Remover adwares do PC

Muito obrigada pela partilha,
Sónia Barbosa



# AdwCleaner v3.210 - Report created 23/05/2014 at 21:34:48
# Updated 19/05/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Sonia - SONIA-PC
# Running from : C:\Users\Sonia\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : IePluginService

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\CostMin
Folder Deleted : C:\ProgramData\IBUpdaterService
Folder Deleted : C:\ProgramData\IePluginService
Folder Deleted : C:\ProgramData\WPM
Folder Deleted : C:\Program Files (x86)\BrowserCompanion
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\CostMin
Folder Deleted : C:\Program Files (x86)\file scout
Folder Deleted : C:\Program Files (x86)\Softonic
Folder Deleted : C:\Program Files (x86)\SupTab
Folder Deleted : C:\Users\Administrador\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Administrador\AppData\Local\torch
Folder Deleted : C:\Users\Convidado\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Convidado\AppData\Local\torch
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\torch
Folder Deleted : C:\Users\Sonia\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\Sonia\AppData\Local\Conduit
Folder Deleted : C:\Users\Sonia\AppData\Local\PackageAware
Folder Deleted : C:\Users\Sonia\AppData\Local\torch
Folder Deleted : C:\Users\Sonia\AppData\Local\Temp\mt_ffx
Folder Deleted : C:\Users\Sonia\AppData\Local\Temp\speedtest127
Folder Deleted : C:\Users\Sonia\AppData\LocalLow\Claro LTD
Folder Deleted : C:\Users\Sonia\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Sonia\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Sonia\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Sonia\AppData\Roaming\file scout
Folder Deleted : C:\Users\Sonia\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Sonia\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\Sonia\AppData\Roaming\qone8
Folder Deleted : C:\Users\Sonia\AppData\Roaming\speedtest127
Folder Deleted : C:\Users\Sonia\AppData\Roaming\SupTab
Folder Deleted : C:\Users\Sonia\AppData\Roaming\Systweak
Folder Deleted : C:\Users\UpdatusUser\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\UpdatusUser\AppData\Local\torch
Folder Deleted : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\Allin1Convert_8h
Folder Deleted : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\mapsgalaxy_39
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\Extensions\quick_start@gmail.com
Folder Deleted : C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Folder Deleted : C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\clbfjfbnelcflpgpklppgplejolacbej
Folder Deleted : C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
File Deleted : C:\END
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\searchplugins\ask-web-search.xml
File Deleted : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\searchplugins\mixidj.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\qone8.xml
File Deleted : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\user.js
File Deleted : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\user.js
File Deleted : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\searchplugins\user.js
File Deleted : C:\Program Files (x86)\Mozilla Firefox\user.js

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2\GeoGebra Forum.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2\GeoGebra Wiki.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2\GeoGebraTube.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2\[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4\GeoGebra Forum.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4\GeoGebra Wiki.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4\GeoGebraTube.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4\[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\clbfjfbnelcflpgpklppgplejolacbej
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\Softonic.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Softonic.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\Softonic.SoftonicHlpr
Key Deleted : HKLM\SOFTWARE\Classes\Softonic.SoftonicHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\SoftonicApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\SoftonicApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc
Key Deleted : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\avg-secure-search-installer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Tutorials]
Key Deleted : HKCU\Software\580db8ce26ee912
Key Deleted : HKLM\SOFTWARE\580db8ce26ee912
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pdf-xchange-viewer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pdf-xchange-viewer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_prezi-desktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_prezi-desktop_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_spss_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_spss_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_undercoverxp_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_undercoverxp_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_jdownloader_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_jdownloader_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_malwarebytes-anti-malware_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_malwarebytes-anti-malware_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_microsoft-security-essentials_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_microsoft-security-essentials_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_minecraft_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_minecraft_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_undercoverxp_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_undercoverxp_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_winzip_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_winzip_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A2773ED4-83BD-488A-A186-73590706C916}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B15F118E-AF21-45E8-A809-29FDD7362565}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{44B50C01-4993-48E2-ADEE-D812BAE2E9A2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{75CC1BBE-D96F-45DF-A622-D60BFA8AF49E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A3E2F089-DDBB-4CBF-B06C-5D44DA316ED3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A5679AB0-C59E-49E7-83C4-5289F844A6E0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA0167C2-6295-41B8-9BDA-704B2F5E4CD9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11D9E165-B8C1-4734-A56C-BC4FCACA966B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B15F118E-AF21-45E8-A809-29FDD7362565}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B69509B5-4A90-4433-A2DE-BE439F6581F2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{268CA04C-106C-4636-B707-95E8CD5859E0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11C8C9C0-D918-44C0-8B5E-D297DA42F2C7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F0B76E1-4E46-427B-B55B-B90593468AC6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{86F14831-D88C-4BC8-B871-C8FB24D95D9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{5018CFD2-804D-4C99-9F81-25EAEA2769DE}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1E877590-30B7-400E-A835-B942489EB7BC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\BrowserCompanion
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\filescout
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\PerformerSoft
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\TutoTag
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\qone8Software
Key Deleted : HKLM\Software\Softonic
Key Deleted : HKLM\Software\SupTab
Key Deleted : HKLM\Software\supWPM
Key Deleted : HKLM\Software\Tutorials
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\Wpm
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2F5F003B-C71B-72E3-42B4-DE51AB079EB2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v29.0.1 (pt-PT)

[ File : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js ]


[ File : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\prefs.js ]

Line Deleted : user_pref("browser.startup.homepage", "hxxp://start.qone8.com/?type=hppp&ts=1400875216&from=epom2&uid=WDCXWD7500BPVT-22HXZT1_WD-WX41AC0H3039H3039");
Line Deleted : user_pref("extensions.UmbcoF9Qr.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumoro[...]
Line Deleted : user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");
Line Deleted : user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "allin1convert@mindspark.com");

[ File : C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\searchplugins\prefs.js ]


-\\ Google Chrome v35.0.1916.114

[ File : C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Startup_urls] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Startup_urls] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Homepage] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Extension] : bopakagnckmlgajfccecajhnimjiiedh
Deleted [Extension] : clbfjfbnelcflpgpklppgplejolacbej
Deleted [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma

*************************

AdwCleaner[R0].txt - [28376 octets] - [23/05/2014 21:33:53]
AdwCleaner[S0].txt - [24172 octets] - [23/05/2014 21:34:48]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24233 octets] ##########

  Oi Sônia. Seja bem vinda ao Fórum PC Brasil.

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.
________________________________________________________________________________

Boas aqui vai o resultado.

Acha que já ficou resolvido? em principio acho que sim, perdi a página inicial com os programas que habitualmente visitava :-( de resto acho que ficou bem.

Zoek.exe v5.0.0.0 Updated 22-05-2014
Tool run by Sonia on 24-05-2014 at 17:33:06,40.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Sonia\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

24-05-2014 17:34:26 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3153134497-206749965-421533929-1001\Software\Microsoft\Internet Explorer\SearchScopes\{11CCFD34-6C86-4A5B-93BA-730FB895096C} deleted successfully
HKEY_USERS\S-1-5-21-3153134497-206749965-421533929-1001\Software\Microsoft\Internet Explorer\SearchScopes\{31E94A16-4C10-4120-A1E3-C2B1AEED594A} deleted successfully
HKEY_USERS\S-1-5-21-3153134497-206749965-421533929-1001\Software\Microsoft\Internet Explorer\SearchScopes\{962845EF-69FC-4D0C-BA7D-D4483E01B64B} deleted successfully
HKEY_USERS\S-1-5-21-3153134497-206749965-421533929-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} deleted successfully
HKEY_USERS\S-1-5-21-3153134497-206749965-421533929-1001\Software\Microsoft\Internet Explorer\SearchScopes\{A28C8417-A807-4AEB-BCD6-D7D949C866A5} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js:

Added to C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.default-search.net?sid=476&aid=144&itype=a&ver=12692&tm=357&src=hmp");
user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
user_pref("browser.search.defaultenginename", "default-search.net");
user_pref("browser.search.selectedEngine", "default-search.net");
user_pref("browser.search.order.1", "default-search.net");
user_pref("keyword.URL", "http://www.default-search.net/search?sid=476&aid=144&itype=a&ver=12692&tm=357&src=ds&p=");
user_pref("browser.search.useDBForOrder", "false");

Added to C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\prefs.js:

Deleted from C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\searchplugins\prefs.js:

Added to C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\searchplugins\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\extensions

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs__1744_.backup

ProfilePath: C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs__1744_.backup

ProfilePath: C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\searchplugins

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs__1744_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Mozilla Firefox\browser\searchplugins\default-search.xml deleted
C:\found.000 deleted
C:\found.001 deleted
C:\PROGRA~3\OberonGameConsole deleted
C:\Users\Sonia\Downloads\iLividSetup (1).exe deleted
C:\Users\Sonia\Downloads\iLividSetup.exe deleted
C:\Users\Sonia\Downloads\SoftonicDownloader_for_prezi-desktop.exe deleted
C:\Users\Sonia\Downloads\SoftonicDownloader_para_microsoft-security-essentials.exe deleted
C:\Users\Sonia\Downloads\SoftonicDownloader_para_undercoverxp.exe deleted
C:\Users\Sonia\Downloads\SoftonicDownloader_para_winzip.exe deleted
C:\Windows\~GLC0000.TMP deleted
C:\Windows\~GLC0001.TMP deleted
C:\Windows\~GLH0000.TMP deleted
C:\Windows\~GLH0001.TMP deleted
C:\Windows\~GLH0002.TMP deleted
C:\Windows\~GLH0003.TMP deleted
C:\Windows\wininit.ini deleted
C:\Windows\tasks\ParetoLogic Registration.job deleted
C:\user.js deleted
C:\Windows\SysWow64\searchplugins deleted
C:\Windows\SysWow64\Extensions deleted
C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\searchplugins\default-search.xml deleted
C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\searchplugins\trovi-search.xml deleted
C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\extensions\firefox@mega.co.nz.xpi deleted
C:\Users\Sonia\Desktop\SoftangoDownloader_Flashget.exe deleted
C:\Users\Sonia\Desktop\SoftonicDownloader_para_minecraft.exe deleted
C:\Users\Sonia\Desktop\SoftonicDownloader_para_winrar.exe deleted
C:\Users\Sonia\R-2.14.0-win.exe deleted
C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default\extensions\0deae@ouagp.net deleted
"C:\ProgramData\a423d1ddac13435af32e091c96ddc456_c" deleted
"C:\PROGRA~3\6a51e9cb349ffeb\{2F5F003B-C71B-72E3-42B4-DE51AB079EB2}" deleted
"C:\PROGRA~3\6a51e9cb349ffeb\{2F5F003B-C71B-72E3-42B4-DE51AB079EB2}.old" deleted
"C:\Users\Sonia\AppData\Roaming\Uvel\ycib.peo" deleted
"C:\Users\Sonia\AppData\Roaming\Usyxhe\syvu.dyt" deleted
"C:\Users\Sonia\AppData\Roaming\Usyxhe\syvu.tmp" deleted
"C:\PROGRA~3\6a51e9cb349ffeb" deleted
"C:\Users\Sonia\AppData\Roaming\Uvel" deleted
"C:\Users\Sonia\AppData\Roaming\Vayp" deleted
"C:\Users\Sonia\AppData\Roaming\webex" deleted
"C:\Users\Sonia\AppData\Roaming\Usyxhe" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default
- Linkey for Firefox - %ProfilePath%\extensions\extension@linkeyproject.com
- Settings Manager - %ProfilePath%\extensions\{F33DD2F8-FDEB-F18B-2148-F84DE66D4A5A}

ExtDir: C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
- Softonic Toolbar - %ExtDir%\ffxtlbra@softonic.com

ExtDir: C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles
- Softonic Toolbar - %ExtDir%\extensions\ffxtlbra@softonic.com

ExtDir: C:\Users\Sonia\AppData\Roaming\Mozilla\Extensions
- Softonic Toolbar - C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\ffxtlbra@softonic.com

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Sonia\AppData\Roaming\Mozilla\Firefox\Profiles\jewpxrqr.default
7F6C921CBDBFB31630AEE48FA463A228 - C:\Users\Sonia\AppData\Roaming\Mozilla\plugins\npatgpc.dll - ActiveTouch General Plugin Container
A58DE0A570148AF5FF3512B2A340D09F - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll - Shockwave Flash
63EE2015B877A2E472CC59E05291AA39 - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMSS.dll - McAfee Security Scanner +
47E838770DC4F3E0B0D435100B95CFE2 - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll - PDF-XChange Viewer


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
icmlaeflemplmjndnaapfdbbnpncnbda - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[]
mdebcffgnijbblbinknkbefciofebcda - C:\Users\Sonia\AppData\Local\Temp\ccex.crx[]

CostMin - Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - Sonia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
Google Docs - Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
CostMin - Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\fkobhcnepebohoakojldjgepmanceoef
Google Wallet - Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Select City - Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Gmail - Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
CostMin - Sonia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef
CostMin - UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef

==== Chrome Fix ======================

C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_start.qone8.com_0.localstorage deleted successfully
C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\default\Local Storage\http_start.qone8.com_0.localstorage-journal deleted successfully
C:\Users\Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Sonia\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Sonia\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\fkobhcnepebohoakojldjgepmanceoef deleted successfully
C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\default\Local Storage\chrome-extension_fkobhcnepebohoakojldjgepmanceoef_0.localstorage deleted successfully
C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\default\Local Storage\chrome-extension_fkobhcnepebohoakojldjgepmanceoef_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.default-search.net?sid=476&aid=144&itype=a&ver=12692&tm=357&src=hmp"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\default\Preferences was reset successfully
C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{4ED1F68A-5463-4931-9384-8FFF5ED91D92} deleted successfully

==== shortcuts on Users Desktops ======================

C:\Users\Sonia\Desktop\Dropbox.lnk - C:\Users\Sonia\AppData\Roaming\Dropbox\bin\Dropbox.exe /home
C:\Users\Sonia\Desktop\2ªprovas revisto\Mozilla Firefox.lnk -
C:\Users\Sonia\Desktop\sonia\Acer GameZone Console.lnk - C:\Program Files (x86)\Acer GameZone\GameConsole\Acer Game Console.exe
C:\Users\Sonia\Desktop\sonia\Adobe Reader X.lnk - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Users\Sonia\Desktop\sonia\AVIConverter.lnk - C:\Program Files (x86)\AVIConverter\AVIConverter.exe
C:\Users\Sonia\Desktop\sonia\Disketch Disc Label Software.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe
C:\Users\Sonia\Desktop\sonia\DjView.lnk - C:\Program Files (x86)\DjVuZone\DjVuLibre\djview.exe
C:\Users\Sonia\Desktop\sonia\EPSON Scan.lnk - C:\Windows\twain_32\escndv\escndv.exe
C:\Users\Sonia\Desktop\sonia\GeoGebra 4.2.lnk - C:\Windows\SysWOW64\javaws.exe -localfile "C:\Users\Sonia\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\4fa56afd-1db15711"
C:\Users\Sonia\Desktop\sonia\GeoGebra.lnk - C:\Program Files (x86)\GeoGebra 4.2\GeoGebra.exe
C:\Users\Sonia\Desktop\sonia\IBM SPSS Statistics 20.lnk - C:\Program Files (x86)\IBM\SPSS\Statistics\20\stats.exe
C:\Users\Sonia\Desktop\sonia\IRS - Modelo 3.lnk - C:\Program Files (x86)\Declarações Electrónicas\Modelo3IRS\Modelo3IRS.exe
C:\Users\Sonia\Desktop\sonia\Prezi Desktop.lnk - C:\Program Files (x86)\Prezi Desktop 4\Prezi Desktop.exe
C:\Users\Sonia\Desktop\sonia\R i386 3.0.1.lnk - C:\Program Files\R\R-3.0.1\bin\i386\Rgui.exe
C:\Users\Sonia\Desktop\sonia\R x64 3.0.1.lnk - C:\Program Files\R\R-3.0.1\bin\x64\Rgui.exe
C:\Users\Sonia\Desktop\sonia\SAPO Scratch.lnk - C:\Program Files (x86)\SAPO Scratch\Scratch.exe "C:\Program Files (x86)\SAPO Scratch\Scratch.image"
C:\Users\Sonia\Desktop\sonia\Selecção de Browser.lnk -
C:\Users\Sonia\Desktop\sonia\µTorrent.lnk -
C:\Users\Sonia\Desktop\sonia\Acer\Acer eRecovery Management.lnk - C:\Program Files\Acer\Acer eRecovery Management\Recovery Management.exe
C:\Users\Sonia\Desktop\sonia\Acer\Acer Updater.lnk - C:\Program Files\Acer\Acer Updater\ALU.exe
C:\Users\Sonia\Desktop\sonia\Acer\Identity Card.lnk - C:\Program Files (x86)\Acer\Identity Card\IdentityCard.exe Identity Card
C:\Users\Sonia\Desktop\sonia\Acer\Welcome Center.lnk - C:\Program Files (x86)\Acer\Welcome Center\OEMWelcomeCenter.exe
C:\Users\Sonia\Desktop\sonia\Miudos\Aventura Digital 2.º Ano.lnk -
C:\Users\Sonia\Desktop\sonia\Miudos\Manual.lnk - C:\Users\Sonia\Documents\TE\AGA_EM2\Manual\manual.exe
C:\Users\UpdatusUser\Desktop\AVIConverter.lnk - C:\Program Files (x86)\AVIConverter\AVIConverter.exe
C:\Users\UpdatusUser\Desktop\DjView.lnk - C:\Program Files (x86)\DjVuZone\DjVuLibre\djview.exe
C:\Users\UpdatusUser\Desktop\SAPO Scratch.lnk - C:\Program Files (x86)\SAPO Scratch\Scratch.exe "C:\Program Files (x86)\SAPO Scratch\Scratch.image"

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Adobe Reader XI.lnk - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Users\Public\Desktop\Alice 3.lnk - C:\Program Files (x86)\Alice3\Alice3.exe
C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\Users\Public\Desktop\Express Burn.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe
C:\Users\Public\Desktop\Express Zip.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.141\McUICnt.exe SecurityScanner.dll
C:\Users\Public\Desktop\NCH Software.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe -suite
C:\Users\Public\Desktop\Pixillion Image Converter.lnk - C:\Program Files (x86)\NCH Software\Pixillion\pixillion.exe
C:\Users\Public\Desktop\Prism Video File Converter.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe
C:\Users\Public\Desktop\Switch Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Burn Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Rip Extractor.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Rip
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Crescendo Music Notation.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Crescendo
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Dictation Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Express
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\DJ Mixing Software.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Zulu
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Multitrack Mixer.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind MixPad
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Record to CD or Mp3 Wizard.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Golden
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Switch
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Editor.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind WavePad
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind RecordPad
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind SoundTap
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Server.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind BroadWave
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Text-to-Speech Reader.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Verbose
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Voice Changing Software.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Voxal
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Dropbox.lnk - C:\Users\Sonia\AppData\Roaming\Dropbox\bin\Dropbox.exe /home
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox\Uninstall Dropbox.lnk - C:\Users\Sonia\AppData\Roaming\Dropbox\bin\DropboxUninstaller.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4\GeoGebra Forum.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4\GeoGebra Wiki.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4\GeoGebraTube.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4\[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2\GeoGebra Forum.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2\GeoGebra Wiki.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2\GeoGebraTube.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2\[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\Graphics File Converter.lnk - C:\Program Files (x86)\NCH Software\Pixillion\pixillion.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\PhotoPad Editor.lnk - C:\Program Files (x86)\NCH Software\Pixillion\pixillion.exe -extfind PhotoPad
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\Video File Converter.lnk - C:\Program Files (x86)\NCH Software\Pixillion\pixillion.exe -extfind Prism
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk - C:\Users\Sonia\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Backup Software.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind FileFort
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Bolt PDF Printer.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind BoltPDF
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\CD, DVD, BluRay Burner.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind ExpressBurn
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Classic FTP Software.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind ClassicFTP
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Doxillion Document Converter.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind Doxillion
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Encryption and Decryption Software.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind Meo
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Express Zip File Compression.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Text-to-Speech Reader.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind Verbose
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Typing Expander Software.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind FastFox
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Utilities\Uploader Software.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe -extfind Fling
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Ajuda do WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.chm
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Manual do Console RAR.lnk - C:\Program Files (x86)\WinRAR\Rar.txt
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\O que há de novo na última versão.lnk -
C:\Users\Sonia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk - C:\Windows\Installer\{AC76BA86-7AD7-1046-7B44-AB0000000001}\SC_Reader.ico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Zip.lnk - C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pixillion Image Converter.lnk - C:\Program Files (x86)\NCH Software\Pixillion\pixillion.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prism Video File Converter.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Switch Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Burn Recorder.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind ExpressBurn
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Rip Extractor.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind Rip
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Crescendo Music Notation.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind Crescendo
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Dictation Recorder.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind Express
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\DJ Mixing Software.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind Zulu
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Multitrack Mixer.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind MixPad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Record to CD or Mp3 Wizard.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind Golden
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Editor.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind WavePad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Recorder.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind RecordPad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Recorder.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind SoundTap
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Server.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind BroadWave
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Text-to-Speech Reader.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind Verbose
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Voice Changing Software.lnk - C:\Program Files (x86)\NCH Software\Switch\switch.exe -extfind Voxal
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Slideshow Creator Software.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe -extfind PhotoStage
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Capture Software.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe -extfind Debut
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video File Format Converter.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Streaming Server.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe -extfind BroadCam
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\Video Tape to DVD Converter.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe -extfind GoldenVideos
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs\VideoPad Video Editor.lnk - C:\Program Files (x86)\NCH Software\Prism\prism.exe -extfind VideoPad
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Ajuda do WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Manual do Console RAR.lnk - C:\Program Files (x86)\WinRAR\Rar.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\O que há de novo na última versão.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk - C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE /recycle
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Calculator.lnk - C:\Windows\system32\calc.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\IBM SPSS Statistics 20.lnk - C:\Program Files (x86)\IBM\SPSS\Statistics\20\stats.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Excel 2010.lnk - C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Word 2010.lnk - C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Paint.lnk - C:\Windows\system32\mspaint.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Prezi Desktop.lnk - C:\Program Files (x86)\Prezi Desktop 4\Prezi Desktop.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\SAPO Scratch.lnk - C:\Program Files (x86)\SAPO Scratch\Scratch.exe "C:\Program Files (x86)\SAPO Scratch\Scratch.image"
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Welcome Center.lnk - C:\Windows\system32\rundll32.exe C:\Windows\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Browse and Search the Internet.lnk - C:\Program Files (x86)\Settings Manager\systemk\tbicon.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Minecraft.lnk - C:\Users\Sonia\Desktop\Minecraft.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Welcome Center.lnk - C:\Program Files (x86)\Acer\Welcome Center\OEMWelcomeCenter.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Sonia\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mdebcffgnijbblbinknkbefciofebcda deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Sonia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Sonia\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Sonia\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Sonia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLRO99QY will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Sonia\AppData\Local\Mozilla\Firefox\Profiles\jewpxrqr.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Sonia\AppData\Local\Google\Chrome\User Data\default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache is not empty, a reboot is needed

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=916 folders=124 118020690 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Sonia\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Sonia\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Sonia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLRO99QY" not found
"C:\Users\Sonia\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EEJXLLVR\img.clickjogos.uol.com.br" not found
"C:\Users\Sonia\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EEJXLLVR\[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] not found

==== EOF on 24-05-2014 at 17:51:44,13 ======================

Afinal estive a ver e acho que foi desta...
Nem sei como agradecer, Muito obrigada,
Cumprimentos de Portugal

Ainda há adwares no seu PC.

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

TÓPICO ARQUIVADO

Como a autora não respondeu por mais de 15 dias, o tópico foi arquivado. Caso a autora do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.