NBT, como desinstalar?

Bom pessoal! Fazia um tempo que quando ia desinstalar um programa pelo painel de controle aparecia um programa chamado NBT que eu nunca consegui desinstalar, mas acabei descobrindo que era um malware e não quero mais ele no computador. porem não consigo desinstalar. Quando tento sou encaminhado para um link e meu ant-virus ativa. Alguém pode me ajudar por favor? Agradeço desde já!

   Olá vitruciano.

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

Foi isso que apareceu para mim, existe algum erro ? Obrigado pela atenção!

# AdwCleaner v3.207 - Relatório criado 08/05/2014 às 12:38:56
# Atualizado 05/05/2014 por Xplode
# Sistema Operacional : Windows 7 Ultimate Service Pack 1 (32 bits)
# Usuário : Vitor - SIMONECAMPONOGA
# Executando de : C:\Users\Vitor\Downloads\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****


***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\apn
Pasta Deletada : C:\ProgramData\Babylon
Pasta Deletada : C:\ProgramData\baidu
Pasta Deletada : C:\ProgramData\BonanzaDealsLive
Pasta Deletada : C:\ProgramData\Browser Manager
Pasta Deletada : C:\ProgramData\Tarma Installer
Pasta Deletada : C:\Program Files\BonanzaDeals
Pasta Deletada : C:\Program Files\BonanzaDealsLive
Pasta Deletada : C:\Program Files\NetNucleous
Pasta Deletada : C:\Program Files\WinZip Registry Optimizer
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Local\Babylon
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Local\Smartbar
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Local\Zoom_Downloader
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Local\Temp\apn
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Local\Temp\BabylonToolbar
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Local\Temp\Iminent
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Local\Temp\Mega Browse
Pasta Deletada : C:\Users\Simone Camponogara\AppData\LocalLow\BabylonToolbar
Pasta Deletada : C:\Users\Simone Camponogara\AppData\LocalLow\PriceGong
Pasta Deletada : C:\Users\Simone Camponogara\AppData\LocalLow\Toolbar4
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Babylon
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\baidu
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\DigitalSites
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\pccustubinstaller
Pasta Deletada : C:\Users\Vitor\AppData\Local\BonanzaDealsLive
Pasta Deletada : C:\Users\Vitor\AppData\Local\Temp\apn
Pasta Deletada : C:\Users\Vitor\AppData\Local\Temp\mt_ffx
Pasta Deletada : C:\Users\Vitor\AppData\LocalLow\BabylonToolbar
Pasta Deletada : C:\Users\Vitor\AppData\Roaming\baidu
Pasta Deletada : C:\Users\Vitor\AppData\Roaming\Funmoods
Pasta Deletada : C:\Users\Vitor\AppData\Roaming\nbt
Pasta Deletada : C:\Users\Vitor\AppData\Roaming\NetNucleous
Pasta Deletada : C:\Users\Vitor\AppData\Roaming\UpdaterEX
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\Extensions\{8A9386B4-E958-4C4C-ADF4-8F26DB3E4829}
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\Extensions\ffxtlbr@babylon.com
Pasta Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\Extensions\ffxtlbr@babylon.com
Pasta Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\Extensions\ffxtlbr@funmoods.com
Pasta Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\Extensions\plugin@getwebcake.com
Pasta Deletada : C:\Users\Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Pasta Deletada : C:\Users\Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Arquivo Deletada : C:\END
Arquivo Deletada : C:\Windows\system32\roboot.exe
Arquivo Deletada : C:\Users\Simone Camponogara\AppData\Local\Temp\Uninstall.exe
Arquivo Deletada : C:\Users\Vitor\AppData\Local\funmoods.crx
Arquivo Deletada : C:\Users\Vitor\AppData\Local\funmoods-speeddial.crx
Arquivo Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\bprotector_extensions.sqlite
Arquivo Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\BrowserMngr_extensions.sqlite
Arquivo Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\browsermngr_prefs.js
Arquivo Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\searchplugins\ask-search.xml
Arquivo Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\searchplugins\ask-search.xml
Arquivo Deletada : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
Arquivo Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\searchplugins\Babylon.xml
Arquivo Deletada : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml
Arquivo Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\searchplugins\BabylonMngr.xml
Arquivo Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\searchplugins\search.xml
Arquivo Deletada : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\user.js
Arquivo Deletada : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\user.js
Arquivo Deletada : C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Arquivo Deletada : C:\Users\Vitor\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cjpglkicenollcignonpgiafdgfeehoj_0.localstorage
Arquivo Deletada : C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_storage.conduit.com_0.localstorage
Arquivo Deletada : C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.iminent.com_0.localstorage

***** [ Atalhos ] *****


***** [ Registro ] *****

Valor Deletedo : HKCU\Software\Mozilla\Firefox\Extensions [{58BD07EB-0EE0-4DF0-8121-DC9B693373DF}]
Chave Deletedo : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Chave Deletedo : HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.old.Start Page]
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\ActiveCollectorPlugin.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Chave Deletedo : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc
Chave Deletedo : HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc.1
Chave Deletedo : HKLM\SOFTWARE\Classes\Prod.cap
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\FindLyrics_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\FindLyrics_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsLatest_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsLatest_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup{2_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup{2_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\BonanzaDealsLive.exe
Chave Deletedo : HKCU\Software\e0ddd0e268bd14
Chave Deletedo : HKLM\SOFTWARE\e0ddd0e268bd14
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_wireless-network-watcher_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_wireless-network-watcher_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{A8ECB19D-6458-4C31-82B2-60CF30440483}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{EDE9DB44-A3CA-4465-B527-6E9FA037C84C}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07202B0D-149C-4568-90DF-ACC2B4057809}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Chave Deletedo : HKCU\Software\AskPartnerNetwork
Chave Deletedo : HKCU\Software\BonanzaDealsLive
Chave Deletedo : HKCU\Software\BrowserMngr
Chave Deletedo : HKCU\Software\Conduit
Chave Deletedo : HKCU\Software\DataMngr
[#] Chave Deletedo : HKCU\Software\DataMngr_Toolbar
Chave Deletedo : HKCU\Software\Funmoods
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\Microsoft\Babylon
Chave Deletedo : HKCU\Software\NBT
Chave Deletedo : HKCU\Software\NetNucleous
Chave Deletedo : HKCU\Software\Softonic
Chave Deletedo : HKCU\Software\UpdaterEX
Chave Deletedo : HKCU\Software\AppDataLow\Software\findlyrics
Chave Deletedo : HKCU\Software\AppDataLow\Software\NetNucleous
Chave Deletedo : HKCU\Software\AppDataLow\Software\PriceGong
Chave Deletedo : HKLM\Software\Babylon
Chave Deletedo : HKLM\Software\BonanzaDealsLive
Chave Deletedo : HKLM\Software\BrowserMngr
Chave Deletedo : HKLM\Software\Conduit
Chave Deletedo : HKLM\Software\DataMngr
Chave Deletedo : HKLM\Software\Iminent
Chave Deletedo : HKLM\Software\NetNucleous
Chave Deletedo : HKLM\Software\Tarma Installer
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\NBT
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4

***** [ Navegadores ] *****

-\\ Internet Explorer v9.0.8112.16446

Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.Old.Start Page]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v

[ Arquivo : C:\Users\Simone Camponogara\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\prefs.js ]

Linha deletada : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Linha deletada : user_pref("extensions.BabylonToolbar.admin", false);
Linha deletada : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Linha deletada : user_pref("extensions.BabylonToolbar.babExt", "");
Linha deletada : user_pref("extensions.BabylonToolbar.babTrack", "affID=108291");
Linha deletada : user_pref("extensions.BabylonToolbar.bbDpng", 12);
Linha deletada : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Linha deletada : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Linha deletada : user_pref("extensions.BabylonToolbar.hmpg", true);
Linha deletada : user_pref("extensions.BabylonToolbar.id", "e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("extensions.BabylonToolbar.instlDay", "15466");
Linha deletada : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Linha deletada : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?AF=108291&babsrc=adbartrp&mntrId=e639fdae00000000000070f1a1c6e3c3&q=");
Linha deletada : user_pref("extensions.BabylonToolbar.lastDP", 12);
Linha deletada : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1716:54:07");
Linha deletada : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "7.0");
Linha deletada : user_pref("extensions.BabylonToolbar.newTab", true);
Linha deletada : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
Linha deletada : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Linha deletada : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Linha deletada : user_pref("extensions.BabylonToolbar.propectorlck", 75424396);
Linha deletada : user_pref("extensions.BabylonToolbar.prtkDS", 1);
Linha deletada : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
Linha deletada : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Linha deletada : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Linha deletada : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Linha deletada : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Linha deletada : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Linha deletada : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
Linha deletada : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1716:54:07");
Linha deletada : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
Linha deletada : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Linha deletada : user_pref("extensions.BabylonToolbar_i.babExt", "");
Linha deletada : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=108291");
Linha deletada : user_pref("extensions.BabylonToolbar_i.hardId", "e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("extensions.BabylonToolbar_i.id", "e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("extensions.BabylonToolbar_i.instlDay", "15466");
Linha deletada : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Linha deletada : user_pref("extensions.BabylonToolbar_i.newTab", false);
Linha deletada : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Linha deletada : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Linha deletada : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Linha deletada : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Linha deletada : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Linha deletada : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Linha deletada : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1716:54:07");
Linha deletada : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Linha deletada : user_pref("extensions.enabledAddons", "wrc@avast.com:6.0.1289,{C9B68337-E93A-44EA-94DC-CB300EC06444}:4.51.0,{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}:2.0,ffxtlbr@babylon.com:1.2.0,{8A9386B4-E958-4c4c-ADF[...]
Linha deletada : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Linha deletada : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Linha deletada : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");

[ Arquivo : C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\prefs.js ]

Linha deletada : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=113480&tt=120812_bandext_3212_8&babsrc=HP_ss&mntrId=e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
Linha deletada : user_pref("backup.old.browser.search.defaultenginename", "Search the web (Babylon)");
Linha deletada : user_pref("backup.old.browser.search.selectedEngine", "Search the web (Babylon)");
Linha deletada : user_pref("backup.old.browser.startup.homepage", "hxxp://search.babylon.com/?affID=115000&tt=120912_pcp_3812_1&babsrc=HP_ss&mntrId=e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Linha deletada : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=115000&tt=120912_pcp_3812_1&babsrc=NT_ss&mntrId=e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("extensions.BabylonToolbar.admin", false);
Linha deletada : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Linha deletada : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Linha deletada : user_pref("extensions.BabylonToolbar.babExt", "");
Linha deletada : user_pref("extensions.BabylonToolbar.babTrack", "affID=115000&tt=3412_2");
Linha deletada : user_pref("extensions.BabylonToolbar.cntry", "BR");
Linha deletada : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Linha deletada : user_pref("extensions.BabylonToolbar.envrmnt", "production");
Linha deletada : user_pref("extensions.BabylonToolbar.excTlbr", false);
Linha deletada : user_pref("extensions.BabylonToolbar.hdrMd5", "2DFFF5B3D66B23D81A0C2215E7EB6D60");
Linha deletada : user_pref("extensions.BabylonToolbar.hmpg", true);
Linha deletada : user_pref("extensions.BabylonToolbar.id", "e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("extensions.BabylonToolbar.instlDay", "15572");
Linha deletada : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Linha deletada : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.4.612:02:43");
Linha deletada : user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.0");
Linha deletada : user_pref("extensions.BabylonToolbar.newTab", false);
Linha deletada : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Linha deletada : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Linha deletada : user_pref("extensions.BabylonToolbar.sg", "tzb");
Linha deletada : user_pref("extensions.BabylonToolbar.smplGrp", "tzb");
Linha deletada : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Linha deletada : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Linha deletada : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q=");
Linha deletada : user_pref("extensions.BabylonToolbar.vrsn", "1.6.4.6");
Linha deletada : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.4.612:02:43");
Linha deletada : user_pref("extensions.BabylonToolbar.vrsni", "1.6.4.6");
Linha deletada : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Linha deletada : user_pref("extensions.BabylonToolbar_i.babExt", "");
Linha deletada : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=115000&tt=3412_2");
Linha deletada : user_pref("extensions.BabylonToolbar_i.hardId", "e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("extensions.BabylonToolbar_i.id", "e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("extensions.BabylonToolbar_i.instlDay", "15530");
Linha deletada : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Linha deletada : user_pref("extensions.BabylonToolbar_i.newTab", false);
Linha deletada : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Linha deletada : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Linha deletada : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Linha deletada : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Linha deletada : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Linha deletada : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Linha deletada : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.4.612:02:43");
Linha deletada : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Linha deletada : user_pref("extensions.enabledAddons", "wrc@avast.com:6.0.1289,ffxtlbr@babylon.com:1.5.0,{b64982b1-d112-42b5-b1e4-d3867c4533f8}:2.2.565.25,{972ce4c6-7e08-4474-a285-3208198ce6fd}:7.0.1");
Linha deletada : user_pref("extensions.funmoods.aflt", "ironpub");
Linha deletada : user_pref("extensions.funmoods.autoRvrt", false);
Linha deletada : user_pref("extensions.funmoods.dfltLng", "");
Linha deletada : user_pref("extensions.funmoods.dfltSrch", true);
Linha deletada : user_pref("extensions.funmoods.dnsErr", true);
Linha deletada : user_pref("extensions.funmoods.envrmnt", "production");
Linha deletada : user_pref("extensions.funmoods.excTlbr", false);
Linha deletada : user_pref("extensions.funmoods.hmpg", true);
Linha deletada : user_pref("extensions.funmoods.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0DyEzzyDyCyE0C0EyD0D0CtC0F0D0A0EtN0D0Tzu0StByEyCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=2024557[...]
Linha deletada : user_pref("extensions.funmoods.id", "D48564CE5DC1FDAE");
Linha deletada : user_pref("extensions.funmoods.instlDay", "15586");
Linha deletada : user_pref("extensions.funmoods.instlRef", "ironpub");
Linha deletada : user_pref("extensions.funmoods.isdcmntcmplt", true);
Linha deletada : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Linha deletada : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0DyEzzyDyCyE0C0EyD0D0CtC0F0D0A0EtN0D0Tzu0StByEyCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=20245[...]
Linha deletada : user_pref("extensions.funmoods.prdct", "funmoods");
Linha deletada : user_pref("extensions.funmoods.prtnrId", "funmoods");
Linha deletada : user_pref("extensions.funmoods.srchPrvdr", "Search");
Linha deletada : user_pref("extensions.funmoods.tlbrId", "base");
Linha deletada : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/?f=3&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0DyEzzyDyCyE0C0EyD0D0CtC0F0D0A0EtN0D0Tzu0StByEyCtN1L2XzutBtFtCtFtCtFtAtCtB&cr=202[...]
Linha deletada : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
Linha deletada : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
Linha deletada : user_pref("extensions.funmoods_i.newTab", true);
Linha deletada : user_pref("extensions.funmoods_i.smplGrp", "none");
Linha deletada : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2212:18:41");
Linha deletada : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Linha deletada : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Linha deletada : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
Linha deletada : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search the web (Babylon)");
Linha deletada : user_pref("sweetim.toolbar.urls.homepage", "hxxp://search.babylon.com/?affID=113480&tt=120812_bandext_3212_8&babsrc=HP_ss&mntrId=e639fdae00000000000070f1a1c6e3c3");
Linha deletada : user_pref("extensions.ATU-SEC2.previous-keyword-url", "\"hxxp://search.babylon.com/?affID=115000&tt=120912_pcp_3812_1&babsrc=KW_ss&mntrId=e639fdae00000000000070f1a1c6e3c3&q=\"");
Linha deletada : user_pref("extensions.APN_TB.first-previous-keyword-url", "hxxp://search.babylon.com/?affID=115000&tt=120912_pcp_3812_1&babsrc=KW_ss&mntrId=e639fdae00000000000070f1a1c6e3c3&q=");

-\\ Google Chrome v

[ Arquivo : C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] 11:30:00&v=11.1.0.7&sap=dsp&q={searchTerms}
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Homepage] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Extension] : bkomkajifikmkfnjgphkjcfeepbnojok
Deletedo [Extension] : fjoijdanhaiflhibkljeklcghcmmfffh
Deletedo [Extension] : gaiilaahiahdejapggenmdmafpmbipje

[ Arquivo : C:\Users\Vitor\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Startup_urls] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Extension] : bbjciahceamgodcoidkjpchnokgfpphh
Deletedo [Extension] : bkomkajifikmkfnjgphkjcfeepbnojok
Deletedo [Extension] : cjpglkicenollcignonpgiafdgfeehoj
Deletedo [Extension] : dhkplhfnhceodhffomolpfigojocbpcb
Deletedo [Extension] : fjoijdanhaiflhibkljeklcghcmmfffh

*************************

AdwCleaner[R0].txt - [38747 octets] - [08/05/2014 12:36:59]
AdwCleaner[S0].txt - [37105 octets] - [08/05/2014 12:38:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [37166 octets] ##########

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

Os dois programas me ajudaram muito, vlw mesmo !!

Relatorio:


Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Vitor on 08/05/2014 at 22:02:03,21.

Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Vitor\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

Failed to create System Restore Point

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3392993602-2668942631-2989045298-1006\Software\Microsoft\Internet Explorer\SearchScopes\{377FC0D6-5F42-387F-3DA5-3B58BFFC9F3B} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\SIMONE~1\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\prefs.js:
user_pref("browser.search.defaultenginename", "Ask Search");
user_pref("browser.search.defaultengine", "Ask Search");
user_pref("browser.search.order.1", "Ask Search");
user_pref("extensions.APN_TB.first-previous-keyword-url", "http://www.google.com/search?rls=org.mozilla:en-US:official&client=firefox-a&q=");

Added to C:\Users\SIMONE~1\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("extensions.APN_TB.first-previous-keyword-url", "http://www.google.com/search?rls=org.mozilla:en-US:official&client=firefox-a&q=");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.baixaki.com.br/portal/?utm_source=core&utm_medium=ppi&utm_campaign=portal");
user_pref("browser.search.defaultenginename", "Ask Search");
user_pref("browser.search.defaultengine", "Ask Search");
user_pref("browser.search.selectedEngine", "Ask Search");
user_pref("browser.search.order.1", "Ask Search");
user_pref("extensions.ATU-SEC2.my-keyword-url", "\"\"");
user_pref("extensions.ATU-SAT.my-keyword-url", "\"\"");
user_pref("extensions.ATU-SAT.previous-keyword-url", "\"\"");

Added to C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("extensions.ATU-SAT.my-keyword-url", "\"\"");
user_pref("extensions.ATU-SAT.previous-keyword-url", "\"\"");
user_pref("extensions.ATU-SEC2.my-keyword-url", "\"\"");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\SIMONE~1\AppData\Roaming\Mozilla\Firefox\Profiles\7kvbnivn.default

user.js not found
---- Lines babylon modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST So
---- Lines imbooster removed from prefs.js ----
user_pref("id_imbooster4web_v6.cache.tbs_include_xml_006938", "28/20/4/5/112");
user_pref("id_imbooster4web_v6.firstlaunch", "0");
user_pref("id_imbooster4web_v6.guid", "%7BEB4770D5-8D1F-A176-B904-9EF197EB615D%7D");
user_pref("id_imbooster4web_v6.userId", "%12");
user_pref("id_imbooster4web_v6.Var1", "0");
user_pref("id_imbooster4web_v6.Var10", "0");
user_pref("id_imbooster4web_v6.Var2", "0");
user_pref("id_imbooster4web_v6.Var3", "0");
user_pref("id_imbooster4web_v6.Var4", "0");
user_pref("id_imbooster4web_v6.Var5", "0");
user_pref("id_imbooster4web_v6.Var6", "0");
user_pref("id_imbooster4web_v6.Var7", "0");
user_pref("id_imbooster4web_v6.Var8", "0");
user_pref("id_imbooster4web_v6.Var9", "0");
user_pref("id_imbooster4web_v6_installed_version", "1.0.1018.0");
---- Lines helperbar modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST So
---- FireFox user.js and prefs.js backups ----

prefs_052014_2218_.backup

ProfilePath: C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default

user.js not found
---- Lines babylon modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST So
---- Lines funmoods modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"wrc@avast.com\":{\"descriptor\":\"C:\\\\Program Files\\\\AVAST So
---- FireFox user.js and prefs.js backups ----

prefs_052014_2218_.backup

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"BrowserMngr Start Page"=-

==== Deleting Files \ Folders ======================

C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default\extensions\ffxtlbr@babylon.com not found
C:\Program Files\GUTEF0E.tmp deleted
C:\Program Files\GUMEEFD.tmp deleted
C:\PROGRA~2\FileSplitUpLoad.dll deleted
C:\PROGRA~2\boost_interprocess deleted
C:\Users\Simone Camponogara\AppData\Local\CRE deleted
C:\Users\Simone Camponogara\AppData\Local\cache deleted
C:\Users\Vitor\AppData\Local\cache deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\Toolbar4 deleted
C:\user.js deleted
C:\Windows\System32\InstallUtil.InstallLog deleted
C:\Windows\System32\AI_RecycleBin deleted
C:\Windows\System32\is-HS1CB.tmp deleted
C:\Windows\System32\searchplugins deleted
C:\Windows\System32\Extensions deleted
"C:\Users\Vitor\AppData\Local\{10B7FD01-00EA-4F17-8670-1B8EC0CC196D}" deleted
"C:\Users\Vitor\AppData\Local\{11D5BBE0-A040-4F98-81D6-BDB400D8EFB0}" deleted
"C:\Users\Vitor\AppData\Local\{138624B2-545C-4AD3-85DA-77262DBEBF1F}" deleted
"C:\Users\Vitor\AppData\Local\{13AA3E1E-0646-43F6-A3D6-AF18D80B24FE}" deleted
"C:\Users\Vitor\AppData\Local\{19B01287-E11A-4966-AAB6-58AC088D688D}" deleted
"C:\Users\Vitor\AppData\Local\{1CC66AF4-FB82-4719-A7C2-B80E77825E9F}" deleted
"C:\Users\Vitor\AppData\Local\{20E6C3DF-E0DB-4838-849D-05702E34C149}" deleted
"C:\Users\Vitor\AppData\Local\{24D879EA-B64F-4AA7-96BD-12B15412E12C}" deleted
"C:\Users\Vitor\AppData\Local\{26683181-0208-4DB1-B591-472068CB6A1E}" deleted
"C:\Users\Vitor\AppData\Local\{28BC59B6-F41F-4A81-A770-001C9222337B}" deleted
"C:\Users\Vitor\AppData\Local\{2B6ECE05-2F06-403A-A017-271EF0B3BBCA}" deleted
"C:\Users\Vitor\AppData\Local\{31C70CC7-1671-48E9-B413-7481E7DAA111}" deleted
"C:\Users\Vitor\AppData\Local\{32C19EDC-6536-4074-A806-5592EC3743D1}" deleted
"C:\Users\Vitor\AppData\Local\{330E54DA-FB3F-46D4-B1E3-26A8281A5BB2}" deleted
"C:\Users\Vitor\AppData\Local\{39B33919-7652-4C9B-9CE5-B24A667F4088}" deleted
"C:\Users\Vitor\AppData\Local\{39F73889-7808-41C4-8787-2E2943953A76}" deleted
"C:\Users\Vitor\AppData\Local\{3A5040EB-EBEF-4EC6-8E12-E3243BD4D5FE}" deleted
"C:\Users\Vitor\AppData\Local\{3C473A2C-FCEC-4487-B503-7A38B70036D8}" deleted
"C:\Users\Vitor\AppData\Local\{3D611A96-1B6D-4ACE-AAE4-A56A0F9FDAAC}" deleted
"C:\Users\Vitor\AppData\Local\{401F7B67-1A6D-4F19-873E-72C99BDA1154}" deleted
"C:\Users\Vitor\AppData\Local\{42274128-F2B6-44D6-98B5-C94639B8BED6}" deleted
"C:\Users\Vitor\AppData\Local\{478370E8-0C63-43E1-B56D-AAE8A5AF78B1}" deleted
"C:\Users\Vitor\AppData\Local\{4A640E58-FE1A-4CAC-99D1-D4AFF9D7C83C}" deleted
"C:\Users\Vitor\AppData\Local\{4B4E3B12-9C4B-4C6A-8184-5522BCEB407E}" deleted
"C:\Users\Vitor\AppData\Local\{4BECAB35-3E2C-46D3-9EA1-E12C133B7095}" deleted
"C:\Users\Vitor\AppData\Local\{4E87D80C-8C25-474A-8229-CB6DDDEB2B41}" deleted
"C:\Users\Vitor\AppData\Local\{501F45C1-BDE6-491C-B41B-B277253B3B86}" deleted
"C:\Users\Vitor\AppData\Local\{54DB0F50-54C9-46F2-822C-3CCE74347357}" deleted
"C:\Users\Vitor\AppData\Local\{57899314-4FE5-4258-A4ED-E5C1D9AD97B2}" deleted
"C:\Users\Vitor\AppData\Local\{5C6320A5-D1D8-48FC-9A82-2CA9C2AE840A}" deleted
"C:\Users\Vitor\AppData\Local\{5F40D161-24EF-4F53-AC9B-3310ED624C12}" deleted
"C:\Users\Vitor\AppData\Local\{5F765594-1455-486B-B5AF-963C550508FE}" deleted
"C:\Users\Vitor\AppData\Local\{601C1560-D2B0-440C-97FE-F439341CC732}" deleted
"C:\Users\Vitor\AppData\Local\{67CE96D7-E509-431A-8892-B8572DEE7301}" deleted
"C:\Users\Vitor\AppData\Local\{67E64403-941C-4348-B15C-02C862604A77}" deleted
"C:\Users\Vitor\AppData\Local\{6E2C28D9-BD65-4FFC-AB54-E5795ABB1BC4}" deleted
"C:\Users\Vitor\AppData\Local\{6FCC4057-792A-48F4-9FE9-CEB7A95F1FDF}" deleted
"C:\Users\Vitor\AppData\Local\{712B09DC-50B3-4C55-A6E2-4916DB752B0B}" deleted
"C:\Users\Vitor\AppData\Local\{720E3AF8-7D31-43B3-95A8-F27010B57A7E}" deleted
"C:\Users\Vitor\AppData\Local\{74CB5B43-5A38-4833-AC0A-9E1573537C26}" deleted
"C:\Users\Vitor\AppData\Local\{799FBFB8-99A5-4B7E-9181-1DAD8FC1B294}" deleted
"C:\Users\Vitor\AppData\Local\{7B6CF5AF-A7D2-4BB2-985E-52E4C470AD7F}" deleted
"C:\Users\Vitor\AppData\Local\{7BA75BC2-2E90-4391-8C81-4D1A98C66936}" deleted
"C:\Users\Vitor\AppData\Local\{80E8ECFC-1242-47FE-954A-CB20040F8B1B}" deleted
"C:\Users\Vitor\AppData\Local\{827D8C04-CBC0-4415-A3BA-1BAF2D4DC259}" deleted
"C:\Users\Vitor\AppData\Local\{83C37387-1138-4258-BEAB-82FD1F173321}" deleted
"C:\Users\Vitor\AppData\Local\{8586795C-E794-4BE4-8AF9-60E4A6CC297F}" deleted
"C:\Users\Vitor\AppData\Local\{87BC33A8-DD44-4E77-ABE2-9B9FE6BD7238}" deleted
"C:\Users\Vitor\AppData\Local\{889FB252-A5A4-4F4E-B901-4787AB51EA74}" deleted
"C:\Users\Vitor\AppData\Local\{8EBFCCA7-82B4-48E4-A0BC-384053FB2ACC}" deleted
"C:\Users\Vitor\AppData\Local\{8FAD4C2C-5D19-4DA8-AD69-91A1110C4719}" deleted
"C:\Users\Vitor\AppData\Local\{90DFB2B3-7E0D-4C7E-8174-25E08AD901DE}" deleted
"C:\Users\Vitor\AppData\Local\{916A3DD0-81E4-4158-AC35-EEB4C9F22A63}" deleted
"C:\Users\Vitor\AppData\Local\{97A48E07-AB97-4D2E-B590-1045101D25EE}" deleted
"C:\Users\Vitor\AppData\Local\{9FAB4687-15F7-4878-8727-84DF647A6940}" deleted
"C:\Users\Vitor\AppData\Local\{A2BD93FF-BFC2-436C-A638-BFDBF9111F89}" deleted
"C:\Users\Vitor\AppData\Local\{A3C2A720-29DB-4967-9F80-014FAFBD0E9F}" deleted
"C:\Users\Vitor\AppData\Local\{A5E39096-57FA-4068-B9AB-6C275F3F88E6}" deleted
"C:\Users\Vitor\AppData\Local\{A7D7D995-9CC5-42A5-A703-DE60218AD54D}" deleted
"C:\Users\Vitor\AppData\Local\{A8CD8399-EF2E-4F72-82D1-2B1CE69C90DD}" deleted
"C:\Users\Vitor\AppData\Local\{AB2D0187-A007-414B-BA3E-397F9FA25277}" deleted
"C:\Users\Vitor\AppData\Local\{AB8A1D7A-C01B-4D61-A9BD-C2A1115E25F6}" deleted
"C:\Users\Vitor\AppData\Local\{AC2E3B4C-257C-43C3-80E4-EE44B3801509}" deleted
"C:\Users\Vitor\AppData\Local\{AD127271-DCD3-4909-A1E9-D3C2EDC91CE5}" deleted
"C:\Users\Vitor\AppData\Local\{AE9F5526-8ACC-4154-9FB0-59526525B8F5}" deleted
"C:\Users\Vitor\AppData\Local\{B258E6E5-6E2F-4FF9-BE9D-A98554EFB41A}" deleted
"C:\Users\Vitor\AppData\Local\{B53AC2C7-8A4A-4D1F-AA51-B424332B14DD}" deleted
"C:\Users\Vitor\AppData\Local\{B90C73F0-A76C-499E-AB9C-BD854EB6CB03}" deleted
"C:\Users\Vitor\AppData\Local\{BA8F05D9-873D-4AD5-9C78-F8907C9D6522}" deleted
"C:\Users\Vitor\AppData\Local\{BB33D5F8-5EF3-4B74-832B-1321C7DE250C}" deleted
"C:\Users\Vitor\AppData\Local\{BCA1F935-6285-4DFE-9803-39CA38550317}" deleted
"C:\Users\Vitor\AppData\Local\{BD533799-7E3C-446A-B2DF-C11218B0FC21}" deleted
"C:\Users\Vitor\AppData\Local\{BEA34DF1-CF9B-4EE7-8F41-98E5FDD2F0F9}" deleted
"C:\Users\Vitor\AppData\Local\{C175A5F8-3457-4F37-BBA0-05B615272EA8}" deleted
"C:\Users\Vitor\AppData\Local\{C213E7E6-6254-46F7-B7C5-06616369158C}" deleted
"C:\Users\Vitor\AppData\Local\{CC00EA25-7551-48D0-86A8-F746E8B43055}" deleted
"C:\Users\Vitor\AppData\Local\{CCB451B6-15B3-473C-AA81-8F680774597C}" deleted
"C:\Users\Vitor\AppData\Local\{D1391C6D-5BCA-43DB-B9B7-118B7AD99C7A}" deleted
"C:\Users\Vitor\AppData\Local\{D2B972CC-9EB9-4264-9C2F-5530E035BA18}" deleted
"C:\Users\Vitor\AppData\Local\{D3BF5E56-F89D-49D7-A5E5-82F3EFD7240C}" deleted
"C:\Users\Vitor\AppData\Local\{D850320C-7319-430F-9437-2DC496E9395A}" deleted
"C:\Users\Vitor\AppData\Local\{D8856E40-F764-4EB9-B8F3-D9045B404CCC}" deleted
"C:\Users\Vitor\AppData\Local\{DCD3B606-B23F-4624-BB08-563F9B34BA3E}" deleted
"C:\Users\Vitor\AppData\Local\{E01CD51D-B180-4685-93A8-A7C9E14F7456}" deleted
"C:\Users\Vitor\AppData\Local\{E1A0FF8D-F2CF-4686-B6EA-35FD4ED6941F}" deleted
"C:\Users\Vitor\AppData\Local\{E38DF3B1-9981-495A-9CF9-5C12039F21F6}" deleted
"C:\Users\Vitor\AppData\Local\{E3C318CD-0DD3-4B2E-856E-69B65244C621}" deleted
"C:\Users\Vitor\AppData\Local\{E3E43AE6-A8E9-435A-B088-73284CE06854}" deleted
"C:\Users\Vitor\AppData\Local\{E786DB9B-B372-4FB9-A8B7-890665DBC50A}" deleted
"C:\Users\Vitor\AppData\Local\{F069E9D7-537F-4F25-96C6-EA512B84F258}" deleted
"C:\Users\Vitor\AppData\Local\{F9318784-FA5C-4671-AB62-DA80275E9DEC}" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [08/05/2014 12:01]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"findlyrics@findlyrics.co"="C:\Program Files\FindLyrics\FF" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Undetermined - C:\ProgramData\Browser Manager\2.2.565.25\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension

==== Firefox Plugins ======================

Profilepath: C:\Users\Vitor\AppData\Roaming\Mozilla\Firefox\Profiles\yw92sp9v.default
2F4781F84C92E8C4B1586E47A78E8A61 - C:\Windows\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.50.255
18C6A57B569F088C2BD7B828A211AC06 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U5
AC05C6E4465BFBE6EF41FD6DD46E5B59 - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat
1C8124B6A03A620EB0CBCA615666D2AE - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery
8006FC6A9A7C3168EF15DBA842C3AFC5 - c:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll - Silverlight Plug-In
C04B0BCA15F30CF7D68E7733997EA90B - c:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrlui.dll - Microsoft (R) Silverlight
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
cgiaikfpllchefojlnehlmpekeogihnm - C:\Users\Simone Camponogara\AppData\Local\CRE\cgiaikfpllchefojlnehlmpekeogihnm.crx[]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[08/05/2014 12:01]
jfmjfhklogoienhpfnppmbcbjfjnkonk - No path found[]

Google Docs - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
WiseConvert - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgiaikfpllchefojlnehlmpekeogihnm
Google Search - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
avast Online Security - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Wallet - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
WiseConvert - Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgiaikfpllchefojlnehlmpekeogihnm
avast Online Security - Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Wallet - Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
BIODIGITAL HUMAN - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\agoenciogemlojlhccbcpcfflicgnaak
YouTube - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Pixlr-o-matic - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj
Web Lab - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgacgeibpdjllcjckbmgecpahipdjabe
avast Online Security - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Wallet - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Falling Sand Game - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdknckljjbdpkhgmcokoahffbdinafbo
Psykopaint - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil
Gmail - Vitor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chrome Fix ======================

C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adframes.iminent.com_0.localstorage deleted successfully
C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_servedby.dealply.com_0.localstorage deleted successfully
C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.babylon.com_0.localstorage deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgiaikfpllchefojlnehlmpekeogihnm deleted successfully
C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgiaikfpllchefojlnehlmpekeogihnm deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=core&utm_medium=ppi&utm_campaign=portal"
"Backup.Old.Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://www.bing.com/search?q={searchTerms}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.oquefazernainternet.com/q/%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomizeSearch"="http://www.oquefazernainternet.com/"
"Default_Search_URL"="http://www.oquefazernainternet.com/"
"SearchAssistant"="http://www.oquefazernainternet.com/"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.baixaki.com.br/portal/?utm_source=core&utm_medium=ppi&utm_campaign=portal"
"Backup.Old.Start Page"="http://www.baixaki.com.br/portal/?utm_source=core&utm_medium=ppi&utm_campaign=portal"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Vitor\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Vitor\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-3392993602-2668942631-2989045298-1006\Software\mozilla\Firefox\Extensions\findlyrics@findlyrics.co deleted successfully

==== shortcuts on Users Desktops ======================

C:\Users\Default\Desktop\CyberLink YouCam.lnk - C:\Program Files\CyberLink\YouCam\YouCam.exe
C:\Users\Default User\Desktop\CyberLink YouCam.lnk - C:\Program Files\CyberLink\YouCam\YouCam.exe
C:\Users\Simone Camponogara\Desktop\Computador - Atalho.lnk -
C:\Users\Simone Camponogara\Desktop\Google Chrome.lnk - C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vitor\Desktop\Curse.lnk - C:\Users\Administrador\AppData\Roaming\Curse Client\Bin\Curse.exe
C:\Users\Vitor\Desktop\lol.launcher.admin - Atalho.lnk - C:\Program Files\Riot Games\League of Legends\lol.launcher.admin.exe
C:\Users\Vitor\Desktop\Neverwinter - Atalho.lnk - C:\Program Files\Perfect World Entertainment\Neverwinter_pt\Neverwinter.exe
C:\Users\USURIO~1\Desktop\CyberLink YouCam.lnk - C:\Program Files\CyberLink\YouCam\YouCam.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\avast Free Antivirus.lnk -
C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast\avast Free Antivirus.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk - C:\Program Files\CCleaner\uninst.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\4shared Desktop.lnk - C:\Program Files\4shared Desktop\desktop.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk - C:\Program Files\Google\Picasa3\Picasa3.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\CyberLink YouCam.lnk - C:\Program Files\CyberLink\YouCam\YouCam.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Media Player Classic.lnk - C:\Program Files\Real Alternative\Media Player Classic\mplayerc.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Office Word 2007.lnk - C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Paint.lnk - C:\Windows\system32\mspaint.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Configurar o Visualizador de fotos do Picasa.lnk - C:\Program Files\Google\Picasa3\PicasaPhotoViewer.exe /reconfig
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Users\Vitor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Simone Camponogara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Office Word 2007.lnk - C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Paint.lnk - C:\Windows\system32\mspaint.exe
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Skype.lnk - C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Users\Vitor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Vitor\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\cgiaikfpllchefojlnehlmpekeogihnm deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ActiveCollector deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr deleted successfully

==== Empty IE Cache ======================

C:\Users\Administrador\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Simone Camponogara\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Simone Camponogara\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Simone Camponogara\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Vitor\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Simone Camponogara\AppData\Local\Mozilla\Firefox\Profiles\7kvbnivn.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Simone Camponogara\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Vitor\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=2739 folders=697 66092705 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrador\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Simone Camponogara\AppData\Local\Temp will be emptied at reboot
C:\Users\Vitor\AppData\Local\Temp will be emptied at reboot
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Vitor\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" deleted
"C:\Users\Simone Camponogara\AppData\Local\Temp\xpiFD24.tmp" not found

==== EOF on 09/05/2014 at 2:14:49,08 ======================

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

TÓPICO ARQUIVADO

Como o autor não respondeu por mais de 15 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.