[Resolvido] Alterando proxy nos navegadores de Internet

Jackson Dias · Junho 21, 2015

Olá Srs

Há alguns dias que venho tendo problema com a "falta" de internet devido a uma alteração automática de proxy nos meus navegadores.

Segue o Log:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 18:19:07, on 21/06/2015

Platform: Unknown Windows (WinNT 6.02.1008)

MSIE: Internet Explorer v11.0 (11.00.9600.17840)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\AVG\AVG2015\avgui.exe

C:\Users\Jax&Gina\AppData\Roaming\uTorrent\uTorrent.exe

C:\Program Files (x86)\AVG\AVG2015\avgui.exe

C:\Program Files (x86)\AVG Web TuneUp\vprot.exe

C:\Windows\SysWOW64\ctfmon.exe

C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe

C:\Program Files (x86)\BlueStacks\HD-Agent.exe

C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={1105BB00-1EFB-4A8B-A390-FB8697EE9864}&mid=d3b0730f08ed47cda1e7a56eac748890-52e8e13b899ac23213cc13d3335893eb7bae2f43〈=pt-br&ds=AVG&coid=avgtbavg&cmpid=0215pii&pr=fr&d=2015-06-19 22:40:51&v=4.1.0.411&pid=wtu&sg=&sap=hp

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8118

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll

O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll

O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe

O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [blueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe

O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY

O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"

O4 - HKCU\..\Run: [uTorrent] "C:\Users\Jax&Gina\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe

O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O15 - Trusted Zone: imagem.caixa.gov.br

O15 - Trusted Zone: internetbanking.caixa.gov.br

O15 - Trusted Zone: internetbankingpf.caixa.gov.br

O15 - Trusted Zone: www.caixa.gov.br

O15 - Trusted Zone: http://www.caixa.gov.br

O20 - Winlogon Notify: GbPluginCef - C:\Program Files (x86)\GbPlugin\gbiehCef.dll

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Firewall do AVG (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgfws.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe

O23 - Service: Watchdog do AVG (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe

O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe

O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: vToolbarUpdater18.4.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

--

End of file - 7808 bytes

Desde já agradeço qualquer atenção com meu tópico.

Abraços,

Jackson Dias

Power Max · Junho 21, 2015

Olá Jackson.

Desative temporariamente seu antivírus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:

http://www.hijackthis.nl/smeenk/

Salve-o no Desktop (Área de Trabalho).

Para executá-lo corretamente siga as dicas deste tutorial:

Exclua adwares e outras ameaças de seu PC e browsers com o aplicativo Zoek

* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.

Jackson Dias · Junho 22, 2015

Nobre,

Segue o log:

Zoek.exe v5.0.0.0 Updated 04-May-2015

Microsoft Windows 8.1 Pro 6.3.9600 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Jax&Gina\Desktop\zoek.exe [scan all users] [script inserted]

==== Older Logs ======================

C:\zoek-results2015-06-22-160844.log 214 bytes

==== System Restore Info ======================

22/06/2015 13:57:11 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~3\CorelDRAW Graphics Suite X6 deleted successfully

C:\PROGRA~3\CorelDRAW Graphics Suite X7 x64 deleted successfully

C:\PROGRA~3\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} deleted successfully

Power Max · Junho 22, 2015

O Zoek ainda está fazendo a limpeza dos problemas. Aguarde até que ele conclua, depois disto poste o relatório completo dele.

Fico na espera.

Jackson Dias · Junho 22, 2015

Reiniciou aqui e tive que iniciar tudo do zero...

Mas não vi muita diferença no log.

No arquivo da unidade c:

Zoek.exe v5.0.0.0 Updated 04-May-2015

Microsoft Windows 8.1 Pro 6.3.9600 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Jax&Gina\Desktop\zoek.exe [scan all users] [script inserted]

==== System Restore Info ======================

22/06/2015 14:54:27 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

Na janela do Zoek:

Zoek.exe v5.0.0.0 Updated 04-May-2015

Microsoft Windows 8.1 Pro 6.3.9600 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Jax&Gina\Desktop\zoek.exe [scan all users] [script inserted]

===== Runcheck 14:54:07,50 =====

--- Create Environment Variables 14:54:14,88

--- Create System Restore Point 14:54:26,06

--- Checking Input 14:54:33,33

--- Reset Hosts File 14:55:05,01

--- AU AppData Check 14:55:08,98

--- Remove From Windows Installer 14:55:19,50

--- Registry HKLM Software Check 14:59:29,66

--- Quick Launch Shortcut Check 15:00:08,91

--- IE Startpage Check 15:00:30,98

--- Program Files DB Check 15:04:07,41

--- C:\PROGRA~3 DB Check 15:08:16,34

--- C:\ProgramData\Microsoft\Windows\Start Menu\Programs DB Check 15:08:18,19

--- Tasks DB Check 15:09:16,86

--- Downloads DB Check 15:09:29,77

--- C:\Windows\SysNative\config\systemprofile\AppData\LocalLow DB Check 15:09:44,80

--- C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow DB Check 15:09:44,80

--- C:\Windows\serviceprofiles\networkservice\AppData\LocalLow DB Check 15:09:44,80

--- C:\Windows\serviceprofiles\Localservice\AppData\LocalLow DB Check 15:09:44,80

--- Tasks2 DB Check 15:11:59,86

--- Documents DB Check 15:13:34,41

--- C:\Users\Public\Desktop DB Check 15:14:34,32

Ficou praticamente toda a tarde nisso e não mudou...

Me antecipei novamente? rsrssr

Agradeço a paciência.

Power Max · Junho 22, 2015

Tem vezes que ele trava mesmo. Reinicie o PC e tente novamente. Se mesmo assim não der certo, inicie o PC em Modo Seguro com rede, quando estiver em modo seguro com rede faça uma nova verificação com o Zoek

Jackson Dias · Junho 23, 2015

Infelizmente não funcionou em modo de segurança com rede, sem rede...

Tentei várias vezes, mas ficou como nas outras vezes. :(

Power Max · Junho 23, 2015

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:

http://www.bleepingcomputer.com/download/adwcleaner/

Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:

Remova adwares e toolbars maliciosas com o Adwcleaner

* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[s0].txt

Ficamos na espera.

Jackson Dias · Junho 24, 2015

# AdwCleaner v4.207 - Relatório criado 23/06/2015 às 21:52:18

# Atualizado 21/06/2015 por Xplode

# Base de dados : 2015-06-23.1 [servidor]

# Sistema operacional : Windows 8.1 Pro (x64)

# Usuário : Jax&Gina - JACKSON

# Executando de : C:\Users\Jax&Gina\Desktop\AdwCleaner.exe

# Opção : Limpar

***** [ Serviços ] *****

[#] Serviço Excluído : PrivoxyService

[#] Serviço Excluído : vToolbarUpdater18.4.0

***** [ Arquivos / Pastas ] *****

Pasta Excluído : C:\ProgramData\AVG Secure Search

Pasta Excluído : C:\ProgramData\AVG Security Toolbar

Pasta Excluído : C:\Program Files (x86)\Softcomp Software

Pasta Excluído : C:\Program Files (x86)\Common Files\AVG Secure Search

Pasta Excluído : C:\Users\Jax&Gina\AppData\Roaming\Updater

***** [ Tarefas agendadas ] *****

Tarefa Apagado : Malware Cleaner

***** [ Atalhos ] *****

***** [ Registro ] *****

Chave Apagado : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

Chave Apagado : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

Valor Apagado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]

Chave Apagado : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Chave Apagado : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

Chave Apagado : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

Chave Apagado : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Chave Apagado : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Chave Apagado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

Chave Apagado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

Chave Apagado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}

Chave Apagado : [x64] HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

Chave Apagado : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Chave Apagado : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

Chave Apagado : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

Chave Apagado : HKCU\Software\systweak

Chave Apagado : HKCU\Software\NetMon

Chave Apagado : HKCU\Software\Avg Secure Update

Chave Apagado : HKU\.DEFAULT\Software\Avg Secure Update

Dados Apagado : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1

Dados Apagado : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Navegadores ] *****

-\\ Internet Explorer v11.0.9600.17840

-\\ Google Chrome v43.0.2357.81

[C:\Users\Jax&Gina\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Apagado [search Provider] : hxxp://br.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [3423 bytes] - [23/06/2015 21:50:33]

AdwCleaner[s0].txt - [3096 bytes] - [23/06/2015 21:52:18]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [3155 bytes] ##########

Power Max · Junho 24, 2015

Baixe o programa Junkware Removal Tool no link abaixo:

http://thisisudax.org/downloads/JRT.exe

Para executar corretamente o programa acima é só seguir as dicas deste tutorial:

Tutorial do Junkware Removal Tool

* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt

Ficamos na espera.

Jackson Dias · Junho 24, 2015

Esse é o ultimo evento antes de fechar tudo, e não ter mais nenhum progresso. Fiz o procedimento em modo de segurança e deu na mesma.

Power Max · Junho 24, 2015

Faça o download do < ZHPCleaner > < > ( ... de Nicolas Coolman )

Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPCleaner para baixá-lo.

Para executá-lo corretamente siga as dicas desta postagem:

Tutorial completo do ZHPCleaner

Após a utilização dele, copie todo o conteúdo do seu relatório ZHPCleaner.txt e poste em sua próxima resposta.

Jackson Dias · Junho 24, 2015

~ ZHPCleaner v2015.6.24.282 by Nicolas Coolman (2015\06\24)

~ Run by Jax&Gina (Administrator) (24/06/2015 14:16:01)

~ Site : http://www.nicolascoolman.fr

~ Facebook : https://www.facebook.com/nicolascoolman1

~ State version : Version OK

~ Type : Reparo

~ Report : C:\Users\Jax&Gina\Desktop\ZHPCleaner.txt

~ Quarantine : C:\Users\Jax&Gina\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt

~ UAC : Activate

~ Boot Mode : Normal (Normal boot)

~ Windows 8.1, 64-bit (Build 9600)

---\\ Serviços (0)

---\\ Navegadores de Internet (0)

~ Nenhum ítem malicioso foi encontrado.

---\\ Arquivo hosts (2)

SUBSTITUIDO:

Número de redirecionamentos encontrados 1/20

---\\ Tarefas automáticas agendadas. (0)

~ Nenhum ítem malicioso foi encontrado.

---\\ Explorer ( Arquivos, Pastas) (25)

MOVIDO pasta: C:\Windows\Prefetch\KMSPICO - BY TUTORIAL E DOWNL-5B0BCA07.pf (PUA.KMSpico)

MOVIDO pasta: C:\Windows\Prefetch\KMSPICO - BY TUTORIAL E DOWNL-B3123A5C.pf (PUA.KMSpico)

MOVIDO pasta: C:\Windows\Prefetch\KMSPICO - BY TUTORIAL E DOWNL-B6E98B7A.pf (PUA.KMSpico)

MOVIDO pasta: C:\Users\Jax&Gina\Downloads\Microsoft Toolkit 2.5 BETA 5\Microsoft Toolkit.exe [CODYQX4 - Microsoft Toolkit] (HackTool.AutoKMS)

MOVIDO pasta: C:\Windows\AutoKMS\AutoKMS.log (HackTool.AutoKMS)

MOVIDO arquivo: C:\Program Files\KMSpico (PUA.KMSpico)

MOVIDO arquivo: C:\ProgramData\Microsoft Toolkit (HackTool.AutoKMS)

MOVIDO arquivo: C:\Windows\AutoKMS (HackTool.AutoKMS)

MOVIDO arquivo: C:\Users\Jax&Gina\AppData\LocalLow\AVG Web TuneUp (Toolbar.AVGSafeGuard)

MOVIDO arquivo: C:\Users\Jax&Gina\AppData\Local\AVG Web TuneUp (Toolbar.AVGSafeGuard)

MOVIDO arquivo: C:\Windows\Installer\MSI345.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSI707A.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSI7D3D.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSI932.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSI9B26.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSI9FFA.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSIA5B3.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSIA654.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSIABA4.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSIB13D.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSIB1C0.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSIB6F1.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSIBBA5.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSIC1E1.tmp- (Empty)

MOVIDO arquivo: C:\Windows\Installer\MSICC07.tmp- (Empty)

---\\ Registro ( Chaves, Valores, Dados ) (9)

SUPRIMIDO chave*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\WtuSystemSupport [C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe (Not File)] (Toolbar.AVGSafeGuard)

SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-1895763004-1415949097-3238144623-1001\Software\AVG Web TuneUp [] (Toolbar.AVGSafeGuard)

SUPRIMIDO chave: HKCU\Software\AVG Web TuneUp [] (Toolbar.AVGSafeGuard)

SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj [AVG Web TuneUp] (Toolbar.AVGSafeGuard)

SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1 [AVG Web TuneUp] (Toolbar.AVGSafeGuard)

SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.4.0 (Not File)] (Toolbar.AVGSearch)

SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\AVG Web TuneUp [] (Toolbar.AVGSafeGuard)

SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Web TuneUp [AVG Technologies] (Toolbar.AVGSafeGuard)

SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A} [C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.4.0 (Not File)] (Toolbar.AVGSearch)

---\\ Resultado de reparação

Reparação efectuada com sucesso

~ Este navegador está faltando ! (Mozilla Firefox)

~ Este navegador está faltando ! (Opera Software)

---\\ Estatísticas

~ Items scan : 588

~ Items encontrado : 1

~ items cancelados : 0

~ Items réparo : 35

End of clean at 14:16:27

===================

ZHPCleaner-[R]-24062015-14_16_27.txt

ZHPCleaner--24062015-14_15_25.txt

Power Max · Junho 24, 2015

:seta: Faça o download do Malwarebytes em um destes links abaixo:

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

http://downloads.malwarebytes.org/mbam-download.php

Obs: Depois de acessar um destes links acima, clique no botão DOWNLOAD, como mostra a imagem abaixo:

Para instalá-lo e executá-lo corretamente siga, por gentileza, as dicas desta postagem:

Tutorial do Malwarebytes Anti-Malware

Na sua próxima resposta poste este log (relatório) do Malwarebytes.

Ficamos no aguardo.

Jackson Dias · Junho 24, 2015

Malwarebytes Anti-Malware

www.malwarebytes.org

Data da Verificação: 24/06/2015

Hora da Verificação: 15:19:33

Arquivo de Log: malwarebytes.txt

Administrador: Sim

Versão: 2.01.6.1022

Base de Dados de Malware: v2015.06.24.04

Base de Dados de Rootkit: v2015.06.22.01

Licença: Premium

Proteção de Malware: Habilitado

Proteção de Site Malicioso: Habilitado

Auto-Proteção: Desabilitado

SO: Windows 8.1

Processador: x64

Sistema de Arquivos: NTFS

Usuário: Jax&Gina

Tipo da Verificação: Verificação Personalizada

Resultado: Terminado

Objetos Verificados: 476062

Tempo Decorrido: 2 hr, 4 min, 13 seg

Memória: Habilitado

Inicialização: Habilitado

Sistema de Arquivos: Habilitado

Arquivos Compactados: Habilitado

Rootkits: Habilitado

Heurística: Habilitado

PUP: Habilitado

PUM: Habilitado

Processos: 0