Instalar ZOEK.exe

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015

Ran by CARLOS at 2015-03-15 12:48:30

Running from C:\Users\CARLOS\Desktop

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe Flash Player 16 ActiveX (HKLM-x32...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Português (HKLM-x32...{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Apple Mobile Device Support (HKLM...{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32...{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Atualização do produto Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32...{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{717C9095-8AAE-41CB-B046-BD6E8399F4F3}) (Version:  - Microsoft)

Atualização do produto Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32...{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{5016CB22-B9A7-44FB-AA72-AF28B27B15EA}) (Version:  - Microsoft)

Atualização do produto Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32...{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{BE3A7C0C-0081-4694-B5F9-980DD66BDDF8}) (Version:  - Microsoft)

Atualização do produto Microsoft Office Word 2007 Help (KB963665) (HKLM-x32...{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{7297E3A9-FCD4-4E0E-A306-7A90359E50E3}) (Version:  - Microsoft)

AVG 2015 (HKLM...\AVG) (Version: 2015.0.5751 - AVG Technologies)

AVG 2015 (Version: 15.0.4306 - AVG Technologies) Hidden

AVG 2015 (Version: 15.0.5751 - AVG Technologies) Hidden

Bonjour (HKLM...{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden

CCleaner (HKLM...\CCleaner) (Version: 4.07 - Piriform)

D110 (x32 Version: 140.0.283.000 - Hewlett-Packard) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Galeria de Fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Ganhos de Capital 2013 (HKLM-x32...\Ganhos de Capital 2013) (Version:  - )

GBBD Defensor Safra (HKLM-x32...{DCB9EC14-9690-4226-90FA-3B7F22B86748}_is1) (Version: 3.11.0.1 - )

Google Chrome (HKLM-x32...\Google Chrome) (Version: 41.0.2272.89 - Google Inc.)

Google Earth (HKLM-x32...{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

HP Photosmart D110 All-In-One Driver Software 14.0 Rel. 7 (HKLM...{DBC1DE57-B55A-4D57-9769-1DB9BE506AF7}) (Version: 14.0 - HP)

HPAppStudio (x32 Version: 140.0.95.000 - Hewlett-Packard) Hidden

HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden

HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden

iCloud (HKLM...{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)

IRPF2012 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32...\IRPF2012) (Version: 1.1 - Receita Federal do Brasil)

IRPF2013 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32...\IRPF2013) (Version: 1.1 - Receita Federal do Brasil)

IRPF2014 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32...\IRPF2014) (Version: 1.0 - Receita Federal do Brasil)

IRPF2015 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32...\IRPF2015) (Version: 1.0 - Receita Federal do Brasil)

iTunes (HKLM...{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)

Java 8 Update 31 (HKLM-x32...{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Malwarebytes Anti-Malware versão 2.0.4.1028 (HKLM-x32...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft .NET Framework 4 Client Profile (HKLM...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (HKLM...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM...{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32...{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office Enterprise 2007 (HKLM-x32...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32...{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32...{95140000-007A-0416-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32...{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM...{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Módulo de Proteção - Banco Santander (Brasil) S.A. (HKLM-x32...{83033d93-48d0-48fc-9c5b-82e57e7e0dd6}_is1) (Version: 3.12.0.2 - )

Módulo de Segurança -  Banco do Brasil (HKLM-x32...{36386dc9-8543-4b12-ae6b-220fd52f19f3}_is1) (Version: 3.12.0.2 - )

Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

MSXML 4.0 SP2 (KB973688) (HKLM-x32...{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden

Network64 (Version: 140.0.221.000 - Hewlett-Packard) Hidden

PS_AIO_07_D110_SW_Min (x32 Version: 140.0.142.000 - Hewlett-Packard) Hidden

QuickTime 7 (HKLM-x32...{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)

QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) Hidden

RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden

RealPlayer (HKLM-x32...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)

RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden

Receitanet (HKLM-x32...\ECC16E3C-16D1-4DC2-9D8A-6AC06B3005A5) (Version: 1.04 - Serpro - Serviço Federal de Processamento de Dados)

Revo Uninstaller 1.95 (HKLM-x32...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden

Skype™ 6.11 (HKLM-x32...{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

Suporte para Aplicativos Apple (32-bit) (HKLM-x32...{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)

Suporte para Aplicativos Apple Apple (64-bit) (HKLM...{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)

Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32...{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

VirtualDJ Home FREE (HKLM-x32...{B515962D-C979-44AC-9912-F7BB499B4B2C}) (Version: 7.3 - Atomix Productions)

Visual Studio 2012 x64 Redistributables (HKLM...{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32...{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden

Windows Live Essentials (HKLM-x32...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)

WinZip 19.0 (HKLM...{CD95F661-A5C4-44F5-A6AA-ECDD91C240E7}) (Version: 19.0.11294 - WinZip Computing, S.L. )

ZHPDiag 2015 (HKLM-x32...\ZHPDiag_is1) (Version: 2015 - Nicolas Coolman)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

==================== Restore Points  =========================

ATTENTION: System Restore is disabled.

Check "winmgmt" service or repair WMI.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 23:34 - 2015-02-08 23:11 - 00000822 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job =>

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job =>

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job =>

==================== Loaded Modules (whitelisted) ==============

2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2015-02-13 04:20 - 2015-02-13 04:20 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Windows\System32:1AFBEE33_Abn.gbp

AlternateDataStreams: C:\Windows\System32:1AFBEE33_Bb.gbp

AlternateDataStreams: C:\Windows\System32:1AFBEE33_Sfr.gbp

AlternateDataStreams: C:\ProgramData\TEMP:373E1720

AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:373E1720

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\Control Panel\Desktop\Wallpaper -> C:\Users\CARLOS\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 201.6.2.23 - 201.6.2.143

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== Accounts: =============================

Administrador (S-1-5-21-3504019602-3750793420-2798553429-500 - Administrator - Enabled) => C:\Users\Administrador

CARLOS (S-1-5-21-3504019602-3750793420-2798553429-1000 - Limited - Enabled) => C:\Users\CARLOS

Convidado (S-1-5-21-3504019602-3750793420-2798553429-501 - Limited - Disabled)

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface

Description: Adaptador de Túnel Teredo da Microsoft

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Photosmart D110 series

Description: Photosmart D110 series

Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}

Manufacturer: HP

Service:

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Photosmart D110 series

Description: Photosmart D110 series

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: HP

Service: StillCam

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

==================== Event log errors: =========================

Could not start eventlog service, could not read events.

Erro de sistema 5.

Acesso negado.

==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz

Percentage of memory in use: 35%

Total physical RAM: 4058.36 MB

Available physical RAM: 2603.46 MB

Total Pagefile: 8114.91 MB

Available Pagefile: 6393 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.95 GB) (Free:58.1 GB) NTFS

Drive f: () (Removable) (Total:1.81 GB) (Free:0.11 GB) FAT

==================== MBR & Partition Table ==================

==================== End Of Log ============================

Baixe o **Farbar Recovery Scan Tool** e salve-o no Desktop (Área de Trabalho)

Obs: Ao acessar o link acima, clique no botão Download Now 64-Bit Version

Execute o Farbar seguindo as dicas deste tutorial:

**Analise importantes áreas do Windows com Farbar Recovery Scan Tool (versão 64 bits)**

*Serão criados dois relatórios no Desktop: FRST.txt e Addition.txt

Poste estes dois relatórios em sua próxima resposta. (Obs: se não couber em uma só resposta, pode dividi-la em mais postagens).

Malwarebytes Anti-Malware

www.malwarebytes.org

Data da Verificação: 14/03/2015

Hora da Verificação: 12:15:20

Arquivo de Log: Log.txt

Administrador: Não

Versão: 2.00.4.1028

Base de Dados de Malware: v2015.03.14.03

Base de Dados de Rootkit: v2015.02.25.01

Licença: Grátis

Proteção de Malware: Desabilitado

Proteção de Site Malicioso: Desabilitado

Auto-Proteção: Desabilitado

SO: Windows 7 Service Pack 1

Processador: x64

Sistema de Arquivos: NTFS

Usuário: CARLOS

Tipo da Verificação: Verificação Personalizada

Resultado: Terminado

Objetos Verificados: 503920

Tempo Decorrido: 2 hr, 20 min, 18 seg

Memória: Habilitado

Inicialização: Habilitado

Sistema de Arquivos: Habilitado

Arquivos Compactados: Habilitado

Rootkits: Habilitado

Heurística: Habilitado

PUP: Habilitado

PUM: Habilitado

Processos: 0

(Nenhum item malicioso detectado)

Módulos: 0

(Nenhum item malicioso detectado)

Chaves de Registro: 0

(Nenhum item malicioso detectado)

Valores de Registro: 0

(Nenhum item malicioso detectado)

Dados de Registro: 0

(Nenhum item malicioso detectado)

Pastas: 0

(Nenhum item malicioso detectado)

Arquivos: 12

PUP.Optional.BrowserWatch, C:\AdwCleaner\Quarantine\C\Program Files (x86)\XTab\BrowerWatchCH.dll.vir, Apagar ao Reiniciar, [25465aeb77131c1a2bd5b8b660a0f50b],

PUP.Optional.BrowserWatch, C:\AdwCleaner\Quarantine\C\Program Files (x86)\XTab\BrowerWatchFF.dll.vir, Apagar ao Reiniciar, [b9b24401c7c375c1f40ce08e7789e61a],

PUP.Optional.ELEX, C:\AdwCleaner\Quarantine\C\Program Files (x86)\XTab\HPNotify.exe.vir, Apagar ao Reiniciar, [016a0a3be9a1a591b6ebdd52818154ac],

Trojan.Downloader, C:\Users\CARLOS\AppData\Local\Temp\nscB7FD.tmp, Quarentena, [f378fe473258c472477bc554ba49ae52],

PUP.Optional.Bundle, C:\Users\CARLOS\AppData\Local\Temp\nscB7FE.tmp, Quarentena, [aebd35109dedb38361da6d6e7b8ad927],

PUP.Optional.Bundle, C:\Users\CARLOS\AppData\Local\Temp\nse5046.tmp, Quarentena, [b5b651f427634cea6fcc5289e61ffd03],

Trojan.Downloader, C:\Users\CARLOS\AppData\Local\Temp\nso5035.tmp, Quarentena, [79f2ab9aa1e9d75f388a3edb50b32fd1],

Trojan.Downloader, C:\Users\CARLOS\AppData\Local\Temp\nsx3008.tmp, Quarentena, [4625de67bad0b284a31ffe1bdd26b64a],

PUP.Optional.Bundle, C:\Users\CARLOS\AppData\Local\Temp\nsx3009.tmp, Quarentena, [bbb0d76e6327ac8a132803d8c0450bf5],

Trojan.Downloader, C:\Users\CARLOS\AppData\Local\Temp\nszE302.tmp, Quarentena, [2447410461293501fcc62aef25dedc24],

PUP.Optional.Bundle, C:\Users\CARLOS\AppData\Local\Temp\nszE303.tmp, Quarentena, [d8935de8fc8e270f2d0e8952917449b7],

PUP.Optional.Shopperz.A, C:\Users\CARLOS\AppData\Local\Temp\n4461\Shopperz_2001-31705ed9.exe, Quarentena, [c5a620253f4b63d37ceaf82a4eb809f7],

Setores Físicos: 0

(Nenhum item malicioso detectado)

(end)

No seu relatório que você tinha postado há alguns dias do Malwarebytes, está constando que ele encontrou várias ameaças que você não chegou a enviar para a quarentena dele.

Faça por gentileza uma nova verificação com o Malwarebytes. Quando ele concluir a verificação, selecione todas as ameaças encontradas e escolha a opção de enviá-las para a quarentena dele.

Depois disto poste o novo log de verificação que o Malwarebytes irá criar.

Ficamos na espera.