Discount Dragon

Como remover o Discount Dragon do PC? Aparece um monte de publicidade em tudo que abro... até nos emails.

  Oi Jacque.

 Siga, por gentileza, as dicas do tutorial abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste, por gentileza, o log do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

Fiz o procedimento (nas pastas,  etc... em todos os itens até chegar no goocle crhome) e ainda continua o aparecimento do "Ads by Discount Dragon" com muitas publicidades nas pesquisas google, nos emails, etc. Também já fui no painel de controle e fiz os procedimentos de desistalação.

O que faço?
Obrigada.

Poste, por gentileza, o log do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Desculpe-me ... mas o que é o "log"? Sou leiga no assunto. Obrigada.

Veja a cópia do relatório. Espero que seja isso aqui:

########## EOF - C:\AdwCleaner\AdwCleaner[S11].txt - [2197 octets] ##########

O log é o relatório do Adwcleaner. É parecido com este que você postou só que você postou só um pedaço muito pequeno, é preciso copiar e postar o relatório inteiro.

# AdwCleaner v3.018 - Relatório criado 17/02/2014 às 01:36:52
# Atualizado 28/01/2014 por Xplode
# Sistema Operacional : Windows 7 Ultimate Service Pack 1 (64 bits)
# Usuário : Jacqueline - JACQUELINE-PC
# Executando de : B:\Users\Jacqueline\Downloads\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****


***** [ Arquivos / Pastas ] *****


***** [ Atalhos ] *****


***** [ Registro ] *****


***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Google Chrome v32.0.1700.107

[ Arquivo : C:\Users\Jacqueline\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deletedo : homepage

[ Arquivo : C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [5024 octets] - [15/02/2014 19:22:05]
AdwCleaner[R10].txt - [2096 octets] - [16/02/2014 10:47:01]
AdwCleaner[R11].txt - [2218 octets] - [16/02/2014 10:50:13]
AdwCleaner[R12].txt - [2363 octets] - [16/02/2014 22:29:56]
AdwCleaner[R13].txt - [2425 octets] - [17/02/2014 01:35:42]
AdwCleaner[R1].txt - [1036 octets] - [15/02/2014 20:06:40]
AdwCleaner[R2].txt - [7973 octets] - [15/02/2014 20:53:40]
AdwCleaner[R3].txt - [1277 octets] - [15/02/2014 23:00:58]
AdwCleaner[R4].txt - [1398 octets] - [16/02/2014 10:24:09]
AdwCleaner[R5].txt - [1495 octets] - [16/02/2014 10:29:26]
AdwCleaner[R6].txt - [1615 octets] - [16/02/2014 10:34:01]
AdwCleaner[R7].txt - [1735 octets] - [16/02/2014 10:37:08]
AdwCleaner[R8].txt - [1878 octets] - [16/02/2014 10:40:13]
AdwCleaner[R9].txt - [1975 octets] - [16/02/2014 10:43:57]
AdwCleaner[S0].txt - [4089 octets] - [15/02/2014 19:24:59]
AdwCleaner[S10].txt - [2156 octets] - [16/02/2014 10:48:12]
AdwCleaner[S11].txt - [2278 octets] - [16/02/2014 10:51:19]
AdwCleaner[S12].txt - [1800 octets] - [17/02/2014 01:36:52]
AdwCleaner[S1].txt - [1093 octets] - [15/02/2014 20:09:53]
AdwCleaner[S2].txt - [7323 octets] - [15/02/2014 20:55:25]
AdwCleaner[S3].txt - [1334 octets] - [15/02/2014 23:02:14]
AdwCleaner[S4].txt - [1454 octets] - [16/02/2014 10:25:41]
AdwCleaner[S5].txt - [1553 octets] - [16/02/2014 10:30:31]
AdwCleaner[S6].txt - [1673 octets] - [16/02/2014 10:34:53]
AdwCleaner[S7].txt - [1793 octets] - [16/02/2014 10:38:13]
AdwCleaner[S8].txt - [1934 octets] - [16/02/2014 10:41:43]
AdwCleaner[S9].txt - [2033 octets] - [16/02/2014 10:44:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S12].txt - [2401 octets] ##########


E TB MAIS ESSE AQUI.....:

chrome://policy/

Políticas
Atualizar políticas

Mostrar políticas sem valor definido
Chrome policies
Aplicável a Nível Nome da política Valor da política Status
Máquina
Obrigatória
ExtensionInstallForcelist
Ocultar valor
OK

nikdaiaidiiiogaidkkekcmokcgcdeac;http://nikdaiaidiiiogaidkkekcmokcgcdeac/check/.eJwNiUEKgDAMBP-ScxG9-hkJaahL2gbaKoL4d3saZualwd1oJzmbF6VAt7YOrzNtyzodtQ_OWRvto10aSJ9xIM5fYZHBiAA8TZqpSXGTJFFZ6PsB2zwg-Q.h6riWNzJtFejwyZ-ZpKMigCt4mA

 Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >  < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

|- Desabilite temporariamente seu antivírus para evitar conflitos e execute "ZHPDiag2.exe", para instalar a ferramenta.
 
|- Execute o ícone do pergaminho. ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
 
|- Clique "SEARCH" ou "PESQUISAR" e aguarde a conclusão!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
 
|- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

~ Relatório do ZHPDiag v2014.2.17.15 - Nicolas Coolman  (17/02/2014)
~ Iniciado por Jacqueline (17/02/2014 12:46:19)
~ Endereço do Website :  http://nicolascoolman.webs.com
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~  Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user


---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.16518
GCIE: Google Chrome v32.0.1700.107 (Defaut)

---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Softwares de proteçao do sistema
avast! Free Antivirus v9.0.2013
Windows Defender W7

---\\ Softwares d'optimização do sistema
CCleaner v4.10 =>Piriform Ltd

---\\ Softwares de partilha do PeerToPeer (P2P)

---\\ Monitoramento dos softwares
Adobe Flash Player 12 ActiveX
Adobe Reader XI
Java 7 Update 51

---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2038 MB (35% free)
System Restore: Activé (Enable)
System drive C: has 46 GB (58%) free of 78 GB

---\\ Modo de conexão ao sistema
~ Computer Name: JACQUELINE-PC
~ User Name: Jacqueline
~ All Users Names: Jacqueline, HomeGroupUser$, Convidado, Administrador,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator

---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\Jacqueline\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Jacqueline\AppData\Roaming\
~ %Desktop% : B:\Users\Jacqueline\Desktop\
~ %Favorites% : B:\Users\Jacqueline\Favorites\
~ %LocalAppData% : C:\Users\Jacqueline\AppData\Local\
~ %StartMenu% : C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumeração das unidades dos discos
A: Floppy drive, Flash card reader, USB Key (Not Inserted)
B: Hard drive, Flash drive, Thumb drive (Free 76 Go of 155 Go)
C: Hard drive, Flash drive, Thumb drive (Free 46 Go of 78 Go)
D: CD-ROM drive (Not Inserted)



---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 49 Legitimates Filtered in 00mn 00s



---\\ Pesquisa particular de ficheiros genéricos
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Windows Explorer.) (.25/02/2011 - 03:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 22:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.263B6E451526A90FF8B1CEC759F22956] - (.Microsoft Corporation - Internet Extensions para Win32.) (.06/02/2014 - 06:24:52.) -- C:\Windows\System32\wininet.dll [2334208]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.20/11/2010 - 10:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.20/11/2010 - 10:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.27/09/2013 - 22:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 22:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 20:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 06:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 06:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 07:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 20:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 21:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.26/04/2011 - 23:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 06:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.12/04/2013 - 11:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 21:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 07:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.1B6163C503398B23FF8B939C67747683] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.20/11/2010 - 08:06:41.) -- C:\Windows\system32\Drivers\rdpdr.sys [165888]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 21:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 06:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.20/11/2010 - 10:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 00s



---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 1/3653
~ Mes musiques (My Musics) : 3/224
~ Mes Videos (My Videos) : 7/219
~ Mes Favoris (My Favorites) : 1/17
~ Mes Documents (My Documents) : 1/1601
~ Mon Bureau (My Desktop) : 3/88
~ Menu demarrer (Programs) : 1/30
~ Hidden Files:  Scanned in 00mn 02s



---\\ Processos lançados
[MD5.5640B4C10682FBC39C86C8C7A8392B5E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [866632] [PID.2516]
[MD5.615E58F9963734185756AEE4959BA964] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe   [20728480] [PID.3968]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [254336] [PID.2132]
[MD5.A78AAB0D2D70EF7DD56B7328AC502059] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [3767096] [PID.2088]
[MD5.AB44884BC129FC04D75A4649E0710203] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8338432] [PID.5028]
[MD5.201BCF8550512C105BAC78E9FA401260] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) -- C:\Program Files (x86)\GbPlugin\GbpSv.exe   [452136] [PID.752]
[MD5.CC42F104172B4A62793083D380867317] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [50344] [PID.1312]
[MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65432] [PID.1804]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648] [PID.2896]
~ Processes Running:  Scanned in 00mn 00s



---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [nikdaiaidiiiogaidkkekcmokcgcdeac] Discount Dragon v.1.0, (Activé) =>PUP.DiscountDragon
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)
~ Google Browser: 16 Legitimates Filtered in 00mn 06s



---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
P2 - FPN: [HKCU] [gastecnologia.com.br/sf/bb] - (.GAS Tecnologia - Internet Banking Helper.) -- C:\Users\Jacqueline\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll
~ Firefox Browser: 3 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Redireção do ficheiro Hosts (01)
O1 - Hosts: 54.225.95.126 nikdaiaidiiiogaidkkekcmokcgcdeac  =>PUP.DiscountDragon
~ Hosts File:  Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 23



---\\ Browser Helper Objects do navegador (02)
O2 - BHO: SaveSense [64Bits] - {71e129ff-6c2a-4984-818c-7e2c998b8d99} . (.SaveSense - SaveSense for IE.) -- C:\Users\Jacqueline\AppData\Local\SaveSense\SaveSenseIE.dll =>PUP.SaveSense
O2 - BHO: G-Buster Browser Defense [64Bits] - {C41A1C0E-EA6C-11D4-B1B8-444553540000} . (.Banco do Brasil - Gbieh Module.) -- C:\Program Files (x86)\GbPlugin\gbieh.dll
~ BHO: 10 Legitimates Filtered in 00mn 00s



---\\ Barras do Internet Explorer (03))
O3 - Toolbar: avast! Online Security - [HKLM]{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
~ Toolbar:  Scanned in 00mn 00s



---\\ Outras conexões do utilizador (04)
O4 - GS\Desktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\Desktop [Public]: theWord.lnk . (.theWord Bible Software - theWord Bible software.)  -- C:\Program Files (x86)\The Word\theword.exe
O4 - GS\QuickLaunch [Jacqueline]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Jacqueline]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [Jacqueline]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Jacqueline]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\Program [Jacqueline]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Jacqueline]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch [Convidado]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch [Convidado]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\TaskBar [Convidado]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Convidado]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Program [Convidado]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\SystemTools [Convidado]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Global Startup: 64 Legitimates Filtered in 00mn 02s



---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [LiveSupport] C:\Program Files (x86)\LiveSupport\LiveSupport.exe (.not file.)
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe  =>.Skype Technologies S.A.
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe  =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe  =>.Oracle Corporation
O4 - HKLM\..\Wow6432Node\Run: [fst_br_60] Chave orfã
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe  =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe  =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe  =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe  =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2909900469-333273526-3093818099-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-2909900469-333273526-3093818099-1001\..\Run: [LiveSupport] C:\Program Files (x86)\LiveSupport\LiveSupport.exe (.not file.)
O4 - HKUS\S-1-5-21-2909900469-333273526-3093818099-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe  =>.Skype Technologies S.A.
~ Application:  Scanned in 00mn 00s



---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: &Enviar para o OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.)
O9 - Extra button: &Anotações Vinculadas do OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.)
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Site na zona confiavél do Internet Explorer (05)
O15 - Trusted Zone: [HKCU\...\Domains\www] *.bancobrasil.com.br
O15 - Trusted Zone: [HKCU\...\Domains\www] *.bb.com.br
~ IE Zone Confiance:  Scanned in 00mn 00s



---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{114C833E-3090-403E-8F50-D86BD189CF9D}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{114C833E-3090-403E-8F50-D86BD189CF9D}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{114C833E-3090-403E-8F50-D86BD189CF9D}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
~ Domain:  Scanned in 00mn 00s



---\\ Protocolo adicional (018)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll  =>.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ Lista dos serviços NT não Microsoft e não desativados (023)
O23 - Service: Baidu AntiVirus Service (bavsvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\bavsvc.exe (.not file.) =>Adware.BDSearch
O23 - Service: Baidu Hips Service (bhipssvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\bhipssvc.exe (.not file.) =>Adware.BDSearch
O23 - Service: Gbp Service (GbpSv) . (.GAS Tecnologia - G-Buster Browser Defense - Service.) - C:\Program Files (x86)\GbPlugin\GbpSv.exe
O23 - Service: SaveSenseLive Service (savesenselive) (savesenselive) . (...) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe (.not file.) =>PUP.SaveSense
O23 - Service: WajamUpdaterV3 (WajamUpdaterV3) . (...) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe (.not file.) =>PUP.Wajam
~ Services: 5 Legitimates Filtered in 00mn 06s



---\\ Tarefas planificadas automaticamente (039)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\APSnotifierPP1.job   [380]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\APSnotifierPP2.job   [378]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\APSnotifierPP3.job   [378]
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\bench-sys.job   [354] =>PUP.GiganticSavings
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\bench-Updater removing.job   [288] =>PUP.GiganticSavings
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\SaveSense.job   [308] =>Hijacker.iHaveNet
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job   [936] =>PUP.SaveSense
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job   [940] =>PUP.SaveSense
[MD5.00000000000000000000000000000000] [APT] [APSnotifierPP1] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [APSnotifierPP2] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [APSnotifierPP3] (...) -- C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [bench-sys] (...) -- C:\Program Files (x86)\Bench\Updater\updater.exe (.not file.)   [0]  =>PUP.GiganticSavings
[MD5.00000000000000000000000000000000] [APT] [SaveSense] (...) -- C:\Users\Jacqueline\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.exe (.not file.)   [0]  =>PUP.SaveSense
[MD5.00000000000000000000000000000000] [APT] [SaveSenseLiveUpdateTaskMachineCore] (...) -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe (.not file.)   [0]  =>PUP.SaveSense
[MD5.00000000000000000000000000000000] [APT] [SaveSenseLiveUpdateTaskMachineUA] (...) -- C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe (.not file.)   [0]  =>PUP.SaveSense
[MD5.00000000000000000000000000000000] [APT] [{89516B5A-CB5B-4693-B7B9-8D6F6EC6EAC7}] (...) -- C:\Users\Jacqueline\Desktop\Programas\Direct X 9.29.1974.exe (.not file.)   [0]
~ Scheduled Task: 28 Legitimates Filtered in 00mn 04s



---\\ Drivers lançados ao arranque do sistema (041)
O41 - Driver:  (Bfilter) . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) - C:\Windows\system32\drivers\Bfilter.sys =>Adware.BDSearch
O41 - Driver:  (Bfmon) . (.Baidu, Inc. - Baidu FS Monitor Driver.) - C:\Windows\system32\drivers\Bfmon.sys =>Adware.BDSearch
O41 - Driver:  (Bprotect) . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) - C:\Windows\system32\drivers\Bprotect.sys =>Adware.BDSearch
~ Drivers: 87 Legitimates Filtered in 00mn 05s



---\\ Software instalados (042)
O42 - Logiciel: GBBD Banco do Brasil - (...) [HKLM][64Bits] -- {36386dc9-8543-4b12-ae6b-220fd52f19f3}_is1
O42 - Logiciel: theWord - (.Costas Stergiou.) [HKLM][64Bits] -- The Word
~ Logic: 24 Legitimates Filtered in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\AnyProtect]
[HKCU\Software\AutoHelpDesk]
[HKCU\Software\Baidu Security] =>Adware.BDSearch
[HKCU\Software\GbAs]
[HKCU\Software\IncrediMail]
[HKCU\Software\SaveSenseLive] =>PUP.SaveSense
[HKCU\Software\SaveSense] =>PUP.SaveSense
[HKLM\Software\Wow6432Node\AutoHelpDesk]
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\SaveSenseLive] =>PUP.SaveSense
[HKLM\Software\Wow6432Node\SweetIM] =>PUP.SweetIM
[HKLM\Software\Wow6432Node\supWPM] =>PUP.WpManager
~ Key Software: 131 Legitimates Filtered in 00mn 00s



---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 02/01/2014 - 23:29:08 - [26,460] ----D C:\Program Files (x86)\The Word
O43 - CFD: 02/01/2014 - 23:29:06 - [314,188] ----D C:\ProgramData\The Word
O43 - CFD: 27/11/2013 - 06:01:32 - [5,979] ----D C:\Users\Jacqueline\AppData\Roaming\Baidu Security =>Adware.BDSearch
O43 - CFD: 14/02/2014 - 21:39:15 - [0] ----D C:\Users\Jacqueline\AppData\Roaming\SaveSense =>PUP.SaveSense
O43 - CFD: 14/02/2014 - 21:54:49 - [0,709] ----D C:\Users\Jacqueline\AppData\Roaming\sweet-page =>PUP.SweetPage
O43 - CFD: 31/01/2014 - 00:02:42 - [0,906] ----D C:\Users\Jacqueline\AppData\Roaming\The Word
O43 - CFD: 14/02/2014 - 21:39:00 - [1,280] ----D C:\Users\Jacqueline\AppData\Local\SaveSense =>PUP.SaveSense
O43 - CFD: 14/02/2014 - 21:39:30 - [0] ----D C:\Users\Jacqueline\AppData\Local\SaveSenseLive =>PUP.SaveSense
O43 - CFD: 14/02/2014 - 21:39:00 - [0,001] ----D C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense =>PUP.SaveSense
O43 - CFD: 13/02/2014 - 13:44:03 - [0,002] ----D C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop =>Adware.Lollipop
~ Program Folder: 92 Legitimates Filtered in 00mn 08s



---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.37F5CDA64FC515B3072531C1187EDCCA] - 13/02/2014 - 13:48:25 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\Bfilter.sys   [52032]  =>Adware.BDSearch
O44 - LFC:[MD5.DFC1681F6645CB2AEA83897588F05362] - 13/02/2014 - 13:48:26 ---A- . (.Baidu, Inc. - Baidu FS Monitor Driver.) -- C:\Windows\System32\Drivers\Bfmon.sys   [34624]  =>Adware.BDSearch
O44 - LFC:[MD5.F4C1984178175ACE4A75BE23059C3E0A] - 13/02/2014 - 13:48:27 ---A- . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) -- C:\Windows\System32\Drivers\Bprotect.sys   [128992]  =>Adware.BDSearch
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 15/02/2014 - 17:28:24 ---A- . (...) -- C:\autoexec.bat   [0]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/02/2014 - 12:35:18 ---A- . (...) -- C:\Windows\win.ini   [0]
O44 - LFC:[MD5.9F9B2FEB5C886B8BD5EFE6158F248123] - 17/02/2014 - 09:25:36 ---A- . (...) -- C:\Windows\System32\prfc0416.dat   [146910]
O44 - LFC:[MD5.3BA855A668A7D31290D43FC4F488125A] - 17/02/2014 - 09:25:36 ---A- . (...) -- C:\Windows\System32\prfh0416.dat   [705070]
~ Files: 54 Legitimates Filtered in 00mn 26s



---\\ Operações e funções ao arranque do Windows Explorer (046)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks:  Scanned in 00mn 00s



---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s



---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:[MD5.4CCF421E6C4B2A4CBCE000715911F7CC] - 06/03/2009 - 17:10:10 ---A- . (.No owner - NDIS 6.0 Filter Driver.) -- C:\Windows\System32\Drivers\anodlwfx.sys   [15872]
O58 - SDL:[MD5.03B7145C889603537E9FFEABB1AD1089] - 29/03/2005 - 00:30:38 ---A- . (.No owner - ATK0110 ACPI Utility.) -- C:\Windows\System32\Drivers\ASACPI.sys   [8192]
O58 - SDL:[MD5.C04F7B373881009D7994D9BF55D24AB4] - 16/02/2014 - 21:02:05 ---A- . (...) -- C:\Windows\System32\Drivers\aswRvrt.sys   [65776]
O58 - SDL:[MD5.90399625F341AB76BA4B85A5E860EB1F] - 16/02/2014 - 21:02:05 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys   [207904]
O58 - SDL:[MD5.37F5CDA64FC515B3072531C1187EDCCA] - 21/01/2014 - 11:14:40 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\Bfilter.sys   [52032]  =>Adware.BDSearch
O58 - SDL:[MD5.DFC1681F6645CB2AEA83897588F05362] - 21/01/2014 - 11:14:50 ---A- . (.Baidu, Inc. - Baidu FS Monitor Driver.) -- C:\Windows\System32\Drivers\Bfmon.sys   [34624]  =>Adware.BDSearch
O58 - SDL:[MD5.F4C1984178175ACE4A75BE23059C3E0A] - 21/01/2014 - 07:01:36 ---A- . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) -- C:\Windows\System32\Drivers\Bprotect.sys   [128992]  =>Adware.BDSearch
O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 13/07/2009 - 22:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [530496]
O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 17:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [31232]
O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 13/07/2009 - 22:45:55 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [24656]
O58 - SDL:[MD5.8F866DF9A974BFFDCB2001D303BC0695] - 08/05/2013 - 09:52:48 ---A- . (.GAS Tecnologia - GbPlugin Device Driver.) -- C:\Windows\SysWOW64\drivers\gbpkm.sys   [49536]
O58 - SDL:[MD5.B7CC2AF3D5604EFDC5F82AF7A5B21FB1] - 17/02/2014 - 12:36:00 ---A- . (.GbPlugin NDIS Device Driver - GbPlugin NDIS Device Driver.) -- C:\Windows\SysWOW64\drivers\gbpndisrd.sys   [31088]
~ Drivers: 16 Legitimates Filtered in 00mn 02s



---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
~ ADS:  Scanned in 00mn 00s



---\\ Lista dos serviços Legacy du registo (064)
O64 - Services: CurCS - 21/01/2014 - C:\Windows\system32\drivers\Bfilter.sys (Bfilter)  .(.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) - LEGACY_BFILTER =>Adware.BDSearch
O64 - Services: CurCS - 21/01/2014 - C:\Windows\system32\drivers\Bfmon.sys (Bfmon)  .(.Baidu, Inc. - Baidu FS Monitor Driver.) - LEGACY_BFMON =>Adware.BDSearch
O64 - Services: CurCS - 21/01/2014 - C:\Windows\system32\drivers\Bprotect.sys (Bprotect)  .(.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) - LEGACY_BPROTECT =>Adware.BDSearch
~ Legacy: 88 Legitimates Filtered in 00mn 00s



---\\ Associações Shell Spawning (O67)
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s



---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys:  Scanned in 00mn 00s



---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.2AA8A5DBA3918E80E5C6D6EFB326EFBB] [SPRF][10/01/2014] (...) -- C:\Users\Jacqueline\AppData\Roaming\unins000.dat   [18108]
[MD5.AD6E810B9CE3D8C0C1FF0203C68C6FA6] [SPRF][10/01/2014] (.No owner - Setup/Uninstall.) -- C:\Users\Jacqueline\AppData\Roaming\unins000.exe   [720082]
~ Files: 3 Legitimates Filtered in 00mn 00s



---\\ Lista das exceções do FireWall (FirewallRules) (O87)
O87 - FAEL: "{0A36BD9D-1373-4D3B-A8E7-AA17522B9703}" |In - Private - P6 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe (.not file.)
O87 - FAEL: "{BD548779-F970-45DB-89EE-0714459DA990}" |In - Private - P17 - TRUE | .(...) -- C:\Windows\System32\dmwu.exe (.not file.)
~ Firewall: 202 Legitimates Filtered in 00mn 02s



---\\ Pesquisa dos pacotes WindowsInstaller (WIS) (O93) (NTFS)
[MD5.7253826FD00B972095260E17EF0DD7BF] [WIS][15/02/2014] (.SweetIM Technologies Ltd. - SweetPacks Toolbar for Internet Explorer 4.0.) -- C:\Windows\Installer\9bcdd.msi   [2732544]  =>PUP.SweetIM
~ WIS: 37 Legitimates Filtered in 00mn 18s



---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 05/02/2014 257928 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Auto 10/07/1658 0 |  (bavsvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\bavsvc.exe =>Adware.BDSearch
SS - | Auto 10/07/1658 0 |  (bhipssvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\bhipssvc.exe =>Adware.BDSearch
SS - | Auto 28/11/2013 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 28/11/2013 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Auto 10/07/1658 0 |  (savesenselive) . (...) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense
SS - | Demand 10/07/1658 0 |  (savesenselivem) . (...) - C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe =>PUP.SaveSense
SS - | Auto 23/10/2013 172192 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Auto 10/07/1658 0 |  (WajamUpdaterV3) . (...) - C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe =>PUP.Wajam

SR - | Auto 21/12/2013 65432 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 16/02/2014 50344 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SR - | Auto 08/10/2013 452136 |  (GbpSv) . (.GAS Tecnologia.) - C:\Program Files (x86)\GbPlugin\GbpSv.exe
SR - | Auto 13/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 10/07/1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
SR - | Auto 13/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Services:  Scanned in 00mn 21s



---\\ Scâner Aditional (088)
Database Version : 13031 - (17/02/2014)
Clés trouvées (Keys found) : 30
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 8
Fichiers trouvés  (Files found) : 15

[HKLM\Software\Google\Chrome\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac]   =>PUP.DiscountDragon^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71E129FF-6C2A-4984-818C-7E2C998B8D99}]   =>PUP.SaveSense^
[HKLM\SYSTEM\CurrentControlSet\Services\bavsvc]   =>Adware.BDSearch^
[HKLM\SYSTEM\CurrentControlSet\Services\bhipssvc]   =>Adware.BDSearch^
[HKLM\SYSTEM\CurrentControlSet\Services\savesenselive) (savesenselive]   =>PUP.SaveSense^
[HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdaterV3]   =>PUP.Wajam^
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\bench-sys]   =>PUP.GiganticSavings^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420]   =>PUP.SweetIM
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus]   =>Adware.BDSearch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E7F552EF334C802D75A55F0F6344722]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399]   =>PUP.SweetIM^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156]   =>PUP.SweetIM^
C:\Users\Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac   =>PUP.DiscountDragon^
C:\Users\Jacqueline\AppData\Roaming\Baidu Security   =>Adware.BDSearch^
C:\Users\Jacqueline\AppData\Roaming\SaveSense   =>PUP.SaveSense^
C:\Users\Jacqueline\AppData\Roaming\sweet-page   =>PUP.SweetPage^
C:\Users\Jacqueline\AppData\Local\SaveSense   =>PUP.SaveSense^
C:\Users\Jacqueline\AppData\Local\SaveSenseLive   =>PUP.SaveSense^
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense   =>PUP.SaveSense^
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop   =>Adware.Lollipop^
C:\Windows\Tasks\bench-sys.job   =>PUP.GiganticSavings^
C:\Windows\Tasks\bench-Updater removing.job   =>PUP.GiganticSavings^
C:\Windows\Tasks\SaveSense.job   =>Hijacker.iHaveNet^
C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job   =>PUP.SaveSense^
C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job   =>PUP.SaveSense^
[HKCU\Software\Baidu Security]   =>Adware.BDSearch^
[HKCU\Software\SaveSenseLive]   =>PUP.SaveSense^
[HKCU\Software\SaveSense]   =>PUP.SaveSense^
[HKLM\Software\Wow6432Node\Baidu Security]   =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\SaveSenseLive]   =>PUP.SaveSense^
[HKLM\Software\Wow6432Node\supWPM]   =>PUP.WpManager^
C:\Windows\Installer\9bcdd.msi   =>PUP.SweetIM^
C:\Users\Jacqueline\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe  =>PUP.SweetIM
C:\Users\Jacqueline\AppData\Local\Temp\mgsqlite3.dll  =>PUP.SweetIM
~ Additionnel Scan: 172547 Items scanned in 00mn 30s



---\\ Sumário das deteções encontradas na sua estação
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]   =>PUP.SaveSense
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]  =>Adware.BDSearch
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]   =>PUP.Wajam
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]   =>PUP.GiganticSavings
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]   =>Hijacker.iHavenet
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]   =>PUP.SweetIM
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]   =>PUP.WpManager
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]   =>PUP.SweetPage
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]   =>Adware.Lollipop
~ MSI: 9 link(s) detected in 00mn 30s


~ 904 Legitimates filtered by white list
End of the scan (534 lines in 02mn 32s)(0)

Oi...  entrei nos 3 tracinhos do google, ( ferramentas e extensões)  e ainda tá ativado,  não saiu  (esse negócio)   do Discount Dragon ....
O que faço agora?

Estou analisando o relatório que você passou, daqui há pouco te passo o próximo procedimento.

 Copie todo o texto destacado em vermelho que te passei (começando em script zhpfix e indo até SysRestore)
_____________________________________________________________________________________________________________

 Vá no menu: Iniciar > Todos os programas > ZHP > Abra o Zhpfix > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta.

OBS>:  Vc me pediu para copiar o que está em vermelho... o que faço?  Não fiz nada com ele... era pra fazer?

Obrigada e no aguardo.
-----------------------------------------------------------------------------------------------------------


Rapport de ZHPFix 2014.2.16.5 par Nicolas Coolman, Update du 16/02/2014
Fichier d'export Registre :
Run by Jacqueline at 17/02/2014 13:56:39
High Elevated Privileges : OK
Windows 7 Ultimate Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 52s)
Reparação de atalhos do navegador

========== Processo memória ==========
ELIMINÉ: Memory Process: C:\Users\Jacqueline\AppData\Roaming\unins000.exe
ELIMINÉ: Memory Process: C:\Users\Jacqueline\AppData\Local\Temp\Shortcut_bundlesweetimsetup.exe

========== Modulos memória ==========
ELIMINÉ: Memory Module: C:\Users\Jacqueline\AppData\Local\Temp\mgsqlite3.dll

========== Estado dos serviços ==========
BFILTER Parado
BFMON Parado
BPROTECT Parado

========== Chaves do Registo ==========
ELIMINÉ: CLSID BHO: {71e129ff-6c2a-4984-818c-7e2c998b8d99}
ELIMINÉ:* CLSID Extra Buttons: {2670000A-7350-4f3c-8081-5663EE0C6C49}
ELIMINÉ:* CLSID Extra Buttons: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}
ELIMINÉ: Service: bavsvc
ELIMINÉ: Service: bhipssvc
ELIMINÉ: Service: savesenselive
ELIMINÉ: Service: WajamUpdaterV3
ELIMINÉ Driver Key: Bfilter
ELIMINÉ Driver Key: Bfmon
ELIMINÉ Driver Key: Bprotect
ELIMINÉ: HKCU\Software\Baidu Security
ELIMINÉ: HKCU\Software\SaveSenseLive
ELIMINÉ: HKCU\Software\SaveSense
ELIMINÉ:³ HKLM\Software\Wow6432Node\Baidu Security
ELIMINÉ: HKLM\Software\Wow6432Node\SaveSenseLive
ELIMINÉ: HKLM\Software\Wow6432Node\SweetIM
ELIMINÉ: HKLM\Software\Wow6432Node\supWPM
ELIMINÉ: Service: savesenselivem
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Baidu Antivirus
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E7F552EF334C802D75A55F0F6344722
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156

========== Valores do Registo ==========
ELIMINÉ RunValue: LiveSupport
ELIMINÉ RunValue: fst_br_60
ELIMINÉ: {0A36BD9D-1373-4D3B-A8E7-AA17522B9703}
ELIMINÉ: {BD548779-F970-45DB-89EE-0714459DA990}
Ausente Valor Perfil Padrão: FirewallRaz :
Ausente Valor Perfil Domínio FirewallRaz :
ELIMINÉ: FirewallRaz (Private) : {881AF3A1-3B19-4AFE-98B5-408C77251AB5}
ELIMINÉ: FirewallRaz (Private) : {9B0E1510-7BF4-4E4A-84A9-99258EA49A48}
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value

========== Preferências do navegador ==========
AGORA Chrome File: C:\Users\Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Preferences
ELIMINÉ Chrome Site: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
ELIMINÉ Folder Chrome: C:\Users\Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikdaiaidiiiogaidkkekcmokcgcdeac

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\users\jacqueline\appdata\local\google\chrome\user data\default\preferences
ELIMINÉ: c:\users\jacqueline\appdata\local\savesense\savesenseie.dll
ELIMINÉ: c:\windows\tasks\apsnotifierpp1.job
ELIMINÉ: c:\windows\tasks\apsnotifierpp2.job
ELIMINÉ: c:\windows\tasks\apsnotifierpp3.job
ELIMINÉ: c:\windows\tasks\bench-sys.job
ELIMINÉ: c:\windows\tasks\bench-updater removing.job
ELIMINÉ: c:\windows\tasks\savesense.job
ELIMINÉ: c:\windows\tasks\savesenseliveupdatetaskmachinecore.job
ELIMINÉ: c:\windows\tasks\savesenseliveupdatetaskmachineua.job
ELIMINA REINICIAR: c:\windows\system32\drivers\bfilter.sys
ELIMINA REINICIAR: c:\windows\system32\drivers\bfmon.sys
ELIMINA REINICIAR: c:\windows\system32\drivers\bprotect.sys
ELIMINÉ: C:\Windows\Installer\9bcdd.msi
ELIMINÉ Temporários windows (230) (217.766.325 octets)
ELIMINÉ Flash Cookies (0) (0 octets)

========== Ficheiro HOSTS ==========
O ficheiro Hosts não foi reparado, por favor, desative o seu antivírus.

========== Tarefa planificada ==========
ELIMINÉ: APSnotifierPP1
ELIMINÉ: APSnotifierPP2
ELIMINÉ: APSnotifierPP3
ELIMINÉ: bench-sys
ELIMINÉ: SaveSense
ELIMINÉ: SaveSense
ELIMINÉ: SaveSense
ELIMINÉ: SaveSense
ELIMINÉ: SaveSenseLiveUpdateTaskMachineCore
ELIMINÉ: SaveSenseLiveUpdateTaskMachineCore
ELIMINÉ: SaveSenseLiveUpdateTaskMachineUA
ELIMINÉ: {89516B5A-CB5B-4693-B7B9-8D6F6EC6EAC7}

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso


========== Recapitulativo ==========
2 : Processo memória
1 : Modulos memória
40 : Chaves do Registo
14 : Valores do Registo
1 : Pastas
16 : Ficheiros
3 : Preferências do navegador
1 : Ficheiro HOSTS
3 : Estado dos serviços
12 : Tarefa planificada
1 : Restauração Sistema


End of clean in 02mn 05s

========== Caminho do ficheiro do relatório ==========
C:\Users\Jacqueline\AppData\Roaming\ZHP\ZHPFix[R1].txt - 17/02/2014 13:57:31 [7255]

Vários problemas foram removidos. Como está o PC depois desta limpeza?

Sumiu tudo!!!!! Obrigada campeão!!!

Olá Power Max... valeu!!!!  :rindo_atoa:   Parece que tirou um mal aqui. Estou aliviada.
desapareceu tudo... nem uma propaganda mais.
muito obrigada mesmo.

Como faço pra instalar o windows original no meu pc? e qual o antivirus que vc recomenda?
Agora entendi a importância do cuidado e zelo na internet.

Que bom que o PC está melhor.

Vamos fazer só mais este procedimento para ver se não há outras coisas ruins nele:

 Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek.

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Oi Max... acho que devo desabilitar o antivirus avast que tá ativado? pois ele bloqueou o arquivo que vc pediu pra baixar (http://www.hijackthis.nl/smeenk/)

Jacque escreveu:Oi Max... acho que devo desabilitar o antivirus avast que tá ativado? pois ele bloqueou o arquivo que vc pediu pra baixar (http://www.hijackthis.nl/smeenk/)

Sim, é só desativar temporariamente o Avast para evitar conflitos.

Zoek.exe v5.0.0.0 Updated 17-February-2014
Tool run by Jacqueline on 17/02/2014 at 17:02:59,27.
Microsoft Windows 7 Ultimate  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: B:\Users\Jacqueline\Downloads\zoek.exe [Scan all users] [Script inserted]

===== Runcheck 17:03:47,34 =====

--- Create Environment Variables 17:03:51,81
--- Create System Restore Point 17:04:09,37
--- Checking Input 17:04:52,07
--- Reset Hosts File 17:05:01,97
--- AU AppData Check 17:05:04,67
--- Remove From Windows Installer 17:05:10,82
--- IE Startpage Check 17:07:12,56
--- Program Files DB Check 17:07:51,20
--- C:\Users\Convidado\AppData\Roaming DB Check 17:09:00,65
--- C:\Users\Default\AppData\Roaming DB Check 17:09:00,65
--- C:\Users\Default User\AppData\Roaming DB Check 17:09:00,65
--- C:\Users\Jacqueline\AppData\Roaming DB Check 17:09:00,65
--- C:\Users\USURIO~1\AppData\Roaming DB Check 17:09:00,65
--- C:\Windows\SysNative\config\systemprofile\AppData\Roaming DB Check 17:09:00,65
--- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming DB Check 17:09:00,65
--- C:\Windows\serviceprofiles\networkservice\AppData\Roaming DB Check 17:09:00,65
--- C:\Windows\serviceprofiles\Localservice\AppData\Roaming DB Check 17:09:00,65
--- C:\Users\Jacqueline DB Check 17:12:48,96
--- C:\ProgramData DB Check 17:13:14,15
--- C:\Users\Administrador\AppData\Local DB Check 17:13:16,47
--- C:\Users\Convidado\AppData\Local DB Check 17:13:16,47
--- C:\Users\Default\AppData\Local DB Check 17:13:16,47
--- C:\Users\Default User\AppData\Local DB Check 17:13:16,47
--- C:\Users\HomeGroupUser$\AppData\Local DB Check 17:13:16,47
--- C:\Users\Jacqueline\AppData\Local DB Check 17:13:16,47
--- C:\Users\USURIO~1\AppData\Local DB Check 17:13:16,47
--- C:\Windows\SysNative\config\systemprofile\AppData\Local DB Check 17:13:16,47
--- C:\Windows\sysWoW64\config\systemprofile\AppData\Local DB Check 17:13:16,47
--- C:\Windows\serviceprofiles\networkservice\AppData\Local DB Check 17:13:16,47
--- C:\Windows\serviceprofiles\Localservice\AppData\Local DB Check 17:13:16,47
--- C:\ProgramData\Microsoft\Windows\Start Menu\Programs DB Check 17:16:42,84
--- C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs DB Check 17:16:55,36
--- Tasks DB Check 17:17:02,38
--- Downloads DB Check 17:17:07,64
--- C:\Users\Convidado\AppData\LocalLow DB Check 17:17:15,07
--- C:\Users\Jacqueline\AppData\LocalLow DB Check 17:17:15,07
--- C:\Windows\SysNative\config\systemprofile\AppData\LocalLow DB Check 17:17:15,07
--- C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow DB Check 17:17:15,07
--- C:\Windows\serviceprofiles\networkservice\AppData\LocalLow DB Check 17:17:15,07
--- C:\Windows\serviceprofiles\Localservice\AppData\LocalLow DB Check 17:17:15,07
--- Tasks2 DB Check 17:19:05,73
--- Documents DB Check 17:19:35,00
--- B:\Users\Jacqueline\Desktop  DB Check 17:19:46,06
--- Services DB Check 17:19:59,83
--- FF prefs.js DB Check 17:20:24,64
--- Create Sample 17:20:26,99
--- Del by CLSID 17:20:32,85
--- Delete Services 17:21:32,79
--- Delete files\folders 17:21:40,41
--- Create Backups 17:21:40,84
--- Firefox Extensions 17:21:52,69
--- Chrome Look 17:21:53,39

Este não é o relatório. Veja se neste local abaixo tem o relatório correto dele:
C:\zoek-results.txt

O relatório dele é parecido com este abaixo:

Zoek.exe v5.0.0.0 Updated 15-February-2014
Tool run by Roma on 16/02/2014 at 20:37:51,12.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Roma\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

16/02/2014 20:41:49 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Creating Sample_022014_2248.zip ======================

Copied file C:\Users\Roma\atube-catcher-291347-baixaki-32-bits.exe to sample\atube-catcher-291347-baixaki-32-bits.exe
Copied file C:\Users\Roma\SkypeSetup.exe to sample\SkypeSetup.exe
sample\atube-catcher-291347-baixaki-32-bits.exe renamed to 2B6757970C1AF004DE2C52F047B7F988
sample\SkypeSetup.exe renamed to DFD5D6E3A3D7C9F8DDFB5B04DABE214E

C:\Users\Public\Desktop\sample_022014_2248.zip created successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\YahooAUService deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\YahooAUService deleted successfully

oI mAX...   ACHO QUE AINDA NÃO TINHA TERMINADO O RELATÓRIO...  ABAIXO SEGUE ELE COMPLETO.

DESDE JÁ AGRADEÇO.

------------------------------------------------------------------------------------------------------
Zoek.exe v5.0.0.0 Updated 17-February-2014
Tool run by Jacqueline on 17/02/2014 at 17:02:59,27.
Microsoft Windows 7 Ultimate  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: B:\Users\Jacqueline\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

17/02/2014 17:04:46 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1       localhost
::1             localhost

==== Creating Sample_022014_1720.zip ======================

Copied file C:\Users\Jacqueline\AppData\Local\AnyProtectScannerSetup.exe to sample\AnyProtectScannerSetup.exe
sample\AnyProtectScannerSetup.exe renamed to B6FA80D843378E77282847A697A286B2

C:\Users\Public\Desktop\sample_022014_1720.zip created successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\Jacqueline\AppData\Roaming\ANICONFIG_{7A762CE5-A505-4001-9761-912CEEB4B0A3}.ini deleted
C:\windows\SysNative\ljkb deleted
C:\Users\Jacqueline\AppData\Local\AnyProtectScannerSetup.exe deleted
"C:\Users\Jacqueline\AppData\Roaming\ANIWZCS{7A762CE5-A505-4001-9761-912CEEB4B0A3}" deleted

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[16/02/2014 21:02]

YTTBoOKMark - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\bklagbdcclahcidldconkdbfeeejaijm
YoutubeAdblocker - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdnnaeafliiicolagcdiboholdfjlfmk
SNT - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhldjpkbepefpgpohfibhndniphinaef
websave - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjadejohlccemjoggmmcgeilliihpgh
Facebook for Chrome - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp
SNT - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\glafbappojfbdiklekbeiehpefbmombn
YTBoOkMarK - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcigfboedjhfkaocgipcngkompfppgjp
webusavve - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\negapgojcakofkiebjcneioekobkdlnp
YoutubeAdblocker - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\npaolbnegiikbijgmikfeoonipemjaam
Speed Tracer - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl
Google Docs - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YTTBoOKMark - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\bklagbdcclahcidldconkdbfeeejaijm
YouTube - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
YoutubeAdblocker - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdnnaeafliiicolagcdiboholdfjlfmk
Google Search - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
SNT - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhldjpkbepefpgpohfibhndniphinaef
websave - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjadejohlccemjoggmmcgeilliihpgh
Facebook for Chrome - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp
SNT - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\glafbappojfbdiklekbeiehpefbmombn
YTBoOkMarK - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcigfboedjhfkaocgipcngkompfppgjp
webusavve - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\negapgojcakofkiebjcneioekobkdlnp
Google Wallet - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
YoutubeAdblocker - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\npaolbnegiikbijgmikfeoonipemjaam
Speed Tracer - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl
Gmail - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
YTTBoOKMark - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bklagbdcclahcidldconkdbfeeejaijm
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdnnaeafliiicolagcdiboholdfjlfmk
SNT - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhldjpkbepefpgpohfibhndniphinaef
websave - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjadejohlccemjoggmmcgeilliihpgh
Facebook for Chrome - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp
SNT - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glafbappojfbdiklekbeiehpefbmombn
YTBoOkMarK - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcigfboedjhfkaocgipcngkompfppgjp
webusavve - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\negapgojcakofkiebjcneioekobkdlnp
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\npaolbnegiikbijgmikfeoonipemjaam
Speed Tracer - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl
Google Docs - Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
avast Online Security - Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Wallet - Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chrome Fix ======================

C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_websearch.searchinweb.info_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_websearch.searchinweb.info_0.localstorage-journal deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage-journal deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\bklagbdcclahcidldconkdbfeeejaijm deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\bklagbdcclahcidldconkdbfeeejaijm deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bklagbdcclahcidldconkdbfeeejaijm deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdnnaeafliiicolagcdiboholdfjlfmk deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdnnaeafliiicolagcdiboholdfjlfmk deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdnnaeafliiicolagcdiboholdfjlfmk deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cdnnaeafliiicolagcdiboholdfjlfmk_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cdnnaeafliiicolagcdiboholdfjlfmk_0.localstorage-journal deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdnnaeafliiicolagcdiboholdfjlfmk deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhldjpkbepefpgpohfibhndniphinaef deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhldjpkbepefpgpohfibhndniphinaef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhldjpkbepefpgpohfibhndniphinaef deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dhldjpkbepefpgpohfibhndniphinaef_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dhldjpkbepefpgpohfibhndniphinaef_0.localstorage-journal deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dhldjpkbepefpgpohfibhndniphinaef deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjadejohlccemjoggmmcgeilliihpgh deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjadejohlccemjoggmmcgeilliihpgh deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkjadejohlccemjoggmmcgeilliihpgh deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fkjadejohlccemjoggmmcgeilliihpgh_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fkjadejohlccemjoggmmcgeilliihpgh_0.localstorage-journal deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkjadejohlccemjoggmmcgeilliihpgh deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gdalhedleemkkdjddjgfjmcnbpejpapp_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gdalhedleemkkdjddjgfjmcnbpejpapp_0.localstorage-journal deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\glafbappojfbdiklekbeiehpefbmombn deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\glafbappojfbdiklekbeiehpefbmombn deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\glafbappojfbdiklekbeiehpefbmombn deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_glafbappojfbdiklekbeiehpefbmombn_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_glafbappojfbdiklekbeiehpefbmombn_0.localstorage-journal deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\glafbappojfbdiklekbeiehpefbmombn deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcigfboedjhfkaocgipcngkompfppgjp deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcigfboedjhfkaocgipcngkompfppgjp deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcigfboedjhfkaocgipcngkompfppgjp deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\negapgojcakofkiebjcneioekobkdlnp deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\negapgojcakofkiebjcneioekobkdlnp deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\negapgojcakofkiebjcneioekobkdlnp deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_negapgojcakofkiebjcneioekobkdlnp_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_negapgojcakofkiebjcneioekobkdlnp_0.localstorage-journal deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\negapgojcakofkiebjcneioekobkdlnp deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\npaolbnegiikbijgmikfeoonipemjaam deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\npaolbnegiikbijgmikfeoonipemjaam deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_npaolbnegiikbijgmikfeoonipemjaam_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_npaolbnegiikbijgmikfeoonipemjaam_0.localstorage-journal deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npaolbnegiikbijgmikfeoonipemjaam deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ognampngfcbddbfemdapefohjiobgbdl deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ognampngfcbddbfemdapefohjiobgbdl_0.localstorage deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ognampngfcbddbfemdapefohjiobgbdl_0.localstorage-journal deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\npaolbnegiikbijgmikfeoonipemjaam deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?FORM=U223DF&PC=U223&q={searchTerms}&src=IE-SearchBox"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Adobe Reader XI.lnk - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Users\Public\Desktop\avast Free Antivirus.lnk -  
C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe
C:\Users\Public\Desktop\theWord.lnk - C:\Program Files (x86)\The Word\theword.exe
C:\Users\Public\Desktop\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast\avast Free Antivirus.lnk -  
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk - C:\Program Files\CCleaner\uninst.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proteção de Terminal Trusteer\Console do Trusteer Endpoint Protection.lnk -  
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proteção de Terminal Trusteer\Encerrar Trusteer Endpoint Protection.lnk -  
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proteção de Terminal Trusteer\Iniciar Trusteer Endpoint Protection.lnk -  
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk - C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPDiag.lnk - C:\Program Files (x86)\ZHPDiag\ZHPhep.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPFix.lnk - C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe

==== shortcuts in Quick Launch ======================

C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk - C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE /recycle
C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Convidado\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk - C:\Windows\system32\calc.exe
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Jacqueline\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\39095409-41d5-42a3-b903-df472b85a8da deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\6acc8fef-81e9-4313-b55a-47e9000665da deleted successfully
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Convidado\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Convidado\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jacqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jacqueline\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Jacqueline\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=220 folders=67 6147048 bytes)

==== Empty Temp Folders ======================

C:\Users\Convidado\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Users\Jacqueline\AppData\Local\Temp  will be emptied at reboot
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\JACQUE~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\npaolbnegiikbijgmikfeoonipemjaam" not found

==== EOF on 17/02/2014 at 20:23:32,21 ======================

Como está o computador depois da limpeza?

Oi Max.... ainda continuam propagandas tipo OLX, FIAT entre outras mas creio que são propagandas pagas.

Obrigada.

Jacque escreveu:Oi Max.... ainda continuam propagandas tipo OLX, FIAT entre outras mas creio que são propagandas pagas.

Obrigada.

Sim, quase todo site tem suas propagandas normais, mas ainda constam propagandas causadas por adwares? Ou são só as propagandas normais mesmo?

Acho que são só as normais. E também hj fiz uma pesquisa no google e fui até ao walmart verificar um produto e agora aonde abro as vezes aparece as publicidades do walmart mostrando aquele determinado produto... ou se pesquiso por exemplo viagem tb aparece as publicidades de viagem.
É normal?
Obrigada.