Bom dia, Iriel.

Baixe o programa Junkware Removal Tool no link abaixo:

http://thisisudax.org/downloads/JRT.exe

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

**Tutorial do Junkware Removal Tool**

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt juntamente com o relatório do ZHPCleaner chamado ZHPCleaner.txt 

Ficamos no aguardo.

Fiz todos os procedimentos indicados, mas ainda não consegui retirar do meu internet explorer.

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:

http://www.hijackthis.nl/smeenk/

Para executá-lo corretamente siga as dicas deste tutorial:

**Exclua adwares e outras ameaças de seu PC e browsers com o aplicativo Zoek**

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:*zoek-results.txt* e copie todo seu conteúdo e poste em sua próxima resposta.

No google chrome consegui mas no internet explorer ainda não.

Zoek.exe v5.0.0.0 Updated 04-May-2015

Tool run by Evangelista on 05/05/2015 at 14:52:22,54.

Microsoft Windows 7 Home Basic  6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Evangelista\Downloads\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

05/05/2015 14:53:13 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

Copyright (c) 1993-2006 Microsoft Corp. 

# 

This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 

# 

This file contains the mappings of IP addresses to host names. Each 

entry should be kept on an individual line. The IP address should 

be placed in the first column followed by the corresponding host name. 

The IP address and the host name should be separated by at least one 

space. 

# 

Additionally, comments (such as these) may be inserted on individual 

lines or following the machine name denoted by a '#' symbol. 

# 

For example: 

# 

     102.54.94.97     rhino.acme.com          # source server 

      38.25.63.10     x.acme.com              # x client host 

localhost name resolution is handled within DNS itself. 

127.0.0.1       localhost 

::1             localhost 

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\EVANGE~1\AppData\Roaming\Mozilla\Firefox\Profiles\xm3ca7tn.default\prefs.js:

user_pref("browser.startup.homepage", "about:home");

user_pref("browser.newtab.url", "about:newtab");

Added to C:\Users\EVANGE~1\AppData\Roaming\Mozilla\Firefox\Profiles\xm3ca7tn.default\prefs.js:

user_pref("browser.startup.homepage", "about:home");

user_pref("browser.newtab.url", "about:newtab");

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\EVANGE~1\AppData\Roaming\Mozilla\Firefox\Profiles\xm3ca7tn.default

user_pref("browser.startup.homepage", "about:home");

user_pref("browser.newtab.url", "about:newtab");

==== Firefox Proxy Settings ======================

ProfilePath: C:\Users\EVANGE~1\AppData\Roaming\Mozilla\Firefox\Profiles\xm3ca7tn.default

user_pref("network.proxy.type", 5);

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"******@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [23/04/2015 16:13]

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

"******@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [05/03/2014 12:54]

==== Firefox Extensions ======================

ProfilePath: C:\Users\EVANGE~1\AppData\Roaming\Mozilla\Firefox\Profiles\xm3ca7tn.default

• remotexulmanagerxulforgecom - C:\Users\Evangelista\AppData\Roaming\Mozilla\Firefox\Profiles\xm3ca7tn.default\extensions******@xulforge.com
• remotexulmanagerxulforgecom - %ProfilePath%\extensions******@xulforge.com

==== Firefox Plugins ======================

==== Chromium Look ======================

Google Chrome Version: 42.0.2311.135

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[23/04/2015 16:12]

Google Drive - Evangelista\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Evangelista\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Evangelista\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Bookmark Manager - Evangelista\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik

Chrome Hotword Shared Module - Evangelista\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg

Google Wallet - Evangelista\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Last updated at time on date - Evangelista\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch

Gmail - Evangelista\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

Google Docs - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Bookmark Manager - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gmlllbghnfkpflemihljekbapjopfjik

Avast Online Security - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki

Chrome Hotword Shared Module - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg

Google Wallet - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

Google Slides - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek

Google Docs - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Google Sheets - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap

Bookmark Manager - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gmlllbghnfkpflemihljekbapjopfjik

Avast Online Security - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki

Chrome Hotword Shared Module - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lccekmodgklaepjeofjdjpbminllajkg

Google Wallet - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chromium Startpages ======================

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Preferences

"startup_urls": [ "https://www.google.com.br/" ]

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"

==== Reset Google Chrome ======================

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Preferences was reset successfully

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Secure Preferences was reset successfully

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Web Data was reset successfully

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Web Data-journal was reset successfully

C:\Users\Evangelista\AppData\Roaming\Opera Software\Opera Stable\Web Data was reset successfully

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Acer Registration.lnk - C:\Program Files (x86)\Acer\Registration\GREG.exe 

C:\Users\Public\Desktop\Adobe Reader XI.lnk - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe 

C:\Users\Public\Desktop\Assistencia remota.lnk - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe 

C:\Users\Public\Desktop\Avast Free Antivirus.lnk - C:\Program Files\AVAST Software\Avast\avastui.exe 

C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe 

C:\Users\Public\Desktop\Central de Soluções HP.lnk -  

C:\Users\Public\Desktop\clear.fi Tutorial.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe "c:\Users\Public\Videos\clear.fi_tutorial.wmv" /fullscreen

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe 

C:\Users\Public\Desktop\Loja de Suprimentos HP.lnk - C:\Program Files (x86)\HP\HPSSUPPLY\hpqSSupply.exe 

C:\Users\Public\Desktop\Receitanet 1.05 .lnk - C:\Program Files (x86)\Programas RFB\Receitanet\Windows\Receitanet.exe 

C:\Users\Public\Desktop\WildTangent Games App - acer.lnk - C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe /src desktopoem /dp acerlt

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_40\bin\javacpl.exe -tab about

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk - C:\Program Files (x86)\Java\jre1.8.0_40\bin\javacpl.exe -tab update

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configurar Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_45\bin\javacpl.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_40\bin\javacpl.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Obter Ajuda.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Sobre o Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_45\bin\javacpl.exe -tab about

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Verificar Atualizações.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visite Java.com.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programas RFB\Receitanet\Ajuda do Receitanet 1.05 .lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programas RFB\Receitanet\Desinstalar o Receitanet 1.05.lnk - C:\Program Files (x86)\Programas RFB\Receitanet\Desinstalador.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programas RFB\Receitanet\Receitanet 1.05 .lnk - C:\Program Files (x86)\Programas RFB\Receitanet\Windows\Receitanet.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Ajuda do WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.chm 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Manual do Console RAR.lnk - C:\Program Files (x86)\WinRAR\Rar.txt 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\O que há de novo na última versão.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files (x86)\WinRAR\WinRAR.exe 

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

==== Reset IE Proxy ======================

Value(s) before fix:

"ProxyEnable"=dword:00000000

Value(s) after fix:

"ProxyEnable"=dword:00000000

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Evangelista\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Evangelista\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully

C:\Users\Evangelista\AppData\Local\Google\Chrome\User Data\Profile 2\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Users\Evangelista\AppData\Local\Temp will be emptied at reboot

C:\Users\USURIO~1\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\EVANGE~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:$RECYCLE.BIN successfully emptied

==== EOF on 05/05/2015 at 15:37:09,55 ======================

Prezado Rafael,

Boa noite!!!

Segue o relatório do JRT.EXE:

Agora quanto ao relatório do ZHPCleaner, devo procurar o link aqui no site e baixar? Mais uma vez agradeço por sua atenção. Iriel

Junkware Removal Tool (JRT) by Thisisu  

Version: 6.6.7 (04.30.2015:1)  

OS: Microsoft Windows XP x86  

Ran by Administrador on ter 05/05/2015 at 20:26:23,68  

~~~ Tasks  

~~~ Registry Values  

~~~ Registry Keys  

~~~ Files  

~~~ Folders  

Scan was completed on ter 05/05/2015 at 20:36:33,70

End of JRT log

Oi Iriel.

Faça o download do < **ZHPCleaner** >  < > ( ... de Nicolas Coolman )

Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPCleaner para baixá-lo, tal como mostra a imagem abaixo:

Para executá-lo corretamente siga as dicas desta postagem:

**Tutorial completo do ZHPCleaner**

Após a utilização dele, copie todo o conteúdo do seu relatório ZHPCleaner.txt e poste em sua próxima resposta.