Não abre pagina https, e fica pedindo aualização de flasplayer

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:28:21, on 08/08/2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhostex.exe
C:\Windows\Explorer.EXE
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x86__8wekyb3d8bbwe\LiveComm.exe
C:\Program Files\iSafe\iSafeTray.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
D:\progamas2\Winamp\winamp.exe
D:\progamas2\HijackThis.exe

é isso o relatório?

O relatório está incompleto, copie ele todo e poste aqui no seu tópico, por gentileza.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:28:21, on 08/08/2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16384)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhostex.exe
C:\Windows\Explorer.EXE
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x86__8wekyb3d8bbwe\LiveComm.exe
C:\Program Files\iSafe\iSafeTray.exe
C:\Windows\System32\RuntimeBroker.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
D:\progamas2\Winamp\winamp.exe
D:\progamas2\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportar para o Microsoft Excel - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe
O23 - Service: iSafeService - Elex do Brasil Participações Ltda - C:\Program Files\iSafe\iSafeSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 3346 bytes

Obrigado, :-)

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

Baixei o programa, mas não consigo ver o tutorial que você postou, por causa deste mesmo vírus.
Pode colar o tutorial?

valeuu

# AdwCleaner v3.304 - Relatório criado 08/08/2014 às 15:20:52
# Atualizado 08/08/2014 por Xplode
# Sistema Operacional : Windows 8 Pro  (32 bits)
# Usuário : Cristov - FÁBIO
# Executando de : D:\progamas2\AdwCleaner.exe
# Opção : Examinar

***** [ Serviços ] *****

Serviço Encontrado : IePluginServices
Serviço Encontrado : iSafeKrnl
Serviço Encontrado : iSafeNetFilter
Serviço Encontrado : iSafeService

***** [ Arquivos / Pastas ] *****

Pasta Encontrado : C:\Program Files\iSafe
Pasta Encontrado : C:\Program Files\Tbccint
Pasta Encontrado : C:\ProgramData\baidu
Pasta Encontrado : C:\ProgramData\IePluginServices
Pasta Encontrado : C:\ProgramData\Tbccint
Pasta Encontrado : C:\ProgramData\WindowsMangerProtect
Pasta Encontrado : C:\Users\Cristov\AppData\Local\Tbccint
Pasta Encontrado : C:\Users\Cristov\AppData\Local\Temp\baidu
Pasta Encontrado : C:\Users\Cristov\AppData\Local\Temp\CT3329621
Pasta Encontrado : C:\Users\Cristov\AppData\LocalLow\Tbccint
Pasta Encontrado : C:\Users\Cristov\AppData\Roaming\baidu
Pasta Encontrado : C:\Users\Cristov\AppData\Roaming\eCyber
Pasta Encontrado : C:\Users\Cristov\AppData\Roaming\iSafe
Pasta Encontrado : C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default\CT3329621
Pasta Encontrado : C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default\Extensions\{31264a33-a653-46c4-af49-1232c59a7da5}
Pasta Encontrado : C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default\Extensions\faststartff@gmail.com

***** [ Tarefas ] *****


***** [ Atalhos ] *****

Atalho Encontrado : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk ( [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] )

***** [ Registro ] *****

Chave Encontrada : HKCU\Software\AppDataLow\Software\TbccintSearchScopes
Chave Encontrada : HKCU\Software\Conduit
Chave Encontrada : HKCU\Software\SupHpUISoft
Chave Encontrada : HKCU\Software\Tbccint
Chave Encontrada : HKCU\Software\Tbccint_HKLM
Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chave Encontrada : HKLM\SOFTWARE\Classes\Toolbar.CT3329621
Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Chave Encontrada : HKLM\Software\iSafe
Chave Encontrada : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
Chave Encontrada : HKLM\Software\SupDp
Chave Encontrada : HKLM\Software\supWindowsMangerProtect
Chave Encontrada : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Chave Encontrada : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Valor Encontrada : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]

***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16384

Configurações Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Configurações Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

-\\ Mozilla Firefox v31.0 (x86 pt-BR)

[ Arquivo : C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default\prefs.js ]

Linha encontrada : user_pref("CT3329621.FF19Solved", "true");
Linha encontrada : user_pref("CT3329621.UserID", "UN10900001226640270");
Linha encontrada : user_pref("CT3329621.dum", "2");
Linha encontrada : user_pref("CT3329621.fullUserID", "UN10900001226640270.IN.20140806181821");
Linha encontrada : user_pref("CT3329621.installDate", "06/08/2014 18:18:22");
Linha encontrada : user_pref("CT3329621.installSessionId", "4471befb-6b4e-4b6a-aec6-56b9cb3d0f32");
Linha encontrada : user_pref("CT3329621.installSp", "false");
Linha encontrada : user_pref("CT3329621.installerVersion", "1.11.0.11");
Linha encontrada : user_pref("CT3329621.searchRevert", "false");
Linha encontrada : user_pref("CT3329621.searchUninstallUserMode", "4");
Linha encontrada : user_pref("CT3329621.searchUserMode", "4");
Linha encontrada : user_pref("CT3329621.toolbarInstallDate", "06-08-2014 18:18:21");
Linha encontrada : user_pref("CT3329621.versionFromInstaller", "10.33.0.5");
Linha encontrada : user_pref("CT3329621.xpeMode", "1");
Linha encontrada : user_pref("smartbar.machineId", "/K3VVIRVLKPZRVF0GZAAEIP/JDX5FELLN/NTKTHM59E8ELPP9JBMXZH1QSHOFFGAHHNMFEEW79WOB0SA/8EPGG");

-\\ Google Chrome v36.0.1985.125

[ Arquivo : C:\Users\Cristov\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4823 octets] - [08/08/2014 15:20:52]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4883 octets] ##########

Falta agora você clicar no botão Limpar. E aí é só ir seguindo os passos que o Adwcleaner vai te mostrar.

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

# AdwCleaner v3.304 - Relatório criado 08/08/2014 às 15:55:56
# Atualizado 08/08/2014 por Xplode
# Sistema Operacional : Windows 8 Pro (32 bits)
# Usuário : Cristov - FÁBIO
# Executando de : D:\progamas2\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

Serviço Deletada : IePluginServices
Serviço Deletada : iSafeKrnl
Serviço Deletada : iSafeNetFilter
[#] Serviço Deletada : iSafeService

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\baidu
Pasta Deletada : C:\ProgramData\IePluginServices
Pasta Deletada : C:\ProgramData\Tbccint
Pasta Deletada : C:\ProgramData\WindowsMangerProtect
[!] Pasta Deletada : C:\Program Files\iSafe
Pasta Deletada : C:\Program Files\Tbccint
Pasta Deletada : C:\Users\Cristov\AppData\Local\Tbccint
Pasta Deletada : C:\Users\Cristov\AppData\Local\Temp\baidu
Pasta Deletada : C:\Users\Cristov\AppData\Local\Temp\CT3329621
Pasta Deletada : C:\Users\Cristov\AppData\LocalLow\Tbccint
Pasta Deletada : C:\Users\Cristov\AppData\Roaming\baidu
Pasta Deletada : C:\Users\Cristov\AppData\Roaming\eCyber
Pasta Deletada : C:\Users\Cristov\AppData\Roaming\iSafe
Pasta Deletada : C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default\CT3329621
Pasta Deletada : C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default\Extensions\faststartff@gmail.com
Pasta Deletada : C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default\Extensions\{31264a33-a653-46c4-af49-1232c59a7da5}

***** [ Tarefas ] *****


***** [ Atalhos ] *****

Atalho Desinfectada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk

***** [ Registro ] *****

Valor Deletedo : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Chave Deletedo : HKLM\SOFTWARE\Classes\Toolbar.CT3329621
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Chave Deletedo : HKCU\Software\Conduit
Chave Deletedo : HKCU\Software\SupHpUISoft
Chave Deletedo : HKCU\Software\Tbccint
Chave Deletedo : HKCU\Software\Tbccint_HKLM
Chave Deletedo : HKCU\Software\AppDataLow\Software\TbccintSearchScopes
Chave Deletedo : HKLM\Software\iSafe
Chave Deletedo : HKLM\Software\SupDp
Chave Deletedo : HKLM\Software\supWindowsMangerProtect
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe

***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16384

Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v31.0 (x86 pt-BR)

[ Arquivo : C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default\prefs.js ]

Linha deletada : user_pref("CT3329621.FF19Solved", "true");
Linha deletada : user_pref("CT3329621.UserID", "UN10900001226640270");
Linha deletada : user_pref("CT3329621.dum", "2");
Linha deletada : user_pref("CT3329621.fullUserID", "UN10900001226640270.IN.20140806181821");
Linha deletada : user_pref("CT3329621.installDate", "06/08/2014 18:18:22");
Linha deletada : user_pref("CT3329621.installSessionId", "4471befb-6b4e-4b6a-aec6-56b9cb3d0f32");
Linha deletada : user_pref("CT3329621.installSp", "false");
Linha deletada : user_pref("CT3329621.installerVersion", "1.11.0.11");
Linha deletada : user_pref("CT3329621.searchRevert", "false");
Linha deletada : user_pref("CT3329621.searchUninstallUserMode", "4");
Linha deletada : user_pref("CT3329621.searchUserMode", "4");
Linha deletada : user_pref("CT3329621.toolbarInstallDate", "06-08-2014 18:18:21");
Linha deletada : user_pref("CT3329621.versionFromInstaller", "10.33.0.5");
Linha deletada : user_pref("CT3329621.xpeMode", "1");
Linha deletada : user_pref("smartbar.machineId", "/K3VVIRVLKPZRVF0GZAAEIP/JDX5FELLN/NTKTHM59E8ELPP9JBMXZH1QSHOFFGAHHNMFEEW79WOB0SA/8EPGG");

-\\ Google Chrome v36.0.1985.125

[ Arquivo : C:\Users\Cristov\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*************************

AdwCleaner[R0].txt - [4963 octets] - [08/08/2014 15:20:52]
AdwCleaner[S0].txt - [4824 octets] - [08/08/2014 15:55:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4884 octets] ##########

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

parece que limpou e depois reiniciou o PC, ta ai o relatorio:

Zoek.exe v5.0.0.0 Updated 07-August-2014
Tool run by Cristov on 08/08/2014 at 16:43:56,56.
Microsoft Windows 8 Pro 6.2.9200  x86
Running in: Normal Mode Internet Access Detected
Launched: D:\progamas2\zoek.exe [Scan all users]   [Quick Scan] [Auto Clean]

==== System Restore Info ======================

08/08/2014 16:45:14 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\Program Files\iSafe deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Program Files\GUTB3D4.tmp deleted
C:\Program Files\GUMB3C4.tmp deleted
C:\Users\Cristov\AppData\Roaming\istartsurf deleted
C:\Users\Cristov\AppData\Roaming\iSafe deleted
C:\Users\Cristov\Searches deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====
2014-07-21 23:10:40 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Windows\ativpsrm.bin
====== C:\Users\Cristov\AppData\Local\Temp ====
2014-08-07 21:18:25 13B0085A03720E67FB8C73DB3F14609E 421056 ----atw- C:\Users\Cristov\AppData\Local\Temp\n2234\s2234.exe
2014-08-07 18:13:11 6C702159D65E70F9DACAA74A113FA5BD 5372736 ----a-w- C:\Users\Cristov\AppData\Local\Temp\BS_Player_ControlBar_B\tbBS_P.dll
2014-08-06 23:08:17 EA627D2C7135E7C9F83E7CA2A1C91D86 793472 ----a-w- C:\Users\Cristov\AppData\Local\Temp\smt_istartsurf.exe
2014-08-06 23:08:14 5A6B6C1D0D449971EC431650679D0511 41258096 ----a-w- C:\Users\Cristov\AppData\Local\Temp\Spark_Setup_all.exe
2014-08-06 23:04:26 13A09BECABCE7CE7DE02D42D9C00A250 38456 ----a-w- C:\Users\Cristov\AppData\Local\Temp\bitool.dll
2014-08-06 15:48:25 42EC539D183CB43BCFF89E72585902D5 384485 ----a-w- C:\Users\Cristov\AppData\Local\Temp\Quarantine.exe
====== Java Cache =====
====== C:\Windows\system32 =====
2014-08-08 18:21:11 0DC5AF80D059DEC792B665ED598C6567 536576 ----a-w- C:\Windows\System32\sqlite3.dll
2014-08-06 23:21:48 BDD26328D6E6157E2EA7BF808F0742C3 102528 ----a-w- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
2014-08-06 23:21:48 B2F1BC4747122B8C1623DB3B50638187 778856 ----a-w- C:\Windows\System32\PresentationNative_v0300.dll
2014-08-06 23:21:48 02A005313FAD7127FB99E034573AF528 35400 ----a-w- C:\Windows\System32\TsWpfWrp.exe
2014-08-06 23:15:00 8A4CEBF34370D689E198E6673C1F2C40 74072 ----a-w- C:\Windows\System32\XAPOFX1_5.dll
2014-08-06 23:15:00 81DFDDFB401D663BA7E6AD1C80364216 527192 ----a-w- C:\Windows\System32\XAudio2_7.dll
2014-08-06 23:15:00 4FD7BCB9D8AF6A165E9BA0C2EB702E7C 239960 ----a-w- C:\Windows\System32\xactengine3_7.dll
2014-08-06 23:14:59 F81C4678A55FFEE585AC75825FAF5582 238936 ----a-w- C:\Windows\System32\xactengine3_6.dll
2014-08-06 23:14:59 E4CE2AF32F501A7F7DDDD908704A0EE6 74072 ----a-w- C:\Windows\System32\XAPOFX1_4.dll
2014-08-06 23:14:59 C811E70C8804CFFF719038250A43B464 22360 ----a-w- C:\Windows\System32\X3DAudio1_7.dll
2014-08-06 23:14:59 8E0BB968FF41D80E5F2C747C04DB79AE 248672 ----a-w- C:\Windows\System32\d3dx11_43.dll
2014-08-06 23:14:59 86E39E9161C3D930D93822F1563C280D 1998168 ----a-w- C:\Windows\System32\D3DX9_43.dll
2014-08-06 23:14:59 83EBA442F07AAB8D6375D2EEC945C46C 1868128 ----a-w- C:\Windows\System32\d3dcsx_43.dll
2014-08-06 23:14:59 4976243BD70FAE3D1D24E49739AB2710 528216 ----a-w- C:\Windows\System32\XAudio2_6.dll
2014-08-06 23:14:59 20C835843FCEC4DEDFCD7BFFA3B91641 470880 ----a-w- C:\Windows\System32\d3dx10_43.dll
2014-08-06 23:14:59 1C9B45E87528B8BB8CFA884EA0099A85 2106216 ----a-w- C:\Windows\System32\D3DCompiler_43.dll
2014-08-06 23:14:58 DB3C93E87452B8DAB4F58ED1FD2B1998 238936 ----a-w- C:\Windows\System32\xactengine3_5.dll
2014-08-06 23:14:58 B33B21DB610116262D906305CE65C354 1974616 ----a-w- C:\Windows\System32\D3DCompiler_42.dll
2014-08-06 23:14:58 B337306DFB508A1BCEF1974BFBB8D924 5501792 ----a-w- C:\Windows\System32\d3dcsx_42.dll
2014-08-06 23:14:58 8B01FB723F3B30AB3DEBDDBF97CFE577 515416 ----a-w- C:\Windows\System32\XAudio2_5.dll
2014-08-06 23:14:57 E684C5FA18ADF9EA14737757413BF727 517448 ----a-w- C:\Windows\System32\XAudio2_4.dll
2014-08-06 23:14:57 D09AC80A4B5312239852836C84DF3392 235344 ----a-w- C:\Windows\System32\d3dx11_42.dll
2014-08-06 23:14:57 C6A44FC3CF2F5801561804272217B14D 1892184 ----a-w- C:\Windows\System32\D3DX9_42.dll
2014-08-06 23:14:57 781E8B5B6FDB3C9B4E4A4A9FB019960D 1846632 ----a-w- C:\Windows\System32\D3DCompiler_41.dll
2014-08-06 23:14:57 501AC862517C5445742BEE8A2B88414E 453456 ----a-w- C:\Windows\System32\d3dx10_42.dll
2014-08-06 23:14:57 3FA06CF5079B84155D18B05C08F7131B 4178264 ----a-w- C:\Windows\System32\D3DX9_41.dll
2014-08-06 23:14:57 30686ECE80545E06D78D156EB9F7D463 69464 ----a-w- C:\Windows\System32\XAPOFX1_3.dll
2014-08-06 23:14:57 1AA571774936717EE776DBED51E9EDF4 453456 ----a-w- C:\Windows\System32\d3dx10_41.dll
2014-08-06 23:14:56 EEA5E428CE63804F9B12D21C97B5968F 4379984 ----a-w- C:\Windows\System32\D3DX9_40.dll
2014-08-06 23:14:56 E763798CAD2A90B6AB61854F50CD47DD 22360 ----a-w- C:\Windows\System32\X3DAudio1_6.dll
2014-08-06 23:14:56 D95EAABF5D277EF91D9CA70151209E56 68616 ----a-w- C:\Windows\System32\XAPOFX1_1.dll
2014-08-06 23:14:56 91B4AAD4412BB223B466F3DFB43E86DA 452440 ----a-w- C:\Windows\System32\d3dx10_40.dll
2014-08-06 23:14:56 8BA296419AF3417D1E9806B83166E472 235856 ----a-w- C:\Windows\System32\xactengine3_3.dll
2014-08-06 23:14:56 686F8D1B4926D48227A06ACD4D41CD1E 235352 ----a-w- C:\Windows\System32\xactengine3_4.dll
2014-08-06 23:14:56 50F4A0D5E6A0BAFEFA78F353533B8E06 509448 ----a-w- C:\Windows\System32\XAudio2_2.dll
2014-08-06 23:14:56 47ED15DC87AE334C13C4DACD1BE2CCED 514384 ----a-w- C:\Windows\System32\XAudio2_3.dll
2014-08-06 23:14:56 350FEFE18B86BD4D9AB2A96D00215A49 23376 ----a-w- C:\Windows\System32\X3DAudio1_5.dll
2014-08-06 23:14:56 3384134EEB8F223178C2EB8323003EC0 2036576 ----a-w- C:\Windows\System32\D3DCompiler_40.dll
2014-08-06 23:14:56 295E47A75F278580F9441041EAAEA3D2 70992 ----a-w- C:\Windows\System32\XAPOFX1_2.dll
2014-08-06 23:14:55 F3C6BE26949CAADB11DBF0086082FAC9 238088 ----a-w- C:\Windows\System32\xactengine3_2.dll
2014-08-06 23:14:55 E6C2F1D8B667DDC04CB55B9F0159EF97 467984 ----a-w- C:\Windows\System32\d3dx10_39.dll
2014-08-06 23:14:55 E34FF0115B1EE3B4E03D22AE9840EE03 507400 ----a-w- C:\Windows\System32\XAudio2_1.dll
2014-08-06 23:14:55 DD165760F1B95200A3DA2D9DFDB84234 65032 ----a-w- C:\Windows\System32\XAPOFX1_0.dll
2014-08-06 23:14:55 C4F1972497FE2CEB7D900938C97FCF91 1493528 ----a-w- C:\Windows\System32\D3DCompiler_39.dll
2014-08-06 23:14:55 8CB3DEFB8887C4F0846DB1FC1304D6D2 3851784 ----a-w- C:\Windows\System32\D3DX9_39.dll
2014-08-06 23:14:55 2E0E25252E1D41752876E9FE12ADE175 238088 ----a-w- C:\Windows\System32\xactengine3_1.dll
2014-08-06 23:14:54 EA752DBCE35045D3C830DC16578CC8AB 1420824 ----a-w- C:\Windows\System32\D3DCompiler_37.dll
2014-08-06 23:14:54 E3832514BD21236067B7227F6165EF95 25608 ----a-w- C:\Windows\System32\X3DAudio1_4.dll
2014-08-06 23:14:54 C593FD0A96EE4B6390B653C4C641313F 25608 ----a-w- C:\Windows\System32\X3DAudio1_3.dll
2014-08-06 23:14:54 A2650B27472C21CDD817EEEDE65648E1 467984 ----a-w- C:\Windows\System32\d3dx10_38.dll
2014-08-06 23:14:54 8F3EB548AC4ED90252394F60C77E3196 3850760 ----a-w- C:\Windows\System32\D3DX9_38.dll
2014-08-06 23:14:54 8A83673F0AB001870583FDE2B004FA59 238088 ----a-w- C:\Windows\System32\xactengine3_0.dll
2014-08-06 23:14:54 4A43E9A2B17E4CAFA9CB5FEC0B5B686B 462864 ----a-w- C:\Windows\System32\d3dx10_37.dll
2014-08-06 23:14:54 418CDC57E55EE79C3F86C13A19B3D5E3 479752 ----a-w- C:\Windows\System32\XAudio2_0.dll
2014-08-06 23:14:54 103CBFC5591008AD33046E20E8E1EEBE 1491992 ----a-w- C:\Windows\System32\D3DCompiler_38.dll
2014-08-06 23:14:53 FB4299688A0D3A37687C015AC2B9922D 1374232 ----a-w- C:\Windows\System32\D3DCompiler_36.dll
2014-08-06 23:14:53 F3764552E45880DC49B82F38699AA87C 444776 ----a-w- C:\Windows\System32\d3dx10_35.dll
2014-08-06 23:14:53 D9158E78A368B08D9133043EB3058C12 444776 ----a-w- C:\Windows\System32\d3dx10_36.dll
2014-08-06 23:14:53 AC3C517FB0FBBE45FE44007BCD3625A7 3786760 ----a-w- C:\Windows\System32\D3DX9_37.dll
2014-08-06 23:14:53 73E055AF78A64F9B2779D44407CA2AB6 267272 ----a-w- C:\Windows\System32\xactengine2_10.dll
2014-08-06 23:14:53 46EE68F04A75A1CCF40235EA6F1CBA05 267112 ----a-w- C:\Windows\System32\xactengine2_9.dll
2014-08-06 23:14:53 44BFEC5C9C82A2EE9871D88FD3B9A0E2 3734536 ----a-w- C:\Windows\System32\d3dx9_36.dll
2014-08-06 23:14:52 F6A9FC2AD2F9111372B5AB3BBA3707EC 17928 ----a-w- C:\Windows\System32\X3DAudio1_2.dll
2014-08-06 23:14:52 7FEBB8CE2233CBAE738B16D42ED29674 261480 ----a-w- C:\Windows\System32\xactengine2_7.dll
2014-08-06 23:14:52 77F595DEE5FFACEA72B135B1FCE1312E 81768 ----a-w- C:\Windows\System32\xinput1_3.dll
2014-08-06 23:14:52 75F206C195BBACA6EF28565B1C0CD75C 1124720 ----a-w- C:\Windows\System32\D3DCompiler_34.dll
2014-08-06 23:14:52 5B441670A4F5F8BCCE76741902B8AF56 1358192 ----a-w- C:\Windows\System32\D3DCompiler_35.dll
2014-08-06 23:14:52 5AA9987F2E62B56D7661B6901901F927 443752 ----a-w- C:\Windows\System32\d3dx10_34.dll
2014-08-06 23:14:52 499210C45AFEAADEE8CF4DCF7D5E570B 266088 ----a-w- C:\Windows\System32\xactengine2_8.dll
2014-08-06 23:14:52 3EF18B78D17C962F2B71AC1CB7757684 3727720 ----a-w- C:\Windows\System32\d3dx9_35.dll
2014-08-06 23:14:52 1CA939918ED1B930059B3A882DE6F648 3497832 ----a-w- C:\Windows\System32\d3dx9_34.dll
2014-08-06 23:14:51 FAE7E1D578C42A7C3D9D61A99D178BD5 1123696 ----a-w- C:\Windows\System32\D3DCompiler_33.dll
2014-08-06 23:14:51 CDB1CD22BAFF21F48606B3C1A18B000B 3495784 ----a-w- C:\Windows\System32\d3dx9_33.dll
2014-08-06 23:14:51 86C93789E9006F1AC47ED9DD47D4C8A1 251672 ----a-w- C:\Windows\System32\xactengine2_5.dll
2014-08-06 23:14:51 6F34F7405807DCBF0B9BF6811C94C6D9 440080 ----a-w- C:\Windows\System32\d3dx10.dll
2014-08-06 23:14:51 39000E033D39D19CCCE21AEAFCCE2476 255848 ----a-w- C:\Windows\System32\xactengine2_6.dll
2014-08-06 23:14:51 37A8171ACCF46A9C196054066C28827F 443752 ----a-w- C:\Windows\System32\d3dx10_33.dll
2014-08-06 23:14:50 F1726346E583442541FE73429F8E9C10 62672 ----a-w- C:\Windows\System32\xinput1_1.dll
2014-08-06 23:14:50 797E24743937D67D69F28F2CF5052EE8 2414360 ----a-w- C:\Windows\System32\d3dx9_31.dll
2014-08-06 23:14:50 69D841744B2BAE38FBB2D40A230A549C 236824 ----a-w- C:\Windows\System32\xactengine2_3.dll
2014-08-06 23:14:50 6550E1A0A7BE611592C31222FCB981FB 237848 ----a-w- C:\Windows\System32\xactengine2_4.dll
2014-08-06 23:14:50 5C4D3843B491C047B7A619901FBD2EC1 230168 ----a-w- C:\Windows\System32\xactengine2_2.dll
2014-08-06 23:14:50 33B62BE226934E1B01F5043870C70427 62744 ----a-w- C:\Windows\System32\xinput1_2.dll
2014-08-06 23:14:50 26AF232140C88B42D92A88F2198EDF6A 3426072 ----a-w- C:\Windows\System32\d3dx9_32.dll
2014-08-06 23:14:50 121B131EAA369D8F58DACC5C39A77D80 15128 ----a-w- C:\Windows\System32\x3daudio1_1.dll
2014-08-06 23:14:49 E415862612E65F10D7D888443ECD7594 2388176 ----a-w- C:\Windows\System32\d3dx9_30.dll
2014-08-06 23:14:49 BE19B603DFBAA829EE5B7749B3BA97DB 2323664 ----a-w- C:\Windows\System32\d3dx9_28.dll
2014-08-06 23:14:49 99F4FC172A5ACE36CF00AA7038D23F2C 2332368 ----a-w- C:\Windows\System32\d3dx9_29.dll
2014-08-06 23:14:49 852EDC778A7A50077694F84D8E601234 2319568 ----a-w- C:\Windows\System32\d3dx9_27.dll
2014-08-06 23:14:49 7C9952111F4C743B9F0D8B68B6ED93C9 229584 ----a-w- C:\Windows\System32\xactengine2_1.dll
2014-08-06 23:14:49 4E961525CC7FF0E5D7DA19E170B7C14C 14032 ----a-w- C:\Windows\System32\x3daudio1_0.dll
2014-08-06 23:14:49 2112FE0C46662D429347A7D7B49E3ECE 230096 ----a-w- C:\Windows\System32\xactengine2_0.dll
2014-08-06 23:14:48 BC831661963763AC4D504C5CABB1FDD9 2222800 ----a-w- C:\Windows\System32\d3dx9_24.dll
2014-08-06 23:14:48 5B48FE9D6686F0D54B26A005ACE24D1D 2337488 ----a-w- C:\Windows\System32\d3dx9_25.dll
2014-08-06 23:14:48 523AB607EEF81CC4D909E7FEBD8A788E 2297552 ----a-w- C:\Windows\System32\d3dx9_26.dll
2014-08-06 22:51:15 943A7D0D29C7DB935FED4B265702AE41 104 ----a-w- C:\Windows\System32\SBRC.dat
2014-08-06 20:37:00 23D4907D662E248E09872E5A32E71570 232448 ----a-w- C:\Windows\System32\mp3fhg.acm
2014-08-06 20:36:59 C26B7B8CA40C627B9DE399F9F8FACC69 650752 ----a-w- C:\Windows\System32\xvidcore.dll
2014-08-06 20:36:59 56552C7C36B6237704CE3BA9DF49FECF 243200 ----a-w- C:\Windows\System32\xvidvfw.dll
2014-08-06 20:36:59 1AD3D52C38B68D658D5B808A00CDB880 175616 ----a-w- C:\Windows\System32\unrar.dll
2014-08-06 20:36:59 006C6378513685ACDFFA84A5ECB86F76 151552 ----a-w- C:\Windows\System32\ac3acm.acm
2014-08-06 20:36:56 34FF78B64E8DD8386F35F6F2A830DED3 79360 ----a-w- C:\Windows\System32\ff_vfw.dll
2014-08-06 19:04:39 D815DD4262E4FCC211091F7BA7A01155 231584 ------w- C:\Windows\System32\MpSigStub.exe
2014-08-06 18:43:14 8DADDFA811515B5F95969C38E49A5733 94720 ----a-w- C:\Windows\System32\SLCHook.dll
====== C:\Windows\system32\drivers =====
2014-08-08 18:05:44 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-08-06 23:07:16 00C161B3D20AE0F9C7C3C0EB53AB7155 243128 ----a-w- C:\Windows\System32\drivers\dtsoftbus01.sys
2014-08-06 19:32:18 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\System32\drivers\Msft_User_LocationProvider_01_11_00.Wdf
====== C:\Windows\Tasks ======
2014-08-07 15:38:48 C45C50A371FA2C32F7F5165C16122218 4996 ----a-w- C:\Windows\system32\Tasks\Microsoft Office 15 Sync Maintenance for FÁBIO-Cristov Fábio
2014-08-06 19:16:06 60702E2120AABCC9F5D0744193D04DB7 4042 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2014-08-06 19:16:06 0C5674717779C85829904876AC57323D 1070 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-06 19:16:05 96081889665C6CCB152BC45A77F93B08 1066 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-06 19:16:05 381AA721312A0379731012B6318B6B4D 3806 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
====== C:\Windows\Temp ======
======= C:\Program Files =====
2014-08-07 21:22:00 -------- d-----w- C:\Program Files\Common Files\PX Storage Engine
2014-08-07 20:42:40 -------- d-----w- C:\Program Files\WinRAR
2014-08-07 01:45:41 -------- d-----w- C:\Program Files\Common Files\Adobe
2014-08-07 01:45:41 -------- d-----w- C:\Program Files\Adobe
2014-08-06 23:23:30 -------- d-----w- C:\Program Files\Reference Assemblies
2014-08-06 23:23:30 -------- d-----w- C:\Program Files\MSBuild
2014-08-06 23:12:08 -------- d-----w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst
2014-08-06 23:07:09 -------- d-----w- C:\Program Files\DAEMON Tools Lite
2014-08-06 21:18:15 -------- d-----w- C:\Program Files\Webteh
2014-08-06 20:36:48 -------- d-----w- C:\Program Files\K-Lite Codec Pack
2014-08-06 19:14:19 -------- d-----w- C:\Program Files\Mozilla Maintenance Service
2014-08-06 18:52:53 -------- d-----w- C:\Program Files\Common Files\DESIGNER
2014-08-06 18:51:51 -------- d-----w- C:\Program Files\Microsoft SQL Server
2014-08-06 18:49:51 -------- d-----w- C:\Program Files\Microsoft Analysis Services
2014-08-06 18:49:37 -------- d-----w- C:\Program Files\Microsoft Office
======= C: =====
====== C:\Users\Cristov\AppData\Roaming ======
2014-08-08 19:10:27 -------- d-----w- C:\Users\Cristov\AppData\Roaming\Injustice
2014-08-07 21:21:54 -------- d-----w- C:\Users\Cristov\AppData\Roaming\Winamp
2014-08-07 20:43:28 -------- d-----w- C:\Users\Cristov\AppData\Roaming\WinRAR
2014-08-07 20:43:05 -------- d-----w- C:\Users\Cristov\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-07 19:04:59 -------- d-----w- C:\Users\Cristov\AppData\Roaming\uTorrent
2014-08-07 01:46:29 -------- d-----w- C:\Users\Cristov\AppData\Locallow\Adobe
2014-08-07 01:46:29 -------- d-----w- C:\Users\Cristov\AppData\Local\Adobe
2014-08-06 23:07:12 -------- d-----w- C:\Users\Cristov\AppData\Roaming\DAEMON Tools Lite
2014-08-06 21:18:16 -------- d-----w- C:\Users\Cristov\AppData\Roaming\BSplayer Pro
2014-08-06 21:18:16 -------- d-----w- C:\Users\Cristov\AppData\Roaming\BSplayer
2014-08-06 20:37:51 -------- d-----w- C:\Users\Cristov\AppData\Roaming\Media Player Classic
2014-08-06 19:32:21 -------- d-s---w- C:\Windows\serviceprofiles\Localservice\AppData\Locallow\Microsoft
2014-08-06 19:14:25 -------- d-----w- C:\Users\Cristov\AppData\Roaming\Mozilla
2014-08-06 19:14:25 -------- d-----w- C:\Users\Cristov\AppData\Local\Mozilla
2014-08-06 19:13:24 -------- d-----w- C:\Users\Cristov\AppData\Local\Programs
2014-08-06 18:53:37 -------- d-----w- C:\Users\Cristov\AppData\Local\Diagnostics
2014-08-06 18:49:41 -------- d-----w- C:\Users\Cristov\AppData\Local\Microsoft Help
====== C:\Users\Cristov ======
2014-08-07 20:43:05 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-07 01:45:30 -------- d-----w- C:\Users\TODOSO~1\Adobe
2014-08-07 01:45:30 -------- d-----w- C:\ProgramData\Adobe
2014-08-06 23:17:28 -------- d-----w- C:\Users\TODOSO~1\Steam
2014-08-06 23:17:28 -------- d-----w- C:\ProgramData\Steam
2014-08-06 23:07:25 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-08-06 23:04:25 -------- d-----w- C:\Users\TODOSO~1\DAEMON Tools Lite
2014-08-06 23:04:25 -------- d-----w- C:\ProgramData\DAEMON Tools Lite
2014-08-06 21:19:52 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2014-08-06 19:38:19 -------- d--h--r- C:\Users\Public\AccountPictures
2014-08-06 19:17:25 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-06 19:14:19 -------- d-----w- C:\Users\TODOSO~1\Mozilla
2014-08-06 19:14:19 -------- d-----w- C:\ProgramData\Mozilla
2014-08-06 18:53:42 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-08-06 18:49:35 -------- d-----w- C:\Users\TODOSO~1\Microsoft Help
2014-08-06 18:49:35 -------- d-----w- C:\ProgramData\Microsoft Help

====== C: exe-files ==
2014-08-07 21:22:00 D2728A10CCD2A675638B016D47B1C254 72176 ------w- C:\Program Files\Common Files\PX Storage Engine\pxhpinst.exe
2014-08-07 21:22:00 94F95BE2A44C8291132D314582F141F8 126448 ------w- C:\Program Files\Common Files\PX Storage Engine\pxinsi64.exe
2014-08-07 21:22:00 6D3630B7F27B3643FDE05D1088F84F2F 68592 ------w- C:\Program Files\Common Files\PX Storage Engine\pxinsa64.exe
2014-08-07 21:22:00 50A76D2D5E4BE94556326C4BF748C758 123888 ------w- C:\Program Files\Common Files\PX Storage Engine\pxcpyi64.exe
2014-08-07 21:22:00 08D51E037F487F9CA9FD0B0388F4C15A 68080 ------w- C:\Program Files\Common Files\PX Storage Engine\pxcpya64.exe
2014-08-07 21:18:25 13B0085A03720E67FB8C73DB3F14609E 421056 ----atw- C:\Users\Cristov\AppData\Local\Temp\n2234\s2234.exe
2014-08-07 20:42:40 A242E31320CD675A286AD9FE8DAA4C1A 151640 ----a-w- C:\Program Files\WinRAR\Uninstall.exe
2014-08-07 20:42:40 95AD512002C21A179D8A6CC9517008A7 496728 ----a-w- C:\Program Files\WinRAR\Rar.exe
2014-08-07 20:42:40 87A3A13BAC15C09B20D7575313525698 309848 ----a-w- C:\Program Files\WinRAR\UnRAR.exe
2014-08-07 20:42:40 3506B4EA6F3FC1EB4060D354D3ECBB7E 1388120 ----a-w- C:\Program Files\WinRAR\WinRAR.exe
2014-08-07 20:42:40 34DFDAA5E5C92A3E1432DAD5D527D34B 61528 ----a-w- C:\Program Files\WinRAR\Ace32Loader.exe
2014-08-07 19:05:46 3433CF435F84B24965A8202118F41A7A 1322832 ----a-w- C:\Users\Cristov\AppData\Roaming\uTorrent\updates\3.4.2_32126.exe
2014-08-07 19:05:39 405AE4A12A82D3D2E26471CCABA862C4 1272912 ----a-w- C:\Users\Cristov\AppData\Roaming\uTorrent\updates\3.4.2_31515.exe
2014-08-07 19:05:35 3433CF435F84B24965A8202118F41A7A 1322832 ----a-w- C:\Users\Cristov\AppData\Roaming\uTorrent\uTorrent.exe
2014-08-07 00:12:53 E238ABE91FA69C723BD97C563028C407 135680 ----a-w- C:\Windows\Temp\E9C08849-9685-4716-B9AD-F5960EF2BE88\DismHost.exe
2014-08-06 23:21:48 02A005313FAD7127FB99E034573AF528 35400 ----a-w- C:\Windows\System32\TsWpfWrp.exe
2014-08-06 23:18:39 E7A037A2D1E17902CFC48B23530E25CE 879544 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\x360ce.exe
2014-08-06 23:14:27 1801436936E64598BAB5B87B37DC7F87 8990552 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\_CommonRedist\vcredist\2010\vcredist_x86.exe
2014-08-06 23:14:26 C9D9EEBCCEF20D637F193490CEC05E79 10274136 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\_CommonRedist\vcredist\2010\vcredist_x64.exe
2014-08-06 23:14:24 251743DFD3FDA414570524BAC9E55381 50449456 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\_CommonRedist\DotNet\4.0\dotNetFx40_Full_x86_x64.exe
2014-08-06 23:14:22 BF3F290275C21BDD3951955C9C3CF32C 517976 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\_CommonRedist\DirectX\Jun2010\DXSETUP.exe
2014-08-06 23:12:09 E017E40C7008019B9CFE77B91531AF8C 16384 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_option2.exe
2014-08-06 23:12:09 CDF280C890DD573206F704291505E502 261632 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_launcher.exe
2014-08-06 23:12:09 C29F33362A7749F6529AF7CAB69F108C 5823488 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB_option1.exe
2014-08-06 23:12:09 B6CE9F2B2045B8BCB10C34D54133D164 10822144 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\NS3FB.exe
2014-08-06 23:12:08 4ADD1665F3E11886AEFF0DE2730BF85A 837793 ----a-w- C:\Program Files\NARUTO SHIPPUDEN Ultimate Ninja STORM 3 Full Burst\unins000.exe
2014-08-06 23:08:17 EA627D2C7135E7C9F83E7CA2A1C91D86 793472 ----a-w- C:\Users\Cristov\AppData\Local\Temp\smt_istartsurf.exe
2014-08-06 23:08:15 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Cristov\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OH7Y0REN\smt_istartsurf[1].exe
2014-08-06 23:08:14 5A6B6C1D0D449971EC431650679D0511 41258096 ----a-w- C:\Users\Cristov\AppData\Local\Temp\Spark_Setup_all.exe
2014-08-06 23:07:33 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Cristov\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QGCCDU4T\Spark_Setup_all[1].exe
2014-08-06 23:04:32 9E3A5D707715AF1A8D9FC9FF97914CC3 207448 ----a-w- C:\Users\Cristov\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OH7Y0REN\setup[1].exe
2014-08-06 21:19:51 CC127EE542BC41BFD7EB3CF6F6DBAA3B 697690 ----a-w- C:\Users\Cristov\AppData\Roaming\BSplayer\AC3 Filter\unins000.exe
2014-08-06 21:19:51 A6C9085DB29CEB92FA32D9EFBAB0471D 90112 ----a-w- C:\Users\Cristov\AppData\Roaming\BSplayer\AC3 Filter\spdif_test.exe
2014-08-06 21:19:51 8367988DC0585700CFA758F18A2EF1AC 87552 ----a-w- C:\Users\Cristov\AppData\Roaming\BSplayer\AC3 Filter\ac3config.exe
2014-08-06 21:19:36 AF4223C2577E752413784ECE83765354 137728 ----a-w- C:\Users\Cristov\AppData\Roaming\BSplayer\Haali media splitter\mkv2vfr.exe
2014-08-06 21:19:36 5DE59A417828FA4648D49EA0DAD6E5BE 358400 ----a-w- C:\Users\Cristov\AppData\Roaming\BSplayer\Haali media splitter\gdsmux.exe
2014-08-06 21:19:36 3C4D75D33CD2B3D53D0445C3594F881A 42305 ----a-w- C:\Users\Cristov\AppData\Roaming\BSplayer\Haali media splitter\uninstall.exe
2014-08-06 21:19:36 30AA0674FB6DA80F9480E11513D9661C 113152 ----a-w- C:\Users\Cristov\AppData\Roaming\BSplayer\Haali media splitter\dsmux.exe
2014-08-06 21:19:22 CF3CF034CFABA8AC68B6B502A1044F59 1175371 ----a-w- C:\Users\Cristov\AppData\Roaming\BSplayer\FFDShow\unins000.exe
2014-08-06 21:18:36 AD3E4C73036C88B1CAE40E8841FC1DE3 76824 ----a-w- C:\Users\Cristov\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OH7Y0REN\statisticsstub[1].exe
2014-08-06 21:18:24 8F8596B66E571DED1CCCF711FD12460A 3382392 ----a-w- C:\Users\Cristov\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S93Y2ZI1\BS_Player_ControlBar_B[1].exe
2014-08-06 21:18:16 949BE125D92DD33F92ED24F4804A1966 73627 ----a-w- C:\Program Files\Webteh\BSPlayer\uninstall.EXE
2014-08-06 21:18:14 22509B5B3F8757A46BBDDFEF11B88E3A 2935968 ----a-w- C:\Users\Cristov\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OH7Y0REN\bs_player_controlbar_b[1].exe
2014-08-06 21:18:07 4AE5F34AB33261FEB8B94F5FFC8E8F19 73543 ----a-w- C:\Users\Cristov\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XV3I6N8G\checktbexist[1].exe
2014-08-06 20:37:01 F9A18521FD919E36253D23A16382339C 1175552 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\graphstudio.exe
2014-08-06 20:37:01 A4A9BA758BD8D3F71BF195F15BFEE8DB 384512 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\dsconfig.exe
2014-08-06 20:37:01 567BEFCC4CAF8EE4C1F68DED96562727 301056 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\SetACL_x86.exe
2014-08-06 20:37:00 AFD4F735108A24D5112AC1FD661BEC8B 22528 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\VobSubStrip.exe
2014-08-06 20:37:00 AD937F57725167E2D5D7BE534FEED706 1048576 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\mediainfo.exe
2014-08-06 20:37:00 487AF46145B81C5BC54873E764F93636 13824 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\StatsReader.exe
2014-08-06 20:36:58 A26DA0EA771D3C7DC5B17EAFBD43BCA9 358400 ----a-w- C:\Program Files\K-Lite Codec Pack\Filters\Haali\gdsmux.exe
2014-08-06 20:36:51 59D4F6C7DEEB1872F37E0F5FC44069AA 6483456 ----a-w- C:\Program Files\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe
2014-08-06 20:36:49 E28D6D26280628781CE5D27E0FFA6770 1313147 ----a-w- C:\Program Files\K-Lite Codec Pack\unins000.exe
2014-08-06 20:36:49 B277E6AC242FCBC37F4D03E1528949C1 1154048 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\Win7DSFilterTweaker.exe
2014-08-06 20:36:49 B277E6AC242FCBC37F4D03E1528949C1 1154048 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe
2014-08-06 19:17:04 5CA3B9DB1F03E19C4EAD46A7322D1D3F 39749712 ----a-w- C:\Program Files\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\36.0.1985.125\36.0.1985.125_chrome_installer.exe
2014-08-06 19:16:04 F463D287E009E3ED78698B441C5DBAC3 895120 ----a-w- C:\Program Files\Google\Update\1.3.24.15\GoogleUpdateSetup.exe
2014-08-06 19:16:04 AC6998D92A311E7CF0B4DAEC3566F444 51080 ----atw- C:\Program Files\Google\Update\1.3.24.15\GoogleUpdateBroker.exe
2014-08-06 19:16:04 956672375AF066D958E4D07F5ABAFC1A 51080 ----atw- C:\Program Files\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe
2014-08-06 19:16:04 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files\Google\Update\GoogleUpdate.exe
2014-08-06 19:16:03 AA0E4F73727BFC8BA404884B1C1DB719 285064 ----atw- C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
2014-08-06 19:16:03 80E350E0AA963B2125896B13E60A4D68 114568 ----atw- C:\Program Files\Google\Update\1.3.24.15\GoogleUpdateComRegisterShell64.exe
2014-08-06 19:16:03 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files\Google\Update\1.3.24.15\GoogleUpdate.exe
2014-08-06 19:16:03 397D14958D6C9C2B365469A857B2AC4E 230792 ----atw- C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe
2014-08-06 19:14:19 BC24422CC00B3A862C60F8E71AB24A9F 109886 ----a-w- C:\Program Files\Mozilla Maintenance Service\Uninstall.exe
2014-08-06 19:14:19 4E9D8041D352A33332FD6F59A3A78B03 119408 ----a-w- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
2014-08-06 19:04:39 D815DD4262E4FCC211091F7BA7A01155 231584 ------w- C:\Windows\System32\MpSigStub.exe
2014-08-06 15:48:25 42EC539D183CB43BCFF89E72585902D5 384485 ----a-w- C:\Users\Cristov\AppData\Local\Temp\Quarantine.exe
=== C: other files ==
2014-08-06 23:07:16 00C161B3D20AE0F9C7C3C0EB53AB7155 243128 ----a-w- C:\Windows\System32\DriverStore\FileRepository\dtsoftbus01.inf_x86_63a6513bfa2da825\dtsoftbus01.sys
2014-08-06 23:07:16 00C161B3D20AE0F9C7C3C0EB53AB7155 243128 ----a-w- C:\Windows\System32\Drivers\dtsoftbus01.sys
2014-08-06 23:07:16 00C161B3D20AE0F9C7C3C0EB53AB7155 243128 ----a-w- C:\Program Files\DAEMON Tools Lite\dtsoftbus01.sys
2014-08-06 20:37:00 A147DA4D88A5B0AA9D5F145FF0422AB0 13922 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\Xvid_Quant_Matrices.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-3390938085-2193806628-1252904681-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun"

==== Task Scheduler Jobs ======================

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files\Google\Update\GoogleUpdate.exe [06/08/2014 16:16]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files\Google\Update\GoogleUpdate.exe [06/08/2014 16:16]

==== Other Scheduled Tasks ======================

"C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe]
"C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe]

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Cristov\AppData\Roaming\Mozilla\Firefox\Profiles\mahhkrak.default
FB5621842FDABF9F8359775573498FBC - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update
14365399E83D7BC15760E8676E890C87 - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
14365399E83D7BC15760E8676E890C87 - C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat


==== Chrome Look ======================

Google Docs - Cristov\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Cristov\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Cristov\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Last updated at time on date - Cristov\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb
Google Search - Cristov\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Wallet - Cristov\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Cristov\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chromium Startpages ======================

C:\Users\Cristov\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.google.com",
"startup_urls": [ "http://www.google.com" ],


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0191A6B0-1154-4C22-9182-23A95BBE92D9} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&form=IE8SRC&src=IE-SearchBox"

==== Empty IE Cache ======================

C:\Users\Cristov\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Cristov\AppData\Local\Mozilla\Firefox\Profiles\mahhkrak.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Cristov\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=97 folders=7 9454842 bytes)

==== Empty Temp Folders ======================

C:\Users\Cristov\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Cristov\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 08/08/2014 at 16:55:12,46 ======================

Desative temporariamente seu antivírus para evitar conflitos.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Olá Max,

Formatei o PC ontem, liguei só com um HD formatado, nem oficce coloquei, não entrei com minha conta, e só com o IE, mesmo assim o vírus continua. Devo refazer o processo de relatórios começando pelo o primeiro programa?

agradeço a atenção,

Fabio

Se você formatou e o vírus continua agindo, ele não deve estar no PC.

Sua internet é via rádio ou outro tipo?

Se sua internet não for via rádio, resete o roteador e modem, troque o nome da rede, troque as senhas de acesso e atualize o firmware de seu modem e/ou roteador.

Faça também o seguinte:

Vá no menu Iniciar > Painel de Controle > Rede e Internet > Central de Rede e Compartilhamento

*Na coluna da esquerda, clique em Alterar as configurações do adaptador

*Clique com o botão direito do mouse em Conexão de Rede sem fio e selecione Propriedades

*Localize e selecione Protocolo TCP/IP Versão 4 (TCP/IPv4)

*Clique [Propriedades]

*Selecione Usar os seguintes endereços de servidor DNS:

Em Servidor DNS preferencial: coloque 208.67.222.222

Em Servidor DNS alternativo: coloque 208.67.220.220

Clique em OK.

Já se você usa internet via rádio, além de fazer os passos acima, você precisa também entrar em contato com o suporte de seu provedor e pedir que eles façam estes mesmos procedimentos também na central deles.

Depois disto nos diga se resolveu.

Obrigado. Era um vírus na rede mesmo.

agradecido!!!

CASO RESOLVIDO

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.