Virus?!

Anônima
2014-03-01T22:37:52+00:00

Esta tarde ao ligar o computador notei que este estava muito lento e decidi ver os processos no gestor de tarefas.

Notei em varios processos que nao fazem parte (ou pelo menos eu penso que nao) das funçoes pincipais do computador.

O nome destes programas sao:

-Adlock (localizado na pasta Appdata\Roaming)

-IntelDev (localizado na pasta Appdata\Local\Temp)

-2026459690(parece algo conectado com o inteldev, localiza-se na mesma pasta)

Todos eles sao executaveis(exe), notei que o Adlock tem como descriçao 'notepad' e abre automaticamente o cmd e conhost ambos exe.

Eles estao a "consumir" muito Cpu principalmente o adlock, mas o computador esta estranhamente estavel.

A ajuda é agradecida.

Windows para casa | Versões anteriores do Windows | Segurança e privacidade

Pergunta bloqueada. Essa pergunta foi migrada da Comunidade de Suporte da Microsoft. É possível votar se é útil, mas não é possível adicionar comentários ou respostas ou seguir a pergunta.

0 comentários Sem comentários

37 respostas

Classificar por: Mais útil
  1. Anônima
    2014-03-02T18:49:04+00:00

    aqui esta o txt, infelizmente os processos continuam a decorrer

    #AdwCleaner v3.020 - Report created 02/03/2014 at 18:33:10

    Updated 27/02/2014 by Xplode

    Operating System : Windows 7 Professional Service Pack 1 (32 bits)

    Username : Nanda - NANDA-PC

    Running from : C:\Users\Nanda\Desktop\AdwCleaner.exe

    Option : Clean

    ***** [ Services ] *****

    Service Deleted : APNMCP

    [#] Service Deleted : Application Updater

    ***** [ Files / Folders ] *****

    Folder Deleted : C:\ProgramData~Browser Manager

    Folder Deleted : C:\ProgramData\Anti-phishing Domain Advisor

    Folder Deleted : C:\ProgramData\apn

    Folder Deleted : C:\ProgramData\AskPartnerNetwork

    Folder Deleted : C:\ProgramData\Babylon

    Folder Deleted : C:\ProgramData\BitGuard

    Folder Deleted : C:\ProgramData\blekko toolbars

    Folder Deleted : C:\ProgramData\Premium

    Folder Deleted : C:\ProgramData\StarApp

    Folder Deleted : C:\ProgramData\SweetIM

    Folder Deleted : C:\ProgramData\Trymedia

    Folder Deleted : C:\ProgramData\conTiinuetoSavee

    Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\conTiinuetoSavee

    Folder Deleted : C:\Program Files\Application Updater

    Folder Deleted : C:\Program Files\AskPartnerNetwork

    Folder Deleted : C:\Program Files\BasicScan

    Folder Deleted : C:\Program Files\BitLord 2

    Folder Deleted : C:\Program Files\BrowseToSave

    Folder Deleted : C:\Program Files\Conduit

    Folder Deleted : C:\Program Files\continuetosave

    Folder Deleted : C:\Program Files\Delta

    Folder Deleted : C:\Program Files\ExpressFiles

    Folder Deleted : C:\Program Files\fbphotozoom

    Folder Deleted : C:\Program Files\MocaFlix

    Folder Deleted : C:\Program Files\Optimizer Pro

    Folder Deleted : C:\Program Files\SweetIM

    Folder Deleted : C:\Program Files\uniblue

    Folder Deleted : C:\Program Files\WebSearch

    Folder Deleted : C:\Program Files\Yontoo

    Folder Deleted : C:\Program Files\YTD Toolbar

    Folder Deleted : C:\Program Files\Softonic_ES

    Folder Deleted : C:\Program Files\uTorrentBar_PT

    Folder Deleted : C:\Program Files\Common Files\Spigot

    Folder Deleted : C:\Windows\Installer{7683B745-6060-41FD-AA75-0BBB383FEAD4}

    Folder Deleted : C:\Windows\system32\AI_RecycleBin

    Folder Deleted : C:\Windows\system32\ARFC

    Folder Deleted : C:\Windows\system32\jmdp

    Folder Deleted : C:\Windows\system32\WNLT

    Folder Deleted : C:\Users\Nanda\Qtrax

    Folder Deleted : C:\Users\Nanda\AppData\Local\blekkotb_031

    Folder Deleted : C:\Users\Nanda\AppData\Local\ClickPotatoLiteSA

    Folder Deleted : C:\Users\Nanda\AppData\Local\Conduit

    Folder Deleted : C:\Users\Nanda\AppData\Local\PackageAware

    Folder Deleted : C:\Users\Nanda\AppData\Local\SwvUpdater

    Folder Deleted : C:\Users\Nanda\AppData\Local\TempDir

    Folder Deleted : C:\Users\Nanda\AppData\Local\thinstall

    Folder Deleted : C:\Users\Nanda\AppData\Local\Temp\apn

    Folder Deleted : C:\Users\Nanda\AppData\Local\Temp\eIntaller

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\BabylonToolbar

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\Browse2Save

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\Conduit

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\Delta

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\Ironsource

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\Mp3Tube Toolbar

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\PriceGong

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\Search Settings

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\Toolbar4

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\conTiinuetoSavee

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\Softonic_ES

    Folder Deleted : C:\Users\Nanda\AppData\LocalLow\uTorrentBar_PT

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\BitLord

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\PerformerSoft

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\thinstall

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\uniblue

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\yourfiledownloader

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax

    Folder Deleted : C:\Users\Nanda\Documents\BitLord

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions******@babylon.com

    Folder Deleted : C:\Users\Nanda\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions******@yontoo.com

    Folder Deleted : C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml

    File Deleted : C:\END

    File Deleted : C:\Windows\system32\ImhxxpComm.dll

    File Deleted : C:\Users\Nanda\AppData\Roaming\Mozilla\Firefox\Profiles\0\searchplugins\WebSearch.xml

    File Deleted : C:\Users\Nanda\AppData\Roaming\Mozilla\Firefox\Profiles\0\user.js

    File Deleted : C:\Program Files\Mozilla Firefox\user.js

    File Deleted : C:\Windows\System32\Tasks\BackgroundContainer Startup Task

    File Deleted : C:\Windows\System32\Tasks\EPUpdater

    ***** [ Shortcuts ] *****

    ***** [ Registry ] *****

    Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{B64982B1-D112-42B5-B1E4-D3867C4533F8}]

    Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [******@ClickPotatoLite.com]

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cekcjpgehmohobmdiikfnopibipmgnml

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco

    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{F78F9F1B-7436-44C2-B17C-163B3F80C5C7}

    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{F78F9F1B-7436-44C2-B17C-163B3F80C5C7}

    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain{F8DE7634-81F4-48DB-92F2-A59865669571}

    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{F8DE7634-81F4-48DB-92F2-A59865669571}

    [#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{18A806EA-490C-4785-81C6-369B0C568935}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]

    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd

    Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

    Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore

    Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

    Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr

    Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1

    Key Deleted : HKLM\SOFTWARE\Classes\driverscanner

    Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils

    Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1

    Key Deleted : HKLM\SOFTWARE\Classes\oneclick

    Key Deleted : HKLM\SOFTWARE\Classes\oneclickmg

    Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

    Key Deleted : HKLM\SOFTWARE\Classes\sim-packages

    Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api

    Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1

    Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers

    Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasapi32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasmancs

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YourFile_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YourFileUpdater_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe

    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]

    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_09b71135

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_48c708f2

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_56ec1d15

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_b0285714

    Key Deleted : HKCU\Software\59578fd1b56eba42

    Key Deleted : HKLM\SOFTWARE\59578fd1b56eba42

    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2851643

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_street-fighter-iv-benchmark_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_street-fighter-iv-benchmark_RASMANCS

    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Google Updater]

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{09C554C3-109B-483C-A06B-F14172F1A947}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{0A18A436-2A7A-49F3-A488-30538A2F6323}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{1973277F-87B0-4EA3-9ED2-470A91D284CF}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{39CB8175-E224-4446-8746-00566302DF8D}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{5B1881D1-D9C7-46DF-B041-1E593282C7D0}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{608D3067-77E8-463D-9084-908966806826}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{B12E99ED-69BD-437C-86BE-C862B9E5444D}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID{EA28B360-05E0-4F93-8150-02891F1D8D3C}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{00000001-4FEF-40D3-B3FA-E0531B897F98}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{007EFBDF-8A5D-4930-97CC-A4B437CBA777}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{3C471948-F874-49F5-B338-4F214A2EE0B1}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{44CBC005-6243-4502-8A02-3A096A282664}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{4C836512-BB70-11D2-A5A7-00105A9C91C6}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{5555CC4C-FA2B-4D69-8296-B6AE5E95C0B7}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{64697678-0000-0010-8000-00AA00389B71}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{7E84186E-B5DE-4226-8A66-6E49C6B511B4}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{80703783-E415-4EE3-AB60-D36981C5A6F1}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{98889811-442D-49DD-99D7-DC866BE87DBC}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{99066096-8989-4612-841F-621A01D54AD7}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{A4A0CB15-8465-4F58-A7E5-73084EA2A064}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{AF175732-0D59-716D-F757-9F1492D808D9}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{D8278076-BC68-4484-9233-6E7F1628B56C}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{DB797690-40E0-11D2-9BD5-0060082AE372}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{E46C8196-B634-44A1-AF6E-957C64278AB1}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{F297534D-7B06-459D-BC19-2DD8EF69297B}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{F3FEE66E-E034-436A-86E4-9690573BEE8A}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{FE9271F2-6EFD-44B0-A826-84C829536E93}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{E0301295-AB3E-4AF3-979F-3D453C5F9F48}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID{075FB993-E0E5-42BC-9558-BE07965E184A}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{1AD27395-1659-4DFF-A319-2CFA243861A5}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{2DAC2231-CC35-482B-97C5-CED1D4185080}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{57C91446-8D81-4156-A70E-624551442DE9}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{706D4A4B-184A-4434-B331-296B07493D2D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{7AD65FD1-79E0-406D-B03C-DD7C14726D69}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{80703783-E415-4EE3-AB60-D36981C5A6F1}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{8BE10F21-185F-4CA0-B789-9921674C3993}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{94C0B25D-3359-4B10-B227-F96A77DB773F}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{97DD820D-2E20-40AD-B01E-6730B2FCE630}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{A9379648-F6EB-4F65-A624-1C10411A15D0}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{B173667F-8395-4317-8DD6-45AD1FE00047}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{B177446D-54A4-4869-BABC-8566110B4BE0}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{B32672B3-F656-46E0-B584-FE61C0BB6037}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{C2996524-2187-441F-A398-CD6CB6B3D020}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{E047E227-5342-4D94-80F7-CFB154BF55BD}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{F05B12E1-ADE8-4485-B45B-898748B53C37}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib{63BEF061-5EFC-4753-9806-ED0573BC7C4B}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib{9945959C-AAD8-4312-8B57-2DE11927E770}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib{A8E5842E-102B-4289-9D57-3B3F5B5E15D3}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib{D372567D-67C1-4B29-B3F0-159B52B3E967}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib{DB797681-40E0-11D2-9BD5-0060082AE372}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib{E2343056-CC08-46AC-B898-BFC7ACF4E755}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{F3FEE66E-E034-436A-86E4-9690573BEE8A}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{E0301295-AB3E-4AF3-979F-3D453C5F9F48}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats{F3FEE66E-E034-436A-86E4-9690573BEE8A}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats{E0301295-AB3E-4AF3-979F-3D453C5F9F48}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats{075FB993-E0E5-42BC-9558-BE07965E184A}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings{8769ADCE-DBA5-48E9-AFB5-67B12CDF2E61}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings{F3FEE66E-E034-436A-86E4-9690573BEE8A}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings{E0301295-AB3E-4AF3-979F-3D453C5F9F48}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings{075FB993-E0E5-42BC-9558-BE07965E184A}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved{075FB993-E0E5-42BC-9558-BE07965E184A}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{0E44BB13-2523-468B-BF51-58D5F52A84F6}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{628F3201-34D0-49C0-BB9A-82A26AEFB291}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{6978F29A-3493-40B2-8CDC-9C13A02F85A4}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{D7949A66-D936-4028-9552-14F7DC50F38D}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{FF07071F-EAFD-49BF-9F38-24700D43731F}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy{9B0DAC1C-BFDA-45D2-95A0-B9F98E0652FA}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes{0D7562AE-8EF6-416D-A838-AB665251703A}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes{483830EE-A4CD-4B71-B0A3-3D82E62A6909}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{33BB0A4E-99AF-4226-BDF6-49120163DE86}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes{EEE6C360-6118-11DC-9C72-001320C79847}

    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]

    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}]

    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{E0301295-AB3E-4AF3-979F-3D453C5F9F48}]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E0301295-AB3E-4AF3-979F-3D453C5F9F48}]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E0301295-AB3E-4AF3-979F-3D453C5F9F48}]

    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}]

    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{E0301295-AB3E-4AF3-979F-3D453C5F9F48}]

    Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command

    Key Deleted : HKCU\Software\APN PIP

    Key Deleted : HKCU\Software\AskPartnerNetwork

    Key Deleted : HKCU\Software\BI

    Key Deleted : HKCU\Software\BrowserMngr

    Key Deleted : HKCU\Software\caphyon

    Key Deleted : HKCU\Software\Conduit

    Key Deleted : HKCU\Software\ExpressFiles

    Key Deleted : HKCU\Software\filescout

    Key Deleted : HKCU\Software\IM

    Key Deleted : HKCU\Software\ImInstaller

    Key Deleted : HKCU\Software\Microsoft\Babylon

    Key Deleted : HKCU\Software\PIP

    Key Deleted : HKCU\Software\qtrax

    Key Deleted : HKCU\Software\Search Settings

    Key Deleted : HKCU\Software\Softonic

    Key Deleted : HKCU\Software\Somoto Toolbar

    Key Deleted : HKCU\Software\StartSearch

    Key Deleted : HKCU\Software\Tutorials

    Key Deleted : HKCU\Software\YourFileDownloader

    Key Deleted : HKCU\Software\AppDataLow{1146AC44-2F03-4431-B4FD-889BC837521F}

    Key Deleted : HKCU\Software\AppDataLow\Toolbar

    Key Deleted : HKCU\Software\AppDataLow\Software\BackgroundContainer

    Key Deleted : HKCU\Software\AppDataLow\Software\blekkotb

    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit

    Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

    Key Deleted : HKCU\Software\AppDataLow\Software\Mp3Tube

    Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong

    Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings

    Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar

    Key Deleted : HKCU\Software\AppDataLow\Software\Softonic_ES

    Key Deleted : HKCU\Software\AppDataLow\Software\uTorrentBar_PT

    Key Deleted : HKLM\Software\Application Updater

    Key Deleted : HKLM\Software\AskPartnerNetwork

    Key Deleted : HKLM\Software\Babylon

    Key Deleted : HKLM\Software\BrowserMngr

    Key Deleted : HKLM\Software\caphyon

    Key Deleted : HKLM\Software\Conduit

    Key Deleted : HKLM\Software\DataMngr

    Key Deleted : HKLM\Software\Delta

    Key Deleted : HKLM\Software\ExpressFiles

    Key Deleted : HKLM\Software\Iminent

    Key Deleted : HKLM\Software\PIP

    Key Deleted : HKLM\Software\Search Settings

    Key Deleted : HKLM\Software\SP Global

    Key Deleted : HKLM\Software\SProtector

    Key Deleted : HKLM\Software\systweak

    Key Deleted : HKLM\Software\Tarma Installer

    Key Deleted : HKLM\Software\Trymedia Systems

    Key Deleted : HKLM\Software\Uniblue

    Key Deleted : HKLM\Software\YourFileDownloader

    Key Deleted : HKLM\Software\Softonic_ES

    Key Deleted : HKLM\Software\uTorrentBar_PT

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{7683B745-6060-41FD-AA75-0BBB383FEAD4}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{FB697452-8CA4-46B4-98B1-165C922A2EF3}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_ES Toolbar

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar_PT Toolbar

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\30C16B15B255BD349A1157B8A83E2AF9

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E

    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Ins

    Esta resposta foi útil?

    0 comentários Sem comentários
  2. Anônima
    2014-03-02T15:30:59+00:00

    Seu PC está bastante contaminado por adwares.

    * Siga, por gentileza, as dicas do tutorial abaixo:

    Remova adwares e toolbars maliciosas com o Adwcleaner

    * Na sua próxima resposta poste, por gentileza, o log do Adwcleaner que estará em C:\AdwCleaner*AdwCleaner[S0].txt* 

    Ficamos na espera.

    Esta resposta foi útil?

    0 comentários Sem comentários
  3. Anônima
    2014-03-02T15:28:30+00:00

    Esta é a primeira parte (porque nao foi possivel postar tudo junto visto que sao muitas letras)

    ---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
    O44 - LFC:[MD5.57ADF0CEE2A79D695C00C1772B951304] - 02-03-2014 - 15:04:06 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0   [25424]
    O44 - LFC:[MD5.57ADF0CEE2A79D695C00C1772B951304] - 02-03-2014 - 15:04:06 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0   [25424]
    O44 - LFC:[MD5.BF34E901456C87A29AF2BC04249F47CF] - 26-02-2014 - 23:21:03 ---A- . (...) -- C:\Windows\System32\prfc0816.dat   [158542]
    O44 - LFC:[MD5.5B590460F30DDD5B8E9BD973D5634477] - 26-02-2014 - 23:21:03 ---A- . (...) -- C:\Windows\System32\prfh0816.dat   [731052]
    ~ Files: 28 Legitimates Filtered in 00mn 42s
    
    
    
    ---\\ Image File Execution Options (IFEO) (O50)
    O50 - IFEO:Image File Execution Options - cfosspeed.exe - "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
    O50 - IFEO:Image File Execution Options - hamachi-2-ui.exe - "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
    ~ IFEO:  Scanned in 00mn 00s
    
    
    
    ---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
    ~ MWPS: 16 Legitimates Filtered in 00mn 00s
    
    
    
    ---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
    O56 - MWPE:[HKLM\...\policies\Explorer] - "HideSCAHealth"=1
    ~ MWPE Keys: 1 Legitimates Filtered in 00mn 00s
    
    
    
    ---\\ Lista dos drivers do sistema (SDL) (O58)
    O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 14-07-2009 - 01:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [453712]
    O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 13-07-2009 - 22:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [26624]
    O58 - SDL:[MD5.DA416DDB775478624088FA341BFEFE37] - 07-12-2013 - 00:05:21 ---A- . (...) -- C:\Windows\System32\Drivers\PnkBstrK.sys   [139832]
    O58 - SDL:[MD5.FEB11DBAA5E152D98BD897C97A6DDCD0] - 03-11-2013 - 16:26:46 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys   [324096]
    O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 14-07-2009 - 01:19:04 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [21072]
    O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13-07-2009 - 21:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS   [9029]
    O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 13-07-2009 - 21:40:44 ---A- . (...) -- C:\Windows\System32\country.sys   [27097]
    O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 13-07-2009 - 21:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS   [4768]
    O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 13-07-2009 - 21:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS   [42809]
    O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13-07-2009 - 21:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS   [42537]
    O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 13-07-2009 - 21:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS   [27866]
    O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 13-07-2009 - 21:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS   [29146]
    O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 13-07-2009 - 21:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS   [29370]
    O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 13-07-2009 - 21:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS   [29274]
    O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 13-07-2009 - 21:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS   [29146]
    O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 13-07-2009 - 21:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS   [33952]
    O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 13-07-2009 - 21:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS   [34672]
    O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 13-07-2009 - 21:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS   [35776]
    O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 13-07-2009 - 21:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS   [35536]
    O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 13-07-2009 - 21:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS   [34672]
    ~ Drivers: 16 Legitimates Filtered in 00mn 08s
    
    
    
    ---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
    O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
    ~ ADS:  Scanned in 00mn 00s
    

    E aqui esta a segunda 

    ---\\ Menu de inicialização Internet (068)
    O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Nanda\AppData\Local\Google\Chrome\Application\chrome.exe
    O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- searches.com\?utm_source=b&utm_medium=smt&utm_campaign=eXQ&utm_content=sc&from=smt&uid=WDCXWD3200BEVT-22ZCT0_WD-WXE408KZC391ZC391&ts=1383496064 C:\Program Files\Internet Explorer\iexplore.exe http://www.do =>Hijacker.wwwDo
    ~ Keys:  Scanned in 00mn 00s
    
    ---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
    O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.google.com
    O69 - SBI: SearchScopes [HKCU] {0D7562AE-8EF6-416d-A838-AB665251703A} - (Facemoods Search) - http://start.facemoods.com =>Adware.Facemoods
    O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [DefaultScope] - (Babylon) - http://search.babylon.com =>PUP.Babylon
    O69 - SBI: SearchScopes [HKCU] {25B24B0C-679C-47FB-9C2C-F0FCA0F86AC5} - (Privitize VPN) - http://search.privitize.com =>Hijacker.PrivitizeVPN
    O69 - SBI: SearchScopes [HKCU] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} - (Blekko) - http://blekko.com
    O69 - SBI: SearchScopes [HKCU] {6759D342-7641-4130-9043-7175579C860C} - (Search) - http://start.funmoods.com =>PUP.Funmoods
    O69 - SBI: SearchScopes [HKCU] {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - (Search) - http://www.bigseekpro.com
    O69 - SBI: SearchScopes [HKCU] {B83A86FE-D522-4F3C-9218-D35EA51D6497} - (SearchYa!) - http://searchya.com =>Adware.SearchYa
    O69 - SBI: SearchScopes [HKCU] {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} - (WebSearch) - http://websearch.a-searchpage.info
    O69 - SBI: SearchScopes [HKCU] {D24A1B8C-D1F4-4F17-9809-63FB1A98DA0B} - (Yahoo-Mp3Tube) - http://mp3tubetoolbar.com =>Adware.Mp3Tube
    O69 - SBI: SearchScopes [HKCU] {E35D4394-7242-42FE-8BE4-8BD30F00CB35} - (Yahoo! Search) - http://uk.search.yahoo.com
    O69 - SBI: SearchScopes [HKCU] {EEE6C360-6118-11DC-9C72-001320C79847} - (Sweetpacks Search) - http://mysearch.sweetpacks.com =>PUP.SweetIM
    O69 - SBI: SearchScopes [HKUS\.DEFAULT] {33524C00-63FB-43DB-A6BF-0A4E14B24649} - (BasicScan) - http://www.basicscan.com =>Adware.BasicScan
    O69 - SBI: SearchScopes [HKUS\S-1-5-18] {33524C00-63FB-43DB-A6BF-0A4E14B24649} - (BasicScan) - http://www.basicscan.com =>Adware.BasicScan
    ~ Keys:  Scanned in 00mn 00s
    
    ---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
    [MD5.EF4A28312A78670B7F49987916A612A4] [SPRF][18-03-2012] (...) -- C:\Users\Nanda\AppData\Roaming\Nandalog.dat   [112580]
    [MD5.475048300F9919381C60A3701430CFD7] [SPRF][12-10-2013] (...) -- C:\Users\Nanda\AppData\Roaming\PnkBstrK.sys   [138904]
    [MD5.6A528DE85E10C0DA07ED3B1DE0FB372C] [SPRF][23-07-2013] (...) -- C:\Users\Nanda\AppData\Roaming\uninstall.bat   [149]
    [MD5.2DA38F09F6FB014598280EC63A024A88] [SPRF][27-09-2012] (.None - VisualBoyAdvance emulator.) -- C:\Users\Nanda\Desktop\VisualBoyAdvance.exe   [1319047]
    ~ Files: 9 Legitimates Filtered in 00mn 01s
    
    ---\\ Lista das exceções do FireWall (FirewallRules) (O87)
    O87 - FAEL: "TCP Query User{B2DC74AB-769C-42CB-8C4C-445583F4A914}C:\windows.old\program files\doom 3\doom3ded.exe" |In - Private - P6 - TRUE | .(...) -- C:\windows.old\program files\doom 3\doom3ded.exe (.not file.)
    O87 - FAEL: "UDP Query User{31E75A2D-6EBB-462D-A8C6-72F4E1159718}C:\windows.old\program files\doom 3\doom3ded.exe" |In - Private - P17 - TRUE | .(...) -- C:\windows.old\program files\doom 3\doom3ded.exe (.not file.)
    O87 - FAEL: "TCP Query User{5B402C5D-E7BA-43FB-A906-259276417C02}C:\program files\reality pump\earth 2160\earth2160_sse.exe" | In - Private - P6 - TRUE | .(.Reality Pump - Earth 2160.) -- C:\program files\reality pump\earth 2160\earth2160_sse.exe
    O87 - FAEL: "UDP Query User{E791CD0A-FC03-4D72-850C-6B594A2E1B9F}C:\program files\reality pump\earth 2160\earth2160_sse.exe" | In - Private - P17 - TRUE | .(.Reality Pump - Earth 2160.) -- C:\program files\reality pump\earth 2160\earth2160_sse.exe
    O87 - FAEL: "TCP Query User{9DA7D245-0D97-410E-B52A-B73DEA2C646C}C:\program files\1clickdownload\1clickdownload.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\1clickdownload\1clickdownload.exe (.not file.) =>PUP.1ClickDownloader
    O87 - FAEL: "UDP Query User{98F17FC3-5B0A-4BA2-AEBB-49AB2FEF0F68}C:\program files\1clickdownload\1clickdownload.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\1clickdownload\1clickdownload.exe (.not file.) =>PUP.1ClickDownloader
    ~ Firewall: 230 Legitimates Filtered in 00mn 02s
    
    ---\\ Listagem dos códigos dos software (PUC) (090)
    O90 - PUC: "442AEF4DCB9A7274E89A3B9675F934FC" . (.Turning Point - Fall of Liberty.) -- C:\Windows\Installer\{D4FEA244-A9BC-4727-8EA9-B369579F43CF}\ARPPRODUCTICON.exe
    O90 - PUC: "7E513CCBF8E2DFE4A8B08F2F67EF372F" . (.YTD Toolbar v6.2.) -- C:\Windows\Installer\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}\ARPPRODUCTICON.exe
    O90 - PUC: "D24574357365A600677A7A857BC0A030" . (.Ask Toolbar.) -- C:\Windows\Installer\{5347542D-5637-006A-76A7-A758B70C0A03}\ToolbarIcon.exe =>Toolbar.Ask
    ~ Update Products: 127 Legitimates Filtered in 00mn 00s
    
    ---\\ Exportar as chaves do registo aleatórias (091)
    [HKCU\Software\59578fd1b56eba42\2.6.1339.144\upd]:="upd=1"  =>PUP.Babylon
    [HKCU\Software\59578fd1b56eba42\2.6.1519.190\upd]:="upd=1"  =>PUP.Babylon
    [HKCU\Software\59578fd1b56eba42\2.6.1673.238\upd]:="upd=1"  =>PUP.Babylon
    [HKCU\Software\59578fd1b56eba42\2.6.1694.246\upd]:="upd="  =>PUP.Babylon
    [HKCU\Software\59578fd1b56eba42\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:guid="{16cdff19-861d-48e3-a751-d99a27784753}" =>PUP.Babylon
    [HKCU\Software\59578fd1b56eba42\history\{16cdff19-861d-48e3-a751-d99a27784753}2.2.643.41]:version="2.2.643.41" =>PUP.Babylon
    [HKCU\Software\59578fd1b56eba42\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.787.43]:guid="{16cdff19-861d-48e3-a751-d99a27784753}" =>PUP.Babylon
    [HKCU\Software\59578fd1b56eba42\history\{16cdff19-861d-48e3-a751-d99a27784753}2.3.787.43]:version="2.3.787.43" =>PUP.Babylon
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1249.132]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Hijacker.Eazel
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1249.132]:version="2.6.1249.132" =>Hijacker.Hijacker.Eazel
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Hijacker.Eazel
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1339.144]:version="2.6.1339.144" =>Hijacker.Hijacker.Eazel
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1519.190]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Hijacker.Eazel
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1519.190]:version="2.6.1519.190" =>Hijacker.Hijacker.Eazel
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:dllName="BitGuard.dll" =>PUP.BitGuard
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:exeName="BitGuard.exe" =>PUP.BitGuard
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:folderName="BitGuard" =>PUP.BitGuard
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" =>Hijacker.Hijacker.Eazel
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:serviceName="BitGuard" =>PUP.BitGuard
    [HKCU\Software\59578fd1b56eba42\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1673.238]:version="2.6.1673.238" =>Hijacker.Hijacker.Eazel
    [HKCU\Software\59578fd1b56eba42]:version="2.6.1694.246"  =>PUP.Babylon
    [HKLM\Software\59578fd1b56eba42]:version="2.6.1694.246"  =>PUP.Babylon
    ~ Export Key Software:  Scanned in 00mn 00s
    
    ---\\ Pesquisa dos pacotes WindowsInstaller (WIS) (O93) (NTFS)
    [MD5.E9B55CBE663C3A93E081C6DCFC528C9F] [WIS][25-07-2012] (.Procedural Arts - Façade.) -- C:\Windows\Installer\111263d.msi   [1214976]
    [MD5.FF5B6458D1EF697CE7BB72ECC89110C7] [WIS][28-07-2012] (.Spigot, Inc. - Widgi Toolbar.) -- C:\Windows\Installer\20d6bb.msi   [4434944]  =>PUP.Dealio
    [MD5.41EE949DAE302A56DAB7FC0BA75F3959] [WIS][24-02-2014] (.APN, LLC - Ask Toolbar.) -- C:\Windows\Installer\2f42c0.msi   [463872]  =>Toolbar.Ask
    [MD5.43C94BD636681A14B87F4E2124DAFE6A] [WIS][15-09-2012] (.TuneUp Software - TuneUp Utilities Language Pack (en-US).) -- C:\Windows\Installer\309274.msi   [2335232]
    [MD5.A91D34375B4647FF0F57E8076EC72B1B] [WIS][08-08-2012] (.Babylon Ltd - BabylonObjectInstaller.) -- C:\Windows\Installer\89fbc2.msi   [343040]  =>PUP.Babylon
    [MD5.004F085EF2B3913CD1D06E22D32E33B4] [WIS][25-07-2012] (.NAMCO BANDAI Games Europe S.A.S. - Dark Souls Prepare to Die Edition.) -- C:\Windows\Installer\cb260d.msi   [18966016]
    [MD5.D41F569323216D804FA26476208039E4] [WIS][02-12-2011] (.JPL Productions - AS3 Class Diagram Viewer.) -- C:\Windows\Installer\f794b3.msi   [42496]
    ~ WIS: 131 Legitimates Filtered in 00mn 41s
    
    ---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
    SS - | Disabled 26-07-2012 794560 |  (Application Updater) . (.Spigot, Inc..) - C:\Program Files\Application Updater\ApplicationUpdater.exe =>PUP.Dealio
    SS - | Disabled 02-07-2012 380328 |  (cFosSpeedS) . (.cFos Software GmbH.) - C:\Program Files\cFosSpeed\spd.exe
    SS - | Disabled 28-06-2013 1440080 |  (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
    SS - | Demand 22-10-2004 73728 |  (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    SS - | Auto 04-04-2013 701512 |  (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    SS - | Auto 05-09-2013 171680 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
    
    SR - | Auto 18-12-2013 65432 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    SR - | Auto 16-11-2012 217088 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
    SR - | Auto 13-02-2014 166352 |  (APNMCP) . (.APN LLC..) - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe =>Toolbar.Ask
    SR - | Auto 04-04-2013 418376 |  (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
    SR - | Auto 23-10-2013 22208 |  (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe
    SR - | Auto 12-10-2013 76888 |  (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
    SR - | Demand 25-02-2014 568512 |  (Steam Client Service) . (.Valve Corporation.) - C:\Program Files\Common Files\Steam\SteamService.exe
    SR - | Auto 17-09-2012 1699680 |  (TuneUp.UtilitiesSvc) . (.TuneUp Software.) - C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
    SR - | Auto 14-07-2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
    SR - | Auto 04-08-2006 386560 |  (XAudioService) . (.Conexant Systems, Inc..) - C:\Windows\System32\DRIVERS\xaudio.exe
    
    ~ Services:  Scanned in 00mn 46s
    
    ---\\ Lista dos emuladores de CD/DVD (MBR Hook)
    O58 - SDL:[MD5.FEB11DBAA5E152D98BD897C97A6DDCD0] - 03-11-2013 - 16:26:46 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys   [324096]
    ~ Emulateurs:  Scanned in 00mn 46s
    
    ---\\ Scâner Aditional (088)
    Database Version : 13031 - (23-02-2014)
    Clés trouvées (Keys found) : 234
    Valeurs trouvées (Values found) : 6
    Dossiers trouvés  (Folders found) : 54
    Fichiers trouvés  (Files found) : 21
    
    [HKLM\Software\Google\Chrome\Extensions\aaaailpifkkekipiachodfkfmgmiapmp]   =>Toolbar.Ask^
    [HKLM\Software\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb]   =>PUP.Babylon^
    [HKLM\Software\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde]   =>Toolbar.DeltaSearch^
    [HKLM\Software\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki]   =>PUP.Funmoods^
    [HKLM\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje]   =>PUP.DealPly^
    [HKLM\Software\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif]   =>Adware.Facemoods^
    [HKLM\Software\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn]   =>PUP.SweetIM^
    [HKLM\Software\Google\Chrome\Extensions\mdebcffgnijbblbinknkbefciofebcda]   =>P2P.µTorrent^
    [HKLM\Software\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc]   =>Adware.Yontoo^
    [HKLM\Software\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk]   =>Spyware.GophotoIt^
    [HKLM\Software\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco]   =>PUP.OneClickDownloader^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}]   =>PUP.Babylon^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5637-006A-76A7-7A786E7484D7}]   =>Toolbar.Ask^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A}]   =>Toolbar.Conduit^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E0301295-AB3E-4AF3-979F-3D453C5F9F48}]   =>Toolbar.Conduit^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A}]   =>PUP.Dealio^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]   =>Adware.Yontoo^
    [HKLM\SYSTEM\CurrentControlSet\Services\APNMCP]   =>Toolbar.Ask^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5347542D-5637-006A-76A7-A758B70C0A03}]   =>Toolbar.Ask^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}]   =>PUP.Babylon^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\BitLord]   =>Adware.WhenUSave^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{269382DF-EAED-4F84-AD6F-A2CFFD70A029}]   =>Adware.Browse2Save^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SP_09b71135]   =>PUP.Offerware^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_ES Toolbar]   =>Toolbar.Conduit^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7683B745-6060-41FD-AA75-0BBB383FEAD4}]   =>PUP.SweetIM^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FB697452-8CA4-46B4-98B1-165C922A2EF3}]   =>PUP.SweetIM^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BCC315E7-2E8F-4EFD-8A0B-F8F276FE73F2}]   =>PUP.Dealio^
    [HKLM\Software\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}]   =>PUP.Funmoods
    [HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}]   =>PUP.Babylon
    [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}]   =>Adware.Facemoods
    [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]   =>PUP.Babylon
    [HKLM\Software\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}]   =>Adware.Yontoo
    [HKLM\Software\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}]   =>Adware.Yontoo
    [HKLM\Software\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}]   =>Adware.Yontoo
    [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]   =>PUP.V9Software
    [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}]   =>Adware.ToolbarCleaner
    [HKLM\Software\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}]   =>Adware.iWinArcade
    [HKLM\Software\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}]   =>PUP.Babylon
    [HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]   =>PUP.Babylon
    [HKLM\Software\Classes\AppID\{5B1881D1-D9C7-46df-B041-1E593282C7D0}]   =>Adware.BullseyeToolbar
    [HKLM\Software\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}]   =>Adware.Agent
    [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}]   =>Adware.SocialSkinz
    [HKLM\Software\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}]   =>PUP.Babylon
    [HKLM\Software\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}]   =>Adware.Yontoo
    [HKLM\Software\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}]   =>Adware.Yontoo
    [HKLM\Software\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}]   =>PUP.Babylon
    [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}]   =>Toolbar.Agent
    [HKLM\Software\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}]   =>Adware.Agent
    [HKLM\Software\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}]   =>PUP.SweetIM
    [HKLM\Software\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}]   =>Adware.Facemoods
    [HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}]   =>Toolbar.Conduit
    [HKLM\Software\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}]   =>PUP.Babylon
    [HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}]   =>PUP.Babylon
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}]   =>Toolbar.TuneUp
    [HKLM\Software\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}]   =>Adware.Yontoo
    [HKLM\Software\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}]   =>Adware.Yontoo
    [HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}]   =>PUP.Babylon
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]   =>Adware.Yontoo
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]   =>Adware.Yontoo
    [HKLM\Software\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]   =>Adware.Yontoo
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}]   =>Adware.Yontoo
    [HKLM\Software\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}]   =>PUP.Babylon
    [HKLM\Software\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}]   =>PUP.Babylon
    [HKLM\Software\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}]   =>Adware.Facemoods
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}]   =>PUP.Dealio
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A}]   =>PUP.Dealio
    [HKLM\Software\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}]   =>PUP.Dealio
    [HKLM\Software\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}]   =>PUP.Babylon
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]   =>Adware.Yontoo
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]   =>Adware.Yontoo
    [HKLM\Software\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]   =>Adware.Yontoo
    [HKLM\Software\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}]   =>Adware.Yontoo
    [HKLM\Software\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}]   =>PUP.Babylon
    [HKLM\Software\Classes\AppID\escort.dll]   =>PUP.Babylon
    [HKLM\Software\Classes\AppID\escortapp.dll]   =>PUP.Babylon
    [HKLM\Software\Classes\AppID\escorteng.dll]   =>PUP.Babylon
    [HKLM\Software\Classes\AppID\esrv.EXE]   =>PUP.Babylon
    [HKLM\Software\Microsoft\Tracing\YourFile_RASAPI32]   =>PUP.YourFileDownloader
    [HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\sweetim.exe]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Tracing\YourFileUpdater_RASAPI32]   =>PUP.YourFileDownloader
    [HKLM\Software\Classes\Babylon.dskBnd]   =>PUP.Babylon
    [HKLM\Software\Classes\Babylon.dskBnd.1]   =>PUP.Babylon
    [HKLM\Software\Classes\bbylnApp.appCore]   =>PUP.Babylon
    [HKLM\Software\Classes\bbylnApp.appCore.1]   =>PUP.Babylon
    [HKLM\Software\Classes\sim-packages]   =>Toolbar.Agent
    [HKLM\Software\Microsoft\Tracing\YourFileUpdater_RASMANCS]   =>PUP.YourFileDownloader
    [HKLM\SYSTEM\CurrentControlSet\Services\Application Updater]   =>PUP.Dealio
    [HKCU\Software\APN PIP]   =>Toolbar.Ask
    [HKLM\Software\Application Updater]   =>PUP.Dealio
    [HKCU\Software\AppDataLow\Software\blekkotb]   =>Toolbar.Blekko
    [HKCU\Software\AppDataLow\Software\blekkotb_031]   =>Toolbar.Blekko
    [HKCU\Software\BrowserMngr]   =>PUP.Babylon
    [HKLM\Software\BrowserMngr]   =>PUP.Babylon
    [HKCU\Software\AppDataLow\Software\ConduitSearchScopes]   =>Toolbar.Conduit
    [HKLM\Software\DataMngr]   =>Adware.Bandoo
    [HKLM\Software\Iminent]   =>Adware.IMBooster
    [HKCU\Software\PIP]   =>Toolbar.Ask
    [HKLM\Software\PIP]   =>Toolbar.Ask
    [HKCU\Software\AppDataLow\Software\PriceGong]   =>Adware.PriceGong
    [HKCU\Software\Search Settings]   =>PUP.Dealio
    [HKCU\Software\AppDataLow\Software\Search Settings]   =>PUP.Dealio
    [HKLM\Software\Search Settings]   =>PUP.Dealio
    [HKCU\Software\Softonic]   =>Toolbar.Conduit
    [HKCU\Software\Somoto Toolbar]   =>Toolbar.Agent
    [HKLM\Software\SP Global]   =>PUP.AdvancedSystemProtector
    [HKLM\Software\SProtector]   =>PUP.AdvancedSystemProtector
    [HKCU\Software\StartSearch]   =>Hijacker.Agent
    [HKLM\Software\Tarma Installer]   =>PUP.Tarma
    [HKCU\Software\AppDataLow\Toolbar]   =>Toolbar.Conduit
    [HKCU\Software\Tutorials]   =>Spyware.AgenceExclusive
    [HKLM\Software\Microsoft\Tracing\MyBabylontb_RASAPI32]   =>PUP.Babylon
    [HKLM\Software\Microsoft\Tracing\MyBabylontb_RASMANCS]   =>PUP.Babylon
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SP_56ec1d15]   =>PUP.Mocaflix
    [HKLM\Software\Classes\Prod.cap]   =>PUP.Babylon
    [HKLM\Software\Classes\Installer\Features\547B38670606DF14AA57B0BB83F3AE4D]   =>PUP.SweetIM
    [HKLM\Software\Classes\Installer\Products\547B38670606DF14AA57B0BB83F3AE4D]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\547B38670606DF14AA57B0BB83F3AE4D]   =>PUP.SweetIM
    [HKLM\Software\Classes\Installer\Features\254796BF4AC84B64891B61C529A2E23F]   =>PUP.SweetIM
    [HKLM\Software\Classes\Installer\Products\254796BF4AC84B64891B61C529A2E23F]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F]   =>PUP.SweetIM
    [HKLM\Software\Classes\Installer\Features\6207E55EA2FE71A4AA7ABD89AEF31D1B]   =>PUP.DealPly
    [HKLM\Software\Classes\Installer\Products\6207E55EA2FE71A4AA7ABD89AEF31D1B]   =>PUP.DealPly
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6207E55EA2FE71A4AA7ABD89AEF31D1B]   =>PUP.DealPly
    [HKLM\Software\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}]   =>Adware.Agent
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8724E58E6C7D00C48A0D4F3345EB2C26]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E]   =>PUP.SweetIM
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E]   =>PUP.SweetIM
    [
    

    Esta resposta foi útil?

    0 comentários Sem comentários
  4. Anônima
    2014-03-02T15:27:26+00:00

    Esta é a primeira parte (porque nao foi possivel postar tudo junto visto que sao muitas letras)

    ---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
    O44 - LFC:[MD5.57ADF0CEE2A79D695C00C1772B951304] - 02-03-2014 - 15:04:06 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0   [25424]
    O44 - LFC:[MD5.57ADF0CEE2A79D695C00C1772B951304] - 02-03-2014 - 15:04:06 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0   [25424]
    O44 - LFC:[MD5.BF34E901456C87A29AF2BC04249F47CF] - 26-02-2014 - 23:21:03 ---A- . (...) -- C:\Windows\System32\prfc0816.dat   [158542]
    O44 - LFC:[MD5.5B590460F30DDD5B8E9BD973D5634477] - 26-02-2014 - 23:21:03 ---A- . (...) -- C:\Windows\System32\prfh0816.dat   [731052]
    ~ Files: 28 Legitimates Filtered in 00mn 42s
    
    ---\\ Image File Execution Options (IFEO) (O50)
    O50 - IFEO:Image File Execution Options - cfosspeed.exe - "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
    O50 - IFEO:Image File Execution Options - hamachi-2-ui.exe - "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
    ~ IFEO:  Scanned in 00mn 00s
    
    ---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
    ~ MWPS: 16 Legitimates Filtered in 00mn 00s
    
    ---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
    O56 - MWPE:[HKLM\...\policies\Explorer] - "HideSCAHealth"=1
    ~ MWPE Keys: 1 Legitimates Filtered in 00mn 00s
    
    ---\\ Lista dos drivers do sistema (SDL) (O58)
    O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 14-07-2009 - 01:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [453712]
    O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 13-07-2009 - 22:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [26624]
    O58 - SDL:[MD5.DA416DDB775478624088FA341BFEFE37] - 07-12-2013 - 00:05:21 ---A- . (...) -- C:\Windows\System32\Drivers\PnkBstrK.sys   [139832]
    O58 - SDL:[MD5.FEB11DBAA5E152D98BD897C97A6DDCD0] - 03-11-2013 - 16:26:46 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys   [324096]
    O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 14-07-2009 - 01:19:04 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [21072]
    O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13-07-2009 - 21:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS   [9029]
    O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 13-07-2009 - 21:40:44 ---A- . (...) -- C:\Windows\System32\country.sys   [27097]
    O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 13-07-2009 - 21:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS   [4768]
    O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 13-07-2009 - 21:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS   [42809]
    O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13-07-2009 - 21:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS   [42537]
    O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 13-07-2009 - 21:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS   [27866]
    O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 13-07-2009 - 21:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS   [29146]
    O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 13-07-2009 - 21:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS   [29370]
    O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 13-07-2009 - 21:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS   [29274]
    O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 13-07-2009 - 21:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS   [29146]
    O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 13-07-2009 - 21:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS   [33952]
    O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 13-07-2009 - 21:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS   [34672]
    O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 13-07-2009 - 21:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS   [35776]
    O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 13-07-2009 - 21:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS   [35536]
    O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 13-07-2009 - 21:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS   [34672]
    ~ Drivers: 16 Legitimates Filtered in 00mn 08s
    
    ---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
    O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
    ~ ADS:  Scanned in 00mn 00s
    

    Esta resposta foi útil?

    0 comentários Sem comentários
  5. Anônima
    2014-03-02T00:02:49+00:00

    Olá Rodry.

    Faça o download do ZHPDiag2.exe ( de Nicolas Coolman )

    Desabilite temporariamente seu antivírus para evitar conflitos e execute ZHPDiag2.exe para instalar a ferramenta.

    |- Execute o ícone do pergaminho. ( ZHPDiag )

    |- Clique SEARCH (ou PESQUISAR) e aguarde a conclusão.

    |- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt aqui em seu tópico para podermos analisar.

    Esta resposta foi útil?

    0 comentários Sem comentários