PC lento para navegar na web, log para analise.

Log para analise [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Passei o AdwCleaner sexta-feira.


# AdwCleaner v3.000 - Report created 23/08/2013 at 12:01:25
# Updated 20/08/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : f002929 - FUN0126
# Running from : C:\Documents and Settings\f002929\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : DatamngrCoordinator

***** [ Files / Folders ] *****

File Found : C:\Arquivos de programas\Mozilla Firefox\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
File Found : C:\Arquivos de programas\Mozilla Firefox\searchplugins\Search_Results.xml
Folder Found C:\Arquivos de programas\Search Results Toolbar
Folder Found C:\Documents and Settings\All Users\Dados de aplicativos\Babylon
Folder Found C:\Documents and Settings\All Users\Dados de aplicativos\boost_interprocess
Folder Found C:\Documents and Settings\f002929\Configurações locais\Dados de aplicativos\Babylon
Folder Found C:\Documents and Settings\f002929\Dados de aplicativos\Babylon

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\ilivid
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Key Found : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Key Found : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Key Found : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Found : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Found : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\iLividSRTB
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Results Toolbar
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v12.0 (pt-BR)

[ File : C:\Documents and Settings\f002929\Dados de aplicativos\Mozilla\Firefox\Profiles\vqz96apn.default\prefs.js ]

Line Found : user_pref("browser.search.defaultenginename", "Search Results");
Line Found : user_pref("browser.search.order.1", "Search Results");
Line Found : user_pref("browser.search.selectedEngine", "Search Results");
Line Found : user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"jqs@sun.com\":{\"descriptor\":\"C:\\\\Arquivos de programas\\\\Java\\\\jre6\\\\lib\\\\deploy\\\\jqs\\\\ff\",\"mtime[...]
Line Found : user_pref("keyword.URL", "hxxp://dts.search-results.com/sr?src=ffb&gct=ds&appid=390&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=0611529200254755&o=APN10645&q=");

*************************

AdwCleaner[R0].txt - [3746 octets] - [23/08/2013 12:01:25]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [3806 octets] ##########


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.4 (08.22.2013:1)
OS: Microsoft Windows XP x86
Ran by f002929 on 26/08/2013 at  8:37:40,87
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\f002929\appdata\locallow\datamngr"





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26/08/2013 at  8:41:16,68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Bom Dia! Edvan

|- Cole este script em ZHPFix.

M3 - MFPP: Plugins - [f002929] -- C:\Arquivos de programas\Mozilla FireFox\searchplugins\yahoo-br.xml  =>Toolbar.Yahoo
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Arquivos de programas\Alwil Software\Avast5\aswWebRepIE.dll  =>Toolbar.Avast
O3 - Toolbar: avast! WebRep - [HKLM]{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Arquivos de programas\Alwil Software\Avast5\aswWebRepIE.dll  =>Toolbar.Avast
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Arquivos de programas\Google\Google Toolbar\GoogleToolbar_32.dll  =>Toolbar.Google
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Chave orfã
O4 - GS\Desktop: My Photo Creations.lnk . (...)  -- C:\Arquivos de programas\My Photo Creations (DATAPHOTO COM DE FOTOGRAFIAS LTDA Edition)\MyPhotoCreations.exe (.not file.)
O43 - CFD: 23/08/2013 - 12:01:17 - [0,021] ----D C:\Documents and Settings\All Users\Dados de aplicativos\Datamngr  =>PUP.Datamngr
O45 - LFCP:[MD5.FA7D7A89FCEAA0D0D98A6D8C31939D8C] - 23/08/2013 - 11:52:44 ---A- - C:\WINDOWS\Prefetch\DATAMNGRCOORDINATOR.EXE-042D3BD5.pf  =>PUP.Datamngr
O45 - LFCP:[MD5.DFC69C1B08D6867CA340850B0E60662D] - 23/08/2013 - 11:55:04 ---A- - C:\WINDOWS\Prefetch\DATAMN~2.EXE-273BBAE7.pf   
O45 - LFCP:[MD5.5D9ED1ABC27EB1EE44E0AEE860864325] - 23/08/2013 - 11:58:46 ---A- - C:\WINDOWS\Prefetch\DATAMNGRUI.EXE-0D0CEDA9.pf  =>PUP.Datamngr  
[MD5.D96005982CB221D50DDF32C476DF0F68] [WIS][26/10/2011] (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Windows\Installer\2922d9.msi   [24064]  =>Toolbar.Google

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}]   =>Toolbar.Avast^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]   =>Toolbar.Avast
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]   =>Toolbar.Avast
[HKLM\Software\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]   =>Toolbar.Avast
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}   =>Toolbar.Avast^
C:\Arquivos de programas\Mozilla FireFox\searchplugins\yahoo-br.xml   =>Toolbar.Yahoo^
C:\Arquivos de programas\Alwil Software\Avast5\aswWebRepIE.dll   =>Toolbar.Avast^
C:\Arquivos de programas\Google\Google Toolbar\GoogleToolbar_32.dll   =>Toolbar.Google^
C:\Windows\Installer\2922d9.msi   =>Toolbar.Google^
C:\Documents and Settings\All Users\Dados de aplicativos\Datamngr   =>PUP.Datamngr^
C:\WINDOWS\Prefetch\DATAMNGRCOORDINATOR.EXE-042D3BD5.pf   =>PUP.Datamngr^
C:\WINDOWS\Prefetch\DATAMNGRUI.EXE-0D0CEDA9.pf   =>PUP.Datamngr^

firewallraz
emptyclsid
emptytemp
proxyfix

ctffix

|- Poste o relatório!

Abs!

Rapport de ZHPFix 2013.7.20.5 par Nicolas Coolman, Update du 20/07/2013
Fichier d'export Registre :
Run by f002929 at 26/08/2013 09:24:53
High Elevated Privileges : OK
Windows XP Professional Service Pack 3 (Build 2600)

Recycle Files Deleted

========== Memory Module ==========
DELETE on Reboot Memory Module: C:\Arquivos de programas\Alwil Software\Avast5\aswWebRepIE.dll

========== Registry Key ==========
DELETED Key: CLSID BHO: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
DELETED  Key: CLSID: [HKLM\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
DELETED  Key: CLSID: [HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}]
NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
NOT FOUND Key: HKLM\Software\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
ctffixCTFMon already disabled

========== Registry Value ==========
DELETED Toolbar: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
DELETED Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F}
NOT FOUND [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
DELETED FirewallRaz (SP) : %windir%\system32\sessmgr.exe
DELETED FirewallRaz (SP) : %windir%\Network Diagnostic\xpnetdiag.exe
DELETED FirewallRaz (DP) : %windir%\system32\sessmgr.exe
DELETED FirewallRaz (DP) : %windir%\Network Diagnostic\xpnetdiag.exe
No Value in Firewall Exception Register Key (FirewallRaz)
ProxyFix : Proxy killed successfully
DELETED ProxyServer Value
DELETED ProxyEnable Value
DELETED EnableHttp1_1 Value
DELETED ProxyHttp1.1 Value
DELETED ProxyOverride Value

========== Repertory ==========
No Empty CLSID Directories
DELETED Window Temporary

========== File ==========
DELETED File: c:\arquivos de programas\mozilla firefox\searchplugins\yahoo-br.xml
DELETE on Reboot c:\arquivos de programas\alwil software\avast5\aswwebrepie.dll
DELETED File: c:\arquivos de programas\google\google toolbar\googletoolbar_32.dll
NOT FOUND File: c:\documents and settings\f002929\desktop\my photo creations.lnk
NOT FOUND File: c:\arquivos de programas\my photo creations (dataphoto com de fotografias ltda edition)\myphotocreations.exe
DELETED File: c:\windows\prefetch\datamngrcoordinator.exe-042d3bd5.pf
DELETED File: c:\windows\prefetch\datamn~2.exe-273bbae7.pf
DELETED File: c:\windows\prefetch\datamngrui.exe-0d0ceda9.pf
DELETED File: C:\Windows\Installer\2922d9.msi
DELETED File*: c:\windows\installer\2922d9.msi
NOT FOUND Folder/File: c:\arquivos de programas\mozilla firefox\searchplugins\yahoo-br.xml
NOT FOUND Folder/File: c:\arquivos de programas\google\google toolbar\googletoolbar_32.dll
NOT FOUND Folder/File: c:\windows\installer\2922d9.msi
NOT FOUND Folder/File: c:\documents and settings\all users\dados de aplicativos\datamngr
NOT FOUND Folder/File: c:\windows\prefetch\datamngrcoordinator.exe-042d3bd5.pf
NOT FOUND Folder/File: c:\windows\prefetch\datamngrui.exe-0d0ceda9.pf
DELETED Window Temporary


========== Summary ==========
1 : Memory Module
8 : Registry Key
14 : Registry Value
2 : Repertory
17 : File


End of clean in 00mn 15s

========== Report File ==========
C:\ZHP\ZHPFix[R1].txt - 26/08/2013 09:24:55 [3450]

Bom Dia! Edvan

|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by Smeenk )

|- Ou aqui! < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem][Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >

|- Salve-o no desktop!
|- Desabilite seu antivírus!
|- Para Windows 7,execute zoek.exe como administrador.

hijackthis;
skipfix-iedefaults;
autoclean; 
emptyalltemp;

|- Copie e cole estas informações,em vermelho,no campo da ferramenta.
|- Clique "Run Script".

Zoek.exe is running now.
Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

|- Surgirão estas informações,pedindo-lhe que aguarde o relatório.

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Aceite e/ou confirme o reboot!

zoek.hta failed by unknown error.
Restart computer, and try again.

|- Ps: Ao obter algum erro,reinicie o PC e execute,novamente,a ferramenta.
|- Poste o relatório,que estará em C:\zoek-results.txt <<

Abs!

Zoek.exe Version 4.0.0.4 Updated 19-08-2013
Tool run by f002929 on 26/08/2013 at  9:43:35,65.
Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\f002929\Desktop\zoek.exe [Script inserted]

==== System Restore Info ======================

26/08/2013 09:44:23 Zoek.exe System Restore Point Created Succesfully.

==== Creating Sample_082013_0946.zip ======================
 
Copied file C:\Documents and Settings\f002929\Dados de aplicativos\unins000.exe to sample\unins000.exe
sample\unins000.exe renamed to AD6E810B9CE3D8C0C1FF0203C68C6FA6

C:\Documents and Settings\All Users\Desktop\sample_082013_0946.zip created successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

ProfilePath: C:\Documents and Settings\f002929\Dados de aplicativos\Mozilla\Firefox\Profiles\vqz96apn.default

user.js not found
---- Lines yahoo removed from prefs.js ----

user_pref("extensions.wrc.SearchRules.yahoo.com.style", ".WRCN {display:none} .sm-hd .WRCN, .sm-links .WRCN, .res h3 > .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
user_pref("extensions.wrc.SearchRules.yahoo.com.url", "^http(s)?\\:\\/\\/((.)+\\.)?search\\.yahoo\\.com\\/(.)*");

---- Lines yahoo modified from prefs.js ----


---- FireFox user.js and prefs.js backups ----

prefs_082013_0946_.backup

==== Deleting Files \ Folders ======================

"C:\WINDOWS\002703_.tmp" deleted
"C:\WINDOWS\SET25.tmp" deleted
"C:\WINDOWS\SET3.tmp" deleted
"C:\WINDOWS\SET4.tmp" deleted
"C:\WINDOWS\SET8.tmp" deleted
"C:\Documents and Settings\f002929\Dados de aplicativos\unins000.exe" deleted
"C:\found.000" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Documents and Settings\f002929\Dados de aplicativos\Mozilla\Firefox\Profiles\vqz96apn.default
- Java Quick Starter - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ff
- avast Online Security - C:\Arquivos de programas\Alwil Software\Avast5\WebRep\FF

==== Firefox Plugins ======================

Profilepath: C:\Documents and Settings\f002929\Dados de aplicativos\Mozilla\Firefox\Profiles\vqz96apn.default
101700E93EB905992B518256CB441829    - C:\Arquivos de programas\Google\Update\1.3.21.153\npGoogleUpdate3.dll -    Google Update
3306893C1944EAA156E9173C5A1A080E    - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll -    Shockwave Flash
E5248F9B46D8EB031414F9A585E1F321    - C:\Arquivos de programas\Java\jre6\bin\new_plugin\npdeployJava1.dll -    Java Deployment Toolkit 6.0.200.2
944B4D7B4686E17FD49C7A6675AA7A89    - C:\Arquivos de programas\Java\jre6\bin\new_plugin\npjp2.dll -    Java(TM) Platform SE 6 U20
CF4ABE599858E10EEB911E16FBCFD87D    - C:\Arquivos de programas\Windows Media Player\npdrmv2.dll -    Microsoft® DRM
02A4A41FAC9BF96155B3E8068D1DF4B6    - C:\Arquivos de programas\Windows Media Player\npwmsdrm.dll -    Microsoft® DRM
76E34EA1089E92709C5725407B565DA1    - C:\Arquivos de programas\Windows Media Player\npdsplay.dll -    Windows Media Player Plug-in Dynamic Link Library
04AF8BC83A89D9B71F7E0BCAF9FDD768    - C:\Arquivos de programas\Adobe\Reader 8.0\Reader\browser\nppdf32.dll -    Adobe Acrobat


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com.br/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com.br/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{25C889FD-5E60-490C-AD4D-E287AB47FEF2} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_pt-BRBR455"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2586132527-314635491-3328972525-21414\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully
HKEY_USERS\S-1-5-21-2586132527-314635491-3328972525-21414\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully

==== Deleting CLSID Registry Values ======================


==== HijackThis Entries ======================

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O2 - BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Arquivos de programas\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\ARQUIVOS DE PROGRAMAS\GBPLUGIN\gbieh.dll
O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Arquivos de programas\GbPlugin\gbiehcef.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Arquivos de programas\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Arquivos de programas\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [avast5] C:\ARQUIV~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Arquivos de programas\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Arquivos de programas\Arquivos comuns\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Arquivos de programas\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Arquivos de programas\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportar para o Microsoft Excel - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.microsoft.com/intl/br/access/allinone.asp
O15 - Trusted Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O20 - Winlogon Notify:  GbPluginBb - C:\Arquivos de programas\GbPlugin\gbieh.dll
O20 - Winlogon Notify:  GbPluginCef - C:\Arquivos de programas\GbPlugin\gbiehCef.dll
O22 - SharedTaskScheduler: Pré-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon de cache de categorias de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Arquivos de programas\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\ARQUIV~1\GbPlugin\GbpSv.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Arquivos de programas\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Arquivos de programas\Java\jre6\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Arquivos de programas\Mozilla Maintenance Service\maintenanceservice.exe

==== Empty IE Cache ======================

C:\Documents and Settings\Administrador\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\Default User\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\f001869\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\f002929\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\Fun0126\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Configurações locais\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Configurações locais\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\f002929\CONFIG~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== EOF on 26/08/2013 at  9:49:38,15 ======================

Bom Dia! Edvan

|- Caso,ainda,esteja lenta a navegação,utilize a ferramenta CIR.

-/-

|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >
|- Extraia o conteúdo e execute o arquivo "CIntRep.exe".

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

|- Marque,apenas,as checkbox:
 
Reset Internet Protocol (TCP/IP)

Repair Winsock (Reset Catalog)

Renew Internet Connections

Flush DNS Resolver Cache

Restore the default hosts file
 
|- Clique "Go!".
|- Ao concluir,reinicie o computador!
|- À seguir,acesse a pasta "Complete Internet Repair" >> "Logging".
|- Duplo-clique em "CIntRep.log".
|- Poste o log resultante!

A+

Pode passar o Delfix?



                                            ./
                                          (o o)
--------------------------------------oOOo-(_)-oOOo--------------------------------------
[26/08/2013 10:00:28] Resetting all TCP/IP Interfaces, Please wait.....
-----------------------------------------------------------------------------------------
[26/08/2013 10:00:34] TCP/IP Stack reset successful.
[26/08/2013 10:00:34] TCP/IP Reset log located @ [C:\Documents and Settings\f002929\Meus documentos\Downloads\cintrep\cintrep\Logging\CIRReset.log]
[26/08/2013 10:00:35] TCP/IP interfaces reset successful.
[26/08/2013 10:00:36] The TCP/IP v6 protocol might not be installed.
[26/08/2013 10:00:36] Click on 'Commands' then 'Install IP6 protocol' to install TCP/IP v6.
[26/08/2013 10:00:36] You may need to restart your computer for the settings to take effect.
[26/08/2013 10:00:36] Finished resetting the Internet Protocol (TCP/IP).

-----------------------------------------------------------------------------------------
[26/08/2013 10:00:36] Attempting to reset Winsock catalog, Please wait.....
-----------------------------------------------------------------------------------------
[26/08/2013 10:00:39] Successfully reset the Winsock Catalog.
[26/08/2013 10:00:39] Finished repairing Winsock

-----------------------------------------------------------------------------------------
[26/08/2013 10:00:39] Releasing TCP/IP connections, Please wait.....
-----------------------------------------------------------------------------------------
[26/08/2013 10:00:39] Successfully released TCP/IP connections.

-----------------------------------------------------------------------------------------
[26/08/2013 10:00:39] Renewing TCP/IP connections, Please wait.....
-----------------------------------------------------------------------------------------
[26/08/2013 10:00:42] Successfully renewed TCP/IP adapters.

-----------------------------------------------------------------------------------------
[26/08/2013 10:00:42] Configuring the Windows Event Log Service, Please wait.....
-----------------------------------------------------------------------------------------
[26/08/2013 10:00:42] Windows Event Log Service Configured.
[26/08/2013 10:00:42] Starting the Windows Event Log Service.....
[26/08/2013 10:00:42] Windows Event Log Service Started Successfully.

-----------------------------------------------------------------------------------------
[26/08/2013 10:00:43] Flushing DNS Resolver Cache, Please wait.....
-----------------------------------------------------------------------------------------
[26/08/2013 10:00:43] Successfully flushed DNS Resolver Cache.
[26/08/2013 10:00:43] Refreshing all DHCP leases and re-registering DNS names, Please wait.....
[26/08/2013 10:00:43] Registration of the DNS resource records has been initiated.
[26/08/2013 10:00:43] Note: Any errors will be reported in the 'Event Viewer' in about 15 minutes.
[26/08/2013 10:00:43] Note: Click on 'File' and then 'Event Viewer...' to open the Event Viewer.

-----------------------------------------------------------------------------------------
[26/08/2013 10:00:43] Restoring the default Windows HOSTS file, Please wait.....
-----------------------------------------------------------------------------------------
[26/08/2013 10:00:43] Writing data to the HOSTS file.....
[26/08/2013 10:00:43] HOSTS file created successfully.

-----------------------------------------------------------------------------------------
[26/08/2013 10:00:43] You will need to reboot your computer before the settings will take effect.
-----------------------------------------------------------------------------------------
[26/08/2013 10:00:45] Your computer is restarting now.....

-----------------------------------------------------------------------------------------

Bom Dia! Edvan

|- Baixe: |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| ( ... de Xplode )

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

|- Estando na página,clique na seta verde para o download.
|- Salve-a em um local conveniente! ( desktop! )
|- Feche aplicativos que estejam abertos.

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

|- Execute-a!
|- Com as 3 checkbox marcadas!
|- Clique "Run".
|- Poste o relatório!
|- Tudo Ok?

Abs!

Tudo resolvido..

# DelFix v10.4 - Logfile created 26/08/2013 at 10:07:23
# Updated 19/07/2013 by Xplode
# Username : f002929 - FUN0126
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\ZHP
Deleted : C:\Arquivos de programas\ZHPDiag
Deleted : C:\Arquivos de programas\Hijackthis
Deleted : C:\PhysicalDisk0_MBR.bin
Deleted : C:\zoek-results.log
Deleted : C:\Documents and Settings\f002929\Desktop\AdwCleaner[R0].txt
Deleted : C:\Documents and Settings\f002929\Desktop\JRT.exe
Deleted : C:\Documents and Settings\f002929\Desktop\JRT.txt
Deleted : C:\Documents and Settings\f002929\Desktop\ZHPDiag.txt
Deleted : C:\Documents and Settings\f002929\Desktop\ZHPDiag2.exe
Deleted : C:\Documents and Settings\f002929\Desktop\ZHPFixReport.txt
Deleted : C:\Documents and Settings\f002929\Desktop\zoek.exe
Deleted : C:\Documents and Settings\f002929\Desktop\zoek.zip
Deleted : C:\Documents and Settings\All Users\Desktop\MBRCheck.lnk
Deleted : C:\Documents and Settings\All Users\Desktop\ZHPDiag.lnk
Deleted : C:\Documents and Settings\All Users\Desktop\ZHPFix.lnk
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Cleaning system restore ...

Deleted : RP #371 [Ponto de verificação do sistema | 05/27/2013 12:39:19]
Deleted : RP #372 [Ponto de verificação do sistema | 05/28/2013 14:47:18]
Deleted : RP #373 [Ponto de verificação do sistema | 05/29/2013 15:14:14]
Deleted : RP #374 [Ponto de verificação do sistema | 05/31/2013 16:10:25]
Deleted : RP #375 [Ponto de verificação do sistema | 06/03/2013 11:42:46]
Deleted : RP #376 [Ponto de verificação do sistema | 06/04/2013 15:13:57]
Deleted : RP #377 [Ponto de verificação do sistema | 06/05/2013 15:16:44]
Deleted : RP #378 [Ponto de verificação do sistema | 06/07/2013 15:16:59]
Deleted : RP #379 [Ponto de verificação do sistema | 06/10/2013 11:11:47]
Deleted : RP #380 [Ponto de verificação do sistema | 06/11/2013 13:49:51]
Deleted : RP #381 [Ponto de verificação do sistema | 06/12/2013 15:12:57]
Deleted : RP #382 [Software Distribution Service 3.0 | 06/13/2013 11:02:36]
Deleted : RP #383 [Ponto de verificação do sistema | 06/14/2013 15:15:53]
Deleted : RP #384 [Ponto de verificação do sistema | 06/17/2013 13:42:06]
Deleted : RP #385 [Ponto de verificação do sistema | 06/18/2013 14:42:18]
Deleted : RP #386 [Ponto de verificação do sistema | 06/19/2013 15:11:07]
Deleted : RP #387 [Ponto de verificação do sistema | 06/25/2013 11:35:12]
Deleted : RP #388 [Ponto de verificação do sistema | 06/26/2013 12:52:03]
Deleted : RP #389 [Ponto de verificação do sistema | 06/27/2013 15:14:36]
Deleted : RP #390 [Ponto de verificação do sistema | 06/28/2013 15:48:44]
Deleted : RP #391 [Ponto de verificação do sistema | 07/01/2013 13:30:01]
Deleted : RP #392 [Ponto de verificação do sistema | 07/29/2013 11:56:22]
Deleted : RP #393 [Software Distribution Service 3.0 | 07/30/2013 11:19:40]
Deleted : RP #394 [Ponto de verificação do sistema | 07/31/2013 17:29:55]
Deleted : RP #395 [Ponto de verificação do sistema | 08/02/2013 13:28:46]
Deleted : RP #396 [Ponto de verificação do sistema | 08/05/2013 15:17:54]
Deleted : RP #397 [Ponto de verificação do sistema | 08/06/2013 15:36:34]
Deleted : RP #398 [Ponto de verificação do sistema | 08/08/2013 15:09:03]
Deleted : RP #399 [Ponto de verificação do sistema | 08/12/2013 11:18:00]
Deleted : RP #400 [Ponto de verificação do sistema | 08/13/2013 15:14:23]
Deleted : RP #401 [Ponto de verificação do sistema | 08/14/2013 15:16:20]
Deleted : RP #402 [Ponto de verificação do sistema | 08/15/2013 16:00:57]
Deleted : RP #403 [Software Distribution Service 3.0 | 08/16/2013 10:55:46]
Deleted : RP #404 [Ponto de verificação do sistema | 08/19/2013 13:36:54]
Deleted : RP #405 [Ponto de verificação do sistema | 08/20/2013 15:24:16]
Deleted : RP #406 [Ponto de verificação do sistema | 08/22/2013 14:35:21]
Deleted : RP #407 [Removed EasySaver B9.0610.1  | 08/23/2013 14:50:04]
Deleted : RP #408 [Removido My Photo Creations (DATAPHOTO COM DE FOTOGRAFIAS LTDA Edition) | 08/23/2013 14:54:48]
Deleted : RP #409 [Removed MrvlUsgTracking | 08/23/2013 14:56:09]
Deleted : RP #410 [zoek.exe restore point | 08/26/2013 12:44:23]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########

CASO RESOLVIDO!

Necessitando novo auxílio para este computador,basta abrir "[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]" e relatar o problema.