Portal
Oi joram
Meu computador apresenta alguma lentidão.
Será que é vírus?
Agradecida!
Meu computador apresenta alguma lentidão.
Será que é vírus?
Agradecida!
Procurar
Palavras-chaves
Últimos assuntos
Parceiros
Os membros mais mencionados
| Nenhum usuário |
Top dos mais postadores
2 participantes
Computador lento
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
Bom Dia! CleiaMD
|- Bem Vinda ao Fórum SecSecurity.
|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... par Nicolas Coolman )
|- Salve-o no desktop!
|- Para Windows Vista ou 7,clique direito e execute o arquivo como administrador.
|- Aguarde a conclusão do scan e clique em "Copier". <- Aguarde!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Além do relatório,teremos no desktop: ZHP_uninstall, MBRCheck, ZHPDiag, ZHPFix
|- Poste e/ou cole aqui,o link que foi gerado!
Abs!
|- Bem Vinda ao Fórum SecSecurity.
|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... par Nicolas Coolman )
|- Salve-o no desktop!
|- Para Windows Vista ou 7,clique direito e execute o arquivo como administrador.
|- Aguarde a conclusão do scan e clique em "Copier". <- Aguarde!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Além do relatório,teremos no desktop: ZHP_uninstall, MBRCheck, ZHPDiag, ZHPFix
|- Poste e/ou cole aqui,o link que foi gerado!
Abs!
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
Oi joram
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Primeiro veio o relatório e depois surgiu este endereço!
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Primeiro veio o relatório e depois surgiu este endereço!
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
Bom Dia! CleiaMD
######
MSIE: Internet Explorer v7.0.5730.13
######
|- Seu navegador IE está desatualizado!
|- Seu computador,segundo o relatório,é direcionado à jogos. Correto?
-/-
|- Feche programas/pastas que estejam abertos.
|- Feche,também,o navegador!
|- Para Windows Vista,desabilite a [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Para Windows Vista ou 7,clique direito em ZHPFix.exe e execute-o como administrador.
|- Selecione e copie estas informações,que estão em vermelho,para o "Bloco de Notas".
|- Minimize o Bloco de Notas.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Clique no menu,"Paste ClipBoard".
|- Clique em "GO" -> Oui.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Ps: Temos,àcima,sequência de imagens para maior exclarecimento.
|- Poste o relatório: E:\ZHP\ZHPFix[R1].txt
Abs!
######
MSIE: Internet Explorer v7.0.5730.13
######
|- Seu navegador IE está desatualizado!
|- Seu computador,segundo o relatório,é direcionado à jogos. Correto?
-/-
|- Feche programas/pastas que estejam abertos.
|- Feche,também,o navegador!
|- Para Windows Vista,desabilite a [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Para Windows Vista ou 7,clique direito em ZHPFix.exe e execute-o como administrador.
|- Selecione e copie estas informações,que estão em vermelho,para o "Bloco de Notas".
|- Estando com o Bloco de Notas aberto,acione os atalhos: "Ctrl+A" -> "Ctrl+C"[MD5.2096B76B1A5D4E5CE2BCB19C0FADA911] - (...) -- E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\OptimizerPro1.exe [210944] [PID.]
[MD5.00000000000000000000000000000000] [APT] [OptimizerPro1UpdaterTask{89B1254A-DE9D-4ED4-8A5D-619833295552}] (...) -- E:\Documents and Settings\Matheus\Dados de aplicativos\OptimizerPro1\OptimizerPro1.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [SymInstallStub] (...) -- E:\DOCUME~1\Matheus\CONFIG~1\Temp\Adobe\Shockwave 11\SymInstallStub.exe (.not file.)
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O2 - BHO: V9-Helper Loader - {4DE0953E-490E-4D6F-BDDA-0516C372F3AF} . (.Beijing Elex Technology Co., Ltd - TODO: <File description>.) -- E:\WINDOWS\system32\v9loader.dll
O3 - Toolbar: V9-ToolBar - [HKLM]{742E70CF-7770-412d-86CB-230B322E807C} . (.FOF_SILENT Beijing Elex Technology Co., Lt - V9-ToolBar.) -- E:\WINDOWS\system32\v9-toolbar.dll
O3 - Toolbar: (no name) - [HKLM]{98889811-442D-49dd-99D7-DC866BE87DBC} . (...) -- (.not file.) => Infection BT (Toolbar.Babylon)
O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} Orphean Key
O3 - Toolbar: (no name) - [HKLM]{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} . (...) -- (.not file.)
O4 - Global Startup: E:\Documents And Settings\Matheus\Desktop\Continue SweetIM Installation.lnk . (...) -- E:\Documents and Settings\Matheus\Configurações locais\Temp\Shortcut_SweetImSetup.exe (.not file.)
O4 - Global Startup: E:\Documents And Settings\Matheus\Desktop\Continue SweetIM Installation.lnk . (...) -- E:\Documents and Settings\Matheus\Configurações locais\Temp\Shortcut_SweetImSetup.exe (.not file.)
O42 - Logiciel: OptimizerPro1 Updater - (.Unknown owner.) [HKLM] -- OptimizerPro1
O42 - Logiciel: V9 HomeTool - (.ELEX Technology.) [HKLM] -- V9Software
O43 - CFD: 16/8/2012 - 15:38:43 - [1,425] ----D E:\Arquivos de programas\v9Soft
O43 - CFD: 4/12/2011 - 13:12:21 - [6,311] ----D E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Babylon
O43 - CFD: 7/4/2012 - 11:09:45 - [0,063] ----D E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Conduit
O47 - AAKE:Key Export SP - "E:\Documents and Settings\Matheus\Meus documentos\Downloads\Facemoods (1).exe" [Enabled] .(...) -- E:\Documents and Settings\Matheus\Meus documentos\Downloads\Facemoods (1).exe (.not file.)
O47 - AAKE:Key Export SP - "E:\Level Up! Games\Combat Arms\CombatArms.exe" [Enabled] .(...) -- E:\Level Up! Games\Combat Arms\CombatArms.exe (.not file.)
O47 - AAKE:Key Export SP - "E:\Level Up! Games\Combat Arms\Engine.exe" [Enabled] .(...) -- E:\Level Up! Games\Combat Arms\Engine.exe (.not file.)
O47 - AAKE:Key Export DP - "E:\Level Up! Games\Combat Arms\CombatArms.exe" [Enabled] .(...) -- E:\Level Up! Games\Combat Arms\CombatArms.exe (.not file.)
O47 - AAKE:Key Export DP - "E:\Level Up! Games\Combat Arms\Engine.exe" [Enabled] .(...) -- E:\Level Up! Games\Combat Arms\Engine.exe (.not file.)
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] => Toolbar.Babylon
[HKLM\Software\360Safe] => Infection Diverse (Lozavita.Troj)
[HKLM\Software\Classes\escort.escortIEPane]
[HKLM\Software\Classes\escort.escortIEPane.1]
[HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] => Infection BT (Adware.Agent)
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] => Infection BT (Adware.MyWebSearch)
[HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] => Infection BT (Toolbar.Babylon)
[HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] => Infection BT (Toolbar.Babylon)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}] => Infection BT (Toolbar.Babylon)
[HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] => Infection BT (Toolbar.Babylon)
[HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] => Infection BT (Toolbar.Babylon)
[HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] => Infection BT (Toolbar.Babylon)
E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Conduit => Toolbar.Conduit
E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Babylon
proxyfix
emptytemp
emptyflash
firewallraz
sysrestore
|- Minimize o Bloco de Notas.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Clique no menu,"Paste ClipBoard".
|- Clique em "GO" -> Oui.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Ps: Temos,àcima,sequência de imagens para maior exclarecimento.
|- Poste o relatório: E:\ZHP\ZHPFix[R1].txt
Abs!
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
Oi joram!!
Agradeço sua ajuda e o computador melhorou muito.
Acontece que meu filho Matheus não quiz remover a barra de ferramentas do V9,e removeu algumas linhas que estavam na relação que enviou. Sabe né,ele está acostumado a acessar alguns Fóruns e usar ferramentas de desinfecção Francesas e ficou muito feliz quando soube da existência deste Fórum e tendo essa oportunidade com você.
Log do ZHPFix
Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
Fichier d'export Registre : E:\ZHP\ZHPExportRegistry-6-9-2012-08-53-05.txt
Run by Matheus at 6/9/2012 08:53:05
Windows XP Professional Service Pack 3 (Build 2600)
Web site : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Web site : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
========== Software ==========
NOT FOUND Uninstall Process: e:\documents and settings\all users\dados de aplicativos\optimizerpro1\optimizerpro1.exe
========== Memory Process ==========
DELETE on Reboot Memory Process: E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\OptimizerPro1.exe
========== Registry Key ==========
DELETED [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OptimizerPro1]
NOT FOUND Key: CLSID BHO: {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
DELETED Key: SearchScopes :{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
DELETED Key*: HKLM\Software\360Safe
DELETED Key*: HKLM\Software\Classes\escort.escortIEPane
DELETED Key*: HKLM\Software\Classes\escort.escortIEPane.1
DELETED Key*: HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
DELETED Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
DELETED Key*: HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
DELETED Key*: HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}
DELETED Key*: HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
DELETED Key*: HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
DELETED Key*: HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
========== Registry Value ==========
DELETED Toolbar: {98889811-442D-49dd-99D7-DC866BE87DBC}
DELETED Toolbar: {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
DELETED AAKE KeyValue: E:\Documents and Settings\Matheus\Meus documentos\Downloads\Facemoods (1).exe
DELETED AAKE KeyValue: E:\Level Up! Games\Combat Arms\CombatArms.exe
DELETED AAKE KeyValue: E:\Level Up! Games\Combat Arms\Engine.exe
ProxyFix : Proxy killed successfully
DELETED ProxyServer Value
DELETED ProxyEnable Value
DELETED EnableHttp1_1 Value
DELETED ProxyHttp1.1 Value
DELETED ProxyOverride Value
DELETED FirewallRaz (SP) : %windir%\Network Diagnostic\xpnetdiag.exe
DELETED FirewallRaz (SP) : %windir%\system32\sessmgr.exe
DELETED FirewallRaz (SP) : E:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe
DELETED FirewallRaz (SP) : E:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
DELETED FirewallRaz (SP) : E:\Arquivos de programas\MegaJogos\jre\jre\bin\javaw.exe
DELETED FirewallRaz (DP) : %windir%\Network Diagnostic\xpnetdiag.exe
DELETED FirewallRaz (DP) : %windir%\system32\sessmgr.exe
DELETED FirewallRaz (DP) : E:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe
DELETED FirewallRaz (DP) : E:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
No Value in Firewall Exception Register Key (FirewallRaz)
========== Registry Data Items ==========
REMOVED R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
REMOVED R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL
========== Repertory ==========
DELETED Folder: E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Babylon
DELETED Folder: E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Conduit
DELETED Window Temporary:
DELETED Flash Cookies:
========== File ==========
DELETED File: e:\documents and settings\matheus\desktop\continue sweetim installation.lnk
NOT FOUND File: e:\documents and settings\matheus\configurações locais\temp\shortcut_sweetimsetup.exe
NOT FOUND File: e:\documents and settings\matheus\meus documentos\downloads\facemoods (1).exe
NOT FOUND File: e:\level up! games\combat arms\combatarms.exe
NOT FOUND File: e:\level up! games\combat arms\engine.exe
NOT FOUND Folder/File: e:\documents and settings\matheus\configurações locais\dados de aplicativos\conduit
NOT FOUND Folder/File: e:\documents and settings\matheus\configurações locais\dados de aplicativos\babylon
DELETED Window Temporary:
DELETED Flash Cookies:
========== Task ==========
DELETED Task: OptimizerPro1UpdaterTask{89B1254A-DE9D-4ED4-8A5D-619833295552}
DELETED Task: SymInstallStub
========== Restoration ==========
Restore System Point created succefully
========== Summary ==========
1 : Memory Process
14 : Registry Key
21 : Registry Value
2 : Registry Data Items
4 : Repertory
9 : File
1 : Software
2 : Task
1 : Restoration
End of clean in 00mn 21s
========== Report File ==========
E:\ZHP\ZHPFix[R1].txt - 6/9/2012 08:53:05 [4724]
Agradeço sua ajuda e o computador melhorou muito.
Acontece que meu filho Matheus não quiz remover a barra de ferramentas do V9,e removeu algumas linhas que estavam na relação que enviou. Sabe né,ele está acostumado a acessar alguns Fóruns e usar ferramentas de desinfecção Francesas e ficou muito feliz quando soube da existência deste Fórum e tendo essa oportunidade com você.
Log do ZHPFix
Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
Fichier d'export Registre : E:\ZHP\ZHPExportRegistry-6-9-2012-08-53-05.txt
Run by Matheus at 6/9/2012 08:53:05
Windows XP Professional Service Pack 3 (Build 2600)
Web site : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Web site : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
========== Software ==========
NOT FOUND Uninstall Process: e:\documents and settings\all users\dados de aplicativos\optimizerpro1\optimizerpro1.exe
========== Memory Process ==========
DELETE on Reboot Memory Process: E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\OptimizerPro1.exe
========== Registry Key ==========
DELETED [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OptimizerPro1]
NOT FOUND Key: CLSID BHO: {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
DELETED Key: SearchScopes :{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
DELETED Key*: HKLM\Software\360Safe
DELETED Key*: HKLM\Software\Classes\escort.escortIEPane
DELETED Key*: HKLM\Software\Classes\escort.escortIEPane.1
DELETED Key*: HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
DELETED Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
DELETED Key*: HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
DELETED Key*: HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC}
DELETED Key*: HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
DELETED Key*: HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
DELETED Key*: HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
========== Registry Value ==========
DELETED Toolbar: {98889811-442D-49dd-99D7-DC866BE87DBC}
DELETED Toolbar: {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
DELETED AAKE KeyValue: E:\Documents and Settings\Matheus\Meus documentos\Downloads\Facemoods (1).exe
DELETED AAKE KeyValue: E:\Level Up! Games\Combat Arms\CombatArms.exe
DELETED AAKE KeyValue: E:\Level Up! Games\Combat Arms\Engine.exe
ProxyFix : Proxy killed successfully
DELETED ProxyServer Value
DELETED ProxyEnable Value
DELETED EnableHttp1_1 Value
DELETED ProxyHttp1.1 Value
DELETED ProxyOverride Value
DELETED FirewallRaz (SP) : %windir%\Network Diagnostic\xpnetdiag.exe
DELETED FirewallRaz (SP) : %windir%\system32\sessmgr.exe
DELETED FirewallRaz (SP) : E:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe
DELETED FirewallRaz (SP) : E:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
DELETED FirewallRaz (SP) : E:\Arquivos de programas\MegaJogos\jre\jre\bin\javaw.exe
DELETED FirewallRaz (DP) : %windir%\Network Diagnostic\xpnetdiag.exe
DELETED FirewallRaz (DP) : %windir%\system32\sessmgr.exe
DELETED FirewallRaz (DP) : E:\Arquivos de programas\Windows Live\Messenger\wlcsdk.exe
DELETED FirewallRaz (DP) : E:\Arquivos de programas\Windows Live\Messenger\msnmsgr.exe
No Value in Firewall Exception Register Key (FirewallRaz)
========== Registry Data Items ==========
REMOVED R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page
REMOVED R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL
========== Repertory ==========
DELETED Folder: E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Babylon
DELETED Folder: E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\Conduit
DELETED Window Temporary:
DELETED Flash Cookies:
========== File ==========
DELETED File: e:\documents and settings\matheus\desktop\continue sweetim installation.lnk
NOT FOUND File: e:\documents and settings\matheus\configurações locais\temp\shortcut_sweetimsetup.exe
NOT FOUND File: e:\documents and settings\matheus\meus documentos\downloads\facemoods (1).exe
NOT FOUND File: e:\level up! games\combat arms\combatarms.exe
NOT FOUND File: e:\level up! games\combat arms\engine.exe
NOT FOUND Folder/File: e:\documents and settings\matheus\configurações locais\dados de aplicativos\conduit
NOT FOUND Folder/File: e:\documents and settings\matheus\configurações locais\dados de aplicativos\babylon
DELETED Window Temporary:
DELETED Flash Cookies:
========== Task ==========
DELETED Task: OptimizerPro1UpdaterTask{89B1254A-DE9D-4ED4-8A5D-619833295552}
DELETED Task: SymInstallStub
========== Restoration ==========
Restore System Point created succefully
========== Summary ==========
1 : Memory Process
14 : Registry Key
21 : Registry Value
2 : Registry Data Items
4 : Repertory
9 : File
1 : Software
2 : Task
1 : Restoration
End of clean in 00mn 21s
========== Report File ==========
E:\ZHP\ZHPFix[R1].txt - 6/9/2012 08:53:05 [4724]
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
Bom Dia! CleiaMD
|- Mas...quem está executando os procedimentos é ele ou você?
-/-
|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... par Xplode )
|- Ao acessar,clique na imagem: < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >
|- Salve-o no desktop!
|- Clique direito em adwcleaner.exe,e escolha sua execução como "administrador".
|- Ps: Dê início ao scan,clicando em "Delete" ou "Suppression".
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Ao concluir,poste o relatório: C:\AdwCleaner[S1].txt
Abs!
|- Mas...quem está executando os procedimentos é ele ou você?
-/-
|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... par Xplode )
|- Ao acessar,clique na imagem: < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >
|- Salve-o no desktop!
|- Clique direito em adwcleaner.exe,e escolha sua execução como "administrador".
|- Ps: Dê início ao scan,clicando em "Delete" ou "Suppression".
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Ao concluir,poste o relatório: C:\AdwCleaner[S1].txt
Abs!
Última edição por joram em Qui Set 06, 2012 1:35 pm, editado 1 vez(es)
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
Oi joram
Fui eu que postei esse pedido de ajuda,mas é o meu filho que executa as ferramentas que você indica.
Log do AdwCleaner
# AdwCleaner v2.000 - Logfile created 09/06/2012 at 09:47:31
# Updated 30/08/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Matheus - TECKMAIL-CAFC08
# Boot Mode : Normal
# Running from : E:\Documents and Settings\Matheus\Desktop\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
Deleted on reboot : E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
File Deleted : E:\user.js
Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\boost_interprocess
Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\InstallMate
Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\Premium
***** [Registry] *****
Key Deleted : HKCU\Software\bProtector
Key Deleted : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\f
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}
Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
***** [Internet Browsers] *****
-\\ Internet Explorer v7.0.5730.13
Restored : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] --> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
-\\ Opera v12.2.1578.0
File : E:\Documents and Settings\Matheus\Dados de aplicativos\Opera\Opera\operaprefs.ini
Deleted : Home URL=hxxp://start.funmoods.com/?f=1&a=bf3&chnl=bf3&cd=2XzuyEtN2Y1L1QzutDtDtC0DyCtDtDtAtB0DyEtA0D[...]
*************************
AdwCleaner[S1].txt - [5223 octets] - [06/09/2012 09:47:31]
########## EOF - E:\AdwCleaner[S1].txt - [5283 octets] ##########
Fui eu que postei esse pedido de ajuda,mas é o meu filho que executa as ferramentas que você indica.
Log do AdwCleaner
# AdwCleaner v2.000 - Logfile created 09/06/2012 at 09:47:31
# Updated 30/08/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Matheus - TECKMAIL-CAFC08
# Boot Mode : Normal
# Running from : E:\Documents and Settings\Matheus\Desktop\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
Deleted on reboot : E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
File Deleted : E:\user.js
Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\boost_interprocess
Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\InstallMate
Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\Premium
***** [Registry] *****
Key Deleted : HKCU\Software\bProtector
Key Deleted : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\f
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}
Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
***** [Internet Browsers] *****
-\\ Internet Explorer v7.0.5730.13
Restored : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] --> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
-\\ Opera v12.2.1578.0
File : E:\Documents and Settings\Matheus\Dados de aplicativos\Opera\Opera\operaprefs.ini
Deleted : Home URL=hxxp://start.funmoods.com/?f=1&a=bf3&chnl=bf3&cd=2XzuyEtN2Y1L1QzutDtDtC0DyCtDtDtAtB0DyEtA0D[...]
*************************
AdwCleaner[S1].txt - [5223 octets] - [06/09/2012 09:47:31]
########## EOF - E:\AdwCleaner[S1].txt - [5283 octets] ##########
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
Bom Dia! CleiaMD
|- Repita o procedimento com AdwCleaner,e poste o relatório. ( AdwCleaner[S2].txt )
|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by OldTimer Tools )
|- Clique em Salvar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
|- Salve-o no desktop!
|- Duplo clique em OTL.exe >> Executar.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >> [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Configure "Verificação de Arquivos",segundo a screenshot!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Ps: Faça o mesmo para estes!
|- Em "Exame Extra do Registro",assinale "Nenhum".
|- Cole estas informações,que estão em verde,para o campo "Exames Personalizados/Correções".
|- Clique em Verificar: [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Concluindo,poste o relatório: OTL.txt
|- Para grandes relatórios,acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >
|- Maiores informações: < |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| >
Abraços!
|- Ok! Entendi.Fui eu que postei esse pedido de ajuda,mas é o meu filho que executa as ferramentas que você indica.
|- Repita o procedimento com AdwCleaner,e poste o relatório. ( AdwCleaner[S2].txt )
|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( ... by OldTimer Tools )
|- Clique em Salvar!
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
|- Salve-o no desktop!
|- Duplo clique em OTL.exe >> Executar.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] >> [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Configure "Verificação de Arquivos",segundo a screenshot!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Ps: Faça o mesmo para estes!
|- Em "Exame Extra do Registro",assinale "Nenhum".
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]*crack* /s
*keygen* /s
*serial* /s
*AutoKMS* /s
*loader* /s
%APPDATA%\Local\*.
%APPDATA%\*.exe /s
%APPDATA%\*.
%USERPROFILE%\AppData\Local\*.*
%USERPROFILE%\AppData\Roaming\*.*
%systemroot%\assembly\tmp\*.* /S /MD5
%systemroot%\assembly\temp\*.* /S /MD5
%systemroot%\assembly\GAC\*.* /S /MD5
%systemroot%\assembly\GAC_32\*.* /S /MD5
%systemroot%\system32\config\systemprofile\AppData\Local\*.*
%windir%\ServiceProfiles\LocalService\AppData\Local\Temp\*.*
%windir%\ServiceProfiles\NetworkService\AppData\Local\Temp\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes
/md5start
services.exe
/md5stop
regedit /e c:\registrybackup.reg /c
type c:\boot.ini >> test.txt /c
%systemroot%\system32\Tasks\*.* /s
%windir%\tasks\*.* /s
|- Cole estas informações,que estão em verde,para o campo "Exames Personalizados/Correções".
|- Clique em Verificar: [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Concluindo,poste o relatório: OTL.txt
|- Para grandes relatórios,acesse: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >
|- Maiores informações: < |[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]| >
Abraços!
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
Oi joram
Log do AdwCleaner
# AdwCleaner v2.000 - Logfile created 09/07/2012 at 17:58:20
# Updated 30/08/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Matheus - TECKMAIL-CAFC08
# Boot Mode : Normal
# Running from : E:\Documents and Settings\Matheus\Desktop\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
Deleted on reboot : E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\boost_interprocess
***** [Registry] *****
Key Deleted : HKCU\Software\bProtector
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
***** [Internet Browsers] *****
-\\ Internet Explorer v7.0.5730.13
-\\ Opera v12.2.1578.0
File : E:\Documents and Settings\Matheus\Dados de aplicativos\Opera\Opera\operaprefs.ini
[OK] File is clean.
*************************
AdwCleaner[S2].txt - [1837 octets] - [07/09/2012 17:58:20]
########## EOF - E:\AdwCleaner[S4].txt - [1897 octets] ##########
Log do OTL
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Obrigada!
Log do AdwCleaner
# AdwCleaner v2.000 - Logfile created 09/07/2012 at 17:58:20
# Updated 30/08/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Matheus - TECKMAIL-CAFC08
# Boot Mode : Normal
# Running from : E:\Documents and Settings\Matheus\Desktop\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
Deleted on reboot : E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
Folder Deleted : E:\Documents and Settings\All Users\Dados de aplicativos\boost_interprocess
***** [Registry] *****
Key Deleted : HKCU\Software\bProtector
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
***** [Internet Browsers] *****
-\\ Internet Explorer v7.0.5730.13
-\\ Opera v12.2.1578.0
File : E:\Documents and Settings\Matheus\Dados de aplicativos\Opera\Opera\operaprefs.ini
[OK] File is clean.
*************************
AdwCleaner[S2].txt - [1837 octets] - [07/09/2012 17:58:20]
########## EOF - E:\AdwCleaner[S4].txt - [1897 octets] ##########
Log do OTL
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Obrigada!
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
Boa Noite! CleiaMD
|- Execute o OTL.exe.
|- Copie estas informações que estão em vermelho,para o campo clipboard da ferramenta. ( "Exames Personalizados Correções" )
|- O computador vai reiniciar! -> Clique em "Executar".
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Para versões em Inglês,clique em Run Fix que é o mesmo que Consertar.
|- Poste o relatório: E:\_OTL\MovedFiles\*.log
Abs!
|- Execute o OTL.exe.
|- Copie estas informações que estão em vermelho,para o campo clipboard da ferramenta. ( "Exames Personalizados Correções" )
|- Clique no botão Consertar -> Aguarde a conclusão!:OTL
IE - HKU\S-1-5-21-329068152-1004336348-1417001333-1003\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-329068152-1004336348-1417001333-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] [TXT_PAYS US - 65.60.5.200]
FF - prefs.js..browser.search.defaultthis.enginename: 4shared.com customized web search
FF - prefs.js..extensions.enabledAddons: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]:1.5.0
FF - prefs.js..keyword.url: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] [TXT_PAYS US - 198.143.128.244]
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O8 - Extra context menu item: &Download All using 4shared Desktop - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] de programas\4shared Desktop\Desktop.32/D_ALL_LINK File not found
O8 - Extra context menu item: &Download using 4shared Desktop - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] de programas\4shared Desktop\Desktop.32/D_ONE_LINK File not found
O18 - Protocol\Handler\livecall - No CLSID value found
O18 - Protocol\Handler\msnim - No CLSID value found
O18 - Protocol\Handler\wlmailhtml - No CLSID value found
O20 - AppInit_DLLs: (protector.dll) - E:\WINDOWS\System32\protector.dll ()
[2012/08/15 13:14:48 | 000,000,000 | ---D | C] -- E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1
[2012/03/02 14:24:49 | 000,790,520 | ---- | C] () -- E:\WINDOWS\System32\protector.dll
[2012/06/12 12:38:36 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
[2012/08/16 17:54:00 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1
[2011/05/29 10:07:57 | 000,000,000 | ---D | M] -- E:\Documents and Settings\All Users\Dados de aplicativos\{A2A58654-12AA-408A-B411-58A76959BE7F}
[2012/04/07 11:10:16 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop
[2011/11/15 19:48:47 | 000,000,000 | ---D | M] -- E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic
[2012/01/18 10:31:24 | 000,010,144 | ---- | M] () -- \Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\conduitCommon\modules\3.9.0.3\ExternalLibraryLoader.jsm
[2012/06/18 10:27:22 | 000,003,681 | ---- | M] () -- \Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\loader.xul
[2012/08/23 09:31:41 | 000,016,896 | ---- | M] () -- \WINDOWS\Prefetch\DESKMEDIA_DOWNLOADER_1.0.EXE-2D42FC76.pf
@Alternate Data Stream - 113 bytes -> E:\Documents and Settings\All Users\Dados de aplicativos\TEMP:D1B5B4F1
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope" = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
"bProtectorDefaultScope" = -
:Files
E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic
E:\Documents and Settings\All Users\Dados de aplicativos\bProtector
E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1
E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop
:Commands
[CREATERESTOREPOINT]
[purity]
[emptytemp]
[Reboot]
|- O computador vai reiniciar! -> Clique em "Executar".
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Para versões em Inglês,clique em Run Fix que é o mesmo que Consertar.
|- Poste o relatório: E:\_OTL\MovedFiles\*.log
Abs!
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
Oi joram! Perdoe-me por ter demorado em lhe responder.
Viajei à Cabo Frio,para aproveitar o feriado e relaxar a mente. hehe..
---------------------
Log do OTL
---------------------
All processes killed
========== OTL ==========
HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Prefs.js: 4shared.com customized web search removed from browser.search.defaultthis.enginename
Prefs.js: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]:1.5.0 removed from extensions.enabledAddons
Prefs.js: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] [TXT_PAYS US - 198.143.128.244] removed from keyword.url
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Download All using 4shared Desktop\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Download using 4shared Desktop\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:protector.dll deleted successfully.
File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\downloads folder moved successfully.
E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1 folder moved successfully.
File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.
Folder E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\ not found.
E:\Documents and Settings\All Users\Dados de aplicativos\{A2A58654-12AA-408A-B411-58A76959BE7F} folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic folder moved successfully.
\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\conduitCommon\modules\3.9.0.3\ExternalLibraryLoader.jsm moved successfully.
\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\loader.xul moved successfully.
File \WINDOWS\Prefetch\DESKMEDIA_DOWNLOADER_1.0.EXE-2D42FC76.pf not found.
ADS E:\Documents and Settings\All Users\Dados de aplicativos\TEMP:D1B5B4F1 deleted successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\"DefaultScope" | {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /E : value set successfully!
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\"DefaultScope" | {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /E : value set successfully!
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\bProtectorDefaultScope deleted successfully.
========== FILES ==========
File\Folder E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic not found.
Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.
File\Folder E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1 not found.
File\Folder E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop not found.
========== COMMANDS ==========
Restore point Set: OTL Restore Point
[EMPTYTEMP]
User: All Users
User: Cleia Maria
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 859970 bytes
User: Matheus
->Temp folder emptied: 1680319 bytes
->Temporary Internet Files folder emptied: 22054942 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 351534393 bytes
->Apple Safari cache emptied: 0 bytes
->Opera cache emptied: 7891738 bytes
->Flash cache emptied: 139003667 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 7496 bytes
Total Files Cleaned = 499,00 mb
OTL by OldTimer - Version 3.2.61.1 log created on 09102012_105015
Files\Folders moved on Reboot...
File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
Viajei à Cabo Frio,para aproveitar o feriado e relaxar a mente. hehe..
---------------------
Log do OTL
---------------------
All processes killed
========== OTL ==========
HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Prefs.js: 4shared.com customized web search removed from browser.search.defaultthis.enginename
Prefs.js: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]:1.5.0 removed from extensions.enabledAddons
Prefs.js: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] [TXT_PAYS US - 198.143.128.244] removed from keyword.url
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Download All using 4shared Desktop\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&Download using 4shared Desktop\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:protector.dll deleted successfully.
File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\downloads folder moved successfully.
E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1 folder moved successfully.
File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.
Folder E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1\ not found.
E:\Documents and Settings\All Users\Dados de aplicativos\{A2A58654-12AA-408A-B411-58A76959BE7F} folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic folder moved successfully.
\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\conduitCommon\modules\3.9.0.3\ExternalLibraryLoader.jsm moved successfully.
\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\loader.xul moved successfully.
File \WINDOWS\Prefetch\DESKMEDIA_DOWNLOADER_1.0.EXE-2D42FC76.pf not found.
ADS E:\Documents and Settings\All Users\Dados de aplicativos\TEMP:D1B5B4F1 deleted successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\"DefaultScope" | {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /E : value set successfully!
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\"DefaultScope" | {0633EE93-D776-472f-A0FF-E1416B8B2E3A} /E : value set successfully!
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\\bProtectorDefaultScope deleted successfully.
========== FILES ==========
File\Folder E:\Documents and Settings\Matheus\Dados de aplicativos\Registry Mechanic not found.
Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.
File\Folder E:\Documents and Settings\All Users\Dados de aplicativos\OptimizerPro1 not found.
File\Folder E:\Documents and Settings\Matheus\Dados de aplicativos\4shared Desktop not found.
========== COMMANDS ==========
Restore point Set: OTL Restore Point
[EMPTYTEMP]
User: All Users
User: Cleia Maria
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 859970 bytes
User: Matheus
->Temp folder emptied: 1680319 bytes
->Temporary Internet Files folder emptied: 22054942 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 351534393 bytes
->Apple Safari cache emptied: 0 bytes
->Opera cache emptied: 7891738 bytes
->Flash cache emptied: 139003667 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 7496 bytes
Total Files Cleaned = 499,00 mb
OTL by OldTimer - Version 3.2.61.1 log created on 09102012_105015
Files\Folders moved on Reboot...
File move failed. E:\WINDOWS\system32\protector.dll scheduled to be moved on reboot.
Folder move failed. E:\Documents and Settings\All Users\Dados de aplicativos\bProtector scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
Boa Tarde! CleiaMD
|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >
|- Salve-o no desktop ou E:\.
|- Duplo-clique em OTS.exe.
|- Ps: Para Windows Vista ou 7,execute o arquivo como administrador.
|- Na opção "Additional Scans",clique em "Extras".
|- Marque as caixinhas:
[] Reg - NetSvcs
[] File - Lop Check
|- Em "Basic Scans",marque as caixinhas:
[] Use Company Name Whitelist
[] Skip Microsoft Files
|- Verifique: [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] & [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- À seguir,clique em [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Ao concluir,abrir-se-á o Bloco de Notas,com o relatório. ( OTS.txt )
|- Poste-o em sua resposta!
|- Acesse para isso! ( [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] ou [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] )
Abs!
|- Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] >
|- Salve-o no desktop ou E:\.
|- Duplo-clique em OTS.exe.
|- Ps: Para Windows Vista ou 7,execute o arquivo como administrador.
|- Na opção "Additional Scans",clique em "Extras".
|- Marque as caixinhas:
[] Reg - NetSvcs
[] File - Lop Check
|- Em "Basic Scans",marque as caixinhas:
[] Use Company Name Whitelist
[] Skip Microsoft Files
|- Verifique: [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] & [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- À seguir,clique em [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Ao concluir,abrir-se-á o Bloco de Notas,com o relatório. ( OTS.txt )
|- Poste-o em sua resposta!
|- Acesse para isso! ( [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] ou [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] )
Abs!
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
E aí joram. Tudo bem com o Sr?
----------
Log do OTS: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
----------
O computador tá massaa...
Valeu!
Matheus
----------
Log do OTS: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
----------
O computador tá massaa...
Valeu!
Matheus
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
Boa Tarde! CleiaMD
|- Existem 2 antivírus instalados: PSafe e Panda Cloud
|- Desinstale um deles,fique com o que lhe agradar!
|- Já que,por MP,decidiu remover o V9,incluí instruções para a limpeza.
-/-
|- Abra o OTS.exe,com um duplo-clique.
|- Clique em Run Fix --> Aguarde!
|- Terminando,poste o relatório: C:\_OTS\MovedFiles\OTS.txt
Abs!
|- Existem 2 antivírus instalados: PSafe e Panda Cloud
|- Desinstale um deles,fique com o que lhe agradar!
|- Já que,por MP,decidiu remover o V9,incluí instruções para a limpeza.
-/-
|- Abra o OTS.exe,com um duplo-clique.
- Código:
[Unregister Dlls]
[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > ->
YN -> HKEY_LOCAL_MACHINE\: Main\"Default_Page_URL" -> www.v9.com/sof/sof_1345142322_653562
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\] > ->
YN -> HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\: Main\"Start Page" -> http://google.atcomet.com/m/
< FireFox Settings [Prefs.js] > -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\FireFox\Profiles\z7m80cxu.default\prefs.js
YN -> browser.search.defaultthis.enginename -> """"
YN -> browser.search.selectedEngine -> "Search"
YN -> keyword.url -> "http://search.babylon.com/?af=110393&babsrc=adbartrp&mntrid=1044da26000000000000001d60032d43&q="
YN -> browser.search.defaultenginename -> "Search"
YN -> browser.search.selectedEngine -> "Search"
YN -> browser.startup.homepage -> "http://google.atcomet.com/m/"
YN -> browser.startup.homepage -> "www.v9.com/sof/sof_1333804600_752716"
YN -> backup.old.browser.search.selectedEngine -> "search"
< FireFox Extensions [User Folders] > ->
YN -> 4shared.com Community Toolbar -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}
YN -> ~EmptyValue -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com
YN -> ~EmptyValue -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged
NY -> No name found -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}\Setup\bin\PandaSecurityTb_2.0.0.9\$[56]\extensions
< FireFox SearchPlugins [User Folders] > ->
YN -> funmoods.xml -> E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\FireFox\Profiles\z7m80cxu.default\searchplugins\funmoods.xml
< FireFox Extensions [Program Folders] > ->
YN -> No name found -> E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\4SHAREDCOPYLINKS.XPI
YN -> Funmoods.com -> E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\FFXTLBR@FUNMOODS.COM
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
YN -> {4DE0953E-490E-4D6F-BDDA-0516C372F3AF} [HKLM] -> E:\WINDOWS\system32\v9loader.dll [V9BHOLoader]
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar
YN -> "{742E70CF-7770-412d-86CB-230B322E807C}" [HKLM] -> E:\WINDOWS\system32\v9-toolbar.dll [V9-ToolBar]
YN -> Beijing Elex Technology Co., Ltd) ->
YN -> "{98889811-442D-49dd-99D7-DC866BE87DBC}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\] > -> HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\"{21FA44EF-376D-4D53-9B0F-8A89D3229068}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
YN -> WebBrowser\"{724D43A0-0D85-11D4-9908-00400523E39A}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
*AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls
YN -> protector.dll ->
< AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
[Registry - Additional Scans - Safe List]
< Windows DomainProfile GloballyOpenPorts Settings > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List
YN -> \"57650:TCP" -> [57650:TCP:*:Enabled:Pando Media Booster]
YN -> \"57650:UDP" -> [57650:UDP:*:Enabled:Pando Media Booster]
< Windows StandardProfile GloballyOpenPorts Settings > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
YN -> \"57650:TCP" -> [57650:TCP:*:Enabled:Pando Media Booster]
YN -> \"57650:UDP" -> [57650:UDP:*:Enabled:Pando Media Booster]
< Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YN -> Toolbar Cleaner -> Toolbar Cleaner 1.0
YN -> Usbfix -> UsbFix By El Desaparecido
YN -> V9Software -> V9 HomeTool
< Uninstall List [HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\] > -> HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
YN -> FoxTab FLV Player -> FoxTab FLV Player
[Files/Folders - Created Within 30 Days]
NY -> v9-toolbar.dll -> E:\WINDOWS\System32\v9-toolbar.dll
[Files/Folders - Modified Within 30 Days]
NY -> funmoods.crx -> E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx
[Files - No Company Name]
NY -> funmoods.crx -> E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx
[Empty Temp Folders]
[EmptyFlash]
[CreateRestorePoint]
|- Clique em Run Fix --> Aguarde!
|- Terminando,poste o relatório: C:\_OTS\MovedFiles\OTS.txt
Abs!
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
Oi joram
Meu filho não decidiu qual antivírus ele irá desinstalar,mas estou deixando essa decisão com ele já que instalou o PSafe sem me comunicar.
Vou acabar deixando este computador com ele,e adquirir outro sem esses jogos que ele tanto aprecia.
----------
Log do OTS
----------
All Processes Killed
[Registry - Safe List]
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\\Main\"Default_Page_URL" not found.
Registry value HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\\Main\"Start Page" not found.
Prefs.js: """" removed from browser.search.defaultthis.enginename
Prefs.js: "Search" removed from browser.search.selectedEngine
Prefs.js: "http://search.babylon.com/?af=110393&babsrc=adbartrp&mntrid=1044da26000000000000001d60032d43&q=" removed from keyword.url
Prefs.js: "Search" removed from browser.search.defaultenginename
Prefs.js: "Search" removed from browser.search.selectedEngine
Prefs.js: "http://google.atcomet.com/m/" removed from browser.startup.homepage
Prefs.js: "[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] removed from browser.startup.homepage
Prefs.js: "search" removed from backup.old.browser.search.selectedEngine
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\searchplugin folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\modules folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\META-INF folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\defaults folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\components folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\chrome folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\META-INF folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\imgs\flgs folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\imgs folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\images folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\searchplugin folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\modules folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\META-INF folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\defaults folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\components folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\chrome folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\defaults\preferences folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\defaults folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\components folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\502bc7951e9ab@502bc7951e9e4.info\content folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\502bc7951e9ab@502bc7951e9e4.info folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged folder moved successfully.
File E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}\Setup\bin\PandaSecurityTb_2.0.0.9\$ not found.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\FireFox\Profiles\z7m80cxu.default\searchplugins\funmoods.xml moved successfully.
E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\4SHAREDCOPYLINKS.XPI moved successfully.
File E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\FFXTLBR@FUNMOODS.COM not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4DE0953E-490E-4D6F-BDDA-0516C372F3AF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4DE0953E-490E-4D6F-BDDA-0516C372F3AF}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{742E70CF-7770-412d-86CB-230B322E807C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{742E70CF-7770-412d-86CB-230B322E807C}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\Beijing Elex Technology Co., Ltd) not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.
Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\ebBrowser\"{21FA44EF-376D-4D53-9B0F-8A89D3229068}"\ not found.
Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\ebBrowser\"{724D43A0-0D85-11D4-9908-00400523E39A}"\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:protector.dll deleted successfully.
[Registry - Additional Scans - Safe List]
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\\"57650:TCP" not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\\"57650:UDP" not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\\"57650:TCP" not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\\"57650:UDP" not found.
[Files/Folders - Created Within 30 Days]
E:\WINDOWS\System32\v9-toolbar.dll moved successfully.
[Files/Folders - Modified Within 30 Days]
E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx moved successfully.
[Files - No Company Name]
File E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx not found!
File not found!
Restore point Set: OTS Restore Point (0)
< End of fix log >
OTS by OldTimer - Version 3.1.47.2 fix logfile created on 09112012_155624
Meu filho não decidiu qual antivírus ele irá desinstalar,mas estou deixando essa decisão com ele já que instalou o PSafe sem me comunicar.
Vou acabar deixando este computador com ele,e adquirir outro sem esses jogos que ele tanto aprecia.
----------
Log do OTS
----------
All Processes Killed
[Registry - Safe List]
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\\Main\"Default_Page_URL" not found.
Registry value HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\\Main\"Start Page" not found.
Prefs.js: """" removed from browser.search.defaultthis.enginename
Prefs.js: "Search" removed from browser.search.selectedEngine
Prefs.js: "http://search.babylon.com/?af=110393&babsrc=adbartrp&mntrid=1044da26000000000000001d60032d43&q=" removed from keyword.url
Prefs.js: "Search" removed from browser.search.defaultenginename
Prefs.js: "Search" removed from browser.search.selectedEngine
Prefs.js: "http://google.atcomet.com/m/" removed from browser.startup.homepage
Prefs.js: "[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] removed from browser.startup.homepage
Prefs.js: "search" removed from backup.old.browser.search.selectedEngine
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\searchplugin folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\modules folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\META-INF folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\defaults folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\components folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\chrome folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\META-INF folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\imgs\flgs folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\imgs folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content\images folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com\content folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\ffxtlbr@funmoods.com folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\searchplugin folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\modules folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\META-INF folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\defaults folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\components folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}\chrome folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7} folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\defaults\preferences folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\defaults folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com\components folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\ffxtlbr@Facemoods.com folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\502bc7951e9ab@502bc7951e9e4.info\content folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged\502bc7951e9ab@502bc7951e9e4.info folder moved successfully.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\staged folder moved successfully.
File E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\Firefox\Profiles\z7m80cxu.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}\Setup\bin\PandaSecurityTb_2.0.0.9\$ not found.
E:\Documents and Settings\Matheus\Dados de aplicativos\Mozilla\FireFox\Profiles\z7m80cxu.default\searchplugins\funmoods.xml moved successfully.
E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\4SHAREDCOPYLINKS.XPI moved successfully.
File E:\DOCUMENTS AND SETTINGS\MATHEUS\DADOS DE APLICATIVOS\MOZILLA\FIREFOX\PROFILES\Z7M80CXU.DEFAULT\EXTENSIONS\FFXTLBR@FUNMOODS.COM not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4DE0953E-490E-4D6F-BDDA-0516C372F3AF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4DE0953E-490E-4D6F-BDDA-0516C372F3AF}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{742E70CF-7770-412d-86CB-230B322E807C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{742E70CF-7770-412d-86CB-230B322E807C}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\Beijing Elex Technology Co., Ltd) not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.
Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\ebBrowser\"{21FA44EF-376D-4D53-9B0F-8A89D3229068}"\ not found.
Registry key HKEY_USERS\S-1-5-21-329068152-1004336348-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\ebBrowser\"{724D43A0-0D85-11D4-9908-00400523E39A}"\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:protector.dll deleted successfully.
[Registry - Additional Scans - Safe List]
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\\"57650:TCP" not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List\\\"57650:UDP" not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\\"57650:TCP" not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\\"57650:UDP" not found.
[Files/Folders - Created Within 30 Days]
E:\WINDOWS\System32\v9-toolbar.dll moved successfully.
[Files/Folders - Modified Within 30 Days]
E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx moved successfully.
[Files - No Company Name]
File E:\Documents and Settings\Matheus\Configurações locais\Dados de aplicativos\funmoods.crx not found!
File not found!
Restore point Set: OTS Restore Point (0)
< End of fix log >
OTS by OldTimer - Version 3.1.47.2 fix logfile created on 09112012_155624
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
Boa Tarde! CleiaMD
|- O computador está limpo.
-/-
|- Caso esteja tudo Ok,apague seus Pontos de restauração.
|- Abra a ferramenta OTL.
|- Cole as informações que estão no Código,para o campo "Exames Personalizados Correções".
|- Clique em Consertar.
|- Ps: Haverá reboot! <- Aguarde!
|- Abra,novamente,a ferramenta OTL -> Clique em Limpeza. <- Confirme!
|- O computador irá reiniciar!
-/-
|- Nada mais à realizar! Tudo Ok?
Abs!
|- O computador está limpo.
-/-
|- Caso esteja tudo Ok,apague seus Pontos de restauração.
|- Abra a ferramenta OTL.
|- Rode este script.:COMMANDS
[CLEARALLRESTOREPOINTS]
[reboot]
|- Cole as informações que estão no Código,para o campo "Exames Personalizados Correções".
|- Clique em Consertar.
|- Ps: Haverá reboot! <- Aguarde!
|- Abra,novamente,a ferramenta OTL -> Clique em Limpeza. <- Confirme!
|- O computador irá reiniciar!
-/-
|- Nada mais à realizar! Tudo Ok?
Abs!
CleiaMD- Iniciante
- Mensagens : 9
Data de inscrição : 05/09/2012
Oi joram
Está tudo ok sim!
Obrigada pela ajuda!
Meu filho não encontra-se no momento,mas pediu-me que lhe mande um forte abraço.
De minha parte,espero que continue esse trabalho voluntarioso e útil.
Agradecida por tudo e um forte abraço.
Está tudo ok sim!
Obrigada pela ajuda!
Meu filho não encontra-se no momento,mas pediu-me que lhe mande um forte abraço.
De minha parte,espero que continue esse trabalho voluntarioso e útil.
Agradecida por tudo e um forte abraço.
joram- Administrador Fundador
- Mensagens : 626
Data de inscrição : 14/08/2012
Idade : 71
Localização : Rio de Janeiro
CASO RESOLVIDO!
Desejando nova análise para este computador,abra novo tópico e relate o problema!
Desejando nova análise para este computador,abra novo tópico e relate o problema!
» KpRm ( ... by Kernel-panik )
» ESET Rogue Applications Remover ( ... by Eset.com )
» PW Clean 2.7 ( ... by Doutor PW )
» CKScanner ( ... by askey127 )
» AdwCleaner ( ... by XPlode )
» ZHPDiag ( ... de Nicolas Coolman )
» Argente - Registry Cleaner ( ... by Argente Software )
» ListChkdskResult ( ... by SleepyDude )