Netbook muito lento, log para analise

log para analise [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

# AdwCleaner v3.004 - Relatório criado 17/09/2013 no 11:19:47
# Atualizado 15/09/2013 por Xplode
# Sistema Operacional : Windows 7 Ultimate Service Pack 1 (32 bits)
# Usuário : Paulinho - PAULINHO-PC
# Executando de : C:\Users\Paulinho\Desktop\adwcleaner.exe
# Opção : Limpar

***** [ Serviços ] *****

[#] Serviço Deletado : Update WebConnect
Serviço Deletado : WajamUpdater

***** [ Arquivos / Pastas ] *****

Pasta Deletado : C:\ProgramData\Ask
Pasta Deletado : C:\ProgramData\Babylon
Pasta Deletado : C:\ProgramData\baidu
[!] Pasta Deletado : C:\ProgramData\BitGuard
Pasta Deletado : C:\Program Files\optimizer pro
Pasta Deletado : C:\Program Files\Wajam
Pasta Deletado : C:\Program Files\WebConnect
Pasta Deletado : C:\Users\Paulinho\AppData\Local\Smartbar
Pasta Deletado : C:\Users\Paulinho\AppData\Local\Wajam
Pasta Deletado : C:\Users\Paulinho\AppData\Local\Temp\Smartbar
Pasta Deletado : C:\Users\Paulinho\AppData\Local\Temp\Wajam
Pasta Deletado : C:\Users\Paulinho\AppData\LocalLow\delta
Pasta Deletado : C:\Users\Paulinho\AppData\LocalLow\Smartbar
Pasta Deletado : C:\Users\Paulinho\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z
Pasta Deletado : C:\Users\Paulinho\AppData\Roaming\BabSolution
Pasta Deletado : C:\Users\Paulinho\AppData\Roaming\Babylon
Pasta Deletado : C:\Users\Paulinho\AppData\Roaming\DSite
Pasta Deletado : C:\Users\Paulinho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Pasta Deletado : C:\Users\Paulinho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Pasta Deletado : C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\Extensions\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}
Pasta Deletado : C:\Users\Paulinho\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Pasta Deletado : C:\Users\Paulinho\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Pasta Deletado : C:\Users\Paulinho\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon
Pasta Deletado : C:\Users\Paulinho\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Arquivo Deletado : C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\Extensions\firefox@webconnect.co.xpi
Arquivo Deletado : C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\bProtector_extensions.rdf
Arquivo Deletado : C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\bprotector_extensions.sqlite
Arquivo Deletado : C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\bprotector_prefs.js
Arquivo Deletado : C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\searchplugins\Askcom.xml
Arquivo Deletado : C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\user.js
Arquivo Deletado : C:\Users\Paulinho\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Arquivo Deletado : C:\Users\Paulinho\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Arquivo Deletado : C:\Users\Paulinho\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
Arquivo Deletado : C:\Windows\Tasks\DSite.job
Arquivo Deletado : C:\Windows\System32\Tasks\DSite

***** [ Atalhos ] *****


***** [ Registro ] *****

Valor Deleteda : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]
Chave Deleteda : HKLM\SOFTWARE\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon
Chave Deleteda : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
[#] Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DSite
[#] Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77797C6C-A264-465B-8DD2-4437F890A1E4}
[#] Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{77797C6C-A264-465B-8DD2-4437F890A1E4}
Valor Deleteda : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Valor Deleteda : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Valor Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Chave Deleteda : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Chave Deleteda : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Chave Deleteda : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
Chave Deleteda : HKLM\SOFTWARE\Classes\IESmartBar.BHO
Chave Deleteda : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
Chave Deleteda : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
Chave Deleteda : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
Chave Deleteda : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
Chave Deleteda : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
Chave Deleteda : HKLM\SOFTWARE\Classes\Prod.cap
Chave Deleteda : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Chave Deleteda : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Chave Deleteda : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Chave Deleteda : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Chave Deleteda : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Chave Deleteda : HKCU\Software\e6d78de13ebd45
Chave Deleteda : HKLM\SOFTWARE\e6d78de13ebd45
Chave Deleteda : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Chave Deleteda : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{2316C625-B487-4410-A1A5-FF040B65245F}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Chave Deleteda : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Chave Deleteda : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Chave Deleteda : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316C625-B487-4410-A1A5-FF040B65245F}
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2316C625-B487-4410-A1A5-FF040B65245F}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C625-B487-4410-A1A5-FF040B65245F}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chave Deleteda : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Chave Deleteda : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Valor Deleteda : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Chave Deleteda : HKCU\Software\BabSolution
Chave Deleteda : HKCU\Software\BI
Chave Deleteda : HKCU\Software\DataMngr
[#] Chave Deleteda : HKCU\Software\DataMngr_Toolbar
Chave Deleteda : HKCU\Software\Delta
Chave Deleteda : HKCU\Software\dsiteproducts
Chave Deleteda : HKCU\Software\InstallCore
Chave Deleteda : HKCU\Software\SmartBar
Chave Deleteda : HKCU\Software\SmartbarBackup
Chave Deleteda : HKCU\Software\SmartbarLog
Chave Deleteda : HKCU\Software\Wajam
Chave Deleteda : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deleteda : HKCU\Software\AppDataLow\Software\Crossrider
Chave Deleteda : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chave Deleteda : HKLM\Software\DataMngr
Chave Deleteda : HKLM\Software\Delta
Chave Deleteda : HKLM\Software\Wajam
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{81BFDC6A-7574-424C-AA2E-0A19FE2B1A3F}
Chave Deleteda : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam

***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16686

Configurações Restaurado : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v23.0.1 (pt-BR)

[ Arquivo : C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\prefs.js ]

Linha deletada : user_pref("browser.newtab.url", "hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=E09D00265E8AAA5C&affID=121225&tsp=4990");
Linha deletada : user_pref("browser.startup.homepage", "hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=E09D00265E8AAA5C&affID=121225&tsp=4990");
Linha deletada : user_pref("extensions.delta.admin", false);
Linha deletada : user_pref("extensions.delta.aflt", "babsst");
Linha deletada : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Linha deletada : user_pref("extensions.delta.autoRvrt", "false");
Linha deletada : user_pref("extensions.delta.dfltLng", "pt");
Linha deletada : user_pref("extensions.delta.excTlbr", false);
Linha deletada : user_pref("extensions.delta.ffxUnstlRst", true);
Linha deletada : user_pref("extensions.delta.id", "e09de2a400000000000000265e8aaa5c");
Linha deletada : user_pref("extensions.delta.instlDay", "15947");
Linha deletada : user_pref("extensions.delta.instlRef", "sst");
Linha deletada : user_pref("extensions.delta.newTab", false);
Linha deletada : user_pref("extensions.delta.prdct", "delta");
Linha deletada : user_pref("extensions.delta.prtnrId", "delta");
Linha deletada : user_pref("extensions.delta.rvrt", "false");
Linha deletada : user_pref("extensions.delta.smplGrp", "none");
Linha deletada : user_pref("extensions.delta.tlbrId", "base");
Linha deletada : user_pref("extensions.delta.tlbrSrchUrl", "");
Linha deletada : user_pref("extensions.delta.vrsn", "1.8.24.6");
Linha deletada : user_pref("extensions.delta.vrsni", "1.8.24.6");
Linha deletada : user_pref("extensions.delta.vrsnTs", "1.8.24.623:31:39");
Linha deletada : user_pref("extensions.delta_i.babExt", "");
Linha deletada : user_pref("extensions.delta_i.babTrack", "affID=121225&tsp=4990");
Linha deletada : user_pref("extensions.delta_i.srcExt", "ss");

-\\ Google Chrome v

[ Arquivo : C:\Users\Paulinho\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleteda : homepage
Deleteda : icon_url
Deleteda : search_url
Deleteda : keyword

*************************

AdwCleaner[R0].txt - [13337 octets] - [17/09/2013 11:16:33]
AdwCleaner[S0].txt - [12902 octets] - [17/09/2013 11:19:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12963 octets] ##########


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.1 (09.15.2013:1)
OS: Windows 7 Ultimate x86
Ran by Paulinho on 17/09/2013 at 11:29:11,37
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1691553684-88960645-3161956319-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1691553684-88960645-3161956319-1000\Software\Wajam
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{428F99D0-433F-421E-BD1C-C0E88C980301}



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{02A01389-29FC-4458-9470-C768171B9D71}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{02D2A8FF-BAF8-4A34-BFE6-77F04C758865}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{0325A77F-6B35-4EA6-8FE1-A29FCAF07DA6}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{03D85D5F-DCB1-4DEB-8D15-A1CC5976DB79}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{0428FA7B-30D6-4C8A-8BA1-0D42FD78D882}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{043EE9BA-9ECB-41B6-8DC9-7D9E50F81A99}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{07890CB1-DD75-4370-BAF8-8D5C9178AB39}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{0A9578F2-FC0E-4151-84E5-B1BC1E4A53AC}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{12E8F02B-026E-49BF-8D2A-64F551D8DA34}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{13D99AF4-DB9D-415E-A5EE-32022DF42D71}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{1B3AC7C6-9358-4556-8722-5B2C995A47E6}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{1F6BEA5D-2B46-4EE6-B2CF-08378F6C95A7}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{1F73D1F0-5ABD-4334-A476-05158A75CEB4}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{23C58089-3336-495C-A510-79E97869E10D}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{241EA2C4-EF99-4EBD-8CC5-66F67F0C61AD}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{2DCFAAE5-1E4F-403E-9765-49D186DE70A8}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{2EAEF61E-9DD6-4BF6-927A-572217D60250}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{3028A0C1-1A50-4A36-9D88-35A79D3C1D02}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{31321B23-643F-4304-87E1-A58E0FE0047A}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{36CCA7DC-5B3D-41B2-9FFF-3800DEA5191C}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{37C28E48-3FD9-4FB7-8BA1-0C924F9B398B}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{38339E6F-0C32-4B63-9BB6-8B58F8E37FD5}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{3C25180F-F053-467A-BDE8-C55A2CE89ABF}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{3D8C41C1-E0B5-48B4-BA1A-B2EED6F64B22}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{444B8B79-FDD3-459C-A873-092BFABB050F}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{4664E9BA-E9FC-4B55-A043-50FF409AA02E}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{4712AC74-F3A5-4637-AD97-05E4210801CF}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{4B653312-1C80-4B41-9531-515E08965829}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{539D6F10-F058-4578-AEBB-A91B455B2E9B}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{55E6A06B-57B2-4AC6-B0FB-AF9EC77EB549}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{57F8C3FD-6C3A-4C48-B955-7311581A24C5}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{59C91A5A-1973-4AF1-A290-FE847748F910}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{5A53A6D0-31B7-4E33-B56B-322F15A5B3FB}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{5B261B31-D213-4DC6-BC3C-06221BDA17D2}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{5EDFE43A-F9A6-42E7-AC74-8A4DA8537BE2}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{6371C73C-763E-4A39-9624-F9F86E86956D}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{67976296-651B-4792-A527-9D97FA101958}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{6B446694-AE24-4FDB-AE5B-ABA650EC1CFA}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{6BF02A33-804C-4059-A65C-79A79DB22C4A}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{771CF00E-7065-4F28-A2B8-788B54BBD439}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{774ECA94-8DF0-4C70-B2D9-1FDAB8B62B0F}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{786F613D-0CD4-477E-9CF7-F6478FCDA143}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{7944FA57-FAD4-43A0-8B89-051219BD2691}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{7D50D3AD-D39C-461E-B3A2-3BF761CD787A}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{7FE46F8F-8EC9-432A-B0FC-40341540B535}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{8078C808-4FCA-4A42-AA8F-08133B0EB67A}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{818C204E-BF6D-4869-A9EC-8D5E143ED2D7}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{8247D890-286E-46A8-9885-80787421DD5B}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{829BCB9D-0F85-45A0-80ED-036C45A33D80}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{831D8C68-054F-4EC2-BA4F-308EF2D62BEE}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{84148BD3-5208-4E4A-BEA1-A6F3464D8E80}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{84CE51E7-75B8-49A9-9072-9AB79E253504}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{8565FF6E-8C75-4DD8-BEAB-9422A0F1C85C}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{866F24A2-9A75-42C4-A865-94DB004F9C87}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{86C1BFF6-83A7-4DD7-9891-5B7FC8CFA8BE}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{89B6C507-C6AC-4DCE-85E3-092541C2E967}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{89F1012F-212C-4E46-8B80-ACCB79F8B9AB}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{8C277DB3-409D-4125-B685-0D8F7EC1FABC}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{8E2836B8-34FA-412B-BC83-7D80B628CC6E}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{8E5438AB-E333-4FC7-8180-B44839813169}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{8FD40ECB-5CFF-4D9C-AEDD-D6BD01430040}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{914C7F43-930A-483D-AA84-C1110D317245}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{9309EAD3-FE94-4F29-99E3-310D9A655156}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{9368EDC6-F954-4E94-8B8E-147859BBB24E}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{943A81BF-9DA1-440C-AD42-514D9CAE9401}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{97A48318-2F63-41C1-8404-79C51CE4BA19}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{98BE4B51-D1B1-4D95-BAEE-3F8733299D3B}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{9A3E3506-0395-4BA4-B89E-0DECA57F4D50}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{9C2F8DDA-4482-499B-B44F-DF6F42C1F0CB}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{9F0C984F-D00D-40BD-97CD-49216ED1F119}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{9FF0D302-D362-45E9-9935-579EC0A737A5}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{A014C92D-8419-47D7-A6A5-1E37C32A2793}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{AA0C44FE-7301-46D5-AE7B-EB1920F81880}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{AAF9A16B-7772-40F1-B213-2FA30B5875EB}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{AD55885C-6960-4154-ACF5-D42EE1B4DA66}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{AE5209EF-2DCD-45D9-B837-EE94BDE947F4}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{B2F52E5D-3965-4383-984E-19798AA2C4C9}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{B33C6BA1-F7D9-40CD-A3E6-66EB0CF2425E}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{B8908C47-61BC-416E-B85F-01FF03DADC41}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{BC44CEF8-B13C-4591-A965-5FDB7B1161A9}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{BCB7FCAE-4F26-4E40-8E66-D46002B3FE52}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{BD39EC31-FAB1-4750-91FB-7BDE1E40E466}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{BD621099-A9A1-425B-BE42-0B6C78EAFDD3}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{BE1D9F41-E7A6-4752-8073-E1E68CF4989E}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{BE307C86-8FEA-4581-91C4-06E504B3A22C}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{C49B66EF-870D-41AC-A580-990FA6080DE0}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{C54AD475-FC07-44AC-AEAF-5BBF72B5A9CA}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{CA25878D-7FB7-4341-8DD4-E20B5BE28F52}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{CCAFFA9E-E94F-4AC4-AC1A-7EEF79028821}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{D64E64C9-AD3C-4CB0-AD5C-E4A285572666}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{D86C3C7A-FA1D-4587-A2E5-958A810232A2}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{D95A5ED9-0E33-49F4-B390-8A472B2DA455}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{DCFE4C17-D87A-41CD-861C-577E084D4A78}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{DED8729F-150D-42E9-8648-865ADECF265F}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{E04E0376-BBC4-47C9-8D92-8328B70055E2}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{E2767C6B-0EF4-470D-A667-E915B34A00AA}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{E3A0756B-68CE-4BE1-B42C-3E9CF57AECC6}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{E717D1C0-16F2-4704-A6BD-4BA96D90AB42}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{E7EC436A-D3B0-4ECA-8B4D-306826A09FBE}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{E8513B10-9570-49AA-A59A-B9B707167378}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{F19E55BC-F2E5-4AAA-A3D4-1669954E1C5F}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{F1EDAD8A-A973-4C9F-9626-E304451912AB}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{F428EE92-AF18-48B9-B7F0-EED77E4D0EFC}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{F4BFADC6-C042-4AAF-9B08-96F63E2C24CE}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{F6D00CCD-6E43-411E-BFAC-FB416E5286B1}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{F86F6F89-F3EB-4E83-805E-475ED6251A69}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{F8A652E4-1F99-47D4-9381-DD07D3B09F07}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{FB5CB684-7578-4E5D-B202-3DBCE66E3F5A}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{FC285F34-507C-42F1-9E96-9BA7FB87D96F}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{FCFDE5E3-94B7-4CE6-8FFE-EF8EC8BD631C}
Successfully deleted: [Empty Folder] C:\Users\Paulinho\appdata\local\{FF0715C7-83C1-4DF5-B6EA-1D9E3BF6EAEA}



~~~ FireFox

Emptied folder: C:\Users\Paulinho\AppData\Roaming\mozilla\firefox\profiles\2ukk6rf8.default\minidumps [59 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Paulinho\appdata\local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Successfully deleted: [Folder] C:\Users\Paulinho\appdata\local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Successfully deleted: [Folder] C:\Users\Paulinho\appdata\local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon
Successfully deleted: [Folder] C:\Users\Paulinho\appdata\local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17/09/2013 at 11:41:46,71
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Boa Noite! Edvan

|- Execute este script em ZHPFix.

script zhpfix
M2 - MFEP: prefs.js [Paulinho - 2ukk6rf8.default\firefox@webconnect.co] [] WebConnect v1.0.0 (..)  =>PUP.WebConnect
M2 - MFEP: prefs.js [Paulinho - 2ukk6rf8.default\{fd5a85d2-b04c-4754-9850-900f41f7b51f}] [] QuickShare Widget v1.0.0 (..)  =>PUP.QuickShare   
[MD5.CE755676AE6D27A1EFEEFB0F3C70A929] [SPRF][01/05/2013] (.Ask.com - AskStub Application.) -- C:\Users\Paulinho\AppData\Local\Temp\APNStub.exe   [358600]
[MD5.C7EA27B20D5DB059534EB463DA949EA4] [SPRF][01/05/2013] (.Ask.com - Setup Launcher.) -- C:\Users\Paulinho\AppData\Local\Temp\NEWC669.tmp.exe   [3808424]
[MD5.F0F3706910D84499E7845934117022BA] [SPRF][29/08/2013] (...) -- C:\Users\Paulinho\AppData\Local\Temp\wajam_download.exe   [55363]  =>Toolbar.Wajam
[MD5.00000000000000000000000000000000] [APT] [{04571DF8-AB2F-472A-A071-3A69E8428AF1}] (...) -- C:\Users\Paulinho\Desktop\habil-70-32-bits.exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{C2AA0814-317D-4993-BAC1-013A40AE8187}] (...) -- C:\Users\Paulinho\Desktop\habil-70-32-bits.exe (.not file.)   [0]
[MD5.B4746563EBF36A45DCF151C03D7C48CE] [SPRF][01/05/2013] (...) -- C:\Users\Paulinho\AppData\Local\Temp\.gbas.dll   [389207]
[MD5.62960FC96F087B8E6AE5E0608277611F] [SPRF][27/08/2013] (...) -- C:\Users\Paulinho\AppData\Local\Temp\ICReinstall_cadastro-de-clientes-10-10-32-bits.exe   [663912]
[MD5.A8BC134E7AA5F29C4FFCB71C2D452B3A] [SPRF][28/08/2013] (.No owner - Linkury.Installer.MsiWrapper.) -- C:\Users\Paulinho\AppData\Local\Temp\Installer.exe   [9027352]
[MD5.3BF79E6868B44D3ADB2796BA99521891] [SPRF][07/09/2013] (...) -- C:\Users\Paulinho\AppData\Local\Temp\Quarantine.exe   [344583]
[MD5.AC28C98B3621485E008AFCE0DDB50D4F] [SPRF][15/03/2010] (...) -- C:\Users\Paulinho\AppData\Local\Temp\SysConfig.dat   [218]
[MD5.1B23BE1566EF26A227667805DE8AFA87] - (.Baidu Inc. - Baidu PC Faster.) -- C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe   [1807856] [PID.944]
[MD5.2F5252E50745E47DB355B005725DAE05] [SPRF][29/08/2013] (.Somoto Ltd. - AppsHat Mobile Apps.) -- C:\Users\Paulinho\AppData\Local\Temp\appshat-distribution.exe   [327880]  =>Adware.MegaSearch
[MD5.348165F6E174E59EF993CBE17AFAED50] [SPRF][26/08/2013] (.Baidu, Inc. - PC Faster Setup.) -- C:\Users\Paulinho\AppData\Local\Temp\Baidu_Secure_SystemUp_3.7.1.39149.exe   [9754600]
[MD5.5AA3E89A59E3D556B5F9B6D8D8EE3A82] [SPRF][17/09/2013] (.Somoto Ltd. - Better Installer Cleaner.) -- C:\Users\Paulinho\AppData\Local\Temp\bi_cleaner.exe   [42080]  =>Adware.MegaSearch
[MD5.2EFD560A4734B1245F20F0AA91A4B57E] [SPRF][29/08/2013] (.QuickShare - QuickShare.) -- C:\Users\Paulinho\AppData\Local\Temp\QuickShare1.exe   [8149388]  =>PUP.QuickShare
[MD5.DB521C3DC7B679226322033B09719ECA] [SPRF][31/07/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\Paulinho\AppData\Local\Temp\uninst1.exe   [339440]  =>Toolbar.Babylon
[MD5.83087F025194693DFF3A0F22E6A4AE96] [SPRF][29/08/2013] (.Somoto Ltd. - FilesFrog Update Checker.) -- C:\Users\Paulinho\AppData\Local\Temp\UpdateCheckerSetup.exe   [196376]  =>Adware.MegaSearch
[MD5.0B407B577AAAAB55ECFF70F088C41B80] [WIS][29/08/2013] (.Linkury Inc. - QuickShare Widget.) -- C:\Windows\Installer\7b437b.msi   [8953856]  =>PUP.QuickShare
SS - | Auto 10/07/1658 0 |  (BitGuard) . (...) - C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe  =>PUP.BitGuard
SR - | Auto 15/08/2013 546496 |  (PCAppStoreSvc_{PCAppStore_3.8.8.1435}) . (.Baidu Inc..) - C:\Program Files\Baidu Security\PC App Store\3.8.8.1435\PCAppStoreSvc.exe
SR - | Auto 09/09/2013 637936 |  (PCFasterSvc_{PCFaster_3.7.0.0}) . (.Baidu Inc..) - C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFasterSvc.exe
O4 - GS\Desktop [Paulinho]: Baidu PC Faster.lnk . (.Baidu Inc. - Baidu PC Faster.)  -- C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe
O4 - GS\Desktop [Paulinho]: PC App Store.lnk . (.Baidu Inc. - Baidu PC App Store.)  -- C:\Program Files\Baidu Security\PC App Store\3.8.8.1435\PCAppStore.exe
O4 - HKLM\..\Run: [Baidu PC Faster 3.7.0.0] . (.Baidu Inc. - Baidu PC Faster.) -- C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe
O20 - AppInit_DLLs: . (...) - C:\Program Files\bitguard\261673~1.238\{c16c1~1\bitguard.dll (.not file.)  =>PUP.BitGuard
O23 - Service: BitGuard (BitGuard) . (...) - C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (.not file.)  =>PUP.BitGuard
O23 - Service: Baidu PC App Store Service 3.8.8.1435 (PCAppStoreSvc_{PCAppStore_3.8.8.1435}) . (.Baidu Inc. - Baidu PC App Store Service.) - C:\Program Files\Baidu Security\PC App Store\3.8.8.1435\PCAppStoreSvc.exe
O23 - Service: Baidu PC Faster Service 3.7.0.0 (PCFasterSvc_{PCFaster_3.7.0.0}) . (.Baidu Inc. - Baidu PC Faster Service.) - C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFasterSvc.exe
O41 - Driver:  (BprotectEx) . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) - C:\Windows\system32\drivers\BprotectEx.sys
O42 - Logiciel: Baidu PC Faster - (.Baidu, Inc..) [HKLM] -- Baidu PC Faster 3.7.0.0
O42 - Logiciel: WebConnect 3.0.0 - (.Web Connect.) [HKLM] -- WebConnect  =>PUP.WebConnect
O43 - CFD: 26/08/2013 - 23:34:09 - [159,313] ----D C:\Program Files\Baidu Security
O43 - CFD: 26/08/2013 - 23:09:19 - [25,335] ----D C:\ProgramData\Baidu Security
O43 - CFD: 26/08/2013 - 23:33:53 - [19,477] ----D C:\Users\Paulinho\AppData\Roaming\Baidu Security
O43 - CFD: 16/09/2013 - 13:37:24 - [0,004] ----D C:\Users\Paulinho\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Baidu PC Faster
O44 - LFC:[MD5.E31BA3DC84CAE33ED6ED98201913EC1C] - 03/09/2013 - 08:59:02 ---A- . (.Baidu, Inc. - Baidu Antivirus Hook Base.) -- C:\Windows\System32\Drivers\Bhbase.sys   [47456]
O44 - LFC:[MD5.61794FE1FE96C5B997399B8085B0D7E3] - 03/09/2013 - 08:59:02 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\BprotectEx.sys   [95552]
O61 - LFC: 17/09/2013 - 11:21:06 ---A- . (...) -- C:\Users\Paulinho\AppData\Local\avgchrome\avgp   [113989]
O61 - LFC: 16/09/2013 - 13:48:44 ---A- . (...) -- C:\Users\Paulinho\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\soft_info_syncnized.db3   [10198016]
O61 - LFC: 16/09/2013 - 13:51:18 ---A- . (...) -- C:\Users\Paulinho\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\search_history.db3   [3072]
O61 - LFC: 16/09/2013 - 15:39:10 ---A- . (...) -- C:\Users\Paulinho\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\softmgr.db3   [20480]
O61 - LFC: 17/09/2013 - 11:29:40 ---A- . (...) -- C:\Users\Paulinho\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\updating.xml   [358]
O61 - LFC: 17/09/2013 - 11:33:37 ---A- . (...) -- C:\Users\Paulinho\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\soft_info_syncnizing.db3   [10198016]
O61 - LFC: 17/09/2013 - 11:38:33 ---A- . (...) -- C:\Users\Paulinho\AppData\Roaming\Baidu Security\PC App Store\3.8.8.1435\update.xml   [358]
O64 - Services: CurCS - 03/09/2013 - C:\Windows\System32\drivers\Bhbase.sys (Bhbase)  .(.Baidu, Inc. - Baidu Antivirus Hook Base.) - LEGACY_BHBASE
O64 - Services: CurCS - 03/09/2013 - C:\Windows\system32\drivers\BprotectEx.sys (BprotectEx)  .(.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) - LEGACY_BPROTECTEX
O64 - Services: CurCS - 02/09/2013 - C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil.sys (PCFApiUtil)  .(.Baidu, Inc. - Baidu Antivirus BdApi Driver.) - LEGACY_PCFAPIUTIL
    
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}]   =>Toolbar.Agent
[HKCU\Software\Baidu Security]
[HKCU\Software\WebConnect]  =>PUP.WebConnect
[HKLM\SYSTEM\CurrentControlSet\Services\BitGuard]   =>PUP.BitGuard^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\WebConnect]   =>PUP.WebConnect^
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}]   =>Adware.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C625-B487-4410-A1A5-FF040B65245F}]   =>PUP.WebConnect
[HKLM\Software\Classes\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F1267753C}]   =>PUP.WebConnect
[HKLM\Software\Classes\TypeLib\{D8CAF2DF-52D3-42CF-9DDB-F4FF828DB4F8}]   =>PUP.WebConnect
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Baidu PC Faster 3.7.0.0]   =>Adware.BDSearch
[HKCU\Software\WebConnect]   =>PUP.WebConnect^
C:\Users\Paulinho\AppData\Local\Temp\wajam_download.exe   =>Toolbar.Wajam^
C:\Users\Paulinho\AppData\Local\Temp\appshat-distribution.exe   =>Adware.MegaSearch^
C:\Users\Paulinho\AppData\Local\Temp\bi_cleaner.exe   =>Adware.MegaSearch^
C:\Users\Paulinho\AppData\Local\Temp\QuickShare1.exe   =>PUP.QuickShare^
C:\Users\Paulinho\AppData\Local\Temp\uninst1.exe   =>Toolbar.Babylon^
C:\Users\Paulinho\AppData\Local\Temp\UpdateCheckerSetup.exe   =>Adware.MegaSearch^
C:\Windows\Installer\7b437b.msi   =>PUP.QuickShare^
C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe   =>PUP.BitGuard^
C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\firefox@webconnect.co   =>PUP.WebConnect^
C:\Users\Paulinho\AppData\Roaming\Mozilla\Firefox\Profiles\2ukk6rf8.default\{fd5a85d2-b04c-4754-9850-900f41f7b51f}   =>PUP.QuickShare^

firewallraz
emptytemp
emptyflash
emptyclsid

|- Poste o relatório!

A+

Rapport de ZHPFix 2013.9.15.7 par Nicolas Coolman, Update du 15/09/2013
Fichier d'export Registre :
Run by Paulinho at 18/09/2013 10:40:10
High Elevated Privileges : OK
Windows 7 Ultimate Edition, 32-bit Service Pack 1 (Build 7601)

Reciclagem vazia

========== Softwares ==========
AUSENTE Uninstall Process: c:\program files\baidu security\pc faster\3.7.0.0\uninstcaller.exe
AUSENTE Uninstall Process: c:\program files\webconnect\webconnectuninstall.exe

========== Processo memória ==========
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\APNStub.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\NEWC669.tmp.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\wajam_download.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\ICReinstall_cadastro-de-clientes-10-10-32-bits.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\Installer.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\Quarantine.exe
ELIMINA REINICIAR: Memory Process: C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\appshat-distribution.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\Baidu_Secure_SystemUp_3.7.1.39149.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\QuickShare1.exe
ELIMINÉ: Memory Process: C:\Users\Paulinho\AppData\Local\Temp\uninst1.exe

========== Modulos memória ==========
ELIMINÉ: Memory Module: C:\Users\Paulinho\AppData\Local\Temp\.gbas.dll

========== Chaves do Registo ==========
ELIMINÉ Logiciel Key: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebConnect]
ELIMINÉ: Service: BitGuard
ELIMINÉ: Service: PCAppStoreSvc_{PCAppStore_3.8.8.1435}
ELIMINÉ: Service: PCFasterSvc_{PCFaster_3.7.0.0}
ELIMINÉ Driver Key: BprotectEx
ERRO: Service Legacy: LEGACY_BHBASE
ERRO: Service Legacy: LEGACY_BPROTECTEX
ERRO: Service Legacy: LEGACY_PCFAPIUTIL
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
ELIMINÉ: HKCU\Software\Baidu Security
ELIMINÉ: HKCU\Software\WebConnect
ELIMINÉ: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C625-B487-4410-A1A5-FF040B65245F}
ELIMINÉ: HKLM\Software\Classes\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F1267753C}
ELIMINÉ: HKLM\Software\Classes\TypeLib\{D8CAF2DF-52D3-42CF-9DDB-F4FF828DB4F8}

========== Valores do Registo ==========
ELIMINÉ RunValue: Baidu PC Faster 3.7.0.0
Ausente Valor Perfil Padrão: FirewallRaz :
Ausente Valor Perfil Domínio FirewallRaz :

========== Elementos dos dados do Registo ==========
ELIMINÉ AppInit: \Program Files\bitguard\261673~1.238\{c16c1~1\bitguard.dll

========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia

========== Ficheiros ==========
ELIMINÉ: c:\users\paulinho\appdata\local\temp\apnstub.exe
ELIMINÉ:*  c:\users\paulinho\appdata\local\temp\newc669.tmp.exe
ELIMINÉ:*  c:\users\paulinho\appdata\local\temp\wajam_download.exe
ELIMINÉ: c:\users\paulinho\appdata\local\temp\.gbas.dll
ELIMINÉ:*  c:\users\paulinho\appdata\local\temp\icreinstall_cadastro-de-clientes-10-10-32-bits.exe
ELIMINÉ: c:\users\paulinho\appdata\local\temp\installer.exe
ELIMINÉ:*  c:\users\paulinho\appdata\local\temp\quarantine.exe
ELIMINÉ: C:\Users\Paulinho\AppData\Local\Temp\SysConfig.dat
ELIMINÉ: c:\users\paulinho\appdata\local\temp\appshat-distribution.exe
ELIMINÉ: c:\users\paulinho\appdata\local\temp\baidu_secure_systemup_3.7.1.39149.exe
ELIMINÉ:*  c:\users\paulinho\appdata\local\temp\quickshare1.exe
ELIMINÉ:*  c:\users\paulinho\appdata\local\temp\uninst1.exe
ELIMINÉ: C:\Windows\Installer\7b437b.msi
ELIMINÉ:*  c:\windows\installer\7b437b.msi
ELIMINA REINICIAR: c:\program files\baidu security\pc app store\3.8.8.1435\pcappstoresvc.exe
ELIMINÉ: c:\program files\baidu security\pc faster\3.7.0.0\pcfastersvc.exe
ELIMINÉ: c:\program files\baidu security\pc faster\3.7.0.0\pcfaster.exe
ELIMINÉ: c:\users\paulinho\desktop\pc app store.lnk
ELIMINÉ: c:\program files\baidu security\pc app store\3.8.8.1435\pcappstore.exe
ELIMINÉ: c:\program files\baidu security\pc app store\3.8.8.1435\pcappstoresvc.exe
ELIMINÉ: c:\windows\system32\drivers\bhbase.sys
ELIMINÉ: c:\users\paulinho\appdata\local\avgchrome\avgp
ELIMINÉ Temporários windows
ELIMINÉ Flash Cookies

========== Tarefa planificada ==========
ELIMINÉ: {04571DF8-AB2F-472A-A071-3A69E8428AF1}
ELIMINÉ: {C2AA0814-317D-4993-BAC1-013A40AE8187}


========== Recapitulativo ==========
11 : Processo memória
1 : Modulos memória
16 : Chaves do Registo
3 : Valores do Registo
1 : Elementos dos dados do Registo
1 : Pastas
24 : Ficheiros
2 : Softwares
2 : Tarefa planificada


End of clean in 03mn 22s

========== Caminho do ficheiro do relatório ==========
C:\ZHP\ZHPFix[R1].txt - 18/09/2013 10:40:18 [5075]

Boa Noite! Edvan

|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by Smeenk )

|- Ou aqui! < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem][Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

|- Salve-o no desktop!
|- Desabilite seu antivírus!
|- Para Windows 7,execute zoek.exe como administrador.

hijackthis;
iedefaults;
autoclean;
emptyalltemp;

|- Copie e cole estas informações,em vermelho,no campo da ferramenta.
|- Clique "Run Script".

Zoek.exe is running now.
Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

|- Surgirão estas informações,pedindo-lhe que aguarde o relatório.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Aceite e/ou confirme o reboot!

zoek.hta failed by unknown error.
Restart computer, and try again.

|- Ps: Ao obter algum erro,reinicie o PC e execute,novamente,a ferramenta.
|- Poste o relatório,que estará em C:\zoek-results.txt << 

A+

Não postei ainda, pq esse notebook é da minha prima nao está comigo, quando tiver acesso a ele postarei.

Edvan escreveu:Não postei ainda, pq esse notebook é da minha prima nao está comigo, quando tiver acesso a ele postarei.

Ok Edvan!

|- Vamos então aguardar o retorno do Notebook.

Abs!