Log para analise [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Minha irmã vem reclamando que o notebook dela está muito lento, resolvi postar um log para o amigo analisar.
# AdwCleaner v2.303 - Relatório criado em 18/06/2013 às 11:16:44
# Atualizado em 08/06/2013 por Xplode
# Sistema Operacional : Windows 7 Professional (32 bits)
# Usuário : Vânia - VÂNIA-PC
# Modo de Boot : Normal
# Executado de : C:\Users\Vânia\Downloads\adwcleaner.exe
# Opção [Remover]
***** [Serviços] *****
Encerrado & Removido : Yontoo Desktop Updater
***** [Arquivos/Pastas] *****
Arquivo Removido : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Arquivo Removido : C:\Users\Vânia\AppData\Roaming\Mozilla\Firefox\Profiles\m690cf0s.default\searchplugins\delta.xml
Arquivo Removido : C:\Windows\system32\roboot.exe
Pasta Removido : C:\Program Files\Yontoo
Pasta Removido : C:\ProgramData\Babylon
Pasta Removido : C:\ProgramData\Tarma Installer
Pasta Removido : C:\Users\Vânia\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Pasta Removido : C:\Users\Vânia\AppData\LocalLow\Delta
Pasta Removido : C:\Users\Vânia\AppData\Roaming\Babylon
Pasta Removido : C:\Users\Vânia\AppData\Roaming\file scout
Pasta Removido : C:\Users\Vânia\AppData\Roaming\Funmoods
Pasta Removido : C:\Users\Vânia\AppData\Roaming\Mozilla\Firefox\Profiles\m690cf0s.default\extensions\plugin@yontoo.com
Pasta Removido : C:\Users\Vânia\AppData\Roaming\PerformerSoft
Pasta Removido : C:\Users\Vânia\AppData\Roaming\SpeedAnalysis2
Pasta Removido : C:\Users\Vânia\AppData\Roaming\Yontoo
***** [Registro] *****
Chave Removida : HKCU\Software\586dbdfb16fea17
Chave Removida : HKCU\Software\APN PIP
Chave Removida : HKCU\Software\AppDataLow\Software\findlyrics
Chave Removida : HKCU\Software\DataMngr
Chave Removida : HKCU\Software\DataMngr_Toolbar
Chave Removida : HKCU\Software\filescout
Chave Removida : HKCU\Software\Funmoods
Chave Removida : HKCU\Software\InstallCore
Chave Removida : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chave Removida : HKLM\SOFTWARE\586dbdfb16fea17
Chave Removida : HKLM\Software\Babylon
Chave Removida : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Chave Removida : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Chave Removida : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Chave Removida : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Chave Removida : HKLM\SOFTWARE\Classes\AppID\PropertySync.EXE
Chave Removida : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Chave Removida : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Chave Removida : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Chave Removida : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Chave Removida : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Chave Removida : HKLM\SOFTWARE\Classes\Prod.cap
Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Chave Removida : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Chave Removida : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Chave Removida : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Chave Removida : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Chave Removida : HKLM\Software\DataMngr
Chave Removida : HKLM\SOFTWARE\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Chave Removida : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Chave Removida : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Chave Removida : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Chave Removida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chave Removida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Chave Removida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Chave Removida : HKLM\Software\PIP
Chave Removida : HKLM\Software\Tarma Installer
***** [Navegadores] *****
-\\ Internet Explorer v8.0.7600.16385
[OK] Registro está limpo.
-\\ Mozilla Firefox v21.0 (pt-BR)
Arquivo : C:\Users\Vânia\AppData\Roaming\Mozilla\Firefox\Profiles\m690cf0s.default\prefs.js
C:\Users\Vânia\AppData\Roaming\Mozilla\Firefox\Profiles\m690cf0s.default\user.js ... Removido !
Removida : user_pref("extensions.BabylonToolbar.admin", false);
Removida : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Removida : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Removida : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Removida : user_pref("extensions.BabylonToolbar.bbDpng", "20");
Removida : user_pref("extensions.BabylonToolbar.cntry", "BR");
Removida : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Removida : user_pref("extensions.BabylonToolbar.dpkLst", "");
Removida : user_pref("extensions.BabylonToolbar.excTlbr", false);
Removida : user_pref("extensions.BabylonToolbar.ffxUnstlRst", true);
Removida : user_pref("extensions.BabylonToolbar.hdrMd5", "D1FD280235D775003821922B904A2F8A");
Removida : user_pref("extensions.BabylonToolbar.id", "30565c6f00000000000050b7c3665df3");
Removida : user_pref("extensions.BabylonToolbar.instlDay", "15815");
Removida : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Removida : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.8.11.1015:56:30");
Removida : user_pref("extensions.BabylonToolbar.newTab", false);
Removida : user_pref("extensions.BabylonToolbar.pnu_uninst", "{\"newVrsn\":\"14\",\"lastVrsn\":\"14\",\"vrsnLoa[...]
Removida : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Removida : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Removida : user_pref("extensions.BabylonToolbar.rvrt", "false");
Removida : user_pref("extensions.BabylonToolbar.sg", "czb");
Removida : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Removida : user_pref("extensions.BabylonToolbar.tlbrId", "uninst");
Removida : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Removida : user_pref("extensions.BabylonToolbar.vrsn", "1.8.11.10");
Removida : user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.11.1015:56:30");
Removida : user_pref("extensions.BabylonToolbar.vrsni", "1.8.11.10");
Removida : user_pref("extensions.BabylonToolbar_i.babExt", "");
Removida : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=121173");
Removida : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Removida : user_pref("extensions.delta.admin", false);
Removida : user_pref("extensions.delta.aflt", "babsst");
Removida : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Removida : user_pref("extensions.delta.autoRvrt", "false");
Removida : user_pref("extensions.delta.dfltLng", "en");
Removida : user_pref("extensions.delta.excTlbr", false);
Removida : user_pref("extensions.delta.id", "30565c6f00000000000050b7c3665df3");
Removida : user_pref("extensions.delta.instlDay", "15796");
Removida : user_pref("extensions.delta.instlRef", "sst");
Removida : user_pref("extensions.delta.newTab", false);
Removida : user_pref("extensions.delta.prdct", "delta");
Removida : user_pref("extensions.delta.prtnrId", "delta");
Removida : user_pref("extensions.delta.rvrt", "false");
Removida : user_pref("extensions.delta.smplGrp", "none");
Removida : user_pref("extensions.delta.tlbrId", "base");
Removida : user_pref("extensions.delta.tlbrSrchUrl", "");
Removida : user_pref("extensions.delta.vrsn", "1.8.10.0");
Removida : user_pref("extensions.delta.vrsnTs", "1.8.10.02:19:19");
Removida : user_pref("extensions.delta.vrsni", "1.8.10.0");
Removida : user_pref("extensions.funmoods.aflt", "01543");
Removida : user_pref("extensions.funmoods.appId", "{EA28B360-05E0-4F93-8150-02891F1D8D3C}");
Removida : user_pref("extensions.funmoods.brwsrsrc", "ietlbr");
Removida : user_pref("extensions.funmoods.cntry", "BR");
Removida : user_pref("extensions.funmoods.cv", "cv5");
Removida : user_pref("extensions.funmoods.dfltLng", "");
Removida : user_pref("extensions.funmoods.dfltSrch", true);
Removida : user_pref("extensions.funmoods.dfltlng", "en");
Removida : user_pref("extensions.funmoods.dfltsrch", true);
Removida : user_pref("extensions.funmoods.dnsErr", true);
Removida : user_pref("extensions.funmoods.envrmnt", "production");
Removida : user_pref("extensions.funmoods.excTlbr", false);
Removida : user_pref("extensions.funmoods.hdrMd5", "75923E986EC34C23904E0AA9B9DFCB70");
Removida : user_pref("extensions.funmoods.hmpg", true);
Removida : user_pref("extensions.funmoods.hmpgUrl", "hxxp://searchfunmoods.com/?f=1&a=01543&cd=2XzuyEtN2Y1L1Qzu[...]
Removida : user_pref("extensions.funmoods.hrdid", "50B7C3665DF35C6F");
Removida : user_pref("extensions.funmoods.id", "50B7C3665DF35C6F");
Removida : user_pref("extensions.funmoods.instlDay", "15824");
Removida : user_pref("extensions.funmoods.instlRef", "");
Removida : user_pref("extensions.funmoods.instlday", "15824");
Removida : user_pref("extensions.funmoods.instlref", "");
Removida : user_pref("extensions.funmoods.isdcmntcmplt", "false");
Removida : user_pref("extensions.funmoods.keywordurl", "");
Removida : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Removida : user_pref("extensions.funmoods.monitorreport", true);
Removida : user_pref("extensions.funmoods.newTabUrl", "hxxp://searchfunmoods.com/?f=2&a=01543&cd=2XzuyEtN2Y1L1Q[...]
Removida : user_pref("extensions.funmoods.newtab", "false");
Removida : user_pref("extensions.funmoods.newtaburl", "hxxp://searchfunmoods.com/?f=2&a=01543&cd=2XzuyEtN2Y1L1Q[...]
Removida : user_pref("extensions.funmoods.prdct", "funmoods");
Removida : user_pref("extensions.funmoods.prtnrId", "funmoods");
Removida : user_pref("extensions.funmoods.prtnrid", "funmoods");
Removida : user_pref("extensions.funmoods.savedVrsnTs", "1");
Removida : user_pref("extensions.funmoods.sg", "{smplGrp}");
Removida : user_pref("extensions.funmoods.smplgrp", "free");
Removida : user_pref("extensions.funmoods.srch", "");
Removida : user_pref("extensions.funmoods.srchPrvdr", "Funmoods");
Removida : user_pref("extensions.funmoods.srchprvdr", "Funmoods");
Removida : user_pref("extensions.funmoods.tlbrId", "base");
Removida : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://searchfunmoods.com/?f=3&a=01543&cd=2XzuyEtN2Y1L[...]
Removida : user_pref("extensions.funmoods.tlbrid", "base");
Removida : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://searchfunmoods.com/?f=3&a=01543&cd=2XzuyEtN2Y1L[...]
Removida : user_pref("extensions.funmoods.vrsn", "1.8.11.0");
Removida : user_pref("extensions.funmoods.vrsni", "1.8.11.0");
Removida : user_pref("extensions.funmoods.vrsnts", "");
Removida : user_pref("extensions.funmoods_i.hmpg", true);
Removida : user_pref("extensions.funmoods_i.newTab", false);
Removida : user_pref("extensions.funmoods_i.smplGrp", "none");
Removida : user_pref("extensions.funmoods_i.vrsnTs", "1.8.11.02:3:14");
Removida : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
Removida : user_pref("extentions.y2layers.installId", "4b016e0d-e060-4fd9-b74d-06455c3740d1");
-\\ Google Chrome v27.0.1453.110
Arquivo : C:\Users\Vânia\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Arquivo está limpo.
*************************
AdwCleaner[S1].txt - [12874 octets] - [18/06/2013 11:16:44]
########## EOF - C:\AdwCleaner[S1].txt - [12935 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Professional x86
Ran by Vƒnia on 18/06/2013 at 11:27:22,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted: [File] C:\Users\Vƒnia\AppData\Roaming\mozilla\firefox\profiles\m690cf0s.default\invalidprefs.js
Emptied folder: C:\Users\Vƒnia\AppData\Roaming\mozilla\firefox\profiles\m690cf0s.default\minidumps [76 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18/06/2013 at 11:32:26,94
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Minha irmã vem reclamando que o notebook dela está muito lento, resolvi postar um log para o amigo analisar.
# AdwCleaner v2.303 - Relatório criado em 18/06/2013 às 11:16:44
# Atualizado em 08/06/2013 por Xplode
# Sistema Operacional : Windows 7 Professional (32 bits)
# Usuário : Vânia - VÂNIA-PC
# Modo de Boot : Normal
# Executado de : C:\Users\Vânia\Downloads\adwcleaner.exe
# Opção [Remover]
***** [Serviços] *****
Encerrado & Removido : Yontoo Desktop Updater
***** [Arquivos/Pastas] *****
Arquivo Removido : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Arquivo Removido : C:\Users\Vânia\AppData\Roaming\Mozilla\Firefox\Profiles\m690cf0s.default\searchplugins\delta.xml
Arquivo Removido : C:\Windows\system32\roboot.exe
Pasta Removido : C:\Program Files\Yontoo
Pasta Removido : C:\ProgramData\Babylon
Pasta Removido : C:\ProgramData\Tarma Installer
Pasta Removido : C:\Users\Vânia\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Pasta Removido : C:\Users\Vânia\AppData\LocalLow\Delta
Pasta Removido : C:\Users\Vânia\AppData\Roaming\Babylon
Pasta Removido : C:\Users\Vânia\AppData\Roaming\file scout
Pasta Removido : C:\Users\Vânia\AppData\Roaming\Funmoods
Pasta Removido : C:\Users\Vânia\AppData\Roaming\Mozilla\Firefox\Profiles\m690cf0s.default\extensions\plugin@yontoo.com
Pasta Removido : C:\Users\Vânia\AppData\Roaming\PerformerSoft
Pasta Removido : C:\Users\Vânia\AppData\Roaming\SpeedAnalysis2
Pasta Removido : C:\Users\Vânia\AppData\Roaming\Yontoo
***** [Registro] *****
Chave Removida : HKCU\Software\586dbdfb16fea17
Chave Removida : HKCU\Software\APN PIP
Chave Removida : HKCU\Software\AppDataLow\Software\findlyrics
Chave Removida : HKCU\Software\DataMngr
Chave Removida : HKCU\Software\DataMngr_Toolbar
Chave Removida : HKCU\Software\filescout
Chave Removida : HKCU\Software\Funmoods
Chave Removida : HKCU\Software\InstallCore
Chave Removida : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chave Removida : HKLM\SOFTWARE\586dbdfb16fea17
Chave Removida : HKLM\Software\Babylon
Chave Removida : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Chave Removida : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Chave Removida : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Chave Removida : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Chave Removida : HKLM\SOFTWARE\Classes\AppID\PropertySync.EXE
Chave Removida : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chave Removida : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Chave Removida : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Chave Removida : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Chave Removida : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Chave Removida : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Chave Removida : HKLM\SOFTWARE\Classes\Prod.cap
Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Chave Removida : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Chave Removida : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Chave Removida : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Chave Removida : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Chave Removida : HKLM\Software\DataMngr
Chave Removida : HKLM\SOFTWARE\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Chave Removida : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Chave Removida : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Chave Removida : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Chave Removida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chave Removida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Chave Removida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Chave Removida : HKLM\Software\PIP
Chave Removida : HKLM\Software\Tarma Installer
***** [Navegadores] *****
-\\ Internet Explorer v8.0.7600.16385
[OK] Registro está limpo.
-\\ Mozilla Firefox v21.0 (pt-BR)
Arquivo : C:\Users\Vânia\AppData\Roaming\Mozilla\Firefox\Profiles\m690cf0s.default\prefs.js
C:\Users\Vânia\AppData\Roaming\Mozilla\Firefox\Profiles\m690cf0s.default\user.js ... Removido !
Removida : user_pref("extensions.BabylonToolbar.admin", false);
Removida : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Removida : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Removida : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Removida : user_pref("extensions.BabylonToolbar.bbDpng", "20");
Removida : user_pref("extensions.BabylonToolbar.cntry", "BR");
Removida : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Removida : user_pref("extensions.BabylonToolbar.dpkLst", "");
Removida : user_pref("extensions.BabylonToolbar.excTlbr", false);
Removida : user_pref("extensions.BabylonToolbar.ffxUnstlRst", true);
Removida : user_pref("extensions.BabylonToolbar.hdrMd5", "D1FD280235D775003821922B904A2F8A");
Removida : user_pref("extensions.BabylonToolbar.id", "30565c6f00000000000050b7c3665df3");
Removida : user_pref("extensions.BabylonToolbar.instlDay", "15815");
Removida : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Removida : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.8.11.1015:56:30");
Removida : user_pref("extensions.BabylonToolbar.newTab", false);
Removida : user_pref("extensions.BabylonToolbar.pnu_uninst", "{\"newVrsn\":\"14\",\"lastVrsn\":\"14\",\"vrsnLoa[...]
Removida : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Removida : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Removida : user_pref("extensions.BabylonToolbar.rvrt", "false");
Removida : user_pref("extensions.BabylonToolbar.sg", "czb");
Removida : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Removida : user_pref("extensions.BabylonToolbar.tlbrId", "uninst");
Removida : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Removida : user_pref("extensions.BabylonToolbar.vrsn", "1.8.11.10");
Removida : user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.11.1015:56:30");
Removida : user_pref("extensions.BabylonToolbar.vrsni", "1.8.11.10");
Removida : user_pref("extensions.BabylonToolbar_i.babExt", "");
Removida : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=121173");
Removida : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Removida : user_pref("extensions.delta.admin", false);
Removida : user_pref("extensions.delta.aflt", "babsst");
Removida : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Removida : user_pref("extensions.delta.autoRvrt", "false");
Removida : user_pref("extensions.delta.dfltLng", "en");
Removida : user_pref("extensions.delta.excTlbr", false);
Removida : user_pref("extensions.delta.id", "30565c6f00000000000050b7c3665df3");
Removida : user_pref("extensions.delta.instlDay", "15796");
Removida : user_pref("extensions.delta.instlRef", "sst");
Removida : user_pref("extensions.delta.newTab", false);
Removida : user_pref("extensions.delta.prdct", "delta");
Removida : user_pref("extensions.delta.prtnrId", "delta");
Removida : user_pref("extensions.delta.rvrt", "false");
Removida : user_pref("extensions.delta.smplGrp", "none");
Removida : user_pref("extensions.delta.tlbrId", "base");
Removida : user_pref("extensions.delta.tlbrSrchUrl", "");
Removida : user_pref("extensions.delta.vrsn", "1.8.10.0");
Removida : user_pref("extensions.delta.vrsnTs", "1.8.10.02:19:19");
Removida : user_pref("extensions.delta.vrsni", "1.8.10.0");
Removida : user_pref("extensions.funmoods.aflt", "01543");
Removida : user_pref("extensions.funmoods.appId", "{EA28B360-05E0-4F93-8150-02891F1D8D3C}");
Removida : user_pref("extensions.funmoods.brwsrsrc", "ietlbr");
Removida : user_pref("extensions.funmoods.cntry", "BR");
Removida : user_pref("extensions.funmoods.cv", "cv5");
Removida : user_pref("extensions.funmoods.dfltLng", "");
Removida : user_pref("extensions.funmoods.dfltSrch", true);
Removida : user_pref("extensions.funmoods.dfltlng", "en");
Removida : user_pref("extensions.funmoods.dfltsrch", true);
Removida : user_pref("extensions.funmoods.dnsErr", true);
Removida : user_pref("extensions.funmoods.envrmnt", "production");
Removida : user_pref("extensions.funmoods.excTlbr", false);
Removida : user_pref("extensions.funmoods.hdrMd5", "75923E986EC34C23904E0AA9B9DFCB70");
Removida : user_pref("extensions.funmoods.hmpg", true);
Removida : user_pref("extensions.funmoods.hmpgUrl", "hxxp://searchfunmoods.com/?f=1&a=01543&cd=2XzuyEtN2Y1L1Qzu[...]
Removida : user_pref("extensions.funmoods.hrdid", "50B7C3665DF35C6F");
Removida : user_pref("extensions.funmoods.id", "50B7C3665DF35C6F");
Removida : user_pref("extensions.funmoods.instlDay", "15824");
Removida : user_pref("extensions.funmoods.instlRef", "");
Removida : user_pref("extensions.funmoods.instlday", "15824");
Removida : user_pref("extensions.funmoods.instlref", "");
Removida : user_pref("extensions.funmoods.isdcmntcmplt", "false");
Removida : user_pref("extensions.funmoods.keywordurl", "");
Removida : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Removida : user_pref("extensions.funmoods.monitorreport", true);
Removida : user_pref("extensions.funmoods.newTabUrl", "hxxp://searchfunmoods.com/?f=2&a=01543&cd=2XzuyEtN2Y1L1Q[...]
Removida : user_pref("extensions.funmoods.newtab", "false");
Removida : user_pref("extensions.funmoods.newtaburl", "hxxp://searchfunmoods.com/?f=2&a=01543&cd=2XzuyEtN2Y1L1Q[...]
Removida : user_pref("extensions.funmoods.prdct", "funmoods");
Removida : user_pref("extensions.funmoods.prtnrId", "funmoods");
Removida : user_pref("extensions.funmoods.prtnrid", "funmoods");
Removida : user_pref("extensions.funmoods.savedVrsnTs", "1");
Removida : user_pref("extensions.funmoods.sg", "{smplGrp}");
Removida : user_pref("extensions.funmoods.smplgrp", "free");
Removida : user_pref("extensions.funmoods.srch", "");
Removida : user_pref("extensions.funmoods.srchPrvdr", "Funmoods");
Removida : user_pref("extensions.funmoods.srchprvdr", "Funmoods");
Removida : user_pref("extensions.funmoods.tlbrId", "base");
Removida : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://searchfunmoods.com/?f=3&a=01543&cd=2XzuyEtN2Y1L[...]
Removida : user_pref("extensions.funmoods.tlbrid", "base");
Removida : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://searchfunmoods.com/?f=3&a=01543&cd=2XzuyEtN2Y1L[...]
Removida : user_pref("extensions.funmoods.vrsn", "1.8.11.0");
Removida : user_pref("extensions.funmoods.vrsni", "1.8.11.0");
Removida : user_pref("extensions.funmoods.vrsnts", "");
Removida : user_pref("extensions.funmoods_i.hmpg", true);
Removida : user_pref("extensions.funmoods_i.newTab", false);
Removida : user_pref("extensions.funmoods_i.smplGrp", "none");
Removida : user_pref("extensions.funmoods_i.vrsnTs", "1.8.11.02:3:14");
Removida : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
Removida : user_pref("extentions.y2layers.installId", "4b016e0d-e060-4fd9-b74d-06455c3740d1");
-\\ Google Chrome v27.0.1453.110
Arquivo : C:\Users\Vânia\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Arquivo está limpo.
*************************
AdwCleaner[S1].txt - [12874 octets] - [18/06/2013 11:16:44]
########## EOF - C:\AdwCleaner[S1].txt - [12935 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Professional x86
Ran by Vƒnia on 18/06/2013 at 11:27:22,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Successfully deleted: [File] C:\Users\Vƒnia\AppData\Roaming\mozilla\firefox\profiles\m690cf0s.default\invalidprefs.js
Emptied folder: C:\Users\Vƒnia\AppData\Roaming\mozilla\firefox\profiles\m690cf0s.default\minidumps [76 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18/06/2013 at 11:32:26,94
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sáb Mar 23, 2024 10:28 am por joram
» KpRm ( ... by Kernel-panik )
Ter Ago 11, 2020 9:47 pm por joram
» ESET Rogue Applications Remover ( ... by Eset.com )
Sáb Ago 01, 2020 7:49 am por joram
» PW Clean 2.7 ( ... by Doutor PW )
Ter maio 15, 2018 9:27 am por joram
» CKScanner ( ... by askey127 )
Sáb maio 05, 2018 1:12 pm por joram
» AdwCleaner ( ... by XPlode )
Seg Abr 16, 2018 8:47 am por joram
» ZHPDiag ( ... de Nicolas Coolman )
Sáb Abr 14, 2018 8:56 am por joram
» Argente - Registry Cleaner ( ... by Argente Software )
Dom Nov 19, 2017 4:36 pm por joram
» ListChkdskResult ( ... by SleepyDude )
Dom Set 24, 2017 1:39 pm por joram