Pc lento. Só consigo usar no modo de segurança

Question

Prezados, boa tarde.

Meu note anda muito lento. Nem ao menos consigo abrir um programa. Minha suspeita &eacute; que seja virus, uma vez que o led do disco r&iacute;gido fica sempre aceso, indicando que est&aacute; em algum trabalho.

Fiz um scan com o Hijack em modo de seguran&ccedil;a, por&eacute;m nao entendo muito desses processos. Segue o scan. Se alguem puder dar uma luz, eu agrade&ccedil;o!

------------------

[SPOILER=Logfile of Trend Micro HijackThis v2.0.5]Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 13:13:11, on 23/10/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)

FIREFOX: 40.0.3 (x86 pt-BR)
Boot mode: Safe mode

Running processes:
F:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uportal.upcleaner.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uportal.upcleaner.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uportal.upcleaner.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://uportal.upcleaner.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Auxiliar de Conex&atilde;o do Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\PROGRAM FILES (X86)\GBPLUGIN\gbieh.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKCU\..\Run: [Skype] C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVI&Ccedil;O LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVI&Ccedil;O LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVI&Ccedil;O DE REDE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVI&Ccedil;O DE REDE')
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Enviar p&aacute;gina para Dispositivo &Bluetooth ... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: Enviar para Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Enviar para Dispositivo &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Exibir ou ocultar HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: www.bancobrasil.com.br
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: www.bb.com.br
O15 - Trusted Zone: http://www.bb.com.br
O17 - HKLM\System\CCS\Services\Tcpip\..\{ECF2EBAC-C648-470F-8272-404D7CD00E06}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify:  GbPluginBb - C:\Program Files (x86)\GbPlugin\gbieh.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Warsaw Technology - GAS Tecnologia LTDA - C:\Program Files\Diebold\Warsaw\core.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10332 bytes[/SPOILER]

Answer

Boa noite montilla2,

Baixe:  ( ...[color=green]Nicolas Coolman[/color])
Na p&aacute;gina, clique https://www.hardware.com.br/static/c/m/8f54b5fb32ed6c80721a744721d21a30
Salve-a no Desktop ([color=green]&Aacute;rea de trabalho[/color])
D&ecirc; um duplo clique para executar https://www.hardware.com.br/static/c/m/cde570462a8d1c3a40bc9cb338ae70ab.
Para Windows 7, 8 clique direito e depois em https://www.hardware.com.br/static/c/m/06b357286306fefd312a9f88ba39d1e6
Clique Eu
https://www.hardware.com.br/static/c/m/e3ebd65f3386fde6fe2d02cd64fd4a4f
Clique em Scanner
Ap&oacute;s a Conclus&atilde;o
https://www.hardware.com.br/static/c/m/eb18407701b9029bb9d51986fe7e84c9
Clique em Relat&oacute;rio
Obs: O relat&oacute;rio por ser extenso deve ser postado em um desses sites:
Acesse: 
Ou acesse:
Maiores informa&ccedil;&otilde;es:

Answer

caedurorodrigues, boa tarde.

Segue o log.

http://www.cjoint.com/c/EJAqRE7bCGu

Answer

Boa noite montilla2,
[color=red]Desative temporariamente seu antivirus, antispywares e firewall, para n&atilde;o causar conflitos.[/color]

Baixe: (...[color=green]by Nicolas Coolman[/color])
Na p&aacute;gina, clique https://www.hardware.com.br/static/c/m/8f54b5fb32ed6c80721a744721d21a30
Salve-a na Desktop (&Aacute;rea de trabalho)
Execute ZHPCleaner.exe.
Clique Eu
https://www.hardware.com.br/static/c/m/9f3876090e52eb7249cc6865aa29999b
Clique Scanner.
https://www.hardware.com.br/static/c/m/c7c3a96bbade36df867c29e477ce00f2
Ao concluir,clique Reparar.
Aguarde a Conclus&atilde;o !
https://www.hardware.com.br/static/c/m/2931de12474b7f1a16918bba7b4d5110
Clique Relat&oacute;rio.
Poste o Relat&oacute;rio.

Baixe:  (...[color=green]par Xplode[/color])
Ou aqui >>[color=blue]AdwCleaner[/color]

Answer

caedurorodrigues, bom dia.

Desculpe as demoras, esta semana estou tendo de viajar e t&aacute; dif&iacute;cil, rs.
Obrigado pela aten&ccedil;&atilde;o a&iacute;.

Mesmo ap&oacute;s efetuar essas limpezas, o sistema continua travando ao ligar no modo normal.

Segue os relat&oacute;rios solicitados:

[SPOILER=ZHPCLEANER]ZHPCLEANER

~ ZHPCleaner v2015.10.25.369 by Nicolas Coolman (2015/10/25)
~ Run by pat_34813_dti (Administrator)  (28/10/2015 09:16:38)
~ Site : http://www.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Reparo
~ Report : C:\Users\pat_34813_dti\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Users\pat_34813_dti\AppData\Roaming\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Activate
~ Boot Mode : Sans &eacute;chec avec prise en charge du r&eacute;seau (Fail-safe with network boot)
Windows 7 Home Basic, 64-bit Service Pack 1 (Build 7601)

---\  Servi&ccedil;os (0)

---\  Navegadores de Internet (5)
SUPRIMIDO: [l9nlc6em.default] - user_pref(browser.search.defaultenginename, webssearches);  =>PUP.Optional.WebsSearches
SUPRIMIDO: [l9nlc6em.default] - user_pref(browser.search.searchengine.searchengine.uid, [xpconnect wrapped nsIUUIDGenerator]);  =>PUP.Optional.SearchEngine
SUPRIMIDO: [l9nlc6em.default] - user_pref(browser.search.selectedEngine, webssearches);  =>PUP.Optional.WebsSearches
SUPRIMIDO: [l9nlc6em.default] - user_pref(extensions.quick_start.enable_search1, false);  =>PUP.Optional.QuickStart
SUPRIMIDO: [l9nlc6em.default] - user_pref(extensions.quick_start.sd.closeWindowWithLastTab_prev_state, false);  =>PUP.Optional.QuickStart

---\  Arquivo hosts (1)
~ O arquivo hosts &eacute; leg&iacute;timo (21)

---\  Tarefas autom&aacute;ticas agendadas. (0)
~ Nenhum &iacute;tem malicioso o desnecess&aacute;rios foi encontrado.

---\  Explorer ( Arquivos, Pastas) (21)
MOVIDO pasta: C:\Program Files (x86)\Velocidade Do PC\PCSUService.exe [Optimal Software s.r.o. - PC Speed Up Service]  =>PUP.Optional.PCSpeedUp
MOVIDO pasta: C:\Program Files (x86)\Velocidade Do PC\PCSUNotifier.exe [Optimal Software s.r.o. - PC Speed Up Notifier]  =>PUP.Optional.PCSpeedUp
MOVIDO pasta: C:\END    =>PUP.Optional.Conduit
MOVIDO pasta: C:\Windows\Prefetch\BOBROWSER.EXE-25BD6558.pf    =>PUP.Optional.BoBrowser
MOVIDO pasta: C:\Windows\Prefetch\CLARAUPDATER.EXE-875FA871.pf    =>PUP.Optional.SupTab
MOVIDO pasta: C:\Windows\Prefetch\HEALTHALERT.EXE-811EC1D5.pf    =>PUP.Optional.HealthAlert
MOVIDO pasta: C:\Windows\Prefetch\PCSULAUNCHER.EXE-C7D052E8.pf    =>PUP.Optional.PCSpeedUp
MOVIDO pasta: C:\Windows\Prefetch\PCSUNOTIFIER.EXE-EAC69E0E.pf    =>PUP.Optional.PCSpeedUp
MOVIDO pasta: C:\Windows\Prefetch\PCSUSD.EXE-44E30911.pf    =>PUP.Optional.PCSpeedUp
MOVIDO pasta: C:\Windows\Prefetch\PCSUUCC.EXE-E774F565.pf    =>PUP.Optional.PCSpeedUp
MOVIDO pasta: C:\Windows\Prefetch\WORDSURFERAUTOUPDATECLIENT.EX-4E78B08A.pf    =>PUP.Optional.WordSurfer
MOVIDO pasta: C:\Windows\System32\roboot64.exe    =>PUP.Optional.Systweak
MOVIDO pasta: C:\Users\pat_34813_dti\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_hdapp1008-a.akamaihd.net_0.localstorage    =>PUP.Optional.AkamaiHD
MOVIDO arquivo: C:\Program Files (x86)\predm  =>PUP.Optional.Downware
MOVIDO arquivo: C:\ProgramData\ProductData  =>PUP.Optional.Generic
MOVIDO arquivo: C:\ProgramData\Systweak  =>PUP.Optional.Systweak
MOVIDO arquivo: C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}  =>PUP.Optional.Generic
MOVIDO arquivo: C:\Users\pat_34813_dti\AppData\Roaming\systweak  =>PUP.Optional.Systweak
MOVIDO arquivo: C:\Users\pat_34813_dti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BoBrowser  =>PUP.Optional.BoBrowser
MOVIDO arquivo: C:\Users\pat_34813_dti\AppData\Local\CrashRpt  =>.Superfluous.CrashReports
MOVIDO arquivo: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\ScreenSnapshotTool  =>PUP.Optional.ScreenSnapshotTool

---\  Registro ( Chaves, Valores, Dados ) (41)
SUPRIMIDO chave: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} [http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF] [Ask.com] (Toolbar.Ask)
SUPRIMIDO chave: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} [http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF] [Ask.com] (Toolbar.Ask)
SUPRIMIDO chave: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} [http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF]  =>Toolbar.Ask
SUPRIMIDO chave: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} [http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF]  =>Toolbar.Ask
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\CscService []  =>PUP.Optional.PCSpeedUp
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\PCSUService [C:\Program Files (x86)\Velocidade Do PC\PCSUService.exe (Not File)]  =>PUP.Optional.PCSpeedUp
SUPRIMIDO chave*: HKLM\SYSTEM\CurrentControlSet\Services\SCService [C:\Program Files (x86)\Velocidade Do PC\SpeedCheckerService.exe (Not File)]  =>PUP.Optional.PCSpeedUp
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\SearchProtect []  =>PUP.Optional.SearchProtect
SUPRIMIDO chave: HKLM\SYSTEM\CurrentControlSet\Services\PCSUService [C:\Program Files (x86)\Velocidade Do PC\PCSUService.exe (Not File)]  =>PUP.Optional.PCSpeedUp
SUPRIMIDO chave: HKLM\SYSTEM\CurrentControlSet\Services\SCService [C:\Program Files (x86)\Velocidade Do PC\SpeedCheckerService.exe (Not File)]  =>PUP.Optional.InternetSpeedChecker
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PCSpeedUp [C:\Program Files (x86)\Velocidade Do PC\PCSUNotifier.exe (Not File)]  =>PUP.Optional.PCSpeedUp
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-1367226139-2879919175-3865038911-1000\Software\APN PIP []  =>PUP.Optional.Conduit
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-1367226139-2879919175-3865038911-1000\Software\DailyPcClean []  =>PUP.Optional.DailyPCClean
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-1367226139-2879919175-3865038911-1000\Software\Linkey []  =>PUP.Optional.LinkeySearch
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-1367226139-2879919175-3865038911-1000\Software\SimplyTech []  =>PUP.Optional.SimplyTech
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-1367226139-2879919175-3865038911-1000\Software\systweak []  =>PUP.Optional.Systweak
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-1367226139-2879919175-3865038911-1000\Software\tstamptoken []  =>PUP.Optional.MaxComputerCleaner
SUPRIMIDO chave*: HKEY_USERS\S-1-5-21-1367226139-2879919175-3865038911-1000\Software\Classes\BoBrowsHTML.QXWF4JGH5OQGU7WXQ7P76EOMO4 [BoBrowser HTML Document]  =>PUP.Optional.BoBrowser
SUPRIMIDO chave: HKCU\Software\APN PIP []  =>PUP.Optional.Conduit
SUPRIMIDO chave: HKCU\Software\DailyPcClean []  =>PUP.Optional.DailyPCClean
SUPRIMIDO chave: HKCU\Software\Linkey []  =>PUP.Optional.LinkeySearch
SUPRIMIDO chave: HKCU\Software\SimplyTech []  =>PUP.Optional.SimplyTech
SUPRIMIDO chave: HKCU\Software\systweak []  =>PUP.Optional.Systweak
SUPRIMIDO chave: HKCU\Software\tstamptoken []  =>PUP.Optional.MaxComputerCleaner
SUPRIMIDO chave*: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\static.boostsaves.com [198]  =>PUP.Optional.BoostSaves
SUPRIMIDO chave*: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.boostsaves.com []  =>PUP.Optional.BoostSaves
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Classes\Download.SwInstaller [SwInstaller Class]  =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Classes\Download.SwInstaller.1 [SwInstaller Class]  =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Classes\Swdir.SwInstallerCtl [SwInstallerCtl Class]  =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Classes\Swdir.SwInstallerCtl.1 [SwInstallerCtl Class]  =>PUP.Optional.CrossRider
SUPRIMIDO chave*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\NetTcpHandler []  =>PUP.Optional.NetService
SUPRIMIDO chave*: [X64] HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro []  =>PUP.Optional.WdsManPro
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\searchult []  =>PUP.Optional.Generic
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Clara []  =>PUP.Optional.SupTab
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Conduit []  =>PUP.Optional.Conduit
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\NetTcpHandler []  =>PUP.Optional.NetService
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\NtSvcHandler []  =>PUP.Optional.NetService
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\SupDp []  =>PUP.Optional.SupTab
SUPRIMIDO chave*: [X64] HKLM\SOFTWARE\Wow6432Node\Systweak []  =>PUP.Optional.Systweak
SUPRIMIDO valor: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\{EF71DF34-AACC-4509-AD77-AE1B8CD9AE1E} [C:\Program Files (x86)\Max Driver Updater\maxdu.exe]  =>PUP.Optional.MaxDriverUpdater
SUPRIMIDO valor: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules\{1B31AE54-D559-449C-803C-57D0785E35C9} [C:\Users\pat_34813_dti\AppData\Local\BoBrowser\Application\bobrowser.exe]  =>PUP.Optional.BoBrowser

---\ Resultado de repara&ccedil;&atilde;o
Repara&ccedil;&atilde;o efectuada com sucesso

---\ Estat&iacute;sticas
~ Items scan : 485
~ Items encontrado : 0
~ items cancelados : 0
~ Items r&eacute;paro : 69

~ End of clean in 0 minutes
===================
ZHPCleaner-[R]-28102015-09_17_28.txt
ZHPCleaner--28102015-09_16_03.txt

ADWCLEANER

# AdwCleaner v5.015 - Relat&oacute;rio criado 28/10/2015 &agrave;s 09:19:56
# Atualizado 26/10/2015 por Xplode
# Banco de dados : 2015-10-26.2 [Servidor]
# Sistema operacional : Windows 7 Home Basic Service Pack 1 (x64)
# Usu&aacute;rio : pat_34813_dti - PAT_34813
# Executando de : C:\Users\pat_34813_dti\Desktop\adwcleaner_5.015.exe
# Op&ccedil;&atilde;o : Limpar
# Apoio : http://toolslib.net/forum

***** [ Servi&ccedil;os ] *****

***** [ Pastas ] *****

[-] Pasta Exclu&iacute;do : C:\Program Files (x86)\ShowMyPCService
[-] Pasta Exclu&iacute;do : C:\Program Files (x86)\32475242-1441034534-3846-5750-80C16E1B3EEA
[-] Pasta Exclu&iacute;do : C:\Users\PAT_34~1\AppData\Local\Temp\wizz
[-] Pasta Exclu&iacute;do : C:\Users\pat_34813_dti\AppData\Roaming\shortCutStore
[-] Pasta Exclu&iacute;do : C:\Users\pat_34813_dti\AppData\Roaming\Mozilla\Firefox\Profiles\l9nlc6em.default\Extensions\[EMAIL]ascsurfingprotection@iobit.com[/EMAIL]

***** [ Arquivos ] *****

[-] Arquivo Exclu&iacute;do : C:\Users\pat_34813_dti\AppData\Roaming\Mozilla\Firefox\Profiles\l9nlc6em.default\user.js
[-] Arquivo Exclu&iacute;do : C:\Windows\SysNative\sasnative64.exe

***** [ DLLs ] *****

***** [ Atalhos ] *****

***** [ Tarefas agendadas ] *****

[-] Tarefa Exclu&iacute;da : PostPoneInstall
[-] Tarefa Exclu&iacute;da : crash_service
[-] Tarefa Exclu&iacute;da : CGN

***** [ Registro ] *****

[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\PCSU.SysUtils
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\PCSU.SysUtils.1
[-] Chave Exclu&iacute;da : HKCU\Software\Microsoft\Windows\CurrentVersion\App Paths\bobrowser.exe
[-] Chave Exclu&iacute;da : HKCU\Software\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Classes\TypeLib\{3157E247-2784-4028-BF0F-52D6DDC70E1B}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
[-] Chave Exclu&iacute;da : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Chave Exclu&iacute;da : [x64] HKLM\SOFTWARE\Classes\CLSID\{9C4EFBD5-1ADF-41E6-BE26-AF44326E30E4}
[-] Chave Exclu&iacute;da : [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Chave Exclu&iacute;da : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Chave Exclu&iacute;da : HKCU\Software\Kromtech
[-] Chave Exclu&iacute;da : HKCU\Software\Reg\Clean
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\SpeedBit
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\AIM Toolbar
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Reg\Clean
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Crashhd
[-] Chave Exclu&iacute;da : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
[-] Chave Exclu&iacute;da : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SU
[!] Chave N&atilde;o Exclu&iacute;da : [x64] HKCU\Software\Kromtech
[!] Chave N&atilde;o Exclu&iacute;da : [x64] HKCU\Software\Reg\Clean
[-] Chave Exclu&iacute;da : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCSU-SL_is1

***** [ Navegadores ] *****

[-] [C:\Users\pat_34813_dti\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Exclu&iacute;do : br.ask.com
[-] [C:\Users\pat_34813_dti\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Exclu&iacute;do : mystartsearch

*************************

:: Configura&ccedil;&otilde;es Winsock restauradas

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3947 bytes] ##########[/SPOILER]

Answer

Bom dia montilla2, essa lentid&atilde;o pode n&atilde;o estar relacionada &agrave; malwares apesar de seu PC estar infectado. Ao final do processo de desinfec&ccedil;&atilde;o daremos um parecer sobre isso.

Atualize o Malwarebytes Anti-Malware vers&atilde;o 2.1.8.1057 .
Escolha Configura&ccedil;&otilde;es >> Detec&ccedil;&atilde;o e prote&ccedil;&atilde;o >> Marque Verificar por Rootkits. Em Detec&ccedil;&otilde;es PUP (programas potencialmente indesejados), selecione Tratar detec&ccedil;&otilde;es como malware. 
Clique em Verificar. Em seguida Verificar Amea&ccedil;a e por fim em Iniciar Verifica&ccedil;&atilde;o.
Come&ccedil;ara ent&atilde;o o escaneamento. Aguarde pois pode demorar.
Ps: Para determinadas infec&ccedil;&otilde;es,o programa pedir&aacute; reboot. > Logs de aplicativos na janela principal do programa.
D&ecirc; um duplo-clique em Scan Log. Depois clique no bot&atilde;o Exportar. Utilize o formato .txt para exportar o log e salve-o na &aacute;rea de trabalho.
https://www.hardware.com.br/static/c/m/98274cf9a124afc49cc48919cf82703d
N&Atilde;O UTILIZAR O FORMATO .XML PARA EXPORTAR O LOG.
[color=darkred]O log de Prote&ccedil;&atilde;o e desnecess&aacute;rio para uma An&aacute;lise, exporte sempre o log Correto.[/color]

[color=red]NOTA: Se o MBAM encontrar arquivos que n&atilde;o consiga remover, poder&aacute; ter de reiniciar o PC (talvez mais de uma vez). 
Fa&ccedil;a isso imediatamente, ao ser perguntado se quer reiniciar o PC.[/color]

Poste um novo relat&oacute;rio da ZHPDiag.

Answer

caedurorodrigues,

Depois das limpezas feitas, a m&aacute;quina est&aacute; at&eacute; iniciando mais rapidamente.
Antes de todos os processos carregarem, consigo abrir janelas rapidamente. Por&eacute;m, depois de algum processo/servi&ccedil;o(que poderia ser um virus) iniciar, fica super-lento, da&iacute; n&atilde;o consigo mais mexer na m&aacute;quina. Algumas vezes ela at&eacute; trava geral, quando nao consigo nem mover o mouse. E o incr&iacute;vel, &eacute; que o led do hd fica ativo direto, indicando alguma atividade.

N&atilde;o sei se faz diferen&ccedil;a, mas esses scans que postei, fiz todos em modo de seguran&ccedil;a, uma vez que n&atilde;o consigo executar programas em modo normal.

Vou fazer os scans acima e posto aqui. Ja havia rodado o MBAM antes de acessar o f&oacute;rum, inclusive com as op&ccedil;&otilde;es rootkit e marcando as duas op&ccedil;oes de tratar como amea&ccedil;a.
Vou rodar novamente.

Mais uma vez, agrade&ccedil;o pela aten&ccedil;&atilde;o.

Answer

caedurorodrigues, boa noite.

Esqueci de mencionar no post acima que no modo seguro, o pc fica super-rapido e n&atilde;o trava.

Segue log do MBAM, livre de amea&ccedil;as e atualizado:

Malwarebytes Anti-Malware
www.malwarebytes.org

Data da verifica&ccedil;&atilde;o: 28/10/2015
Hora da verifica&ccedil;&atilde;o: 17:45
Arquivo de registro: mbam.txt
Administrador: Sim

Vers&atilde;o: 2.2.0.1024
Banco de dados de malware: v2015.10.28.06
Banco de dados de rootkit: v2015.10.23.01
Licen&ccedil;a: Gratuita
Prote&ccedil;&atilde;o contra malware: Desabilitado
Prote&ccedil;&atilde;o contra website malicioso: Desabilitado
Autoprote&ccedil;&atilde;o: Desabilitado

Sistema operacional: Windows 7 Service Pack 1
CPU: x64
Sistema de arquivos: NTFS
Usu&aacute;rio: pat_34813_dti

Tipo de verifica&ccedil;&atilde;o: Verifica&ccedil;&atilde;o da amea&ccedil;a
Resultado: Conclu&iacute;do
Objetos verificados: 335321
Tempo decorrido: 14 min, 48 seg

Mem&oacute;ria: Habilitado
Inicializa&ccedil;&atilde;o: Habilitado
Sistema de arquivos: Habilitado
Arquivos compactados: Habilitado
Rootkits: Habilitado
Heur&iacute;stica: Habilitado
PUP: Habilitado
PUM: Habilitado

Processos: 0
(Nenhum item malicioso detectado)

M&oacute;dulos: 0
(Nenhum item malicioso detectado)

Chaves de registro: 0
(Nenhum item malicioso detectado)

Valores de registro: 0
(Nenhum item malicioso detectado)

Dados de registro: 0
(Nenhum item malicioso detectado)

Pastas: 0
(Nenhum item malicioso detectado)

Arquivos: 0
(Nenhum item malicioso detectado)

Setores f&iacute;sicos: 0
(Nenhum item malicioso detectado)

(end)

----------------------------------------

Segue log do ZHPdiag:

http://www.cjoint.com/c/EJCui0Qldsu

Answer

Boa noite montilla2,

Baixe: 
Ou aqui:
Salve-a na &Aacute;rea de trabalho !
Execute a ferramenta ! Clique Yes >> Scan.

https://www.hardware.com.br/static/c/m/0992225242d758a549890a7b6b0fbe43
Verifique se as caixinhas em Whitelist est&atilde;o assinaladas.
Em Optional Scan,deixe marcada a checkbox Addition.txt.
Marque tamb&eacute;m a checkbox 90 Days Files
Ser&aacute; gerado o relat&oacute;rio! ([color=green]FRST.txt[/color])
Ps: Ser&aacute; gerado,tamb&eacute;m,o relat&oacute;rio Addition.txt que estar&aacute; disponibilizado na 1&ordf; execu&ccedil;&atilde;o da ferramenta.
Acesse: 
Ou acesse:
Maiores informa&ccedil;&otilde;es:

Ferramentas

Mover Tópico