Memória do PC reduzida

Bom, notei que quando ligo o PC, a memória está reduzida (ex; desliguei ontem com 4,27GB e hoje quando liguei estava com 1,71GB)
Gostaria de saber o que pode estar causando isso.
obs: Não é sempre que acontece isso.

Oi Vanessa.

Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPDiag para baixá-lo, tal como mostra a imagem abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Para instalá-lo e executá-lo corretamente siga as dicas deste artigo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a sua verificação, copie todo o conteúdo do seu relatório ZHPDiag.txt e poste em sua próxima resposta.

Tentei prosseguir com a instalação mas apareceu esta mensagem: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Poste um log do programa Hijackthis como mostra esta postagem abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:45:07, on 24/06/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe
C:\Users\Vanessa\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files (x86)\MCShield\MCShieldRTM.exe
C:\Users\Vanessa\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Vanessa\Downloads\HijackThis.exe
C:\Program Files (x86)\PhotoScape\PhotoScape.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_125.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Vanessa\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MCShield Monitor] C:\Program Files (x86)\MCShield\mcshieldrtm.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Vanessa\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportar para o Microsoft Excel - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Exibir ou ocultar HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O17 - HKLM\System\CCS\Services\Tcpip\..\{31B38DD0-088F-4AB7-9D02-D27F6E8FD52F}: NameServer = 199.85.126.20,199.85.127.20,10.1.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{E44E6759-95FE-4A71-BA38-B00BE83D120F}: NameServer = 199.85.126.20,199.85.127.20
O17 - HKLM\System\CS1\Services\Tcpip\..\{31B38DD0-088F-4AB7-9D02-D27F6E8FD52F}: NameServer = 199.85.126.20,199.85.127.20,10.1.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{31B38DD0-088F-4AB7-9D02-D27F6E8FD52F}: NameServer = 199.85.126.20,199.85.127.20,10.1.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: Watchdog do AVG (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Serviço do Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Users\Public\temp\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11780 bytes

Há programas desnecessários iniciando junto com o Windows, o que torna o seu PC mais lento. Para corrigir isto, siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

De preferência deixe apenas os programas de segurança (anti-vírus/anti-spywares/firewall) iniciarem junto com o Windows.

Use também o programa Ccleaner, indicado neste tutorial acima, para fazer uma limpeza e otimização do PC.
____________________________________________________________________________________

Sugiro que vá no Painel de Controle do Windows e desinstale o programa Bonjour.
__________________________________________________________________________________

Atualize seu Avg (faça um update) > Faça uma verificação completa com ele e remova os problemas que ele encontrar. Depois disto nos diga se algum vírus foi removido pelo Avg e nos diga como está o PC depois destes procedimentos.

Durante o procedimento do HijackThis apareceu esta mensagem: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Vanessa B escreveu:Durante o procedimento do HijackThis apareceu esta mensagem: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Esta mensagem é normal. Siga as outras dicas que te passei.

Fiz os procedimentos, mas o problema ainda persiste.

Vanessa B escreveu:Fiz os procedimentos, mas o problema ainda persiste.

O Avg removeu alguns vírus?
_______________________________________________________

Faça o download do Malwarebytes em um destes links abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para instalá-lo e executá-lo corretamente siga, por gentileza, as dicas desta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log (relatório) do Malwarebytes.

Ficamos no aguardo.

Power Max escreveu:

Vanessa B escreveu:Fiz os procedimentos, mas o problema ainda persiste.

 O Avg removeu alguns vírus?
_______________________________________________________

 Faça o download do Malwarebytes em um destes links abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para instalá-lo e executá-lo corretamente siga, por gentileza, as dicas desta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log (relatório) do Malwarebytes.

Ficamos no aguardo.

Fiz o escaneamento completo e não encontrou nenhum vírus.

Ok, fico no aguardo do relatório do Malwarebytes.

Malwarebytes Anti-Malware
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]


Update, 25/06/2014 12:41:57, SYSTEM, VANESSA-PC, Manual, Rootkit Database, 2014.2.20.1, 2014.6.23.2,
Update, 25/06/2014 12:42:14, SYSTEM, VANESSA-PC, Manual, Malware Database, 2014.3.4.9, 2014.6.25.14,
Protection, 25/06/2014 13:04:09, SYSTEM, VANESSA-PC, Protection, Malware Protection, Starting,
Protection, 25/06/2014 13:04:09, SYSTEM, VANESSA-PC, Protection, Malware Protection, Started,
Protection, 25/06/2014 13:04:09, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Starting,
Protection, 25/06/2014 13:04:10, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Started,
Detection, 25/06/2014 13:53:52, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52380, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 13:53:53, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52380, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 13:53:53, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52381, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 13:53:54, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52382, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 13:53:54, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52383, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 13:53:54, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52384, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 13:53:54, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52385, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 13:53:55, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52392, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 13:53:55, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 67.212.88.146, kastatic.com, 52393, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Update, 25/06/2014 15:27:14, SYSTEM, VANESSA-PC, Scheduler, Malware Database, 2014.6.25.14, 2014.6.25.16,
Protection, 25/06/2014 15:27:29, SYSTEM, VANESSA-PC, Protection, Refresh, Starting,
Protection, 25/06/2014 15:27:29, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Stopping,
Protection, 25/06/2014 15:27:29, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Stopped,
Protection, 25/06/2014 15:27:49, SYSTEM, VANESSA-PC, Protection, Refresh, Success,
Protection, 25/06/2014 15:27:49, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Starting,
Protection, 25/06/2014 15:27:56, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Started,
Update, 25/06/2014 17:10:47, SYSTEM, VANESSA-PC, Scheduler, Malware Database, 2014.6.25.16, 2014.6.25.17,
Protection, 25/06/2014 17:10:51, SYSTEM, VANESSA-PC, Protection, Refresh, Starting,
Protection, 25/06/2014 17:10:51, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Stopping,
Protection, 25/06/2014 17:10:52, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Stopped,
Protection, 25/06/2014 17:11:40, SYSTEM, VANESSA-PC, Protection, Refresh, Success,
Protection, 25/06/2014 17:11:40, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Starting,
Protection, 25/06/2014 17:12:00, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Started,
Update, 25/06/2014 18:24:34, SYSTEM, VANESSA-PC, Scheduler, Malware Database, 2014.6.25.17, 2014.6.25.18,
Protection, 25/06/2014 18:24:55, SYSTEM, VANESSA-PC, Protection, Refresh, Starting,
Protection, 25/06/2014 18:24:55, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Stopping,
Protection, 25/06/2014 18:24:56, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Stopped,
Protection, 25/06/2014 18:25:49, SYSTEM, VANESSA-PC, Protection, Refresh, Success,
Protection, 25/06/2014 18:25:50, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Starting,
Protection, 25/06/2014 18:25:59, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Started,
Detection, 25/06/2014 19:52:20, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 46.105.104.99, prodigythegod.us, 60117, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 19:52:22, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 46.105.104.99, prodigythegod.us, 60117, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 19:52:22, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 46.105.104.99, prodigythegod.us, 60118, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 19:55:16, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 217.23.9.122, yuq.me, 60238, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 19:55:16, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 217.23.9.122, yuq.me, 60238, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 25/06/2014 19:55:16, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, IP, 217.23.9.122, yuq.me, 60239, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Protection, 25/06/2014 20:40:14, SYSTEM, VANESSA-PC, Protection, Malware Protection, Starting,
Protection, 25/06/2014 20:40:14, SYSTEM, VANESSA-PC, Protection, Malware Protection, Started,
Protection, 25/06/2014 20:40:14, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Starting,
Protection, 25/06/2014 20:41:10, SYSTEM, VANESSA-PC, Protection, Malicious Website Protection, Started,

(end)

Siga as dicas abaixo para acessar o Log (relatório) correto do Malwarebytes:

Para isto abra o Malwarebytes > Clique no botão Histórico > Clique em Logs de Aplicativos > E dê um duplo clique com o botão esquerdo do mouse sobre o Log de Verificação mais atual para abri-lo. Isto é mostrado nesta imagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Na próxima tela que surgirá clique no botão Exportar > e clique na opção Arquivo texto (*.txt):

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Na outra tela que vai aparecer dê um nome para este relatório (como LOG por exemplo) > Clique em Área de Trabalho (para que ele seja salvo no seu Desktop) > Clique em Salvar:

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Clique em OK na próxima mensagem que aparece:

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Depois disto é só postar este log do Malwarebytes em sua próxima resposta.

Nossa, nem percebi que havia dois logs, enfim, me desculpe, hehe.

Malwarebytes Anti-Malware
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Data de Verificação: 25/06/2014
Hora da Verificação: 13:06:04
Logfile: LOG2.txt
Administrador: Sim

Versão: 2.00.2.1012
Malware Database: v2014.06.25.14
Rootkit Database: v2014.06.23.02
Licença: Premium
Proteção de Malware: Enabled
Proteção de Site Malicioso: Enabled
Self-protection: Desabilitado

OS: Windows 7 Service Pack 1
CPU: x64
Sistema de Arquivo: NTFS
Usuário: Vanessa

Tipo da Verificação: Verificação Personalizada
Resultado: Completado
Arquivos Verificados: 727616
Tempo Decorrido: 7 hr, 28 min, 22 seg

Memória: Enabled
Inicialização: Enabled
Filesystem: Enabled
Arquivos: Enabled
Rootkits: Desabilitado
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processos: 0
(No malicious items detected)

Módulos: 0
(No malicious items detected)

Chaves de Registro: 0
(No malicious items detected)

Valores de Registro: 0
(No malicious items detected)

Dados do Registro: 0
(No malicious items detected)

Pastas: 0
(No malicious items detected)

Arquivos: 2
PUP.Optional.Somoto.A, C:\Users\Vanessa\AppData\Local\Google\Chrome\User Data\Default\File System\013\t\00\00000000, Quarantined, [a40e3e3ecab11d1981db2e5c4db4ad53],
PUP.Optional.Speedial.A, C:\Users\Vanessa\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "search_url": "http://speedial.com/results.php?f=4&q={searchTerms}&a=spd_ir_14_24_ch&cd=2XzuyEtN2Y1L1QzutDtD0F0F0EyEyE0EyCyByDzyzzyD0F0AtN0D0Tzu0SzzzytCtN1L2XzutBtFtBtDtFtCzytFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyCtD0B0A0F0B0C0DtGtA0F0EtBtGtCtDtB0FtGyDyD0D0AtGtB0F0DyDtAyByByEyB0E0C0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0ByByByCtDyCtBtG0E0CyEyBtGtD0D0F0BtGtD0FtDzytGyEyCtCyE0DyBtAzzyEyCyD0B2Q&cr=659741765&ir=",), Replaced,[7d35b0cc93e844f2dc56278e7f858b75]

Physical Sectors: 0
(No malicious items detected)


(end)

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

# AdwCleaner v3.213 - Report created 25/06/2014 at 21:54:56
# Updated 23/06/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Vanessa - VANESSA-PC
# Running from : C:\Users\Vanessa\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

File Deleted : C:\Users\Vanessa\AppData\Roaming\Mozilla\Firefox\Profiles\uq9x1nle.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B}
Key Deleted : HKLM\Software\AVG SafeGuard toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v29.0.1 (pt-BR)

[ File : C:\Users\Vanessa\AppData\Roaming\Mozilla\Firefox\Profiles\uq9x1nle.default\prefs.js ]

Line Deleted : user_pref("browser.search.selectedEngine", "Speedial");
Line Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]

-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\Vanessa\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deleted [Extension] : bakijjialdiiboeaknfpmflphhmljfkd

*************************

AdwCleaner[R0].txt - [2194 octets] - [25/06/2014 21:52:56]
AdwCleaner[S0].txt - [2020 octets] - [25/06/2014 21:54:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2080 octets] ##########

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

Zoek.exe v5.0.0.0 Updated 22-06-2014
Tool run by Vanessa on 26/06/2014 at 17:05:01,41.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Vanessa\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

26/06/2014 17:09:10 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2217399279-2482454507-1961363816-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Vanessa\AppData\Roaming\Mozilla\Firefox\Profiles\uq9x1nle.default\prefs.js:
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\Vanessa\AppData\Roaming\Mozilla\Firefox\Profiles\uq9x1nle.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

C:\Users\Vanessa\Searches deleted
"C:\Users\Vanessa\AppData\Roaming\Elsword" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext" [18/12/2011 14:13]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [05/06/2011 11:22]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Vanessa\AppData\Roaming\Mozilla\Firefox\Profiles\uq9x1nle.default
- Orkut Manager - %ProfilePath%\extensions\om.brunolm@gmail.com
- Stylish - %ProfilePath%\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
- Greasemonkey - %ProfilePath%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Vanessa\AppData\Roaming\Mozilla\Firefox\Profiles\uq9x1nle.default
738C29EAC995029E13333034C1402F56 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll - Shockwave Flash
884705AD43780C86782935D5B1F1E4DE - C:\Users\Vanessa\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll - Google Talk Plugin Video Accelerator
E85BC9AF3B4481B875F5A9BD73E8732F - C:\Users\Vanessa\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
683B6A2376FA62A797A9DC83807CACA8 - C:\Users\Vanessa\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
CFAF7B67C78D09D79688AEDCA3D090E2 - C:\Users\Vanessa\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll - Google Update
4AE054AAF74F93566720766CBC9A0E64 - C:\Users\Vanessa\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
8FBED84A67CD0D424428B32B17B6E5C9 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll - RealNetworks(tm) Chrome Background Extension Plug-In (32-bit)
CC021B4BAC2EDC0789FE42D45B183959 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll - RealPlayer(tm) HTML5VideoShim Plug-In (32-bit)
B6A800D881A0176C544988870861E798 - C:\Windows\SysWoW64\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[02/03/2012 11:53]

AdBlock - Vanessa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Skype Click to Call - Vanessa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Google Wallet - Vanessa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\Vanessa\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Vanessa\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\Vanessa\Desktop\Spotify.lnk - C:\Users\Vanessa\AppData\Roaming\Spotify\spotify.exe
C:\Users\Vanessa\Desktop\Programas\Adicionar um dispositivo - Photosmart D110 series.lnk - C:\Program Files (x86)\HP\Digital Imaging\{DBC1DE57-B55A-4D57-9769-1DB9BE506AF7}\hpzstub.exe -AddADevice
C:\Users\Vanessa\Desktop\Programas\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\Vanessa\Desktop\Programas\Adobe Reader XI.lnk - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
C:\Users\Vanessa\Desktop\Programas\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\Vanessa\Desktop\Programas\AVG 2014.lnk - C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Users\Vanessa\Desktop\Programas\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\Users\Vanessa\Desktop\Programas\Central de Soluções HP.lnk -
C:\Users\Vanessa\Desktop\Programas\chrome - Atalho.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Vanessa\Desktop\Programas\Format Factory.lnk - C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
C:\Users\Vanessa\Desktop\Programas\Free Offers.lnk - C:\Program Files (x86)\Real\RealPlayer\freeoffers.rnx
C:\Users\Vanessa\Desktop\Programas\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Vanessa\Desktop\Programas\HP ePrinterCenter.lnk - C:\Program Files (x86)\HP\Digital Imaging\AppStudio\hpzsip.url
C:\Users\Vanessa\Desktop\Programas\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\Vanessa\Desktop\Programas\Last.fm Scrobbler.lnk - C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe
C:\Users\Vanessa\Desktop\Programas\Loja de Suprimentos HP.lnk - C:\Program Files (x86)\HP\HPSSUPPLY\hpqSSupply.exe
C:\Users\Vanessa\Desktop\Programas\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Vanessa\Desktop\Programas\MP3 Downloader.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe /MP3DOWNLOADER
C:\Users\Vanessa\Desktop\Programas\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe
C:\Users\Vanessa\Desktop\Programas\QuickTime Player.lnk - C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe
C:\Users\Vanessa\Desktop\Programas\RealPlayer.lnk - C:\program files (x86)\real\realplayer\RealPlay.exe /launch:desktop
C:\Users\Vanessa\Desktop\Programas\Revo Uninstaller.lnk - C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
C:\Users\Vanessa\Desktop\Programas\Skype.lnk - C:\Windows\Installer\{1845470B-EB14-4ABC-835B-E36C693DC07D}\SkypeIcon.exe
C:\Users\Vanessa\Desktop\Programas\Video Search.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe /VIDEOSEARCH
C:\Users\Vanessa\Desktop\Programas\Webcam videocap.lnk - C:\Program Files (x86)\ETRON\WebCam\X64\VideoCap.exe
C:\Users\Vanessa\Desktop\Programas\µTorrent.lnk -

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -
C:\Users\Vanessa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk - C:\Users\Vanessa\AppData\Roaming\Spotify\spotify.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG\AVG 2014.lnk - C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk - C:\Program Files\CCleaner\uninst.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Desinstalar Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Last.fm Scrobbler.lnk - C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Spotify.lnk - C:\Users\Vanessa\AppData\Roaming\Spotify\spotify.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Vanessa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Messenger.lnk - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Vanessa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Vanessa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GVLKJ6VX will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Vanessa\AppData\Local\Mozilla\Firefox\Profiles\uq9x1nle.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Vanessa\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=329 folders=46 50564822 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Vanessa\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by Vanessa on 26/06/2014 at 19:15:03,38
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\Vanessa\AppData\Roaming\mozilla\firefox\profiles\uq9x1nle.default\prefs.js

user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-
Emptied folder: C:\Users\Vanessa\AppData\Roaming\mozilla\firefox\profiles\uq9x1nle.default\minidumps [4 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26/06/2014 at 19:32:26,24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Como está o PC?

Power Max escreveu:Como está o PC?

Ainda continua com o mesmo problema. Daí preciso reiniciar o PC para a memória normal voltar.

Tudo indica que isto não está ligado a vírus ou algo do tipo. Seria bom levar o PC na assistência técnica para eles detectarem e corrigirem este problema.

Power Max escreveu:Tudo indica que isto não está ligado a vírus ou algo do tipo. Seria bom levar o PC na assistência técnica para eles detectarem e corrigirem este problema.

Você acha que isso pode atrapalhar o desempenho do pc?