Ir para conteúdo

Arquivado

Este tópico foi arquivado e está fechado para novas respostas.

karoline ferreira

[Resolvido] Acho que meu notebook esta com virus

Por , em Tópicos Resolvidos (Seguranca & Malwares)

Recommended Posts

karoline ferreira    0

karoline ferreira
Postado

Por favor alguém pra verificar o Log.

 

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:59:09, on 24/12/2014
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16575)
Boot mode: Normal
Running processes:
C:\PROGRA~2\GbPlugin\GbpSv.exe
C:\Users\User\AppData\Local\PennyBee\PennyBeeW.exe
C:\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\Program Files (x86)\GbPlugin\gbieh.dll
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [PennyBee] C:\Users\User\AppData\Local\PennyBee\PennyBeeW.exe
O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: www.bancobrasil.com.br
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: www.bb.com.br
O15 - Trusted Zone: http://www.bb.com.br
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\intere~1\intere~1.dll
O20 - Winlogon Notify: GbPluginBb - C:\Program Files (x86)\GbPlugin\gbieh.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe
O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 6486 bytes

Compartilhar este post

Link para o post
Compartilhar em outros sites

DigRam    144

DigRam
Postado

/!\ Boa Tarde! karoline ferreira /!\

 

> Baixe: < AdwCleaner_Logo2_zps580bcd78.jpg > ( ... par Xplode )
>
> Ou daqui: < AdwCleaner >
> Ao acessar,clique em "Download Now".
>
> Salve-o no desktop!
< Executar_Administrador.jpg >
> Clique direito em adwcleaner.exe,e escolha sua execução como administrador.
AdwCleaner_Examinar_zps828ed634.jpg
> Ps: Dê início ao scan,clicando em "Examinar".
AdwCleaner_Limpar_zps06005ae9.jpg
> Ao concluir,clique "Limpar" >> Ok >> Ok >> Ok.
> Copie o log ou clique "Relatório".
> Poste: < C:\AdwCleaner\AdwCleaner[s0].txt >
A+

Compartilhar este post

Link para o post
Compartilhar em outros sites

karoline ferreira    0

karoline ferreira
Postado

Boa Noite DigRam!

 

Segue o poste do AdwCleaner.

 

 

# AdwCleaner v3.311 - Relatório criado 02/11/2014 às 23:55:35
# Atualizado 30/09/2014 por Xplode
# Sistema Operacional : Windows 7 Ultimate (64 bits)
# Usuário : User - USER-PC
# Executando de : C:\Users\User\Desktop\AdwCleaner.exe
# Opção : Limpar
***** [ Serviços ] *****
[#] Serviço Deletada : IePluginServices
***** [ Arquivos / Pastas ] *****
[!] Pasta Deletada : C:\ProgramData\374311380
[!] Pasta Deletada : C:\ProgramData\IePluginServices
[!] Pasta Deletada : C:\ProgramData\WindowsMangerProtect
[!] Pasta Deletada : C:\Program Files (x86)\globalUpdate
[!] Pasta Deletada : C:\Program Files (x86)\predm
[!] Pasta Deletada : C:\Program Files (x86)\Probit Software
[!] Pasta Deletada : C:\Users\User\AppData\Local\globalUpdate
[!] Pasta Deletada : C:\Users\User\Documents\Optimizer Pro
[!] Pasta Deletada : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qw3vfgd5.default\Extensions\faststartff@gmail.com
Arquivo Deletada : C:\Windows\System32\log\iSafeKrnlCall.log
Arquivo Deletada : C:\Users\User\AppData\Roaming\LiveSupport.exe_log.txt
Arquivo Deletada : C:\Users\User\AppData\Roaming\regsvr32.exe_log.txt
Arquivo Deletada : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qw3vfgd5.default\user.js
***** [ Tarefas ] *****
Tarefa Deletedo : LaunchSignup
***** [ Atalhos ] *****
***** [ Registro ] *****
Valor Deletedo : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\JFileManager_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\JFileManager_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\LiveSupport_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\livesupport_rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\vopackage_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\vopackage_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\wpm_v20_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\wpm_v20_RASMANCS
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Dados Restaurada : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Chave Deletedo : HKCU\Software\GlobalUpdate
Chave Deletedo : HKCU\Software\Optimizer Pro
Chave Deletedo : HKCU\Software\SupHpUISoft
Chave Deletedo : HKCU\Software\TutoTag
Chave Deletedo : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deletedo : HKCU\Software\AppDataLow\Software\Crossrider
Chave Deletedo : HKCU\Software\AppDataLow\Software\DynConIE
Chave Deletedo : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Chave Deletedo : HKLM\SOFTWARE\GlobalUpdate
Chave Deletedo : HKLM\SOFTWARE\omiga-plusSoftware
Chave Deletedo : HKLM\SOFTWARE\SupDp
Chave Deletedo : HKLM\SOFTWARE\SupTab
Chave Deletedo : HKLM\SOFTWARE\supWindowsMangerProtect
Chave Deletedo : HKLM\SOFTWARE\Tutorials
***** [ Navegadores ] *****
-\\ Internet Explorer v9.0.8112.16575
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [start Page]
Configurações Restauradas : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [search Page]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [start Page]
Configurações Restauradas : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [search Page]
-\\ Mozilla Firefox v33.0.2 (x86 pt-BR)
[ Arquivo : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qw3vfgd5.default\prefs.js ]
Linha deletada : user_pref("browser.search.defaultenginename", "omiga-plus");
Linha deletada : user_pref("extensions.crossrider.bic", "1496d3d5aa895295964831de884412dd");
-\\ Google Chrome v38.0.2125.111
[ Arquivo : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [8034 octets] - [02/11/2014 23:49:40]
AdwCleaner[s0].txt - [6314 octets] - [02/11/2014 23:55:35]
########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [6374 octets] ##########
# AdwCleaner v4.106 - Relatório criado 25/12/2014 às 22:17:18
# Atualizado 21/12/2014 por Xplode
# Database : 2014-12-21.4 [Live]
# Sistema Operacional : Windows 7 Ultimate (64 bits)
# Usuário : User - USER-PC
# Executando de : C:\Users\User\Desktop\AdwCleaner.exe
# Opção : Limpar
***** [ Serviços ] *****
***** [ Arquivos / Pastas ] *****
[!] Pasta Deletada : C:\ProgramData\374311380
[!] Pasta Deletada : C:\ProgramData\baidu
[!] Pasta Deletada : C:\ProgramData\Interenet Optimizer
[!] Pasta Deletada : C:\ProgramData\topbuyer
[!] Pasta Deletada : C:\ProgramData\BestDiscountApp
[!] Pasta Deletada : C:\ProgramData\SaleItCoupon
[!] Pasta Deletada : C:\ProgramData\saver box
[!] Pasta Deletada : C:\ProgramData\topbuyer
[!] Pasta Deletada : C:\ProgramData\websaver
[!] Pasta Deletada : C:\ProgramData\14793668954215713729UL
[!] Pasta Deletada : C:\ProgramData\cd4dab889cc08bc1
[!] Pasta Deletada : C:\Program Files (x86)\baidu
[!] Pasta Deletada : C:\Users\User\AppData\Local\Temp\baidu
[!] Pasta Deletada : C:\Users\User\AppData\Local\PennyBee
[!] Pasta Deletada : C:\Users\User\AppData\Roaming\baidu
[!] Pasta Deletada : C:\Users\User\AppData\Roaming\PennyBee
Arquivo Deletada : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\omiga-plus.xml
***** [ Tarefas ] *****
***** [ Atalhos ] *****
***** [ Registro ] *****
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [PennyBee]
Chave Deletedo : HKCU\Software\Mozilla\Extends
Chave Deletedo : HKLM\SOFTWARE\Classes\.
Chave Deletedo : HKLM\SOFTWARE\Classes\..9
Chave Deletedo : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{c632643}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{7513e9fd-6e7b-4829-ac25-a9e618f57f41}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7513e9fd-6e7b-4829-ac25-a9e618f57f41}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7513e9fd-6e7b-4829-ac25-a9e618f57f41}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7513e9fd-6e7b-4829-ac25-a9e618f57f41}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\CLSID\{7513e9fd-6e7b-4829-ac25-a9e618f57f41}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\PennyBee
Chave Deletedo : HKCU\Software\Easy Speed Check
Chave Deletedo : HKCU\Software\Baidu
Chave Deletedo : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Deletedo : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Chave Deletedo : HKLM\SOFTWARE\Baidu
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F488658-35A7-2AB8-A756-560BA8F103C3}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA8C94BE-9F47-1B2E-90F8-D8C07119BD96}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FE139F4C-CE5B-121A-8A2D-191FA2226094}
Dados Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\intere~1\intere~1.dll
Dados Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\INTERE~1\INTERE~2.DLL
***** [ Navegadores ] *****
-\\ Internet Explorer v9.0.8112.16575
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [First Home Page]
-\\ Mozilla Firefox v34.0.5 (x86 pt-BR)
[qw3vfgd5.default\prefs.js] - Linha deletada : user_pref("extensions.PBzJBRQCibHLZlSH.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"warnalert11.com\")>-1url.index[...]
[qw3vfgd5.default\prefs.js] - Linha deletada : user_pref("extensions.clswQyLFPSqShDGi.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"warnalert11.com\")>-1url.index[...]
[qw3vfgd5.default\prefs.js] - Linha deletada : user_pref("extensions.uXfVLRpBN728Uxlx.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"warnalert11.com\")>-1url.index[...]
[qw3vfgd5.default\prefs.js] - Linha deletada : user_pref("extensions.xNxipNP1whkiPNs4.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"warnalert11.com\")>-1url.index[...]
-\\ Google Chrome v38.0.2125.111
*************************
AdwCleaner[R0].txt - [14633 octets] - [02/11/2014 23:49:40]
AdwCleaner[R1].txt - [7693 octets] - [03/11/2014 00:46:35]
AdwCleaner[s0].txt - [12383 octets] - [02/11/2014 23:55:35]
########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [12444 octets] ##########

Compartilhar este post

Link para o post
Compartilhar em outros sites

DigRam    144

DigRam
Postado

/!\ Boa Noite! karoline ferreira /!\

 

> Baixe: < 1268r49.png > ( ... by Oleg N. Scherbakov )
> Salve-o no desktop!
> Desabilite seu antivírus!
> Para Windows 7,clique direito em JRT.exe e execute-o ...
Executar_Administrador.jpg
KRBKDhB8.jpg
> Aguarde a conclusão e poste o relatório. ( JRT.txt )
A+

Compartilhar este post

Link para o post
Compartilhar em outros sites

karoline ferreira    0

karoline ferreira
Postado
Bom Dia DigRam!



Segue o post do JRT.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.0 (11.29.2014:1)

OS: Windows 7 Ultimate x64

Ran by User on 26/12/2014 at 11:31:21,30

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~





~~~ Services




~~~ Registry Values




~~~ Registry Keys




~~~ Files




~~~ Folders


Successfully deleted: [Folder] "C:\ProgramData\baidu security"

Successfully deleted: [Folder] "C:\Program Files (x86)\baidu security"




~~~ FireFox


Emptied folder: C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\qw3vfgd5.default\minidumps [3 files]




~~~ Event Viewer Logs were cleared






~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 26/12/2014 at 11:41:46,12

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Compartilhar este post

Link para o post
Compartilhar em outros sites

DigRam    144

DigRam
Postado

/!\ Boa Tarde! karoline ferreira /!\

 

> Baixe: < Zoek-exe.png > ( ... by Smeenk )
> Salve-o ao desktop!
> Desabilite seu antivírus!
> Para Windows 7,execute zoek.exe como administrador.
emptyfolderscheck;delete
emptytemp;
autoclean;
> Copie e cole estas informações,que estão em vermelho,no campo da ferramenta.
> Clique "Run Script".

Zoek.exe is running now.

Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log
> Surgirão informações,pedindo-lhe que aguarde o surgimento do relatório.
> Ps: Essas informações,podem permanecer estáticas na tela por 20 minutos ou mais.
Zoek_Reboot_zpscf60b3cf.jpg
> Confirme o reboot!

zoek.hta failed by unknown error.

 

Restart computer, and try again.
> Ps: Ao obter algum erro,reinicie o PC e execute,novamente,a ferramenta.
> Poste o relatório,que estará em C:\zoek-results.txt <<
A+

Compartilhar este post

Link para o post
Compartilhar em outros sites

karoline ferreira    0

karoline ferreira
Postado

Bom Dia Dig Ram!

 

 

Segue o Relatório do Zoek

 

 

Zoek.exe v5.0.0.0 Updated 24-12-2014
Tool run by User on 27/12/2014 at 8:54:06,75.
Microsoft Windows 7 Ultimate 6.1.7600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\User\Desktop\zoek.exe [scan all users] [script inserted]
==== System Restore Info ======================
27/12/2014 09:00:54 Zoek.exe System Restore Point Created Succesfully.
==== Empty Folders Check ======================
C:\Program Files\Google deleted successfully
C:\PROGRA~3\374311380 deleted successfully
C:\Users\User\AppData\Roaming\Media Player Classic deleted successfully
C:\Users\User\AppData\Local\Adobe deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-3801029790-2799878285-4124920567-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14A505A0-95D7-4338-8B23-25D18EDC234F} deleted successfully
HKEY_USERS\S-1-5-21-3801029790-2799878285-4124920567-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{426791D4-A0B6-40DC-848B-9B7A951C82D8} deleted successfully
HKEY_USERS\S-1-5-21-3801029790-2799878285-4124920567-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99E5F1E4-5F5-4173-8FEF-B18549FE3240} deleted successfully
HKEY_USERS\S-1-5-21-3801029790-2799878285-4124920567-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D4E40D4-1DF3-4BE3-9AF-E9FE2D298B14} deleted successfully
HKEY_USERS\S-1-5-21-3801029790-2799878285-4124920567-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A1B871C1-D166-4330-A949-907BA7F5A616} deleted successfully
HKEY_USERS\S-1-5-21-3801029790-2799878285-4124920567-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A7628DA1-8A46-43C3-9691-21DAE5360D4} deleted successfully
HKEY_USERS\S-1-5-21-3801029790-2799878285-4124920567-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D27FC287-4035-41A6-A828-88981B2B365} deleted successfully
HKEY_USERS\S-1-5-21-3801029790-2799878285-4124920567-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E808E0B8-A422-4524-A588-31E8C41E5FAF} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\Users\User\AppData\Roaming\appdataFr2.bin deleted
C:\PROGRA~3\boost_interprocess deleted
C:\Users\User\AppData\Local\ICSharpCode.net deleted
C:\Windows\patsearch.bin deleted
C:\windows\SysNative\tasks\060184C3-9766-46a0-B258-F4518A0B2633 deleted
C:\windows\SysNative\drivers\Msft_Kernel_webinstrNew_01009.Wdf deleted
C:\Users\User\AppData\Roaming\HUQXD.exe deleted
C:\Users\User\AppData\Roaming\QNPUPZN.exe deleted
C:\Users\User\AppData\Roaming\unins000.exe deleted
C:\Users\User\AppData\Roaming\unins001.exe deleted
==== Firefox Extensions Registry ======================
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{87F8774F-B485-47E2-A755-A40A8A5E886C}"="C:\Users\User\AppData\Local\GAS Tecnologia\GBBD\bb\xpi" [09/12/2014 10:49]
==== Chromium Look ======================
Google Chrome Version: 38.0.2125.111 (Possible outdated, latest Stable version: 39.0.2171.95)
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.google.com"
"First Home Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Search Page"="http://www.google.com"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\qw3vfgd5.default\cache2 emptied successfully
==== Empty Chrome Cache ======================
C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 2\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
No Java Cache Found
==== C:\zoek_backup content ======================
C:\zoek_backup (files=10 folders=5 5149566 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\User\AppData\Local\Temp will be emptied at reboot
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\User\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted
==== EOF on 27/12/2014 at 9:53:22,73 ======================

Compartilhar este post

Link para o post
Compartilhar em outros sites

DigRam    144

DigRam
Postado

/!\ Bom Dia! karoline ferreira /!\

 

zx4ZII3H.jpg
> Abra a ferramenta AdwCleaner e clique em "Desinstalar".
> Confirme a solicitação!

> Baixe: < FRST_Logo.jpg > ( ... by Farbar )
> No banner àcima,é para sistemas 32bits!
> No link àcima,é para sistemas 64bits!
> Salve-o no desktop! (Área de trabalho ...)
> Execute a ferramenta! Clique "Yes" >> "Scan".
FRST_Addition_Scan_zpsa9fe21c8.jpg
> Antes de clicar "Scan",verifique se as caixinhas em "Whitelist" estão assinaladas.
> Em "Optional Scan",deixe marcada a checkbox "Addition.txt".
> Ps: Será gerado,também,o relatório "Addition.txt" que estará disponibilizado na 1ª execução da ferramenta.
> Poste os relatórios! (FRST.txt + Addition.txt)
> Como o log será extenso,envie-o à Cjoint_Logo.jpg >
acrVh6GY.jpg
> O link ao relatório,que é este assinalado,deverá ser colado em sua resposta.
Copierlelien_zpsd51f499f.jpg
> Ou clique "Copier le lien (*)" e cole o link ao seu Post.
A+

 

Compartilhar este post

Link para o post
Compartilhar em outros sites

DigRam    144

DigRam
Postado
/!\ Boa Tarde! karoline ferreira /!\


> Copie estas informações que estão em vermelho,para o Bloco de Notas.

> Salve-as com o nome fixlist. << Texto!

> Salve-as no desktop! /!\ C:\Users\User\Desktop /!\ ( Área de trabalho ... )


start

CloseProcesses:

ShellIconOverlayIdentifiers: [baiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BavShx64.dll No File

CHR dev: Chrome dev build detected! <======= ATTENTION

S2 0c632643; "C:\Windows\system32\rundll32.exe" "c:\progra~3\intere~1\InterenetOptimizerSvc.dll",service

2014-12-27 09:52 - 2014-12-27 09:52 - 00000326 _____ () C:\Windows\PFRO.log

2014-12-27 09:34 - 2014-12-27 08:53 - 00024064 _____ () C:\Windows\zoek-delete.exe

2014-12-27 09:00 - 2014-12-27 09:53 - 00007733 _____ () C:\zoek-results.log

2014-12-27 08:53 - 2014-12-27 09:52 - 00000000 ____D () C:\zoek_backup

2014-12-27 08:49 - 2014-12-27 09:52 - 00000112 _____ () C:\Windows\setupact.log

2014-12-27 08:49 - 2014-12-27 08:49 - 00000000 _____ () C:\Windows\setuperr.log

2014-12-26 13:10 - 2014-12-26 13:10 - 01295360 _____ () C:\Users\User\Desktop\zoek.exe

2014-12-26 11:41 - 2014-12-26 11:41 - 00000888 _____ () C:\Users\User\Desktop\JRT.txt

2014-12-26 10:51 - 2014-12-26 10:53 - 01707646 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe

2014-12-24 15:12 - 2014-12-24 15:12 - 00000000 ____D () C:\Users\Public\Documents\Baidu

2014-12-09 10:49 - 2014-12-09 10:49 - 00018070 _____ () C:\Users\User\AppData\Roaming\unins001.dat

2014-12-27 09:53 - 2014-10-01 20:03 - 00061075 _____ () C:\Windows\system32\AutoKMS.log

Task: {65E8D0CC-310C-4972-B956-0F9EEC1CAA9D} - \060184C3-9766-46a0-B258-F4518A0B2633 No Task File <==== ATTENTION

Task: {C9757959-CD3F-4D8E-9F58-02B88BA01640} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2014-10-01] (Microsoft)

emptytemp:

Hosts:

end


> Execute FRST/FRST64 >> Clique "Fix" << Aguarde!

> Na mensagem,clique Executar.

> Poste o relatório! (Fixlog.txt)


A+


Compartilhar este post

Link para o post
Compartilhar em outros sites

karoline ferreira    0

karoline ferreira
Postado

Boa tarde DigRam

 

Segue o relatório Fixlog

 

 

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-12-2014

Ran by User at 2014-12-27 15:55:17 Run:1
Running from C:\Users\User\Desktop
Loaded Profile: User (Available profiles: User)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
start
CloseProcesses:
ShellIconOverlayIdentifiers: [baiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BavShx64.dll No File
CHR dev: Chrome dev build detected! <======= ATTENTION
S2 0c632643; "C:\Windows\system32\rundll32.exe" "c:\progra~3\intere~1\InterenetOptimizerSvc.dll",service
2014-12-27 09:52 - 2014-12-27 09:52 - 00000326 _____ () C:\Windows\PFRO.log
2014-12-27 09:34 - 2014-12-27 08:53 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-12-27 09:00 - 2014-12-27 09:53 - 00007733 _____ () C:\zoek-results.log
2014-12-27 08:53 - 2014-12-27 09:52 - 00000000 ____D () C:\zoek_backup
2014-12-27 08:49 - 2014-12-27 09:52 - 00000112 _____ () C:\Windows\setupact.log
2014-12-27 08:49 - 2014-12-27 08:49 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-26 13:10 - 2014-12-26 13:10 - 01295360 _____ () C:\Users\User\Desktop\zoek.exe
2014-12-26 11:41 - 2014-12-26 11:41 - 00000888 _____ () C:\Users\User\Desktop\JRT.txt
2014-12-26 10:51 - 2014-12-26 10:53 - 01707646 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-12-24 15:12 - 2014-12-24 15:12 - 00000000 ____D () C:\Users\Public\Documents\Baidu
2014-12-09 10:49 - 2014-12-09 10:49 - 00018070 _____ () C:\Users\User\AppData\Roaming\unins001.dat
2014-12-27 09:53 - 2014-10-01 20:03 - 00061075 _____ () C:\Windows\system32\AutoKMS.log
Task: {65E8D0CC-310C-4972-B956-0F9EEC1CAA9D} - \060184C3-9766-46a0-B258-F4518A0B2633 No Task File <==== ATTENTION
Task: {C9757959-CD3F-4D8E-9F58-02B88BA01640} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2014-10-01] (Microsoft)
emptytemp:
Hosts:
end
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock" => Key deleted successfully.
"HKCR\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC}" => Key deleted successfully.
CHR dev: Chrome dev build detected! <======= ATTENTION => Error: No automatic fix found for this entry.
0c632643 => Service deleted successfully.
"C:\Windows\PFRO.log" => File/Directory not found.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\Users\User\Desktop\zoek.exe => Moved successfully.
C:\Users\User\Desktop\JRT.txt => Moved successfully.
C:\Users\User\Desktop\JRT.exe => Moved successfully.
C:\Users\Public\Documents\Baidu => Moved successfully.
C:\Users\User\AppData\Roaming\unins001.dat => Moved successfully.
C:\Windows\system32\AutoKMS.log => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{65E8D0CC-310C-4972-B956-0F9EEC1CAA9D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{65E8D0CC-310C-4972-B956-0F9EEC1CAA9D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\060184C3-9766-46a0-B258-F4518A0B2633" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{C9757959-CD3F-4D8E-9F58-02B88BA01640}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C9757959-CD3F-4D8E-9F58-02B88BA01640}" => Key deleted successfully.
C:\Windows\System32\Tasks\AutoKMS => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => Key deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 264 MB temporary data.
The system needed a reboot.
==== End of Fixlog 15:55:28 ====

Compartilhar este post

Link para o post
Compartilhar em outros sites

DigRam    144

DigRam
Postado

/!\ Boa Tarde! karoline ferreira /!\

 


> Caso não haja mais problemas,remova as ferramentas que foram utilizadas na desinfecção!
> Baixe: < delfix_108_zps75ef8ba4.jpg > ( ... de Xplode )
DelFix_Download_zpsb5d944c7.jpg
> Estando na página,clique em Download Now.
> Salve-a em um local conveniente! ( desktop! )
> Feche aplicativos que estejam abertos.
DelFix_RCL_zpscdf4940b.jpg
> Remover ferramentas de desinfecção
> Criar backup do registro
> Limpar pontos da restauração do sistema
> Com estas caixinhas marcadas,clique Executar!
> Reinicie o computador ao concluir!
> Tudo Ok?
A+

 

Compartilhar este post

Link para o post
Compartilhar em outros sites

karoline ferreira    0

karoline ferreira
Postado

Boa Tarde DigRam!

 

Obrigada mais uma vez por mim ajudar como desinfectação do meu notebook, fico muito agradecida por sua ajuda, foi de grande importância. :joia: :clap: :worship: :grin:

 

Att: Karoline

 

Segue o o relatório do DelFix.

 

# DelFix v10.8 - Relatório criado 28/12/2014 às 17:15:12

# Atualizado 29/07/2014 por Xplode
# Usuário : User - USER-PC
# Sistema Operacional : Windows 7 Ultimate (64 bits)
~ Removendo ferramentas de desinfecção ...
Removido : C:\FRST
Removido : C:\Users\User\AppData\Roaming\ZHP
Removido : C:\Users\User\Desktop\Addition.txt
Removido : C:\Users\User\Desktop\Fixlog.txt
Removido : C:\Users\User\Desktop\FRST.txt
Removido : C:\Users\User\Desktop\FRST64.exe
~ Criando backup do registro ... OK
~ Limpando pontos da restauração do sistema ...
Novo ponto de restauração criado !
########## - EOF - ##########

Compartilhar este post

Link para o post
Compartilhar em outros sites

DigRam    144

DigRam
Postado

PROBLEMA RESOLVIDO

 

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.

Compartilhar este post

Link para o post
Compartilhar em outros sites
Visitante
Este tópico está impedido de receber novos posts.
Ir para a lista de tópicos Tópicos Resolvidos (Seguranca & Malwares)
×

Informação importante

Ao usar o fórum, você concorda com nossos Termos e condições.

  Aceito