Como remover o WebSearch

Olá bomdia, venho qui nesse forum implorar por ajuda pois não sei mais o que fazer para retirar o websearch do meus navegadores
Já tentei de todas as formas existentes na net,  o unico meio q me falta é esse forum
sempre que removo o diabo do websearch ele volta qnd reinicio o pc ! por favor me ajudeeeem !

Olá.

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

# AdwCleaner v3.211 - Relatório criado 29/05/2014 às 10:53:16
# Atualizado 26/05/2014 por Xplode
# Sistema Operacional : Microsoft Windows XP Service Pack 2 (32 bits)
# Usuário : ADM - 93ABC9A659C540A
# Executando de : C:\Documents and Settings\ADM\Meus documentos\Downloads\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

[#] Serviço Deletada : BitGuard
[#] Serviço Deletada : IBUpdaterService
[#] Serviço Deletada : IePluginService

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\Babylon
Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\baidu
[!] Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\BitGuard
Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\IBUpdaterService
Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\IePluginService
Pasta Deletada : C:\Documents and Settings\All Users\Dados de aplicativos\Tarma Installer
Pasta Deletada : C:\Arquivos de programas\AutocompletePro
Pasta Deletada : C:\Arquivos de programas\Browser Helper Object
Pasta Deletada : C:\Arquivos de programas\DealPly
Pasta Deletada : C:\Arquivos de programas\LyricsOn
Pasta Deletada : C:\Arquivos de programas\SpeedAnalysis.com
Pasta Deletada : C:\Arquivos de programas\SupTab
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Babylon
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\baidu
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\DealPly
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\file scout
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\SpeedanAlysis
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\SupTab
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Toolbar4
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\webssearches
Pasta Deletada : C:\Documents and Settings\ADM\Menu Iniciar\Programas\BitGuard
Pasta Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062\Extensions\quick_start@gmail.com
[!] Pasta Deletada : C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\cfcbmgbfdbijmjgjihagbomfbjfjmgon
[!] Pasta Deletada : C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk
[!] Pasta Deletada : C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje
[!] Pasta Deletada : C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\kkkeikdkpjenmoiicggnnodbkebafgpc
Arquivo Deletada : C:\WINDOWS\system32\roboot.exe
Arquivo Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\speedanalysis.ico
Arquivo Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\oqiog9af.default\bProtector_extensions.rdf
Arquivo Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\oqiog9af.default\bprotector_extensions.sqlite
Arquivo Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062\bprotector_extensions.sqlite
Arquivo Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062\bprotector_prefs.js
Arquivo Deletada : C:\Arquivos de programas\Mozilla Firefox\Components\AskSearch.js
Arquivo Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062\searchplugins\Babylon.xml
Arquivo Deletada : C:\Arquivos de programas\Mozilla Firefox\browser\searchplugins\webssearches.xml
Arquivo Deletada : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\oqiog9af.default\user.js
Arquivo Deletada : C:\Documents and Settings\ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\bProtector Web Data
Arquivo Deletada : C:\Documents and Settings\ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\bprotectorpreferences

***** [ Atalhos ] *****


***** [ Registro ] *****

Valor Deletedo : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]
Valor Deletedo : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com]
Valor Deletedo : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com]
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\cfcbmgbfdbijmjgjihagbomfbjfjmgon
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk
Chave Deletedo : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\kkkeikdkpjenmoiicggnnodbkebafgpc
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Valor Deletedo : HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel [Homepage]
Chave Deletedo : HKLM\SOFTWARE\Classes\*\shell\filescout
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\AddonsFramework.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\AutocompletePro.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\ButtonSite.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\PropertySync.EXE
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\ScriptHost.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Chave Deletedo : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Chave Deletedo : HKLM\SOFTWARE\Classes\FunWebProductsInstaller.Start
Chave Deletedo : HKLM\SOFTWARE\Classes\FunWebProductsInstaller.Start.1
Chave Deletedo : HKLM\SOFTWARE\Classes\Prod.cap
Chave Deletedo : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Chave Deletedo : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Chave Deletedo : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Chave Deletedo : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Chave Deletedo : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Chave Deletedo : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Chave Deletedo : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@funwebproducts.com/Plugin
Chave Deletedo : HKCU\Software\5e2df8ae73fe848
Chave Deletedo : HKLM\SOFTWARE\5e2df8ae73fe848
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{19975B78-1907-4DD6-A437-4C48120F46A4}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{562B9316-C08A-444A-9482-62080DD851AE}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{562B9317-C08A-444A-9482-62080DD851AE}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{167393A7-540B-4E38-85C2-124836F6B011}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{45564571-A21B-48ED-B584-69752EEE9C3D}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{4C402865-4845-409D-BD6C-FC55DFAC509C}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{D6B3AF56-1EAF-43D9-A733-D36AD06F16A2}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{93CF54F5-CFAA-4440-B588-8ED0DFAD5C21}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{D3BC53E7-0437-4C97-90EE-2CD6FF47FB14}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{EE95078D-518C-4FD2-8093-FD1D4E33D3CA}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{F9EB11AB-9384-4736-9B33-993940F88895}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{05E242CB-338E-4A4F-A726-80BAB386D079}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{30195ABF-E343-4827-9EE0-CF88CD0C2457}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{5D08AF8C-7CC2-45A4-BBA7-E997C3B21CDB}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45564571-A21B-48ED-B584-69752EEE9C3D}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{45564571-A21B-48ED-B584-69752EEE9C3D}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{000123B4-9B42-4900-B3F7-F4B073EFC214}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338B4DFE-2E2C-4338-9E41-E176D497299E}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{45564571-A21B-48ED-B584-69752EEE9C3D}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{47B614AF-B4CC-485B-B331-BE26F02ED4CC}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{18EAB056-9057-F224-FD4C-1F6569C4D8D2}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C55BBCD6-41AD-48AD-9953-3609C48EACC7}]
Valor Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Arquivos de programas\Orbitdownloader\orbitdm.exe]
Valor Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Arquivos de programas\Orbitdownloader\orbitnet.exe]
Valor Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Documents and Settings\ADM\Meus documentos\Downloads\SweetImSetup.exe]
Chave Deletedo : HKCU\Software\AutocompleteProBHO
Chave Deletedo : HKCU\Software\BabSolution
Chave Deletedo : HKCU\Software\DataMngr
Chave Deletedo : HKCU\Software\DataMngr_Toolbar
Chave Deletedo : HKCU\Software\DealPly
Chave Deletedo : HKCU\Software\filescout
Chave Deletedo : HKCU\Software\Headlight
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\PriceGong
Chave Deletedo : HKCU\Software\Softonic
Chave Deletedo : HKLM\Software\Babylon
Chave Deletedo : HKLM\Software\DataMngr
Chave Deletedo : HKLM\Software\DealPly
Chave Deletedo : HKLM\Software\Iminent
Chave Deletedo : HKLM\Software\SupTab
Chave Deletedo : HKLM\Software\webssearchesSoftware
Chave Deletedo : HKLM\Software\Wpm
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AutocompletePro3_is1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Browser Helper Object1.4
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Updater Service
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DealPly
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AutocompletePro3_is1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Browser Helper Object1.4
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DealPly
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Updater Service
Dados Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\docume~1\alluse~1\dadosd~1\bitguard\271832~1.68\{16cdf~1\bitguard.dll

***** [ Navegadores ] *****

-\\ Internet Explorer v8.0.6001.18702

Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]

-\\ Mozilla Firefox v29.0.1 (pt-PT)

[ Arquivo : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\oqiog9af.default\prefs.js ]

Linha deletada : user_pref("extensions.facemoods.DNSErrUrl", "hxxp://start.facemoods.com/?a=gppc&f=5");
Linha deletada : user_pref("extensions.facemoods.aflt", "gppc");
Linha deletada : user_pref("extensions.facemoods.dfltSrch", false);
Linha deletada : user_pref("extensions.facemoods.dnsErr", false);
Linha deletada : user_pref("extensions.facemoods.firstRun", true);
Linha deletada : user_pref("extensions.facemoods.hmpg", false);
Linha deletada : user_pref("extensions.facemoods.hmpgUrl", "hxxp://start.facemoods.com/?a=gppc");
Linha deletada : user_pref("extensions.facemoods.id", "541cc349000000000000005345000000");
Linha deletada : user_pref("extensions.facemoods.instlDay", "15238");
Linha deletada : user_pref("extensions.facemoods.mntz", "");
Linha deletada : user_pref("extensions.facemoods.newTab", false);
Linha deletada : user_pref("extensions.facemoods.prtnrId", "facemoods.com");
Linha deletada : user_pref("extensions.facemoods.searchProviderAdded", false);
Linha deletada : user_pref("extensions.facemoods.sid", "53aa5b120b484d9e96e389d08f2306b5");
Linha deletada : user_pref("extensions.facemoods.tlbrSrchUrl", "hxxp://start.facemoods.com/?a=gppc&f=3");
Linha deletada : user_pref("extensions.facemoods.vrsn", "1.4.17.11");

[ Arquivo : C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062\prefs.js ]

Linha deletada : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=117223&tt=4612_8&babsrc=HP_ss&mntrId=541cc349000000000000005345000000");
Linha deletada : user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
Linha deletada : user_pref("browser.search.defaultenginename", "webssearches");
Linha deletada : user_pref("browser.search.order.1", "Search the web (Babylon)");
Linha deletada : user_pref("browser.search.selectedEngine", "webssearches");
Linha deletada : user_pref("browser.startup.homepage", "hxxp://istart.webssearches.com/?type=hp&ts=1401032868&from=pcm&uid=ST3160815AS_6RX98YMLXXXX6RX98YML");

[ Arquivo : C:\Documents and Settings\Administrador\Dados de aplicativos\Mozilla\Firefox\Profiles\3rmzalmd.default\prefs.js ]


-\\ Google Chrome v35.0.1916.114

[ Arquivo : C:\Documents and Settings\ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\preferences ]

Deletedo [Startup_urls] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Extension] : cfcbmgbfdbijmjgjihagbomfbjfjmgon
Deletedo [Extension] : defdhglnppeioeflggkmglipcecffkhk
Deletedo [Extension] : gaiilaahiahdejapggenmdmafpmbipje
Deletedo [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc
Deletedo [Extension] : oalifdbckgeckmcjidkfgiikhpcdbdah

[ Arquivo : C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\preferences ]

Deletedo [Extension] : cfcbmgbfdbijmjgjihagbomfbjfjmgon
Deletedo [Extension] : defdhglnppeioeflggkmglipcecffkhk
Deletedo [Extension] : gaiilaahiahdejapggenmdmafpmbipje
Deletedo [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc

*************************

AdwCleaner[R0].txt - [24653 octets] - [29/05/2014 10:51:04]
AdwCleaner[S0].txt - [23007 octets] - [29/05/2014 10:53:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [23068 octets] ##########

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

 Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

Me parece que apenas com esse primeiro procedimento passado anteriormente foi
Sulficiente para eliminar o Spy endemoniado ! :rindo_atoa:  :rindo_atoa: 



Esse 2º programa indicado, ele fará a mesma coisa que o AdwClener ?

Sempre costuma sobrar outros adwares no computador. É muito importante usar também o Zoek como lhe passei acima.

Ok vou fazer !! so não entendii pra q eu tenho q mandar os relatórios ?

Seus relatórios são enviados para o colaborador fazer a análise e posteriormente lhe passar os próximos procedimentos e assim a limpeza do pc seja feita.

OK entendi Dani, meu medo é que isso seja usado por alguem para invedir meu pc


Zoek.exe v5.0.0.0 Updated 22-05-2014
Tool run by ADM on qui 29/05/2014 at 15:56:22,64.
Microsoft Windows XP Professional 5.1.2600 Service Pack 2 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\ADM\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

29/5/2014 15:56:52 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

127.0.0.1       localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\oqiog9af.default\prefs.js:
user_pref("browser.startup.homepage", "http://br.hao123.com/?tn=bbl_pay_hp_02_hao123_br");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\oqiog9af.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062\prefs.js:
user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
user_pref("keyword.URL", "http://brasil-pesquisa.pw/r.asp#");
user_pref("browser.search.useDBForOrder", "false");

Added to C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Documents and Settings\ADMINI~1\Dados de aplicativos\Mozilla\Firefox\Profiles\3rmzalmd.default\prefs.js:

Added to C:\Documents and Settings\ADMINI~1\Dados de aplicativos\Mozilla\Firefox\Profiles\3rmzalmd.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\oqiog9af.default

user.js not found
---- Lines ask.com removed from prefs.js ----
user_pref("extensions.opensearch@ask.com.install-event-fired", true);
---- FireFox user.js and prefs.js backups ----

prefs_20142905_1608_.backup

ProfilePath: C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_20142905_1608_.backup

ProfilePath: C:\Documents and Settings\ADMINI~1\Dados de aplicativos\Mozilla\Firefox\Profiles\3rmzalmd.default

user.js not found
---- Lines SpeedAnalysis modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"jqs@sun.com\":{\"descriptor\":\"C:\\\\Arquivos de programas\\\\Ja
---- FireFox user.js and prefs.js backups ----

prefs_20142905_1608_.backup

==== Deleting Files \ Folders ======================

C:\Arquivos de programas\Internet Explorer\cr_addon.crx deleted
C:\Documents and Settings\ADM\Dados de aplicativos\GetRightToGo deleted
C:\Documents and Settings\ADM\Configurações locais\Dados de aplicativos\avgchrome deleted
C:\Documents and Settings\NetworkService\Configurações locais\Dados de aplicativos\avgchrome deleted
C:\WINDOWS\SET3.tmp deleted
C:\WINDOWS\SET4.tmp deleted
C:\WINDOWS\SET8.tmp deleted
C:\WINDOWS\System32\36.tmp deleted
C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com deleted
"C:\DOCUME~1\ALLUSE~1\DADOSD~1\54220682DF49C34900005421B265C7E4\54220682DF49C34900005421B265C7E4" deleted
"C:\DOCUME~1\ALLUSE~1\DADOSD~1\54220682DF49C34900005421B265C7E4" deleted
"C:\Documents and Settings\ADM\Dados de aplicativos\GrabPro" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Arquivos de programas\Alwil Software\Avast5\WebRep\FF" [29/05/2014 14:18]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Arquivos de programas\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [21/04/2010 16:47]

==== Firefox Extensions ======================

ProfilePath: C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062
- Java Quick Starter - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ff
- avast Online Security - C:\Arquivos de programas\Alwil Software\Avast5\WebRep\FF

==== Firefox Plugins ======================

Profilepath: C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062
A58DE0A570148AF5FF3512B2A340D09F - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll - Shockwave Flash
785105A23650755A8F7A72405EB0D923 - C:\Arquivos de programas\Google\Update\1.3.24.7\npGoogleUpdate3.dll - Google Update
BC38453017A70FAF44BDF6751950DDD3 - C:\Arquivos de programas\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.1
0B314AD6C5605CBD851CD39EF1FF5CF8 - C:\Arquivos de programas\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.1
027DF61727EC6476F77EF33050D36028 - C:\Arquivos de programas\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.1
0D827CBCF3F71F0E2583770672564828 - C:\Arquivos de programas\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.1
0AFF1B9ED82374C344F9072105EFB978 - C:\Arquivos de programas\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.1
BA9FD6727DE82450EAA0D06CEDAC07B5 - C:\Arquivos de programas\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.1
5746AE3247CA70A11C2CCECB804AEB44 - C:\Arquivos de programas\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.1
AE84791D996D1F05A2446B0C447D937A - C:\Arquivos de programas\Adobe\Reader 9.0\Reader\browser\nppdf32.dll - Adobe Acrobat
AE84791D996D1F05A2446B0C447D937A - C:\Arquivos de programas\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
F7B9148F6E0DB4F722634452DFF578E0 - C:\Arquivos de programas\Real\RealPlayer\Netscape6\nprjplug.dll - RealJukebox NS Plugin
3170FDFA0CCE1D9133B6546315D11983 - C:\Documents and Settings\All Users\Dados de aplicativos\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll - RealNetworks(tm) Chrome Background Extension Plug-In (32-bit)
76C5ADFE97A6960D0851522EA7AA5AF4 - C:\Documents and Settings\All Users\Dados de aplicativos\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll - RealPlayer(tm) HTML5VideoShim Plug-In (32-bit)
879AAD363252B682EF9550428E8C1FEA - C:\Arquivos de programas\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)
692C1CC6A09FDE9F356524DD0D0391B8 - C:\Arquivos de programas\Real\RealPlayer\Netscape6\nprpjplug.dll - RealPlayer Version Plugin
EC401349BFA64BD6232C746046AEC0B5 - C:\Documents and Settings\ADM\Dados de aplicativos\Mozilla\plugins\npoctoshape.dll - Octoshape Streaming Services
B3EFFE7C6EDBA9A754158B8EA2BF7BBA - C:\Arquivos de programas\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library
6C0C53426B632D1DFCAD9F3E6CBD1F7C - C:\Arquivos de programas\Windows Media Player\npdrmv2.dll - Microsoft® DRM
49F8F2BF3A14CEC767DBF76D581212D0 - C:\Arquivos de programas\Windows Media Player\npwmsdrm.dll - Microsoft® DRM


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
jfmjfhklogoienhpfnppmbcbjfjnkonk - C:\Documents and Settings\All Users\Dados de aplicativos\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx[12/01/2012 22:17]

Entanglement Web App - ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd
Angry Birds - ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
Fiery Music - ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\hnmfeiddljnkcdgcfcfhpenipgmaocon
Poppit - ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi
Google Wallet - ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Docs - Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
RealPlayer HTML5Video Downloader Extension - Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk
Gmail - Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chrome Fix ======================

C:\Documents and Settings\All Users\Dados de aplicativos\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx deleted successfully
C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://br.hao123.com/?tn=bbl_pay_hp_02_hao123_br"
"Search Page"="http://www.google.com"
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.google.com"
"Default_Search_URL"="http://www.google.com"
"Search Page"="http://www.google.com"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com"
"CustomizeSearch"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{6C527E4E-EBB1-4BE2-9E2B-740805BE49AA} Google  Url="http://www.google.com.br/search?hl=pt-BR&q={searchTerms}&meta=&rlz=1I7GGLL_pt-BR"

==== Reset Google Chrome ======================

C:\Documents and Settings\ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Documents and Settings\ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on Users Desktops ======================

C:\Documents and Settings\ADM\desktop\Audacity.lnk - C:\Arquivos de programas\Audacity\audacity.exe
C:\Documents and Settings\ADM\desktop\CorelDRAW X3.lnk - C:\WINDOWS\Installer\{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}\NewShortcut1.exe
C:\Documents and Settings\ADM\desktop\Format Factory.lnk - C:\Arquivos de programas\FreeTime\FormatFactory\FormatFactory.exe
C:\Documents and Settings\ADM\desktop\Glary Utilities.lnk - C:\Arquivos de programas\Glary Utilities\Integrator.exe
C:\Documents and Settings\ADM\desktop\ImTOO Audio Encoder.lnk - C:\Arquivos de programas\ImTOO\Audio Encoder\audioenc.exe
C:\Documents and Settings\ADM\desktop\Meu computador.lnk -  
C:\Documents and Settings\ADM\desktop\Mixcraft 6.lnk - C:\Arquivos de programas\Acoustica Mixcraft 6\mixcraft6.exe
C:\Documents and Settings\ADM\desktop\PhotoScape.lnk - C:\Arquivos de programas\PhotoScape\PhotoScape.exe
C:\Documents and Settings\ADM\desktop\Photoshop CS3.lnk - C:\Arquivos de programas\Adobe\Adobe Photoshop CS3\Photoshop.exe
C:\Documents and Settings\ADM\desktop\Revo Uninstaller.lnk - C:\Arquivos de programas\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Documents and Settings\ADM\desktop\Raionny\Musicas\Red Hot Chili Peppers - Greatest Hits\Atalho para Red Hot Chili Peppers - Greatest Hits.lnk - C:\Documents and Settings\ADM\Desktop\Raionny\Musicas\Red Hot Chili Peppers - Greatest Hits
C:\Documents and Settings\ADM\desktop\Raionny\~~Games~~\GTA San Andreas.lnk - C:\Arquivos de programas\Rockstar Games\GTA San Andreas\gta_sa.exe

==== shortcuts on All Users Desktop ======================

C:\Documents and Settings\All Users\Desktop\Adicionar um dispositivo - Photosmart C4600 series.lnk - C:\Arquivos de programas\HP\Digital Imaging\{44C81D1A-0520-49BB-B510-98B8DD414EA1}\hpzstub.exe -AddADevice
C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk - C:\Arquivos de programas\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Documents and Settings\All Users\Desktop\aTube Catcher.lnk - C:\Arquivos de programas\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Documents and Settings\All Users\Desktop\avast Free Antivirus.lnk -  
C:\Documents and Settings\All Users\Desktop\Central de Soluções HP.lnk - C:\Arquivos de programas\HP\Digital Imaging\bin\Hpqdirec.exe
C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk - C:\Arquivos de programas\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\All Users\Desktop\HD ADeck.lnk - C:\Arquivos de programas\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk - C:\Arquivos de programas\Mozilla Firefox\firefox.exe
C:\Documents and Settings\All Users\Desktop\Nero Home Essentials SE.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero Home\NeroHome.exe -ScParameter=8  
C:\Documents and Settings\All Users\Desktop\Nero StartSmart Essentials.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8  
C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk - C:\Arquivos de programas\QuickTime\QuickTimePlayer.exe
C:\Documents and Settings\All Users\Desktop\RealPlayer.lnk - C:\Arquivos de programas\Real\RealPlayer\realplay.exe /launch:desktop
C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Professional.lnk - C:\Arquivos de programas\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Documents and Settings\All Users\Desktop\Video Search.lnk - C:\Arquivos de programas\DsNET Corp\aTube Catcher 2.0\yct.exe  /VIDEOSEARCH

==== shortcuts in Users Start Menu ======================

C:\Documents and Settings\ADM\Menu Iniciar\Programas\Internet Explorer.lnk - C:\Arquivos de programas\Internet Explorer\iexplore.exe
C:\Documents and Settings\ADM\Menu Iniciar\Programas\Dropbox\Dropbox.lnk - C:\Documents and Settings\ADM\Dados de aplicativos\Dropbox\bin\Dropbox.exe /home
C:\Documents and Settings\ADM\Menu Iniciar\Programas\Dropbox\Uninstall Dropbox.lnk - C:\Documents and Settings\ADM\Dados de aplicativos\Dropbox\bin\DropboxUninstaller.exe
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Assistência remota.lnk - C:\WINDOWS\system32\rcimlby.exe -LaunchRA
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Bloco de notas.lnk - C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Prompt de comando.lnk - C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Sincronizar.lnk - C:\WINDOWS\system32\mobsync.exe
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Tour do Windows XP.lnk - C:\WINDOWS\system32\tourstart.exe
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Windows Explorer.lnk - C:\WINDOWS\explorer.exe
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Acessibilidade\Gerenciador de utilitários.lnk - C:\WINDOWS\system32\utilman.exe /start
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Acessibilidade\Lente de aumento.lnk - C:\WINDOWS\system32\magnify.exe
C:\Documents and Settings\Default User\Menu Iniciar\Programas\Acessórios\Acessibilidade\Teclado virtual.lnk - C:\WINDOWS\system32\osk.exe

==== shortcuts in All Users Start Menu ======================

C:\Documents and Settings\All Users\Menu Iniciar\Definir acesso e padrões do programa.lnk - C:\WINDOWS\system32\control.exe appwiz.cpl,,3
C:\Documents and Settings\All Users\Menu Iniciar\Windows Update.lnk - C:\WINDOWS\system32\wupdmgr.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Mozilla Firefox.lnk - C:\Arquivos de programas\Mozilla Firefox\firefox.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Acessibilidade\Assistente de acessibilidade.lnk - C:\WINDOWS\system32\accwiz.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Assistente de configuração de rede.lnk - C:\WINDOWS\system32\rundll32.exe hnetwiz.dll,HomeNetWizardRunDll
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Assistente para Configuração de Rede sem Fio.lnk - C:\WINDOWS\system32\rundll32.exe shell32.dll,Control_RunDLL NetSetup.cpl,@0,WNSW
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Assistente para novas conexões.lnk - C:\WINDOWS\system32\rundll32.exe netshell.dll,StartNCW
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Conexão de área de trabalho remota.lnk - C:\WINDOWS\system32\mstsc.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Comunicações\Conexões de rede.lnk - C:\WINDOWS\explorer.exe ::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{21EC2020-3AEA-1069-A2DD-08002B30309D}\::{7007acc7-3202-11d1-aad2-00805fc1270e}
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Entretenimento\Gravador de som.lnk - C:\WINDOWS\system32\sndrec32.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Assistente para transferência de arquivos e configurações.lnk - C:\WINDOWS\system32\usmt\migwiz.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Backup.lnk - C:\WINDOWS\system32\ntbackup.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Central de Segurança.lnk - C:\WINDOWS\system32\wscui.cpl
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Desfragmentador de disco.lnk - C:\WINDOWS\system32\dfrg.msc
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Limpeza de disco.lnk - C:\WINDOWS\system32\cleanmgr.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Mapa de caracteres.lnk - C:\WINDOWS\system32\charmap.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Acessórios\Ferramentas do sistema\Tarefas agendadas.lnk - C:\WINDOWS\explorer.exe ::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{21EC2020-3AEA-1069-A2DD-08002B30309D}\::{D6277990-4C6A-11CF-8D87-00AA0060F5BF}
C:\Documents and Settings\All Users\Menu Iniciar\Programas\aTube Catcher\aTube Catcher.lnk - C:\Arquivos de programas\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Avira\AntiVir Desktop\Start AntiVir.lnk - C:\Documents and Settings\ADM\Dados de aplicativos\baidu\hao123-br\hao123.1.0.0.1106.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Desempenho.lnk - C:\WINDOWS\system32\perfmon.msc /s
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Diretiva de segurança local.lnk - C:\WINDOWS\system32\secpol.msc /s
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Fontes de dados (ODBC).lnk - C:\WINDOWS\system32\odbcad32.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Gerenciamento do computador.lnk - C:\WINDOWS\system32\compmgmt.msc /s
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Serviços.lnk - C:\WINDOWS\system32\services.msc /s
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Ferramentas administrativas\Visualizar eventos.lnk - C:\WINDOWS\system32\eventvwr.msc /s
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Google Chrome\Google Chrome.lnk - C:\Arquivos de programas\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Jogos\Campo minado.lnk - C:\WINDOWS\system32\winmine.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office Word 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programs\SUPERAntiSpyware\BootSafe.lnk - C:\Arquivos de programas\SUPERAntiSpyware\BootSafe.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programs\SUPERAntiSpyware\SUPERAntiSpyware Alternate Start.lnk - C:\Arquivos de programas\SUPERAntiSpyware\RUNSAS.EXE
C:\Documents and Settings\All Users\Menu Iniciar\Programs\SUPERAntiSpyware\SUPERAntiSpyware Free Edition.lnk - C:\Arquivos de programas\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Documents and Settings\All Users\Menu Iniciar\Programs\SUPERAntiSpyware\SUPERAntiSpyware Help.lnk - C:\Arquivos de programas\SUPERAntiSpyware\SUPERAntiSpyware.chm
C:\Documents and Settings\All Users\Menu Iniciar\Programs\SUPERAntiSpyware\SUPERAntiSpyware Registration-Activation.lnk - C:\Arquivos de programas\SUPERAntiSpyware\SUPERAntiSpyware.exe  /register

==== shortcuts in Quick Launch ======================

C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Atalho para Raionny.lnk - C:\Documents and Settings\ADM\Desktop\Raionny
C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Arquivos de programas\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Iniciar o navegador Internet Explorer.lnk - C:\Arquivos de programas\Internet Explorer\iexplore.exe
C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Arquivos de programas\Mozilla Firefox\firefox.exe
C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk - C:\Arquivos de programas\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe -ScParameter=8  
C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Orbit.lnk - C:\Arquivos de programas\Orbitdownloader\orbitdm.exe
C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk - C:\Arquivos de programas\PhotoScape\PhotoScape.exe
C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger  (2).lnk - C:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\ADM\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Arquivos de programas\Windows Media Player\wmplayer.exe /prefetch:1

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr deleted successfully

==== Empty IE Cache ======================

C:\Documents and Settings\Administrador\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\ADM\Configurações locais\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\LocalService\Configurações locais\temp\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\LocalService\Configurações locais\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Documents and Settings\ADM\Configurações locais\Dados de aplicativos\Mozilla\Firefox\Profiles\waqujhcs.default-1357229050062\Cache emptied successfully
C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Mozilla\Firefox\Profiles\3rmzalmd.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Documents and Settings\ADM\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Documents and Settings\Administrador\Configurações locais\Dados de aplicativos\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=40 folders=12 2530622 bytes)

==== Empty Temp Folders ======================

C:\Documents and Settings\ADM\Configurações locais\temp will be emptied at reboot
C:\Documents and Settings\Administrador\Configurações locais\temp emptied successfully
C:\Documents and Settings\Default User\Configurações locais\temp emptied successfully
C:\Documents and Settings\LocalService\Configurações locais\temp will be emptied at reboot
C:\Documents and Settings\NetworkService\Configurações locais\temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\ADM\CONFIG~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\ADM\Configurações locais\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Documents and Settings\LocalService\Configurações locais\temp\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Documents and Settings\LocalService\Configurações locais\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Documents and Settings\LocalService\Configurações locais\temp\Cookies" not deleted
"C:\Documents and Settings\LocalService\Configurações locais\temp\History" not deleted
"C:\Documents and Settings\LocalService\Configurações locais\temp\Temporary Internet Files" not deleted

==== EOF on qui 29/05/2014 at 16:30:37,48 ======================

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Microsoft Windows XP x86
Ran by ADM on sex 30/05/2014 at  8:17:07,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-796845957-2052111302-839522115-1003\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\yuna software



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Arquivos de programas\yuna software"





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on sex 30/05/2014 at  8:23:06,26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Faça o download do Malwarebytes em um destes links abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para instalá-lo e executá-lo corretamente siga, por gentileza, as dicas desta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log (relatório) do Malwarebytes.

Ficamos no aguardo.

São necessários realmente o escaneamento com todos esse programas ?
Ainda faltam muitos ?     

Como está o PC?

Bem, O problema relatado aqui no inicio deste tópico foi resolvido n primeiro passo do tuturial.
Quanto a velocidade do pc, está normal assim como na inicialização !

Fico feliz que o problema tenha sido resolvido.

Só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

Foi um prazer ajudar. Conte sempre conosco!

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.