Problema com jogostempo....

Question

A um tempo atras um tal de jogostempo foi instalado no meu computador via um programa malicioso sem minha permiss&atilde;o, passei uns scanners, vi tutoriais e consegui desinstala-lo, por&eacute;m as vezes a minha pagina inicial volta a ficar como jogostempo.com.br.... gostaria de saber se ainda h&aacute; algum virus no meu Pc e gostaria de orienta&ccedil;&atilde;o para fazer isso. obrigado!

Answer

Ol&aacute; JahJahJah.

Desative temporariamente seu antiv&iacute;rus para evitar conflitos.

* Acesse este link abaixo e clique no primeiro bot&atilde;o da esquerda que &eacute; o bot&atilde;o Download Zoek.exe:
http://www.hijackthis.nl/smeenk/

Salve-o no Desktop (&Aacute;rea de Trabalho).

Para execut&aacute;-lo corretamente siga as dicas deste tutorial:

[COLOR=blue]Exclua adwares e outras amea&ccedil;as de seu PC e browsers com o aplicativo Zoek[/COLOR]

* Assim que ele concluir a limpeza dos problemas acesse o log (relat&oacute;rio) do Zoek que estar&aacute; em C:\zoek-results.txt e copie todo seu conte&uacute;do e poste em sua pr&oacute;xima resposta juntamente com o log (relat&oacute;rio) do Adwcleaner que est&aacute; em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

Answer

[SPOILER=Zoek.exe v5.0.0.0]Zoek.exe v5.0.0.0 Updated 08-September-2015
Tool run by Esteves on 09/09/2015 at  3:15:35,86.
Microsoft Windows 7 Home Basic  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Esteves\Documents\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

09/09/2015 06:11:34 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1       localhost
::1             localhost

==== Empty Folders Check ======================

C:\Users\Esteves\AppData\Roaming\Publish Providers deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Esteves\AppData\Roaming\Mozilla\Firefox\Profiles\3bccbjqq.default\prefs.js:
user_pref(browser.startup.homepage, about:home);
user_pref(browser.newtab.url, about:newtab);

Added to C:\Users\Esteves\AppData\Roaming\Mozilla\Firefox\Profiles\3bccbjqq.default\prefs.js:
user_pref(browser.startup.homepage, about:home);
user_pref(browser.newtab.url, about:newtab);

==== Deleting Files \ Folders ======================

C:\windows\SysNative\Tasks\avastBCLRestart_chrome.exe deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\ProgramData\mntemp deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Esteves\AppData\Roaming\Mozilla\Firefox\Profiles\3bccbjqq.default
user_pref(browser.startup.homepage, about:home);
user_pref(browser.newtab.url, about:newtab);

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
[EMAIL]wrc@avast.com[/EMAIL]=C:\Program Files\AVAST Software\Avast\WebRep\FF [24/06/2015 08:17]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Esteves\AppData\Roaming\Mozilla\Firefox\Profiles\3bccbjqq.default
- Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Guardiao Itau Unibanco - %ProfilePath%\extensions\{87F8774F-B485-47E2-A755-A40A8A5E8873}

==== Firefox Plugins ======================

Profilepath: C:\Users\Esteves\AppData\Roaming\Mozilla\Firefox\Profiles\3bccbjqq.default
F6D12679B9112358AC705A1308156F59    - C:\Users\Esteves\AppData\LocalLow\Unity\WebPlayer\loader
pUnity3D32.dll -    Unity Player
3CD19649B2C3023D65E67C056457A2BC    - C:\Users\Esteves\AppData\Local\Facebook\Video\Skype
pFacebookVideoCalling.dll -    Facebook Video Calling Plugin

==== Chromium Look ======================

Google Chrome Version: 45.0.2454.85

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[19/03/2015 21:51]

Google Slides - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek
Google Docs - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Sheets - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap
Google Docs Offline - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi
AdBlock - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Avast Online Security - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Chrome Hotword Shared Module - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
Chrome Web Store Payments - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions
mmhkkegccagdldgiimedpiccmgmieda
Gmail - Esteves\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Old Start Page=http://go.microsoft.com/fwlink/?LinkId=69157

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Old Start Page=http://go.microsoft.com/fwlink/?LinkId=69157

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DefaultScope={0633EE93-D776-472f-A0FF-E1416B8B2E3A}
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url=http://www.google.com/search?q={searchTerms}
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url=http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

==== Reset Google Chrome ======================

C:\Users\Esteves\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Esteves\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Esteves\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Esteves\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== shortcuts on Users Desktops ======================

C:\Users\Default\Desktop\Lenovo Power2Go.lnk - C:\Program Files (x86)\Lenovo\Power2Go\Power2Go.exe
C:\Users\Default\Desktop\Lenovo Rescue System.lnk - C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\OneKey Recovery.exe
C:\Users\Default User\Desktop\Lenovo Power2Go.lnk - C:\Program Files (x86)\Lenovo\Power2Go\Power2Go.exe
C:\Users\Default User\Desktop\Lenovo Rescue System.lnk - C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\OneKey Recovery.exe
C:\Users\Esteves\Desktop\CLOS2 - Atalho.lnk - C:\Program Files (x86)\Castlevania Lords of Shadow 2\bin\CLOS2.exe
C:\Users\Esteves\Desktop\dirt3 - Atalho.lnk - C:\Games\DIRT 3 nosTEAM\dirt3.exe
C:\Users\Esteves\Desktop\sXe Injected.lnk - C:\Program Files (x86)\sXe Injected\sXe Injected.exe
C:\Users\Teste\Desktop\Lenovo Power2Go.lnk - C:\Program Files (x86)\Lenovo\Power2Go\Power2Go.exe
C:\Users\Teste\Desktop\Lenovo Rescue System.lnk - C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\OneKey Recovery.exe
C:\Users\USURIO~1\Desktop\Lenovo Power2Go.lnk - C:\Program Files (x86)\Lenovo\Power2Go\Power2Go.exe
C:\Users\USURIO~1\Desktop\Lenovo Rescue System.lnk - C:\Program Files\Lenovo\OneKey App\Lenovo Rescue System\OneKey Recovery.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Counter-Strike 1.6.lnk - C:\cs1.6\hl.exe -nomaster -game cstrike
C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe www.jogostempo.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1439180960
C:\Users\Public\Desktop\Mafia II.lnk - C:\Program Files (x86)\Mafia II\pc\mafia2.exe
C:\Users\Public\Desktop\NetBeans IDE 8.0.2.lnk - C:\Program Files (x86)\NetBeans 8.0.2\bin
etbeans64.exe
C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe
C:\Users\Public\Desktop\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Public\Desktop\Unchecky.lnk - C:\Program Files (x86)\Unchecky\unchecky.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe www.jogostempo.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1439180960
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe www.jogostempo.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1439180960
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Google Play M&uacute;sica.lnk - 
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\DiRT 3\Atualizador GameVicio.lnk - C:\Program Files (x86)\GameVicio\DiRT 3\Atualizador.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\DiRT 3\Desinstalar a Tradu&ccedil;&atilde;o.lnk - 
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\DiRT 3\Leia-me.lnk - C:\Program Files (x86)\GameVicio\DiRT 3
otas.html
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\DiRT 3\Problemas T&eacute;cnicos.lnk - 
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\DiRT 3\P&aacute;gina GameVicio Brasil&reg;.lnk - 
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time\Popcorn Time.lnk - C:\Users\Esteves\AppData\Local\Popcorn Time
w.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time\Uninstall Popcorn Time.lnk - C:\Users\Esteves\AppData\Local\Popcorn Time\Uninstall.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\sXe Injected\sXe Injected.lnk - C:\Program Files (x86)\sXe Injected\sXe Injected.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\sXe Injected\Uninstall.lnk - C:\Program Files (x86)\sXe Injected\uninstall.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk - C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Games for Windows Marketplace.lnk - 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe www.jogostempo.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1439180960
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro\GoPro Importer.lnk - C:\Program Files (x86)\GoPro	ools\Importer\GoPro Importer.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoPro\GoPro Studio.lnk - C:\Program Files (x86)\GoPro	ools\GoPro Studio.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configurar Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_60\bin\javacpl.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Sobre o Java.lnk - C:\Program Files (x86)\Java\jre1.8.0_60\bin\javacpl.exe -tab about
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Verificar Atualiza&ccedil;&otilde;es.lnk - 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Java Mission Control.lnk - C:\Program Files (x86)\Java\jdk1.8.0_60\bin\jmc.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mafia II\Mafia II.lnk - C:\Program Files (x86)\Mafia II\pc\mafia2.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mafia II\Uninstall Mafia II.lnk - C:\Program Files (x86)\Mafia II\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Desinstalar Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace\Games for Windows Marketplace.lnk - C:\Program Files (x86)\Microsoft Games for Windows - LIVE\Client\GFWLive.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\Silverlight.Configuration.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans\NetBeans IDE 8.0.2.lnk - C:\Program Files (x86)\NetBeans 8.0.2\bin
etbeans64.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\Desinstalar o QuickTime.lnk - C:\Windows\SysWOW64\msiexec.exe /i {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E} /qf
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\QuickTime Player.lnk - C:\Windows\Installer\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}\QTPlayer.ico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime\Sobre o QuickTime.lnk - C:\Windows\Installer\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}\RichText.ico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky\Unchecky.lnk - C:\Program Files (x86)\Unchecky\unchecky.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky\Uninstall.lnk - C:\Program Files (x86)\Unchecky\uninstall.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - 
C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - 
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - 
C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - 
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe www.jogostempo.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1439180960
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - 
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - 
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\&micro;Torrent.lnk - 
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\Windows\system32undll32.exe C:\Windows\system32\shell32.dll,Options_RunDLL 1
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\CrossFire AL.lnk - C:\Program Files (x86)\Z8Games\CrossFire BR\cfPT_launcher.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe www.jogostempo.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1439180960
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Counter-Strike 1.6.lnk - C:\cs1.6\hl.exe -nomaster -game cstrike
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CrossFire AL.lnk - C:\Program Files (x86)\Z8Games\CrossFire BR\cfPT_launcher.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Malwarebytes Anti-Malware.lnk - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Steam.lnk - C:\Program Files (x86)\Steam\Steam.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\sXe Injected.lnk - C:\Program Files (x86)\sXe Injected\sXe Injected.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\&micro;Torrent.lnk - 
C:\Users\Teste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Teste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - 
C:\Users\Teste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - 
C:\Users\Teste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Teste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Teste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Teste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe
C:\Users\Teste\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - 
C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

==== shortcuts After Repair ======================

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe -extoff
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Esteves\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==== Reset IE Proxy ======================

Value(s) before fix:
ProxyEnable=dword:00000000

Value(s) after fix:
ProxyEnable=dword:00000000

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Teste\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Esteves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D30W1SQ6 will be deleted at reboot
C:\Users\Esteves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P70C3BXQ will be deleted at reboot
C:\Users\Esteves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZCKUH0UB will be deleted at reboot
C:\Users\Esteves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZU9DSX35 will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Esteves\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=8 folders=3 5011 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local	emp emptied successfully
C:\Users\Default User\AppData\Local	emp emptied successfully
C:\Users\Esteves\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local	emp emptied successfully
C:\Users\Teste\AppData\Local	emp emptied successfully
C:\Users\USURIO~1\AppData\Local	emp emptied successfully
C:\Windows\serviceprofiles
etworkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Esteves\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

C:\Users\Esteves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D30W1SQ6 not found
C:\Users\Esteves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P70C3BXQ not found
C:\Users\Esteves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZCKUH0UB not found
C:\Users\Esteves\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZU9DSX35 not found

==== EOF on 09/09/2015 at 13:54:19,93 ======================[/SPOILER]

Answer

Baixe o programa Adwcleaner clicando no link abaixo e depois clique no bot&atilde;o Download Now @BleepingComputer:
http://www.bleepingcomputer.com/download/adwcleaner/

Para executar corretamente o AdwCleaner &eacute; s&oacute; seguir as dicas deste tutorial:

[COLOR=blue]Remova adwares e toolbars maliciosas com o Adwcleaner[/COLOR]

* Na sua pr&oacute;xima resposta poste o log (relat&oacute;rio) do Adwcleaner que estar&aacute; em C:\AdwCleaner\AdwCleaner[S0].txt

Ficamos na espera.

Answer

# AdwCleaner v5.007 - Relat&oacute;rio criado 11/09/2015 &agrave;s 05:22:13
# Atualizado 08/09/2015 por Xplode
# Banco de dados : 2015-09-10.1 [Servidor]
# Sistema operacional : Windows 7 Home Basic Service Pack 1 (x64)
# Usu&aacute;rio : Esteves - ESTEVES-PC
# Executando de : C:\Users\Esteves\Downloads\adwcleaner_5.007.exe
# Op&ccedil;&atilde;o : Limpar
# Apoio : http://toolslib.net/forum

***** [ Servi&ccedil;os ] *****

***** [ Pastas ] *****

***** [ Arquivos ] *****

[-] Arquivo Exclu&iacute;do : C:\Users\Esteves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.jogostempo.com_0.localstorage
[-] Arquivo Exclu&iacute;do : C:\Users\Esteves\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.jogostempo.com_0.localstorage-journal

***** [ Atalhos ] *****

***** [ Tarefas agendadas ] *****

***** [ Registro ] *****

[-] Valor Exclu&iacute;da : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [Plus-HD-2.3-bg.exe]
[-] Chave Exclu&iacute;da : HKCU\Software\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
[-] Valor Exclu&iacute;da : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{1F91A9A1-01BA-4C81-863D-3BA0751E1419}]

***** [ Navegadores ] *****

*************************

:: Configura&ccedil;&otilde;es Winsock restauradas

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1291 bytes] ##########

Answer

Fa&ccedil;a o download do Junkware Removal Tool clicando no link abaixo e na pr&oacute;xima tela que abrir clique no bot&atilde;o com a frase Download Now @BleepingComputer:
http://www.bleepingcomputer.com/download/junkware-removal-tool/

Para executar corretamente o programa acima &eacute; s&oacute; seguir as dicas deste tutorial:

[color=blue]Tutorial do Junkware Removal Tool[/color]

* Na sua pr&oacute;xima resposta poste o log (relat&oacute;rio) do Junkware Removal Tool que estar&aacute; salvo em sua &aacute;rea de trabalho com o nome de JRT.txt

Ficamos na espera.

Answer

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.8.4 (05.29.2015:1)
OS: Windows 7 Home Basic x64
Ran by Esteves on 14/09/2015 at  3:05:24,65
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Tasks

~~~ Registry Values

~~~ Registry Keys

~~~ Files

Successfully deleted: [File] C:\Users\Esteves\appdata\local\google\chrome\user data\default\local storage\https_static.olark.com_0.localstorage
Successfully deleted: [File] C:\Users\Esteves\appdata\local\google\chrome\user data\default\local storage\https_static.olark.com_0.localstorage-journal

~~~ Folders

~~~ Chrome

[C:\Users\Esteves\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Esteves\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Esteves\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Esteves\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14/09/2015 at  3:08:21,03
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Answer

Faça o download do < [color=#0000ff]ZHPCleaner[/color] > < https://www.hardware.com.br/static/c/m/4560c2e838537857a70e37b22927665a> ( ... de Nicolas Coolman ) Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPCleaner para baixá-lo, tal como mostra a imagem abaixo: https://www.hardware.com.br/static/c/m/58de70529772c242f9f9a79cb07a1430 Para executá-lo corretamente siga as dicas desta postagem: [color=blue]Tutorial completo do ZHPCleaner[/color] Após a utilização dele, copie todo o conteúdo do seu relatório [color=#008000]ZHPCleaner.txt[/color] e poste em sua próxima resposta.

Answer

~ ZHPCleaner v2015.9.16.348 by Nicolas Coolman (2015/09/16)
~ Run by Esteves (Administrator)  (17/09/2015 06:14:47)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Scanner
~ Report : C:\Users\Esteves\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\Esteves\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows 7 Home Basic, 64-bit Service Pack 1 (Build 7601)

---\  Servi&ccedil;os (0)
~ Nenhum &iacute;tem malicioso o desnecess&aacute;rios foi encontrado.

---\  Navegadores de Internet (0)
~ Nenhum &iacute;tem malicioso o desnecess&aacute;rios foi encontrado.

---\  Arquivo hosts (1)
~ O arquivo hosts &eacute; leg&iacute;timo (59)

---\  Tarefas autom&aacute;ticas agendadas. (0)
~ Nenhum &iacute;tem malicioso o desnecess&aacute;rios foi encontrado.

---\  Explorer ( Arquivos, Pastas) (0)
~ Nenhum &iacute;tem malicioso o desnecess&aacute;rios foi encontrado.

---\  Registro ( Chaves, Valores, Dados ) (0)
~ Nenhum &iacute;tem malicioso o desnecess&aacute;rios foi encontrado.

---\ Resultado de repara&ccedil;&atilde;o
~ Eventuais repara&ccedil;&otilde;es feita
~ Este navegador est&aacute; faltando ! (Opera Software)

---\ Estat&iacute;sticas
~ Items scan : 70170
~ Items encontrado : 0
~ items cancelados : 0
~ Items r&eacute;paro : 0

~ End of search in 3 minutes
===================
ZHPCleaner-[R]-07062015-14_27_03.txt
ZHPCleaner-[R]-11082015-23_23_50.txt
ZHPCleaner-[R]-17092015-06_13_12.txt
ZHPCleaner--05062015-22_33_12.txt
ZHPCleaner--07062015-05_16_33.txt
ZHPCleaner--11082015-23_23_09.txt
ZHPCleaner--11082015-23_27_34.txt
ZHPCleaner--17092015-06_12_43.txt
ZHPCleaner--17092015-06_18_08.txt

Answer

Veja se voc&ecirc; tem instalada em seu PC a mais nova vers&atilde;o do Malwarebytes, que &eacute; a vers&atilde;o

Se a vers&atilde;o que voc&ecirc; tiver for mais antiga, instale a nova vers&atilde;o dele que voc&ecirc; encontra em um destes links abaixo:
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
http://downloads.malwarebytes.org/mbam-download.php

Para instal&aacute;-lo e execut&aacute;-lo corretamente siga, por gentileza, as dicas desta postagem:

Tutorial do Malwarebytes Anti-Malware

Na sua pr&oacute;xima resposta poste este log (relat&oacute;rio) do Malwarebytes.

Ficamos no aguardo.

Answer

[SPOILER=Vers&atilde;o: 2.1.8.1057]Vers&atilde;o: 2.1.8.1057
Banco de dados de malware: v2015.10.08.04
Banco de dados de rootkit: v2015.10.06.01
Licen&ccedil;a: Gratuita
Prote&ccedil;&atilde;o contra malware: Desabilitado
Prote&ccedil;&atilde;o contra website malicioso: Desabilitado
Autoprote&ccedil;&atilde;o: Desabilitado

Sistema operacional: Windows 7 Service Pack 1
CPU: x64
Sistema de arquivos: NTFS
Usu&aacute;rio: Esteves

Tipo de verifica&ccedil;&atilde;o: Verifica&ccedil;&atilde;o da amea&ccedil;a
Resultado: Conclu&iacute;do
Objetos verificados: 437234
Tempo decorrido: 20 min, 26 seg

Mem&oacute;ria: Habilitado
Inicializa&ccedil;&atilde;o: Habilitado
Sistema de arquivos: Habilitado
Arquivos compactados: Habilitado
Rootkits: Desabilitado
Heur&iacute;stica: Habilitado
PUP: Habilitado
PUM: Habilitado

Processos: 1
PUP.Optional.NetService, C:\Users\Esteves\AppData\Roaming\NetService
etservice.exe, 1212, , [7014b79d7c0fd95d4a29eb58788b55ab]

M&oacute;dulos: 0
(Nenhum item malicioso detectado)

Chaves de registro: 1
PUP.Optional.NetService, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NETTCPHANDLER, , [7014b79d7c0fd95d4a29eb58788b55ab],

Valores de registro: 1
PUP.Optional.NetService, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NETTCPHANDLER|ImagePath, C:\Users\Esteves\AppData\Roaming\NetService
etservice.exe -start, , [7014b79d7c0fd95d4a29eb58788b55ab]

Dados de registro: 6
PUP.Optional.123rede, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253, Bom: (www.google.com), Ruim: (']www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253),,[ee96094b78134cea38ad16792fd6a65a]
PUP.Optional.123rede, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253, Bom: (www.google.com), Ruim: (']www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253),,[ccb8dc786625df576580692612f38c74]
PUP.Optional.123rede, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253, Bom: (www.google.com), Ruim: (']www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253),,[5d27c68e0487fa3c0ed7c3cc27dea060]
PUP.Optional.123rede, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253, Bom: (www.google.com), Ruim: (']www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253),,[b9cb0a4aff8c251127bed4bbf60fbe42]
PUP.Optional.123rede, HKU\S-1-5-21-4239684972-2608499889-434743807-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253, Bom: (www.google.com), Ruim: (']www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253),,[c4c081d3d9b21f17786cdeb1eb1ac63a]
PUP.Optional.123rede, HKU\S-1-5-21-4239684972-2608499889-434743807-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253, Bom: (www.google.com), Ruim: (']www.123rede.com?oem=mbtkv5&uid=WD-WMAYUE770703_WDCWD5000AAKX-083CA1&tm=1440865253),,[5430aea622694fe7cb19127df4118779]

Pastas: 1
PUP.Optional.NetService, C:\Users\Esteves\AppData\Roaming\NetService, , [840062f25a3125114e1bc80245c02cd4],

Arquivos: 3
PUP.Optional.NetService, C:\Users\Esteves\AppData\Roaming\NetService
etservice.exe, , [7014b79d7c0fd95d4a29eb58788b55ab],
PUP.Optional.NetService, C:\Users\Esteves\AppData\Roaming\NetService\conf.ini, , [840062f25a3125114e1bc80245c02cd4],
PUP.Optional.NetService, C:\Users\Esteves\AppData\Roaming\NetService\sc.exe, , [840062f25a3125114e1bc80245c02cd4],

Setores f&iacute;sicos: 0
(Nenhum item malicioso detectado)

(end)[/SPOILER]

Answer

Est&aacute; constando em seu relat&oacute;rio que o Malwarebytes encontrou algumas amea&ccedil;as, mas que voc&ecirc; n&atilde;o removeu elas.

Tamb&eacute;m consta que voc&ecirc; usou s&oacute; a verifica&ccedil;&atilde;o de amea&ccedil;as, que n&atilde;o &eacute; t&atilde;o completa como a que &eacute; mostrada no tutorial que te passei. Siga as dicas abaixo para fazer a limpeza completa:

[COLOR=#ff0033]Como executar uma verifica&ccedil;&atilde;o personalizada com o Malwarebytes:[/COLOR]

- Abra o Malwarebytes > Clique em Verificar > clique em Personalizar verifica&ccedil;&atilde;o > Clique em Configurar verifica&ccedil;&atilde;o:
https://www.hardware.com.br/static/c/m/213e51a6f5240826023ab8ef66f89c12

Surgir&aacute; mais esta tela abaixo na qual voc&ecirc; marcar&aacute; todas as caixinhas do lado direito da tela para que todas as &aacute;reas de seu PC e m&iacute;dias remov&iacute;veis ligadas a ele possam ser escaneadas. E do lado esquerdo da tela deixe marcadas todas estas op&ccedil;&otilde;es:

Verificar objetos na mem&oacute;ria 
Verificar inicializa&ccedil;&atilde;o e as configura&ccedil;&otilde;es de registro
Verificar arquivos
Procurar rootkits

Quanto ao restante, deixe da forma j&aacute; pr&eacute;-configurada pelo Malwarebytes.

Depois disto clique no bot&atilde;o Verificar Agora como mostra a imagem abaixo:
https://www.hardware.com.br/static/c/m/d10766502c11f5a0f5a586a04faf5e10

Aguarde enquanto o escaneamento &eacute; realizado. Ele demora de acordo com a quantidade de arquivos que voc&ecirc; possua em seu computador:

https://www.hardware.com.br/static/c/m/b3d4d4485042cb6a6386e2dd061e97e8

Assim que a verifica&ccedil;&atilde;o terminar, aparecer&aacute; a frase Personalizar verifica&ccedil;&atilde;o completada com sucesso. Caso seu PC esteja seguro e sem amea&ccedil;as, uma mensagem parecida com esta abaixo aparecer&aacute; informando que Amea&ccedil;as Identificadas: 0 (Ou seja: Nenhum &iacute;tem malicioso foi detectado). Neste caso tudo est&aacute; certo, seu computador est&aacute; normal e voc&ecirc; clicar&aacute; no bot&atilde;o Terminar:

https://www.hardware.com.br/static/c/m/47821c94d1acf6e699e6959cc42a1250

Caso seja detectada alguma amea&ccedil;a em seu PC surgir&aacute; uma mensagem como esta abaixo pr&oacute;ximo ao rel&oacute;gio do Windows com a frase Verifica&ccedil;&atilde;o Terminada - Malware Detectado na qual voc&ecirc; clicar&aacute; nela:

https://www.hardware.com.br/static/c/m/40f33d0b048074fc1aae908c3725c2c3

Neste momento aparecer&aacute; quais os malwares e itens potencialmente indesej&aacute;veis que foram detectados e os locais onde eles se encontram. Para remover a infec&ccedil;&atilde;o, deixe todas as caixinhas marcadas em todos os itens que queira remover e clique no bot&atilde;o Remover Selecionadas, como mostra esta imagem:
https://www.hardware.com.br/static/c/m/82d6bdb976db115916440a0716044524

Surgir&aacute; ent&atilde;o uma outra tela parecida com esta abaixo informando que as amea&ccedil;as foram enviadas &agrave; quarentena, na qual voc&ecirc; clicar&aacute; no bot&atilde;o Terminar:

https://www.hardware.com.br/static/c/m/e6de6348fc8b23f60bd2cdfec180167a

Alguns malwares s&atilde;o rebeldes e podem necessitar de uma reinicializa&ccedil;&atilde;o do PC para que sejam removidos. Caso isto seja solicitado pelo Malwarebytes, aceite esta reinicializa&ccedil;&atilde;o pelo Malwarebytes.

Depois disto &eacute; s&oacute; postar o novo Registro de Verifica&ccedil;&atilde;o que o Malwarebytes ir&aacute; criar em sua pr&oacute;xima resposta:

https://www.hardware.com.br/static/c/m/69f763b68e5410cef82599b050948a95

Answer

Administrador: Sim

Vers&atilde;o: 2.2.0.1024
Banco de dados de malware: v2015.10.17.03
Banco de dados de rootkit: v2015.10.16.01
Licen&ccedil;a: Gratuita
Prote&ccedil;&atilde;o contra malware: Desabilitado
Prote&ccedil;&atilde;o contra website malicioso: Desabilitado
Autoprote&ccedil;&atilde;o: Desabilitado

Sistema operacional: Windows 7 Service Pack 1
CPU: x64
Sistema de arquivos: NTFS
Usu&aacute;rio: Esteves

Tipo de verifica&ccedil;&atilde;o: Personalizar verifica&ccedil;&atilde;o
Resultado: Conclu&iacute;do
Objetos verificados: 667313
Tempo decorrido: 1 hr, 51 min, 29 seg

Mem&oacute;ria: Habilitado
Inicializa&ccedil;&atilde;o: Habilitado
Sistema de arquivos: Habilitado
Arquivos compactados: Habilitado
Rootkits: Desabilitado
Heur&iacute;stica: Habilitado
PUP: Habilitado
PUM: Habilitado

Processos: 0
(Nenhum item malicioso detectado)

M&oacute;dulos: 0
(Nenhum item malicioso detectado)

Chaves de registro: 0
(Nenhum item malicioso detectado)

Valores de registro: 0
(Nenhum item malicioso detectado)

Dados de registro: 0
(Nenhum item malicioso detectado)

Pastas: 0
(Nenhum item malicioso detectado)

Arquivos: 0
(Nenhum item malicioso detectado)

Setores f&iacute;sicos: 0
(Nenhum item malicioso detectado)

(end)

Answer

Desative temporariamente seu antivirus para evitar conflitos. Faça o download do < [color=#0000ff]ZHPDiag[/color] > < https://www.hardware.com.br/static/c/m/4560c2e838537857a70e37b22927665a> ( ... de Nicolas Coolman ) Obs: Ao acessar o link acima clique no botão Télécharger referente ao ZHPDiag para baixá-lo. Para instalá-lo e executá-lo corretamente siga as dicas deste artigo: [color=blue]Tutorial de instalação e execução do aplicativo ZHPDiag[/color] * Assim que ele concluir a sua verificação, copie todo o conteúdo do seu relatório [color=#008000]ZHPDiag.txt[/color] e poste em sua próxima resposta. _____________________________________________________________________________ [color=#0000ff]Obs[/color]: Caso o relatório do ZHPDiag fique muito grande e não couber na sua resposta, acesse o site Cjoint: http://cjoint.com Clique no botão Parcourir... > Selecione o arquivo do log (relatório) e clique no botão Abrir. Clique no botão Créer le lien Cjoint Copie o link que aparecerá ao lado da frase Le lien a été créé e poste este link em sua próxima resposta.

Answer

http://www.cjoint.com/c/EJtg5RuDyug

Ferramentas

Mover Tópico