclusão!
> Clique OK e,ao concluir,poste o relatório! ( ZHPDiag.txt ) 
> Ps: Como o log será extenso,envie-o à [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].

> Ou acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > 

> Ou acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

> Ou anexe-o |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| << Link!

> Maiores informações: < |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| > << Hospedagem!

A+

Bom Dia! Paul Victor

> Desabilite seu antivírus.
>
> Execute este script na ferramenta ZHPFix.
> Selecione e copie estas informações que estão em vermelho,para o Bloco de Notas.
> Com o Bloco de Notas aberto,faça: ctrl+a >> ctrl+c ( Selecionar e Copiar )
> À seguir,minimize o Bloco de Notas.

Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash
HostFix
O39 - APT: McQcTask - (.McAfee, Inc..) -- C:\Windows\Tasks\McQcTask.job   [322]
O43 - CFD: 16/07/2014 - 19:46:01 - [] ----D C:\ProgramData\boost_interprocess
O44 - LFC:[MD5.DB04BCE2700D88B3780CF219BC5E6949] - 19/10/2014 - 18:18:16 ---A- . (...) -- C:\console.log   [905]
O44 - LFC:[MD5.BBB4FFFC9CABDFA6847E99CC70BAFE31] - 27/10/2014 - 21:12:24 ---A- . (...) -- C:\FaceProv.log   [2006570]
[MD5.169180F02ABCECA5DE72FC5EEBC861BB] [SPRF][16/07/2014] (.No owner - Setup/Uninstall.) -- C:\Users\KimEPaulo\AppData\Roaming\unins000.exe   [730322]
[MD5.6E0BB5B9C845CDC764B2998FE612F73E] [SPRF][01/08/2014] (.No owner - Setup/Uninstall.) -- C:\Users\KimEPaulo\AppData\Roaming\unins001.exe   [815314]
[MD5.00000000000000000000000000000000] [APT] [{82C24800-7BE1-468B-8C97-78A72025DDA6}] (...) -- C:\Users\KimEPaulo\Downloads\Nova pasta (2)\setup.exe (.not file.)   [0]
C:\Windows\Tasks\McQcTask.job

> Abra a ferramenta ZHPFix. < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >
> Clique IMPORTAÇÃO >> OK.
> Ps: Ao clicar "OK",verifique se o campo está limpo para que receba,somente,as informações do script.
> Clique "GO".
> Poste o relatório!

A+

Rapport de ZHPFix 2014.10.24.11 par Nicolas Coolman, Update du 24/10/2014
Fichier d'export Registre :
Run by KimEPaulo at 28/10/2014 01:15:36
High Elevated Privileges : OK
Windows 7 Home Basic Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 03s)
Prefetcher vazio

========== Valores do Registo ==========
Ausente Valor Perfil Padrão: FirewallRaz :
Ausente Valor Perfil Domínio FirewallRaz :
ELIMINÉ: FirewallRaz (None) : {9FD0DAF2-A678-4973-B549-E9A94B16920C}
ELIMINÉ: FirewallRaz (None) : {1F9C7A34-5502-4C0C-93F6-724FDE202B0C}
ELIMINÉ: FirewallRaz (None) : {B5E0DC20-F73C-4AD4-A929-51407D99C596}
ELIMINÉ: FirewallRaz (None) : {631DC6A9-C818-448D-AB55-3ACBCDB4FBF6}

========== Pastas ==========
ELIMINÉ Temporários windows (214)
ELIMINÉ Flash Cookies (0)
ELIMINÉ: C:\ProgramData\boost_interprocess

========== Ficheiros ==========
ELIMINÉ Temporários windows (743) (153.633.288 octets)
ELIMINÉ Flash Cookies (0) (0 octets)
ELIMINÉ: c:\windows\tasks\mcqctask.job
ELIMINÉ: c:\console.log
ELIMINÉ: c:\faceprov.log

========== Ficheiro HOSTS ==========
O ficheiro Hosts não foi reparado, por favor, desative o seu antivírus.

========== Tarefa planificada ==========
ELIMINÉ: {82C24800-7BE1-468B-8C97-78A72025DDA6}


========== Recapitulativo ==========
6 : Valores do Registo
3 : Pastas
5 : Ficheiros
1 : Ficheiro HOSTS
1 : Tarefa planificada


End of clean in 00mn 12s

========== Caminho do ficheiro do relatório ==========
C:\Users\KimEPaulo\AppData\Roaming\ZHP\ZHPFix[R1].txt - 28/10/2014 01:15:40 [1495]

Bom Dia! Paul Victor

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by Smeenk )

< [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

> Salve-o ao desktop!
> Desabilite seu antivírus!
> Para Windows 7,execute zoek.exe como administrador.

autoclean;
emptyalltemp;
resethosts; 

> Copie e cole estas informações,que estão em vermelho,no campo da ferramenta.
> Clique "Run Script". 

Zoek.exe is running now. 
Do not start any browser windows, they will be closed automatically. 
Please wait! This window will close when finished. 
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

> Surgirão informações,pedindo-lhe que aguarde o surgimento do relatório.
> Ps: Essas informações,podem permanecer estáticas na tela por 20 minutos ou mais.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Confirme o reboot!

zoek.hta failed by unknown error.
Restart computer, and try again.

> Ps: Ao obter algum erro,reinicie o PC e execute,novamente,a ferramenta.
> Poste o relatório,que estará em C:\zoek-results.txt << 

A+

Zoek.exe v5.0.0.0 Updated 27-10-2014
Tool run by KimEPaulo on 28/10/2014 at 1:58:05,04.
Microsoft Windows 7 Home Basic 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\KimEPaulo\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

28/10/2014 01:59:26 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3630117432-1743713075-2890244635-1000\Software\Microsoft\Internet Explorer\SearchScopes\{8BF88255-D684-4CE1-BF07-3F3D6E0576A8} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\windows\SysNative\config\systemprofile\Searches deleted
C:\Users\KimEPaulo\AppData\Roaming\unins000.exe deleted
C:\Users\KimEPaulo\AppData\Roaming\unins001.exe deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftcomp.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftcore.dll" not deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftevent.dll" not deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftfsi_wow64.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftintf.dll" not deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftlist.exe" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftpsr.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftsync.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftuser.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftvsa.exe" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftcomp.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftcore.dll" not deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftevent.dll" not deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftfsi_wow64.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftintf.dll" not deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftlist.exe" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftpsr.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftsync.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftuser.dll" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftvsa.exe" deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client" not deleted
"C:\PROGRA~2\Microsoft Application Virtualization Client" not deleted
"C:\PROGRA~2\Windows Portable Devices" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" [09/10/2014 13:17]

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
fheoggkfdfchfphceeifdbepaooicaho - No path found[]

GBBD Caixa Economica Federal - KimEPaulo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://lenovo.msn.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://lenovo.msn.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3630117432-1743713075-2890244635-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_USERS\S-1-5-21-3630117432-1743713075-2890244635-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_USERS\S-1-5-21-3630117432-1743713075-2890244635-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
HKEY_USERS\S-1-5-21-3630117432-1743713075-2890244635-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence deleted successfully

==== Empty IE Cache ======================

C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\KimEPaulo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\KimEPaulo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\KimEPaulo\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\KimEPaulo\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=45 folders=5 14803370 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\KimEPaulo\AppData\Local\Temp will be emptied at reboot
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\KIMEPA~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\PROGRA~2\Microsoft Application Virtualization Client\sftcore.dll" not found
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftevent.dll" not found
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftintf.dll" not found
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftcore.dll" not found
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftevent.dll" not found
"C:\PROGRA~2\Microsoft Application Virtualization Client\sftintf.dll" not found
"C:\PROGRA~2\Microsoft Application Virtualization Client" not found
"C:\PROGRA~2\Microsoft Application Virtualization Client" not found

==== EOF on 28/10/2014 at 2:18:21,14 ======================

Bom Dia! Paul Victor

> Ps: Se foi resolvido,pode abortar a execução deste batch + Zoek.
> Caso o execute,pode desabilitar seu antivírus.

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( hosts-perm.bat )
> Salve-o no desktop!
> Execute hosts-perm.bat,como administrador. ( Clique direito e ... )
> Ao concluir,teremos a mensagem "The Permissions on the HOSTS file have been reset".
> Para sair,aperte Enter ou qualquer tecla.

resethosts; 

> Execute,novamente,a Zoek e coloque no campo apenas este script.
> Poste o relatório!

A+

Zoek.exe v5.0.0.0 Updated 27-10-2014
Tool run by KimEPaulo on 28/10/2014 at 20:40:36,70.
Microsoft Windows 7 Home Basic 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\KimEPaulo\Downloads\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-10-28-041821.log 10154 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== C:\zoek_backup content ======================

C:\zoek_backup (files=45 folders=5 14803370 bytes)

==== EOF on 28/10/2014 at 20:41:31,80 ======================

Boa Noite! Paul Victor

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]> ( ... by Farbar )

> Para sistemas 32 bit!

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]> (64 bit)

> Ou aqui,para sistemas 64bit!
> Salve-o no desktop! (Área de trabalho ...)
> Execute a ferramenta! Clique "Yes" >> "Scan".

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Antes de clicar "Scan",verifique se as caixinhas em "Whitelist" estão assinaladas.
> Em "Optional Scan",deixe marcada a checkbox "Addition.txt".
> Poste os relatórios! (FRST.txt + Addition.txt)
> 
> Como o log será extenso,envie-o à [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].

> Ou acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > 

> Maiores informações: < |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| >

A+

Tentei abrir em dois site diferentes...

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Boa Noite! Paul Victor

> Copie estas informações que estão em vermelho,para o Bloco de Notas.
> Salve-a com o nome fixlist.txt.
> Salve-a na pasta programas! ( C:\Users\KimEPaulo\Downloads\programas )

start
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
S2 sftlist; "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe" [X]
S3 sftvsa; "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe" [X]
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
S3 X6va028; \??\C:\windows\SysWOW64\Drivers\X6va028 [X]
2014-10-28 20:41 - 2014-10-28 02:18 - 00010154 _____ () C:\zoek-results2014-10-28-041821.log
2014-10-28 02:15 - 2014-10-28 23:17 - 00036412 _____ () C:\FaceProv.log
2014-10-28 01:59 - 2014-10-28 20:41 - 00001445 _____ () C:\zoek-results.log
2014-10-28 01:57 - 2014-10-28 02:11 - 00000000 ____D () C:\zoek_backup
2014-10-28 01:57 - 2014-10-28 01:57 - 01290752 _____ () C:\Users\KimEPaulo\Downloads\zoek.exe
2014-10-28 00:01 - 2014-10-28 00:01 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2014-10-27 23:59 - 2014-10-28 01:15 - 00000000 ____D () C:\Users\KimEPaulo\AppData\Roaming\ZHP
2014-10-27 23:59 - 2014-10-27 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2014-10-27 23:59 - 2014-10-27 23:59 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2014-10-27 23:56 - 2014-10-27 23:58 - 06861356 _____ (Nicolas Coolman ) C:\Users\KimEPaulo\Downloads\ZHPDiag2.exe
2014-10-27 22:07 - 2014-10-28 00:45 - 00000000 ____D () C:\AdwCleaner
2014-10-15 23:18 - 2014-10-15 23:40 - 00000080 _____ () C:\Users\KimEPaulo\Desktop\Novo Documento de Texto (2).txt
2014-10-28 23:20 - 2010-06-17 07:53 - 01905497 _____ () C:\windows\WindowsUpdate.log
2014-10-28 23:16 - 2010-05-25 20:16 - 00603888 _____ () C:\windows\PFRO.log
2014-10-28 23:16 - 2009-07-14 02:51 - 00068529 _____ () C:\windows\setupact.log
2014-10-27 22:12 - 2009-07-14 03:08 - 00032608 _____ () C:\windows\Tasks\SCHEDLGU.TXT
end

> Execute FRST/FRST64 >> Clique "Fix" << Aguarde!
> Na mensagem,clique Executar. 
> Poste o relatório! (Fixlog.txt)

A+

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-10-2014 01
Ran by KimEPaulo at 2014-10-29 00:08:17 Run:1
Running from C:\Users\KimEPaulo\Downloads\programas
Loaded Profile: KimEPaulo (Available profiles: KimEPaulo)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
S2 sftlist; "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe" [X]
S3 sftvsa; "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe" [X]
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
S3 X6va028; \??\C:\windows\SysWOW64\Drivers\X6va028 [X]
2014-10-28 20:41 - 2014-10-28 02:18 - 00010154 _____ () C:\zoek-results2014-10-28-041821.log
2014-10-28 02:15 - 2014-10-28 23:17 - 00036412 _____ () C:\FaceProv.log
2014-10-28 01:59 - 2014-10-28 20:41 - 00001445 _____ () C:\zoek-results.log
2014-10-28 01:57 - 2014-10-28 02:11 - 00000000 ____D () C:\zoek_backup
2014-10-28 01:57 - 2014-10-28 01:57 - 01290752 _____ () C:\Users\KimEPaulo\Downloads\zoek.exe
2014-10-28 00:01 - 2014-10-28 00:01 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2014-10-27 23:59 - 2014-10-28 01:15 - 00000000 ____D () C:\Users\KimEPaulo\AppData\Roaming\ZHP
2014-10-27 23:59 - 2014-10-27 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2014-10-27 23:59 - 2014-10-27 23:59 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2014-10-27 23:56 - 2014-10-27 23:58 - 06861356 _____ (Nicolas Coolman ) C:\Users\KimEPaulo\Downloads\ZHPDiag2.exe
2014-10-27 22:07 - 2014-10-28 00:45 - 00000000 ____D () C:\AdwCleaner
2014-10-15 23:18 - 2014-10-15 23:40 - 00000080 _____ () C:\Users\KimEPaulo\Desktop\Novo Documento de Texto (2).txt
2014-10-28 23:20 - 2010-06-17 07:53 - 01905497 _____ () C:\windows\WindowsUpdate.log
2014-10-28 23:16 - 2010-05-25 20:16 - 00603888 _____ () C:\windows\PFRO.log
2014-10-28 23:16 - 2009-07-14 02:51 - 00068529 _____ () C:\windows\setupact.log
2014-10-27 22:12 - 2009-07-14 03:08 - 00032608 _____ () C:\windows\Tasks\SCHEDLGU.TXT
end
*****************

"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => value deleted successfully.
"HKCR\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}" => Key not found.
sftlist => Service deleted successfully.
sftvsa => Service deleted successfully.
RSUSBSTOR => Service deleted successfully.
RtsUIR => Service deleted successfully.
USBCCID => Service deleted successfully.
X6va028 => Service deleted successfully.
C:\zoek-results2014-10-28-041821.log => Moved successfully.
C:\FaceProv.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\KimEPaulo\Downloads\zoek.exe => Moved successfully.
C:\PhysicalDisk0_MBR.bin => Moved successfully.
C:\Users\KimEPaulo\AppData\Roaming\ZHP => Moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP => Moved successfully.
C:\Program Files (x86)\ZHPDiag => Moved successfully.
C:\Users\KimEPaulo\Downloads\ZHPDiag2.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\KimEPaulo\Desktop\Novo Documento de Texto (2).txt => Moved successfully.
Could not move "C:\windows\WindowsUpdate.log" => Scheduled to move on reboot.
C:\windows\PFRO.log => Moved successfully.
C:\windows\setupact.log => Moved successfully.
Could not move "C:\windows\Tasks\SCHEDLGU.TXT" => Scheduled to move on reboot.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-10-29 00:10:15)<=

C:\windows\WindowsUpdate.log => Is moved successfully.
"C:\windows\Tasks\SCHEDLGU.TXT" => File could not move.

==== End of Fixlog ====

Agradeço amigos vocês foram de muita ajuda e sim meu problema desapareceu...
tudo normalizado ao acessar os blogs e a mensagem desapareceu por completo... :rindo_ate_agor

Caso Resolvido

Necessitando novo auxílio para este computador,basta abrir "Novo Tópico" e relatar o problema.