Fórum SecSecurity

Implementando Limpeza e Seguranca em seu computador!

Palavras chave

Últimos assuntos

» ResetBrowser ( ... de Nicolas Coolman )
Ter Maio 31, 2016 5:58 am por joram

» herdProtectScan ( ... by herdprotect.com )
Seg Mar 07, 2016 10:58 pm por joram

» Emsisoft Emergency Kit ( ... by Emsisoft.com )
Dom Fev 28, 2016 5:40 am por joram

» Dr.WEB Link Checker ( ... by Doctor Web.Ltd )
Qui Fev 11, 2016 9:51 am por joram

» Computador com erros no navegador
Sab Ago 29, 2015 8:04 pm por joram

» Justiça determina que PSafe retire alertas desleais
Qua Ago 19, 2015 6:58 am por joram

» Google vai fazer buscas offline internas no desktop do seu PC
Ter Ago 18, 2015 8:19 am por joram

» Baidu lança buscador no Brasil!
Seg Ago 17, 2015 12:25 pm por joram

» Kaspersky é acusada de inventar vírus!
Sex Ago 14, 2015 3:32 pm por joram

Dezembro 2016

SegTerQuaQuiSexSabDom
   1234
567891011
12131415161718
19202122232425
262728293031 

Calendário Calendário

Parceiros

Fórum grátis

Os membros mais marcados


    Computador lento

    Compartilhe

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Computador lento

    Mensagem por CleiaMD em Qua Set 05, 2012 9:15 am

    Oi joram
    Meu computador apresenta alguma lentidão.
    Será que é vírus?
    Agradecida!

    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Qua Set 05, 2012 9:23 am

    Bom Dia! CleiaMD

    |- Bem Vinda ao Fórum SecSecurity. Very Happy

    |- Baixe: < [Você precisa estar registrado e conectado para ver este link.] > ( ... par Nicolas Coolman )

    |- Salve-o no desktop!
    |- Para Windows Vista ou 7,clique direito e execute o arquivo como administrador.
    |- Aguarde a conclusão do scan e clique em "Copier". <- Aguarde!

    [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Além do relatório,teremos no desktop: ZHP_uninstall, MBRCheck, ZHPDiag, ZHPFix
    |- Poste e/ou cole aqui,o link que foi gerado!

    Abs!

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Re: Computador lento

    Mensagem por CleiaMD em Qua Set 05, 2012 9:40 am

    Oi joram

    [Você precisa estar registrado e conectado para ver este link.]

    Primeiro veio o relatório e depois surgiu este endereço!

    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Qua Set 05, 2012 10:23 am

    Bom Dia! CleiaMD

    ######
    MSIE: Internet Explorer v7.0.5730.13
    ######
    |- Seu navegador IE está desatualizado!
    |- Seu computador,segundo o relatório,é direcionado à jogos. Correto?

    -/-

    |- Feche programas/pastas que estejam abertos.
    |- Feche,também,o navegador!
    |- Para Windows Vista,desabilite a [Você precisa estar registrado e conectado para ver este link.].

    [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Para Windows Vista ou 7,clique direito em ZHPFix.exe e execute-o como administrador.
    |- Selecione e copie estas informações,que estão em vermelho,para o "Bloco de Notas".

    [MD5.2096B76B1A5D4E5CE2BCB19C0FADA911] - (...) -- E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\OptimizerPro1.exe [210944] [PID.]
    [MD5.00000000000000000000000000000000] [APT] [OptimizerPro1UpdaterTask{89B1254A-DE9D-4ED4-8A5D-619833295552}] (...) -- E:\Documents and Settings\Matheus\Dados de aplicativos\OptimizerPro1\OptimizerPro1.exe (.not file.)
    [MD5.00000000000000000000000000000000] [APT] [SymInstallStub] (...) -- E:\DOCUME~1\Matheus\CONFIG~1\Temp\Adobe\Shockwave 11\SymInstallStub.exe (.not file.)
    R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Você precisa estar registrado e conectado para ver este link.]
    R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Você precisa estar registrado e conectado para ver este link.]
    O2 - BHO: V9-Helper Loader - {4DE0953E-490E-4D6F-BDDA-0516C372F3AF} . (.Beijing Elex Technology Co., Ltd - TODO: <File description>.) -- E:\WINDOWS\system32\v9loader.dll
    O3 - Toolbar: V9-ToolBar - [HKLM]{742E70CF-7770-412d-86CB-230B322E807C} . (.FOF_SILENT Beijing Elex Technology Co., Lt - V9-ToolBar.) -- E:\WINDOWS\system32\v9-toolbar.dll
    O3 - Toolbar: (no name) - [HKLM]{98889811-442D-49dd-99D7-DC866BE87DBC} . (...) -- (.not file.) => Infection BT (Toolbar.Babylon)
    O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} Orphean Key
    O3 - Toolbar: (no name) - [HKLM]{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} . (...) -- (.not file.)
    O4 - Global Startup: E:\Documents And Settings\Matheus\Desktop\Continue SweetIM Installation.lnk . (...) -- E:\Documents and Settings\Matheus\Configurações locais\Temp\Shortcut_SweetImSetup.exe (.not file.)
    O4 - Global Startup: E:\Documents And Settings\Matheus\Desktop\Continue SweetIM Installation.lnk . (...) -- E:\Documents and Settings\Matheus\Configurações locais\Temp\Shortcut_SweetImSetup.exe (.not file.)
    O42 - Logiciel: OptimizerPro1 Updater - (.Unknown owner.) [HKLM] -- OptimizerPro1
    O42 - Logiciel: V9 HomeTool - (.ELEX Technology.) [HKLM] -- V9Software
    O43 - CFD: 16/8/2012 - 15:38:43 - [1,425] ----D E:\Arquivos de programas\v9Soft
    O43 - CFD: 4/12/2011 - 13:12:21 - [6,311] ----D E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Babylon
    O43 - CFD: 7/4/2012 - 11:09:45 - [0,063] ----D E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Conduit
    O47 - AAKE:Key Export SP - "E:\Documents and Settings\Matheus\Meus documentos\Downloads\Facemoods (1).exe" [Enabled] .(...) -- E:\Documents and Settings\Matheus\Meus documentos\Downloads\Facemoods (1).exe (.not file.)
    O47 - AAKE:Key Export SP - "E:\Level Up! Games\Combat Arms\CombatArms.exe" [Enabled] .(...) -- E:\Level Up! Games\Combat Arms\CombatArms.exe (.not file.)
    O47 - AAKE:Key Export SP - "E:\Level Up! Games\Combat Arms\Engine.exe" [Enabled] .(...) -- E:\Level Up! Games\Combat Arms\Engine.exe (.not file.)
    O47 - AAKE:Key Export DP - "E:\Level Up! Games\Combat Arms\CombatArms.exe" [Enabled] .(...) -- E:\Level Up! Games\Combat Arms\CombatArms.exe (.not file.)
    O47 - AAKE:Key Export DP - "E:\Level Up! Games\Combat Arms\Engine.exe" [Enabled] .(...) -- E:\Level Up! Games\Combat Arms\Engine.exe (.not file.)
    O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - [Você precisa estar registrado e conectado para ver este link.] => Toolbar.Babylon

    [HKLM\Software\360Safe] => Infection Diverse (Lozavita.Troj)
    [HKLM\Software\Classes\escort.escortIEPane]
    [HKLM\Software\Classes\escort.escortIEPane.1]
    [HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] => Infection BT (Adware.Agent)
    [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] => Infection BT (Adware.MyWebSearch)
    [HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] => Infection BT (Toolbar.Babylon)
    [HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] => Infection BT (Toolbar.Babylon)
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}] => Infection BT (Toolbar.Babylon)
    [HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] => Infection BT (Toolbar.Babylon)
    [HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] => Infection BT (Toolbar.Babylon)
    [HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] => Infection BT (Toolbar.Babylon)

    E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Conduit => Toolbar.Conduit
    E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Babylon

    proxyfix
    emptytemp
    emptyflash
    firewallraz
    sysrestore
    |- Estando com o Bloco de Notas aberto,acione os atalhos: "Ctrl+A" -> "Ctrl+C"
    |- Minimize o Bloco de Notas.

    [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Clique no menu,"Paste ClipBoard".
    |- Clique em "GO" -> Oui.

    [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Ps: Temos,àcima,sequência de imagens para maior exclarecimento.
    |- Poste o relatório: E:\ZHP\ZHPFix[R1].txt

    Abs!

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Re: Computador lento

    Mensagem por CleiaMD em Qui Set 06, 2012 8:17 am

    Oi joram!!

    Agradeço sua ajuda e o computador melhorou muito.
    Acontece que meu filho Matheus não quiz remover a barra de ferramentas do V9,e removeu algumas linhas que estavam na relação que enviou. Sabe né,ele está acostumado a acessar alguns Fóruns e usar ferramentas de desinfecção Francesas e ficou muito feliz quando soube da existência deste Fórum e tendo essa oportunidade com você.

    Log do ZHPFix

    Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
    Fichier d'export Registre : E:\ZHP\ZHPExportRegistry-6-9-2012-08-53-05.txt
    Run by Matheus at 6/9/2012 08:53:05
    Windows XP Professional Service Pack 3 (Build 2600)
    Web site : [Você precisa estar registrado e conectado para ver este link.]
    Web site : [Você precisa estar registrado e conectado para ver este link.]

    ========== Software ==========
    NOT FOUND Uninstall Process: e:\documents and settings\all users\dados de aplicativos\optimizerpro1\optimizerpro1.exe

    ========== Memory Process ==========
    DELETE on Reboot Memory Process: E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\OptimizerPro1.exe

    ========== Registry Key ==========
    DELETED [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OptimizerPro1]
    NOT FOUND Key: CLSID BHO: {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
    DELETED Key: SearchScopes :{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
    DELETED Key*: HKLM\Software\360Safe
    DELETED Key*: HKLM\Software\Classes\escort.escortIEPane
    DELETED Key*: HKLM\Software\Classes\escort.escortIEPane.1
    DELETED Key*: HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
    DELETED Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
    DELETED Key*: HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    DELETED Key*: HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}
    DELETED Key*: HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    DELETED Key*: HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    DELETED Key*: HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    ========== Registry Value ==========
    DELETED Toolbar: {98889811-442D-49dd-99D7-DC866BE87DBC}
    DELETED Toolbar: {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
    DELETED AAKE KeyValue: E:\Documents and Settings\Matheus\Meus documentos\Downloads\Facemoods (1).exe
    DELETED AAKE KeyValue: E:\Level Up! Games\Combat Arms\CombatArms.exe
    DELETED AAKE KeyValue: E:\Level Up! Games\Combat Arms\Engine.exe
    ProxyFix : Proxy killed successfully
    DELETED ProxyServer Value
    DELETED ProxyEnable Value
    DELETED EnableHttp1_1 Value
    DELETED ProxyHttp1.1 Value
    DELETED ProxyOverride Value
    DELETED FirewallRaz (SP) : %windir%\Network Diagnostic\xpnetdiag.exe
    DELETED FirewallRaz (SP) : %windir%\system32\sessmgr.exe
    DELETED FirewallRaz (SP) : E:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe
    DELETED FirewallRaz (SP) : E:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
    DELETED FirewallRaz (SP) : E:\Arquivos de programas\MegaJogos\jre\jre\bin\javaw.exe
    DELETED FirewallRaz (DP) : %windir%\Network Diagnostic\xpnetdiag.exe
    DELETED FirewallRaz (DP) : %windir%\system32\sessmgr.exe
    DELETED FirewallRaz (DP) : E:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe
    DELETED FirewallRaz (DP) : E:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
    No Value in Firewall Exception Register Key (FirewallRaz)

    ========== Registry Data Items ==========
    REMOVED R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
    REMOVED R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL

    ========== Repertory ==========
    DELETED Folder: E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Babylon
    DELETED Folder: E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Conduit
    DELETED Window Temporary:
    DELETED Flash Cookies:

    ========== File ==========
    DELETED File: e:\documents and settings\matheus\desktop\continue sweetim installation.lnk
    NOT FOUND File: e:\documents and settings\matheus\configurações locais\temp\shortcut_sweetimsetup.exe
    NOT FOUND File: e:\documents and settings\matheus\meus documentos\downloads\facemoods (1).exe
    NOT FOUND File: e:\level up! games\combat arms\combatarms.exe
    NOT FOUND File: e:\level up! games\combat arms\engine.exe
    NOT FOUND Folder/File: e:\documents and settings\matheus\configurações locais\dados de aplicativos\conduit
    NOT FOUND Folder/File: e:\documents and settings\matheus\configurações locais\dados de aplicativos\babylon
    DELETED Window Temporary:
    DELETED Flash Cookies:

    ========== Task ==========
    DELETED Task: OptimizerPro1UpdaterTask{89B1254A-DE9D-4ED4-8A5D-619833295552}
    DELETED Task: SymInstallStub

    ========== Restoration ==========
    Restore System Point created succefully


    ========== Summary ==========
    1 : Memory Process
    14 : Registry Key
    21 : Registry Value
    2 : Registry Data Items
    4 : Repertory
    9 : File
    1 : Software
    2 : Task
    1 : Restoration


    End of clean in 00mn 21s

    ========== Report File ==========
    E:\ZHP\ZHPFix[R1].txt - 6/9/2012 08:53:05 [4724]

    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Qui Set 06, 2012 8:42 am

    Bom Dia! CleiaMD

    |- Mas...quem está executando os procedimentos é ele ou você?

    -/-

    |- Baixe: < [Você precisa estar registrado e conectado para ver este link.] > ( ... par Xplode )

    |- Ao acessar,clique na imagem: < [Você precisa estar registrado e conectado para ver esta imagem.] >

    |- Salve-o no desktop!
    |- Clique direito em adwcleaner.exe,e escolha sua execução como "administrador".
    |- Ps: Dê início ao scan,clicando em "Delete" ou "Suppression".

    [Você precisa estar registrado e conectado para ver esta imagem.]


    |- Ao concluir,poste o relatório: C:\AdwCleaner[S1].txt

    Abs!


    Última edição por joram em Qui Set 06, 2012 1:35 pm, editado 1 vez(es)

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Re: Computador lento

    Mensagem por CleiaMD em Qui Set 06, 2012 9:12 am

    Oi joram

    Fui eu que postei esse pedido de ajuda,mas é o meu filho que executa as ferramentas que você indica.

    Log do AdwCleaner

    # AdwCleaner v2.000 - Logfile created 09/06/2012 at 09:47:31
    # Updated 30/08/2012 by Xplode
    # Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
    # User : Matheus - TECKMAIL-CAFC08
    # Boot Mode : Normal
    # Running from : E:\Documents and Settings\Matheus\Desktop\adwcleaner.exe
    # Option [Delete]


    ***** [Services] *****


    ***** [Files / Folders] *****

    Deleted on reboot : E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
    File Deleted : E:\user.js
    Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\boost_interprocess
    Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\InstallMate
    Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\Premium

    ***** [Registry] *****

    Key Deleted : HKCU\Software\bProtector
    Key Deleted : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\f
    Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd
    Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
    Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
    Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
    Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
    Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}
    Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKU\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v7.0.5730.13

    Restored : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Restored : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = [Você precisa estar registrado e conectado para ver este link.] --> [Você precisa estar registrado e conectado para ver este link.]

    -\\ Opera v12.2.1578.0

    File : E:\Documents and Settings\Matheus\Dados de aplicativos\Opera\Opera\operaprefs.ini

    Deleted : Home URL=hxxp://start.funmoods.com/?f=1&a=bf3&chnl=bf3&cd=2XzuyEtN2Y1L1QzutDtDtC0DyCtDtDtAtB0DyEtA0D[...]

    *************************

    AdwCleaner[S1].txt - [5223 octets] - [06/09/2012 09:47:31]

    ########## EOF - E:\AdwCleaner[S1].txt - [5283 octets] ##########

    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Qui Set 06, 2012 9:26 am

    Bom Dia! CleiaMD

    Fui eu que postei esse pedido de ajuda,mas é o meu filho que executa as ferramentas que você indica.
    |- Ok! Entendi.
    |- Repita o procedimento com AdwCleaner,e poste o relatório. ( AdwCleaner[S2].txt )

    |- Baixe: < [Você precisa estar registrado e conectado para ver este link.] > ( ... by OldTimer Tools )

    |- Clique em Salvar!

    [Você precisa estar registrado e conectado para ver este link.]

    |- Salve-o no desktop!
    |- Duplo clique em OTL.exe >> Executar.

    [Você precisa estar registrado e conectado para ver esta imagem.] >> [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Configure "Verificação de Arquivos",segundo a screenshot!

    [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Ps: Faça o mesmo para estes!
    |- Em "Exame Extra do Registro",assinale "Nenhum".

    *crack* /s
    *keygen* /s
    *serial* /s
    *AutoKMS* /s
    *loader* /s
    %APPDATA%\Local\*.
    %APPDATA%\*.exe /s
    %APPDATA%\*.
    %USERPROFILE%\AppData\Local\*.*
    %USERPROFILE%\AppData\Roaming\*.*
    %systemroot%\assembly\tmp\*.* /S /MD5
    %systemroot%\assembly\temp\*.* /S /MD5
    %systemroot%\assembly\GAC\*.* /S /MD5
    %systemroot%\assembly\GAC_32\*.* /S /MD5
    %systemroot%\system32\config\systemprofile\AppData\Local\*.*
    %windir%\ServiceProfiles\LocalService\AppData\Local\Temp\*.*
    %windir%\ServiceProfiles\NetworkService\AppData\Local\Temp\*.*
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes
    /md5start
    services.exe
    /md5stop
    regedit /e c:\registrybackup.reg /c
    type c:\boot.ini >> test.txt /c
    %systemroot%\system32\Tasks\*.* /s
    %windir%\tasks\*.* /s
    [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Cole estas informações,que estão em verde,para o campo "Exames Personalizados/Correções".

    |- Clique em Verificar: [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Concluindo,poste o relatório: OTL.txt

    |- Para grandes relatórios,acesse: < [Você precisa estar registrado e conectado para ver este link.] >

    |- Maiores informações: < |[Você precisa estar registrado e conectado para ver este link.]| >

    Abraços!

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Re: Computador lento

    Mensagem por CleiaMD em Sex Set 07, 2012 5:10 pm

    Oi joram

    Log do AdwCleaner

    # AdwCleaner v2.000 - Logfile created 09/07/2012 at 17:58:20
    # Updated 30/08/2012 by Xplode
    # Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
    # User : Matheus - TECKMAIL-CAFC08
    # Boot Mode : Normal
    # Running from : E:\Documents and Settings\Matheus\Desktop\adwcleaner.exe
    # Option [Delete]


    ***** [Services] *****


    ***** [Files / Folders] *****

    Deleted on reboot : E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
    Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\boost_interprocess

    ***** [Registry] *****

    Key Deleted : HKCU\Software\bProtector
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKU\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v7.0.5730.13


    -\\ Opera v12.2.1578.0

    File : E:\Documents and Settings\Matheus\Dados de aplicativos\Opera\Opera\operaprefs.ini

    [OK] File is clean.

    *************************

    AdwCleaner[S2].txt - [1837 octets] - [07/09/2012 17:58:20]

    ########## EOF - E:\AdwCleaner[S4].txt - [1897 octets] ##########

    Log do OTL

    [Você precisa estar registrado e conectado para ver este link.]

    Obrigada!

    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Sex Set 07, 2012 6:41 pm

    Boa Noite! CleiaMD

    |- Execute o OTL.exe.
    |- Copie estas informações que estão em vermelho,para o campo clipboard da ferramenta. ( "Exames Personalizados Correções" )

    :OTL
    IE - HKU\S-1-5-21-329068152-1004336348-1417001333-1003\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
    IE - HKU\S-1-5-21-329068152-1004336348-1417001333-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: URL = [Você precisa estar registrado e conectado para ver este link.] [TXT_PAYS US - 65.60.5.200]
    FF - prefs.js..browser.search.defaultthis.enginename: 4shared.com customized web search
    FF - prefs.js..extensions.enabledAddons: [Você precisa estar registrado e conectado para ver este link.]:1.5.0
    FF - prefs.js..keyword.url: [Você precisa estar registrado e conectado para ver este link.] [TXT_PAYS US - 198.143.128.244]
    O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
    O8 - Extra context menu item: &Download All using 4shared Desktop - [Você precisa estar registrado e conectado para ver este link.] de programas\4shared Desktop\Desktop.32/D_ALL_LINK File not found
    O8 - Extra context menu item: &Download using 4shared Desktop - [Você precisa estar registrado e conectado para ver este link.] de programas\4shared Desktop\Desktop.32/D_ONE_LINK File not found
    O18 - Protocol\Handler\livecall - No CLSID value found
    O18 - Protocol\Handler\msnim - No CLSID value found
    O18 - Protocol\Handler\wlmailhtml - No CLSID value found
    O20 - AppInit_DLLs: (protector.dll) - E:\WINDOWS\System32\protector.dll ()
    [2012/08/15 13:14:48 | 000,000,000 | ---D | C] -- E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1
    [2012/03/02 14:24:49 | 000,790,520 | ---- | C] () -- E:\WINDOWS\System32\protector.dll
    [2012/06/12 12:38:36 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
    [2012/08/16 17:54:00 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1
    [2011/05/29 10:07:57 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dados de aplicativos\{A2A58654-12AA-408A-B411-58A76959BE7F}
    [2012/04/07 11:10:16 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop
    [2011/11/15 19:48:47 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic
    [2012/01/18 10:31:24 | 000,010,144 | ---- | M] () -- \Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\conduitCommon\modules\3.9.0.3\ExternalLibraryLoader.jsm
    [2012/06/18 10:27:22 | 000,003,681 | ---- | M] () -- \Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\loader.xul
    [2012/08/23 09:31:41 | 000,016,896 | ---- | M] () -- \WINDOWS\Prefetch\DESKMEDIA_DOWNLOADER_1.0.EXE-2D42FC76.pf
    @Alternate Data Stream - 113 bytes -> E:\Documents and Settings\All Users\Dados de aplicativos\TEMP:D1B5B4F1

    :reg
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
    "DefaultScope" = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
    "DefaultScope" = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    [-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}]
    [-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
    "bProtectorDefaultScope" = -

    :Files
    E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic
    E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
    E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1
    E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop

    :Commands
    [CREATERESTOREPOINT]
    [purity]
    [emptytemp]
    [Reboot]
    |- Clique no botão Consertar -> Aguarde a conclusão!
    |- O computador vai reiniciar! -> Clique em "Executar".

    [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Para versões em Inglês,clique em Run Fix que é o mesmo que Consertar.
    |- Poste o relatório: E:\_OTL\MovedFiles\*.log

    Abs!

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Re: Computador lento

    Mensagem por CleiaMD em Seg Set 10, 2012 10:08 am

    Oi joram! Perdoe-me por ter demorado em lhe responder.
    Viajei à Cabo Frio,para aproveitar o feriado e relaxar a mente. hehe..

    ---------------------
    Log do OTL
    ---------------------
    All processes killed
    ========== OTL ==========
    HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
    Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
    Prefs.js: 4shared.com customized web search removed from browser.search.defaultthis.enginename
    Prefs.js: [Você precisa estar registrado e conectado para ver este link.]:1.5.0 removed from extensions.enabledAddons
    Prefs.js: [Você precisa estar registrado e conectado para ver este link.] [TXT_PAYS US - 198.143.128.244] removed from keyword.url
    Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.
    Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Download All using 4shared Desktop\ deleted successfully.
    Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Download using 4shared Desktop\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
    File Protocol\Handler\livecall - No CLSID value found not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
    File Protocol\Handler\msnim - No CLSID value found not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
    File Protocol\Handler\wlmailhtml - No CLSID value found not found.
    Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:protector.dll deleted successfully.
    File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
    E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\downloads folder moved successfully.
    E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1 folder moved successfully.
    File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
    Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.
    Folder E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\ not found.
    E:\Documents and Settings\All Users\Dados de aplicativos\{A2A58654-12AA-408A-B411-58A76959BE7F} folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic folder moved successfully.
    \Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\conduitCommon\modules\3.9.0.3\ExternalLibraryLoader.jsm moved successfully.
    \Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\loader.xul moved successfully.
    File \WINDOWS\Prefetch\DESKMEDIA_DOWNLOADER_1.0.EXE-2D42FC76.pf not found.
    ADS E:\Documents and Settings\All Users\Dados de aplicativos\TEMP:D1B5B4F1 deleted successfully.
    ========== REGISTRY ==========
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\"DefaultScope" | {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /E : value set successfully!
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\"DefaultScope" | {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /E : value set successfully!
    Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
    Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}\ not found.
    Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\bProtectorDefaultScope deleted successfully.
    ========== FILES ==========
    File\Folder E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic not found.
    Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.
    File\Folder E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1 not found.
    File\Folder E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop not found.
    ========== COMMANDS ==========
    Restore point Set: OTL Restore Point

    [EMPTYTEMP]

    User: All Users

    User: Cleia Maria

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes

    User: LocalService
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 859970 bytes

    User: Matheus
    ->Temp folder emptied: 1680319 bytes
    ->Temporary Internet Files folder emptied: 22054942 bytes
    ->FireFox cache emptied: 0 bytes
    ->Google Chrome cache emptied: 351534393 bytes
    ->Apple Safari cache emptied: 0 bytes
    ->Opera cache emptied: 7891738 bytes
    ->Flash cache emptied: 139003667 bytes

    User: NetworkService
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32\dllcache .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 0 bytes
    RecycleBin emptied: 7496 bytes

    Total Files Cleaned = 499,00 mb


    OTL by OldTimer - Version 3.2.61.1 log created on 09102012_105015

    Files\Folders moved on Reboot...
    File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
    Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...

    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Seg Set 10, 2012 12:04 pm

    Boa Tarde! CleiaMD

    |- Baixe: < [Você precisa estar registrado e conectado para ver este link.] >

    |- Salve-o no desktop ou E:\.
    |- Duplo-clique em OTS.exe.
    |- Ps: Para Windows Vista ou 7,execute o arquivo como administrador.
    |- Na opção "Additional Scans",clique em "Extras".
    |- Marque as caixinhas:

    [] Reg - NetSvcs
    [] File - Lop Check

    |- Em "Basic Scans",marque as caixinhas:

    [] Use Company Name Whitelist
    [] Skip Microsoft Files

    |- Verifique: [Você precisa estar registrado e conectado para ver esta imagem.] & [Você precisa estar registrado e conectado para ver esta imagem.]

    |- À seguir,clique em [Você precisa estar registrado e conectado para ver esta imagem.]

    |- Ao concluir,abrir-se-á o Bloco de Notas,com o relatório. ( OTS.txt )
    |- Poste-o em sua resposta!
    |- Acesse para isso! ( [Você precisa estar registrado e conectado para ver este link.] ou [Você precisa estar registrado e conectado para ver este link.] )

    Abs!

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Re: Computador lento

    Mensagem por CleiaMD em Ter Set 11, 2012 9:23 am

    E aí joram. Tudo bem com o Sr?

    ----------
    Log do OTS: [Você precisa estar registrado e conectado para ver este link.]
    ----------

    O computador tá massaa... cheers
    Valeu!
    Matheus


    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Ter Set 11, 2012 12:22 pm

    Boa Tarde! CleiaMD

    |- Existem 2 antivírus instalados: PSafe e Panda Cloud
    |- Desinstale um deles,fique com o que lhe agradar!
    |- Já que,por MP,decidiu remover o V9,incluí instruções para a limpeza.

    -/-

    |- Abra o OTS.exe,com um duplo-clique.

    Código:
    [Unregister Dlls]
    [Registry - Safe List]
    < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > ->
    YN -> HKEY_LOCAL_MACHINE\: Main\"Default_Page_URL" -> www.v9.com/sof/sof_1345142322_653562
    < Internet Explorer Settings [HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\] > ->
    YN -> HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\: Main\"Start Page" -> http://google.atcomet.com/m/
    < FireFox Settings [Prefs.js] > -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\FireFox\Profiles\z7m80cxu.default\prefs.js
    YN -> browser.search.defaultthis.enginename -> """"
    YN -> browser.search.selectedEngine -> "Search"
    YN -> keyword.url -> "http://search.babylon.com/?af=110393&babsrc=adbartrp&mntrid=1044da26000000000000001d60032d43&q="
    YN -> browser.search.defaultenginename -> "Search"
    YN -> browser.search.selectedEngine -> "Search"
    YN -> browser.startup.homepage -> "http://google.atcomet.com/m/"
    YN -> browser.startup.homepage -> "www.v9.com/sof/sof_1333804600_752716"
    YN -> backup.old.browser.search.selectedEngine -> "search"
    < FireFox Extensions [User Folders] > ->
    YN -> 4shared.com Community Toolbar  -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}
    YN -> ~EmptyValue -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com
    YN -> ~EmptyValue -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged
    NY -> No name found  -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}\Setup\bin\PandaSecurityTb_2.0.0.9\$[56]\extensions
    < FireFox SearchPlugins [User Folders] > ->
    YN ->  funmoods.xml -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\FireFox\Profiles\z7m80cxu.default\searchplugins\funmoods.xml
    < FireFox Extensions [Program Folders] > ->
    YN -> No name found -> E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\4SHAREDCOPYLINKS.XPI
    YN -> Funmoods.com -> E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\FFXTLBR@FUNMOODS.COM
    < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    YN -> {4DE0953E-490E-4D6F-BDDA-0516C372F3AF} [HKLM] -> E:\WINDOWS\system32\v9loader.dll [V9BHOLoader]
    < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
    YN -> "{742E70CF-7770-412d-86CB-230B322E807C}" [HKLM] -> E:\WINDOWS\system32\v9-toolbar.dll [V9-ToolBar]
    YN -> Beijing Elex Technology Co., Ltd) ->
    YN -> "{98889811-442D-49dd-99D7-DC866BE87DBC}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
    < Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\] > -> HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\
    YN -> WebBrowser\"{21FA44EF-376D-4D53-9B0F-8A89D3229068}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
    YN -> WebBrowser\"{724D43A0-0D85-11D4-9908-00400523E39A}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
    < AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
    *AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls
    YN -> protector.dll ->
    < AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
    [Registry - Additional Scans - Safe List]
    < Windows DomainProfile GloballyOpenPorts Settings > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List
    YN -> \"57650:TCP" -> [57650:TCP:*:Enabled:Pando Media Booster]
    YN -> \"57650:UDP" -> [57650:UDP:*:Enabled:Pando Media Booster]
    < Windows StandardProfile GloballyOpenPorts Settings > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
    YN -> \"57650:TCP" -> [57650:TCP:*:Enabled:Pando Media Booster]
    YN -> \"57650:UDP" -> [57650:UDP:*:Enabled:Pando Media Booster]
    < Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    YN -> Toolbar Cleaner -> Toolbar Cleaner 1.0
    YN -> Usbfix -> UsbFix By El Desaparecido
    YN -> V9Software -> V9 HomeTool
    < Uninstall List [HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\] > -> HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    YN -> FoxTab FLV Player -> FoxTab FLV Player
    [Files/Folders - Created Within 30 Days]
    NY ->  v9-toolbar.dll -> E:\WINDOWS\System32\v9-toolbar.dll
    [Files/Folders - Modified Within 30 Days]
    NY ->  funmoods.crx -> E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx
    [Files - No Company Name]
    NY ->  funmoods.crx -> E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx

    [Empty Temp Folders]
    [EmptyFlash]
    [CreateRestorePoint]
    |- Cole estas informações que estão no Code,para o campo: "Paste Fix Here"
    |- Clique em Run Fix --> Aguarde!
    |- Terminando,poste o relatório: C:\_OTS\MovedFiles\OTS.txt

    Abs!

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Re: Computador lento

    Mensagem por CleiaMD em Ter Set 11, 2012 3:16 pm

    Oi joram

    Meu filho não decidiu qual antivírus ele irá desinstalar,mas estou deixando essa decisão com ele já que instalou o PSafe sem me comunicar.
    Vou acabar deixando este computador com ele,e adquirir outro sem esses jogos que ele tanto aprecia.

    ----------
    Log do OTS
    ----------
    All Processes Killed
    [Registry - Safe List]
    Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\\Main\"Default_Page_URL" not found.
    Registry value HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\\Main\"Start Page" not found.
    Prefs.js: """" removed from browser.search.defaultthis.enginename
    Prefs.js: "Search" removed from browser.search.selectedEngine
    Prefs.js: "http://search.babylon.com/?af=110393&babsrc=adbartrp&mntrid=1044da26000000000000001d60032d43&q=" removed from keyword.url
    Prefs.js: "Search" removed from browser.search.defaultenginename
    Prefs.js: "Search" removed from browser.search.selectedEngine
    Prefs.js: "http://google.atcomet.com/m/" removed from browser.startup.homepage
    Prefs.js: "[Você precisa estar registrado e conectado para ver este link.] removed from browser.startup.homepage
    Prefs.js: "search" removed from backup.old.browser.search.selectedEngine
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\searchplugin folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\modules folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\META-INF folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\defaults folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\components folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\chrome folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\META-INF folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\imgs\flgs folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\imgs folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\images folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\searchplugin folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\modules folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\META-INF folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\defaults folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\components folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\chrome folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\defaults\preferences folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\defaults folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\components folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\502bc7951e9ab@502bc7951e9e4.info\content folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\502bc7951e9ab@502bc7951e9e4.info folder moved successfully.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged folder moved successfully.
    File E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}\Setup\bin\PandaSecurityTb_2.0.0.9\$ not found.
    E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\FireFox\Profiles\z7m80cxu.default\searchplugins\funmoods.xml moved successfully.
    E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\4SHAREDCOPYLINKS.XPI moved successfully.
    File E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\FFXTLBR@FUNMOODS.COM not found.
    Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4DE0953E-490E-4D6F-BDDA-0516C372F3AF}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4DE0953E-490E-4D6F-BDDA-0516C372F3AF}\ deleted successfully.
    Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{742E70CF-7770-412d-86CB-230B322E807C} deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{742E70CF-7770-412d-86CB-230B322E807C}\ deleted successfully.
    Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\Beijing Elex Technology Co., Ltd) not found.
    Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.
    Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\ebBrowser\"{21FA44EF-376D-4D53-9B0F-8A89D3229068}"\ not found.
    Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\ebBrowser\"{724D43A0-0D85-11D4-9908-00400523E39A}"\ not found.
    Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:protector.dll deleted successfully.
    [Registry - Additional Scans - Safe List]
    Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\\"57650:TCP" not found.
    Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\\"57650:UDP" not found.
    Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\\"57650:TCP" not found.
    Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\\"57650:UDP" not found.
    [Files/Folders - Created Within 30 Days]
    E:\WINDOWS\System32\v9-toolbar.dll moved successfully.
    [Files/Folders - Modified Within 30 Days]
    E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx moved successfully.
    [Files - No Company Name]
    File E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx not found!
    File not found!
    Restore point Set: OTS Restore Point (0)
    < End of fix log >
    OTS by OldTimer - Version 3.1.47.2 fix logfile created on 09112012_155624

    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Ter Set 11, 2012 4:33 pm

    Boa Tarde! CleiaMD

    |- O computador está limpo. Very Happy

    -/-

    |- Caso esteja tudo Ok,apague seus Pontos de restauração.
    |- Abra a ferramenta OTL.

    :COMMANDS
    [CLEARALLRESTOREPOINTS]
    [reboot]
    |- Rode este script.
    |- Cole as informações que estão no Código,para o campo "Exames Personalizados Correções".
    |- Clique em Consertar.
    |- Ps: Haverá reboot! <- Aguarde!
    |- Abra,novamente,a ferramenta OTL -> Clique em Limpeza. <- Confirme!
    |- O computador irá reiniciar!

    -/-

    |- Nada mais à realizar! Tudo Ok?

    Abs!

    CleiaMD
    Iniciante
    Iniciante

    Mensagens : 9
    Data de inscrição : 05/09/2012

    Re: Computador lento

    Mensagem por CleiaMD em Qua Set 12, 2012 11:09 am

    Oi joram

    Está tudo ok sim! cheers

    Obrigada pela ajuda!
    Meu filho não encontra-se no momento,mas pediu-me que lhe mande um forte abraço.

    De minha parte,espero que continue esse trabalho voluntarioso e útil.

    Agradecida por tudo e um forte abraço. Smile

    joram
    Administrador Fundador
    Administrador Fundador

    Mensagens : 608
    Data de inscrição : 14/08/2012
    Idade : 63
    Localização : Rio de Janeiro

    Re: Computador lento

    Mensagem por joram em Qua Set 12, 2012 11:16 am

    CASO RESOLVIDO!

    Desejando nova análise para este computador,abra novo tópico e relate o problema!

    Conteúdo patrocinado

    Re: Computador lento

    Mensagem por Conteúdo patrocinado Hoje à(s) 12:56 pm


      Data/hora atual: Sex Dez 02, 2016 12:56 pm