Como remover o navegaki.com?

Gostaria de saber como remover o navegaki.com dos meus navegadores, está em todos. Já fiz de tudo e não consegui remover , meu sistema operacional é o windows 8.1 e nenhum dos antigos metodos de remoção dessa barra não funciona.

Olá. Só um momento que já vou te ajudar

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt

não deu certo, olha o relatório:

# AdwCleaner v4.111 - Logfile created 26/02/2015 at 20:17:13
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows 8.1 Single Language  (x64)
# Username : thiago - THIAGO
# Running from : C:\Users\thiago\Downloads\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****

Service Deleted : iSafeKrnlKit
[#] Service Deleted : iSafeService
Service Deleted : iSafeKrnlMon

***** [ Files / Folders ] *****

[!] Folder Deleted : C:\Program Files (x86)\Elex-tech
Folder Deleted : C:\Users\thiago\AppData\Local\BreakingNewsAlert
Folder Deleted : C:\Users\thiago\AppData\Roaming\Elex-tech
File Deleted : C:\Users\Public\Desktop\YAC.lnk
File Deleted : C:\Windows\System32\drivers\iSafeKrnlBoot.sys
File Deleted : C:\Windows\System32\log\iSafeKrnlCall.log
File Deleted : C:\Windows\System32\Drivers\iSafeNetFilter.sys

***** [ Scheduled tasks ] *****

Task Deleted : SmartWeb Upgrade Trigger Task
Task Deleted : e330685e-a257-4cd4-a187-72a7b94e6680-1-6
Task Deleted : e330685e-a257-4cd4-a187-72a7b94e6680-1-7
Task Deleted : e330685e-a257-4cd4-a187-72a7b94e6680-10_user
Task Deleted : e330685e-a257-4cd4-a187-72a7b94e6680-5
Task Deleted : e330685e-a257-4cd4-a187-72a7b94e6680-5_user
Task Deleted : e330685e-a257-4cd4-a187-72a7b94e6680-6
Task Deleted : e330685e-a257-4cd4-a187-72a7b94e6680-7

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Feature Mananger.lnk

***** [ Registry ] *****

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5411D116-5A37-47D4-B154-5F7FCD9062F0}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428A-92C9-0CFC28B9D1BF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Tutorials
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\Elex-tech
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17037

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v40.0.2214.115


*************************

AdwCleaner[R0].txt - [4554 bytes] - [26/02/2015 19:04:26]
AdwCleaner[R1].txt - [3630 bytes] - [26/02/2015 20:13:07]
AdwCleaner[S0].txt - [1295 bytes] - [26/02/2015 19:10:58]
AdwCleaner[S1].txt - [2917 bytes] - [26/02/2015 20:17:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2976  bytes] ##########

Vários problemas foram removidos pelo Adwcleaner.

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executá-lo corretamente siga as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

Zoek.exe v5.0.0.0 Updated 26-February-2015
Tool run by thiago on 26/02/2015 at 20:48:28,76.
Microsoft Windows 8.1 Single Language 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\thiago\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

26/02/2015 20:52:15 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Browser Good deleted successfully
C:\PROGRA~2\gmsd_br_248 deleted successfully
C:\Users\thiago\AppData\Roaming\ntsvc deleted successfully
C:\Users\thiago\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gUIaLe deleted successfully

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Browser Good not found
C:\PROGRA~2\gmsd_br_248 not found
C:\Program Files (x86)\AirplaneModeInstaller\4a547d2a-bd50-4721-a14f-c175c95f6625.dll deleted
C:\Program Files (x86)\AirplaneModeInstaller\4d732e2d-d19f-4922-aa83-46bd4b4a6c4a.dll deleted
C:\PROGRA~2\4d732e2d-d19f-4922-aa83-46bd4b4a6c4a deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\thiago\AppData\Local\BTServer.log deleted
C:\Users\thiago\AppData\Local\E5F59000-1424965440-0000-0000-000000000000 deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Windows\Tasks\e330685e-a257-4cd4-a187-72a7b94e6680-1-7.job deleted
C:\Windows\Tasks\e330685e-a257-4cd4-a187-72a7b94e6680-10_user.job deleted
C:\Windows\Tasks\e330685e-a257-4cd4-a187-72a7b94e6680-5.job deleted
C:\Windows\Tasks\e330685e-a257-4cd4-a187-72a7b94e6680-5_user.job deleted
C:\Windows\Tasks\e330685e-a257-4cd4-a187-72a7b94e6680-6.job deleted
C:\Windows\Tasks\e330685e-a257-4cd4-a187-72a7b94e6680-7.job deleted
C:\windows\SysNative\Tasks\e330685e-a257-4cd4-a187-72a7b94e6680-1-6 deleted
C:\Windows\tasks\QBSHXT.job deleted
C:\windows\SysNative\tasks\QBSHXT deleted
C:\windows\SysNative\drivers\{62eca849-70b6-47ed-932e-18163afa5bee}Gw64.sys deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Users\thiago\AppData\Roaming\QBSHXT.exe deleted
"C:\Users\thiago\AppData\Roaming\QBSHXT" deleted
"C:\PROGRA~3\UICeVea\gUIaLe.dat" not deleted
"C:\PROGRA~3\UICeVea\gUIaLe.exe" deleted
"C:\PROGRA~3\UICeVea\info.dat" not deleted
"C:\Users\thiago\AppData\Roaming\E5F59000-1424965210-0000-0000-000000000000\nsuF2D9.tmpfs" deleted
"C:\PROGRA~3\UICeVea\dat\MPoKbp.dll" not deleted
"C:\PROGRA~3\UICeVea\dat\SrpfGB.dll" not deleted
"C:\PROGRA~3\UICeVea\dat\uoJofeqFR.exe" not deleted
"C:\PROGRA~3\UICeVea\dat\uoJofeqFR.exe.config" not deleted
"C:\PROGRA~3\UICeVea\dat\xeJaWXJ.exe" not deleted
"C:\PROGRA~3\UICeVea\dat\xeJaWXJ.exe.config" not deleted
"C:\PROGRA~3\UICeVea" not deleted
"C:\PROGRA~2\Windows Multimedia Platform" deleted
"C:\Users\thiago\AppData\Roaming\E5F59000-1424965210-0000-0000-000000000000" not deleted
"C:\PROGRA~3\UICeVea\dat" not deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn" [26/02/2015 20:24]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{862BEC5E-DBF1-45DD-1BC2-1CCFBC577055}"="C:\Program Files (x86)\ver9PaceItUp\187.xpi" [26/02/2015 15:36]

==== Chromium Look ======================

Google Chrome Version: 40.0.2214.115 (Up to date, latest Stable version: 40.0.2214.115)

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton Internet Security\Engine\21.0.0.100\Exts\Chrome.crx[15/08/2013 00:24]

Google Wallet - thiago\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

==== Chromium Fix ======================

C:\Users\thiago\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_www.superfish.com_0.localstorage deleted successfully
C:\Users\thiago\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\thiago\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\https_static.boostsaves.com_0.localstorage deleted successfully
C:\Users\thiago\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\https_static.boostsaves.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://search.navegaki.com.br/?bd=ds&oem=Cube&uid=ST500LM012XHN-M500MBB_S2ZAJ5BF231048&version=2.0.0.1288&pid=414031160&cs=dd263664bca668b5e91316d3a6b38cbb&q={searchTerms}"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://search.navegaki.com.br/?bd=ds&oem=Cube&uid=ST500LM012XHN-M500MBB_S2ZAJ5BF231048&version=2.0.0.1288&pid=414031160&cs=dd263664bca668b5e91316d3a6b38cbb&q={searchTerms}"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://search.navegaki.com.br/?bd=ds&oem=Cube&uid=ST500LM012XHN-M500MBB_S2ZAJ5BF231048&version=2.0.0.1288&pid=414031160&cs=dd263664bca668b5e91316d3a6b38cbb&q={searchTerms}"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://search.navegaki.com.br/?bd=ds&oem=Cube&uid=ST500LM012XHN-M500MBB_S2ZAJ5BF231048&version=2.0.0.1288&pid=414031160&cs=dd263664bca668b5e91316d3a6b38cbb&q={searchTerms}"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0191A6B0-1154-4C22-9182-23A95BBE92D9} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{E921F400-D383-4B1B-9DE6-FCFCACFC1173} navegaki Url="http://search.navegaki.com.br/?bd=ds&oem=Cube&uid=ST500LM012XHN-M500MBB_S2ZAJ5BF231048&version=2.0.0.1288&pid=414031160&cs=dd263664bca668b5e91316d3a6b38cbb&q={searchTerms}"

==== Reset Google Chrome ======================

C:\Users\thiago\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences was reset successfully
C:\Users\thiago\AppData\Local\Google\Chrome\User Data\Profile 1\Web Data was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\thiago\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\thiago\Desktop\µTorrent.lnk -

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\HD VDeck.lnk - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
C:\Users\Public\Desktop\KeeP 3D.lnk - C:\Program Files (x86)\KeeP3D\KeeP3D.exe
C:\Users\Public\Desktop\Manual e Certificado de Garantia Philco.lnk - C:\Philco\Manual\Manual e Certificado de Garantia Philco.pdf
C:\Users\Public\Desktop\Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office15\FIRSTRUN.EXE /OEM
C:\Users\Public\Desktop\Movie Maker.lnk - C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe
C:\Users\Public\Desktop\Nero BackItUp 11.lnk - C:\Windows\Installer\{AB2BBC64-8AC8-4E66-BBF3-E22D5EACEECA}\BackItUp._AB9F1F47710540918A47B78D2BED5DAD.exe
C:\Users\Public\Desktop\Nero Burning ROM 11.lnk - C:\Windows\Installer\{9D8491AD-D0D2-4B51-AA4A-A8B67795A553}\ScBurningROMStartM_7533AE23D677474387D2A66427FA7052.exe
C:\Users\Public\Desktop\Nero Kwik Media.lnk - C:\Program Files (x86)\Nero\KM\KwikMedia.exe
C:\Users\Public\Desktop\Nero Video 11.lnk - C:\Windows\Installer\{0D7A4289-99CF-4B8D-B812-86BE50A54552}\NewShortcut1_28CF345AD4354131AA47B77D4165D813.exe
C:\Users\Public\Desktop\Norton Anti-Theft.lnk - C:\Program Files (x86)\Norton Anti-Theft\Engine\1.9.0.14\ppStub.exe
C:\Users\Public\Desktop\Norton Internet Security.lnk - C:\Program Files (x86)\Norton Internet Security\Engine64\21.0.0.100\uiStub.exe
C:\Users\Public\Desktop\Photo Gallery.lnk - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe

==== shortcuts in Users Start Menu ======================

C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\Ajustes padrão\Air Traveler.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\Ajustes padrão\Battery Saver.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\Ajustes padrão\Gaming.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\Ajustes padrão\Movie.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center\Ajustes padrão\Web Browsing.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Ajuda do WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.chm
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Manual do Console RAR.lnk - C:\Program Files (x86)\WinRAR\Rar.txt
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\O que há de novo na última versão.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\YAC.lnk - C:\Program Files (x86)\Elex-tech\YAC\iStart.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Feature Mananger.lnk - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --use-spdy=off --disable-quic
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Anti-Theft\Norton Anti-Theft.LNK - C:\Program Files (x86)\Norton Anti-Theft\Engine\1.9.0.14\ppStub.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\Norton Internet Security.lnk - C:\Program Files (x86)\Norton Internet Security\Engine64\21.0.0.100\uiStub.exe /win8
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Ajuda do WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Manual do Console RAR.lnk - C:\Program Files (x86)\WinRAR\Rar.txt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\O que há de novo na última versão.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\thiago\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\thiago\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\thiago\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_br_255_is1 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_br_258_is1 deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\thiago\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\thiago\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\thiago\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\thiago\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\thiago\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=55 folders=23 24224010 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\thiago\AppData\Local\Temp will be emptied at reboot
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\thiago\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\PROGRA~3\UICeVea\gUIaLe.dat" not found
"C:\PROGRA~3\UICeVea\info.dat" not found
"C:\PROGRA~3\UICeVea\dat\MPoKbp.dll" not found
"C:\PROGRA~3\UICeVea\dat\SrpfGB.dll" not found
"C:\PROGRA~3\UICeVea\dat\uoJofeqFR.exe" not found
"C:\PROGRA~3\UICeVea\dat\uoJofeqFR.exe.config" not found
"C:\PROGRA~3\UICeVea\dat\xeJaWXJ.exe" not found
"C:\PROGRA~3\UICeVea\dat\xeJaWXJ.exe.config" not found
"C:\PROGRA~3\UICeVea" not found
"C:\Users\thiago\AppData\Roaming\E5F59000-1424965210-0000-0000-000000000000" not found

==== EOF on 26/02/2015 at 21:39:59,78 ======================

*funcionou perfeitamente desta vez obrigado

Ainda há problemas no PC.

Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPCleaner para baixá-lo, tal como mostra a imagem abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Para executá-lo corretamente siga as dicas desta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Após a utilização dele, copie todo o conteúdo do seu relatório ZHPCleaner.txt e poste em sua próxima resposta.

~ ZHPCleaner v2015.2.26.94 by Nicolas Coolman (26/02/2015)
~ Run by thiago (Administrator) (27/02/2015 00:38:32)
~ Forum : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Facebook : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ State version : Version OK
~ Type : Repair
~ Report : C:\Users\thiago\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\thiago\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
~ Windows 81, 64-bit (Build 9600)


---\\ Services (2)
CLOSED : qrsvc_1.10.0.9 (PUP.QuickRef)



---\\ Browser internet (0)
~ No malicious items found.


---\\ Hosts file (0)
~ No malicious items found.


---\\ Scheduled automatic tasks. (0)
~ No malicious items found.


---\\ Explorer ( File, Folder) (34)
MOVED file: C:\Program Files (x86)\GoHDV26.02\e330685e-a257-4cd4-a187-72a7b94e6680-1-6.exe [InstallMoonV26.02 - GoHDV26.02 exe] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\e330685e-a257-4cd4-a187-72a7b94e6680-1-7.exe [InstallMoonV26.02 - GoHDV26.02 exe] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\e330685e-a257-4cd4-a187-72a7b94e6680-10.exe [InstallMoonV26.02 - GoHDV26.02 exe] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\e330685e-a257-4cd4-a187-72a7b94e6680-5.exe [InstallMoonV26.02 - GoHDV26.02 exe] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\e330685e-a257-4cd4-a187-72a7b94e6680-6.exe [InstallMoonV26.02 - GoHDV26.02 exe] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\e330685e-a257-4cd4-a187-72a7b94e6680-64.exe [InstallMoonV26.02 - GoHDV26.02 exe] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\e330685e-a257-4cd4-a187-72a7b94e6680-7.exe [InstallMoonV26.02 - GoHDV26.02 exe] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\0975e8e8-7eee-4b4d-8a43-e98b6e310652.dll [ - ] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\98ea8181-ab35-490b-92e8-95ecba72e2c3.dll [ - ] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\bgNova.html [ - ] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\GoHDV26.02\utils.exe [Imvbxe LTD - Ycudfi] (PUP.CrossRider)
MOVED file: C:\Program Files (x86)\QuickRef_1.10.0.9\terms-of-service.rtf [ - ] (PUP.QuickRef)
MOVED file: C:\Program Files (x86)\QuickRef_1.10.0.9\Uninstall.exe [Quick Ref - Quick Ref Setup] (PUP.QuickRef)
MOVED folder*: C:\Program Files (x86)\QuickRef_1.10.0.9\3rd Party Licenses (PUP.QuickRef)
MOVED folder*: C:\Program Files (x86)\QuickRef_1.10.0.9\Service (PUP.QuickRef)
MOVED folder*: C:\Program Files (x86)\GoHDV26.02 (PUP.CrossRider)
MOVED folder*: C:\Program Files (x86)\QuickRef_1.10.0.9 (PUP.QuickRef)
MOVED folder*: C:\ProgramData\Baidu Security\RpData (Adware.BDPlugin)
MOVED folder*: C:\ProgramData\Baidu Security (Adware.BDPlugin)
MOVED file: C:\Windows\Prefetch\3D BUBBLESOUND.EXE-0711FD62.pf [ - ] (PUP.BubbleSound)
MOVED file: C:\Windows\Prefetch\3DBUBBLESOUND.EXE-28CAE139.pf [ - ] (PUP.BubbleSound)
MOVED file: C:\Windows\Prefetch\ANYPROTECT.EXE-7064871B.pf [ - ] (PUP.AnyProtect)
MOVED file: C:\Windows\Prefetch\CONTENTEXPLORER.EXE-EE71F450.pf [ - ] (PUP.ContentExplorer)
MOVED file: C:\Windows\Prefetch\CONTENTEXPLORERINSTALLER.EXE-80676D9A.pf [ - ] (PUP.ContentExplorer)
MOVED file: C:\Windows\Prefetch\GAMESDESKTOP3-BRINSTALLER.EXE-092DCDA5.pf [ - ] (Adware.GamesDesktop)
MOVED file: C:\Windows\Prefetch\GAMESDESKTOP3-BRINSTALLER.TMP-E20119F7.pf [ - ] (Adware.GamesDesktop)
MOVED file: C:\Windows\Prefetch\MYSTARTSEARCHTBEN1102--3C3308-8FB7F252.pf [ - ] (PUP.StartSearch)
MOVED file: C:\Windows\Prefetch\SMARTWEBHELPER.EXE-C2CBDDA0.pf [ - ] (PUP.SmartWebSearch)
MOVED file: C:\Windows\Prefetch\VOPACKAGE.EXE-49FBDD45.pf [ - ] (Adware.Downware)
MOVED file: C:\Windows\Prefetch\WAJAM.EXE-9C722A76.pf [ - ] (PUP.Wajam)
MOVED file: C:\Windows\Prefetch\WAJAM_64.EXE-DFE32FB3.pf [ - ] (PUP.Wajam)
MOVED file: C:\Windows\Prefetch\WAJAM_DOWNLOAD_V2.EXE-2E1DB636.pf [ - ] (PUP.Wajam)
MOVED file: C:\Windows\Prefetch\YET_ANOTHER_CLEANER_SK.EXE-72118F5F.pf [ - ] (PUP.YetAnotherCleaner)
MOVED file: C:\Users\thiago\Downloads\yet_another_cleaner_sk.exe [Elex do Brasil Participações Ltda - standard installer] (PUP.YetAnotherCleaner)


---\\ Registry ( Key, Value, Data) (20)
DELETED key^: [X64] HKLM\SYSTEM\CurrentControlSet\Services\qrsvc_1.10.0.9 ["C:\Program Files (x86)\QuickRef_1.10.0.9\Service\qrsvc.exe" (Not File) ] (PUP.QuickRef)
DELETED key^: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Update Browser Good ["C:\Program Files (x86)\Browser Good\updateBrowserGood.exe" (Not File) ] (PUP.BrowserGood)
DELETED value: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\\ZHPCleaner_Key2 [REG delete "HKLM64\SYSTEM\CurrentControlSet\Services\Update Browser Good" /F] (PUP.BrowserGood)
DELETED key*: HKCU\Software\GoHDV26.02-nv [] (Heuristic.CrossRider)
DELETED key*: HKCU\Software\GoHDV26.02-nv-ie [] (Heuristic.CrossRider)
DELETED key*: [X64] HKLM\SOFTWARE\GoHDV26.02-nv [] (Heuristic.CrossRider)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\0975e8e8-7eee-4b4d-8a43-e98b6e310652 [] (PUP.CrossRider)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\98ea8181-ab35-490b-92e8-95ecba72e2c3 [] (PUP.CrossRider)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\GoHDV26.02-nv [] (Heuristic.CrossRider)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\GoHDV26.02-nv-ie [] (Heuristic.CrossRider)
DELETED key*: HKCU\Software\GoHDV26.02 [] (PUP.CrossRider)
DELETED key*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.boostsaves.com [156] (PUP.BoostSaves)
DELETED key*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update Browser Good [] (PUP.BrowserGood)
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05B184AF94CBADA4C9A5F35E2DE6C932 [C:\Program Files (x86)\Nero\KM\MovieWizard.Interop.dll] (PUP.MovieWizard)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\GoHDV26.02 [] (PUP.CrossRider)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\QuickRef_1.10.0.9 [] (PUP.QuickRef)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\GoHDV26.02 [] (PUP.CrossRider)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\QuickRef_1.10.0.9 [Quick Ref] (PUP.QuickRef)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage [] (PUP.QuickRef)
DELETED key*: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC [] (PUP.QuickRef)



---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Google Chrome)
~ Browser not found (Mozilla Firefox)
~ Browser not found (Opera Software)
~ The system has been restarted.


---\\ Statistics
~ Items scanned : 71119
~ Items found : 0
~ Items repaired : 44


End of clean at 00:58:16
===================
ZHPCleaner-[R]-27022015-00_58_16.txt

Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 8.1 Single Language x64
Ran by thiago on 27/02/2015 at 18:50:14,41
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27/02/2015 at 19:01:49,85
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Como está o PC?

ele esta bom , mas o navegaki aparece de vem em quando

Faça o download do Malwarebytes em um destes links abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Para instalá-lo e executá-lo corretamente siga, por gentileza, as dicas desta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste este log (relatório) do Malwarebytes.

Ficamos no aguardo.

Malwarebytes Anti-Malware
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Data da Verificação: 27/02/2015
Hora da Verificação: 21:41:05
Arquivo de Log: e.txt
Administrador: Sim

Versão: 2.00.4.1028
Base de Dados de Malware: v2015.02.27.08
Base de Dados de Rootkit: v2015.02.25.01
Licença: Avaliação Gratuita
Proteção de Malware: Habilitado
Proteção de Site Malicioso: Habilitado
Auto-Proteção: Desabilitado

SO: Windows 8.1
Processador: x64
Sistema de Arquivos: NTFS
Usuário: thiago

Tipo da Verificação: Verificação Personalizada
Resultado: Terminado
Objetos Verificados: 466873
Tempo Decorrido: 2 hr, 34 min, 53 seg

Memória: Habilitado
Inicialização: Habilitado
Sistema de Arquivos: Habilitado
Arquivos Compactados: Habilitado
Rootkits: Habilitado
Heurística: Habilitado
PUP: Habilitado
PUM: Habilitado

Processos: 0
(Nenhum item malicioso detectado)

Módulos: 0
(Nenhum item malicioso detectado)

Chaves de Registro: 16
PUP.Optional.PortalSepeti, HKU\S-1-5-21-2075651768-4095998223-1379252817-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E921F400-D383-4B1B-9DE6-FCFCACFC1173}, Quarentena, [a5048f93503a53e39a04ee251be836ca],
PUP.Optional.PortalSepeti, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E921F400-D383-4B1B-9DE6-FCFCACFC1173}, Quarentena, [a5048f93503a53e39a04ee251be836ca],
PUP.Optional.QuickRef.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\qrnfd_1_10_0_9, Quarentena, [cedb1111b1d91b1bc1a7bee32fd4966a],
PUP.Optional.PortalSepeti, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SED, Quarentena, [c7e23be7c6c4300603c23b8d996a8779],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{87C1F817-717A-A2EC-1316-26D36FC5A1CE}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{B20D6E19-3D58-07F8-7F57-7D7EFEFF9752}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2709E512-E774-3423-4BA0-D7C6ECAAB2E7}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2709E512-E774-3423-4BA0-D7C6ECAAB2E7}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{B20D6E19-3D58-07F8-7F57-7D7EFEFF9752}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{87C1F817-717A-A2EC-1316-26D36FC5A1CE}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{87C1F817-717A-A2EC-1316-26D36FC5A1CE}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\CLASSES\CLSID\{87C1F817-717A-A2EC-1316-26D36FC5A1CE}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\CLASSES\CLSID\{87C1F817-717A-A2EC-1316-26D36FC5A1CE}\INPROCSERVER32, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKU\S-1-5-21-2075651768-4095998223-1379252817-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{87C1F817-717A-A2EC-1316-26D36FC5A1CE}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKU\S-1-5-21-2075651768-4095998223-1379252817-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{87C1F817-717A-A2EC-1316-26D36FC5A1CE}, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\0854CF81-B8D5-7B8E-B755-A784F0369A5D, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],

Valores de Registro: 3
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_br_255, "C:\Program Files (x86)\gmsd_br_255\gmsd_br_255.exe", Quarentena, [c7e25ac86129ee48343db5f4a3606b95]
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_br_258, "C:\Program Files (x86)\gmsd_br_258\gmsd_br_258.exe", Quarentena, [9118c65c424886b0452ccfda13f0f30d]
PUP.Optional.PortalSepeti, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SED|ImagePath, C:\Users\thiago\AppData\Roaming\ntsvc\ntsvc.exe, Quarentena, [c7e23be7c6c4300603c23b8d996a8779]

Dados de Registro: 0
(Nenhum item malicioso detectado)

Pastas: 3
PUP.Optional.BreakingNewsAlert.A, C:\Users\thiago\AppData\Local\BreakingNewsAlert, Quarentena, [5e4b73af8bff2c0a34bea20af60d41bf],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\x64, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],

Arquivos: 21
PUP.Optional.Nova.A, C:\zoek_backup\C_Program Files (x86)_AirplaneModeInstaller_4a547d2a-bd50-4721-a14f-c175c95f6625.dll.vir, Quarentena, [278272b0e0aa59dd930bc049748e9b65],
PUP.Optional.Nova.A, C:\zoek_backup\C_PROGRA~2_4d732e2d-d19f-4922-aa83-46bd4b4a6c4a\aca5125b-66a2-4913-b116-ef6329cd795f.dll, Quarentena, [5a4fd64cf8927eb83f5fd2378b77d030],
PUP.Optional.BreakingNewsAlert.A, C:\zoek_backup\C_PROGRA~3_UICeVea\gUIaLe.exe, Quarentena, [09a0f72bdab091a5c04872b7eb17e818],
PUP.Optional.ZombieInvasion.A, C:\zoek_backup\C_PROGRA~3_UICeVea\dat\SrpfGB.dll, Quarentena, [703949d990fa73c31bfc54712ed79769],
PUP.Optional.BreakingNewsAlert.A, C:\zoek_backup\C_PROGRA~3_UICeVea\dat\uoJofeqFR.exe, Quarentena, [c1e8cb57e7a373c38b7d6dbc29d9ab55],
PUP.Optional.BreakingNewsAlert.A, C:\zoek_backup\C_PROGRA~3_UICeVea\dat\xeJaWXJ.exe, Quarentena, [e9c0d44ed4b6cd69ce3abf6a8d7543bd],
PUP.Optional.PaceItUp.A, C:\Windows\Tasks\PaceItUp Update.job, Quarentena, [c7e278aa048642f47e60aff6ef14fb05],
PUP.Optional.BreakingNewsAlert.A, C:\Users\thiago\AppData\Local\BreakingNewsAlert\data2.dat, Quarentena, [5e4b73af8bff2c0a34bea20af60d41bf],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\187.dat, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\187.dll, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\187_x64.dll, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\187.xpi, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\PaceItUp.exe, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\R7PaceItUpa75.dll, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\R7PaceItUpa75.exe, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\sqlite3.dll, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\Uninstall.exe, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\x64\TandemRunner.exe, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\x64\WdfCoInstaller01009.dll, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\x64\webinstr.inf, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],
PUP.Optional.PaceItUp.A, C:\Program Files (x86)\ver9PaceItUp\x64\webinstrNHKT.sys, Quarentena, [05a42af89febaa8ca40eeca73cc754ac],

Setores Físicos: 0
(Nenhum item malicioso detectado)


(end)

Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )

Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPDiag para baixá-lo, tal como mostra a imagem abaixo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Para instalá-lo e executá-lo corretamente siga as dicas deste artigo:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

* Assim que ele concluir a sua verificação, copie todo o conteúdo do seu relatório ZHPDiag.txt e poste em sua próxima resposta.
_____________________________________________________________________________

Obs: Caso o relatório do ZHPDiag fique muito grande e não couber na sua resposta, acesse o site Cjoint:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Clique no botão Escolher arquivo > Selecione o arquivo do log (relatório) e clique no botão Abrir.

Clique no botão Créer le lien Cjoint

Copie o link que aparecerá ao lado da frase Le lien a été créé e poste este link em sua próxima resposta.

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

 Selecione e copie todo o texto destacado em vermelho abaixo (começando em script zhpfix e indo até emptyclsid)

script zhpfix
SysRestore
M2 - MFEP: RegExtension {862BEC5E-DBF1-45DD-1BC2-1CCFBC577055} . (...) -- C:\Program Files (x86)\ver9PaceItUp\187.xpi (.not file.)
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O4 - GS\SendTo [thiago]: YAC Desktop.lnk . (...)  -- C:\Program Files (x86)\Elex-tech\YAC\iDesk.exe (.not file.)   =>PUP.Elex
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O23 - Service: Dots Per Inch Encrypt (biguvuhe) . (...) - C:\Users\thiago\AppData\Roaming\E5F59000-1424965210-0000-0000-000000000000\nsuF2D9.tmpfs (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{FFECE3BB-CB34-4D2E-83D0-F634F01B63DB}] (...) -- C:\Users\thiago\AppData\Roaming\mystartsearch\UninstallManager.exe (.not file.)   [0]   =>PUP.StartSearch
[HKCU\Software\AppDataLow\Software\CheckMeUp]
[HKCU\Software\Baidu Security]    
[HKCU\Software\QBSHXT]
[HKLM\Software\Baidu Security]    
[HKLM\Software\Wow6432Node\Baidu Security]    
[HKLM\Software\Wow6432Node\Baidu_Drp_pos]    
O43 - CFD: 26/02/2015 - 15:57:42 - [] ----D C:\ProgramData\PC Faster
O43 - CFD: 27/02/2015 - 22:05:13 - [] ----D C:\Users\thiago\AppData\Roaming\Macwebtoise
O45 - LFCP:[MD5.E02C62ADB9E6C64B5793B6276BF8C8A5] - 26/02/2015 - 15:47:29 ---A- - C:\Windows\Prefetch\BREAKINGNEWSALERTINSTALL.EXE-5FA37B50.pf   =>PUP.BreakingNewsAlert
O45 - LFCP:[MD5.7F6388E42E41AE6FBE7E3F2D81D937DC] - 26/02/2015 - 16:01:48 ---A- - C:\Windows\Prefetch\BROWSERGOOD.BROWSERADAPTER.EX-1701B47A.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.FC07B293A2592088288E24940BF4020B] - 26/02/2015 - 16:01:48 ---A- - C:\Windows\Prefetch\BROWSERGOOD.BROWSERADAPTER64.-F84307BC.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.BDC36C1C3C739B350FF110A358D6A525] - 26/02/2015 - 16:01:44 ---A- - C:\Windows\Prefetch\BROWSERGOOD.EXPEXT.EXE-6C20BB47.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.4E0928006D0C99513204D1A99DC379D1] - 26/02/2015 - 15:50:09 ---A- - C:\Windows\Prefetch\BROWSERGOOD.MG.EXE-634946D4.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.3C4308901ED370F1FEEC73068C83A430] - 26/02/2015 - 16:01:47 ---A- - C:\Windows\Prefetch\BROWSERGOOD.PURBROWSE64.EXE-B14BA7C8.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.5D53326F144C053443DAA43951579D55] - 26/02/2015 - 16:03:55 ---A- - C:\Windows\Prefetch\BROWSERGOODUNINSTALL.EXE-FE1B483C.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.68274322FCEB16DDAFA02AC9E52EE736] - 26/02/2015 - 15:50:39 ---A- - C:\Windows\Prefetch\BROWSERGOOD_SETUP.EXE-D85DA9BA.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.F2180672048B6F7AEB139869DA1D7F25] - 26/02/2015 - 15:50:09 ---A- - C:\Windows\Prefetch\BROWSERGOOD_SOFT_PARTNER.EXE-F66E8C19.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.29968596C0480FED5E214D67E45816C4] - 26/02/2015 - 18:41:19 ---A- - C:\Windows\Prefetch\ISAFE.EXE-01121F30.pf   =>Trojan.Staser
O45 - LFCP:[MD5.CD9DD459D035915E94F5A87F0C9BB4A9] - 26/02/2015 - 18:10:05 ---A- - C:\Windows\Prefetch\ISAFEDOWNLOADER.EXE-FB927B66.pf   =>PUP.SoftwareEngine
O45 - LFCP:[MD5.0695767DCEFBC84863E1127B9E1C196E] - 26/02/2015 - 19:11:55 ---A- - C:\Windows\Prefetch\ISAFESVC.EXE-9C2874AC.pf   =>Trojan.Staser
O45 - LFCP:[MD5.994ABE3BAE5B3F0BC50B4A03A703F3AD] - 26/02/2015 - 19:11:55 ---A- - C:\Windows\Prefetch\ISAFESVC2.EXE-B4735546.pf   =>Trojan.Staser
O45 - LFCP:[MD5.9858230C233A42903B951934364CCB10] - 26/02/2015 - 19:11:13 ---A- - C:\Windows\Prefetch\ISAFETHLP.EXE-52302988.pf   =>Trojan.Staser
O45 - LFCP:[MD5.C038A50704B170EA75A87E817D2FB003] - 26/02/2015 - 19:11:55 ---A- - C:\Windows\Prefetch\ISAFETHLP64.EXE-120789EA.pf   =>Trojan.Staser
O45 - LFCP:[MD5.C05F59E1E476175FB4ED443373211129] - 26/02/2015 - 20:07:19 ---A- - C:\Windows\Prefetch\ISAFETRAY.EXE-AE4472A8.pf   =>Trojan.Staser
O45 - LFCP:[MD5.46FA7E776EE88A6B3FF10F1BEF39E02E] - 26/02/2015 - 15:48:06 ---A- - C:\Windows\Prefetch\PACKAGE_BROWSERGOOD_INSTALLER-0009D675.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.D08AA7CBD0EA9E9C0B80F515BFF0A908] - 26/02/2015 - 15:48:06 ---A- - C:\Windows\Prefetch\PACKAGE_BROWSERGOOD_INSTALLER-6128C3F0.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.F9B0AC3711C13902D1B09B7E64959593] - 26/02/2015 - 16:03:55 ---A- - C:\Windows\Prefetch\UPDATEBROWSERGOOD.EXE-39ACBB89.pf   =>PUP.BrowserGood
O45 - LFCP:[MD5.DF2B47B8398FAA8BC9125B2B7060E8F1] - 26/02/2015 - 16:03:55 ---A- - C:\Windows\Prefetch\UTILBROWSERGOOD.EXE-E59724B1.pf   =>PUP.BrowserGood
ShortcutFix
EmptyTemp
EmptyFlash
emptyclsid
_____________________________________________________________________________________________________________

 Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta.

Nota: Esse script foi elaborado somente para este computador, de acordo com os arquivos e chaves presentes.

Aos visitantes: Se estiverem com um problema semelhante, não utilizem esse script, pois o uso sem supervisão pode causar danos ao sistema.

Depois de fazer o procedimento que te passei acima com o ZHPFix, faça também o seguinte:

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho abaixo e cole-o no espaço em branco do Zoek:

C:\Users\thiago\AppData\Roaming\E5F59000-1424965210-0000-0000-000000000000\nsuF2D9.tmpfs;virustotal

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta juntamente com o relatório do ZHPFix.

ZHPFix:

Rapport de ZHPFix 2015.2.17.3 par Nicolas Coolman, Update du 17/02/2015
Fichier d'export Registre :
Run by thiago at 28/02/2015 22:09:36
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Reciclagem vazia (00mn 15s)
Reparação de atalhos do navegador

========== Chaves do Registo ==========
ELIMINÉ: Service: biguvuhe
ELIMINÉ: HKCU\Software\AppDataLow\Software\CheckMeUp
ELIMINÉ: HKCU\Software\Baidu Security
ELIMINÉ: HKCU\Software\QBSHXT
ELIMINÉ:* HKLM\Software\Baidu Security
ELIMINÉ: HKLM\Software\Wow6432Node\Baidu_Drp_pos

========== Valores do Registo ==========
ELIMINÉ: RegExtension: {862BEC5E-DBF1-45DD-1BC2-1CCFBC577055}
ELIMINÉ RunValue: SynTPEnh

========== Elementos dos dados do Registo ==========
ELIMINÉ: R1 Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\users\thiago\appdata\roaming\microsoft\windows\sendto\yac desktop.lnk
ELIMINÉ: c:\windows\prefetch\breakingnewsalertinstall.exe-5fa37b50.pf
ELIMINÉ: c:\windows\prefetch\browsergood.browseradapter.ex-1701b47a.pf
ELIMINÉ: c:\windows\prefetch\browsergood.browseradapter64.-f84307bc.pf
ELIMINÉ: c:\windows\prefetch\browsergood.expext.exe-6c20bb47.pf
ELIMINÉ: c:\windows\prefetch\browsergood.mg.exe-634946d4.pf
ELIMINÉ: c:\windows\prefetch\browsergood.purbrowse64.exe-b14ba7c8.pf
ELIMINÉ: c:\windows\prefetch\browsergooduninstall.exe-fe1b483c.pf
ELIMINÉ: c:\windows\prefetch\browsergood_setup.exe-d85da9ba.pf
ELIMINÉ: c:\windows\prefetch\browsergood_soft_partner.exe-f66e8c19.pf
ELIMINÉ: c:\windows\prefetch\isafe.exe-01121f30.pf
ELIMINÉ: c:\windows\prefetch\isafedownloader.exe-fb927b66.pf
ELIMINÉ: c:\windows\prefetch\isafesvc.exe-9c2874ac.pf
ELIMINÉ: c:\windows\prefetch\isafesvc2.exe-b4735546.pf
ELIMINÉ: c:\windows\prefetch\isafethlp.exe-52302988.pf
ELIMINÉ: c:\windows\prefetch\isafethlp64.exe-120789ea.pf
ELIMINÉ: c:\windows\prefetch\isafetray.exe-ae4472a8.pf
ELIMINÉ: c:\windows\prefetch\package_browsergood_installer-0009d675.pf
ELIMINÉ: c:\windows\prefetch\package_browsergood_installer-6128c3f0.pf
ELIMINÉ: c:\windows\prefetch\updatebrowsergood.exe-39acbb89.pf
ELIMINÉ: c:\windows\prefetch\utilbrowsergood.exe-e59724b1.pf
ELIMINÉ Temporários windows (0) (0 octets)
ELIMINÉ Flash Cookies (0) (0 octets)

========== Tarefa planificada ==========
ELIMINÉ: {FFECE3BB-CB34-4D2E-83D0-F634F01B63DB}

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso


========== Recapitulativo ==========
6 : Chaves do Registo
2 : Valores do Registo
1 : Elementos dos dados do Registo
1 : Pastas
23 : Ficheiros
1 : Tarefa planificada
1 : Restauração Sistema


End of clean in 02mn 17s

========== Caminho do ficheiro do relatório ==========
C:\Users\thiago\AppData\Roaming\ZHP\ZHPFix[R1].txt - 28/02/2015 22:09:52 [3006]

Zoek:


Zoek.exe v5.0.0.0 Updated 28-February-2015
Tool run by thiago on 28/02/2015 at 22:22:07,65.
Microsoft Windows 8.1 Single Language 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\thiago\Downloads\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-02-27-003959.log 18316 bytes

==== VirusTotal Scan ======================

C:\Users\thiago\AppData\Roaming\E5F59000-1424965210-0000-0000-000000000000\nsuF2D9.tmpfs not found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=49 folders=23 19821018 bytes)

==== EOF on 28/02/2015 at 22:23:07,61 ======================

Abra novamente o ( ZHPDiag )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Clique "COMPLETA" e aguarde a conclusão:

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Ao concluir, poste o relatório ZHPDiag.txt

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
_______________________________________________

Obs: Caso o relatório do ZHPDiag fique muito grande e não couber na sua resposta, acesse o site Cjoint:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Clique no botão Escolher arquivo > Selecione o arquivo do log (relatório) e clique no botão Abrir.

Clique no botão Créer le lien Cjoint

Copie o link que aparecerá ao lado da frase Le lien a été créé e poste este link em sua próxima resposta.

 Selecione e copie todo o texto destacado em vermelho abaixo (começando em script zhpfix e indo até emptyclsid)

script zhpfix
SysRestore
O43 - CFD: 28/02/2015 - 22:09:15 - [] ----D C:\Users\thiago\AppData\Roaming\Macwebtoise
O61 - LFC: 28/02/2015 - 23:45:34 ---A- . (.E Dev.) -- C:\Users\thiago\AppData\Local\Temp\DaS_21.exe [20480]
ShortcutFix
EmptyTemp
EmptyFlash
emptyclsid
_____________________________________________________________________________________________________________

 Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas.

Copie este relatório e poste em sua próxima resposta e nos diga como está o computador depois disto e se o problema foi resolvido.

Nota: Esse script foi elaborado somente para este computador, de acordo com os arquivos e chaves presentes.

Aos visitantes: Se estiverem com um problema semelhante, não utilizem esse script, pois o uso sem supervisão pode causar danos ao sistema.

Rapport de ZHPFix 2015.2.17.3 par Nicolas Coolman, Update du 17/02/2015
Fichier d'export Registre :
Run by thiago at 01/03/2015 10:39:24
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)

Reciclagem vazia (00mn 02s)
Reparação de atalhos do navegador

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\users\thiago\appdata\local\temp\das_21.exe
ELIMINÉ Temporários windows (0) (0 octets)
ELIMINÉ Flash Cookies (0) (0 octets)

========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso


========== Recapitulativo ==========
1 : Pastas
3 : Ficheiros
1 : Restauração Sistema


End of clean in 00mn 05s

========== Caminho do ficheiro do relatório ==========
C:\Users\thiago\AppData\Roaming\ZHP\ZHPFix[R1].txt - 28/02/2015 22:09:52 [3087]
C:\Users\thiago\AppData\Roaming\ZHP\ZHPFix[R2].txt - 01/03/2015 10:39:27 [906]


* o problema parece ter sido resolvido , obrigado.

Fico feliz que o problema tenha sido resolvido.

Só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

Foi um prazer ajudar. Conte sempre conosco!

CASO RESOLVIDO

Necessitando nova verificação para este computador, basta abrir um Novo Tópico e relatar o problema.