Mysearchdial

Como está o PC atualmente?

Aqui está:

Rapport de ZHPFix 2014.2.16.5 par Nicolas Coolman, Update du 16/02/2014

Fichier d'export Registre :

Run by Gabriel at 08/03/2014 14:15:53

High Elevated Privileges : OK

Windows 8 Home Premium Edition, 64-bit  (Build 9200)

Reciclagem vazia (00mn 04s)

Reparação de atalhos do navegador

========== Chaves do Registo ==========

ELIMINÉ:* CLSID Extra Buttons: {31D09BA0-12F5-4CCE-BE8A-2923E76605DA}

ELIMINÉ CLSID MPSK: {cda5366a-a085-11e3-be79-0c8bfd38b16a}

========== Valores do Registo ==========

ELIMINÉ RunValue: ETDCtrl

ELIMINÉ RunValue: MetroTileShortcut

ProxyFix : Configuração proxy removida com sucesso

ELIMINÉ ProxyServer Value

ELIMINÉ ProxyEnable Value

ELIMINÉ EnableHttp1_1 Value

ELIMINÉ ProxyHttp1.1 Value

ELIMINÉ ProxyOverride Value

========== Pastas ==========

Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========

ELIMINÉ: c:\users\public\desktop\mcafee anti-theft.lnk

ELIMINÉ: c:\users\gabriel\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar\excel 2013.lnk

ELIMINÉ: c:\users\gabriel\desktop\gs - atalho.lnk

ELIMINÉ Temporários windows (148) (14.781.559 octets)

ELIMINÉ Flash Cookies (0) (0 octets)

========== Tarefa planificada ==========

ELIMINÉ: {3607338C-2524-4B2F-B992-CFC66F336EDF}

========== Restauração Sistema ==========

Ponto de restauro do sistema criado com sucesso

========== Outros ==========

NÃO-TRATADO O4 - HKUS\S-1-5-21..\Run: [resource] Chave orfã

NÃO-TRATADO O4 - HKUS\S-1-5-21..\RunOnce: [resource] Chave orfã

========== Recapitulativo ==========

2 : Chaves do Registo

8 : Valores do Registo

1 : Pastas

5 : Ficheiros

1 : Tarefa planificada

1 : Restauração Sistema

2 : Outros

End of clean in 00mn 50s

========== Caminho do ficheiro do relatório ==========

C:\Users\Gabriel\AppData\Roaming\ZHP\ZHPFix[R1].txt - 08/03/2014 14:15:57 [1809]

* Copie todo o texto destacado em negrito que te passei (começando em script zhpfix e indo até emptyclsid)

___________________________________________________________________________________________________________

*  Vá no menu: Iniciar > Todos os programas > ZHP > Abra o Zhpfix > Clique em Importação > Clique no botão GO> Clique em Oui> Caso queira que os arquivos da lixeira sejam excluídos clique em Ouinovamente > Um relatório aparecerá no bloco de notas. Copie este relatório e poste em sua próxima resposta.

Bom dia, aqui está, relatório do ZHPDiag:

~ Relatório do ZHPDiag v2014.3.2.6 - Nicolas Coolman  (03/03/2014)

~ Iniciado por Gabriel (08/03/2014 08:01:44)

~ Endereço do Website :  http://nicolascoolman.webs.com

~ Fóruns de suporte gratuito para desinfecção : http://nicolascoolman.webs.com/apps/links/

~ Tradução pelo utilizador

~ Estatuto da versão :

~  Lista Branca : Ativado pelo programa

~ Elevação dos Privilégios : OK

~ Controle de Conta de Utilizador : Activate by user

---\ Navegadores Internet

MSIE: Internet Explorer v10.0.9200.16798

GCIE: Google Chrome v33.0.1750.146 (Defaut)

---\ Informações sobre os produtos Windows

~ Langage: Portugais

Windows 8 Single Language, 64-bit  (Build 9200)

Windows Server License Manager Script : OK

Software Protection Service (Protection logicielle) : OK

Windows Automatic Updates : OK

Windows Activation Technologies : OK

---\ Softwares de proteçao do sistema

Malwarebytes Anti-Malware versão 1.75.0.1300

Windows Defender W8

---\ Softwares d'optimização do sistema

---\ Softwares de partilha do PeerToPeer (P2P)

---\ Monitoramento dos softwares

---\ Informações sobre o sistema

~ Processor: Intel64 Family 6 Model 69 Stepping 1, GenuineIntel

~ Operating System: 64 Bits

Boot mode: Normal (Normal boot)

Total RAM: 4004 MB (46% free)

System Restore: Activé (Enable)

System drive C: has 392 GB (86%) free of 455 GB

---\ Modo de conexão ao sistema

~ Computer Name: ULTRA-GABRIEL

~ User Name: Gabriel

~ All Users Names: UpdatusUser, HomeGroupUser$, Gabriel, Convidado, Administrador,

~ Unselected Option: 045,061,O62,065,066,080,O82,089

Logged in as Administrator

---\ As variáveis de ambiente

~ System Unit : C:\

~ %AppZHP% : C:\Users\Gabriel\AppData\Roaming\ZHP\

~ %AppData% : C:\Users\Gabriel\AppData\Roaming\

~ %Desktop% : C:\Users\Gabriel\Desktop\

~ %Favorites% : C:\Users\Gabriel\Favorites\

~ %LocalAppData% : C:\Users\Gabriel\AppData\Local\

~ %StartMenu% : C:\Users\Gabriel\AppData\Roaming\Microsoft\Windows\Start Menu\

~ %Windir% : C:\Windows\

~ %System% : C:\Windows\System32\

---\ Enumeração das unidades dos discos

C: Hard drive, Flash drive, Thumb drive (Free 392 Go of 455 Go)

---\ Estado do Centro de Segurança do Windows

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified

~ Security Center: 41 Legitimates Filtered in 00mn 00s

---\ Pesquisa particular de ficheiros genéricos

[MD5.0E8E6463F81C80AFBED533E0F1F8895D] - (.Microsoft Corporation - Windows Explorer.) (.05/12/2013 - 18:21:19.) -- C:\Windows\Explorer.exe [2391280]

[MD5.FE9AB232B56A12224E8A3F3F9878C9A3] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.26/07/2012 - 00:08:50.) -- C:\Windows\System32\Wininit.exe [132608]

[MD5.90860E913075B03369BEB7B0B510DC2F] - (.Microsoft Corporation - Internet Extensions para Win32.) (.01/02/2014 - 06:19:49.) -- C:\Windows\System32\wininet.dll [2241536]

[MD5.BCF2036A0DD579E47C008C133550283E] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.05/12/2013 - 18:17:58.) -- C:\Windows\System32\Winlogon.exe [517120]

[MD5.9448F5740A037EC0C18F0E9177232DD0] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.26/07/2012 - 00:07:20.) -- C:\Windows\System32\sppcomapi.dll [273408]

[MD5.7C0E0EDF18D6CC565D7BFBB451709FA5] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.04/09/2013 - 00:11:23.) -- C:\Windows\system32\Drivers\AFD.sys [576512]

[MD5.A721FF570C2387E383BDDEA9632863C9] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.26/07/2012 - 02:00:48.) -- C:\Windows\system32\Drivers\atapi.sys [25840]

[MD5.990B1BABE6E81FB18E65A87EBEFB1772] - (.Microsoft Corporation - CD-ROM File System Driver.) (.25/07/2012 - 23:30:10.) -- C:\Windows\system32\Drivers\Cdfs.sys [108544]

[MD5.339BFF85D788268752DA8C9644B188EE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.25/07/2012 - 23:26:36.) -- C:\Windows\system32\Drivers\Cdrom.sys [174080]

[MD5.09D9EB9E7898F8E6561473A20CC808B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.25/07/2012 - 23:26:53.) -- C:\Windows\system32\Drivers\DfsC.sys [118784]

[MD5.7D87B5B6C7188D553E11B59DC7F0B111] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/09/2012 - 03:08:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [71168]

[MD5.C9E9CBF73AFFBFE3E801EFB516787BA3] - (.Microsoft Corporation - Driver de porta i8042.) (.25/07/2012 - 23:28:51.) -- C:\Windows\system32\Drivers\i8042prt.sys [112640]

[MD5.3969B9C218DD3FAA9F4ED2FFC3651C02] - (.Microsoft Corporation - IP Network Address Translator.) (.25/07/2012 - 23:23:01.) -- C:\Windows\system32\Drivers\IpNat.sys [145920]

[MD5.93179D48066918323628CB016D8C94DC] - (.Microsoft Corporation - Minirdr SMB do Windows NT.) (.05/12/2013 - 18:22:20.) -- C:\Windows\system32\Drivers\MRxSmb.sys [370688]

[MD5.7CEC25C682D319D484630B3952C31A11] - (.Microsoft Corporation - MBT Transport driver.) (.25/07/2012 - 23:24:28.) -- C:\Windows\system32\Drivers\netBT.sys [331776]

[MD5.76929F4A69E425911A63B407E26C2589] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.05/12/2013 - 18:21:28.) -- C:\Windows\system32\Drivers\ntfs.sys [1933544]

[MD5.4563DAF8C6A740AD7F501E219BD10766] - (.Microsoft Corporation - Driver de porta paralela.) (.25/07/2012 - 23:29:53.) -- C:\Windows\system32\Drivers\Parport.sys [105984]

[MD5.A14D625C5AEE5FFE0F47D1A1D419FAAE] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.25/07/2012 - 23:23:17.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]

[MD5.B2A3AD74FF2E2FFA73AF2567108231B3] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.25/07/2012 - 23:25:18.) -- C:\Windows\system32\Drivers\rdpdr.sys [179712]

[MD5.73DC722CE5DF26D7638CE2446F2655C7] - (.Microsoft Corporation - TDI Translation Driver.) (.26/07/2012 - 02:26:47.) -- C:\Windows\system32\Drivers\tdx.sys [117248]

[MD5.78A5BBA3819FFFC62FFEC3E2220D102D] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.05/12/2013 - 18:21:16.) -- C:\Windows\system32\Drivers\volsnap.sys [327936]

~ Generic Processes:  Scanned in 00mn 01s

---\ Estatuto dos ficheiros ocultos (Oculto/Total)

~ Mes images (My Pictures) : 2/572

~ Mes musiques (My Musics) : 1/1310

~ Mes Videos (My Videos) : 2/23

~ Mes Favoris (My Favorites) : 1/7

~ Mes Documents (My Documents) : 1/2

~ Mon Bureau (My Desktop) : 2/10

~ Menu demarrer (Programs) : 1/23

~ Hidden Files:  Scanned in 00mn 02s

---\ Processos lançados

[MD5.77CDC93377F680155A3F55784110382C] - (.DigitalPersona, Inc. - DigitalPersona Local Agent.) -- C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe   [797048] [PID.2604]

[MD5.DB314CFF0FB931BEEF9AA53B4DBABDC5] - (.Microsoft Corporation - Touch Keyboard and Handwriting Panel Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe   [21064] [PID.3920]

[MD5.82713AE7E1B97D56F2C43960142F5658] - (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Gabriel\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe   [257224] [PID.8080]

[MD5.48E582E1AD36E620D7C4BC4EAD2DF41C] - (.Microsoft Corporation - Send to OneNote Tool.) -- C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.exe   [158808] [PID.6404]

[MD5.6BF60FE9B6ADF39E6D814E961A51827D] - (.FNet Co., Ltd. - No Comment.) -- C:\ProgramData\AutoStarter\AutoStarter.exe   [1419328] [PID.6956]

[MD5.86F33213C450FED3C7E32F9473415E7E] - (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe   [1058400] [PID.8288]

[MD5.BDFE0D7AC114A3C0986B09468D841100] - (.Hewlett-Packard Company - HP UT LEDM Driver.) -- C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe   [30264] [PID.2652]

[MD5.CBBCE8A55C1058D5927E7CE467B2E67B] - (.Microsoft Corporation - Microsoft Office Document Cache Sync Client.) -- C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.exe   [78496] [PID.5932]

[MD5.B35D65A3B744B3BF15F20B656124AAC5] - (.Microsoft Corporation - Microsoft Office Document Cache.) -- C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe   [448608] [PID.8540]

[MD5.581D8AD206E0DE14DB6B76884E144AF5] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [286704] [PID.9004]

[MD5.66EA3B698F9A7EA2DBF0E4B246B6C958] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8349696] [PID.2904]

~ Processes Running:  Scanned in 00mn 01s

---\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)

C:\Users\Gabriel\AppData\Local\Google\Chrome\User Data\Default\Preferences

G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé)

G2 - GCE: Preference [User Data\Default] [ncffjdbbodifgldkcbhmiiljfcnbgjab] DigitalPersona Extension v.1.0.0.5125 (Désactivé)

G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)

G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)

~ Google Browser: 17 Legitimates Filtered in 00mn 00s

---\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)

P2 - FPN: [HKLM] [@mcafee.com/MSC,version=10] - (...) -- C:\Program Files\mcafee\msc\npMcSnFFPl64.dll

P2 - FPN: [HKCU] [gastecnologia.com.br/sf/abn] - (.GAS Tecnologia - Internet Banking Helper.) -- C:\Users\Gabriel\AppData\Local\GAS Tecnologia\GBBD\npsf_abn.dll

P2 - FPN: [HKCU] [gastecnologia.com.br/sf/bb] - (.GAS Tecnologia - Internet Banking Helper.) -- C:\Users\Gabriel\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll

~ Firefox Browser: 3 Legitimates Filtered in 00mn 00s

---\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4)

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve

~ IE Browser: 17 Legitimates Filtered in 00mn 00s

---\ Internet Explorer, Gestão do Proxy (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Proxy management:  Scanned in 00mn 00s

---\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas

F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe,

F2 - REG:system.ini: Shell=C:\Windows\explorer.exe

F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe

~ Keys:  Scanned in 00mn 00s

---\ Redireção do ficheiro Hosts (01)

~ Le fichier hosts est sain (The hosts file is clean).

~ Hosts File:  Scanned in 00mn 00s

~ Nombre de lignes (Lines number): 21

---\ Browser Helper Objects do navegador (02)

O2 - BHO: G-Buster Browser Defense [64Bits] - {C41A1C0E-EA6C-11D4-B1B8-444553540000} . (.Banco do Brasil - Gbieh Module.) -- C:\Program Files (x86)\GbPlugin\gbieh.dll

O2 - BHO: G-Buster Browser Defense Itaú Unibanco [64Bits] - {C41A1C0E-EA6C-11D4-B1B8-444553540008} . (.Banco Itaú Unibanco - Gbieh Module.) -- C:\Program Files (x86)\GbPlugin\gbiehuni.dll

~ BHO: 6 Legitimates Filtered in 00mn 00s

---\ Outras conexões do utilizador (04)

O4 - GS\Desktop [Public]: EPSON Scan.lnk . (.SEIKO EPSON CORP. - EPSON Scan.)  -- C:\Windows\twain_32\escndv\escndv.exe

O4 - GS\Desktop [Public]: McAfee Anti-Theft.lnk . (...)  -- C:\Program Files (x86)\McAfeeAntiTheft\2.3.197.1\mcuicnt.exe (.not file.)

O4 - GS\Program [Public]: Desktop.lnk - Chave orfã

O4 - GS\Program [Public]: DigitalPersona Fingerprint Software.lnk . (.DigitalPersona, Inc. - User Dashboard.)  -- C:\Program Files (x86)\DigitalPersona\Bin\DPUserConsole.exe

O4 - GS\Program [Public]: Intel(R) WiDi.lnk . (...)  -- C:\Program Files (x86)\Intel Corporation\Intel WiDi\WiDiApp.exe (.not file.)

O4 - GS\QuickLaunch [Gabriel]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

O4 - GS\QuickLaunch [Gabriel]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O4 - GS\QuickLaunch [Gabriel]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\Gabriel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent

O4 - GS\TaskBar [Gabriel]: Excel 2013.lnk . (...)  -- C:\Program Files (x86)\Microsoft Office 15\root\office15\EXCEL.exe (.not file.)

O4 - GS\TaskBar [Gabriel]: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

O4 - GS\TaskBar [Gabriel]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O4 - GS\TaskBar [Gabriel]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\Gabriel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent

O4 - GS\Program [Gabriel]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

O4 - GS\Program [Gabriel]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.)  -- C:\Users\Gabriel\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

O4 - GS\Desktop [Gabriel]: CONTABILIDADE 2011 - PRINCIPAL - Atalho.lnk - Chave orfã

O4 - GS\Desktop [Gabriel]: Gabriel - Atalho.lnk - Chave orfã

O4 - GS\Desktop [Gabriel]: GS - Atalho.lnk . (...)  -- Z:\Zenit\GS\GS.exe (.not file.)

~ Global Startup: 41 Legitimates Filtered in 00mn 01s

---\ Aplicações iniciadas por registo & pastas (04)

O4 - GS\Startup [Gabriel]: Enviar para o OneNote.lnk . (.Microsoft Corporation - Send to OneNote Tool.)  -- C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.exe

O4 - HKLM..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.)

O4 - HKLM..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

O4 - HKLM..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

O4 - HKLM..\Run: [RtHDVBg_PushButton] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

O4 - HKLM..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe

O4 - HKLM..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe

O4 - HKLM..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe

O4 - HKLM..\Run: [QuickSet] . (.Dell Inc. - QuickSet.) -- c:\Program Files\Dell\QuickSet\QuickSet.exe

O4 - HKLM..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe

O4 - HKLM..\Run: [BTMTrayAgent] . (.Motorola Solutions, Inc. - Bluetooth Shell Extension.) -- C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll

O4 - HKCU..\Run: [SkyDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Gabriel\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

O4 - HKCU..\Run: [DellSystemDetect] . (.Dell - Dell System Detect.) -- C:\Users\Gabriel\AppData\Local\Apps\2.0\8RRA8VTD.14O\RATKCZEO.77G\dell..tion_0f612f649c4a10af_0005.0005_9914611622934cec\DellSystemDetect.exe

O4 - HKCU..\RunOnce: [Uninstall C:\Users\Gabriel\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] . (.Microsoft Corporation - Processador de comandos do Windows.) -- C:\WINDOWS\system32\cmd.exe

O4 - HKLM..\Wow6432Node\Run: [mcpltui_exe] . (.McAfee, Inc. - McAfee Security Center.) -- C:\Program Files\McAfee.com\Agent\mcagent.exe

O4 - HKLM..\Wow6432Node\Run: [MetroTileShortcut] C:\Program Files\McAfeeAntiTheft\2.1.170.2\McATUIHost.exe (.not file.)

O4 - HKLM..\Wow6432Node\Run: [AutoStarter] . (.FNet Co., Ltd. - No Comment.) -- C:\ProgramData\AutoStarter\AutoStarter.exe

O4 - HKLM..\Wow6432Node\Run: [EEventManager] . (.SEIKO EPSON CORPORATION - EEventManager Application.) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

O4 - HKLM..\Wow6432Node\Run: [HPUsageTrackingLEDM] . (.Hewlett-Packard Company - HP UT LEDM Driver.) -- C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe

O4 - HKUS\S-1-5-21..\Run: [resource] Chave orfã

O4 - HKUS\S-1-5-21..\RunOnce: [resource] Chave orfã

~ Application:  Scanned in 00mn 00s

---\ Boutões da barra de ferramentas principal do Internet Explorer (09)

O9 - Extra button: Se&nd to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll  =>.Microsoft Corporation

O9 - Extra button: Lync Click to Call [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\lync.exe (.not file.)

O9 - Extra button: OneNote Lin&ked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll  =>.Microsoft Corporation

~ IE Extra Buttons:  Scanned in 00mn 00s

---\ Site na zona confiavél do Internet Explorer (05)

O15 - Trusted Zone: [HKCU...\Domains\www] *.bancobrasil.com.br

O15 - Trusted Zone: [HKCU...\Domains\www] *.bb.com.br

O15 - Trusted Zone: [HKCU...\Domains] *.dell.com

O15 - Trusted Zone: [HKCU...\Domains\www] *.santander.com.br

O15 - Trusted Zone: [HKCU...\Domains\www] *.santanderempresarial.com.br

O15 - Trusted Zone: [HKCU...\Domains\www] *.santandernet.com.br

O15 - Trusted Zone: [HKCU...\Domains\www] *.santandernetibe.com.br

~ IE Zone Confiance:  Scanned in 00mn 00s

---\ Alteração Dominio/Clientes DNS (017)

O17 - HKLM\System\CCS\Services\Tcpip..{4A01D192-EC2C-4F3D-8618-05E60D469A05}: DhcpNameServer = 130.107.3.254

O17 - HKLM\System\CCS\Services\Tcpip..{A561BCE5-EC1A-465E-BC25-2BC3C62B4AB9}: DhcpNameServer = 130.107.3.254

O17 - HKLM\System\CCS\Services\Tcpip..{D9030CF5-679E-4079-A55A-F05262CB0A7D}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip..{4A01D192-EC2C-4F3D-8618-05E60D469A05}: DhcpDomain = orgrafic.local

O17 - HKLM\System\CCS\Services\Tcpip..{A561BCE5-EC1A-465E-BC25-2BC3C62B4AB9}: DhcpDomain = orgrafic.local

O17 - HKLM\System\CS1\Services\Tcpip..{4A01D192-EC2C-4F3D-8618-05E60D469A05}: DhcpNameServer = 130.107.3.254

O17 - HKLM\System\CS1\Services\Tcpip..{A561BCE5-EC1A-465E-BC25-2BC3C62B4AB9}: DhcpNameServer = 130.107.3.254

O17 - HKLM\System\CS1\Services\Tcpip..{D9030CF5-679E-4079-A55A-F05262CB0A7D}: DhcpNameServer = 192.168.1.1 192.168.1.1

O17 - HKLM\System\CS1\Services\Tcpip..{4A01D192-EC2C-4F3D-8618-05E60D469A05}: DhcpDomain = orgrafic.local

O17 - HKLM\System\CS1\Services\Tcpip..{A561BCE5-EC1A-465E-BC25-2BC3C62B4AB9}: DhcpDomain = orgrafic.local

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 130.107.3.254

~ Domain:  Scanned in 00mn 00s

---\ Protocolo adicional (018)

O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --

O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll  =>.Microsoft Corporation

~ Protocole Additionnel:  Scanned in 00mn 00s

---\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

~ Winlogon:  Scanned in 00mn 00s

---\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)

O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 311.) - C:\Windows\system32\nvinitx.dll

~ AppInit DLL:  Scanned in 00mn 00s

---\ Lista dos serviços NT não Microsoft e não desativados (023)

O23 - Service: Gbp Service (GbpSv) . (.GAS Tecnologia - G-Buster Browser Defense - Service.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe

O23 - Service: Mobile Broadband HL Service (Mobile Broadband HL Service) . (...) - C:\ProgramData\MobileBrServ\mbbservice.exe

O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) . (.Intel® Corporation - Intel® PROSet/Wireless Zero Configure Servi.) - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

~ Services: 38 Legitimates Filtered in 00mn 09s

---\ Tarefas planificadas automaticamente (039)

[MD5.00000000000000000000000000000000] [APT] [{3607338C-2524-4B2F-B992-CFC66F336EDF}] (...) -- C:\Users\Gabriel\AppData\Roaming\1H1Q\Media Player Packages\uninstaller.exe (.not file.)   [0]

~ Scheduled Task: 10 Legitimates Filtered in 00mn 05s

---\ Software instalados (042)

O42 - Logiciel: GBBD Banco do Brasil - (...) [HKLM][64Bits] -- {36386dc9-8543-4b12-ae6b-220fd52f19f3}_is1

O42 - Logiciel: Módulo de Proteção Banco Santander (Brasil) S.A. - (...) [HKLM][64Bits] -- {83033d93-48d0-48fc-9c5b-82e57e7e0dd6}_is1

~ Logic: 25 Legitimates Filtered in 00mn 00s

---\ HKCU & HKLM Software Keys

[HKCU\Software\AutoHelpDesk]

[HKLM\Software\Wow6432Node\AutoHelpDesk]

~ Key Software: 209 Legitimates Filtered in 00mn 00s

---\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 31/01/2014 - 18:57:41 - [1,354] ----D C:\ProgramData\AutoStarter

~ Program Folder: 127 Legitimates Filtered in 00mn 37s

---\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)

O44 - LFC:[MD5.9FF0F5852F10B08271A9549B01B7B2D2] - 06/03/2014 - 23:22:48 ---A- . (...) -- C:\Windows\System32\prfc0416.dat   [155144]

O44 - LFC:[MD5.AD08C740F08854B8CAB216C5E021A50C] - 06/03/2014 - 23:22:48 ---A- . (...) -- C:\Windows\System32\prfh0416.dat   [763854]

O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 07/03/2014 - 12:51:56 ---A- . (...) -- C:\Windows\zoek-delete.exe   [24064]

O44 - LFC:[MD5.5266639B4745EBA79344BADCDA1F146A] - 07/03/2014 - 13:10:05 ---A- . (...) -- C:\zoek-results.log   [18441]

~ Files: 15 Legitimates Filtered in 01mn 00s

---\ Chave do registo Shell MountPoints2 (MPKS) (O51)

O51 - MPSK:{cda5366a-a085-11e3-be79-0c8bfd38b16a}\AutoRun\command. (...) -- D:\AutoRun.exe (.not file.)

~ Keys:  Scanned in 00mn 00s

---\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)

O55 - MWPS:[HKLM...\Policies\System] - "EnableUIADesktopToggle"=0

O55 - MWPS:[HKLM...\Policies\System] - "FilterAdministratorToken"=0

~ MWPS: 19 Legitimates Filtered in 00mn 00s

---\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)

O56 - MWPE:[HKLM...\policies\Explorer] - "NoActiveDesktopChanges"=1

~ MWPE Keys: 5 Legitimates Filtered in 00mn 00s

---\ Lista dos drivers do sistema (SDL) (O58)

O58 - SDL:[MD5.78D9095FD12413BC35CAE345D3E7D4CC] - 09/04/2013 - 08:00:52 ---A- . (.Windows (R) Win 7 DDK provider - Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapt.) -- C:\Windows\System32\Drivers\AmpPal.sys   [164080]

O58 - SDL:[MD5.E7CF8C5023E3439CBA634438BEA2E532] - 06/06/2013 - 22:14:16 ---A- . (.ELAN Microelectronics Corp. - ETD Kernel Center.) -- C:\Windows\System32\Drivers\ETD.sys   [359176]

O58 - SDL:[MD5.73BDD44A6088916964945886F9025409] - 22/01/2014 - 08:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys   [108800]

O58 - SDL:[MD5.4E85355B94CFCB67C135F6521A4895A7] - 26/07/2012 - 02:00:55 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys   [30960]

O58 - SDL:[MD5.524BFB402B1AB1007ED91E94D6AB6F72] - 20/06/2013 - 19:36:56 ---A- . (.Windows (R) Win 7 DDK provider - usb3hub.sys.) -- C:\Windows\System32\Drivers\usb3Hub.sys   [206744]

O58 - SDL:[MD5.7C3C4B4C951EC1BDFD4F769D05E2CC68] - 31/01/2014 - 18:57:41 ---A- . (.FNet Co., Ltd. - FNetUrPx.sys.) -- C:\Windows\SysWOW64\drivers\FNETURPX.SYS   [15936]

O58 - SDL:[MD5.B7CC2AF3D5604EFDC5F82AF7A5B21FB1] - 07/03/2014 - 13:08:56 ---A- . (.GbPlugin NDIS Device Driver - GbPlugin NDIS Device Driver.) -- C:\Windows\SysWOW64\drivers\gbpndisrd.sys   [31088]

~ Drivers: 19 Legitimates Filtered in 00mn 04s

---\ Lista das ferramentas de remoção de vírus (LAT) (063)

O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman

~ ADS:  Scanned in 00mn 00s

---\ Associações Shell Spawning (O67)

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU..\open\Command] (.Not Key.)

~ FASS Keys: 11 Legitimates Filtered in 00mn 00s

---\ Menu de inicialização Internet (068)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Keys:  Scanned in 00mn 00s

---\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com

O69 - SBI: SearchScopes [HKCU] {6EB12282-B5AE-4AF2-A93D-093C89F70B8D} - (Yahoo! Search) - http://search.yahoo.com

O69 - SBI: SearchScopes [HKCU] {C303319E-2E9D-46BE-BFE5-E03572B337E0} [DefaultScope] - (Bing) - http://www.bing.com

~ Keys:  Scanned in 00mn 00s

---\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)

[MD5.F071FA8A9C23B119B7561873F01BDA3C] [SPRF][21/02/2014] (...) -- C:\Users\Gabriel\AppData\Roaming\unins000.dat   [15901]

[MD5.0196B6383B1F7E2A5CABBFD7B3CC6776] [SPRF][22/02/2014] (...) -- C:\Users\Gabriel\AppData\Roaming\unins001.dat   [18342]

~ Files: 2 Legitimates Filtered in 00mn 00s

---\ Listagem dos códigos dos software (PUC) (090)

O90 - PUC: "2A8EBFD6FBDCE3543BC4232F20CFEEC4" . (.Software Updater.) -- C:\WINDOWS\Installer{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}\icon.ico

~ Update Products: 52 Legitimates Filtered in 00mn 00s

---\ Pesquisa dos pacotes WindowsInstaller (WIS) (O93) (NTFS)

[MD5.CAE5B0C7C4660C08FC482019201980B2] [WIS][05/12/2013] (.DigitalPersona, Inc. - DigitalPersona Fingerprint Software.) -- C:\Windows\Installer\1698f.msi   [48055296]

~ WIS: 51 Legitimates Filtered in 00mn 08s

---\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)

SS - | Demand 18/07/2013 279024 |  (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe

SS - | Auto 12/02/2014 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

SS - | Demand 12/02/2014 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

SS - | Auto 24/06/2009 136704 |  (HP LaserJet Service) . (.HP.) - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe

SS - | Demand 24/04/2012 169752 |  (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

SS - | Demand 11/05/2013 822232 |  (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe

SS - | Demand 21/12/2012 334760 |  (McAWFwk) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe

SS - | Demand 02/08/2013 602944 |  (McODS) . (.McAfee, Inc..) - C:\Program Files\mcafee\VirusScan\mcods.exe

SS - | Demand 28/08/2013 273136 |  (MyWiFiDHCPDNS) . (...) - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

SR - | Auto 17/11/2009 98208 |  (AERTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

SR - | Auto 24/06/2013 1132920 |  (Bluetooth Device Monitor) . (.Motorola Solutions, Inc..) - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

SR - | Auto 23/04/2013 1153400 |  (Bluetooth OBEX Service) . (.Motorola Solutions, Inc..) - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

SR - | Auto 11/11/2013 283296 |  (BrcmSetSecurity) . (.Intel Corporation.) - C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe

SR - | Auto 21/06/2012 459128 |  (DpHost) . (.DigitalPersona, Inc..) - C:\Program Files\DigitalPersona\Bin\DpHostW.exe

SR - | Auto 10/05/2012 608864 |  (EpsonCustomerParticipation) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe

SR - | Auto 11/12/2011 135824 |  (EpsonScanSvc) . (.Seiko Epson Corporation.) - C:\WINDOWS\system32\EscSvc64.exe

SR - | Auto 28/08/2013 626416 |  (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe

SR - | Auto 21/02/2014 519720 |  (GbpSv) . (.GAS Tecnologia.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe

SR - | Auto 30/07/2013 328928 |  (HomeNetSvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

SR - | Auto 26/09/2012 126880 |  (HPSIService) . (.HP.) - C:\WINDOWS\system32\HPSIsvc.exe

SR - | Auto 30/04/2013 15344 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

SR - | Auto 11/05/2013 733696 |  (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe

SR - | Auto 26/06/2013 156616 |  (Intel(R) Wireless Bluetooth(R) 4.0 Radio Management) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

SR - | Auto 31/05/2013 169432 |  (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

SR - | Auto 31/05/2013 368600 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

SR - | Auto 28/01/2014 178528 |  (McAPExe) . (.McAfee, Inc..) - C:\Program Files\McAfee\MSC\McAPexe.exe

SR - | Auto 30/07/2013 328928 |  (McATScheduler) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

SR - | Auto 30/07/2013 328928 |  (McMPFSvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe

SR - | Auto 30/07/2013 328928 |  (McNaiAnn) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

SR - | Auto 30/07/2013 328928 |  (McOobeSv2) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

SR - | Auto 30/07/2013 328928 |  (mcpltsvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

SR - | Auto 30/07/2013 328928 |  (McProxy) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe

SR - | Auto 30/07/2013 328928 |  (McSchedulerSvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSv

Porém 8 segundos para abrir o IE são normais?

Faça o download do ZHPDiag2.exe ( de Nicolas Coolman )

Desabilite temporariamente seu antivírus para evitar conflitos e execute ZHPDiag2.exe para instalar a ferramenta.

|- Execute o ícone do pergaminho. ( ZHPDiag)

|- Clique SEARCH(ou PESQUISAR) e aguarde a conclusão.

|- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt aqui em seu tópico para podermos analisar.