Como se livrar desse Hijacker?

[Fe_leme]

Oii bom dia, eu estou tentando me livrar de um Hijacker que apareceu no meu computador, mas não consegui através do Malwarebytes nem pelo ZHPCleaner. Alguém sabe o que devo fazer?

Vou postar o último log que fiz a partir do scanner do ZHPCleaner (após eu já ter reparado previamente).

~ ZHPCleaner v2024.10.21.29 by Nicolas Coolman (2024/10/21) ~ Run by felip (Administrator) (14/11/2024 15:42:34) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ State version : Version OK ~ Certificate ZHPCleaner: Illegal ~ Type : Scan ~ Report : C:\Users\felip\OneDrive\Área de Trabalho\ZHPCleaner (S).txt ~ Quarantine : C:\Users\felip\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt ~ UAC : Activate ~ Boot Mode : Normal (Normal boot) Windows 10 Pro, 64-bit (Build 19045) ---\ Alternate Data Stream (ADS). (0) ~ No malicious or unnecessary items found. (ADS) ---\ Services (0) ~ No malicious or unnecessary items found. (Service) ---\ Browser internet (3) FOUND file: C:\Users\felip\AppData\Local\Microsoft\Edge\User Data\Default\History =>.SUP.BrowserHistoric FOUND folder: C:\Users\felip\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache FOUND folder: C:\Users\felip\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data =>.SUP.BrowserCache ---\ Hosts file (1) ~ The hosts file is legitimate (21) ---\ Scheduled automatic tasks. (0) ~ No malicious or unnecessary items found. (Task) ---\ Explorer ( File, Folder) (1) FOUND file: C:\Users\felip\AppData\Local\Microsoft\Edge\User Data\Default\Preferences =>ChromiumPreference ---\ Registry ( Key, Value, Data) (2) FOUND data: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9f8a82ed-6575-4b63-8a4e-a81e081be0d8}\\DhcpNameServer [Bad : 181.213.132.2 181.213.132.3] =>Hijacker.Browser FOUND data: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer [Bad : 181.213.132.2 181.213.132.3] =>Hijacker.Browser ---\ Summary of the elements found (4) https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserHistoric https://nicolascoolman.eu/2023/07/18/les-caches-et-historiques-de-navigateurs/ =>.SUP.BrowserCache https://nicolascoolman.eu/2020/10/01/preferences-navigateurs-chromium/ =>ChromiumPreference https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser ---\ Result of repair ~ Any repair made ~ Google Chrome OK ~ Microsoft Edge OK ~ Microsoft Internet Explorer OK ---\ Statistics ~ Items scanned : 110077 ~ Items found : 6 ~ Items cancelled : 0 ~ Space saving (bytes) : 0 ~ Items options : 10/18 ---\ OPTIONS NOT ACTIVES ~ Temporary file analysis ~ Temporary folder analysis ~ Empty Folder CLSID Analysis ~ Empty Other Folder Analysis ~ Empty LocalLow Folder Analysis ~ Empty Local Folder Analysis ~ Obsolete Installer File Analysis ~ Start browsers with extensions removed ~ End of search in 00h11mn05s ---\ Reports (5) ZHPCleaner-[R]-14112024-14_52_06.txt ZHPCleaner-[R]-14112024-15_17_40.txt ZHPCleaner-[S]-14112024-14_43_12.txt ZHPCleaner-[S]-14112024-15_11_42.txt ZHPCleaner-[S]-14112024-15_53_39.txt

Além disso, notei que tem dois programas estranhos na inicialização do sistema, desabilitei mas não consigo localizar (imagem em anexo)

[Pedro Math.pi]

@Fe_leme Tenta com o Kaspersky Virus Removal Tool. Ele possui um recurso que, caso não consiga remover o malware, reinicia e faz outro scan antes do login.