Quero tirar o ads by View-Password do meu notebook

Ola , meu nome é Ionaldo Costa...
tenho um problema no meu Not, e acabei pesquisando na net e encontrei vcs.. tomara que vcs possam me ajudar.
o meu problema eu ja vi que ja foi uma vez e exposto aqui e parece resolvido...
o meu caso e: Não consigo remover o ads by View-Password do meu notebook

   Olá.

  Siga, por gentileza, as dicas do tutorial abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

foi isso q encontrei...ve se é isso!!

hortcut Cleaner 1.2.9 by Lawrence Abrams (Grinler)
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Copyright 2008-2014 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Windows Version: Windows Vista (TM) Home Basic Service Pack 2
Program started at: 03/20/2014 06:02:32 PM.

Scanning for registry hijacks:

* No issues found in the Registry.

Searching for Hijacked Shortcuts:

Searching C:\Users\Ionaldo\AppData\Roaming\Microsoft\Windows\Start Menu\

Searching C:\ProgramData\Microsoft\Windows\Start Menu\

Searching C:\Users\Ionaldo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\

Searching C:\Users\Public\Desktop\

Searching C:\Users\Ionaldo\Desktop


0 bad shortcuts found.

Program finished at: 03/20/2014 06:03:53 PM
Execution time: 0 hours(s), 1 minute(s), and 20 seconds(s)

Você executou o Shortcut Cleaner, mas o que precisamos é do AdwCleaner, conforme mostra o tutorial que lhe passei na resposta anterior.

Desculpa pela meu erro!!
Olha não sei vc quer em anexo ou aqui !1 Então mandarei as duas formas!!

# AdwCleaner v3.022 - Report created 20/03/2014 at 18:59:08
# Updated 13/03/2014 by Xplode
# Operating System : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Username : Ionaldo - IONALDO-PC
# Running from : C:\Users\Ionaldo\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : Update FindRight
[#] Service Deleted : Util FindRight

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\baidu
Folder Deleted : C:\ProgramData\SaveSenseLive
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\open it!
Folder Deleted : C:\Program Files\BabylonToolbar
Folder Deleted : C:\Program Files\DAEMON Tools Toolbar
Folder Deleted : C:\Program Files\Object
Folder Deleted : C:\Program Files\openit
Folder Deleted : C:\Program Files\SaveSenseLive
Folder Deleted : C:\Users\Ionaldo\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Ionaldo\AppData\Local\Babylon
Folder Deleted : C:\Users\Ionaldo\AppData\Local\ConduitEngine
Folder Deleted : C:\Users\Ionaldo\AppData\Local\genienext
Folder Deleted : C:\Users\Ionaldo\AppData\Local\lollipop
Folder Deleted : C:\Users\Ionaldo\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Ionaldo\AppData\Local\PackageAware
Folder Deleted : C:\Users\Ionaldo\AppData\Local\SaveSense
Folder Deleted : C:\Users\Ionaldo\AppData\Local\SaveSenseLive
Folder Deleted : C:\Users\Ionaldo\AppData\Local\Smartbar
Folder Deleted : C:\Users\Ionaldo\AppData\Local\Temp\Iminent
Folder Deleted : C:\Users\Ionaldo\AppData\Local\Temp\Smartbar
Folder Deleted : C:\Users\Ionaldo\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Ionaldo\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\Ionaldo\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Ionaldo\AppData\LocalLow\ConduitEngine
Folder Deleted : C:\Users\Ionaldo\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Ionaldo\AppData\LocalLow\Smartbar
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\BabylonToolbar
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\baidu
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\DigitalSites
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\SaveSense
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\uniblue
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SaveSense
Folder Deleted : C:\Users\Ionaldo\Documents\Mobogenie
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default\Extensions\{2d7886a0-85bb-4bf2-b684-ba92b4b21d23}
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
Folder Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default\Extensions\ffxtlbr@babylon.com
File Deleted : C:\Users\Public\Desktop\Open It!.lnk
File Deleted : C:\Windows\system32\conduitEngine.tmp
File Deleted : C:\Users\Ionaldo\AppData\Local\Uninstall.exe
File Deleted : C:\Users\Ionaldo\Desktop\MySearchDial.url
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\mjiw1ioh.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\n6hqg3jw.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\r2kmwt2b.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\tzy5gn9a.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default\searchplugins\Web Search.xml
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\mjiw1ioh.default\user.js
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\n6hqg3jw.default\user.js
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default\user.js
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\r2kmwt2b.default\user.js
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\tzy5gn9a.default\user.js
File Deleted : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default\user.js
File Deleted : C:\Windows\Tasks\Digital Sites.job
File Deleted : C:\Windows\System32\Tasks\Digital Sites

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CF052BE0-79E0-43CF-AE24-31CA36459915}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF052BE0-79E0-43CF-AE24-31CA36459915}
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bho
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2233703
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2405726
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2567694
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2905346
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3004627E-F8E9-4E8B-909D-316753CBA923}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7854F00C-DC77-477E-A10E-603F48442D3B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\dt soft\daemon tools toolbar
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\Iminent
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\lollipop
Key Deleted : HKCU\Software\mysearchdial.com
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\smartbarbackup
Key Deleted : HKCU\Software\smartbarlog
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Digital Sites
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\openit open it!
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Digital Sites
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\openit open it!
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16514

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v14.0.1 (pt-BR)

[ File : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\mjiw1ioh.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "Mysearchdial");

[ File : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\n6hqg3jw.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "Mysearchdial");

[ File : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default\prefs.js ]

Line Deleted : user_pref("extensions.crossrider.bic", "14210cb594c2318c4f3626f4b5420e93");
Line Deleted : user_pref("extensions.mysearchdial.AL", 2);
Line Deleted : user_pref("extensions.mysearchdial.aflt", "dsites0103");
Line Deleted : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Line Deleted : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtBtCtDtDzzzyyDzytCyEtAyEtDzytN0D0Tzu0CyByBzytN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");
Line Deleted : user_pref("extensions.mysearchdial.cr", "33789275");
Line Deleted : user_pref("extensions.mysearchdial.dfltLng", "");
Line Deleted : user_pref("extensions.mysearchdial.dfltSrch", true);
Line Deleted : user_pref("extensions.mysearchdial.dnsErr", true);
Line Deleted : user_pref("extensions.mysearchdial.excTlbr", false);
Line Deleted : user_pref("extensions.mysearchdial.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtDtBtCtDtDzzzyyDzytCyEtAyEtDzytN0D0Tzu0CyByBzytN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Czut[...]
Line Deleted : user_pref("extensions.mysearchdial.id", "0021008959143409");
Line Deleted : user_pref("extensions.mysearchdial.instlDay", "16118");
Line Deleted : user_pref("extensions.mysearchdial.instlRef", "");
Line Deleted : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtDtBtCtDtDzzzyyDzytCyEtAyEtDzytN0D0Tzu0CyByBzytN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Cz[...]
Line Deleted : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.tlbrId", "base");
Line Deleted : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=dsites0103&cd=2XzuyEtN2Y1L1QzutDtDtBtCtDtDzzzyyDzytCyEtAyEtDzytN0D0Tzu0CyByBzytN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1[...]
Line Deleted : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
Line Deleted : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
Line Deleted : user_pref("extensions.mysearchdial_i.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial_i.newTab", false);
Line Deleted : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Line Deleted : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.022:1:12");

[ File : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\r2kmwt2b.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "Mysearchdial");

[ File : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\tzy5gn9a.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "Mysearchdial");

[ File : C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "Mysearchdial");

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\Ionaldo\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [25018 octets] - [20/03/2014 18:54:52]
AdwCleaner[S0].txt - [24130 octets] - [20/03/2014 18:59:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24191 octets] ##########

 Siga, por gentileza, as dicas deste tutorial para fazer uma limpeza de seu PC com o Malwarebytes:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log do Malwarebytes.

Ficamos no aguardo.

Demorou um pouco, mais esta aquii!

Malwarebytes Anti-Malware 1.75.0.1300
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Versão da base de dados: v2014.03.21.01

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Ionaldo :: IONALDO-PC [administrador]

20/03/2014 23:46:16
mbam-log-2014-03-20 (23-46-16).txt

Tipo de pesquisa: Completa (C:\|D:\|)
Opções de pesquisa activadas: Memoria | Arranque | Registo | Sistema de Ficheiros | Heurísticos/Extra | Heurísticos/Shuriken | PPI | MPI
Opções de pesquisa desactivadas: P2P
Objectos verificados: 398395
Tempo decorrido: 5 hora(s), 8 minuto(s), 3 segundo(s)

Processos de memória Detectados: 1
C:\Program Files\View-Password-soft\ViewPassword157.exe (PUP.Optional.ViewPassWord.A) -> 3368 -> Eliminar ao reiniciar.

Módulos de Memória Detectados: 0
(Nenhum item malicioso detectado)

Chaves do Registo Detectadas: 2
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VIEWPASSWORD (PUP.Optional.ViewPassWord.A) -> Movido para a quarentena e eliminado com sucesso.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\734bf04c-36e6-493b-82c5-2f07d7a137d3 (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.

Valores do Registo Detectados: 3
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings|ProxyServer (PUM.Bad.Proxy) -> Dados: http=127.0.0.1:13828 -> Movido para a quarentena e eliminado com sucesso.
HKCU\Software\Mozilla\Firefox\Extensions|{52daab07-ae4b-4d75-8c6e-1e5cb8ef5613} (PUP.Optional.ViewPassword.A) -> Dados: C:\Program Files\View-Password-soft\157.xpi -> Movido para a quarentena e eliminado com sucesso.
HKLM\SYSTEM\CurrentControlSet\Services\ViewPassword|ImagePath (PUP.Optional.ViewPassWord.A) -> Dados: C:\Program Files\View-Password-soft\ViewPassword157.exe -> Movido para a quarentena e eliminado com sucesso.

Itens de dados do Registo Detectados: 0
(Nenhum item malicioso detectado)

Pastas Detectadas: 1
C:\Program Files\View-Password-soft (PUP.Optional.ViewPassword.A) -> Eliminar ao reiniciar.

Ficheiros Detectados: 46
C:\AdwCleaner\Quarantine\C\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll.vir (PUP.Optional.BabylonToolBar.A) -> Movido para a quarentena e eliminado com sucesso.
C:\AdwCleaner\Quarantine\C\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll.vir (PUP.Optional.BabylonToolBar.A) -> Movido para a quarentena e eliminado com sucesso.
C:\AdwCleaner\Quarantine\C\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe.vir (PUP.Optional.BabylonToolBar.A) -> Movido para a quarentena e eliminado com sucesso.
C:\AdwCleaner\Quarantine\C\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll.vir (PUP.Optional.BabylonToolBar.A) -> Movido para a quarentena e eliminado com sucesso.
C:\AdwCleaner\Quarantine\C\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe.vir (PUP.Optional.BabylonToolBar.A) -> Movido para a quarentena e eliminado com sucesso.
C:\AdwCleaner\Quarantine\C\Users\Ionaldo\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.1.36.zip.vir (PUP.Optional.NextLive.A) -> Movido para a quarentena e eliminado com sucesso.
C:\AdwCleaner\Quarantine\C\Users\Ionaldo\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe.vir (PUP.Optional.SmartBar.A) -> Movido para a quarentena e eliminado com sucesso.
C:\AdwCleaner\Quarantine\C\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default\Extensions\ffxtlbr@babylon.com\components\FFHst.dll.vir (PUP.Optional.BabylonToolBar.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\ICReinstall_DownloadManagerSetup.exe (PUP.Optional.InstallCore.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\ICReinstall_ZipSetup.exe (PUP.Optional.InstallCore.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\n254\s254.exe (PUP.Optional.Rapiddown) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\ins2501\snapdo_0309-38957972.exe (PUP.Optional.Linkury.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\is357113909\82164421_stp\Mysearchdial.exe (PUP.Optional.MySpeedDial.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\is357113909\82164660_stp\FindRightSetup.exe (PUP.Optional.FindRight.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\Skype.exe (PUP.Optional.Firseria) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\SweetImSetup.exe (PUP.Optional.SweetIM) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\cleaner_ava.exe (Trojan.ELEX) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\DownloadManagerSetup.exe (PUP.Optional.InstallCore.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\yet_another_cleaner_glp (1).exe (Trojan.ELEX) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\yet_another_cleaner_glp.exe (Trojan.ELEX) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\yet_another_cleaner_reh (1).exe (Trojan.ELEX) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\yet_another_cleaner_reh (2).exe (Trojan.ELEX) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\yet_another_cleaner_reh (3).exe (Trojan.ELEX) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\yet_another_cleaner_reh.exe (Trojan.ELEX) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\Downloads\ZipSetup.exe (PUP.Optional.InstallCore.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Windows\Installer\5a508.msi (PUP.Optional.SmartBar) -> Movido para a quarentena e eliminado com sucesso.
C:\Windows\Installer\MSIF7B.tmp (PUP.Optional.SmartBar) -> Movido para a quarentena e eliminado com sucesso.
C:\Windows\Installer\MSI42F8.tmp-\Smartbar.Installer.CustomActions.dll (PUP.Optional.SmartBar) -> Movido para a quarentena e eliminado com sucesso.
C:\Windows\Tasks\View Password Update.job (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Windows\Tasks\View Password_wd.job (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Roaming\logs.dat (Bifrose.Trace) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\IELOGIN.abc (Malware.Trace) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\MSN.abc (Malware.Trace) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\UuU.uUu (Malware.Trace) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\XxX.xXx (Malware.Trace) -> Movido para a quarentena e eliminado com sucesso.
C:\Users\Ionaldo\AppData\Local\Temp\xxxyyyzzz.dat (Malware.Trace) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\ViewPassword157.exe (PUP.Optional.ViewPassWord.A) -> Eliminar ao reiniciar.
C:\Program Files\View-Password-soft\157.dat (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\157.xpi (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\a.db (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\b.db (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\Sqlite3.dll (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\Uninstall.exe (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\View-.exe (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\ViewPassword157.bin (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.
C:\Program Files\View-Password-soft\ViewPassword157.ini (PUP.Optional.ViewPassword.A) -> Movido para a quarentena e eliminado com sucesso.

(fim)

 Desative temporariamente seu antivírus para evitar conflitos.

Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

segue o q vc pediu


Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Ionaldo on 21/03/2014 at 17:25:22.70.
Microsoft® Windows Vista™ Home Basic  6.0.6002 Service Pack 2 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ionaldo\Downloads\zoek (1).exe [Scan all users] [Script inserted]

==== System Restore Info ======================

21/03/2014 17:27:26 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost
::1             localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater12.2.6 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater12.2.6 deleted successfully

==== FireFox Fix ======================

Deleted from C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\mjiw1ioh.default\prefs.js:

Added to C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\mjiw1ioh.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\n6hqg3jw.default\prefs.js:

Added to C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\n6hqg3jw.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default\prefs.js:

Added to C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\r2kmwt2b.default\prefs.js:

Added to C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\r2kmwt2b.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\tzy5gn9a.default\prefs.js:

Added to C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\tzy5gn9a.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default\prefs.js:

Added to C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\mjiw1ioh.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_032014_1747_.backup

ProfilePath: C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\n6hqg3jw.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_032014_1747_.backup

ProfilePath: C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default

user.js not found
---- Lines Search  modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"c:\\\\
---- Lines mysearch removed from prefs.js ----
user_pref("extensions.irmysearch.aflt", "dsites0103");
user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzutDtDtBtCtDtDzzzyyDzytCyEtAyEtDzytN0D0Tzu0CyByBzytN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1
user_pref("extensions.irmysearch.cr", "33789275");
user_pref("extensions.irmysearch.instlRef", "");
---- FireFox user.js and prefs.js backups ----

prefs_032014_1747_.backup

ProfilePath: C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\r2kmwt2b.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_032014_1747_.backup

ProfilePath: C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\tzy5gn9a.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_032014_1747_.backup

ProfilePath: C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_032014_1747_.backup

==== Deleting Files \ Folders ======================

C:\Users\Ionaldo\daemonprocess.txt deleted
C:\Users\Ionaldo\.android deleted
C:\Program Files\GUTCCE0.tmp deleted
C:\Program Files\GUM3053.tmp deleted
C:\Program Files\GUMCCDF.tmp deleted
C:\Program Files\Mozilla Firefox\searchplugins\search_the_web.xml deleted
C:\PROGRA~2\FileSplitUpLoad.dll deleted
C:\Users\Ionaldo\AppData\Local\cache deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted
C:\Windows\WININIT.INI deleted
C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\mjiw1ioh.default\extensions\staged deleted
C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\n6hqg3jw.default\extensions\staged deleted
C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\r2kmwt2b.default\extensions\staged deleted
C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\tzy5gn9a.default\extensions\staged deleted
C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\xf89fzq8.default\extensions\staged deleted
C:\Users\Ionaldo\Desktop\FREE Games.url deleted
C:\Users\Ionaldo\AppData\Local\StylePix.exe deleted
"C:\ProgramData\droidcam-settings" deleted
"C:\Users\Ionaldo\AppData\Roaming\GrabPro" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF" [04/03/2014 03:24]

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Ionaldo\AppData\Roaming\Mozilla\Firefox\Profiles\po6fb79y.default
7EFF79934842F1C28992638AF19BF9CD - C:\Users\Ionaldo\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
F87D7EB5573C0A84D8D460C54CBC5585 - C:\Users\Ionaldo\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
95812430959AE88CDD0301AB3A71913B - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash
A9C86900D2A61728C8326FE7147617C5 - C:\Users\Ionaldo\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll - Google Update
5174E3BE46B2CCCDAF9CEB5B622CEA9B - C:\Windows\system32\Adobe\Director\np32dsw_1209149.dll - Shockwave for Director / Shockwave for Director
FF0D6F82A0EC13952E83B9439100E45D - C:\Users\Ionaldo\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
AB45A736C78A166B89C0A578AD5E4392 - C:\Windows\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.40.255
136485E00BA2917F0FEA68D2EE78D733 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U4
C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery
7025E0B1F6480311A171E0E367A1BB31 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll - DivX Web Player
AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation
81FB8AE9ECFAC813A81867DFCB5B1F3B - C:\Program Files\Adobe\Reader 8.0\Reader\browser\nppdf32.dll - Adobe Acrobat
A9C86900D2A61728C8326FE7147617C5 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll - Google Update
DFCAB29E8FD38F95650CC1E203E8D318 - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx[19/01/2014 14:42]

Google Drive - Ionaldo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Ionaldo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Ionaldo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Wallet - Ionaldo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Ionaldo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=sol&utm_medium=ppi&utm_campaign=portal"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Use Search Asst"="yes"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://homepage.emachines.com/rdr.aspx?b=ACEW&l=0416&s=2&o=vb32&d=0209&m=e720"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://www.google.com"
"SearchAssistant"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=sol&utm_medium=ppi&utm_campaign=portal"
"Use Search Asst"="no"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Ionaldo\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Ionaldo\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{ABDE892B-13A8-4d1b-88E6-365A6E755758} deleted successfully

==== shortcuts on Users Desktops ======================

C:\Users\Ionaldo\Desktop\AdwCleaner - Atalho.lnk - C:\Users\Ionaldo\Downloads\AdwCleaner.exe
C:\Users\Ionaldo\Desktop\BioEstat 5.0 (2).lnk - C:\Users\Ionaldo\AppData\Roaming\Microsoft\Installer\{FF9392D7-F9A0-4030-9B30-F40FBBEFC5D1}\bioestat.exe
C:\Users\Ionaldo\Desktop\BioEstat 5.0.lnk - C:\Users\Ionaldo\AppData\Roaming\Microsoft\Installer\{FF9392D7-F9A0-4030-9B30-F40FBBEFC5D1}\bioestat.exe
C:\Users\Ionaldo\Desktop\Continue Download Manager Installation.lnk - C:\Users\Ionaldo\AppData\Local\Temp\ICReinstall_DownloadManagerSetup.exe  /RR
C:\Users\Ionaldo\Desktop\Continue Zip Opener Installation.lnk - C:\Users\Ionaldo\AppData\Local\Temp\ICReinstall_ZipSetup.exe  /RR
C:\Users\Ionaldo\Desktop\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\AVG 2014.lnk - C:\Program Files\AVG\AVG2014\avgui.exe
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Public\Desktop\HP Photosmart Essential 2.5.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe
C:\Users\Public\Desktop\Labtec WebCam.lnk - C:\Program Files\Labtec\WebCam10\WebCam10.exe
C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Users\Public\Desktop\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Public\Desktop\Norton Internet Security.lnk - C:\Program Files\Norton Internet Security\Engine\21.1.0.18\uistub.exe
C:\Users\Public\Desktop\Norton Security Scan.LNK - C:\Program Files\Norton Security Scan\Engine\4.0.3.27\Nss.exe
C:\Users\Public\Desktop\Shop for HP Supplies.lnk - C:\Program Files\HP\Digital Imaging\hpqSSupply.exe
C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}\SkypeIcon.exe
C:\Users\Public\Desktop\TeamViewer 7.lnk - C:\Program Files\TeamViewer\Version7\TeamViewer.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Ionaldo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DroidCam.lnk - C:\Users\Ionaldo\Desktop\DroidCam\DroidCamApp.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG\AVG 2014.lnk - C:\Program Files\AVG\AVG2014\avgui.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Desinstalar o Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware Help.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\chameleon.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Word 2007.lnk - C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\LiveUpdate.lnk - C:\Program Files\Norton Internet Security\Engine\21.1.0.18\uistub.exe /lu
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\NBRT.lnk -  
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\Norton Internet Security.lnk - C:\Program Files\Norton Internet Security\Engine\21.1.0.18\uistub.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\Support.lnk - C:\Program Files\Norton Internet Security\Engine\21.1.0.18\symerr.exe /support
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\Uninstall Norton Internet Security.lnk - C:\Program Files\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\21.1.0.18\inststub.exe /X /shortcut
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk - C:\Program Files\Skype\Phone\Skype.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Ionaldo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Ionaldo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Ionaldo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Ionaldo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk - C:\Program Files\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8  
C:\Users\Ionaldo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  
C:\Users\Ionaldo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  
C:\Users\Ionaldo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000001

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7EAFD4DB-FC72-468F-A528-0A358C0172E1} deleted successfully
HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\BD4DFAE727CFF8645A82A053C810271E deleted successfully

==== Empty IE Cache ======================

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Ionaldo\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Ionaldo\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6IA7ECEM will be deleted at reboot
C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B6GTK38G will be deleted at reboot
C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EJ9DH07M will be deleted at reboot
C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Ionaldo\AppData\Local\Mozilla\Firefox\Profiles\po6fb79y.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Ionaldo\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=877 folders=160 109669588 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Ionaldo\AppData\Local\Temp will be emptied at reboot
C:\Windows\system32\config\systemprofile\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Ionaldo\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6IA7ECEM" not found
"C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B6GTK38G" not found
"C:\Users\Ionaldo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EJ9DH07M" not found

==== EOF on 21/03/2014 at 18:02:06.23 ======================

 Siga, por gentileza, as dicas do tutorial abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

TÓPICO ARQUIVADO

Como o autor não respondeu por mais de 15 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.