Análise de Log - Travando no Facebook -

Question

Ol&aacute; pessoal! A lentid&atilde;o por aqui &eacute; comum. Me informaram que &eacute; por causa de mem&oacute;ria. Agora, faz uns 4 dias que est&aacute; horr&iacute;vel navegar no Facebook: lento e travando muito :cap_chateado:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:42:13, on 23/11/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16476)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\PROGRA~1\GbPlugin\GbpSv.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\IDT\WDM\STacSV.exe
C:\Windows\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\BatteryManagerService\BatteryManagerService.exe
C:\Program Files\Microsoft\BingBar\SeaPort.EXE
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Online Games Manager\ogmservice.exe
C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Windows\system32	askhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files\Technology Pack\Amazing Audio\AudioPower.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files\Technology Pack\Battery Manager\BatteryPower.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
C:\Windows\system32\svchost.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Monica\Downloads\HijackThis.exe
C:\Windows\System32\svchost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.positivoinformatica.com.br
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.baixaki.com.br/portal/?utm_source=core&utm_medium=ppi&utm_campaign=portal
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll
O2 - BHO: LyricsPod - {56570665-9ACA-49EC-8A66-CA9F4A3152FF} - C:\Program Files\LyricsPod\116.dll
O2 - BHO: SpecialSavings - {74F475FA-6C75-43BD-AAB9-ECDA6184F600} - C:\Program Files\SpecialSavings\SpecialSavingsSinged.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\Program Files\GbPlugin\gbieh.dll
O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files\GbPlugin\gbiehcef.dll
O2 - BHO: G-Buster Browser Defense Ita&uacute; Unibanco - {C41A1C0E-EA6C-11D4-B1B8-444553540008} - C:\Program Files\GbPlugin\gbiehuni.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [AudioPower] C:\Program Files\Technology Pack\Amazing Audio\AudioPower.exe
O4 - HKLM\..\Run: [StartUpManagerPositivo] C:\Program Files\Positivo Inform&aacute;tica\Gerenciador de Inicializa&ccedil;&atilde;o Positivo\ManagerWindows.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVI&Ccedil;O LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVI&Ccedil;O LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVI&Ccedil;O DE REDE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVI&Ccedil;O DE REDE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: SpecialSavings - {A69A551A-1AAE-4B67-8C2E-52F8B8A19504} - C:\Program Files\SpecialSavings\SpecialSavingsSinged.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: www.bancobrasil.com.br
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: www.bb.com.br
O15 - Trusted Zone: http://www.itau.com.br
O16 - DPF: {96F464E1-ED62-4716-AE70-A08A1DDEB26B} (Uploader Control) - http://saraiva.digipix.com.br/softwares/us8028/Uploader8.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify:  GbPluginBb - C:\Program Files\GbPlugin\gbieh.dll
O20 - Winlogon Notify:  GbPluginCef - C:\Program Files\GbPlugin\gbiehCef.dll
O20 - Winlogon Notify:  GbPluginUni - C:\Program Files\GbPlugin\gbiehUni.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Battery Manager Service (BatteryManagerSrv) - Positivo Inform&aacute;tica S.A - C:\Program Files\BatteryManagerService\BatteryManagerService.exe
O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~1\GbPlugin\GbpSv.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Servi&ccedil;o do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Online Games Manager (ogmservice) - RealNetworks, Inc. - C:\Program Files\Online Games Manager\ogmservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\stlang.dll,-10102 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV.exe

--
End of file - 10945 bytes

Answer

Voc&ecirc; possu&iacute; o Avast e o Mcafee instalados ?

Answer

O Avast tenho instalado h&aacute; tempos. O Mcafee n&atilde;o sei porque... n&atilde;o sei se &eacute; por causa do guardi&atilde;o de seguran&ccedil;a do Banco.

Desculpe-me, mas n&atilde;o entendo nada desses assuntos.

Answer

[quote=Monica Gurzoni, post: 6736007]O Avast tenho instalado h&aacute; tempos. O Mcafee n&atilde;o sei porque... n&atilde;o sei se &eacute; por causa do guardi&atilde;o de seguran&ccedil;a do Banco.

Desculpe-me, mas n&atilde;o entendo nada desses assuntos.[/quote]
Ol&aacute;!

|- Como seu computador ou Note &eacute; da Positivo,o McAfee veio instalado ao mesmo. Isso n&atilde;o tem nada haver com o plugin banc&aacute;rio,da Gas Tecnologia.
Outra possibilidade de ter o McAfee em sua m&aacute;quina,seria aceitar a atualiza&ccedil;&atilde;o do Flash Player e esquecer de desmarcar a caixinha,que pede sua instala&ccedil;&atilde;o.

Abs!

Answer

Ol&aacute; Monica Gurzoni

H&aacute; adwares instalados.

:veja: Baixe o [color=#800080]AdwCleaner[/color] (...de [color=#0000FF]Xplode[/color]) e salve-o no Desktop (&Aacute;rea de Trabalho) 
 
*Salve qualquer trabalho aberto e feche o seu navegador 
 
*Execute-o, clique [Examinar] e aguarde o t&eacute;rmino 
 
*Clique [Limpar] e aguarde o t&eacute;rmino 
 
*Caso seja solicitada a reinicializa&ccedil;&atilde;o do PC, clique [OK] para reiniciar. 
 
*Cole o relat&oacute;rio C:\AdwCleaner\AdwCleaner[S0].txt

Answer

Ol&aacute; Wings!

Acho que &eacute; importante dizer que pela manh&atilde;, enquanto aguardava a orienta&ccedil;&atilde;o, escaneei com o Avast. Vou tentar colocar o resultado aqui, como imagem.

Agora vou baixar o AdwCleaner e execut&aacute;-lo.

Relat&oacute;rio, aqui:

# AdwCleaner v3.013 - Relat&oacute;rio criado 24/11/2013 &agrave;s 22:36:59
# Atualizado 24/11/2013 por Xplode
# Sistema Operacional : Windows 7 Starter Service Pack 1 (32 bits)
# Usu&aacute;rio : Monica - MONICA-PC
# Executando de : C:\Users\Monica\Desktop\AdwCleaner.exe
# Op&ccedil;&atilde;o : Limpar

***** [ Servi&ccedil;os ] *****

***** [ Arquivos / Pastas ] *****

Pasta Deletada : C:\ProgramData\Tarma Installer
Pasta Deletada : C:\ProgramData\Trymedia
Pasta Deletada : C:\Program Files\LyricsOn
Pasta Deletada : C:\Program Files\LyricsPod
Pasta Deletada : C:\Program Files\SpecialSavings
Pasta Deletada : C:\Program Files\Common Files\DVDVideoSoft\TB
Pasta Deletada : C:\Users\Monica\AppData\Local\iLivid
Pasta Deletada : C:\Users\Monica\AppData\Local\PackageAware
Pasta Deletada : C:\Users\Monica\AppData\Roaming\dvdvideosoftiehelpers
Pasta Deletada : C:\Users\Monica\AppData\Roaming\OpenCandy
Pasta Deletada : C:\Users\Monica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpecialSavings
Pasta Deletada : C:\Users\Monica\AppData\Roaming\Mozilla\Firefox\Profiles\27hu7b3q.default\Extensions\specialsavings@superfish.com
Arquivo Deletada : C:\Users\Monica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
Arquivo Deletada : C:\Users\Monica\Desktop\iLivid.lnk
Arquivo Deletada : C:\Users\Monica\AppData\Roaming\Mozilla\Firefox\Profiles\27hu7b3q.default\user.js

***** [ Atalhos ] *****

***** [ Registro ] *****

Valor Deletedo : HKCU\Software\Mozilla\Firefox\Extensions [specialsavings@superfish.com]
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{56570665-9ACA-49EC-8A66-CA9F4A3152FF}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{A69A551A-1AAE-4B67-8C2E-52F8B8A19504}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Chave Deletedo : HKLM\SOFTWARE\Classes\TypeLib\{E1EF512D-604D-4776-AF11-410704DA1911}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56570665-9ACA-49EC-8A66-CA9F4A3152FF}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{56570665-9ACA-49EC-8A66-CA9F4A3152FF}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{56570665-9ACA-49EC-8A66-CA9F4A3152FF}
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A69A551A-1AAE-4B67-8C2E-52F8B8A19504}
Chave Deletedo : HKCU\Software\ilivid
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\performersoft llc
Chave Deletedo : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Chave Deletedo : HKCU\Software\AppDataLow\Software\SpecialSavings
Chave Deletedo : HKLM\Software\Tarma Installer
Chave Deletedo : HKLM\Software\Uniblue
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpecialSavings
Chave Deletedo : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Navegadores ] *****

-\ Internet Explorer v9.0.8112.16476

-\ Mozilla Firefox v25.0.1 (pt-BR)

[ Arquivo : C:\Users\Monica\AppData\Roaming\Mozilla\Firefox\Profiles\27hu7b3q.default\prefs.js ]

*************************

AdwCleaner[R0].txt - [4641 octets] - [24/11/2013 22:35:16]
AdwCleaner[S0].txt - [4432 octets] - [24/11/2013 22:36:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4492 octets] ##########

Answer

:veja: Baixe o [color=#800080]Junkware Removal Tool[/color] (...de [color=#0000FF]Thisisu[/color]) e salve-o no Desktop (&Aacute;rea de Trabalho) 
 
*Feche o seu navegador (Firefox, IE, Google Chrome) 
 
*Clique com o bot&atilde;o direito do mouse no JRT e selecione https://www.hardware.com.br/static/c/m/74f6572c00b779edf6f194710ceb6ce9 
 
*Tecle [ENTER] 
 
*Durante o scan os &iacute;cones do Desktop desaparecer&atilde;o temporariamente 
 
*Ao surgir a mensagem The scan completed succesfully, feche a janela e cole o relat&oacute;rio JRT.txt localizado no Desktop

Answer

Wings, o texto &eacute; muito longo.

O texto que voc&ecirc; digitou &eacute; muito longo (254160 caracteres). Por favor diminua para 70000 caracteres.

Como fa&ccedil;o?

Answer

:veja: Acesse [color=#800080]este link[/color] 
 
*Clique [Selecionar arquivo...] 
 
*Localize o relat&oacute;rio JRT.txt criado no Desktop, e clique [Abrir] 
 
*Selecione 4 jours e clique [Cr&eacute;er le lien Cjoint] 
 
https://www.hardware.com.br/static/c/m/fb405a606703ea7bf37880bb8770d9e7   
 
*Copie e cole o link criado ao lado de Le lien a &eacute;t&eacute; cr&eacute;&eacute;: 
 
https://www.hardware.com.br/static/c/m/cae86b35b8d8683484b25434c8be7fc9

Answer

Isso?
http://cjoint.com/?3KzqLuFY93r

Answer

Sim...isso mesmo...:isso_ai:

Informe como est&aacute; o PC.

:veja: Baixe o [color=#800080]Zoek[/color] (...de [color=#0000FF]Smeenk[/color]) 
 
*Extraia o arquivo Zoek.exe para o Desktop (&Aacute;rea de Trabalho) 
 
*Clique com o bot&atilde;o direito do mouse no Zoek e selecione https://www.hardware.com.br/static/c/m/74f6572c00b779edf6f194710ceb6ce9 
 
*Cole as linhas em [color=#8B0000]marrom[/color] no espa&ccedil;o do Zoek 
[color=#8B0000] 
autoclean;
emptyalltemp;
[/color] 
 
*Feche o seu navegador e clique [Run Script] 
 
*Durante o scan a mensagem abaixo ser&aacute; apresentada. Aguarde o t&eacute;rmino...pode demorar! 
 
Zoek.exe is running now. 
Do not start any browser windows, they will be closed automatically. 
Please wait! This window will close when finished. 
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

*Caso a reinicializa&ccedil;&atilde;o do PC seja solicitada, clique [OK] 
 
*Cole ou anexe o relat&oacute;rio apresentado ( C:\zoek-results.txt )

Answer

Wings, entrei um pouquinho no Face para testar. No geral, parece que voltou ao que era: meio lento (creio que isso &aacute; devido ao sistema... mem&oacute;ria... ser um notebook... ), mas n&atilde;o travou/congelou.

Aqui:

Zoek.exe Version 4.0.0.5 Updated 24-November-2013
Tool run by Monica on 25/11/2013 at 13:47:42,89.
Microsoft Windows 7 Starter  6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Monica\Desktop\zoek.exe [Script inserted]

==== System Restore Info ======================

25/11/2013 13:51:12 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Users\Monica\AppData\Roaming\Mozilla\Firefox\Profiles\27hu7b3q.default

user.js not found
---- Lines specialsavings removed from prefs.js ----
user_pref(superfish.settings.specialsavings@superfish.com, 
    specialsavings

Answer

:veja: Baixe o arquivo fix.txt

:veja: Clique com o bot&atilde;o direito do mouse no Zoek e selecione https://www.hardware.com.br/static/c/m/74f6572c00b779edf6f194710ceb6ce9

*Abra o arquivo fix.txt, copie e cole todo o seu conte&uacute;do no espa&ccedil;o do Zoek

*Clique [Run Script]

*Cole ou anexe o relat&oacute;rio apresentado ( C:\zoek-results.txt )

Answer

Zoek.exe Version 4.0.0.5 Updated 24-November-2013
Tool run by Monica on 25/11/2013 at 16:05:06,03.
Microsoft Windows 7 Starter  6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Monica\Desktop\zoek.exe [Script inserted]

==== Older Logs ======================

C:\zoek-results2013-11-25-163501.log    7592 bytes

==== Batch Command(s) Run By Tool======================

A opera&Dagger;&AElig;o foi conclu&iexcl;da com &circ;xito.

==== EOF on 25/11/2013 at 16:08:11,12 ======================

Answer

:veja: Baixe o [COLOR=#800080]DelFix[/COLOR] (...de [COLOR=#0000FF]Xplode[/COLOR]) e salve-o no Desktop (&Aacute;rea de Trabalho) 
 
*Execute-o, deixe selecionadas as op&ccedil;&otilde;es Remove disinfection tools e Purge system restore  
 
https://www.hardware.com.br/static/c/m/0aa88d8de02761fe07aec2516598595a 
 
*Clique [Run] e feche o relat&oacute;rio apresentado

:veja: Delete o DelFix e o arquivo C:\DelFix.txt

O PC est&aacute; limpo.

Um abra&ccedil;o...:tchau:

Ferramentas

Mover Tópico