análise de vírus ou outra coisa ? resolvido

Zoek.exe v5.0.0.0 Updated 17-February-2015

Tool run by Bozzi on qua 18/02/2015 at 14:59:53,76.

Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Documents and Settings\Bozzi\Desktop\zoek.exe [Scan all users] [Script inserted]



==== System Restore Info ======================



18/2/2015 15:01:14 Zoek.exe System Restore Point Created Succesfully.



==== Reset Hosts File ======================



# Copyright (c) 1993-2006 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

#  102.54.94.97  rhino.acme.com  # source server

#  38.25.63.10  x.acme.com  # x client host

127.0.0.1  localhost



==== Deleting CLSID Registry Keys ======================





==== Deleting CLSID Registry Values ======================





==== Deleting Services ======================





==== FireFox Fix ======================



Deleted from C:\Documents and Settings\ADMINI~1\Dados de aplicativos\Mozilla\Firefox\Profiles\kqg91418.default\prefs.js:



Added to C:\Documents and Settings\ADMINI~1\Dados de aplicativos\Mozilla\Firefox\Profiles\kqg91418.default\prefs.js:

user_pref("browser.startup.homepage", "about:home"

user_pref("browser.newtab.url", "about:newtab"



Deleted from C:\Documents and Settings\Bozzi\Dados de aplicativos\Mozilla\Firefox\Profiles\gungelcs.default\prefs.js:

user_pref("browser.startup.homepage", "<a href="'http://www.google.com.br'" target="_blank">www.google.com.br</a>&quot;



Added to C:\Documents and Settings\Bozzi\Dados de aplicativos\Mozilla\Firefox\Profiles\gungelcs.default\prefs.js:

user_pref("browser.startup.homepage", "about:home&quot;

user_pref("browser.newtab.url", "about:newtab&quot;



==== Deleting Files \ Folders ======================



C:\Arquivos de programas\ComPlus Applications deleted

C:\Documents and Settings\Bozzi\Dados de aplicativos\WB.CFG deleted

C:\Documents and Settings\Bozzi\Dados de aplicativos\baidu deleted

C:\Documents and Settings\Bozzi\Dados de aplicativos\MetaCrawler deleted

C:\Documents and Settings\NetworkService\Dados de aplicativos\WB.CFG deleted

C:\Documents and Settings\NetworkService\Dados de aplicativos\MetaCrawler deleted

C:\DOCUME~1\ALLUSE~1\DADOSD~1\APN deleted

C:\DOCUME~1\ALLUSE~1\DADOSD~1\Duplicaterecord.js deleted

C:\DOCUME~1\ALLUSE~1\DADOSD~1\Baidu deleted

C:\DOCUME~1\ALLUSE~1\DADOSD~1\Package Cache deleted

C:\WINDOWS\tasks\At2.job deleted

C:\WINDOWS\tasks\At3.job deleted

C:\WINDOWS\tasks\At4.job deleted

C:\WINDOWS\tasks\At6.job deleted

C:\WINDOWS\system32\GroupPolicy\ADM deleted

C:\WINDOWS\system32\GroupPolicy\Machine deleted

C:\WINDOWS\system32\GroupPolicy\gpt.ini deleted

C:\WINDOWS\System32\SET11E.tmp deleted

C:\WINDOWS\System32\SET183.tmp deleted

C:\WINDOWS\System32\SET18C.tmp deleted

C:\WINDOWS\System32\SET199.tmp deleted

C:\WINDOWS\System32\SET1BF.tmp deleted

C:\WINDOWS\System32\SET1D8.tmp deleted

C:\WINDOWS\System32\SET200.tmp deleted

C:\WINDOWS\System32\SET206.tmp deleted

C:\WINDOWS\System32\SET228.tmp deleted

C:\WINDOWS\System32\SET229.tmp deleted

C:\WINDOWS\System32\SET22A.tmp deleted

C:\WINDOWS\System32\SET22B.tmp deleted

C:\WINDOWS\System32\SET23B.tmp deleted

C:\Documents and Settings\Bozzi\Dados de aplicativos\unins000.exe deleted



==== Firefox Start and Search pages ======================



ProfilePath: C:\Documents and Settings\ADMINI~1\Dados de aplicativos\Mozilla\Firefox\Profiles\kqg91418.default

user_pref("browser.startup.homepage", "about:home&quot;

user_pref("browser.newtab.url", "about:newtab&quot;



ProfilePath: C:\Documents and Settings\Bozzi\Dados de aplicativos\Mozilla\Firefox\Profiles\gungelcs.default

user_pref("browser.startup.homepage", "about:home&quot;

user_pref("browser.newtab.url", "about:newtab&quot;



==== Firefox Extensions Registry ======================



[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"[EMAIL]wrc@avast.com[/EMAIL]"="C:\Arquivos de programas\AVAST Software\Avast\WebRep\FF" [17/02/2015 23:00]



==== Firefox Extensions ======================



==== Firefox Plugins ======================



Profilepath: C:\Documents and Settings\Bozzi\Dados de aplicativos\Mozilla\Firefox\Profiles\gungelcs.default

A104717A0DB2BF3412B7CA51ECD8CCFD   - C:\Arquivos de programas\Java\jre7\bin\plugin2\npjp2.dll -   Java(TM) Platform SE 7 U76

08A8AA80E372A867D7979DA0949AC4BA   - C:\Arquivos de programas\Java\jre7\bin\dtplugin\npdeployJava1.dll -   Java Deployment Toolkit 7.0.760.13

98137411B9C632095F919E2CE70B288A   - C:\Arquivos de programas\Google\Update\1.3.26.9\npGoogleUpdate3.dll -   Google Update

893BF7D2261C56C24F813405D9D018E0   - c:\Arquivos de programas\Microsoft Silverlight\5.1.30514.0\npctrl.dll -   Silverlight Plug-In

AE84791D996D1F05A2446B0C447D937A   - C:\Arquivos de programas\Adobe\Reader 9.0\Reader\browser\nppdf32.dll -   Adobe Acrobat

AE84791D996D1F05A2446B0C447D937A   - C:\Arquivos de programas\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll -   Adobe Acrobat

5E1A1EFE6B3D6070842FC6B6F1F679AD   - C:\windows\system32\WebClient\npwebclient.dll -   DVR Client

93A6E62490C778FE0F8F61D246218998   - C:\Arquivos de programas\Windows Live\Photo Gallery\NPWLPG.dll -   Windows Live® Photo Gallery

AB87EEFFD18F2BAAFC274E7075EA6C67   - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll -   Windows Presentation Foundation / Windows Presentation Foundation

CF4ABE599858E10EEB911E16FBCFD87D   - C:\Arquivos de programas\Windows Media Player\npdrmv2.dll -   Microsoft® DRM

76E34EA1089E92709C5725407B565DA1   - C:\Arquivos de programas\Windows Media Player\npdsplay.dll -   Windows Media Player Plug-in Dynamic Link Library

02A4A41FAC9BF96155B3E8068D1DF4B6   - C:\Arquivos de programas\Windows Media Player\npwmsdrm.dll -   Microsoft® DRM

8DA2ED6B04EA33F2EAE8BA883F903729   - c:\Arquivos de programas\Microsoft Silverlight\5.1.30514.0\npctrlui.dll -   Microsoft® Silverlight





==== Chromium Look ======================



HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

doobfiogmfmpjnoofjhhgjehmlofngfp - C:\DOCUME~1\Bozzi\CONFIG~1\DADOSD~1\metacrawler-speeddial.crx[19/10/2013 20:01]

eofcbnmajmjmplflapaojjnihcjkigck - C:\Arquivos de programas\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[17/01/2015 20:02]

gomekmidlodglbbmalcneegieacbdmki - C:\Arquivos de programas\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[17/01/2015 20:02]



HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

doobfiogmfmpjnoofjhhgjehmlofngfp - C:\DOCUME~1\Bozzi\CONFIG~1\DADOSD~1\metacrawler-speeddial.crx[19/10/2013 20:01]



==== Set IE to Default ======================



Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="<a href="http://www.google.com/" target="_blank">http://www.google.com/</a>"

"Search Page"="<a href="https://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">https://www.google.com/search?trackid=sp-006&q={searchTerms}</a>"

"Search Bar"="<a href="https://www.google.com/?trackid=sp-006" target="_blank">https://www.google.com/?trackid=sp-006</a>"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Search Page"="<a href="https://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">https://www.google.com/search?trackid=sp-006&q={searchTerms}</a>"

"Start Page"="<a href="https://www.google.com/?trackid=sp-006" target="_blank">https://www.google.com/?trackid=sp-006</a>"

"Search Bar"="<a href="https://www.google.com/?trackid=sp-006" target="_blank">https://www.google.com/?trackid=sp-006</a>"



New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Search Page"="<a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>"

"Search Bar"="<a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>"

"Start Page"="<a href="http://www.google.com/" target="_blank">http://www.google.com/</a>"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Search Page"="<a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>"

"Search Bar"="<a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>"

"Start Page"="<a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>"



==== All HKCU SearchScopes ======================



HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}"

{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="<a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown  Url="<a href="http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC" target="_blank">http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC</a>"

{67A2568C-7A0A-4EED-AECC-B5405DE63B64} Google  Url="<a href="http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_pt-BRBR551" target="_blank">http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_pt-BRBR551</a>"

{80A03808-44CF-4079-942D-E9728AA3E067} Yahoo! Search Url="<a href="http://rts.dsrlte.com/?q={searchTerms}&r=274" target="_blank">http://rts.dsrlte.com/?q={searchTerms}&r=274</a>"

{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} Google  Url="<a href="https://www.google.com/search?trackid=sp-006&q={searchTerms}" target="_blank">https://www.google.com/search?trackid=sp-006&q={searchTerms}</a>"



==== Reset Google Chrome ======================



Nothing found to reset



==== shortcuts on Users Desktops ======================



C:\Documents and Settings\Bozzi\Desktop\Internet Explorer.lnk - C:\Arquivos de programas\Internet Explorer\iexplore.exe

C:\Documents and Settings\Bozzi\Desktop\Windows Media Player.lnk - C:\Arquivos de programas\Windows Media Player\wmplayer.exe /prefetch:1

C:\Documents and Settings\Bozzi\Desktop\ZHPDiag.lnk - C:\Arquivos de programas\ZHPDiag\ZHPhep.exe

C:\Documents and Settings\Bozzi\Desktop\ZHPFix.lnk - C:\Arquivos de programas\ZHPDiag\ZHPFix\ZHPhep.exe



==== shortcuts on All Users Desktop ======================



C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk - C:\Arquivos de programas\Adobe\Reader 9.0\Reader\AcroRd32.exe

C:\Documents and Settings\All Users\Desktop\Avast Free Antivirus.lnk - C:\Arquivos de programas\AVAST Software\Avast\avastui.exe

C:\Documents and Settings\All Users\Desktop\CCleaner.lnk - C:\Arquivos de programas\CCleaner\CCleaner.exe

C:\Documents and Settings\All Users\Desktop\Comprar suprimentos - HP Deskjet 2050 J510 series.lnk - C:\Arquivos de programas\HP\HP Deskjet 2050 J510 series\Bin\hpqDTSS.exe

C:\Documents and Settings\All Users\Desktop\FlvPlayer.lnk - C:\Arquivos de programas\FlvPlayer\FLVPlayerApp.exe

C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk - C:\Arquivos de programas\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\All Users\Desktop\HP Deskjet 2050 J510 series.lnk - C:\Arquivos de programas\HP\HP Deskjet 2050 J510 series\Bin\HP Deskjet 2050 J510 series.exe -Start UDCDevicePage

C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk - C:\Arquivos de programas\Mozilla Firefox\firefox.exe



==== shortcuts in Users Start Menu ======================



C:\Documents and Settings\Bozzi\Menu Iniciar\Programas\Acessórios\Ferramentas do Sistema\Internet Explorer (Sem Complementos).lnk - 

C:\Documents and Settings\Bozzi\Menu Iniciar\Programas\WinRAR\Ajuda do WinRAR.lnk - C:\Arquivos de programas\WinRAR\WinRAR.chm

C:\Documents and Settings\Bozzi\Menu Iniciar\Programas\WinRAR\Manual do Console RAR.lnk - C:\Arquivos de programas\WinRAR\Rar.txt

C:\Documents and Settings\Bozzi\Menu Iniciar\Programas\WinRAR\O que há de novo na última versão.lnk - 

C:\Documents and Settings\Bozzi\Menu Iniciar\Programas\WinRAR\WinRAR.lnk - C:\Arquivos de programas\WinRAR\WinRAR.exe



==== shortcuts in All Users Start Menu ======================



C:\Documents and Settings\All Users\Menu Iniciar\Programas\Mozilla Firefox.lnk - C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\AVAST Software\Avast Free Antivirus.lnk - C:\Arquivos de programas\AVAST Software\Avast\avastui.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\CCleaner\CCleaner.lnk - C:\Arquivos de programas\CCleaner\CCleaner.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Google Chrome\Google Chrome.lnk - C:\Arquivos de programas\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\About Java.lnk - C:\Arquivos de programas\Java\jre7\bin\javacpl.exe -tab about

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\Check For Updates.lnk - C:\Arquivos de programas\Java\jre7\bin\javacpl.exe -tab update

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\Configure Java.lnk - C:\Arquivos de programas\Java\jre7\bin\javacpl.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\Get Help.lnk - 

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Java\Visit Java.com.lnk - 

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office Excel 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\Microsoft Office\Microsoft Office Word 2007.lnk - C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\WinRAR\Ajuda do WinRAR.lnk - C:\Arquivos de programas\WinRAR\WinRAR.chm

C:\Documents and Settings\All Users\Menu Iniciar\Programas\WinRAR\Manual do Console RAR.lnk - C:\Arquivos de programas\WinRAR\Rar.txt

C:\Documents and Settings\All Users\Menu Iniciar\Programas\WinRAR\O que há de novo na última versão.lnk - 

C:\Documents and Settings\All Users\Menu Iniciar\Programas\WinRAR\WinRAR.lnk - C:\Arquivos de programas\WinRAR\WinRAR.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\ZHP\ZHPDiag.lnk - C:\Arquivos de programas\ZHPDiag\ZHPhep.exe

C:\Documents and Settings\All Users\Menu Iniciar\Programas\ZHP\ZHPFix.lnk - C:\Arquivos de programas\ZHPDiag\ZHPFix\ZHPhep.exe



==== shortcuts in Quick Launch ======================



C:\Documents and Settings\Bozzi\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Arquivos de programas\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bozzi\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Iniciar o Navegador Internet Explorer.lnk - C:\Arquivos de programas\Internet Explorer\iexplore.exe

C:\Documents and Settings\Bozzi\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Bozzi\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk - C:\Arquivos de programas\Windows Media Player\wmplayer.exe /prefetch:1

C:\Documents and Settings\Default User\Dados de aplicativos\Microsoft\Internet Explorer\Quick Launch\Iniciar o navegador Internet Explorer.lnk - C:\Arquivos de programas\Internet Explorer\iexplore.exe



==== Reset IE Proxy ======================



Value(s) before fix:

"ProxyEnable"=dword:00000000



Value(s) after fix:

"ProxyEnable"=dword:00000000



==== Deleting Registry Keys ======================



HKEY_LOCAL_MACHINE\Software\Policies\Google deleted successfully



==== Empty IE Cache ======================



C:\Documents and Settings\Administrador\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Bozzi\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Default User\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\LocalService\Configurações locais\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\LocalService\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\NetworkService\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully



==== Empty FireFox Cache ======================



No FireFox Cache found



==== Empty Chrome Cache ======================



No Chrome User Data found



==== Empty All Flash Cache ======================



Flash Cache Emptied Successfully



==== Empty All Java Cache ======================



No Java Cache Found



==== C:\zoek_backup content ======================



C:\zoek_backup (files=642 folders=178 46950250 bytes)



==== Empty Temp Folders ======================



C:\WINDOWS\Temp will be emptied at reboot



==== After Reboot ======================



==== Empty Temp Folders ======================



C:\WINDOWS\Temp successfully emptied

C:\DOCUME~1\Bozzi\CONFIG~1\Temp successfully emptied



==== Empty Recycle Bin ======================



C:\RECYCLER successfully emptied



==== EOF on qua 18/02/2015 at 15:56:41,59 ======================

~ ZHPCleaner v2015.2.18.77 by Nicolas Coolman (18/02/2015)

~ Run by Bozzi (Administrator)  (18/02/2015 16:11:20)

~ Forum : <a href="http://forum.nicolascoolman.fr" target="_blank">http://forum.nicolascoolman.fr</a>

~ Facebook : <a href="https://www.facebook.com/nicolascoolman1" target="_blank">https://www.facebook.com/nicolascoolman1</a>

~ State version : Version OK

~ Type : Repair

~ Report : C:\Documents and Settings\Bozzi\Desktop\ZHPCleaner.txt

~ Quarantine : C:\Documents and Settings\Bozzi\Dados de aplicativos\ZHP\ZHPCleaner_Quarantine.txt

~ UAC : Deactivate

~ Boot Mode : Normal (Normal boot)

~ Windows XP, 32-bit Service Pack 3 (Build 2600)





---\\  Services (0)

~ No malicious items found.





---\\  Browser internet (1)

REPLACED Chrome URL: hxxp://<a href="'http://www.google.com.br/'" target="_blank">www.google.com.br/</a>





---\\  Hosts file (0)

~ No malicious items found.





---\\  Scheduled automatic tasks. (0)

~ No malicious items found.





---\\  Explorer ( File, Folder) (18)

MOVED file: C:\Documents and Settings\All Users\Desktop\FlvPlayer.lnk[ - ](PUP.FLVPlayer)

MOVED file: C:\Arquivos de programas\FlvPlayer\uninstall.exe[ - ](PUP.FLVPlayer)

MOVED folder*: C:\Arquivos de programas\metaCrawler\1.8.19.0 (Adware.SearchYa)

MOVED folder*: C:\Arquivos de programas\FlvPlayer (PUP.FLVPlayer)

MOVED folder*: C:\Arquivos de programas\metaCrawler (Adware.SearchYa)

MOVED file: C:\Documents and Settings\All Users\Dados de aplicativos\Baidu Security\Duplicaterecord.js[ - ](Adware.BDPlugin)

MOVED folder*: C:\Documents and Settings\All Users\Dados de aplicativos\Baidu Security\PC Faster (Adware.BDPlugin)

MOVED folder*: C:\Documents and Settings\All Users\Dados de aplicativos\Baidu Security\RpData (Adware.BDPlugin)

MOVED folder*: C:\Documents and Settings\All Users\Dados de aplicativos\Baidu Security (Adware.BDPlugin)

MOVED file: C:\Documents and Settings\All Users\Menu Iniciar\Programas\FlvPlayer\FlvPlayer.lnk[ - ](PUP.FLVPlayer)

MOVED file: C:\Documents and Settings\All Users\Menu Iniciar\Programas\FlvPlayer\Uninstall.lnk[ - ](PUP.FLVPlayer)

MOVED folder*: C:\Documents and Settings\All Users\Menu Iniciar\Programas\FlvPlayer (PUP.FLVPlayer)

MOVED file: C:\WINDOWS\Prefetch\BONANZADEALSLIVE.EXE-225E4C03.pf[ - ](Adware.BonanzaDeals)

MOVED file: C:\WINDOWS\Prefetch\BONANZADEALSLIVEHANDLER.EXE-0A4E849A.pf[ - ](Adware.BonanzaDeals)

MOVED file: C:\WINDOWS\Prefetch\UPDATEWHILOKII.EXE-1BE6D03A.pf[ - ](PUP.Whilokii)

MOVED file: C:\WINDOWS\Prefetch\UTILWHILOKII.EXE-016DD157.pf[ - ](PUP.Whilokii)

MOVED file: C:\WINDOWS\Prefetch\WHILOKII.BROWSERADAPTER.EXE-10B598D9.pf[ - ](PUP.Whilokii)

MOVED file: C:\WINDOWS\Prefetch\WHILOKII.PURBROWSE.EXE-14BD1BCB.pf[ - ](PUP.Whilokii)





---\\  Registry ( Key, Value, Data) (12)

DELETED data: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations\\Intl [Bad : <a href="'http://shell.windows.com/fileassoc/fileassoc.asp?LangID=%04x&Ext=%s" target="_blank">']http://shell.windows.com/fileassoc/fileassoc.asp?LangID=x&Ext=%s]</a>  (Hijacker.Association)

DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{80A03808-44CF-4079-942D-E9728AA3E067} [<a href="http://rts.dsrlte.com/?q={searchTerms}&r=274]" target="_blank">http://rts.dsrlte.com/?q={searchTerms}&r=274]</a> [Yahoo! Search] (PUP.PaybyAds)

DELETED key: HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}\InprocServer32 [C:\Arquivos de programas\Whilokii\bin\{fed5e6b2-4fc4-43ba-8e95-001d959d8008}.dll] (PUP.Whilokii)

DELETED key: HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52} [Manager Class] (PUP.Whilokii)

DELETED key: HKCU\SOFTWARE\AppDataLow\Whilokii [] (PUP.Whilokii)

DELETED key: HKLM\SOFTWARE\Classes\protector_dll.protectorbho [Google Toolbar Notifier BHO] (PUP.BProtector)

DELETED key: HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 [Google Toolbar Notifier BHO] (PUP.BProtector)

DELETED key: HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5} [IMdt] (Adware.IMBooster)

DELETED key: HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB} [IManager] (Adware.IMBooster)

DELETED key: HKLM\SOFTWARE\FlvPlayer [] (PUP.FLVPlayer)

DELETED key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FlvPlayer [FlvPlayer] (PUP.FLVPlayer)

DELETED key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FlvPlayer [] (PUP.FLVPlayer)







---\\ Result of repair

~ Repair carried out successfully

~ Browser not found (Opera Software)





---\\ Statistics

~ Items scanned : 54366

~ Items found : 0

~ Items repaired : 31





End of clean at 16:27:30

===================

ZHPCleaner-[R]-18022015-16_27_30.txt