como remover Istart.webssearchs.com ?

Anônima
2014-05-19T21:16:10+00:00

Tenho um Notebook e entrou um **** Istart.webbssearchs.com que abre no lugar da tela determinada pelo usuário como tela inicial, e toda hora abre uma aba e entra um site sem ser solicitado. Como fazer p/ remover? antecipadamente Obrigado

Windows para casa | Versões anteriores do Windows | Segurança e privacidade

Pergunta bloqueada. Essa pergunta foi migrada da Comunidade de Suporte da Microsoft. É possível votar se é útil, mas não é possível adicionar comentários ou respostas ou seguir a pergunta.

0 comentários Sem comentários
Resposta aceita pelo autor da pergunta
Anônima
2014-05-19T21:56:53+00:00

Olá Celso.

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:

http://www.bleepingcomputer.com/download/adwcleaner/

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

Remova adwares e toolbars maliciosas com o Adwcleaner

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner*AdwCleaner[S0].txt*

Ficamos na espera.

Esta resposta foi útil?

1 pessoa achou esta resposta útil.
0 comentários Sem comentários

51 respostas adicionais

Classificar por: Mais útil
  1. Anônima
    2014-05-25T20:08:24+00:00

    Me desculpe, sou leiga nesse assunto :P rsrs agora acredito que está correto. Agradeço muito sua paciência e profissionalismo.

     Segue abaixo o relatório do Usbfix / ZHPFix

    [b]############################## | UsbFix V 7.171 | [Limpar][/b]

    Usuário: noggerini (Administrador) # NOGGERINI-PC

    Atualizado em 18/05/2014 por El Desaparecido - SosVirus

    Começou em 16:51:45 | 25/05/2014

    Site : [url=http://www.pt.usbfix.net/]http://www.pt.usbfix.net/[/url]

    Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]

    Asistencia : [url=http://pt.kioskea.net/forum/seguranca-virus-7]

    http://pt.kioskea.net/forum/seguranca-virus-7[/url]

    Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]

    http://www.sosvirus.net/upload\_malware.php[/url]

    Contato : [url=http://www.pt.usbfix.net/contato/]http://www.pt.usbfix.net/contato/[/url]

    PC: SAMSUNG ELECTRONICS CO., LTD. (RV411/RV511/E3511/S3511/RV711/E3411)

    CPU: Intel(R) Pentium(R) CPU        P6100  @ 2.00GHz

    RAM -> [Total : 1909 Mo| Free : 350 Mo]

    Bios: Phoenix Technologies Ltd.

    Boot: Normal boot

    OS: Microsoft Windows 7 Starter  (6.1.7601 32-Bit) Service Pack 1

    WB: Windows Internet Explorer : 11.0.9600.17107

    WB: Mozilla Firefox : 29.0.1

    SC: Security Center [Enabled]

    WU: Windows Update [Enabled]

    AV: AVG Anti-Virus Free Edition 2012 [(!) Disabled | Updated]

    AS: AVG Anti-Virus Free Edition 2012 [(!) Disabled | Updated]

    AS: Windows Defender [Enabled | Updated]

    FW: Windows FireWall [Enabled]

    C:\ (%SystemDrive%) -> Disco fixo # 113 Gb (17 Mb livre - 15%) [] # NTFS

    D:\ -> Disco fixo # 167 Gb (83 Mb livre - 50%) [] # NTFS

    E:\ -> CD-ROM

    H:\ -> Disco removível # 7 Gb (6 Mb livre - 85%) [] # FAT32

    [b]################## | Processos parados |[/b]

    C:\PROGRA~1\AVG\AVG2012\avgrsx.exe (ID: 496|ParentID: 484|SISTEMA)

    C:\Program Files\AVG\AVG2012\avgcsrvx.exe (ID: 532|ParentID: 496|SISTEMA)

    C:\Windows\System32\spoolsv.exe (ID: 1792|ParentID: 876)

    C:\Windows\System32\taskeng.exe (ID: 1812|ParentID: 1360|SISTEMA)

    C:\Windows\System32\taskhost.exe (ID: 868|ParentID: 876|noggerini)

    C:\Windows\System32\taskeng.exe (ID: 1028|ParentID: 1360|noggerini)

    C:\Windows\explorer.exe (ID: 1156|ParentID: 972|noggerini)

    C:\Program Files\Google\Update\GoogleUpdate.exe (ID: 112|ParentID: 1812|SISTEMA)

    C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe (ID: 2068|ParentID: 112|

    SISTEMA)

    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (ID: 2304|ParentID: 1156|noggerini)

    C:\Windows\System32\igfxpers.exe (ID: 2320|ParentID: 1156|noggerini)

    C:\Windows\System32\igfxtray.exe (ID: 2340|ParentID: 1156|noggerini)

    C:\Windows\System32\hkcmd.exe (ID: 2360|ParentID: 1156|noggerini)

    C:\Program Files\BlueStacks\HD-Agent.exe (ID: 2384|ParentID: 1156|noggerini)

    C:\Program Files\Google\Drive\googledrivesync.exe (ID: 2468|ParentID: 1156|noggerini)

    C:\Users\noggerini\AppData\Local\Google\Update\GoogleUpdate.exe (ID: 2520|ParentID: 1156|

    noggerini)

    C:\Program Files\Gyazo\GyStation.exe (ID: 2560|ParentID: 1156|noggerini)

    C:\Program Files\Google\Drive\googledrivesync.exe (ID: 3156|ParentID: 2468|noggerini)

    C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 3592|ParentID: 876|SISTEMA)

    C:\Program Files\BlueStacks\HD-LogRotatorService.exe (ID: 3620|ParentID: 876|SISTEMA)

    C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (ID: 3656|ParentID: 

    876|SISTEMA)

    C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (ID: 3716|ParentID: 876|

    SERVIÇO DE REDE)

    C:\Program Files\CyberLink\YouCam\YCMMirage.exe (ID: 3868|ParentID: 1028|noggerini)

    C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (ID: 3876|ParentID: 1028|

    noggerini)

    C:\Program Files\Samsung\Easy Display Manager\WifiManager.exe (ID: 3904|ParentID: 1028|

    noggerini)

    C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (ID: 4052|ParentID: 

    1028|noggerini)

    C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (ID: 2592|ParentID: 876|

    SISTEMA)

    C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (ID: 2964|ParentID: 

    876|SISTEMA)

    C:\Program Files\Malwarebytes Anti-Malware\mbam.exe (ID: 2180|ParentID: 3144|noggerini)

    C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (ID: 3984|

    ParentID: 2964|SISTEMA)

    C:\Windows\System32\igfxext.exe (ID: 3724|ParentID: 1088|noggerini)

    C:\Windows\System32\SearchIndexer.exe (ID: 2828|ParentID: 876|SISTEMA)

    C:\Windows\System32\igfxsrvc.exe (ID: 2844|ParentID: 1088|noggerini)

    C:\Windows\System32\WUDFHost.exe (ID: 4352|ParentID: 1316|SERVIÇO LOCAL)

    C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe (ID: 2188|ParentID: 

    1028|noggerini)

    C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe (ID: 6004|ParentID: 1028|

    noggerini)

    C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe (ID: 3428|ParentID: 

    1028|noggerini)

    C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe (ID: 2456|ParentID: 1028|

    noggerini)

    C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe (ID: 3452|ParentID: 1028|

    noggerini)

    C:\Windows\System32\notepad.exe (ID: 2824|ParentID: 1156|noggerini)

    C:\Windows\System32\notepad.exe (ID: 1544|ParentID: 5536|noggerini)

    C:\Windows\System32\notepad.exe (ID: 3844|ParentID: 5536|noggerini)

    C:\Windows\System32\notepad.exe (ID: 1984|ParentID: 5536|noggerini)

    C:\Windows\System32\notepad.exe (ID: 7600|ParentID: 5536|noggerini)

    C:\Program Files\ZHPDiag\ZHPFix\ZHPFix.exe (ID: 7392|ParentID: 6860|noggerini)

    C:\Windows\System32\notepad.exe (ID: 8144|ParentID: 1156|noggerini)

    C:\Windows\System32\notepad.exe (ID: 7248|ParentID: 7392|noggerini)

    C:\Users\noggerini\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 2840|ParentID: 

    1156|noggerini)

    C:\Users\noggerini\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 2672|ParentID: 

    2840|noggerini)

    C:\Users\noggerini\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 4084|ParentID: 

    2840|noggerini)

    C:\Users\noggerini\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 8064|ParentID: 

    2840|noggerini)

    C:\Users\noggerini\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 7376|ParentID: 

    2840|noggerini)

    C:\Windows\System32\msiexec.exe (ID: 6860|ParentID: 876|SISTEMA)

    C:\Windows\System32\notepad.exe (ID: 3008|ParentID: 7132|noggerini)

    [b]################## | Autorun |[/b]

    [b]################## | Procura genérica |[/b]

    Supprimido ! C:\windows\system32\WinDir

    (!) Ficheiros temporários suprimido.

    [b]################## | Registro |[/b]

    Supprimido ! HKCU\Software\VB and VBA Program Settings\INSTALL

    Supprimido ! HKU\S-1-5-21-2570333737-3344067203-222050451-1000\Software....

    \Mountpoints2\F

    [b]################## | Regedit Run |[/b]

    F2 - HKLM..\Winlogon : [Shell] explorer.exe

    F2 - HKLM..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,

    04 - HKLM..\Run : [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"

    04 - HKU\S-1-5-19..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun

    04 - HKU\S-1-5-20..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun

    04 - HKU\S-1-5-18..\Run : [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" 

    /background

    04 - HKU\S-1-5-18..\Run : [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    04 - HKU\S-1-5-18..\Run : [Google Update] "C:\windows\system32\config\systemprofile\AppData

    \Local\Google\Update\GoogleUpdate.exe" /c

    04 - HKU\S-1-5-19..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe

    04 - HKU\S-1-5-20..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe

    [b]################## | C:\ %SystemDrive% - Disco fixo (NTFS) |[/b]

    [19/08/2012 - 15:28:44 | N | 1 Ko] - C:\NetworkCfg.xml

    [08/11/1996 - 23:50:38 | N | 225 Ko] - C:\SIZZLE2.VQP

    [09/11/1996 - 00:00:34 | N | 1671 Ko] - C:\SIZZLE.VQP

    [08/11/1996 - 23:31:04 | N | 20265 Ko] - C:\SIZZLE.VQA

    [09/11/1996 - 01:02:34 | N | 14049 Ko] - C:\SIZZLE2.VQA

    [08/10/1999 - 14:29:22 | N | 24 Ko] - C:\Readme.txt

    [23/05/2014 - 17:03:31 | N | 0 Ko] - C:\folders.txt

    [10/06/2009 - 18:42:20 | N | 0 Ko] - C:\config.sys

    [24/03/2012 - 12:34:48 | RASH | 0 Ko] - C:\MSDOS.SYS

    [24/03/2012 - 12:34:48 | RASH | 0 Ko] - C:\IO.SYS

    [25/05/2014 - 13:39:55 | ASH | 1954368 Ko] - C:\pagefile.sys

    [25/05/2014 - 13:39:55 | ASH | 1954368 Ko] - C:\hiberfil.sys

    [25/05/2014 - 12:58:13 | D] - C:\Config.Msi

    [09/11/1996 - 01:45:18 | N | 488845 Ko] - C:\MAIN.MIX

    [12/11/2013 - 04:43:45 | N | 6 Ko] - C:\fraglist.luar

    [14/07/2011 - 04:24:19 | N | 2 Ko] - C:\RHDSetup.log

    [14/07/2011 - 04:45:52 | N | 0 Ko] - C:\setup.log

    [23/05/2014 - 17:10:18 | N | 107 Ko] - C:\zoek-results.log

    [31/10/2012 - 03:08:30 | N | 0 Ko] - C:\Disco Local (D) - Atalho.lnk

    [25/03/2013 - 18:28:45 | N | 0 Ko] - C:\Disco Local (D) - Atalho (2).lnk

    [28/12/2012 - 12:48:41 | D] - C:.jagex_cache_32

    [12/11/2013 - 08:40:09 | N | 0 Ko] - C:\Archive.ini

    [23/04/2014 - 15:10:29 | N | 0 Ko] - C:\AVScanner.ini

    [17/12/1998 - 12:42:42 | N | 633 Ko] - C:\EAHELP.HLP

    [28/12/2012 - 12:48:41 | D] - C:.faem_cache_32

    [15/01/2014 - 21:40:14 | N | 476 Ko | SHA1: 29CB8B4FE0DC6E0358621AECE118B45F292FC2BB] - 

    C:\SecurityScanner.dll

    [21/10/1999 - 11:13:56 | N | 0 Ko] - C:\ip.cfg

    [23/05/2014 - 17:10:26 | SHD] - C:$RECYCLE.BIN

    [25/05/2014 - 15:55:57 | N | 1 Ko] - C:\PhysicalDisk0_MBR.bin

    [10/06/2009 - 18:42:20 | A | 0 Ko] - C:\autoexec.bat

    [04/10/1999 - 15:14:44 | N | 12 Ko] - C:\automenu.apm

    [07/10/1999 - 17:13:36 | N | 12 Ko] - C:\autorun.apm

    [14/07/2009 - 01:53:55 | SHD] - C:\Documents and Settings

    [26/12/2012 - 19:31:37 | D] - C:\Intel

    [26/12/2012 - 19:31:59 | SHD] - C:\Recovery

    [26/12/2012 - 19:31:59 | D] - C:\zsc2

    [28/12/2012 - 12:48:41 | D] - C:$AVG

    [06/01/2013 - 08:02:59 | D] - C:\Fraps

    [23/03/2013 - 18:52:53 | D] - C:\PerfLogs

    [03/07/2013 - 16:14:16 | D] - C:\Minecraft_Backup

    [29/09/2013 - 10:50:45 | D] - C:\DVDVolume

    [29/09/2013 - 11:08:18 | D] - C:\Temp

    [14/10/2013 - 12:13:28 | D] - C:\downloads

    [05/11/2013 - 23:17:57 | D] - C:\Gramblr

    [25/11/2013 - 14:13:15 | D] - C:\ard

    [25/11/2013 - 14:13:15 | D] - C:\DXSETUP

    [25/11/2013 - 14:13:29 | D] - C:\eDocs

    [25/11/2013 - 14:13:29 | D] - C:\eReg

    [25/11/2013 - 14:13:32 | D] - C:\INSTALL

    [25/11/2013 - 14:13:32 | D] - C:\INTERNET

    [25/11/2013 - 14:13:32 | D] - C:\MPLAYER

    [25/11/2013 - 14:13:33 | D] - C:\Patch

    [25/11/2013 - 14:13:37 | D] - C:\PLANETWW

    [25/11/2013 - 14:14:02 | D] - C:\SETUP

    [25/11/2013 - 14:14:03 | D] - C:\SETUP95

    [25/11/2013 - 14:14:05 | D] - C:\TEN

    [06/01/2014 - 16:17:57 | D] - C:\Riot Games

    [14/03/2014 - 22:06:18 | D] - C:\Users

    [23/05/2014 - 13:20:49 | D] - C:\AdwCleaner

    [23/05/2014 - 17:10:01 | D] - C:\zoek_backup

    [25/05/2014 - 15:19:09 | D] - C:\Windows

    [25/05/2014 - 16:41:35 | SHD] - C:\System Volume Information

    [25/05/2014 - 16:42:25 | D] - C:\Program Files

    [25/05/2014 - 16:42:27 | HD] - C:\ProgramData

    [25/05/2014 - 16:49:31 | D] - C:\UsbFix

    [b]################## | D:\ - Disco fixo (NTFS) |[/b]

    [25/03/2013 - 11:38:04 | N | 0 Ko] - D:\TSClame_acm.xml

    [07/11/2007 - 07:00:40 | N | 17 Ko] - D:\eula.1042.txt

    [07/11/2007 - 07:00:40 | N | 17 Ko] - D:\eula.2052.txt

    [07/11/2007 - 07:00:40 | N | 10 Ko] - D:\eula.1033.txt

    [07/11/2007 - 07:00:40 | N | 0 Ko] - D:\eula.1041.txt

    [07/11/2007 - 07:00:40 | N | 17 Ko] - D:\eula.1028.txt

    [07/11/2007 - 07:00:40 | N | 17 Ko] - D:\eula.1031.txt

    [07/11/2007 - 07:00:40 | N | 17 Ko] - D:\eula.3082.txt

    [07/11/2007 - 07:00:40 | N | 17 Ko] - D:\eula.1036.txt

    [07/11/2007 - 07:00:40 | N | 17 Ko] - D:\eula.1040.txt

    [07/11/2007 - 07:12:28 | N | 228 Ko] - D:\VC_RED.MSI

    [06/12/2011 - 23:32:26 | N | 0 Ko] - D:\Disco Local (C) - Atalho.lnk

    [09/01/2013 - 15:03:30 | N | 0 Ko] - D:\Disco Local (C) - Atalho (2).lnk

    [05/08/2013 - 17:48:38 | N | 0 Ko] - D:\Disco Local (C) - Atalho (3).lnk

    [24/11/2013 - 21:15:25 | N | 1 Ko] - D:\chris - Atalho.lnk

    [07/11/2007 - 07:00:40 | N | 1 Ko] - D:\globdata.ini

    [07/11/2007 - 07:00:40 | N | 1 Ko] - D:\install.ini

    [07/11/2007 - 07:03:18 | N | 550 Ko | SHA1: FB517ABB38E9CCC67DE411D4F18A9446C11C0923] - 

    D:\install.exe

    [07/11/2007 - 07:03:18 | N | 94 Ko | SHA1: 9723B8595A326B38ECB31F64B3A67C1ED339BB60] - 

    D:\install.res.1031.dll

    [07/11/2007 - 07:03:18 | N | 89 Ko | SHA1: 9EC25485A7FF52D1211A28CCA095950901669B34] - 

    D:\install.res.1033.dll

    [07/11/2007 - 07:03:18 | N | 95 Ko | SHA1: 0616CDE3285284430679368575A5A4ED3672722D] - 

    D:\install.res.1036.dll

    [07/11/2007 - 07:03:18 | N | 93 Ko | SHA1: 3B01AA2CE407D89AE218A4CD81D21E3F25077B5B] - 

    D:\install.res.1040.dll

    [07/11/2007 - 07:03:18 | N | 75 Ko | SHA1: 549AB876AC211651E77A458FC72859B6B1C304CB] - 

    D:\install.res.1028.dll

    [07/11/2007 - 07:03:18 | N | 78 Ko | SHA1: E263B6FB41E2984CDF8D23A25EF1C536F32C4EC3] - 

    D:\install.res.1042.dll

    [07/11/2007 - 07:03:18 | N | 74 Ko | SHA1: 24A1F8FF465746148BB82364713FB75297BC9656] - D:

    \install.res.2052.dll

    [07/11/2007 - 07:03:18 | N | 94 Ko | SHA1: 9C57F09A4613B8F44C730511D3CCA9121780B630] - D:

    \install.res.3082.dll

    [07/11/2007 - 07:03:18 | N | 80 Ko | SHA1: CC9D7D205F965659429B95DD2F317D9D4DE8820B] - 

    D:\install.res.1041.dll

    [03/01/2013 - 15:28:13 | N | 2545544 Ko] - D:\Kree Arra.camrec

    [07/11/2007 - 07:09:22 | N | 1409 Ko] - D:\VC_RED.cab

    [07/11/2007 - 07:00:40 | N | 6 Ko] - D:\vcredist.bmp

    [01/11/2013 - 15:02:23 | SHD] - D:$RECYCLE.BIN

    [23/11/2011 - 23:23:30 | D] - D:\410188288647951cc014

    [26/11/2011 - 22:22:14 | D] - D:\cc130f7291a2548f3088f0cba9

    [27/11/2011 - 20:14:33 | D] - D:\9e4d72a164348162896125d92fa87a

    [28/11/2011 - 10:31:08 | D] - D:\SystemSoftware

    [28/11/2011 - 15:28:59 | D] - D:\d26533f02b30784b4ad1e6

    [30/11/2011 - 10:53:08 | D] - D:\cd3facf1d94d762bb8be3ec56d74

    [02/12/2011 - 10:48:11 | SHD] - D:\System Volume Information

    [03/12/2011 - 02:07:50 | D] - D:\2bd86245ec16eb539db95e74

    [03/12/2011 - 05:29:07 | D] - D:\d7d28d81cebc867e029a4fa5134a69a2

    [05/12/2011 - 09:48:17 | D] - D:\77f3d1b073d9b289de3165acb5056aad

    [05/12/2011 - 09:54:02 | D] - D:\PFiles

    [05/12/2011 - 17:11:59 | D] - D:\d30d3d9f9600b1c9af16bcdc

    [06/12/2011 - 18:14:07 | D] - D:\a82e4424453f8ef3d3

    [06/12/2011 - 21:16:03 | D] - D:\66a44d555de558ef2859d58b3f6a0d

    [06/12/2011 - 21:17:33 | D] - D:\0cf6a4e1fe9cc7de69890c4b66

    [06/12/2011 - 21:25:00 | D] - D:\8b3d69497e445057053c5c00

    [06/12/2011 - 21:28:29 | D] - D:\761eb0165bd25b1eb8f9bc68483597

    [07/12/2011 - 09:59:25 | D] - D:\c86f97c80db3816a0d

    [07/12/2011 - 19:36:21 | D] - D:\dac723a833047714c44842

    [08/12/2011 - 09:49:14 | D] - D:\7030bec632d907d822

    [08/12/2011 - 19:11:57 | D] - D:\3d76248e89e0b96dfab61531b983

    [09/12/2011 - 07:12:55 | D] - D:\5a2032e4ef40a545aca4ae

    [10/12/2011 - 14:16:34 | D] - D:\e0f74ee40828879d99

    [10/12/2011 - 20:49:09 | D] - D:\41d1117374c5eda1be8a

    [11/12/2011 - 12:35:27 | D] - D:\07cf17f051c1a94887861284bb836290

    [11/12/2011 - 18:01:43 | D] - D:\80367566be7446e480

    [12/12/2011 - 12:16:47 | D] - D:\7507b57baae9ceb6234f31acb9d8

    [12/12/2011 - 14:53:10 | D] - D:\128d2065da599a2cc025f4

    [12/12/2011 - 15:21:47 | D] - D:\91ac4829b81285ab924f

    [13/12/2011 - 12:42:45 | D] - D:\316bfd2d667081ddda6c

    [14/12/2011 - 12:17:26 | D] - D:\5c307891b046f438c451d5ec79

    [15/12/2011 - 17:48:24 | D] - D:\073b509cad65205a168c89eae96388cf

    [16/12/2011 - 01:46:53 | D] - D:\7dad67099440b3f322a12cd887fc

    [16/12/2011 - 12:16:03 | D] - D:\cf9a7e7834619fb40bd6d47e7c839ee6

    [16/12/2011 - 13:11:49 | D] - D:\4320bffdfdd353f44d16f640

    [16/12/2011 - 23:20:07 | D] - D:\0f73efa4d2bf06725131422bc96d7f08

    [17/12/2011 - 09:35:57 | D] - D:\c5f842c0c5df58f9a98b8b7844d8

    [18/12/2011 - 12:43:48 | D] - D:\1284d0c595e887c59c2326

    [18/12/2011 - 15:18:10 | D] - D:\b5143896064c5f44320cc3905aba

    [18/12/2011 - 23:02:23 | D] - D:\7db0ec60c2238ad53f22be51e8db

    [19/12/2011 - 08:42:25 | D] - D:\64f0199e23aae523d50d06f34a

    [19/12/2011 - 13:45:55 | D] - D:\8a2b7e2ea69fda8f59eaa0

    [20/12/2011 - 11:32:11 | D] - D:\1ca58f841ffa9893332422100e

    [21/12/2011 - 20:47:29 | D] - D:\2dd3783ca15a8122d7b498a575d8

    [22/12/2011 - 14:16:54 | D] - D:\7b71fac6438b20c95ff9b6bf

    [24/12/2011 - 10:07:27 | D] - D:\7e97a6f532014e9810390032dc03d7

    [24/12/2011 - 23:40:55 | D] - D:\35c84d3c1a6fbcaf55b27954cf6d

    [25/12/2011 - 13:21:55 | D] - D:\1379ca12b0b2d68776e2e829

    [25/12/2011 - 14:51:54 | D] - D:\5775e030339102ea38536ad7ed48e7b7

    [26/12/2011 - 00:51:07 | D] - D:\76600054f65dc6e14039c39ee972b9

    [26/12/2011 - 09:49:06 | D] - D:\ba681f594682f5b78f9b03

    [26/12/2011 - 16:44:40 | D] - D:\5d824c7da70b654446f491b679e7

    [26/12/2011 - 23:53:49 | D] - D:\5f600d1f231d6895c8c7f575067d36e8

    [27/12/2011 - 10:06:19 | D] - D:\fe7b34aa8a7e4e94f18051c5644cc2

    [27/12/2011 - 14:06:19 | D] - D:\b7476a8aacf72ae141759d420eb4450f

    [28/12/2011 - 15:40:38 | D] - D:\842179f7122fb4329a70f0dcb6

    [28/12/2011 - 18:40:17 | D] - D:\be49040258b03bfcc6b50af13bdb14

    [29/12/2011 - 15:28:03 | D] - D:\bc9d8776e6951fd5857237ecda

    [30/12/2011 - 01:02:03 | D] - D:\7b06d8825f68c7727853cc08

    [30/12/2011 - 11:23:47 | D] - D:\bbd1b32122a8c1ff94a4443b

    [31/12/2011 - 05:39:50 | D] - D:\5177f79778b05fd08702

    [01/01/2012 - 01:50:01 | D] - D:\540af317907cea56a8f612d6b8

    [01/01/2012 - 10:38:20 | D] - D:\54ac39ca52c085ee0b21b1b086

    [01/01/2012 - 10:46:04 | D] - D:\efe1bc65f08a799c6ef0c8fffc58fcd9

    [01/01/2012 - 20:00:54 | D] - D:\db559e2988e4534d8830eeb2

    [02/01/2012 - 13:24:44 | D] - D:\395801c26e8551d7f98b

    [02/01/2012 - 16:11:15 | D] - D:\6a9f80dcdd00b1d6f20f6d

    [03/01/2012 - 11:31:01 | D] - D:\6866c0143f39de667b

    [04/01/2012 - 12:15:57 | D] - D:\92348acc00749e05f95a53

    [04/01/2012 - 17:28:45 | D] - D:\98fe09550a8e9f307e

    [05/01/2012 - 10:41:58 | D] - D:\5f40b3fbf31d33b253a084013371dfe0

    [05/01/2012 - 15:44:11 | D] - D:\67d72ee2b337c8bfd9e3073d11a13426

    [06/01/2012 - 09:00:00 | D] - D:\73174a6853912262492d1423

    [06/01/2012 - 18:20:17 | D] - D:\476243cf935fd12f34eb2e11ab93dd6c

    [07/01/2012 - 00:01:49 | D] - D:\d62bfc3c1fa468fefa13ad6695a63b

    [07/01/2012 - 12:49:49 | D] - D:\56e6b53a7479e58c5751ec12085d92

    [08/01/2012 - 01:35:25 | D] - D:\646d8864c7c915ab0af9fe5d76

    [08/01/2012 - 08:31:59 | D] - D:\bf61c41acc3bd6484d182168662061fd

    [08/01/2012 - 14:00:18 | D] - D:\f3d29cb69ed9861a1446e423

    [09/01/2012 - 11:15:29 | D] - D:\aa78c49510967daa007fe2

    [09/01/2012 - 15:35:27 | D] - D:\06b8832fe41a1e0622f63c5f6764fb

    [09/01/2012 - 21:26:13 | D] - D:\09c87a31fa4bb56e46fc

    [10/01/2012 - 13:44:09 | D] - D:\f219c1de3894a610a1c9ed

    [10/01/2012 - 23:55:43 | D] - D:\66013999d43eb766408fd308507fad

    [11/01/2012 - 21:18:00 | D] - D:\19784ad662e4101867c3

    [12/01/2012 - 09:36:58 | D] - D:\6acbe82bc86c62afb9e7de

    [12/01/2012 - 10:09:28 | D] - D:\0e948761e81178df39bd735b09dc11

    [12/01/2012 - 17:09:52 | D] - D:\0b8d83023013a516e70751b6

    [13/01/2012 - 14:20:00 | D] - D:\f7336f6b27dbacec0c1f6e3e6769bdf5

    [13/01/2012 - 16:38:10 | D] - D:\34240391b708dcea61d4456fa0

    [14/01/2012 - 02:04:06 | D] - D:\a081aaa8ddb60cd702

    [14/01/2012 - 18:30:25 | D] - D:\7c876b4994be4735e58b299bf9

    [15/01/2012 - 02:03:51 | D] - D:\a7bf63bb625307147a6e7e232be0bfa3

    [15/01/2012 - 05:49:29 | D] - D:\e2ee02776fec1c57cecd04

    [16/01/2012 - 00:01:39 | D] - D:\abeb60aa1a1237196840683f

    [16/01/2012 - 12:56:51 | D] - D:\fb9e0dddd715d5703a1a6495

    [17/01/2012 - 09:25:35 | D] - D:\2537fcdea7bcd53e3ac0f8105d12

    [17/01/2012 - 14:39:48 | D] - D:\326f2a66729eaa6b605e32

    [17/01/2012 - 23:36:55 | D] - D:\05db3721c41c6e78707392e7cf67

    [18/01/2012 - 16:26:11 | D] - D:\c540f5cd8035b0deaf8f5850e4ad

    [19/01/2012 - 08:55:12 | D] - D:\8c25a13ec0c0fdf8998b313901

    [19/01/2012 - 09:14:12 | D] - D:\8f320fe503c97bde20f240a1eb0be7d0

    [19/01/2012 - 09:18:32 | D] - D:\8c3d7a0c831976e22aff6ee300

    [19/01/2012 - 09:37:35 | D] - D:\9384f023a1c7e288ed71bff3

    [19/01/2012 - 10:24:14 | D] - D:\bc6c4580d6d907b774d6de6835

    [19/01/2012 - 13:02:22 | D] - D:\6b18d800e4ea5a0404289f6a

    [19/01/2012 - 23:25:59 | D] - D:\7c924eef0545fdccbf633fb3ef

    [20/01/2012 - 21:30:53 | D] - D:\10bfb9ac21f86bd9ca

    [21/01/2012 - 09:49:58 | D] - D:\ea8f71a4e8b7b7b184e521

    [22/01/2012 - 09:17:09 | D] - D:\1875fc834f140a189e

    [22/01/2012 - 10:03:21 | D] - D:\8127c7222f4e9779157d

    [22/01/2012 - 22:20:06 | D] - D:\613b47d09724e8eb11af

    [23/01/2012 - 10:34:38 | D] - D:\c9f5fa6d5794936c9864

    [23/01/2012 - 12:48:25 | D] - D:\aba2196cbb0cfcbfd628309e

    [23/01/2012 - 18:17:04 | D] - D:\d66aa453ddcd64a81f5aa4c8274038

    [23/01/2012 - 21:40:06 | D] - D:\075bd12e122d5e8bbbfb599d1f8f0b4b

    [24/01/2012 - 12:47:56 | D] - D:\48b0738ace8218a86b

    [24/01/2012 - 17:00:37 | D] - D:\e7b5c4036c99694e94a4caa34d4a5bc2

    [24/01/2012 - 23:30:20 | D] - D:\e5d90cb399e174e4bc77239e7caa

    [25/01/2012 - 10:26:50 | D] - D:\561cb48b5d42544654dc08e1535bfe

    [25/01/2012 - 10:45:53 | D] - D:\c603013da7c06cf4e416371bdbd624

    [25/01/2012 - 10:55:12 | D] - D:\706e437f257241f923

    [25/01/2012 - 23:24:33 | D] - D:\745001b77032024b9e8547d983

    [26/01/2012 - 09:46:06 | D] - D:\2197a8585c4732b350a9

    [27/01/2012 - 10:42:18 | D] - D:\b21d38e074ec8872129ca7

    [28/01/2012 - 12:39:47 | D] - D:\c901d9166e19079a3f96

    [29/01/2012 - 10:51:32 | D] - D:\f0a8dd1f8ac99aa02d

    [29/01/2012 - 13:46:36 | D] - D:\28185feb4123412c42

    [29/01/2012 - 16:34:19 | D] - D:\a9df42dc7f1863d39160

    [29/01/2012 - 20:22:46 | D] - D:\a3650a339c879e18ca248f53

    [30/01/2012 - 07:30:29 | D] - D:\1441d715b236daef473d0fccc6

    [30/01/2012 - 09:28:56 | D] - D:\b6226ebdbb1ee37de31350f80f70f9

    [30/01/2012 - 14:46:01 | D] - D:\3ed4d75d24ae76bcba2edc43ff617e

    [30/01/2012 - 22:27:51 | D] - D:\208d1efdbe8db0b99b

    [01/02/2012 - 01:45:26 | D] - D:\8aa1258c4199c7169bbb56

    [01/02/2012 - 09:31:13 | D] - D:\8ac69a927cc38599cea37a

    [01/02/2012 - 16:15:51 | D] - D:\df2fcdad1700fd8561637e3c1a340414

    [02/02/2012 - 07:04:08 | D] - D:\0f419434ff31ebf17747e925e91fcad5

    [02/02/2012 - 23:45:12 | D] - D:\26d7573b2c4620cb5323533266564b

    [03/02/2012 - 06:17:47 | D] - D:\5004f30dca057a02d2

    [03/02/2012 - 06:23:27 | D] - D:\ecb487e0c3553219a674527f6b

    [03/02/2012 - 06:38:25 | D] - D:\ec8a49b10ef7a70b3bf597676a

    [03/02/2012 - 12:51:29 | D] - D:\eed23c14ee049d3831eaa118b5d12a

    [03/02/2012 - 12:56:03 | D] - D:\88e696e88ac32bd1e5

    [03/02/2012 - 22:12:00 | D] - D:\8380249398c043a0581fe834

    [04/02/2012 - 04:52:23 | D] - D:\e849aec5fa7e74f078

    [07/02/2012 - 11:58:28 | D] - D:\f0d65f8a88bc0f64c5

    [07/02/2012 - 22:59:05 | D] - D:\3dbb61608a89dd8305f4948cc7c6

    [08/02/2012 - 08:43:30 | D] - D:\381c852d149a8133a6

    [08/02/2012 - 18:26:53 | D] - D:\12cdbe594c38c0b7d92a38

    [09/02/2012 - 06:03:36 | D] - D:\bb985a459cf665e1c1a25286

    [09/02/2012 - 06:09:15 | D] - D:\1b1352e1d44b43b4bde4054a

    [10/02/2012 - 15:11:56 | D] - D:\da0055c01132431cc3b71f

    [10/02/2012 - 16:03:59 | D] - D:\f76a380719687341d30b34d44197780c

    [10/02/2012 - 16:44:58 | D] - D:\88de94e8e6efc1c39e

    [10/02/2012 - 21:52:09 | D] - D:\3e011753d190d666f264d7ce33d146

    [11/02/2012 - 09:31:38 | D] - D:\4da00d7b4582f7d578bf28d03ef9

    [11/02/2012 - 14:35:46 | D] - D:\517271ca666cd0190575

    [12/02/2012 - 01:36:35 | D] - D:\dee54855fb24388e9d78028af84fac

    [12/02/2012 - 10:17:01 | D] - D:\f6900f8f716192b791b05919d9df1e

    [12/02/2012 - 12:07:01 | D] - D:\7af95cfa140978bf5286bf

    [12/02/2012 - 17:15:33 | D] - D:\223c09168e7f25c3d04ba9

    [12/02/2012 - 19:38:49 | D] - D:\e65bbde2f94bf94fe2fc90dd3a3c35

    [13/02/2012 - 09:24:52 | D] - D:\6b03ac1c088b1303ee2b19cf

    [13/02/2012 - 09:25:49 | D] - D:\871f74f646eada88deb2ce41fb35941d

    [13/02/2012 - 09:26:09 | D] - D:\a5733e69ea56246b357fe4e65c68

    [13/02/2012 - 09:26:51 | D] - D:\bb7dba1823d7d098356d7614

    [13/02/2012 - 09:27:11 | D] - D:\7c09a815ecbc537826ba12cb83

    [13/02/2012 - 13:13:44 | D] - D:\755e1934499cc168861dcf28e4eb

    [13/02/2012 - 21:52:34 | D] - D:\30d9e9593b602039b2

    [14/02/2012 - 05:20:17 | D] - D:\cb8a3f5cece8280199b5c2c4

    [14/02/2012 - 08:08:20 | D] - D:\b7d43862ca2a15347d5686abecfdfc85

    [14/02/2012 - 23:32:31 | D] - D:\ba93d2bdf7171d27a3f856

    [15/02/2012 - 07:24:03 | D] - D:\343900b1fd3468c004ddf6306e

    [15/02/2012 - 21:08:48 | D] - D:\a79c11182cbae2021cb470d7391ddb9b

    [16/02/2012 - 08:08:36 | D] - D:\135d561267464aa40adde8fa

    [16/02/2012 - 22:17:44 | D] - D:\d31248152233e720f365f77c

    [17/02/2012 - 10:34:55 | D] - D:\d9d411e6a9ebb79b16b7

    [17/02/2012 - 20:55:30 | D] - D:\5a28e6d280a396b4aa539e

    [18/02/2012 - 09:55:42 | D] - D:\cfcfee419a69421b6cde14cb309bffb7

    [19/02/2012 - 08:17:53 | D] - D:\08c76fa84de1f9da9a

    [19/02/2012 - 15:12:02 | D] - D:\63baa08a7c6db8b15e03191a

    [20/02/2012 - 11:31:32 | D] - D:\feda4795f9d398802be07054b819f0

    [20/02/2012 - 12:10:36 | D] - D:\c58bcdff100fa71246b539192357

    [21/02/2012 - 11:02:50 | D] - D:\de9eccc52c0998e6a28553381ddfe2

    [21/02/2012 - 14:27:16 | D] - D:\ca7a6d5c9b66466fa6c1b9

    [21/02/2012 - 14:49:57 | D] - D:\806b0c190455111c5e

    [23/02/2012 - 11:20:25 | D] - D:\a2faba03158ee146b48b00

    [23/02/2012 - 17:55:50 | D] - D:\9a1f25cc350146cf5152ae

    [25/02/2012 - 12:12:50 | D] - D:\06d576816eb4b0cf31cd4881dbe6ca

    [25/02/2012 - 20:56:03 | D] - D:\7ef49ccc73e9fd72086c8904b48d40

    [26/02/2012 - 02:03:04 | D] - D:\3caf2f6eee26879c41f7c2fe0c

    [26/02/2012 - 03:02:40 | D] - D:\9a958e56786dc0bdd1207b

    [26/02/2012 - 03:19:28 | D] - D:\432eb4a34788521a4a5b0d5b

    [26/02/2012 - 17:31:36 | D] - D:\dac852274c12a89bef0172

    [27/02/2012 - 10:08:44 | D] - D:\b7ccefc399ca44cb0af8bf3f1ec040ec

    [27/02/2012 - 20:29:04 | D] - D:\488ff68bc727984683

    [28/02/2012 - 16:26:27 | D] - D:\540dbe5d4510b618ae288e2545

    [29/02/2012 - 09:38:32 | D] - D:\07c0d85f93c682371a637d8020547ce9

    [29/02/2012 - 11:13:52 | D] - D:\37bd89dcc23b72f511665a33f85be3a9

    [01/03/2012 - 10:03:48 | D] - D:\e829214f676016bb16

    [01/03/2012 - 14:11:36 | D] - D:\e4c282638a645cccf6496d75ce

    [02/03/2012 - 08:01:20 | D] - D:\66538e8052ba21701c42ff9504c196

    [03/03/2012 - 12:58:53 | D] - D:\242a0dfa09e2262895ad3458b3

    [04/03/2012 - 01:16:03 | D] - D:\69524eeb3ff59d72e42a

    [04/03/2012 - 12:44:44 | D] - D:\b2d276ee26a0ec76e29f29

    [05/03/2012 - 10:00:28 | D] - D:\b2353b6cecc355fc8b2ef3

    [05/03/2012 - 11:56:42 | D] - D:\b71c3b750bace7faeeeaf64c1c44c8c3

    [06/03/2012 - 10:55:26 | D] - D:\e33dfc62ade698e5088dc37a

    [07/03/2012 - 01:03:53 | D] - D:\17901a0727e2b7a145b44195cfaf9c1a

    [07/03/2012 - 11:15:39 | D] - D:\84e1dd8d38978e68b7513b9217

    [08/03/2012 - 03:57:39 | D] - D:\96866dda160348145e27b3dd90f69f

    [08/03/2012 - 23:50:35 | D] - D:\92f1ba5f35e27bade41fae

    [09/03/2012 - 10:55:30 | D] - D:\22627beb372ed972c20962

    [09/03/2012 - 12:12:52 | D] - D:\4723a413a4255cd6c73c199432185842

    [11/03/2012 - 13:38:40 | D] - D:\12babe960d171226b4b5e2

    [12/03/2012 - 12:59:26 | D] - D:\55b44da595a177bc19c2bc8ae5f7

    [13/03/2012 - 00:17:55 | D] - D:\cc5852878eaf2714bca2bcc641

    [13/03/2012 - 07:40:24 | D] - D:\aa570035e99354874c75d8

    [13/03/2012 - 22:32:32 | D] - D:\89811ad1d71263fabd53

    [13/03/2012 - 23:43:45 | D] - D:\853502cab4ff50e3a64660ffd38a

    [15/03/2012 - 01:32:48 | D] - D:\147b37f26d2a24c97cfa8e0da0

    [15/03/2012 - 08:44:52 | D] - D:\aba14e12c128e92cd847d5cc

    [16/03/2012 - 10:51:43 | D] - D:\3a3ac5e868d22766595351

    [17/03/2012 - 00:12:25 | D] - D:\edf2cdb54ee2560d1eab2cc2782e

    [17/03/2012 - 12:41:43 | D] - D:\94e1bdc09319e755e6122432c6

    [18/03/2012 - 03:03:39 | D] - D:\5a0e377ad96cf8bb13ea4d

    [19/03/2012 - 10:49:14 | D] - D:\b0f0e8ae2560cb5fd4

    [20/03/2012 - 01:08:26 | D] - D:\c4163aa7e95cf2648595edb778

    [20/03/2012 - 12:10:32 | D] - D:\4b4d0748aefb7bb74cf70282

    [21/03/2012 - 06:53:41 | D] - D:\d8516b8383e1b12195

    [21/03/2012 - 19:06:46 | D] - D:\76a7a69d17629fa026411401ee4e01

    [21/03/2012 - 23:19:25 | D] - D:\afda75e0d918006b118252dd1cd851b3

    [22/03/2012 - 06:40:17 | D] - D:\bda31530a2e1891ee845f62519c6

    [22/03/2012 - 15:24:47 | D] - D:\2809d9dcebe6a8dd6f

    [23/03/2012 - 00:54:50 | D] - D:\8383af7208deeb7bb8e0d51f

    [24/03/2012 - 12:40:26 | D] - D:\f573a33fff498823122a200099d7

    [26/03/2012 - 21:08:43 | D] - D:\1033e45eb4a15e9ade

    [27/03/2012 - 07:38:11 | D] - D:\48540ffb1bf4140cb6

    [27/03/2012 - 08:31:42 | D] - D:\5d4193ef51e460090e5684d0feac

    [27/03/2012 - 18:55:02 | D] - D:\4882fe7fd8c087dbb2

    [27/03/2012 - 19:39:45 | D] - D:\23f48731bdaaaec3e154cdf1

    [29/03/2012 - 00:20:49 | D] - D:\542ed8a97430546b65995b04f2

    [29/03/2012 - 08:14:13 | D] - D:\c06fa2dfad54de4001

    [29/03/2012 - 23:13:26 | D] - D:\c8034fc37afdd4bdb7

    [31/03/2012 - 00:45:49 | D] - D:\e2dda91ad42db88856f3f1

    [31/03/2012 - 08:25:30 | D] - D:\3756c7b2d51771f484fc2cba58487f4d

    [01/04/2012 - 14:51:48 | D] - D:\3e8fc65e519d275b51d88c38ad91ee

    [02/04/2012 - 12:39:57 | D] - D:\ad9b36fac6889f798a15f4504f19

    [03/04/2012 - 07:32:18 | D] - D:\e647433d385aec3544c33c6739a550

    [04/04/2012 - 16:27:54 | D] - D:\79350564e487631db847

    [05/04/2012 - 08:31:57 | D] - D:\5b69fd770a199a37e7dad20e

    [07/04/2012 - 01:51:58 | D] - D:\4bc9905eba598b2d0b67de08

    [07/04/2012 - 08:51:42 | D] - D:\c3f21539413dd576dd245d32

    [07/04/2012 - 11:07:42 | D] - D:\7a4e6dbae1e62e5b96e1d0

    [07/04/2012 - 20:32:50 | D] - D:\a3bf8aeb8d38747912e9b348

    [08/04/2012 - 13:18:05 | D] - D:\fa41dae9dd2a74c9c90509

    [08/04/2012 - 16:27:55 | D] - D:\c201f2a69d34048bbb3265

    [10/04/2012 - 09:12:57 | D] - D:\27584f01f3984e7fd19e76eaad120916

    [11/04/2012 - 08:57:22 | D] - D:\f89f3269c183a1c046

    [12/04/2012 - 08:50:39 | D] - D:\ea3f743a0189992ff2f7d3

    [12/04/2012 - 12:49:33 | D] - D:\ed7243cfa1b362a9a41c13de8cc6

    [13/04/2012 - 10:36:59 | D] - D:\fcbcea0b4475ccff5ce0fb3876

    [13/04/2012 - 14:34:15 | D] - D:\189c29ddd36ebcfd52

    [13/04/2012 - 17:26:33 | D] - D:\735f310cf2e959c9235bd682

    [14/04/2012 - 03:02:38 | D] - D:\78ebe46cdc4bcbaeb7

    [14/04/2012 - 04:01:34 | D] - D:\d143c8586da76a96e49f

    [15/04/2012 - 12:20:57 | D] - D:\e189cc4fbb719de47064

    [16/04/2012 - 00:05:32 | D] - D:\1305e53f5c123be5bc884785

    [16/04/2012 - 11:57:48 | D] - D:\5cde17c467375b9e96aa48f783

    [16/04/2012 - 23:58:24 | D] - D:\541e040a1eefd7c254e0e2f3c9

    [17/04/2012 - 12:13:21 | D] - D:\a203bee50c41ca813c4025

    [18/04/2012 - 11:24:30 | D] - D:\92f95458f06d6e8e24815e

    [19/04/2012 - 09:24:03 | D] - D:\537329bd139ffbd9546c4db0

    [19/04/2012 - 16:21:19 | D] - D:\dd5ddae17e09ef1546b0d4ba81da

    [19/04/2012 - 20:19:22 | D] - D:\9d53317370ef6d332aca3816d5d6

    [20/04/2012 - 02:06:24 | D] - D:\681efcca52a203b99b

    [20/04/2012 - 17:06:58 | D] - D:\a3cf192fb0dec8a56b8bae5a

    [20/04/2012 - 22:24:48 | D] - D:\88129f07ce8ce97401

    [21/04/2012 - 07:26:59 | D] - D:\cabce1b7e893556851222f

    [22/04/2012 - 01:20:15 | D] - D:\d8ac64413761f0fdbf

    [23/04/2012 - 01:23:15 | D] - D:\895736006899d1a9be27

    [23/04/2012 - 12:09:09 | D] - D:\cf7a43818428eac7c503825094c7f4fa

    [23/04/2012 - 18:21:45 | D] - D:\4c948ff915bc25eda6199b2fa5

    [24/04/2012 - 11:57:07 | D] - D:\f6c3f7dd9fb85e59ea1ea79859a1dd

    [24/04/2012 - 22:29:03 | D] - D:\7441a349221dd14bd218beff7e

    [25/04/2012 - 12:11:31 | D] - D:\2a0346f5b6a4af3d37b42d

    [25/04/2012 - 13:51:18 | D] - D:\7f041d8369d3ab715aea4824f9216bfb

    [25/04/2012 - 14:16:29 | D] - D:\3e30d13df61de789a874958832dbc5

    [26/04/20

    Esta resposta foi útil?

    0 comentários Sem comentários
  2. Anônima
    2014-05-25T19:18:24+00:00

    Celso, quanto ao seu caso já tinha te passado a resposta:

    Olá Celso. Você e a Adriana estão sendo ajudados no mesmo tópico. Mas é fácil de saber quando estou ajudando você ou ela, porque quando vou passar o procedimento para um de vocês estarei sempre falando o nome da pessoa no procedimento.

    agora, por exemplo, o procedimento é para você Celso:

    Desative temporariamente seu antivírus para evitar conflitos.

    * Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:

    http://www.hijackthis.nl/smeenk/

     Para executá-lo corretamente siga as dicas deste tutorial:

    Exclua adwares e outras ameaças de seu PC e browsers com o aplicativo Zoek

    * Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:*zoek-results.txt* e copie todo seu conteúdo e poste em sua próxima resposta.

    Esta resposta foi útil?

    0 comentários Sem comentários
  3. Anônima
    2014-05-25T19:15:59+00:00

    Oi Adriana. No caso do Usbfix você fez só a pesquisa dos problemas. É preciso clicar no botão supressão para que ele elimine os vírus. Faça isto e depois poste o novo relatório que o Usbfix irá criar.

    E no caso do ZHPFix, você só repetiu o que te passei. Mas o que preciso é que você copie todo aquele texto em negrito que te passei. Depois de copiar o texto, vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas. Poste este relatório em sua próxima resposta juntamente com o relatório do Usbfix.

    Esta resposta foi útil?

    0 comentários Sem comentários
  4. Anônima
    2014-05-25T19:07:24+00:00

    Olá Adriana. Estes outros procedimentos são para você:

    * Faça o download do Usbfix neste link (ao acessar a página clique no botão representado nesta imagem (na parte inferior direita da página) para baixá-lo:

     

    Utilize o USBFix conforme é mostrado nesta postagem:

    Tutorial do USBFix

    __________________________________________________________________________________________________

    * Há programas desnecessários iniciando junto com o Windows, o que torna o seu PC mais lento. Para corrigir isto, siga as dicas deste tutorial:

    Escolhendo Programas que Iniciam com o PC

    De preferência deixe apenas os programas de segurança (anti-vírus/anti-spywares/firewall) iniciarem junto com o Windows.

    Use também o programa Ccleaner, indicado neste tutorial acima, para fazer uma limpeza e otimização do PC agora e de tempos em tempos.

    _________________________________________________________________________________________________

    * No seu relatório está constando que você está usando uma versão antiga do antivirus Avg (que é a versão 2012). É muito importante desinstalá-lo e instalar a nova versão dele que é o Avg 2014. Depois de instalar a nova versão dele faça uma verificação completa com ele e envie os vírus que ele encontrar para a quarentena dele.

    __________________________________________________________________________________________________

    Selecione e copie todo o texto destacado em negrito abaixo (começando em script zhpfix e indo até emptyclsid)

    script zhpfix

    SysRestore

    O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Chave orfã O4 - HKCU..\Run: [AdobeBridge] Chave orfã

    O4 - HKUS\S-1-5-21-2570333737-3344067203-222050451-1000..\Run: [AdobeBridge] Chave orfã

    O9 - Extra button: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} -- Chave orfã O20 - AppInit_DLLs: . (...) - C:\Program Files\SupTab\SEARCH~1.dll (.not file.)   =>PUP.SupTab

    O23 - Service: Assistant (699fd52f) . (...) - C:\Program Files\assist~1\AssistantSvc.dll (.not file.)

    [MD5.00000000000000000000000000000000] [APT] [EasyPartitionManager] (...) -- C:\Windows\MSetup\BA46-12225A02\EPM.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{00F6227F-5530-4767-B52C-51CABD19FE51}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{01EA279D-9C90-43A9-B1B6-E784B5E965F7}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{0B53DCD7-219B-4D0A-A1EF-5A60224EE1A5}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{154F6401-30AD-496D-BBEE-8795B9CA439E}] (...) -- C:\Program Files\BabylonToolbar\BabylonToolbar\1.8.7.2\GUninstaller.exe (.not file.)   [0]   =>PUP.Babylon

    [MD5.00000000000000000000000000000000] [APT] [{15665EB0-C617-4349-978F-6686CE379B93}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{1C4FBCDA-83AD-4679-8094-F838B66FBC23}] (...) -- C:\Users\noggerini\Desktop\the sims (full pc game).exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{2931BE62-7E5A-4A99-A840-6045EA453AE7}] (...) -- D:\chris\Pes 14\PESEdit.com 2014 Patch 0.2\Installer.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{354CBDAA-52BD-472C-8CE0-AFF25B76DE97}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{57E74EEC-A77D-45BA-BCAD-252F494A4A00}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{643486F9-1A43-4DF4-A540-BF20F73CD57F}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{66F56EAB-833B-4A8A-B467-75CB9E1999A5}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{7CE2F242-316C-4B4E-9EFA-90848948D6DB}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{890F22D9-3EFE-4ADE-9C9F-7DE42AA034E6}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{8A5D0517-72BB-4888-81EE-B4087D52511F}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{9BC54529-4DC2-4B12-8057-B70BCD69BC54}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{9EAE88DA-A210-4009-9483-AD160413C880}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{BCCB9FD3-773D-430D-9D65-85CE6523F219}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{BE3DB52C-1D8E-4F03-AFD3-CCE79C6C4506}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{BE853E6C-7F55-4829-A61D-2C9CBDA39233}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{C33B9598-B5FE-48A9-9A9D-AAE4A21058D1}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\REGSETUP.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{C7536E04-BF87-40E4-AB98-0D129C36EEBF}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{D74BEC81-6A8B-434B-8098-7A42166A2551}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{DC905992-74A8-436A-987B-A6B303B3E51F}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{E048009B-1812-4FCC-BCEE-78D55BCACFA3}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{E1968B23-0580-4056-A9F2-99286400A779}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.A1880BC1C1703876B00B77EAE100755A] [APT] [{F0E168B5-DB7A-4D7B-A50E-5D7BC4F54A90}] (.Skytech Co., Ltd..) -- C:\Users\noggerini\AppData\Roaming\sweet-page\UninstallManager.exe   [1857688]   =>PUP.SweetPage

    [MD5.00000000000000000000000000000000] [APT] [{F632598F-6DEB-4D2B-8BA4-03C7839AAE97}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{FCEFEBBC-1F4A-4CEB-928E-8EC9E341CA83}] (...) -- C:\Program Files\Baidu Security\PC Faster\3.7.0.0\UninstCaller.exe (.not file.)   [0]

    O41 - Driver:  (Bfilter) . (. - .) - C:\windows\system32\drivers\Bfilter.sys (.not file.)

    O41 - Driver:  (Bfmon) . (. - .) - C:\windows\system32\drivers\Bfmon.sys (.not file.)

    O41 - Driver: (Bnbase) . (. - .) - C:\Windows\System32\drivers\bnbasex.sys (.not file.)

    O41 - Driver:  (Bndef) . (. - .) - C:\windows\system32\drivers\bndef.sys (.not file.)

    O41 - Driver:  (Bprotect) . (. - .) - C:\windows\system32\drivers\Bprotect.sys (.not file.)

    O41 - Driver:  (qknfd) . (. - .) - C:\Windows\System32\drivers\qknfd.sys (.not file.)

    O42 - Logiciel: Sweet Page - (.sweet-page.) [HKLM] -- sweet-page uninstaller   =>PUP.SweetPage

    O42 - Logiciel: Update_for_BonanzaDeals - (.Update_for_BonanzaDeals.) [HKCU] -- Bonanza   =>Adware.BonanzaDeals

    [HKCU\Software\Baidu Security]

    [HKCU\Software\PCDataApp]

    [HKLM\Software\360Safe]

    [HKLM\Software\Baidu Security]

    [HKLM\Software\Baidu_Drp_pos]

    [HKLM\Software\PCDataApp]

    [HKLM\Software\SupDp]   =>PUP.SupTab

    [HKLM\Software\Wpm]   =>PUP.WpManager

    [HKLM\Software\supTab]   =>PUP.SupTab

    [HKLM\Software\supWPM]   =>PUP.WpManager

    O43 - CFD: 23/05/2014 - 15:04:45 - [] ----D C:\Program Files\Baidu Security

    O43 - CFD: 23/05/2014 - 15:10:03 - [0] ----D C:\Program Files\NExTuCoupp   =>PUP.NextCoup

    O43 - CFD: 28/04/2014 - 09:54:24 - [] ----D C:\Program Files\PCDApp   =>Trojan.BitCoinMiner

    O43 - CFD: 23/05/2014 - 15:05:28 - [] ----D C:\ProgramData\Baidu Security

    O43 - CFD: 23/05/2014 - 21:59:44 - [] ----D C:\ProgramData\IePluginServices   =>Trojan.SProtector

    O43 - CFD: 23/05/2014 - 15:13:31 - [0] ----D C:\ProgramData\NExTuCoupp   =>PUP.NextCoup

    O43 - CFD: 25/03/2014 - 11:56:44 - [0] ----D C:\ProgramData\WebTect

    O43 - CFD: 01/11/2013 - 10:02:58 - [] ----D C:\Users\noggerini\AppData\Roaming\Baidu Security

    O43 - CFD: 23/05/2014 - 15:21:03 - [] ----D C:\Users\noggerini\AppData\Roaming\sweet-page   =>PUP.SweetPage

    O43 - CFD: 07/02/2014 - 23:20:16 - [] ----D C:\Users\noggerini\AppData\Roaming\UpdateBonanza   =>Adware.BonanzaDeals

    O47 - AAKE:Key Export SP - "C:\Users\NOGGER~1\AppData\Local\Temp\IXP000.TMP\WORKIN~1.exe" [Enabled] .(...) -- C:\Users\NOGGER~1\AppData\Local\Temp\IXP000.TMP\WORKIN~1.exe (.not file.)

    O51 - MPSK:{2afbdfbc-a680-11e1-8f0e-e81132a47034}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)

    O51 - MPSK:{2afbdfcc-a680-11e1-8f0e-e81132a47034}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)

    O51 - MPSK:{2afbe00f-a680-11e1-8f0e-e81132a47034}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)

    O51 - MPSK:{2afbe01f-a680-11e1-8f0e-e81132a47034}\AutoRun\command. (...) -- F:\AutoRun.exe (.not file.)

    O51 - MPSK:{a2ec09d1-3959-11e1-8df2-e81132a47034}\AutoRun\command. (...) -- G:\autorun.exe (.not file.)

    O51 - MPSK:{cf097f70-28c5-11e1-8b16-e81132a47034}\AutoRun\command. (...) -- G:\autorun.exe (.not file.)

    O51 - MPSK:{dc0abc81-ce3e-11e3-981f-e81132a47034}\AutoRun\command. (...) -- G:\LGAutoRun.exe (.not file.)

    O51 - MPSK:{dc0abcb3-ce3e-11e3-981f-e81132a47034}\AutoRun\command. (...) -- G:\LGAutoRun.exe (.not file.)

    O53 - SMSR:HKLM...\startupreg\HKCU  [Key] . (...) -- C:\windows\system32\WinDir\Svchost.exe (.not file.)

    O53 - SMSR:HKLM...\startupreg\HKLM  [Key] . (...) -- C:\windows\system32\WinDir\Svchost.exe (.not file.)

    O92 - MNS:  - {35B6525E-071A-4EA9-B3BD-F6A742572F08}

    [MD5.4AFAA1ED6A27FFEEE76EA2B7643B6309] [WIS][20/06/2013] (.DealPly Technologies Ltd - Google Update Helper.) -- C:\Windows\Installer\c29e79.msi   [40960]   =>PUP.DealPly

    HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_20121115_RASAPI32   =>Adware.IMBooster

    HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_20121115_RASMANCS   =>Adware.IMBooster

    [HKCR\CLSID{0EF3A3A8-E94C-2325-ED17-1572953D802E}] (CostMin)   =>PUP.CostMin

    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\sweet-page uninstaller]   =>PUP.SweetPage^

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bonanza]   =>Adware.BonanzaDeals^

    [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc]   =>PUP.eSafeSecurity

    [HKLM\Software\360Safe]   =>Trojan.Lozavita

    C:\Program Files\NExTuCoupp   =>PUP.NextCoup^

    C:\Program Files\PCDApp   =>Trojan.BitCoinMiner^

    C:\ProgramData\IePluginServices   =>Trojan.SProtector^

    C:\ProgramData\NExTuCoupp   =>PUP.NextCoup^

    C:\Users\noggerini\AppData\Roaming\sweet-page   =>PUP.SweetPage^

    C:\Users\noggerini\AppData\Roaming\UpdateBonanza   =>Adware.BonanzaDeals^

    C:\Users\noggerini\AppData\Roaming\sweet-page\UninstallManager.exe   =>PUP.SweetPage^

    [HKLM\Software\SupDp]   =>PUP.SupTab^

    [HKLM\Software\Wpm]   =>PUP.WpManager^

    [HKLM\Software\supTab]   =>PUP.SupTab^

    [HKLM\Software\supWPM]   =>PUP.WpManager^

    C:\Windows\Installer\c29e79.msi   =>PUP.DealPly^

    [HKCR\CLSID{0EF3A3A8-E94C-2325-ED17-1572953D802E}] (CostMin)   =>PUP.CostMin^

    ShortcutFix

    ProxyFix

    EmptyTemp

    EmptyFlash

    emptyclsid

    _____________________________________________________________________________________________________________

     Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas. 

    Copie este relatório e poste em sua próxima resposta juntamente com o log (relatório) do Usbfix que estará em C:*UsbFix.txt*

    script zhpfix

    SysRestore

    O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Chave orfã   O4 - HKCU..\Run: [AdobeBridge] Chave orfã

    O4 - HKUS\S-1-5-21-2570333737-3344067203-222050451-1000..\Run: [AdobeBridge] Chave orfã

    O9 - Extra button: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} -- Chave orfã O20 - AppInit_DLLs: . (...) - C:\Program Files\SupTab\SEARCH~1.dll (.not file.)   =>PUP.SupTab

    O23 - Service: Assistant (699fd52f) . (...) - C:\Program Files\assist~1\AssistantSvc.dll (.not file.)

    [MD5.00000000000000000000000000000000] [APT] [EasyPartitionManager] (...) -- C:\Windows\MSetup\BA46-12225A02\EPM.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{00F6227F-5530-4767-B52C-51CABD19FE51}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{01EA279D-9C90-43A9-B1B6-E784B5E965F7}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{0B53DCD7-219B-4D0A-A1EF-5A60224EE1A5}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{154F6401-30AD-496D-BBEE-8795B9CA439E}] (...) -- C:\Program Files\BabylonToolbar\BabylonToolbar\1.8.7.2\GUninstaller.exe (.not file.)   [0]   =>PUP.Babylon

    [MD5.00000000000000000000000000000000] [APT] [{15665EB0-C617-4349-978F-6686CE379B93}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{1C4FBCDA-83AD-4679-8094-F838B66FBC23}] (...) -- C:\Users\noggerini\Desktop\the sims (full pc game).exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{2931BE62-7E5A-4A99-A840-6045EA453AE7}] (...) -- D:\chris\Pes 14\PESEdit.com 2014 Patch 0.2\Installer.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{354CBDAA-52BD-472C-8CE0-AFF25B76DE97}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{57E74EEC-A77D-45BA-BCAD-252F494A4A00}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{643486F9-1A43-4DF4-A540-BF20F73CD57F}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{66F56EAB-833B-4A8A-B467-75CB9E1999A5}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{7CE2F242-316C-4B4E-9EFA-90848948D6DB}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{890F22D9-3EFE-4ADE-9C9F-7DE42AA034E6}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{8A5D0517-72BB-4888-81EE-B4087D52511F}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{9BC54529-4DC2-4B12-8057-B70BCD69BC54}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{9EAE88DA-A210-4009-9483-AD160413C880}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{BCCB9FD3-773D-430D-9D65-85CE6523F219}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{BE3DB52C-1D8E-4F03-AFD3-CCE79C6C4506}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{BE853E6C-7F55-4829-A61D-2C9CBDA39233}] (...) -- C:\Users\noggerini\Desktop\Emulador Nintendinho\RockNES.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{C33B9598-B5FE-48A9-9A9D-AAE4A21058D1}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\REGSETUP.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{C7536E04-BF87-40E4-AB98-0D129C36EEBF}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{D74BEC81-6A8B-434B-8098-7A42166A2551}] (...) -- C:\Users\noggerini\Desktop\Christian noggerini\Command and Conquer Tiberian Sun\Command and Conquer Tiberian Sun\SUN.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{DC905992-74A8-436A-987B-A6B303B3E51F}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{E048009B-1812-4FCC-BCEE-78D55BCACFA3}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{E1968B23-0580-4056-A9F2-99286400A779}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.A1880BC1C1703876B00B77EAE100755A] [APT] [{F0E168B5-DB7A-4D7B-A50E-5D7BC4F54A90}] (.Skytech Co., Ltd..) -- C:\Users\noggerini\AppData\Roaming\sweet-page\UninstallManager.exe   [1857688]   =>PUP.SweetPage

    [MD5.00000000000000000000000000000000] [APT] [{F632598F-6DEB-4D2B-8BA4-03C7839AAE97}] (...) -- C:\Users\noggerini\Desktop\PlantsVsZombies.exe (.not file.)   [0]

    [MD5.00000000000000000000000000000000] [APT] [{FCEFEBBC-1F4A-4CEB-928E-8EC9E341CA83}] (...) -- C:\Program Files\Baidu Security\PC Faster\3.7.0.0\UninstCaller.exe (.not file.)   [0]    

    O41 - Driver:  (Bfilter) . (. - .) - C:\windows\system32\drivers\Bfilter.sys (.not file.)

    O41 - Driver:  (Bfmon) . (. - .) - C:\windows\system32\drivers\Bfmon.sys (.not file.)

    O41 - Driver: (Bnbase) . (. - .) - C:\Windows\System32\drivers\bnbasex.sys (.not file.)

    O41 - Driver:  (Bndef) . (. - .) - C:\windows\system32\drivers\bndef.sys (.not file.)

    O41 - Driver:  (Bprotect) . (. - .) - C:\windows\system32\drivers\Bprotect.sys (.not file.)

    O41 - Driver:  (qknfd) . (. - .) - C:\Windows\System32\drivers\qknfd.sys (.not file.)

    O42 - Logiciel: Sweet Page - (.sweet-page.) [HKLM] -- sweet-page uninstaller   =>PUP.SweetPage

    O42 - Logiciel: Update_for_BonanzaDeals - (.Update_for_BonanzaDeals.) [HKCU] -- Bonanza   =>Adware.BonanzaDeals

    [HKCU\Software\Baidu Security]    

    [HKCU\Software\PCDataApp]    

    [HKLM\Software\360Safe]

    [HKLM\Software\Baidu Security]    

    [HKLM\Software\Baidu_Drp_pos]

    [HKLM\Software\PCDataApp]    

    [HKLM\Software\SupDp]   =>PUP.SupTab

    [HKLM\Software\Wpm]   =>PUP.WpManager

    [HKLM\Software\supTab]   =>PUP.SupTab

    [HKLM\Software\supWPM]   =>PUP.WpManager

    O43 - CFD: 23/05/2014 - 15:04:45 - [] ----D C:\Program Files\Baidu Security   

    O43 - CFD: 23/05/2014 - 15:10:03 - [0] ----D C:\Program Files\NExTuCoupp   =>PUP.NextCoup

    O43 - CFD: 28/04/2014 - 09:54:24 - [] ----D C:\Program Files\PCDApp   =>Trojan.BitCoinMiner

    O43 - CFD: 23/05/2014 - 15:05:28 - [] ----D C:\ProgramData\Baidu Security    

    O43 - CFD: 23/05/2014 - 21:59:44 - [] ----D C:\ProgramData\IePluginServices   =>Trojan.SProtector

    O43 - CFD: 23/05/2014 - 15:13:31 - [0] ----D C:\ProgramData\NExTuCoupp   =>PUP.NextCoup

    O43 - CFD: 25/03/2014 - 11:56:44 - [0] ----D C:\ProgramData\WebTect

    O43 - CFD: 01/11/2013 - 10:02:58 - [] ----D C:\Users\noggerini\AppData\Roaming\Baidu Security    

    O43 - CFD: 23/05/2014 - 15:21:03 - [] ----D C:\Users\noggerini\AppData\Roaming\sweet-page   =>PUP.SweetPage

    O43 - CFD: 07/02/2014 - 23:20:16 - [] ----D C:\Users\noggerini\AppData\Roaming\UpdateBonanza   =>Adware.BonanzaDeals

    O47 - AAKE:Key Export SP - "C:\Users\NOGGER~1\AppData\Local\Temp\IXP000.TMP\WORKIN~1.exe" [Enabled] .(...) -- C:\Users\NOGGER~1\AppData\Local\Temp\IXP000.TMP\WORKIN~1.exe (.not file.)

    O51 - MPSK:{2afbdfbc-a680-11e1-8f0e-e81132a47034}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)    

    O51 - MPSK:{2afbdfcc-a680-11e1-8f0e-e81132a47034}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)    

    O51 - MPSK:{2afbe00f-a680-11e1-8f0e-e81132a47034}\AutoRun\command. (...) -- G:\AutoRun.exe (.not file.)    

    O51 - MPSK:{2afbe01f-a680-11e1-8f0e-e81132a47034}\AutoRun\command. (...) -- F:\AutoRun.exe (.not file.)    

    O51 - MPSK:{a2ec09d1-3959-11e1-8df2-e81132a47034}\AutoRun\command. (...) -- G:\autorun.exe (.not file.)    

    O51 - MPSK:{cf097f70-28c5-11e1-8b16-e81132a47034}\AutoRun\command. (...) -- G:\autorun.exe (.not file.)    

    O51 - MPSK:{dc0abc81-ce3e-11e3-981f-e81132a47034}\AutoRun\command. (...) -- G:\LGAutoRun.exe (.not file.)

    O51 - MPSK:{dc0abcb3-ce3e-11e3-981f-e81132a47034}\AutoRun\command. (...) -- G:\LGAutoRun.exe (.not file.)

    O53 - SMSR:HKLM...\startupreg\HKCU  [Key] . (...) -- C:\windows\system32\WinDir\Svchost.exe (.not file.)    

    O53 - SMSR:HKLM...\startupreg\HKLM  [Key] . (...) -- C:\windows\system32\WinDir\Svchost.exe (.not file.)    

    O92 - MNS:  - {35B6525E-071A-4EA9-B3BD-F6A742572F08}

    [MD5.4AFAA1ED6A27FFEEE76EA2B7643B6309] [WIS][20/06/2013] (.DealPly Technologies Ltd - Google Update Helper.) -- C:\Windows\Installer\c29e79.msi   [40960]   =>PUP.DealPly

    HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_20121115_RASAPI32   =>Adware.IMBooster

    HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_20121115_RASMANCS   =>Adware.IMBooster

    [HKCR\CLSID{0EF3A3A8-E94C-2325-ED17-1572953D802E}] (CostMin)   =>PUP.CostMin

    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\sweet-page uninstaller]   =>PUP.SweetPage^

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bonanza]   =>Adware.BonanzaDeals^

    [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc]   =>PUP.eSafeSecurity

    [HKLM\Software\360Safe]   =>Trojan.Lozavita

    C:\Program Files\NExTuCoupp   =>PUP.NextCoup^

    C:\Program Files\PCDApp   =>Trojan.BitCoinMiner^

    C:\ProgramData\IePluginServices   =>Trojan.SProtector^

    C:\ProgramData\NExTuCoupp   =>PUP.NextCoup^

    C:\Users\noggerini\AppData\Roaming\sweet-page   =>PUP.SweetPage^

    C:\Users\noggerini\AppData\Roaming\UpdateBonanza   =>Adware.BonanzaDeals^

    C:\Users\noggerini\AppData\Roaming\sweet-page\UninstallManager.exe   =>PUP.SweetPage^

    [HKLM\Software\SupDp]   =>PUP.SupTab^

    [HKLM\Software\Wpm]   =>PUP.WpManager^

    [HKLM\Software\supTab]   =>PUP.SupTab^

    [HKLM\Software\supWPM]   =>PUP.WpManager^

    C:\Windows\Installer\c29e79.msi   =>PUP.DealPly^

    [HKCR\CLSID{0EF3A3A8-E94C-2325-ED17-1572953D802E}] (CostMin)   =>PUP.CostMin^

    ShortcutFix

    ProxyFix

    EmptyTemp

    EmptyFlash

    emptyclsid

    [b]############################## | UsbFix V 7.171 | [Pesquisa][/b]

    Usuário: noggerini (Administrador) # NOGGERINI-PC

    Atualizado em 18/05/2014 por El Desaparecido - SosVirus

    Começou em 13:48:21 | 25/05/2014

    Site : [url=http://www.pt.usbfix.net/]http://www.pt.usbfix.net/[/url]

    Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]

    Asistencia : [url=http://pt.kioskea.net/forum/seguranca-virus-7]http://pt.kioskea.net/forum/seguranca-virus-7[/url]

    Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url]

    Contato : [url=http://www.pt.usbfix.net/contato/]http://www.pt.usbfix.net/contato/[/url]

    PC: SAMSUNG ELECTRONICS CO., LTD. (RV411/RV511/E3511/S3511/RV711/E3411)

    CPU: Intel(R) Pentium(R) CPU        P6100  @ 2.00GHz

    RAM -> [Total : 1909 Mo| Free : 436 Mo]

    Bios: Phoenix Technologies Ltd.

    Boot: Normal boot

    OS: Microsoft Windows 7 Starter  (6.1.7601 32-Bit) Service Pack 1

    WB: Windows Internet Explorer : 11.0.9600.17107

    WB: Mozilla Firefox : 29.0.1

    SC: Security Center [Enabled]

    WU: Windows Update [Enabled]

    AV: AVG Anti-Virus Free Edition 2012 [(!) Disabled | Updated]

    AS: AVG Anti-Virus Free Edition 2012 [(!) Disabled | Updated]

    AS: Windows Defender [Enabled | Updated]

    FW: Windows FireWall [Enabled]

    C:\ (%SystemDrive%) -> Disco fixo # 113 Gb (17 Mb livre - 15%) [] # NTFS

    D:\ -> Disco fixo # 167 Gb (83 Mb livre - 50%) [] # NTFS

    E:\ -> CD-ROM

    H:\ -> Disco removível # 7 Gb (6 Mb livre - 85%) [] # FAT32

    [b]################## | Processos Ativos |[/b]

    C:\Windows\System32\smss.exe (ID: 388|ParentID: 4|SISTEMA)

    C:\PROGRA~1\AVG\AVG2012\avgrsx.exe (ID: 496|ParentID: 484|SISTEMA)

    C:\Program Files\AVG\AVG2012\avgcsrvx.exe (ID: 532|ParentID: 496|SISTEMA)

    C:\Windows\System32\wininit.exe (ID: 828|ParentID: 748)

    C:\Windows\System32\services.exe (ID: 876|ParentID: 828)

    C:\Windows\System32\lsass.exe (ID: 900|ParentID: 828)

    C:\Windows\System32\lsm.exe (ID: 908|ParentID: 828)

    C:\Windows\System32\winlogon.exe (ID: 992|ParentID: 820)

    C:\Windows\System32\svchost.exe (ID: 1088|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 1164|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 1220|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 1316|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 1360|ParentID: 876)

    C:\Windows\System32\audiodg.exe (ID: 1452|ParentID: 1220)

    C:\Windows\System32\svchost.exe (ID: 1500|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 1588|ParentID: 876)

    C:\Windows\System32\spoolsv.exe (ID: 1792|ParentID: 876)

    C:\Windows\System32\taskeng.exe (ID: 1812|ParentID: 1360)

    C:\Windows\System32\svchost.exe (ID: 1836|ParentID: 876)

    C:\Windows\System32\taskhost.exe (ID: 868|ParentID: 876|noggerini)

    C:\Windows\System32\taskeng.exe (ID: 1028|ParentID: 1360|noggerini)

    C:\Windows\System32\dwm.exe (ID: 1036|ParentID: 1316|noggerini)

    C:\Windows\explorer.exe (ID: 1156|ParentID: 972|noggerini)

    C:\Program Files\Google\Update\GoogleUpdate.exe (ID: 112|ParentID: 1812)

    C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe (ID: 2068|ParentID: 112)

    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (ID: 2304|ParentID: 1156|noggerini)

    C:\Windows\System32\igfxpers.exe (ID: 2320|ParentID: 1156|noggerini)

    C:\Windows\System32\igfxtray.exe (ID: 2340|ParentID: 1156|noggerini)

    C:\Windows\System32\hkcmd.exe (ID: 2360|ParentID: 1156|noggerini)

    C:\Program Files\BlueStacks\HD-Agent.exe (ID: 2384|ParentID: 1156|noggerini)

    C:\Program Files\Google\Drive\googledrivesync.exe (ID: 2468|ParentID: 1156|noggerini)

    C:\Users\noggerini\AppData\Local\Google\Update\GoogleUpdate.exe (ID: 2520|ParentID: 1156|noggerini)

    C:\Program Files\Gyazo\GyStation.exe (ID: 2560|ParentID: 1156|noggerini)

    C:\Program Files\Google\Drive\googledrivesync.exe (ID: 3156|ParentID: 2468|noggerini)

    C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 3592|ParentID: 876)

    C:\Program Files\BlueStacks\HD-LogRotatorService.exe (ID: 3620|ParentID: 876)

    C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (ID: 3656|ParentID: 876)

    C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (ID: 3716|ParentID: 876)

    C:\Program Files\CyberLink\YouCam\YCMMirage.exe (ID: 3868|ParentID: 1028|noggerini)

    C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (ID: 3876|ParentID: 1028|noggerini)

    C:\Program Files\Samsung\Easy Display Manager\WifiManager.exe (ID: 3904|ParentID: 1028|noggerini)

    C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (ID: 4052|ParentID: 1028|noggerini)

    C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (ID: 2592|ParentID: 876)

    C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe (ID: 3144|ParentID: 876)

    C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (ID: 2964|ParentID: 876)

    C:\Program Files\Malwarebytes Anti-Malware\mbam.exe (ID: 2180|ParentID: 3144|noggerini)

    C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (ID: 3984|ParentID: 2964)

    C:\Windows\System32\igfxext.exe (ID: 3724|ParentID: 1088|noggerini)

    C:\Windows\System32\SearchIndexer.exe (ID: 2828|ParentID: 876)

    C:\Windows\System32\igfxsrvc.exe (ID: 2844|ParentID: 1088|noggerini)

    C:\Windows\System32\msiexec.exe (ID: 3020|ParentID: 876)

    C:\Windows\servicing\TrustedInstaller.exe (ID: 3124|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 2976|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 3136|ParentID: 876)

    C:\Program Files\Samsung\Samsung Recovery Solution 5\WCScheduler.exe (ID: 2188|ParentID: 1028|noggerini)

    C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe (ID: 6004|ParentID: 1028|noggerini)

    C:\Windows\System32\svchost.exe (ID: 5660|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 1124|ParentID: 876)

    C:\Windows\System32\svchost.exe (ID: 5028|ParentID: 876)

    C:\Program Files\Samsung\Movie Color Enhancer\MovieColorEnhance

    Esta resposta foi útil?

    0 comentários Sem comentários