como faço para remover search snapdo?

Olá Pessoal, Preciso muito de ajuda    
Ao baixar o ares veio junto um tal de seach snapdo que tomou conta do meu pc, já fiz de tudo tentei desinstalar com o revo, no painel de controle(ele não está listado ) tentei desinstalar o proprio ares, tentei no internet explorer desabilitando os complementos e finalmente fiz uma restauração do sistema(windows 7) que ajudou um pouco mas não o excluiu. Agora aparentemente ele não está como navegador padrão mas ao pesquisa-lo no botão inicial ele continua lá!!!!  

Boa Noite! Renata almeida

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by Oleg N. Scherbakov )
> Salve-o no desktop!
> Desabilite seu antivírus!
> Para Windows 7,clique direito em JRT.exe e execute-o ... 

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Aguarde a conclusão e poste o relatório. ( JRT.txt )

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... par Xplode )
>
> Ou daqui: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >
> Ao acessar,clique em "Download Now".
>
> Salve-o no desktop!

< [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >

> Clique direito em adwcleaner.exe,e escolha sua execução como administrador.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Ps: Dê início ao scan,clicando em "Examinar". 

< [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >

> Ao concluir,clique "Limpar" >> Ok >> Ok >> Ok.
> Copie o log ou clique "Relatório".
> Poste: < C:\AdwCleaner\AdwCleaner[S0].txt > 

A+

Boa noite Joram,
desde já agradeço a ajuda aqui vai o primeiro relatorio vou fazer o segundo passo e já o posto

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.3 (10.21.2014:1)
OS: Windows 7 Ultimate x64
Ran by Cliente on 28/10/2014 at 18:51:34,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\livesupport
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util greener web
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.FeedManager
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.FeedManager.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.HTMLMenu
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.HTMLMenu.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.HTMLPanel
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.HTMLPanel.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.MultipleButton
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.MultipleButton.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.PseudoTransparentPlugin
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.PseudoTransparentPlugin.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.Radio
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.Radio.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.RadioSettings
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.RadioSettings.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.ScriptButton
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.ScriptButton.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.SettingsPlugin
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.SettingsPlugin.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.ThirdPartyInstaller
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.ThirdPartyInstaller.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.ToolbarProtector
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\RadioRage_4j.ToolbarProtector.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\APNSetup1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\APNSetup1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\APNSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\APNSetup_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\APN_ATU3__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\APN_ATU3__RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\NetCrawlSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\NetCrawlSetup_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\NetCrawlUntemp_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\NetCrawlUntemp_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\NetCrawl_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\NetCrawl_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\NetCrawl_Setup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\NetCrawl_Setup_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateNetCrawl_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateNetCrawl_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilNetCrawl_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilNetCrawl_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_para_ares (1)_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_para_ares (1)_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_para_ares_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_para_ares_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APNSetup1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APNSetup1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APNSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APNSetup_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\NetCrawlSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\NetCrawlSetup_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\NetCrawlUntemp_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\NetCrawlUntemp_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\NetCrawl_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\NetCrawl_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\NetCrawl_Setup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\NetCrawl_Setup_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\updateNetCrawl_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\updateNetCrawl_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\utilNetCrawl_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\utilNetCrawl_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_ares (1)_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_ares (1)_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_ares_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_ares_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{110a9ea2-8810-4c04-b916-cfd4e9427fec}



~~~ Files

Successfully deleted: [File] "C:\Users\Cliente\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage"
Successfully deleted: [File] "C:\Users\Cliente\appdata\local\google\chrome\user data\default\local storage\http_www.superfish.com_0.localstorage-journal"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\baidu"
Successfully deleted: [Folder] "C:\ProgramData\iepluginservices"
Successfully deleted: [Folder] "C:\Users\Cliente\AppData\Roaming\baidu"
Successfully deleted: [Folder] "C:\Users\Cliente\AppData\Roaming\newnext.me"
Successfully deleted: [Folder] "C:\Users\Cliente\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\local\filesfrog update checker"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\local\genienext"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\local\iac"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\local\lpt"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\local\mobogenie"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\local\radiorage_4j"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\local\smartbar"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\local\wajam"
Successfully deleted: [Folder] "C:\Users\Cliente\appdata\locallow\radiorage_4j"
Successfully deleted: [Folder] "C:\Program Files (x86)\mobogenie"
Successfully deleted: [Folder] "C:\Program Files (x86)\radiorage_4j"
Successfully deleted: [Folder] "C:\Program Files (x86)\suptab"
Successfully deleted: [Folder] "C:\Program Files (x86)\wajam"
Successfully deleted: [Folder] "C:\Users\Cliente\AppData\Roaming\microsoft\windows\start menu\programs\filesfrog update checker"
Successfully deleted: [Empty Folder] C:\Users\Cliente\appdata\local\{454F394B-7543-4EB4-8054-B083EDAA8B03}
Successfully deleted: [Empty Folder] C:\Users\Cliente\appdata\local\{9F25D347-BDD5-4B28-960B-FB9EAA79F524}
Successfully deleted: [Empty Folder] C:\Users\Cliente\appdata\local\{BF35B96B-3F11-40FB-B742-9D6851B80C21}
Successfully deleted: [Empty Folder] C:\Users\Cliente\appdata\local\{C29157B3-8B26-4E9E-B797-6BD395766982}
Successfully deleted: [Empty Folder] C:\Users\Cliente\appdata\local\{E338BC8C-E27B-4897-A31E-A9CAEE7E49DC}



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28/10/2014 at 18:55:25,67
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

olá joram,
Segue a segunda parte

# AdwCleaner v4.002 - Relatório criado 28/10/2014 às 19:09:14
# DB v2014-10-26.6
# Atualizado 27/10/2014 por Xplode
# Sistema Operacional : Windows 7 Ultimate Service Pack 1 (64 bits)
# Usuário : Cliente - CLIENTE-PC
# Executando de : D:\Cliente\Downloads\adwcleaner_4.002.exe
# Opção : Limpar

***** [ Serviços ] *****

[#] Serviço Deletada : KMService
Serviço Deletada : {6fcd6092-9615-4f7f-8898-8df53980e5d2}w64
Serviço Deletada : {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\Users\Cliente\AppData\Roaming\0V1L2Z2Z1T1I1L1T
Pasta Deletada : C:\Program Files (x86)\Greener Web
Pasta Deletada : C:\Users\Cliente\AppData\Local\Temp\Smartbar
Pasta Deletada : C:\Program Files (x86)\VNT
Pasta Deletada : C:\ProgramData\WindowsProtectManger
Arquivo Deletada : C:\Users\Cliente\AppData\Roaming\LiveSupport.exe_log.txt
Arquivo Deletada : C:\Users\Cliente\AppData\Roaming\regsvr32.exe_log.txt
Arquivo Deletada : C:\Windows\System32\roboot64.exe
Arquivo Deletada : C:\Windows\System32\\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}w64.sys
Arquivo Deletada : C:\Windows\System32\\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys

***** [ Tarefas ] *****


***** [ Atalhos ] *****

Atalho Desinfectada : D:\Cliente\Desktop\Search.lnk
Atalho Desinfectada : C:\Users\Cliente\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Search.lnk

***** [ Registro ] *****

Chave Deletedo : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\wajam.com
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@RadioRage_4j.com/Plugin
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{00A2B7C6-7487-4B99-9F6C-1FDF57FE130B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{10273591-D084-4328-A7D0-49E051FCDE7B}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{11D4B723-18CA-48C6-BA13-965488F19A70}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{53855564-CF81-410C-9C1C-321C7E067816}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{581C7D7D-F809-4E03-A631-74C069D5F04A}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{60B34F47-3FDD-46F8-AB6C-AAABEA55C3D6}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{6562E272-88E1-4DFF-8FF8-FE1A05323D36}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{68122F44-3A4A-4EDB-B28F-0C0E07F89BD0}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{9638B7D6-11F5-4406-B387-327642A11FFB}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{D740AD89-BAF4-47D5-9B5E-343D30F07A7A}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{DFEB941C-8B58-4899-97C3-88FE394E1285}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{E23760BE-23A3-4CEF-9304-66AF079F53DB}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{E6AD866F-EA06-476A-8432-ED943683FAB1}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{ECEF0D95-32FA-48D3-8A2D-D6453B5B7361}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{F69FE1BE-09C3-460C-AC89-8CCD9D3DF1CC}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{F706E19B-6C14-4272-BA98-2F16636A898D}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{A25AA6E2-1CDE-4D0F-A5D4-4898D7FB3C86}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{A5C9CB1C-1C0A-45A2-81CC-1DD342D0A478}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{0978C5FA-83C0-4118-A54F-99DACCEECB8C}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{1ED65BE2-AE84-46CB-8EA6-1C2B86ADF768}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{1FDAD7F1-B87C-4E79-9150-DE235FF80B3A}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{395C94B1-59E6-4C65-8AF2-0F6763BC70A6}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{4A50E810-71EB-43A8-A665-19ED8CCD1630}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{4DD9EB5D-8657-4856-A804-535841B09D73}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{569A9014-22E3-4F11-A243-CA4E3D95ADED}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{597494DA-C59F-4EDF-B2D1-CE137E2DB9E4}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{5E5E0B49-1A81-4ACC-BD6B-FF5F4EFEF01A}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{B872D222-3F52-4CD9-A4BE-9D69EE4F293D}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{D0E90465-CF35-480D-B520-E1E3BDE802F5}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{581C7D7D-F809-4E03-A631-74C069D5F04A}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{60B34F47-3FDD-46F8-AB6C-AAABEA55C3D6}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{68122F44-3A4A-4EDB-B28F-0C0E07F89BD0}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9638B7D6-11F5-4406-B387-327642A11FFB}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F706E19B-6C14-4272-BA98-2F16636A898D}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{581C7D7D-F809-4E03-A631-74C069D5F04A}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{60B34F47-3FDD-46F8-AB6C-AAABEA55C3D6}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{68122F44-3A4A-4EDB-B28F-0C0E07F89BD0}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9638B7D6-11F5-4406-B387-327642A11FFB}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F706E19B-6C14-4272-BA98-2F16636A898D}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{581C7D7D-F809-4E03-A631-74C069D5F04A}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{60B34F47-3FDD-46F8-AB6C-AAABEA55C3D6}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{68122F44-3A4A-4EDB-B28F-0C0E07F89BD0}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9638B7D6-11F5-4406-B387-327642A11FFB}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F706E19B-6C14-4272-BA98-2F16636A898D}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44DB423D-A0DB-4664-9477-CCDCEB7CD666}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53855564-CF81-410C-9C1C-321C7E067816}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A25AA6E2-1CDE-4D0F-A5D4-4898D7FB3C86}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5C9CB1C-1C0A-45A2-81CC-1DD342D0A478}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B5731AB1-8566-4441-AEFB-9AFB2EEA63D9}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{110A9EA2-8810-4C04-B916-CFD4E9427FEC}
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{78BA36C9-6036-482B-B48D-ECCA6F964B84}]
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{3C35AD63-AF1D-4E21-B484-B6651A8EFCF9}]
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{A25AA6E2-1CDE-4D0F-A5D4-4898D7FB3C86}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{A5C9CB1C-1C0A-45A2-81CC-1DD342D0A478}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{D95E57C2-53B3-4C38-BA1E-7980CB5E1803}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\RadioRage_4j
Chave Deletedo : HKCU\Software\Softonic
Chave Deletedo : HKCU\Software\Somoto
Chave Deletedo : HKCU\Software\systweak
Chave Deletedo : HKCU\Software\Vittalia
Chave Deletedo : HKCU\Software\Wajam
Chave Deletedo : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKCU\Software\AppDataLow\Software\RadioRage_4j
Chave Deletedo : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Chave Deletedo : HKLM\SOFTWARE\RadioRage_4j
Chave Deletedo : HKLM\SOFTWARE\SupDp
Chave Deletedo : HKLM\SOFTWARE\SupTab
Chave Deletedo : HKLM\SOFTWARE\supWindowsProtectManger
Chave Deletedo : HKLM\SOFTWARE\sweet-pageSoftware
Chave Deletedo : HKLM\SOFTWARE\systweak
Chave Deletedo : HKLM\SOFTWARE\Wpm
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RadioRage_4jbar Uninstall Firefox
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RadioRage_4jbar Uninstall Internet Explorer
Dados Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~2.DLL
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe

***** [ Navegadores ] *****

-\\ Internet Explorer v9.0.8112.16421

Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [12477 octets] - [28/10/2014 19:02:17]
AdwCleaner[R1].txt - [12441 octets] - [28/10/2014 19:06:54]
AdwCleaner[S0].txt - [495 octets] - [28/10/2014 19:05:34]
AdwCleaner[S1].txt - [11232 octets] - [28/10/2014 19:09:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [11293 octets] ##########

Boa Noite! Renata almeida

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

> Abra a ferramenta AdwCleaner e clique em "Desinstalar".
> Confirme a solicitação!
>
> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by techsupportall.com )
> Salve-a no desktop!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Execute o arquivo Adware-Removal-Tool-v3.9.1.exe <<

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

> Dê início a verificação,clicando em Scan.

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

> Ao concluir seu prescan,clique OK.
> Ps: Cada guia irá mostrar o que será removido!

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

> Clique "Next" >> Aguarde!

< Computador >> Windows (C:) >> Program Files >> Adware-Removal-Tool >> Reports >> Repair_Logs_2014_10_dia_h_min_seg.txt <<

> Poste o relatório! 

Abs!

Joram segue relatorio

Adware Removal Tool v3.9
Time: 2014_10_28_19_28_00
OS: Windows 7 - 64 Bit
Account Name: Cliente
U0L0S17

\\\\\\\\\\\\\\\\\\\\\\\ Repair Logs \\\\\\\\\\\\\\\\\\\\\\

Deleted - File - C:\Users\Cliente\Appdata\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5SSMKFVP\t3160-como-faco-para-remover-search-snapdo[1].htm
Deleted - File - C:\Users\Cliente\Appdata\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7QS2TIBY\t3160-como-faco-para-remover-search-snapdo[1].htm
Deleted - File - C:\Users\Cliente\Appdata\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ABBMCUU7\infi_snapdo_logo_114x70[1].png
Deleted - File - C:\Users\Cliente\Appdata\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WG830UWM\t3160-como-faco-para-remover-search-snapdo[1].htm
Deleted - File - C:\Users\Cliente\Appdata\Roaming\Microsoft\Windows\Cookies\cliente@search.snapdo[1].txt
Deleted - Folder - C:\program files (x86)\Baidu Security\PC Faster
Deleted - Folder - C:\ProgramData\Baidu Security\PC Faster
Deleted - Folder - C:\Users\Cliente\Appdata\Roaming\Baidu Security\PC Faster
Deleted - Folder - C:\Users\Cliente\Appdata\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
Deleted - Folder - C:\Users\Cliente\Appdata\Roaming\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}:dllname
Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}:masterclsid
Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825}:dllname
Deleted - RegistryKey - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\eventlog\Application:WindowsProtectManger
Deleted - RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility:{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}
Deleted - RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility:{472734EA-242A-422B-ADF8-83D1E48CC825}
Deleted - RegistryKey - HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\DOMStorage:trovit.com.br

\\ Finished

Boa Noite! Renata almeida

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]> ( ... by Farbar )

> Para sistemas 32 bit!

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]> (64 bit)

> Ou aqui,para sistemas 64bit!
> Salve-o no desktop! (Área de trabalho ...)
> Execute a ferramenta! Clique "Yes" >> "Scan".

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Antes de clicar "Scan",verifique se as caixinhas em "Whitelist" estão assinaladas.
> Em "Optional Scan",deixe marcada a checkbox "Addition.txt".
> Poste os relatórios! (FRST.txt + Addition.txt)
>
> Como o log será extenso,envie-o à [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].

> Ou acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > 

> Maiores informações: < |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| >

A+

Olá Joram não estou conseguindo enviar o relatório não consigo ver as imagens do exemplo dado no link que me passou pois no mesmo consta que não estou logada e não consigo fazer o login. Estou na seguinte etapa |- Para dispor do link,que são pedidos na análise,clique "Copier le lien (*)". a partir dai não sei o que fazer

Boa Noite! Renata almeida

< [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

> Tente por aqui!

A+

Bom Dia Joram,
Não consigo copiar o link ao abrir o bloco de notas não aparece nenhuma mensagem e não consigo colar o arquivo acho que ele não está sendo copiado.

Renata almeida escreveu:Bom Dia Joram,
Não consigo copiar o link ao abrir o bloco de notas não aparece nenhuma mensagem e não consigo colar o arquivo acho que ele não está sendo copiado.

Bom Dia! Renata almeida

> Já tentou anexar os relatórios?

A+

Olá Joram acho que agora deu certo  

Boa Tarde! Renata almeida

> Copie estas informações que estão em vermelho,para o Bloco de Notas.
> Salve-a com o nome fixlist.txt.
> Salve-a na pasta Downloads! ( D:\Cliente\Downloads )

start
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1F0AE48ECAA5CE01
SearchScopes: HKLM - {86c83f9e-48a4-4cd2-a763-64fea5df35f7} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll No File
CHR HomePage: Default -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
S1 Bfilter; \??\C:\Windows\System32\drivers\Bfilter.sys [X]
S1 Bfmon; \??\C:\Windows\System32\drivers\Bfmon.sys [X]
S1 Bnbase; System32\drivers\bnbasex64.sys [X]
S1 Bndef; \??\C:\Windows\System32\drivers\bndef64.sys [X]
S1 Bprotect; \??\C:\Windows\System32\drivers\Bprotect.sys [X]
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 PCFApiUtil; \??\C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2014-10-28 19:31 - 2014-01-09 08:49 - 00000000 ____D () C:\Users\Cliente\AppData\Roaming\Baidu Security
2014-10-28 19:31 - 2014-01-09 08:42 - 00000000 ____D () C:\Users\Todos os Usuários\Baidu Security
2014-10-28 19:31 - 2014-01-09 08:42 - 00000000 ____D () C:\ProgramData\Baidu Security
2014-10-28 19:31 - 2014-01-09 08:42 - 00000000 ____D () C:\Program Files (x86)\Baidu Security
2014-10-28 19:11 - 2014-07-23 19:16 - 00008456 _____ () C:\Windows\setupact.log
2014-10-28 19:11 - 2010-11-21 01:47 - 01175444 _____ () C:\Windows\PFRO.log
2014-10-18 14:01 - 2013-08-28 16:51 - 01161368 _____ () C:\Windows\WindowsUpdate.log
C:\ProgramData\FileSplitUpLoad.dll
C:\Users\Todos os Usuários\FileSplitUpLoad.dll
C:\Users\Cliente\AppData\Local\Temp\MSND79E.exe
end

> Execute FRST/FRST64 >> Clique "Fix" << Aguarde!
> Na mensagem,clique Executar. 
> Poste o relatório! (Fixlog.txt)

A+

Boa tarde Joram,
segue relatório

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 29-10-2014 01
Ran by Cliente at 2014-10-29 13:11:53 Run:1
Running from D:\Cliente\Downloads
Loaded Profile: Cliente (Available profiles: Cliente)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1F0AE48ECAA5CE01
SearchScopes: HKLM - {86c83f9e-48a4-4cd2-a763-64fea5df35f7} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll No File
CHR HomePage: Default -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
S1 Bfilter; \??\C:\Windows\System32\drivers\Bfilter.sys [X]
S1 Bfmon; \??\C:\Windows\System32\drivers\Bfmon.sys [X]
S1 Bnbase; System32\drivers\bnbasex64.sys [X]
S1 Bndef; \??\C:\Windows\System32\drivers\bndef64.sys [X]
S1 Bprotect; \??\C:\Windows\System32\drivers\Bprotect.sys [X]
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 PCFApiUtil; \??\C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2014-10-28 19:31 - 2014-01-09 08:49 - 00000000 ____D () C:\Users\Cliente\AppData\Roaming\Baidu Security
2014-10-28 19:31 - 2014-01-09 08:42 - 00000000 ____D () C:\Users\Todos os Usuários\Baidu Security
2014-10-28 19:31 - 2014-01-09 08:42 - 00000000 ____D () C:\ProgramData\Baidu Security
2014-10-28 19:31 - 2014-01-09 08:42 - 00000000 ____D () C:\Program Files (x86)\Baidu Security
2014-10-28 19:11 - 2014-07-23 19:16 - 00008456 _____ () C:\Windows\setupact.log
2014-10-28 19:11 - 2010-11-21 01:47 - 01175444 _____ () C:\Windows\PFRO.log
2014-10-18 14:01 - 2013-08-28 16:51 - 01161368 _____ () C:\Windows\WindowsUpdate.log
C:\ProgramData\FileSplitUpLoad.dll
C:\Users\Todos os Usuários\FileSplitUpLoad.dll
C:\Users\Cliente\AppData\Local\Temp\MSND79E.exe
end

*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache_TIMESTAMP => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{86c83f9e-48a4-4cd2-a763-64fea5df35f7}" => Key deleted successfully.
"HKCR\CLSID\{86c83f9e-48a4-4cd2-a763-64fea5df35f7}" => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value deleted successfully.
"HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully.
"HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => Key not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\Adobe Reader" => Key deleted successfully.
Chrome HomePage deleted successfully.
Bfilter => Service deleted successfully.
Bfmon => Service deleted successfully.
Bnbase => Service deleted successfully.
Bndef => Service deleted successfully.
Bprotect => Service deleted successfully.
BprotectEx => Service deleted successfully.
PCFApiUtil => Service deleted successfully.
VGPU => Service deleted successfully.
C:\Users\Cliente\AppData\Roaming\Baidu Security => Moved successfully.
C:\Users\Todos os Usuários\Baidu Security => Moved successfully.
"C:\ProgramData\Baidu Security" => File/Directory not found.
C:\Program Files (x86)\Baidu Security => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\WindowsUpdate.log => Moved successfully.
C:\ProgramData\FileSplitUpLoad.dll => Moved successfully.
"C:\Users\Todos os Usuários\FileSplitUpLoad.dll" => File/Directory not found.
C:\Users\Cliente\AppData\Local\Temp\MSND79E.exe => Moved successfully.

==== End of Fixlog ====

Boa Tarde! Renata almeida

> Informe a situação da máquina,para que possamos daqui,tomar medidas cabíveis.
> O malware,ainda,lhe incomoda?

A+

Olá Joram,

Aparenetemente ele foi excluido(nenhuma das alterações anteriores continua) a unica coisa que me deixa em duvida é o icone do internet explorer que agora aparece com o nome search como o do malware em questão mas o navegador está funcionando corretamente.

Renata almeida escreveu:Olá Joram,

Aparenetemente ele foi excluido(nenhuma das alterações anteriores continua) a unica coisa que me deixa em duvida é o icone do internet explorer que agora aparece com o nome search como o do malware em questão mas o navegador está funcionando corretamente.

Olá! Renata almeida

> Se o ícone for um atalho,vc pode deletá-lo e estabelecer novo atalho,indo ao arquivo iexplore.exe.

A+

Olá Joram,

Era exatamente isto

Problema resolvido :rindo_atoa: :rindo_atoa: :rindo_atoa:
Muito Obrigada pela ajuda

Tenha uma Boa Tarde!!!!

Olá! Renata almeida

> O problema foi resolvido,mas vc tem que apagar Pontos de Restauração do Sistema,que estão comprometidos.
>
> Vamos remover as ferramentas que foram utilizadas na desinfecção!

> Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... de Xplode )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Estando na página,clique em Download Now. 
> Salve-a em um local conveniente! ( desktop! )
> Feche aplicativos que estejam abertos.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

> Remover ferramentas de desinfecção
> Criar backup do registro
> Limpar pontos da restauração do sistema

> Com estas caixinhas marcadas,clique Executar!
> Reinicie o computador!
> Tudo Ok?  

A+

Olá Joram,

Pronto tudo ok

Caso Resolvido

Necessitando novo auxílio para este computador,basta abrir "Novo Tópico" e relatar o problema.