[Arquivado] Computador lento e faz a internet cair

Alfranklin · Fevereiro 21, 2015

Boa noite,

Breve descrição do problema:
Além da lentidão, depois de um tempo utilizando o notebook a internet para de funcionar para todos e é necessário resetar o modem para que ela volte.

Segue o log
Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:39:46, on 20/02/2015

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.17631)

Boot mode: Normal

Running processes:

C:\PROGRA~2\GbPlugin\GbpSv.exe

C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

C:\Program Files\AVAST Software\Avast\avastui.exe

C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe

C:\Program Files (x86)\Samsung\Easy Settings\MovieColorEnhancer.exe

C:\Program Files (x86)\GRETECH\GomPlayer\GOM.EXE

C:\Users\Gomes\Downloads\PROBLEMA INTERNET\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll

O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL

O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll

O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui

O4 - HKLM\..\RunOnce: [20150107] C:\Program Files\AVAST Software\Avast\setup\emupdate\09a1cb89-fff9-4c78-b64e-5f2ae36d76b5.exe /check

O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"

O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

O4 - HKCU\..\Run: [uTorrent] "C:\Users\Gomes\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000

O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O15 - Trusted Zone: imagem.caixa.gov.br

O15 - Trusted Zone: internetbanking.caixa.gov.br

O15 - Trusted Zone: internetbankingpf.caixa.gov.br

O15 - Trusted Zone: www.caixa.gov.br

O15 - Trusted Zone: http://www.caixa.gov.br

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL

O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll

O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll

O20 - Winlogon Notify: GbPluginCef - C:\Program Files (x86)\GbPlugin\gbiehCef.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)

O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\WildGames\Game Console - WildGames\GameConsoleService.exe

O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe

O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: SamsungDeviceConfiguration (SamsungDeviceConfigurationWinService) - Unknown owner - C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics CO., LTD. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 11820 bytes

Muito Obrigado

DigRam · Fevereiro 21, 2015

/!\ Bom Dia! Alfranklin /!\

> Baixe: <

> ( ... par Xplode )

>

> Ou daqui: < AdwCleaner >

> Ao acessar,clique em "Download Now".

>

> Salve-o no desktop!

<

>

> Clique direito em adwcleaner.exe,e escolha sua execução como administrador.

> Ps: Dê início ao scan,clicando em "Examinar".

> Ao concluir,clique "Limpar" ou "Cleaning" >> Ok >> Ok >> Ok.

> Copie o log ou clique "Relatório".

> Poste: < C:\AdwCleaner\AdwCleaner[s0].txt >

A+

Alfranklin · Fevereiro 21, 2015

Bom dia DigRam!

Segue o log!

# AdwCleaner v4.111 - Logfile created 21/02/2015 at 07:11:47

# Updated 18/02/2015 by Xplode

# Database : 2015-02-18.3 [server]

# Operating system : Windows 7 Home Premium Service Pack 1 (x64)

# Username : Gomes - GOMES-PC

# Running from : C:\Users\Gomes\Desktop\AdwCleaner.exe

# Option : Cleaning

***** [ Services ] *****

***** [ Files / Folders ] *****

File Deleted : C:\Users\Gomes\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage

File Deleted : C:\Users\Gomes\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage-journal

File Deleted : C:\Users\Gomes\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

File Deleted : C:\Users\Gomes\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631

-\\ Mozilla Firefox v34.0.5 (x86 pt-BR)

-\\ Google Chrome v40.0.2214.115

*************************

AdwCleaner[R0].txt - [1986 bytes] - [03/06/2014 05:41:03]

AdwCleaner[R1].txt - [1659 bytes] - [23/01/2015 22:43:41]

AdwCleaner[R2].txt - [1571 bytes] - [21/02/2015 07:08:24]

AdwCleaner[s0].txt - [2155 bytes] - [03/06/2014 06:26:14]

AdwCleaner[s1].txt - [1820 bytes] - [23/01/2015 22:47:46]

AdwCleaner[s2].txt - [1506 bytes] - [21/02/2015 07:11:47]

########## EOF - C:\AdwCleaner\AdwCleaner[s2].txt - [1565 bytes] ##########

DigRam · Fevereiro 21, 2015

/!\ Bom Dia! Alfranklin /!\

> Baixe: < ZHPDiag2.exe > <

> ( ... de Nicolas Coolman )

> Salve-o no disco local! ( C ou D )

> Desabilite seu antivírus e execute "ZHPDiag2.exe",para instalar a ferramenta.

> Execute o ícone do pergaminho. ( ZHPDiag )

> Clique "COMPLETA" e aguarde a conclusão!

> Clique OK e,ao concluir,poste o relatório! ( ZHPDiag.txt )

> Ps: Como o log será extenso,envie-o à Pjjoint.malekal.

> Ou acesse: <

>

> Maiores informações: < |Link| >

A+

Alfranklin · Fevereiro 21, 2015

DigRam
Segue os links, enviei o log para os dois sites

http://www.cjoint.com/15fe/EBvnuviIpkm.htm
http://pjjoint.malekal.com/files.php?read=20150221_r15d7i5f13l5

DigRam · Fevereiro 21, 2015

/!\ Bom Dia! Alfranklin /!\

> Execute este script na ferramenta ZHPFix.

> Selecione e copie estas informações que estão em vermelho,para o Bloco de Notas.

> Com o Bloco de Notas aberto,faça: ctrl+a >> ctrl+c ( Selecionar e Copiar )

> À seguir,minimize o Bloco de Notas.

Script ZHPFix

FirewallRaz

Emptytemp

HiddenFix

[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000Core] (.Facebook Inc..) -- C:\Users\Gomes\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]

[MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000UA] (.Facebook Inc..) -- C:\Users\Gomes\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096]

O39 - APT: FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000Core.job [906]

O39 - APT: FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000Core [906]

O39 - APT: FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000UA - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000UA.job [928]

O39 - APT: FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000UA - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000UA [928]

[HKCU\Software\Baixaki]

[HKCU\Software\Facebook]

sysrestore

> Abra a ferramenta ZHPFix. <

>

> Clique IMPORTAÇÃO >> OK.

> Ps: Ao clicar "OK",verifique se o campo está limpo para que receba,somente,as informações do script.

> Clique "GO".

> Poste o relatório!

A+

Alfranklin · Fevereiro 21, 2015

Segue o relatório DigRam

Rapport de ZHPFix 2015.2.17.3 par Nicolas Coolman, Update du 17/02/2015

Fichier d'export Registre :

Run by Gomes at 21/02/2015 14:03:19

High Elevated Privileges : OK

Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 12s)

========== Chaves do Registo ==========

ELIMINÉ: HKCU\Software\Baixaki

ELIMINÉ: HKCU\Software\Facebook

========== Valores do Registo ==========

Ausente Valor Perfil Padrão: FirewallRaz :

Ausente Valor Perfil Domínio FirewallRaz :

ELIMINÉ: FirewallRaz (Domain) : NetPres-In-TCP-NoScope

ELIMINÉ: FirewallRaz (Domain) : NetPres-Out-TCP-NoScope

ELIMINÉ: FirewallRaz (None) : NetPres-WSD-In-UDP

ELIMINÉ: FirewallRaz (None) : NetPres-WSD-Out-UDP

ELIMINÉ: FirewallRaz (Public) : NetPres-In-TCP

ELIMINÉ: FirewallRaz (Public) : NetPres-Out-TCP

ELIMINÉ: FirewallRaz (None) : {BBAB5C8E-3F6D-4756-B417-0B8789082CDD}

ELIMINÉ: FirewallRaz (None) : {B94C0EE3-A076-41F1-96A5-D36E348F2418}

ELIMINÉ: FirewallRaz (Private) : {2FA700A8-722E-4DA5-9FC9-1C7A26929766}

ELIMINÉ: FirewallRaz (Private) : {B4F0B683-E4FB-43ED-85C9-3611E0A8A285}

ELIMINÉ: FirewallRaz (Private) : {31CF8C70-E60D-4729-9C1B-50EAE13A617B}

ELIMINÉ: FirewallRaz (Private) : {655CF0E2-ACB5-43C4-A7E2-93C149876DC1}

ELIMINÉ: FirewallRaz (Private) : {77D79DF9-6FC7-4945-9702-089B1CB41A6F}

ELIMINÉ: FirewallRaz (Private) : {065D623D-9BCC-4839-A8BD-F3F7A9CD2F7F}

ELIMINÉ: FirewallRaz (Private) : {3C2C9820-A481-43A5-813D-2B6BEA886A2F}

ELIMINÉ: FirewallRaz (Private) : {A3BA910C-243A-4B7C-A47A-0AB64587119E}

ELIMINÉ: FirewallRaz (Private) : {D01D4B38-314B-461B-B94A-79A64953C865}

ELIMINÉ: FirewallRaz (Private) : {30360D53-24EC-4BD1-A22D-01B9C6F52456}

ELIMINÉ: FirewallRaz (Private) : {DA5CFADE-EE6A-4570-ABC3-12F29E2EEF58}

ELIMINÉ: FirewallRaz (Private) : {48A6518F-42E1-4B84-9BD9-CA0C20EC4F15}

ELIMINÉ: FirewallRaz (Public) : {B6151832-E4F6-4D9B-BAD4-EF7BD53BDA7B}

ELIMINÉ: FirewallRaz (Public) : {BFBBD2BA-1217-42A2-9D09-0F162876DE08}

ELIMINÉ: FirewallRaz (Public) : TCP Query User{67C33D70-10C5-4D14-8AD5-F494B0F3FC3D}C:\program files (x86)\diablo iii\diablo iii.exe

ELIMINÉ: FirewallRaz (Public) : UDP Query User{3BD0D03A-C682-44D0-A954-675919EE5763}C:\program files (x86)\diablo iii\diablo iii.exe

ELIMINÉ: FirewallRaz (Private) : {C3EA9578-0E8A-47B1-89FC-9BA57C58E9FC}

ELIMINÉ: FirewallRaz (Private) : {F924CFB6-BED9-4537-B95C-94EC15C3CD6A}

========== Pastas ==========

ELIMINÉ Temporários windows (15)

========== Ficheiros ==========

ELIMINÉ Temporários windows (31) (28.358.457 octets)

========== Tarefa planificada ==========

ELIMINÉ: FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000Core

ELIMINÉ: FacebookUpdateTaskUserS-1-5-21-1277356225-661962986-2381428972-1000UA

========== Pastas/Ficheiros ocultos restaurados ==========

Mes images (My Pictures) : 1 restaurados com sucesso

Ma musique (My Music) : 1 restaurados com sucesso

Ma Video (My Video) : 1 restaurados com sucesso

Mes Favoris (My Favorites) : 3 restaurados com sucesso

Mes Documents (My Documents) : 5 restaurados com sucesso

Mon Bureau (My Desktop) : 28 restaurados com sucesso

Menu demarrer (Programs) : 9 restaurados com sucesso

Dossier utilisateur (AppData) : 42 restaurados com sucesso

Programmes (Program Files) : 12 restaurados com sucesso

========== Restauração Sistema ==========

Ponto de restauro do sistema criado com sucesso

========== Recapitulativo ==========

2 : Chaves do Registo

28 : Valores do Registo

1 : Pastas

1 : Ficheiros

2 : Tarefa planificada

102 : Pastas/Ficheiros ocultos restaurados

1 : Restauração Sistema

End of clean in 01mn 41s

========== Caminho do ficheiro do relatório ==========

C:\Users\Gomes\AppData\Roaming\ZHP\ZHPFix[R1].txt - 21/02/2015 14:03:31 [3714]

DigRam · Fevereiro 21, 2015

/!\ Boa Noite! Alfranklin /!\

> Execute este script na ferramenta ZHPFix.

> Selecione e copie estas informações que estão em vermelho,para o Bloco de Notas.

> Com o Bloco de Notas aberto,faça: ctrl+a >> ctrl+c ( Selecionar e Copiar )

> À seguir,minimize o Bloco de Notas.

Script ZHPFix

ShortcutFix

Ifeofix

Proxyfix

HostFix

[MD5.83AC88E59AED154D19915169ADF0FAAD] [APT] [AutoKMS] (...) -- C:\windows\AutoKMS\AutoKMS.exe [3727360]

[MD5.169180F02ABCECA5DE72FC5EEBC861BB] [sPRF][27/10/2014] (.No owner - Setup/Uninstall.) -- C:\Users\Gomes\AppData\Roaming\unins000.exe [730322]

O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Chave orfã

O43 - CFD: 31/05/2014 - 19:46:07 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123

O44 - LFC:[MD5.1A41AAF37568E73D77A42F680DB44A72] - 06/02/2015 - 17:27:13 ---A- . (...) -- C:\Windows\System32\2015-02-06-21-27-13.087-AvastVBoxSVC.exe-2252.log [197]

O44 - LFC:[MD5.B80B8DCBC6D137486E85FA94D6A72A3D] - 06/02/2015 - 18:12:32 ---A- . (...) -- C:\Windows\System32\2015-02-06-22-12-31.066-AvastVBoxSVC.exe-2884.log [197]

O44 - LFC:[MD5.9F7FAD105208C5B5C80C61B1F228F7C7] - 06/02/2015 - 20:33:44 ---A- . (...) -- C:\Windows\System32\2015-02-07-00-33-43.028-AvastVBoxSVC.exe-3036.log [197]

O44 - LFC:[MD5.AC4BA73B7189C45F50D423D6CDC504C4] - 09/02/2015 - 10:42:16 ---A- . (...) -- C:\Windows\System32\2015-02-09-14-42-15.014-AvastVBoxSVC.exe-2744.log [197]

O44 - LFC:[MD5.AD50AEE960F28CE11ED964D3C7B7AA01] - 12/02/2015 - 05:14:24 ---A- . (...) -- C:\Windows\System32\2015-02-12-09-14-23.099-AvastVBoxSVC.exe-3004.log [197]

O44 - LFC:[MD5.4E43630F0F2FE1D61D6A37CE27C0157E] - 14/02/2015 - 16:44:33 ---A- . (...) -- C:\Windows\System32\2015-02-14-20-44-31.001-AvastVBoxSVC.exe-2160.log [197]

O44 - LFC:[MD5.606DACC8D83BC52F5139C16F461FF40A] - 18/02/2015 - 00:03:29 ---A- . (...) -- C:\Windows\System32\2015-02-18-04-03-17.066-AvastVBoxSVC.exe-2920.log [197]

O44 - LFC:[MD5.B40E51D274A0E0CA0C0F6973620A89EC] - 18/02/2015 - 01:02:25 ---A- . (...) -- C:\Windows\System32\2015-02-18-05-02-23.092-AvastVBoxSVC.exe-2572.log [197]

O44 - LFC:[MD5.A0855F2DD610F1801CAFBD24A263098B] - 21/02/2015 - 07:16:17 ---A- . (...) -- C:\Windows\System32\2015-02-21-11-16-16.050-AvastVBoxSVC.exe-1868.log [0]

O61 - LFC: 18/02/2015 - 07:54:28 ---A- . (...) -- C:\Users\Gomes\AppData\Local\Temp\Quarantine.exe [564224]

C:\ProgramData\boost_interprocess

C:\Users\Gomes\AppData\Local\Apps

sysrestore

> Abra a ferramenta ZHPFix. <

>

> Clique IMPORTAÇÃO >> OK.

> Ps: Ao clicar "OK",verifique se o campo está limpo para que receba,somente,as informações do script.

> Clique "GO".

> Poste o relatório!

A+

Alfranklin · Fevereiro 21, 2015

Segue o log:

Rapport de ZHPFix 2015.2.17.3 par Nicolas Coolman, Update du 17/02/2015

Fichier d'export Registre :

Run by Gomes at 21/02/2015 16:29:10

High Elevated Privileges : OK

Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Reciclagem vazia (00mn 10s)

Reparação de atalhos do navegador

========== Chaves do Registo ==========

Ramo Base de Registos IFEO não infetado !

========== Valores do Registo ==========

ProxyFix : Configuração proxy removida com sucesso

ELIMINÉ ProxyServer Value

ELIMINÉ ProxyEnable Value

ELIMINÉ EnableHttp1_1 Value

ELIMINÉ ProxyHttp1.1 Value

ELIMINÉ ProxyOverride Value

ELIMINÉ: Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}

========== Pastas ==========

ELIMINÉ: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123

ELIMINÉ: c:\programdata\boost_interprocess

ELIMINÉ: c:\users\gomes\appdata\local\apps

========== Ficheiro HOSTS ==========

O ficheiro Hosts não foi reparado, por favor, desative o seu antivírus.

========== Tarefa planificada ==========

ELIMINÉ: AutoKMS

========== Restauração Sistema ==========

Ponto de restauro do sistema criado com sucesso

========== Recapitulativo ==========

1 : Chaves do Registo

7 : Valores do Registo

3 : Pastas

1 : Ficheiro HOSTS

3 : Tarefa planificada

1 : Restauração Sistema

End of clean in 00mn 50s

========== Caminho do ficheiro do relatório ==========

C:\Users\Gomes\AppData\Roaming\ZHP\ZHPFix[R1].txt - 21/02/2015 14:03:31 [3794]

C:\Users\Gomes\AppData\Roaming\ZHP\ZHPFix[R2].txt - 21/02/2015 16:29:20 [1518]

DigRam · Fevereiro 22, 2015

/!\ Boa Noite! Alfranklin /!\

> Baixe: <

> ( ... by Farbar )

> No banner àcima,é para sistemas 32bits!

< Farbar Recovery Scan Tool 64-Bit >

> No link àcima,é para sistemas 64bits!

> Salve-o no desktop! (Área de trabalho ...)

> Execute a ferramenta! Clique "Yes" >> "Scan".

> Antes de clicar "Scan",verifique se as caixinhas em "Whitelist" estão assinaladas.

> Em "Optional Scan",deixe marcada a checkbox "Addition.txt".

> Ps: Será gerado,também,o relatório "Addition.txt" que estará disponibilizado na 1ª execução da ferramenta.

> Poste os relatórios! (FRST.txt + Addition.txt)

> Como o log será extenso,envie-o à

>

> O link ao relatório,que é este assinalado,deverá ser colado em sua resposta.

> Ou clique "Copier le lien (*)" e cole o link ao seu Post.

A+

Alfranklin · Fevereiro 22, 2015

Boa noite DigRam

segue links
http://cjoint.com/?EBwdpst2p2h

http://cjoint.com/?EBwdquDI6GN

Obrigado por estar disposto a ajudar!

DigRam · Fevereiro 22, 2015

/!\ Boa Noite! Alfranklin /!\

> Copie estas informações que estão em vermelho,para o Bloco de Notas.

> Salve-as com o nome fixlist. << Texto!

> Salve-as no desktop! ( Área de trabalho ... ) | C:\Users\Gomes\Desktop <<

start

CloseProcesses:

emptytemp:

Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

S3 SBIOSIO; \??\C:\Users\Gomes\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [X]

2015-02-21 07:57 - 2015-02-21 07:57 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin

2015-02-21 07:51 - 2015-02-21 16:29 - 00000000 ____D () C:\Users\Gomes\AppData\Roaming\ZHP

2015-02-21 07:51 - 2015-02-21 07:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP

2015-02-21 07:51 - 2015-02-21 07:51 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag

2015-02-21 07:48 - 2015-02-21 07:49 - 06876251 _____ (Nicolas Coolman ) C:\ZHPDiag2.exe

2015-02-21 07:16 - 2015-02-21 07:16 - 00000197 _____ () C:\windows\system32\2015-02-21-11-16-16.050-AvastVBoxSVC.exe-1868.log

2015-02-19 06:13 - 2015-02-19 06:13 - 00022874 _____ () C:\ZA-Scan.txt

2015-02-19 06:08 - 2015-02-19 06:08 - 00000000 ____D () C:\zoek_backup

2015-02-18 01:02 - 2015-02-18 01:02 - 00000197 _____ () C:\windows\system32\2015-02-18-05-02-23.092-AvastVBoxSVC.exe-2572.log

2015-02-18 00:03 - 2015-02-18 00:03 - 00000197 _____ () C:\windows\system32\2015-02-18-04-03-17.066-AvastVBoxSVC.exe-2920.log

2015-02-14 16:44 - 2015-02-14 16:44 - 00000197 _____ () C:\windows\system32\2015-02-14-20-44-31.001-AvastVBoxSVC.exe-2160.log

2015-02-09 10:42 - 2015-02-09 10:42 - 00000197 _____ () C:\windows\system32\2015-02-09-14-42-15.014-AvastVBoxSVC.exe-2744.log

2015-02-06 20:33 - 2015-02-06 20:33 - 00000197 _____ () C:\windows\system32\2015-02-07-00-33-43.028-AvastVBoxSVC.exe-3036.log

2015-02-06 18:12 - 2015-02-06 18:12 - 00000197 _____ () C:\windows\system32\2015-02-06-22-12-31.066-AvastVBoxSVC.exe-2884.log

2015-02-06 17:27 - 2015-02-06 17:27 - 00000197 _____ () C:\windows\system32\2015-02-06-21-27-13.087-AvastVBoxSVC.exe-2252.log

2015-02-04 11:16 - 2015-02-04 11:17 - 00000197 _____ () C:\windows\system32\2015-02-04-15-16-50.041-AvastVBoxSVC.exe-3328.log

2015-01-28 05:15 - 2015-01-28 05:15 - 00000197 _____ () C:\windows\system32\2015-01-28-09-15-34.021-AvastVBoxSVC.exe-2688.log

2015-01-25 19:43 - 2015-01-25 19:43 - 00000197 _____ () C:\windows\system32\2015-01-25-23-43-47.065-AvastVBoxSVC.exe-4928.log

2015-01-23 22:55 - 2015-01-23 22:55 - 00000197 _____ () C:\windows\system32\2015-01-24-02-55-46.054-AvastVBoxSVC.exe-1712.log

2015-01-23 20:57 - 2015-01-23 20:57 - 00000015 _____ () C:\Users\Gomes\Desktop\smile.txt

2015-02-21 07:13 - 2014-12-06 18:00 - 00008478 _____ () C:\windows\setupact.log

2015-02-21 07:13 - 2014-12-06 17:59 - 00005160 _____ () C:\windows\PFRO.log

2015-02-21 07:11 - 2014-06-03 05:41 - 00000000 ____D () C:\AdwCleaner

2012-02-02 04:09 - 2012-02-02 04:09 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log

2012-02-02 04:00 - 2012-02-02 04:01 - 0000113 _____ () C:\ProgramData\{34FBC7C4-CD31-4D93-A428-0E524EAC4586}.log

2012-02-02 04:06 - 2012-02-02 04:06 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log

2012-02-02 04:01 - 2012-02-02 04:05 - 0000106 _____ () C:\ProgramData\{80E158EA-7181-40FE-A701-301CE6BE64AB}.log

2012-02-02 04:07 - 2012-02-02 04:09 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log

Task: {29757AA5-4AB6-4020-BFD3-3E3DF619C783} - System32\Tasks\{D19FA6C2-033A-4E3D-B3B8-F85D2EE3B672} => pcalua.exe -a "C:\Program Files (x86)\ZHPDiag\ZHPhep.exe" -d "C:\Program Files (x86)\ZHPDiag"

CMD: netsh winsock reset

CMD: ipconfig /flushdns

end

> Execute FRST/FRST64 >> Clique "Fix" << Aguarde!

> Na mensagem,clique Executar.

> Poste o relatório! (Fixlog.txt)

A+

Alfranklin · Fevereiro 22, 2015

Bom dia DigRam!

Segue o log:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-02-2015

Ran by Gomes at 2015-02-22 05:53:37 Run:1

Running from C:\Users\Gomes\Desktop

Loaded Profiles: Gomes (Available profiles: Gomes)

Boot Mode: Normal

==============================================

Content of fixlist:

*****************