propagandas indesejadas no navegador

o unico log no desktop é este
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-11-2013 (ATTENTION: ====> FRST version is 113 days old and could be outdated)
Ran by Sergio (administrator) on BOLZAN on 17-03-2014 08:18:31
Running from C:\Users\Sergio\Desktop
Windows 7 Home Basic Service Pack 1 (X64) OS Language: Portuguese Brazilian
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
() C:\Program Files (x86)\Hewlett-Packard\HP Keyboard\ModLEDKey.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(CyberLink) C:\Program Files (x86)\Cyberlink\YouCam\YCMMirage.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\GCalService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Calendar\Service\HPTouchSmartSyncCalReminderApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\splwow64.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [w] - C:\Users\Sergio\AppData\Roaming\w.vbs [98222 2013-09-23] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKCU\...\Run: [w] - C:\Users\Sergio\AppData\Roaming\w.vbs [98222 2013-09-23] ()
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
MountPoints2: E - E:\setup.exe
Startup: C:\Users\Sergio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w.vbs ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler: livecall - No CLSID Value -
Handler: msnim - No CLSID Value -
Handler-x32: livecall - No CLSID Value -
Handler-x32: msnim - No CLSID Value -
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2012-05-22] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Sergio\AppData\Roaming\Mozilla\Firefox\Profiles\aaywiser.default
FF NewTab: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
FF Keyword.URL: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=1.2.22 - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Sergio\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Sergio\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Sergio\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\buscape.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mercadolivre.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-br.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Sergio\AppData\Roaming\Mozilla\Firefox\Profiles\aaywiser.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: Adblock Plus - C:\Users\Sergio\AppData\Roaming\Mozilla\Firefox\Profiles\aaywiser.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [VIP1X@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\
FF HKLM-x32\...\Firefox\Extensions: [VIP2X@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

==================== Services (Whitelisted) =================

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-06-01] (Nero AG)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-08-12] (PDF Complete Inc)
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [84080 2011-12-05] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2012-05-22] ()
S3 BdApiUtil; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdApiUtil64.sys [x]
S3 BdCameraProtect; \??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdCameraProtect64.sys [x]
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [x]
S3 PCFApiUtil; \??\C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil64.sys [x]
U5 UnlockerDriver5; C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-17 08:18 - 2014-03-17 08:18 - 01958440 _____ (Farbar) C:\Users\Sergio\Desktop\FRST64.exe
2014-03-17 08:18 - 2014-03-17 08:18 - 00010559 _____ C:\Users\Sergio\Desktop\FRST.txt
2014-03-17 07:34 - 2014-03-17 07:34 - 00002898 _____ C:\Windows\PFRO.log
2014-03-17 07:34 - 2014-03-17 07:34 - 00000056 _____ C:\Windows\setupact.log
2014-03-17 07:34 - 2014-03-17 07:34 - 00000000 _____ C:\Windows\setuperr.log
2014-03-16 21:19 - 2014-03-16 22:00 - 00000000 ____D C:\FRST
2014-03-16 21:04 - 2014-03-16 20:42 - 00001537 _____ C:\Users\Sergio\Desktop\ZHPFixReport.txt
2014-03-16 20:08 - 2014-03-16 20:08 - 00001395 _____ C:\Users\Sergio\Desktop\Internet Explorer.lnk
2014-03-16 20:08 - 2014-03-16 20:08 - 00001165 _____ C:\Users\Sergio\Desktop\Mozilla Firefox.lnk
2014-03-16 20:08 - 2014-03-16 20:08 - 00000975 _____ C:\Users\Sergio\Desktop\Ares.lnk
2014-03-16 20:03 - 2014-03-16 20:03 - 00030330 _____ C:\Users\Sergio\Desktop\ZHPDiag.txt
2014-03-16 19:07 - 2014-03-16 19:07 - 00003195 _____ C:\Users\Sergio\Desktop\Sistema Inteligente de Monitoramento.lnk
2014-03-16 18:55 - 2014-03-16 21:04 - 00000000 ____D C:\Users\Sergio\AppData\Roaming\ZHP
2014-03-16 18:55 - 2014-03-16 20:02 - 00000000 ____D C:\Program Files (x86)\ZHPDiag
2014-03-15 21:52 - 2013-09-23 15:30 - 00098222 _____ C:\Users\Sergio\AppData\Roaming\w.vbs
2014-03-15 20:01 - 2014-03-15 19:49 - 00024064 _____ C:\Windows\zoek-delete.exe
2014-03-15 19:50 - 2014-03-15 21:52 - 00016779 _____ C:\zoek-results.log
2014-03-14 22:35 - 2014-03-14 22:36 - 00000000 ____D C:\AdwCleaner
2014-03-13 21:20 - 2014-03-13 21:21 - 00000000 ___HD C:\Windows\msdownld.tmp
2014-03-12 23:29 - 2014-03-01 03:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 23:29 - 2014-03-01 02:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 23:29 - 2014-03-01 02:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 23:29 - 2014-03-01 01:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 23:29 - 2014-03-01 01:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 23:29 - 2014-03-01 01:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 23:29 - 2014-03-01 01:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 23:29 - 2014-03-01 01:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 23:29 - 2014-03-01 01:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 23:29 - 2014-03-01 01:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 23:29 - 2014-03-01 01:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 23:29 - 2014-03-01 01:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 23:29 - 2014-03-01 01:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 23:29 - 2014-03-01 01:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 23:29 - 2014-03-01 01:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 23:29 - 2014-03-01 01:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 23:29 - 2014-03-01 01:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 23:29 - 2014-03-01 00:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 23:29 - 2014-03-01 00:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 23:29 - 2014-03-01 00:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 23:29 - 2014-03-01 00:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 23:29 - 2014-03-01 00:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 23:29 - 2014-03-01 00:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 23:29 - 2014-03-01 00:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 23:29 - 2014-03-01 00:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 23:29 - 2014-03-01 00:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 23:29 - 2014-03-01 00:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 23:29 - 2014-03-01 00:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 23:29 - 2014-03-01 00:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 23:29 - 2014-03-01 00:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 23:29 - 2014-03-01 00:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 23:29 - 2014-03-01 00:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 23:29 - 2014-03-01 00:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 23:29 - 2014-03-01 00:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 23:29 - 2014-02-28 23:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 23:29 - 2014-02-28 23:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 23:29 - 2014-02-28 23:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 23:29 - 2014-02-28 23:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 23:29 - 2014-02-28 23:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 23:29 - 2014-02-28 23:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 23:05 - 2014-02-06 22:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 23:05 - 2014-01-28 23:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 23:05 - 2014-01-28 23:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 23:05 - 2014-01-27 23:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-12 23:05 - 2013-03-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-03-12 23:00 - 2014-03-12 23:00 - 00000000 ____D C:\ProgramData\Apple Computer
2014-03-12 23:00 - 2014-03-12 23:00 - 00000000 ____D C:\Program Files (x86)\QuickTime
2014-03-12 23:00 - 2014-02-03 23:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 23:00 - 2014-02-03 23:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 23:00 - 2014-02-03 23:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-12 23:00 - 2014-02-03 23:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-12 22:54 - 2014-03-12 22:54 - 41404760 _____ (Apple Inc.) C:\Users\Sergio\Downloads\QuickTimeInstaller.exe
2014-03-12 22:53 - 2014-03-12 22:53 - 00000000 ____D C:\ProgramData\Real
2014-03-12 17:50 - 2014-03-12 17:50 - 00000000 ____D C:\SIM
2014-03-12 17:49 - 2014-03-12 17:49 - 00000000 ____D C:\Users\Sergio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intelbras
2014-03-12 17:49 - 2014-03-12 17:49 - 00000000 ____D C:\Program Files (x86)\Intelbras
2014-03-10 07:20 - 2014-03-16 08:46 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForSergio.job
2014-03-10 07:20 - 2014-03-15 21:57 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForSergio
2014-03-09 20:15 - 2014-03-11 20:51 - 00000000 ____D C:\Users\Sergio\Desktop\icatel materiais
2014-03-01 23:01 - 2014-03-01 23:01 - 00000000 ____D C:\Users\Sergio\AppData\Roaming\Unity
2014-03-01 22:58 - 2014-03-01 22:58 - 00000000 ____D C:\Users\Sergio\AppData\Local\Unity
2014-02-25 09:43 - 2014-02-25 09:44 - 00000000 ____D C:\Users\Sergio\Documents\Luciana

==================== One Month Modified Files and Folders =======

2014-03-17 08:18 - 2014-03-17 08:18 - 01958440 _____ (Farbar) C:\Users\Sergio\Desktop\FRST64.exe
2014-03-17 08:18 - 2014-03-17 08:18 - 00010559 _____ C:\Users\Sergio\Desktop\FRST.txt
2014-03-17 07:41 - 2013-08-12 21:07 - 01215455 _____ C:\Windows\WindowsUpdate.log
2014-03-17 07:41 - 2009-07-14 01:45 - 00022624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-17 07:41 - 2009-07-14 01:45 - 00022624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-17 07:40 - 2012-05-22 02:08 - 03828108 _____ C:\Windows\system32\prfh0416.dat
2014-03-17 07:40 - 2012-05-22 02:08 - 03127708 _____ C:\Windows\system32\prfc0416.dat
2014-03-17 07:40 - 2009-07-14 02:13 - 00006254 _____ C:\Windows\system32\PerfStringBackup.INI
2014-03-17 07:34 - 2014-03-17 07:34 - 00002898 _____ C:\Windows\PFRO.log
2014-03-17 07:34 - 2014-03-17 07:34 - 00000056 _____ C:\Windows\setupact.log
2014-03-17 07:34 - 2014-03-17 07:34 - 00000000 _____ C:\Windows\setuperr.log
2014-03-17 07:34 - 2013-12-27 19:47 - 00000434 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2014-03-17 07:34 - 2012-05-22 02:44 - 00000000 ____D C:\ProgramData\PDFC
2014-03-17 07:34 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-03-16 22:38 - 2013-01-07 16:24 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{86E99C62-9AA7-4DA2-B006-90880630A06D}
2014-03-16 22:00 - 2014-03-16 21:19 - 00000000 ____D C:\FRST
2014-03-16 21:04 - 2014-03-16 18:55 - 00000000 ____D C:\Users\Sergio\AppData\Roaming\ZHP
2014-03-16 20:42 - 2014-03-16 21:04 - 00001537 _____ C:\Users\Sergio\Desktop\ZHPFixReport.txt
2014-03-16 20:08 - 2014-03-16 20:08 - 00001395 _____ C:\Users\Sergio\Desktop\Internet Explorer.lnk
2014-03-16 20:08 - 2014-03-16 20:08 - 00001165 _____ C:\Users\Sergio\Desktop\Mozilla Firefox.lnk
2014-03-16 20:08 - 2014-03-16 20:08 - 00000975 _____ C:\Users\Sergio\Desktop\Ares.lnk
2014-03-16 20:03 - 2014-03-16 20:03 - 00030330 _____ C:\Users\Sergio\Desktop\ZHPDiag.txt
2014-03-16 20:02 - 2014-03-16 18:55 - 00000000 ____D C:\Program Files (x86)\ZHPDiag
2014-03-16 19:07 - 2014-03-16 19:07 - 00003195 _____ C:\Users\Sergio\Desktop\Sistema Inteligente de Monitoramento.lnk
2014-03-16 08:46 - 2014-03-10 07:20 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForSergio.job
2014-03-15 21:57 - 2014-03-10 07:20 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForSergio
2014-03-15 21:52 - 2014-03-15 19:50 - 00016779 _____ C:\zoek-results.log
2014-03-15 19:58 - 2013-12-06 20:10 - 00000000 ____D C:\zoek_backup
2014-03-15 19:58 - 2013-01-07 16:24 - 00000000 ___RD C:\Users\Sergio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-15 19:58 - 2013-01-07 16:17 - 00000000 ____D C:\Users\Sergio
2014-03-15 19:49 - 2014-03-15 20:01 - 00024064 _____ C:\Windows\zoek-delete.exe
2014-03-14 22:36 - 2014-03-14 22:35 - 00000000 ____D C:\AdwCleaner
2014-03-13 21:21 - 2014-03-13 21:20 - 00000000 ___HD C:\Windows\msdownld.tmp
2014-03-13 20:49 - 2013-01-07 20:53 - 00000000 ____D C:\Windows\pss
2014-03-13 10:19 - 2013-03-24 13:05 - 00000000 ____D C:\Users\Sergio\Documents\Aniver Papai
2014-03-13 10:17 - 2013-12-01 08:22 - 00000000 ____D C:\Users\Sergio\Documents\fotos do celular
2014-03-13 10:17 - 2013-03-25 09:09 - 00000000 ____D C:\Users\Sergio\Documents\Mamãe e eu
2014-03-13 10:15 - 2013-01-26 20:21 - 00000000 ____D C:\Users\Sergio\AppData\Local\CrashDumps
2014-03-13 07:29 - 2009-07-14 01:45 - 00409968 _____ C:\Windows\system32\FNTCACHE.DAT
2014-03-13 07:28 - 2013-03-13 09:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-03-13 07:28 - 2013-03-13 09:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 23:00 - 2014-03-12 23:00 - 00000000 ____D C:\ProgramData\Apple Computer
2014-03-12 23:00 - 2014-03-12 23:00 - 00000000 ____D C:\Program Files (x86)\QuickTime
2014-03-12 22:56 - 2013-12-15 15:37 - 00000029 _____ C:\Windows\SysWOW64\config.ini
2014-03-12 22:54 - 2014-03-12 22:54 - 41404760 _____ (Apple Inc.) C:\Users\Sergio\Downloads\QuickTimeInstaller.exe
2014-03-12 22:53 - 2014-03-12 22:53 - 00000000 ____D C:\ProgramData\Real
2014-03-12 17:50 - 2014-03-12 17:50 - 00000000 ____D C:\SIM
2014-03-12 17:49 - 2014-03-12 17:49 - 00000000 ____D C:\Users\Sergio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intelbras
2014-03-12 17:49 - 2014-03-12 17:49 - 00000000 ____D C:\Program Files (x86)\Intelbras
2014-03-11 20:51 - 2014-03-09 20:15 - 00000000 ____D C:\Users\Sergio\Desktop\icatel materiais
2014-03-11 13:24 - 2013-01-22 12:21 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-03-11 13:24 - 2013-01-08 14:26 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2014-03-07 22:12 - 2013-01-10 21:13 - 00000000 ____D C:\Users\Sergio\AppData\Roaming\vlc
2014-03-06 13:34 - 2013-01-07 16:44 - 00000000 ____D C:\Users\Sergio\AppData\Local\Windows Live
2014-03-01 23:01 - 2014-03-01 23:01 - 00000000 ____D C:\Users\Sergio\AppData\Roaming\Unity
2014-03-01 22:58 - 2014-03-01 22:58 - 00000000 ____D C:\Users\Sergio\AppData\Local\Unity
2014-03-01 03:05 - 2014-03-12 23:29 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 02:17 - 2014-03-12 23:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 02:16 - 2014-03-12 23:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 01:58 - 2014-03-12 23:29 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 01:52 - 2014-03-12 23:29 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 01:51 - 2014-03-12 23:29 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 01:42 - 2014-03-12 23:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 01:40 - 2014-03-12 23:29 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 01:37 - 2014-03-12 23:29 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 01:33 - 2014-03-12 23:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 01:33 - 2014-03-12 23:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 01:32 - 2014-03-12 23:29 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 01:30 - 2014-03-12 23:29 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 01:23 - 2014-03-12 23:29 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 01:17 - 2014-03-12 23:29 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 01:11 - 2014-03-12 23:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 01:02 - 2014-03-12 23:29 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 00:54 - 2014-03-12 23:29 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 00:52 - 2014-03-12 23:29 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 00:51 - 2014-03-12 23:29 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 00:47 - 2014-03-12 23:29 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 00:43 - 2014-03-12 23:29 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 00:43 - 2014-03-12 23:29 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 00:42 - 2014-03-12 23:29 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 00:40 - 2014-03-12 23:29 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 00:38 - 2014-03-12 23:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 00:37 - 2014-03-12 23:29 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 00:35 - 2014-03-12 23:29 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 00:18 - 2014-03-12 23:29 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 00:16 - 2014-03-12 23:29 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 00:14 - 2014-03-12 23:29 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 00:10 - 2014-03-12 23:29 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 00:03 - 2014-03-12 23:29 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 00:00 - 2014-03-12 23:29 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-28 23:57 - 2014-03-12 23:29 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-28 23:38 - 2014-03-12 23:29 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-28 23:32 - 2014-03-12 23:29 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-28 23:27 - 2014-03-12 23:29 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-28 23:25 - 2014-03-12 23:29 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-28 23:25 - 2014-03-12 23:29 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 23:15 - 2013-12-15 15:37 - 00052032 _____ (Baidu, Inc.) C:\Windows\system32\Drivers\Bfilter.sys
2014-02-27 23:15 - 2013-12-15 15:37 - 00034624 _____ (Baidu, Inc.) C:\Windows\system32\Drivers\Bfmon.sys
2014-02-25 09:44 - 2014-02-25 09:43 - 00000000 ____D C:\Users\Sergio\Documents\Luciana
2014-02-24 17:48 - 2013-01-07 19:05 - 00000000 ____D C:\Users\Sergio\AppData\Local\Ares
2014-02-22 08:34 - 2013-08-14 21:56 - 00000000 ____D C:\Windows\system32\MRT
2014-02-16 07:44 - 2013-01-30 07:05 - 00000000 ____D C:\Users\Sergio\Documents\filmes lila
2014-02-15 22:51 - 2013-02-03 15:50 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-15 06:29 - 2013-03-29 08:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

Some content of TEMP:
====================
C:\Users\Sergio\AppData\Local\Temp\promote-upx.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 07:49

==================== End Of Log ============================

é porque você não fez este procedimento abaixo, faça ele por gentileza:

Execute o FRST. Clique no botão Fix.

Aguarde e ao final, o log Fixlog.txt será salvo no seu desktop.

TÓPICO ARQUIVADO

Como o autor não respondeu por mais de 15 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.