Ietabpageclass, Istartsurf

Boa tarde!
Entrei no fórum e baixei o adcleaner e depois baixei o JRT.
Consegui remover o istartsuf do google mas não consegui no internet explorer.
Não sei se  ietabpageclass foi removido.
Não sei como desabilitar meu antivírus ( Kaspery )
Seguem abaixo os relatórios:
# AdwCleaner v3.308 - Relatório criado 01/09/2014 às 17:57:21
# Atualizado 20/08/2014 por Xplode
# Sistema Operacional : Windows 7 Professional Service Pack 1 (32 bits)
# Usuário : cliente - CLIENTE-PC
# Executando de : C:\Users\cliente\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NFERASA\AdwCleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

Serviço Deletada : IePluginServices
[#] Serviço Deletada : pricemeterliveUpdate
[#] Serviço Deletada : pricemeterliveUpdatem
[#] Serviço Deletada : qknfd
Serviço Deletada : mtgaotushb32

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\2308189059
Pasta Deletada : C:\ProgramData\baidu
Pasta Deletada : C:\ProgramData\IePluginServices
[!] Pasta Deletada : C:\ProgramData\PriceMeterLiveUpdate
Pasta Deletada : C:\ProgramData\WindowsMangerProtect
Pasta Deletada : C:\Program Files\AllDaySavings
Pasta Deletada : C:\Program Files\globalUpdate
Pasta Deletada : C:\Program Files\predm
[!] Pasta Deletada : C:\Program Files\PriceMeterLiveUpdate
Pasta Deletada : C:\Program Files\SupTab
Pasta Deletada : C:\Program Files\Systweak Support Dock
Pasta Deletada : C:\Program Files\005
Pasta Deletada : C:\Users\cliente\AppData\Local\globalUpdate
Pasta Deletada : C:\Users\cliente\AppData\Local\Mobogenie
Pasta Deletada : C:\Users\cliente\AppData\Local\PriceMeter
Pasta Deletada : C:\Users\cliente\AppData\Local\PriceMeterLiveUpdate
Pasta Deletada : C:\Users\cliente\AppData\Roaming\baidu
Pasta Deletada : C:\Users\cliente\AppData\Roaming\istartsurf
Pasta Deletada : C:\Users\cliente\AppData\Roaming\PriceMeterUpdater
Pasta Deletada : C:\Users\cliente\AppData\Roaming\Systweak
Pasta Deletada : C:\Users\cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter
Pasta Deletada : C:\Users\cliente\Documents\Optimizer Pro
Arquivo Deletada : C:\Windows\system32\roboot.exe
Arquivo Deletada : C:\Users\cliente\daemonprocess.txt
Arquivo Deletada : C:\Users\cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx
Arquivo Deletada : C:\Users\cliente\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Arquivo Deletada : C:\Users\cliente\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Tarefas ] *****

Tarefa Deletedo : LaunchSignup
Tarefa Deletedo : pricemeterdownloader
Tarefa Deletedo : PriceMeterLiveUpdateUpdateTaskMachineCore
Tarefa Deletedo : PriceMeterLiveUpdateUpdateTaskMachineUA
Tarefa Deletedo : PriceMeterUpdater

***** [ Atalhos ] *****

Atalho Desinfectada : C:\Users\cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Atalho Desinfectada : C:\Users\cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Atalho Desinfectada : C:\Users\cliente\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Registro ] *****

Chave Deletedo : HKCU\Software\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Chave Deletedo : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\PriceMeterLiveUpdate.exe
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickCtrl.9
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickProcessLauncherMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickProcessLauncherMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.Update3WebControl.3
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoCreateAsync
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoCreateAsync.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreClass
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreMachineClass
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreMachineClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CredentialDialogMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CredentialDialogMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachineFallback
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.ProcessLauncher
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.ProcessLauncher.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3COMClassService
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3COMClassService.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachineFallback
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachineFallback.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Mobogenie_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\Mobogenie_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Valor Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=3
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=9
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{126C78A0-36E7-4697-A3AB-32706144398B}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{8D73A258-9787-4AE7-9232-41036673FD0E}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{00A154AE-6C33-4F1E-9057-242350540936}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{126C78A0-36E7-4697-A3AB-32706144398B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{30D1E30D-B7F5-4C7A-8EDA-9F02966538A8}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{41C35ADE-DEDA-439F-8140-D53F2C76C963}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{4211E851-747F-4470-923D-6EF683EE79CA}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{45F8961E-1314-421E-9F00-BDDE18CF8EA0}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{4825ACAD-F495-4CDD-9603-9C91BABB2B88}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{5B60D1C0-453A-485D-AE91-61FAC9203719}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{74930D00-2198-46FE-B6BC-FEEC60C666C9}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{89449F37-4AB2-46ED-A566-BB3A7797701B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{8D73A258-9787-4AE7-9232-41036673FD0E}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{9D24562E-40EC-4E46-B57C-700352059B55}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{B1F29F0C-2EC8-487B-97C2-8B8FEA6CEF14}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{C0756D99-64A1-4332-B783-A5A1B571D431}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{CF0A778A-DDA0-4492-9804-EF38C9A9F1A5}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{D1C6444C-CC06-4060-A486-736DEAFD9C16}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{D8746A3A-A372-4C8B-96E5-B58F6474EB19}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{F509ADC2-B40E-470F-A7B7-45191486B5CB}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89449F37-4AB2-46ED-A566-BB3A7797701B}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F509ADC2-B40E-470F-A7B7-45191486B5CB}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{30D1E30D-B7F5-4C7A-8EDA-9F02966538A8}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{89449F37-4AB2-46ED-A566-BB3A7797701B}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F509ADC2-B40E-470F-A7B7-45191486B5CB}
Dados Restaurada : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Chave Deletedo : HKCU\Software\GlobalUpdate
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\Optimizer Pro
Chave Deletedo : HKCU\Software\PriceMeter
Chave Deletedo : HKCU\Software\PriceMeterLiveUpdate
Chave Deletedo : HKCU\Software\PriceMeterUpdater
Chave Deletedo : HKCU\Software\SupHpUISoft
Chave Deletedo : HKCU\Software\systweak
Chave Deletedo : HKCU\Software\TutoTag
Chave Deletedo : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKCU\Software\AppDataLow\Software\Crossrider
Chave Deletedo : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Chave Deletedo : HKLM\SOFTWARE\AllDaySavings
Chave Deletedo : HKLM\SOFTWARE\DealPlyLive
Chave Deletedo : HKLM\SOFTWARE\FreeSoftToday
Chave Deletedo : HKLM\SOFTWARE\GlobalUpdate
Chave Deletedo : HKLM\SOFTWARE\istartsurfSoftware
Chave Deletedo : HKLM\SOFTWARE\PriceMeterLiveUpdate
Chave Deletedo : HKLM\SOFTWARE\SupDp
Chave Deletedo : HKLM\SOFTWARE\SupTab
Chave Deletedo : HKLM\SOFTWARE\supWindowsMangerProtect
Chave Deletedo : HKLM\SOFTWARE\supWPM
Chave Deletedo : HKLM\SOFTWARE\systweak
Chave Deletedo : HKLM\SOFTWARE\Tutorials
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Price Metar
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceMeterUpdater
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PriceMeterLiveUpdate.exe

***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.17239

Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v38.0.2125.24

[ Arquivo : C:\Users\cliente\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deletedo [Search Provider] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

*************************

AdwCleaner[R0].txt - [14020 octets] - [01/09/2014 17:55:14]
AdwCleaner[S0].txt - [12977 octets] - [01/09/2014 17:57:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13038 octets] ##########

Boa Tarde! Lenise

|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by techsupportall.com )
|- Salve-a no desktop!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Execute o arquivo Adware-Removal-Tool-v3.5.exe <<

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Dê início a verificação,clicando em Scan.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Ao concluir seu prescan,clique OK.

|- Ps: Cada guia irá mostrar o que será removido!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Clique "Next" >> Aguarde!

< Computador >> Windows (C:) >> Program Files >> Adware-Removal-Tool >> Reports >> Repair_Logs_2014_09_dia_h_min_seg.txt <<

|- Poste o relatório!

Abs!

Boa noite!
Segue relatorio.
Istartsurf não removido do internet explorer.
Obrigada.
Adware Removal Tool v3.9
Time: 2014_09_08_21_00_45
OS: Windows 7 - 64 Bit
Account Name: Lenise
U0L0S0

\\\\\\\\\\\\\\\\\\\\\\\ Repair Logs \\\\\\\\\\\\\\\\\\\\\\


-- No objects found

\\ Finished

Boa Noite! Lenise

|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >  < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] > ( ... de Nicolas Coolman )
|- Ou [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] << Link!
|- Salve-o no disco local! ( C ou D )
|- Desabilite seu antivírus e execute "ZHPDiag2.exe",para instalar a ferramenta.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Execute o ícone do pergaminho. ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Clique "COMPLETA" e aguarde a conclusão!
|- Clique OK e,ao concluir,poste o relatório! ( ZHPDiag.txt )
|- Ps: Como o log será extenso,envie-o à [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].

|- Ou acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

|- Maiores informações: < |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| >

A+

Boa noite!
O relatório foi enviado a pjjoint.malekal.
Desde ja agradeço.
Lenise

Lenise escreveu:Boa noite!
O relatório foi enviado a pjjoint.malekal.
Desde ja agradeço.
Lenise

Boa Noite! Lenise

|- Se foi enviado,então lhe foi disponibilizada um link para download do relatório.
|- Lembre-se que vc fez Upload do relatório,a pjjoint.malekal e o link para download,terás que colar em sua resposta.
|- Ps: Porque vc não anexa o relatório?

A+

Relatorio ZHPDiag:

Obrigada.
Lenise

Boa Noite! Lenise

< [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

|- Ainda não consegui acesso pelo link que disponibilizou!
|- Tente por myfile.tk.

----
----

> Mas...vc colocou um link na tag spoiler,onde deveria ter colado o relatório e não um link vazio.
> A tag spoiler foi criada para abrigar grandes relatórios e manter sua integridade.
> Mas...o Editor pode limitar seu tamanho!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Eis aqui,para lhe auxiliar,a screenshot apontando para o link que contém o relatório.

< [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

> Eis o link ao relatório,que exemplifiquei!

A+

Bom dia!

Segue link com o arquivo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Obrigada.

Lenise

Bom Dia! Lenise

> Execute este script na ferramenta ZHPFix.
> Selecione e copie estas informações que estão em vermelho,para o Bloco de Notas.
> Com o Bloco de Notas aberto,faça: ctrl+a >> ctrl+c ( Selecionar e Copiar )
> À seguir,minimize o Bloco de Notas.

Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyCLSID
EmptyTemp
EmptyFlash
ShortcutFix
ProxyFix
Ifeofix
G2 - GCE: Preference [User Data\Default] [blmchfpimpbbdmgpcieclabeafkljbhm] Groovorio New Tab v.0.3.3, (Désactivé)
G2 - GCE: Preference [User Data\Default] [gpiifgmgnfdiblgpaepbmfdkcheicgof] New Tab Assistant v.1.1 (Désactivé)
G2 - GCE: Preference [User Data\Default] [pelmeidfhdlhlbjimpabfcbnnojbboma] Quick start v.4.5.8, (Désactivé)
G2 - EXT: C:\Users\Lenise\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpiifgmgnfdiblgpaepbmfdkcheicgof [New Tab Assistant]
G2 - EXT: C:\Users\Lenise\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [Quick start]
M2 - MFEP: RegExtension {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} . (...) -- C:\Program Files (x86)\PriceGong\2.5.4\FF (.not file.)
[MD5.D5C247CB9CE88C4A3F857CA98B08843F] [WIS][25/06/2014] (.RrFilter - RrFilter.) -- C:\Windows\Installer\1a89eb.msi   [1355776]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O2 - BHO: (no name) [64Bits] - {31ad400d-1b06-4e33-a59a-90c2c140cba0} Chave orfã
O3 - Toolbar: Messenger Plus! Community Smartbar - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O4 - GS\Program [Maria Julia]: Google.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O4 - GS\QuickLaunch [Lenise]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O4 - GS\TaskBar [Lenise]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O4 - GS\Program [Lenise]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O4 - GS\SystemTools [Lenise]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files\Internet Explorer\iexplore.exe [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O20 - AppInit_DLLs: . (...) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (.not file.)
O42 - Logiciel: RrFilter - (.RrFilter.) [HKLM][64Bits] -- {813BA625-B0FA-48D8-9B75-59759C88C219}
O61 - LFC: 03/09/2014 - 21:29:43 ---A- . (...) -- C:\Users\Lenise\AppData\Roaming\unins000.exe   [815314]
[HKCU\Software\5e2dcd1bc3feb41]
[HKCU\Software\AppDataLow\Software\Rr Savings]
[HKCU\Software\AppDataLow\Software\rrsavings]
[HKCU\Software\Blabbers       ]
[HKCU\Software\BlabbersToolbar]
[HKCU\Software\SoftwareUpdater]
[HKCU\Software\SupHpUISoft]
[HKCU\Software\TutoTag]
[HKCU\Software\freesofttoday]
[HKCU\Software\groovorio]
[HKLM\Software\LevelQualityWatcher]
[HKLM\Software\Rr Savings]
[HKLM\Software\RrFilter]
[HKLM\Software\Wow6432Node\5e2dcd1bc3feb41]
[HKLM\Software\Wow6432Node\FREESOFTTODAY]
[HKLM\Software\Wow6432Node\RrFilter]
[HKLM\Software\Wow6432Node\SupDp]
[HKLM\Software\Wow6432Node\Tutorials]
[HKLM\Software\Wow6432Node\istartsurfSoftware]
[HKLM\Software\Wow6432Node\supWPM]
[HKLM\Software\Wow6432Node\supWindowsMangerProtect]
[HKLM\Software\rrsavings]
[MD5.6E0BB5B9C845CDC764B2998FE612F73E] [SPRF][03/09/2014] (.No owner - Setup/Uninstall.) -- C:\Users\Lenise\AppData\Roaming\unins000.exe   [815314]
[MD5.169180F02ABCECA5DE72FC5EEBC861BB] [SPRF][16/06/2014] (.No owner - Setup/Uninstall.) -- C:\Users\Lenise\AppData\Roaming\unins001.exe   [730322]
[MD5.14BF59D9687F453D209F7780D14F3E17] [SPRF][07/07/2014] (.No owner - Setup/Uninstall.) -- C:\Users\Lenise\AppData\Roaming\unins002.exe   [720082]
[HKCU\Software\5e2dcd1bc3feb41\2.6.1339.144\upd]:="upd=1"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.911.18]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.911.18]:version="2.5.911.18"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.976.107]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.976.107]:version="2.5.976.107"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1123.78]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1123.78]:version="2.6.1123.78"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1249.132]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\5e2dcd1bc3feb41\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1249.132]:version="2.6.1249.132"
[HKCU\Software\5e2dcd1bc3feb41]:version="2.6.1339.144"
[HKLM\Software\Wow6432Node\5e2dcd1bc3feb41]:version="2.6.1339.144"
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchSettings_RASAPI32
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchSettings_RASMANCS
[HKCR\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}] (IObit Apps Toolbar)
[HKCR\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] (Messenger Plus! Community SmartbarEngine)
[HKCR\CLSID\{63E471BB-23F1-3A92-8D43-4079E7B7FA8E}] (LinkurySmartBar.DockingPanel)
[HKCR\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}] (Messenger Plus! Community Smartbar)
[HKCR\CLSID\{B397BC55-576C-39E6-BF64-9E2A96317447}] (LinkurySmartBar.LinkuryMenuForm)
[HKCR\CLSID\{B973AB12-952F-31C4-A321-E8FA6FE4421E}] (LinkurySmartBar.LinkurySmartBarBandObject)
[HKCR\CLSID\{EC5983DF-8DE2-31B5-989F-850F265E7F3C}] (LinkurySmartBar.BandObjectAttribute)
[HKLM\Software\Google\Chrome\Extensions\blmchfpimpbbdmgpcieclabeafkljbhm]
[HKLM\Software\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{813BA625-B0FA-48D8-9B75-59759C88C219}]
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
[HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}]
[HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}]
[HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}]
[HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}]
[HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}]
[HKLM\Software\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}]
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{ae07101b-46d4-4a98-af68-0333ea26e113}
C:\Users\Lenise\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmchfpimpbbdmgpcieclabeafkljbhm
C:\Users\Lenise\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
C:\Users\Lenise\AppData\Roaming\Mozilla\Firefox\Profiles\EP: RegExtension {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} . (...) -- C:\extensions\Program Files (x86)\PriceGong\2.5.4\FF (.not file.)
C:\Windows\Installer\1a89eb.msi

> Abra a ferramenta ZHPFix. < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >
> Clique IMPORTAÇÃO >> OK.
> Ps: Ao clicar "OK",verifique se o campo está limpo para que receba,somente,as informações do script.
> Clique "GO".
> Poste o relatório!

A+

Boa noite!

Adwares removidos!!

Muuuuuito obrigada!!! Abs!!!

Segue relatorio:
Rapport de ZHPFix 2014.8.3.6 par Nicolas Coolman, Update du 03/08/2014
Fichier d'export Registre :
Run by Lenise at 14/09/2014 18:59:33
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 07s)
Prefetcher vazio
Reparação de atalhos do navegador

========== Chaves do Registo ==========
Ramo Base de Registos IFEO não infetado !
ELIMINÉ: [HKLM\SOFTWARE\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}]
ELIMINÉ: HKCU\Software\5e2dcd1bc3feb41
ELIMINÉ: HKCU\Software\AppDataLow\Software\Rr Savings
ELIMINÉ: HKCU\Software\AppDataLow\Software\rrsavings
ELIMINÉ:* HKCU\Software\Blabbers
ELIMINÉ: HKCU\Software\BlabbersToolbar
ELIMINÉ: HKCU\Software\SoftwareUpdater
ELIMINÉ: HKCU\Software\SupHpUISoft
ELIMINÉ: HKCU\Software\TutoTag
ELIMINÉ: HKCU\Software\freesofttoday
ELIMINÉ: HKCU\Software\groovorio
ELIMINÉ:* HKLM\Software\LevelQualityWatcher
ELIMINÉ:* HKLM\Software\Rr Savings
ELIMINÉ:* HKLM\Software\RrFilter
ELIMINÉ: HKLM\Software\Wow6432Node\5e2dcd1bc3feb41
ELIMINÉ: HKLM\Software\Wow6432Node\FREESOFTTODAY
ELIMINÉ: HKLM\Software\Wow6432Node\SupDp
ELIMINÉ: HKLM\Software\Wow6432Node\Tutorials
ELIMINÉ: HKLM\Software\Wow6432Node\istartsurfSoftware
ELIMINÉ: HKLM\Software\Wow6432Node\supWPM
ELIMINÉ: HKLM\Software\Wow6432Node\supWindowsMangerProtect
ELIMINÉ:* HKLM\Software\rrsavings
ELIMINÉ:* HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32
ELIMINÉ:* HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchSettings_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SearchSettings_RASMANCS
ELIMINÉ:* HKCR\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
ELIMINÉ:* HKCR\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
ELIMINÉ:* HKCR\CLSID\{63E471BB-23F1-3A92-8D43-4079E7B7FA8E}
ELIMINÉ:* HKCR\CLSID\{B397BC55-576C-39E6-BF64-9E2A96317447}
ELIMINÉ:* HKCR\CLSID\{B973AB12-952F-31C4-A321-E8FA6FE4421E}
ELIMINÉ:* HKCR\CLSID\{EC5983DF-8DE2-31B5-989F-850F265E7F3C}
ELIMINÉ:* HKLM\Software\Google\Chrome\Extensions\blmchfpimpbbdmgpcieclabeafkljbhm
ELIMINÉ:* HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{813BA625-B0FA-48D8-9B75-59759C88C219}
ELIMINÉ:* HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
ELIMINÉ:* HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
ELIMINÉ:* HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
ELIMINÉ:* HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113}
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}
ELIMINÉ:* HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
ELIMINÉ: HKLM\Software\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}

========== Valores do Registo ==========
Ausente Valor Perfil Padrão: FirewallRaz :
Ausente Valor Perfil Domínio FirewallRaz :
ELIMINÉ: FirewallRaz (Private) : {7946D0E8-532C-468A-857A-CC9223D4A3D1}
ELIMINÉ: FirewallRaz (Private) : {7761DDC6-C20C-48DF-9743-3383F7C0017D}
ELIMINÉ: FirewallRaz (Public) : {FBB1C7A1-EAD1-479F-8344-9FCE91D04073}
ELIMINÉ: FirewallRaz (Public) : {7EC360DA-932B-4491-8628-72D0A345FF01}
ELIMINÉ: FirewallRaz (Public) : {6C0FD778-7D20-40B3-B591-BD3E1BEC47A6}
ELIMINÉ: FirewallRaz (Public) : {EDB5DF0A-BD75-4BD8-AE7C-D8FB8811AEEA}
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value
ELIMINÉ: RegExtension: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
ELIMINÉ: Toolbar: {ae07101b-46d4-4a98-af68-0333ea26e113}

========== Elementos dos dados do Registo ==========
ELIMINÉ: R1 Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
ELIMINÉ: R1 Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
ELIMINÉ AppInit: \Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll

========== Preferências do navegador ==========
ELIMINÉ Folder Chrome: C:\Users\Lenise\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpiifgmgnfdiblgpaepbmfdkcheicgof
ELIMINÉ Folder Chrome: C:\Users\Lenise\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia
ELIMINÉ Temporários windows (29)
ELIMINÉ Flash Cookies (0)
ELIMINÉ: C:\Users\Lenise\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpiifgmgnfdiblgpaepbmfdkcheicgof
ELIMINÉ: C:\Users\Lenise\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma

========== Ficheiros ==========
ELIMINÉ Temporários windows (36) (56.397 octets)
ELIMINÉ Flash Cookies (0) (0 octets)
ELIMINÉ: c:\users\lenise\appdata\roaming\microsoft\windows\start menu\programs\internet explorer.lnk ((http://www.istartsurf.com/?type=sc&ts=1408064879&from=air&uid=ST9500325AS_5VEAC9BEXXXX5VEAC9BE))
CRIADO: C:\Users\Lenise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
ELIMINÉ: c:\users\lenise\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\internet explorer.lnk ((http://www.istartsurf.com/?type=sc&ts=1408064879&from=air&uid=ST9500325AS_5VEAC9BEXXXX5VEAC9BE))
CRIADO: C:\Users\Lenise\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
ELIMINÉ: c:\users\lenise\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\internet explorer (no add-ons).lnk ((http://www.istartsurf.com/?type=sc&ts=1408064879&from=air&uid=ST9500325AS_5VEAC9BEXXXX5VEAC9BE))
CRIADO: C:\Users\Lenise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
ELIMINÉ: c:\users\lenise\appdata\roaming\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk ((http://www.istartsurf.com/?type=sc&ts=1408064879&from=air&uid=ST9500325AS_5VEAC9BEXXXX5VEAC9BE))
CRIADO: C:\Users\Lenise\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
ELIMINÉ: c:\users\lenise\appdata\local\google\chrome\user data\default\preferences
ELIMINÉ: c:\users\lenise\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\internet explorer (no add-ons).lnk (http://www.istartsurf.com)
ELIMINÉ: c:\users\lenise\appdata\roaming\unins000.exe
ELIMINÉ: C:\Windows\Installer\1a89eb.msi


========== Recapitulativo ==========
44 : Chaves do Registo
16 : Valores do Registo
3 : Elementos dos dados do Registo
5 : Pastas
14 : Ficheiros
2 : Preferências do navegador


End of clean in 00mn 27s

========== Caminho do ficheiro do relatório ==========
C:\Users\Lenise\AppData\Roaming\ZHP\ZHPFix[R1].txt - 14/09/2014 18:59:42 [7137]

Caso Resolvido

Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.