.:: Análise de logs HijackThis! ::.

Blue Zee · 24 de Outubro de 2016

Instale e corra o Hitman Pro.

Diga-me o que aparece no relatório final.

el_lopes · 24 de Outubro de 2016

Blue Zee disse:
Instale e corra o Hitman Pro.

Diga-me o que aparece no relatório final.

Aqui vai...

Código:

HitmanPro 3.7.14.280
www.hitmanpro.com

   Computer name . . . . : MANUEL
   Windows . . . . . . . : 5.1.3.2600.X86/2
   User name . . . . . . : MANUEL\Manuel Lopes
   License . . . . . . . : Trial (Expired)

   Scan date . . . . . . : 2016-10-24 10:19:17
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 9m 28s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 47

   Objects scanned . . . : 1.455.206
   Files scanned . . . . : 44.607
   Remnants scanned  . . : 358.046 files / 1.052.553 keys

Potential Unwanted Programs _________________________________________________

   HKU\S-1-5-21-839522115-1965331169-1177238915-1004\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1004\Software\Microsoft\Internet Explorer\MenuExt\Translate this web page with Babylon\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1004\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1005\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}\ (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-500\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} (Babylon)
   HKU\S-1-5-21-839522115-1965331169-1177238915-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}\ (Babylon)

Cookies _____________________________________________________________________

   C:\Documents and Settings\Manuel Lopes\Cookies\01BHY508.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\0JDAL1BI.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\0LM98L6E.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\1R4PRR32.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\1UIX57B2.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\2VHXWOV5.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\4C8BEJEA.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\5XQ8A3VC.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\6A4UWYNE.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\6VF8TM6C.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\84X9A193.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\BFSI2XGT.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\BGVUKQ53.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\CCYD0J5I.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\DA7AKXBO.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\DJ316FM5.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\FNF47UUZ.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\GE7Z68BF.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\GROEDVD5.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\H0JWUTNA.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\H3UOPVLL.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\H8RF4QDW.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\I04U09JT.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\K0J0KPTG.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\NB9AB9MG.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\NMZZC7BB.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\OKIP1SZL.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\RJ8NJQKD.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\URW7A5F7.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\W2AVKTDO.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\Z5RY6TDW.txt
   C:\Documents and Settings\Manuel Lopes\Cookies\Z7TOQ3HC.txt

Blue Zee · 24 de Outubro de 2016

Tens que ativar a licença de 30 dias para fazer a limpeza:

Depois da limpeza coloca aqui um novo log do HJT.

Blue Zee · 24 de Outubro de 2016

Já vi que já usaste o Trial de 30 dias.

Coloca um novo log do HJT.

el_lopes · 24 de Outubro de 2016

Blue Zee disse:
Tens que ativar a licença de 30 dias para fazer a limpeza:

Depois da limpeza coloca aqui um novo log do HJT.

Agora é que está pior.. não me aparece no hitman pro essa opção "Activate free license"....

Blue Zee · 24 de Outubro de 2016

Blue Zee disse:
Já vi que já usaste o Trial de 30 dias.

Coloca um novo log do HJT.

Esquece o Hitman Pro, já usaste os 30 dias.

Atualiza o log do HJT para ver o que vamos limpar.

el_lopes · 24 de Outubro de 2016

Blue Zee disse:
Esquece o Hitman Pro, já usaste os 30 dias.

Atualiza o log do HJT para ver o que vamos limpar.

Aqui vai...

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:24:33, on 24-10-2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programas\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe
C:\WINDOWS\ATKKBService.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
C:\Programas\Samsung\SAMSUNG PC Share Manager\http_ss_win_pro.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Programas\Ficheiros comuns\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Programas\TeamViewer\Version8\TeamViewer_Service.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Programas\Google\Update\1.3.31.5\GoogleCrashHandler.exe
C:\WINDOWS\Explorer.EXE
C:\Programas\Plantronics\GameCom780\GameCom780.exe
C:\Programas\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Programas\Creative\MediaSource5\Go\CTCMSGoU.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
C:\WINDOWS\System32\svchost.exe
C:\Programas\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programas\Google\Chrome\Application\chrome.exe
C:\Programas\Google\Chrome\Application\chrome.exe
C:\Programas\Google\Chrome\Application\chrome.exe
C:\Programas\Google\Chrome\Application\chrome.exe
C:\Programas\CCleaner\CCleaner.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Manuel Lopes\Os meus documentos\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.bing.com/search?q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - (no file)
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programas\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programas\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programas\Java\jre1.8.0_101\bin\ssv.dll
O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programas\Ficheiros comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ScriptInjectionPluginBrowserHelperObject - {C66D064F-82FE-4E1A-B06A-B2490BA48B18} - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programas\Java\jre1.8.0_101\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programas\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Programas\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GamecomSound] C:\Programas\Plantronics\GameCom780\GameCom780.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKCU\..\Run: [Creative MediaSource Go] "C:\Programas\Creative\MediaSource5\Go\CTCMSGoU.exe" /SCB
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Programas\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [SUPERAntiSpyware] C:\Programas\SUPERAntiSpyware\SUPERAntiSpyware.exe (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [uTorrent] "C:\Programas\uTorrent\uTorrent.exe" /MINIMIZED (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [swg] "C:\Programas\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [InternetCalls] "C:\Programas\InternetCalls.com\InternetCalls\InternetCalls.exe" -nosplash -minimized (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [Facebook Update] "C:\Documents and Settings\Manuel\Definições locais\Application Data\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesPreload] C:\Programas\Samsung\Kies\Kies.exe /preload (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesAirMessage] C:\Programas\Samsung\Kies\KiesAirMessage.exe -startup (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesPDLR] C:\Programas\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [Driver Updater] C:\Programas\Carambis\Driver Updater\dupdater.exe /minimized (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.5; Embedded Web Browser from: http://bsalsa.com/; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET4.0C; AskTB5.6)" -"http://gallery.gaysexxxclip.com/gay-tube/chaosmen1/267/" (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Laura Lopes')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-500\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Administrador')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-501\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Convidado')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programas\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programas\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: MBNet-Sidebar - {C014B140-3835-11d6-BC1D-00C095EEAD5D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programas\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHEI~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Pré-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon da cache de categorias dos componentes - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: SAMSUNG AllShare Service (AllShare) - Unknown owner - C:\Programas\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Serviço do Kaspersky Anti-Virus 16.0.0 (AVP16.0.0) - Kaspersky Lab ZAO - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Google Update Service (gupdate1c944e351eac498) (gupdate1c944e351eac498) - Google Inc. - C:\Programas\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programas\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programas\Ficheiros comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programas\Ficheiros comuns\LightScribe\LSSrvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Programas\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Programas\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - VIA Technologies, Inc. - C:\WINDOWS\system32\viakaraokesrv.exe

--
End of file - 11852 bytes

Blue Zee · 24 de Outubro de 2016

Reinicia o sistema e faz um scan com o HJT e seleciona as seguintes entradas para limpar (clique no quadradinho à esquerda de cada uma):

Código:

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe,
O2 - BHO: (no name) - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Programas\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [SUPERAntiSpyware] C:\Programas\SUPERAntiSpyware\SUPERAntiSpyware.exe (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [uTorrent] "C:\Programas\uTorrent\uTorrent.exe" /MINIMIZED (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [InternetCalls] "C:\Programas\InternetCalls.com\InternetCalls\InternetCalls.exe" -nosplash -minimized (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [Facebook Update] "C:\Documents and Settings\Manuel\Definições locais\Application Data\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesPreload] C:\Programas\Samsung\Kies\Kies.exe /preload (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesAirMessage] C:\Programas\Samsung\Kies\KiesAirMessage.exe -startup (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesPDLR] C:\Programas\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [Driver Updater] C:\Programas\Carambis\Driver Updater\dupdater.exe /minimized (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.5; Embedded Web Browser from: http://bsalsa.com/; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET4.0C; AskTB5.6)" -"http://gallery.gaysexxxclip.com/gay-tube/chaosmen1/267/" (User '?')

No final reinicia o PC e corre de novo o AdwCleaner.
Saiu limpo?

el_lopes · 24 de Outubro de 2016

Blue Zee disse:

Reinicia o sistema e faz um scan com o HJT e seleciona as seguintes entradas para limpar (clique no quadradinho à esquerda de cada uma):

Código:

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe,
O2 - BHO: (no name) - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Programas\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [SUPERAntiSpyware] C:\Programas\SUPERAntiSpyware\SUPERAntiSpyware.exe (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [uTorrent] "C:\Programas\uTorrent\uTorrent.exe" /MINIMIZED (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [InternetCalls] "C:\Programas\InternetCalls.com\InternetCalls\InternetCalls.exe" -nosplash -minimized (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [Facebook Update] "C:\Documents and Settings\Manuel\Definições locais\Application Data\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesPreload] C:\Programas\Samsung\Kies\Kies.exe /preload (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesAirMessage] C:\Programas\Samsung\Kies\KiesAirMessage.exe -startup (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [KiesPDLR] C:\Programas\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\Run: [Driver Updater] C:\Programas\Carambis\Driver Updater\dupdater.exe /minimized (User '?')
O4 - HKUS\S-1-5-21-839522115-1965331169-1177238915-1004\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.5; Embedded Web Browser from: http://bsalsa.com/; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET4.0C; AskTB5.6)" -"http://gallery.gaysexxxclip.com/gay-tube/chaosmen1/267/" (User '?')

No final reinicia o PC e corre de novo o AdwCleaner.
Saiu limpo?

Feito!!
PC e internet mais rápidos. Resolvido um problema que me chateava um pouco que era na abertura do windows abria a pasta dos meus documentos. Já não abre.

Seguem os logs depois de reiniciar

AdwCleaner v6.030 - Logfile created 24/10/2016 at 12:14:16
# Updated on 19/10/2016 by Malwarebytes
# Database : 2016-10-23.2 [Server]
# Operating System : Microsoft Windows XP Service Pack 3 (X86)
# Username : Manuel Lopes - MANUEL
# Running from : C:\Documents and Settings\Manuel Lopes\Os meus documentos\Downloads\AdwCleaner.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious keys found.

***** [ Shortcuts ] *****

No infected shortcut found.

***** [ Scheduled Tasks ] *****

No malicious task found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Web browsers ] *****

No malicious Firefox based browser items found.
No malicious Chromium based browser items found.

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [6571 Bytes] - [23/10/2016 21:28:59]
C:\AdwCleaner\AdwCleaner[S0].txt - [5552 Bytes] - [23/10/2016 20:31:18]
C:\AdwCleaner\AdwCleaner[S1].txt - [5625 Bytes] - [23/10/2016 21:10:22]
C:\AdwCleaner\AdwCleaner[S2].txt - [6321 Bytes] - [23/10/2016 21:28:11]
C:\AdwCleaner\AdwCleaner[S3].txt - [1497 Bytes] - [23/10/2016 21:37:08]
C:\AdwCleaner\AdwCleaner[S4].txt - [1570 Bytes] - [23/10/2016 22:45:06]
C:\AdwCleaner\AdwCleaner[S5].txt - [1491 Bytes] - [24/10/2016 12:14:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1564 Bytes] ##########

_________________________________________________________________________________________________

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:16:16, on 24-10-2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programas\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe
C:\WINDOWS\Explorer.EXE
C:\Programas\Google\Update\1.3.31.5\GoogleCrashHandler.exe
C:\WINDOWS\ATKKBService.exe
C:\Programas\Samsung\SAMSUNG PC Share Manager\http_ss_win_pro.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Programas\Ficheiros comuns\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Programas\TeamViewer\Version8\TeamViewer_Service.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Programas\Plantronics\GameCom780\GameCom780.exe
C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Programas\Creative\MediaSource5\Go\CTCMSGoU.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programas\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe
C:\Programas\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Manuel Lopes\Os meus documentos\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.bing.com/search?q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações
O1 - Hosts: ::1 localhost
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Programas\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programas\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programas\Java\jre1.8.0_101\bin\ssv.dll
O2 - BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programas\Ficheiros comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ScriptInjectionPluginBrowserHelperObject - {C66D064F-82FE-4E1A-B06A-B2490BA48B18} - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programas\Java\jre1.8.0_101\bin\jp2ssv.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Programas\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Programas\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GamecomSound] C:\Programas\Plantronics\GameCom780\GameCom780.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Programas\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r
O4 - HKCU\..\Run: [Creative MediaSource Go] "C:\Programas\Creative\MediaSource5\Go\CTCMSGoU.exe" /SCB
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programas\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programas\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: MBNet-Sidebar - {C014B140-3835-11d6-BC1D-00C095EEAD5D} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programas\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHEI~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Pré-carregador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon da cache de categorias dos componentes - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: SAMSUNG AllShare Service (AllShare) - Unknown owner - C:\Programas\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Serviço do Kaspersky Anti-Virus 16.0.0 (AVP16.0.0) - Kaspersky Lab ZAO - C:\Programas\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Google Update Service (gupdate1c944e351eac498) (gupdate1c944e351eac498) - Google Inc. - C:\Programas\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programas\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programas\Ficheiros comuns\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programas\Ficheiros comuns\LightScribe\LSSrvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Programas\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Programas\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - VIA Technologies, Inc. - C:\WINDOWS\system32\viakaraokesrv.exe

Blue Zee · 24 de Outubro de 2016

Quanto aos logs parecem estar em ordem.

Se se está a portar melhor, vai testando e depois confirma.

el_lopes · 24 de Outubro de 2016

Blue Zee disse:
Quanto aos logs parecem estar em ordem.

Se se está a portar melhor, vai testando e depois confirma.

Agradeço desde já toda a tua ajuda e o tempo dispendido :Winkani:

Irei reportando

Blue Zee · 31 de Outubro de 2016

Coloca aqui o log PF.

Blue Zee · 31 de Outubro de 2016

@Micael23

Corre estes programas na ordem indicada:
Limpeza simples de adware, PUP e similares

Depois coloca um novo log do HJT.

Blue Zee · 31 de Outubro de 2016

Reinicia o sistema e faz um scan com o HJT e seleciona as seguintes entradas para limpar (clique no quadradinho à esquerda de cada uma):

Código:

O15 - Trusted Zone: http://*.hola.org
O15 - Trusted Zone: http://*.ma-config.com
O15 - Trusted Zone: http://*.touslesdrivers.com
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{64D0EC6E-74E2-4C86-9175-C8261CC29665}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

No final reinicia o PC e corre de novo o AdwCleaner.
Saiu limpo?

Edit:
Usa Avast ou Kaspersky.
Não podes ter os dois instalados em simultâneo.
Escolhe um, desinstala o outro.

Blue Zee · 31 de Outubro de 2016

Não é só DNS do Google, tem uma série de outros desnecessários.

O Google é 8.8.8.8 e 8.8.4.4

Limpa e se necessário recolocas.
Mas não me parece, se vires logo a seguir tens outra entrada O17, aí sim com o DNS do Google correto.
Podes sempre repor o DNS.

Blue Zee · 31 de Outubro de 2016

Da parte do log não há mais nada a fazer.

Ainda tens problemas?
Quais?

Blue Zee · 31 de Outubro de 2016

Não vale a pena mais logs.

O que se passa exatamente?

Blue Zee · 31 de Outubro de 2016

Podes usar o Process Explorer para tentares identificar o processo que está a causar problemas.

Não tens nenhuma verificação agendada para o arranque do Windows?
Avast? Zemana Antimalware?

Blue Zee · 1 de Novembro de 2016

Uma limpeza com o CCleaner e uma desfragmentação completa com o Defraggler também pode ajudar.

Blue Zee · 1 de Novembro de 2016

Usa o Process Explorer a ver se encontras o processo que está a causar problemas.

.:: Análise de logs HijackThis! ::.

Power Member

Membro

Power Member

Power Member

Membro

Power Member

Membro

Power Member

Membro

Power Member

Membro

Power Member

Power Member

Power Member

Power Member

Power Member

Power Member

Power Member

Power Member

Power Member