Me ajude com o shetef.. preciso tirá-lo do meu pc

can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-10-2013 01
Ran by Carla (administrator) on FISIOTERAPIA on 27-10-2013 15:55:52
Running from C:\Users\Carla\Downloads
Windows 8 Single Language (X64) OS Language: Portuguese Brazilian
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(GAS Tecnologia) C:\PROGRA~2\GbPlugin\GbpSv.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Microsoft Corporation) C:\windows\system32\dashost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(CashPartners Company) C:\Users\Carla\AppData\Local\aHaskZ3\CashPartners.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(keepvid.com Company) C:\Users\Carla\AppData\Local\keepvid.com.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
() C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Microsoft Corporation) C:\windows\system32\consent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\windows\system32\msiexec.exe
(Farbar) C:\Users\Carla\Downloads\FRST64 (1).exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191312 2012-08-07] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2872176 2012-10-08] (ELAN Microelectronics Corp.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [718208 2010-03-16] (Microsoft Corporation)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [405504 2012-07-26] (Microsoft Corporation)
HKCU\...\Run: [CashPartners] - C:\Users\Carla\AppData\Local\aHaskZ3\CashPartners.exe [259072 2013-10-02] (CashPartners Company)
HKCU\...\Run: [GoogleChromeAutoLaunch_92C0FC63908EA4D589DA4051E023A4FC] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [844752 2013-10-08] (Google Inc.)
MountPoints2: {735c3448-25d3-11e3-be7e-c8f7337b8332} - "D:\AutoRun.exe"
MountPoints2: {735c3484-25d3-11e3-be7e-c8f7337b8332} - "D:\AutoRun.exe"
MountPoints2: {9d84e317-1b5a-11e3-be79-c8f7337b8332} - "D:\iStudio.exe"
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4908592 2013-10-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [keepvid] - C:\Users\Carla\AppData\Local\keepvid.com.exe [1120256 2013-06-10] (keepvid.com Company)
Startup: C:\Users\Carla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKLM - DefaultScope {EDC7EBEB-7A1F-4721-A5E5-B9A3113F7783} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKLM - {EDC7EBEB-7A1F-4721-A5E5-B9A3113F7783} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKLM-x32 - DefaultScope {EDC7EBEB-7A1F-4721-A5E5-B9A3113F7783} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKLM-x32 - {EDC7EBEB-7A1F-4721-A5E5-B9A3113F7783} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKCU - DefaultScope {EDC7EBEB-7A1F-4721-A5E5-B9A3113F7783} URL =
SearchScopes: HKCU - {EDC7EBEB-7A1F-4721-A5E5-B9A3113F7783} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: keepvid.com - {49ed9900-38cd-453c-bba7-3f2613317f5a} - C:\Users\Carla\AppData\Local\keepvid.dll (keepvid.com Company)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\Program Files (x86)\GbPlugin\gbieh.dll (Banco do Brasil)
BHO-x32: SoundFrost - {d997c836-ff82-4519-b459-1482ba942a4f} - C:\Program Files (x86)\Baixar Musicas Gratis\SoundFrost.dll (SoundFrost Company)
BHO-x32: Music Codec Pack - {e38b9042-67f5-4b8c-a1b5-4afa8acc648f} - C:\Program Files (x86)\Music Codec Pack\Music Codec Pack.dll (Music Codec Pack Company)
ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll [1410088 2013-07-15] (Banco do Brasil)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (M\u00F3dulo de Prote\u00E7\u00E3o - Banco do Brasil) - C:\Users\Carla\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll (GAS Tecnologia)
CHR Extension: (Google Docs) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (SoundFrost) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\epmacgekaillabiljokcfdjifdeiejfi\3.6.2_0
CHR Extension: (Music Codec Pack) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncepkeikopidndclheeaehhemehmpdbc\2.3.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (keepvid.com) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\oipolchnclfaogmpaomopjibifaabgif\2.0.0.0_0
CHR Extension: (MyPrintScreen) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\phbdoklmoijgoildghakacmipacllokm\2.0.0.0_0
CHR Extension: (Gmail) - C:\Users\Carla\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-10-03] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-25] (AVG Technologies CZ, s.r.o.)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593976 2012-10-19] (Samsung Electronics CO., LTD.)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [90992 2012-10-08] (ELAN Microelectronics Corp.)
R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [102224 2012-08-17] (Condusiv Technologies)
R2 GbpSv; C:\PROGRA~2\GbPlugin\GbpSv.exe [409640 2013-07-15] (GAS Tecnologia)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 irstrtsv; C:\windows\SysWOW64\irstrtsv.exe [193576 2012-07-19] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-09-24] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-01] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [1153840 2012-09-24] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-04] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [148792 2013-09-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [252728 2013-07-30] (AVG Technologies CZ, s.r.o.)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-26] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-28] (Motorola Solutions, Inc.)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23376 2012-08-17] (Condusiv Technologies)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [103248 2012-08-17] (Condusiv Technologies)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4309032 2012-10-10] (Intel Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S3 BprotectEx; \??\C:\windows\System32\drivers\BprotectEx.sys [x]
S3 PCFApiUtil; \??\C:\Program Files (x86)\Baidu Security\PC Faster\3.7.0.0\PCFApiUtil64.sys [x]
S3 SBIOSIO; \??\C:\Windows\Temp\SBIOSIO64.SYS [x]
S3 TVICPORT; \??\C:\windows\system32\DRIVERS\TVICPORT.SYS [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-27 15:54 - 2013-10-27 15:54 - 01956160 _____ (Farbar) C:\Users\Carla\Downloads\FRST64 (1).exe
2013-10-27 15:54 - 2013-10-27 15:54 - 00000000 ____D C:\FRST
2013-10-27 15:51 - 2013-10-27 15:53 - 01956160 _____ (Farbar) C:\Users\Carla\Downloads\FRST64.exe
2013-10-27 02:51 - 2013-10-27 03:36 - 00000000 ____D C:\Program Files (x86)\Music Codec Pack
2013-10-27 02:51 - 2013-08-02 15:29 - 00217176 _____ C:\windows\SysWOW64\unrar.dll
2013-10-27 00:16 - 2013-10-27 02:30 - 01242818 _____ C:\Users\Carla\AppData\Local\helper.dat
2013-10-27 00:16 - 2013-10-27 02:30 - 00089088 _____ (keepvid.com Company) C:\Users\Carla\AppData\Local\keepvid.dll
2013-10-27 00:16 - 2013-10-27 00:16 - 00000000 ____D C:\Users\Carla\AppData\Local\aHaskZ3
2013-10-27 00:16 - 2013-08-19 12:42 - 00108032 _____ C:\Users\Carla\AppData\Local\ContentAgent.exe
2013-10-27 00:16 - 2013-08-07 16:32 - 02598912 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Carla\AppData\Local\QtCore4.dll
2013-10-27 00:16 - 2013-06-27 11:16 - 08581632 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Carla\AppData\Local\QtGui4.dll
2013-10-27 00:16 - 2013-06-27 11:10 - 01053696 _____ (Digia Plc and/or its subsidiary(-ies)) C:\Users\Carla\AppData\Local\QtNetwork4.dll
2013-10-27 00:16 - 2013-06-10 17:59 - 01120256 _____ (keepvid.com Company) C:\Users\Carla\AppData\Local\keepvid.com.exe
2013-10-27 00:16 - 2013-03-18 18:45 - 01122304 _____ (The OpenSSL Project, [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] C:\Users\Carla\AppData\Local\libeay32.dll
2013-10-27 00:16 - 2013-03-18 18:45 - 00274432 _____ (The OpenSSL Project, [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] C:\Users\Carla\AppData\Local\ssleay32.dll
2013-10-27 00:16 - 2011-06-11 01:58 - 00773968 _____ (Microsoft Corporation) C:\Users\Carla\AppData\Local\msvcr100.dll
2013-10-27 00:16 - 2011-06-11 01:58 - 00421200 _____ (Microsoft Corporation) C:\Users\Carla\AppData\Local\msvcp100.dll
2013-10-27 00:09 - 2013-10-27 03:25 - 00000286 __RSH C:\Users\Carla\ntuser.pol
2013-10-27 00:09 - 2013-10-27 00:18 - 00000000 ____D C:\Program Files (x86)\Baixar Musicas Gratis
2013-10-27 00:07 - 2013-10-27 00:07 - 21245326 _____ (Baixar Musicas Gratis Company                               ) C:\Users\Carla\Downloads\379-baixar-musicas-gratis.exe
2013-10-26 22:37 - 2013-10-27 02:07 - 00000318 _____ C:\windows\Tasks\UpdaterEX.job
2013-10-26 22:37 - 2013-10-27 00:07 - 00002656 _____ C:\windows\System32\Tasks\UpdaterEX
2013-10-26 22:37 - 2013-10-26 22:37 - 00000000 ____D C:\Users\Carla\AppData\Roaming\UpdaterEX
2013-10-25 20:33 - 2013-10-25 20:33 - 00000000 ____D C:\Users\Carla\Desktop\Fisioterapia além do horizonte
2013-10-25 15:54 - 2013-10-26 22:31 - 00000000 ____D C:\Users\Carla\Desktop\ergonomia
2013-10-25 15:50 - 2013-10-25 15:50 - 00003067 _____ C:\Users\Carla\Desktop\Microsoft Publisher 2010.lnk
2013-10-25 15:50 - 2013-10-25 15:50 - 00003031 _____ C:\Users\Carla\Desktop\Microsoft Word 2010.lnk
2013-10-25 15:50 - 2013-10-25 15:50 - 00002911 _____ C:\Users\Carla\Desktop\Microsoft PowerPoint 2010.lnk
2013-10-25 15:50 - 2013-10-25 15:50 - 00002911 _____ C:\Users\Carla\Desktop\Microsoft Excel 2010.lnk
2013-10-16 17:17 - 2013-10-16 17:17 - 01055896 _____ (Zugara Investments Limited                                  ) C:\Users\Carla\Downloads\o_manuscrito_do_downloader.exe
2013-10-15 17:09 - 2013-08-10 03:21 - 00448512 _____ (Microsoft Corporation) C:\windows\system32\SettingSync.dll
2013-10-15 17:09 - 2013-08-10 03:21 - 00128512 _____ (Microsoft Corporation) C:\windows\system32\SettingSyncInfo.dll
2013-10-15 17:09 - 2013-08-10 01:58 - 00356352 _____ (Microsoft Corporation) C:\windows\SysWOW64\SettingSync.dll
2013-10-15 17:09 - 2013-08-03 04:40 - 01374208 _____ (Microsoft Corporation) C:\windows\system32\wdc.dll
2013-10-15 17:09 - 2013-08-03 04:40 - 00566784 _____ (Microsoft Corporation) C:\windows\system32\wvc.dll
2013-10-15 17:09 - 2013-08-03 04:40 - 00462336 _____ (Microsoft Corporation) C:\windows\system32\sysmon.ocx
2013-10-15 17:09 - 2013-08-03 03:14 - 00399360 _____ (Microsoft Corporation) C:\windows\SysWOW64\sysmon.ocx
2013-10-15 17:09 - 2013-08-03 03:13 - 01245696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdc.dll
2013-10-15 17:09 - 2013-08-03 03:13 - 00437248 _____ (Microsoft Corporation) C:\windows\SysWOW64\wvc.dll
2013-10-15 17:09 - 2013-08-02 04:28 - 19758080 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-10-15 17:09 - 2013-08-02 04:28 - 10116608 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2013-10-15 17:09 - 2013-08-02 04:28 - 00222208 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-10-15 17:09 - 2013-08-02 04:26 - 02304512 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-10-15 17:09 - 2013-08-02 03:08 - 17561088 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-10-15 17:09 - 2013-08-02 03:08 - 08858112 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2013-10-15 17:09 - 2013-08-02 03:08 - 00199168 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-10-15 17:09 - 2013-08-02 03:06 - 02035712 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-10-15 17:09 - 2013-08-01 08:41 - 02233688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-10-15 17:09 - 2013-07-30 21:30 - 00386923 _____ C:\windows\system32\ApnDatabase.xml
2013-10-15 17:09 - 2013-07-24 21:10 - 00158208 _____ (Microsoft Corporation) C:\windows\SysWOW64\mbsmsapi.dll
2013-10-15 17:09 - 2013-07-24 21:06 - 00225280 _____ (Microsoft Corporation) C:\windows\system32\mbsmsapi.dll
2013-10-15 17:09 - 2013-04-09 21:17 - 01125888 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
2013-10-15 17:09 - 2013-04-09 20:29 - 00893952 _____ (Microsoft Corporation) C:\windows\SysWOW64\msctf.dll
2013-10-13 23:07 - 2013-10-19 23:41 - 00095744 ___SH C:\Users\Carla\Downloads\Thumbs.db
2013-10-13 22:49 - 2013-10-17 14:47 - 00000000 ____D C:\Users\Carla\Desktop\abaco
2013-10-09 13:57 - 2013-09-22 21:27 - 14335488 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-10-09 13:57 - 2013-09-22 20:54 - 19252224 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-09 13:57 - 2013-09-22 20:54 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-09 13:57 - 2013-07-05 22:15 - 00652288 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 13:57 - 2013-07-04 00:13 - 00541696 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-10-09 13:56 - 2013-09-22 21:28 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-10-09 13:56 - 2013-09-22 21:28 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-10-09 13:56 - 2013-09-22 21:27 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-10-09 13:56 - 2013-09-22 21:27 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-10-09 13:56 - 2013-09-22 21:27 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-10-09 13:56 - 2013-09-22 21:27 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-10-09 13:56 - 2013-09-22 21:27 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-10-09 13:56 - 2013-09-22 20:55 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-09 13:56 - 2013-09-22 20:55 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-09 13:56 - 2013-09-22 20:55 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-09 13:56 - 2013-09-22 20:54 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-09 13:56 - 2013-09-22 20:54 - 02647552 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-09 13:56 - 2013-09-22 20:54 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-09 13:56 - 2013-09-22 20:54 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-09 13:56 - 2013-05-15 20:37 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2013-10-09 13:56 - 2013-05-15 20:35 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2013-10-09 13:56 - 2013-05-14 11:14 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-09 13:56 - 2013-05-14 07:23 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-10-09 13:56 - 2013-04-28 20:28 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2013-10-09 13:56 - 2013-02-21 08:29 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-10-09 13:56 - 2013-02-21 08:29 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-10-09 13:56 - 2013-02-21 08:29 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-10-09 13:56 - 2013-02-21 08:29 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-10-09 13:56 - 2013-02-21 08:14 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-09 13:56 - 2013-02-21 08:14 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-09 13:56 - 2013-02-19 07:53 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2013-10-09 13:56 - 2012-11-08 02:20 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-09 13:56 - 2012-11-08 02:20 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-09 13:55 - 2013-07-19 20:13 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 13:55 - 2013-07-19 20:13 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 13:55 - 2013-07-01 23:41 - 00447320 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBHUB3.SYS
2013-10-09 13:55 - 2013-07-01 23:41 - 00337752 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBXHCI.SYS
2013-10-09 13:55 - 2013-07-01 23:41 - 00213336 _____ (Microsoft Corporation) C:\windows\system32\Drivers\UCX01000.SYS
2013-10-09 10:38 - 2013-08-23 03:11 - 04040192 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 10:38 - 2013-07-05 20:02 - 00099328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 10:38 - 2013-07-05 20:01 - 00210560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 10:38 - 2013-07-01 20:14 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbprint.sys
2013-10-09 10:38 - 2013-06-30 23:42 - 00623448 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 10:38 - 2013-06-30 23:42 - 00498008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 10:38 - 2013-06-30 23:42 - 00079192 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 10:38 - 2013-06-30 23:42 - 00021848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 10:38 - 2013-06-29 01:08 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 10:38 - 2013-06-29 01:07 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 10:38 - 2013-06-29 01:07 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 10:38 - 2013-06-29 01:06 - 00120832 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 10:38 - 2013-06-22 03:45 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-09 10:38 - 2013-06-22 03:45 - 00054488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\WdfLdr.sys
2013-10-09 10:38 - 2013-05-26 21:17 - 00035328 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-10-09 10:38 - 2013-05-26 20:59 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 10:38 - 2013-05-25 01:15 - 00362496 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 10:38 - 2013-05-25 00:32 - 00300032 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-10-07 02:34 - 2013-10-25 02:28 - 00000000 ____D C:\Users\Carla\Desktop\casa serrão 2013 a boa!
2013-10-04 09:48 - 2013-10-25 12:59 - 00000000 ____D C:\Users\Carla\Desktop\Nova pasta
2013-09-27 19:23 - 2013-09-27 19:23 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-09-27 19:23 - 2013-09-27 19:23 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software

==================== One Month Modified Files and Folders =======

2013-10-27 15:56 - 2013-09-25 16:45 - 00001092 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-27 15:54 - 2013-10-27 15:54 - 01956160 _____ (Farbar) C:\Users\Carla\Downloads\FRST64 (1).exe
2013-10-27 15:54 - 2013-10-27 15:54 - 00000000 ____D C:\FRST
2013-10-27 15:53 - 2013-10-27 15:51 - 01956160 _____ (Farbar) C:\Users\Carla\Downloads\FRST64.exe
2013-10-27 13:02 - 2012-07-26 06:12 - 00000000 ____D C:\windows\system32\sru
2013-10-27 10:59 - 2013-09-19 23:55 - 00000000 ____D C:\ProgramData\MFAData
2013-10-27 10:56 - 2012-11-11 23:25 - 00000000 ____D C:\ProgramData\WinClon
2013-10-27 10:54 - 2013-09-25 16:45 - 00001088 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-27 10:54 - 2013-09-20 00:33 - 00122880 ___SH C:\Users\Carla\Desktop\Thumbs.db
2013-10-27 03:36 - 2013-10-27 02:51 - 00000000 ____D C:\Program Files (x86)\Music Codec Pack
2013-10-27 03:25 - 2013-10-27 00:09 - 00000286 __RSH C:\Users\Carla\ntuser.pol
2013-10-27 03:25 - 2013-09-11 20:11 - 00000000 ____D C:\Users\Carla
2013-10-27 03:06 - 2012-11-13 05:35 - 00762816 _____ C:\windows\system32\prfh0416.dat
2013-10-27 03:06 - 2012-11-13 05:35 - 00154608 _____ C:\windows\system32\prfc0416.dat
2013-10-27 03:06 - 2012-07-26 05:28 - 01765682 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-27 03:02 - 2013-09-12 01:04 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\windows\SysWOW64\Drivers\gbpndisrd.sys
2013-10-27 03:02 - 2013-09-12 01:04 - 00010266 _____ C:\windows\SysWOW64\Drivers\ndisrd.cat
2013-10-27 03:02 - 2013-09-12 01:04 - 00001402 _____ C:\windows\SysWOW64\Drivers\gas.cer
2013-10-27 03:02 - 2012-07-26 05:22 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-27 03:01 - 2012-07-26 03:26 - 00262144 ___SH C:\windows\system32\config\BBI
2013-10-27 02:30 - 2013-10-27 00:16 - 01242818 _____ C:\Users\Carla\AppData\Local\helper.dat
2013-10-27 02:30 - 2013-10-27 00:16 - 00089088 _____ (keepvid.com Company) C:\Users\Carla\AppData\Local\keepvid.dll
2013-10-27 02:07 - 2013-10-26 22:37 - 00000318 _____ C:\windows\Tasks\UpdaterEX.job
2013-10-27 00:18 - 2013-10-27 00:09 - 00000000 ____D C:\Program Files (x86)\Baixar Musicas Gratis
2013-10-27 00:16 - 2013-10-27 00:16 - 00000000 ____D C:\Users\Carla\AppData\Local\aHaskZ3
2013-10-27 00:09 - 2012-07-26 06:12 - 00000000 ___HD C:\windows\system32\GroupPolicy
2013-10-27 00:07 - 2013-10-27 00:07 - 21245326 _____ (Baixar Musicas Gratis Company                               ) C:\Users\Carla\Downloads\379-baixar-musicas-gratis.exe
2013-10-27 00:07 - 2013-10-26 22:37 - 00002656 _____ C:\windows\System32\Tasks\UpdaterEX
2013-10-26 23:16 - 2013-09-11 20:11 - 00000000 ____D C:\Users\Carla\AppData\Local\VirtualStore
2013-10-26 22:37 - 2013-10-26 22:37 - 00000000 ____D C:\Users\Carla\AppData\Roaming\UpdaterEX
2013-10-26 22:31 - 2013-10-25 15:54 - 00000000 ____D C:\Users\Carla\Desktop\ergonomia
2013-10-25 20:33 - 2013-10-25 20:33 - 00000000 ____D C:\Users\Carla\Desktop\Fisioterapia além do horizonte
2013-10-25 15:50 - 2013-10-25 15:50 - 00003067 _____ C:\Users\Carla\Desktop\Microsoft Publisher 2010.lnk
2013-10-25 15:50 - 2013-10-25 15:50 - 00003031 _____ C:\Users\Carla\Desktop\Microsoft Word 2010.lnk
2013-10-25 15:50 - 2013-10-25 15:50 - 00002911 _____ C:\Users\Carla\Desktop\Microsoft PowerPoint 2010.lnk
2013-10-25 15:50 - 2013-10-25 15:50 - 00002911 _____ C:\Users\Carla\Desktop\Microsoft Excel 2010.lnk
2013-10-25 12:59 - 2013-10-04 09:48 - 00000000 ____D C:\Users\Carla\Desktop\Nova pasta
2013-10-25 02:28 - 2013-10-07 02:34 - 00000000 ____D C:\Users\Carla\Desktop\casa serrão 2013 a boa!
2013-10-25 00:34 - 2013-09-25 10:13 - 00000000 ____D C:\Users\Carla\Desktop\CARLA MIX
2013-10-24 08:04 - 2012-07-26 03:26 - 00262144 ___SH C:\windows\system32\config\ELAM
2013-10-24 08:01 - 2012-07-26 06:12 - 00000000 ____D C:\windows\system32\NDF
2013-10-24 08:00 - 2013-09-11 20:14 - 00000000 ___RD C:\Users\Carla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-24 08:00 - 2013-09-11 20:14 - 00000000 ___RD C:\Users\Carla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-24 07:58 - 2012-07-26 06:12 - 00000000 ___RD C:\windows\ToastData
2013-10-23 07:23 - 2012-07-26 06:12 - 00000000 ____D C:\windows\AUInstallAgent
2013-10-20 01:57 - 2013-09-12 00:26 - 00000000 ____D C:\Users\Carla\AppData\Local\CrashDumps
2013-10-20 00:01 - 2013-09-25 16:46 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-19 23:41 - 2013-10-13 23:07 - 00095744 ___SH C:\Users\Carla\Downloads\Thumbs.db
2013-10-17 14:47 - 2013-10-13 22:49 - 00000000 ____D C:\Users\Carla\Desktop\abaco
2013-10-16 17:17 - 2013-10-16 17:17 - 01055896 _____ (Zugara Investments Limited                                  ) C:\Users\Carla\Downloads\o_manuscrito_do_downloader.exe
2013-10-13 21:08 - 2013-09-20 00:03 - 00000983 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-10-13 21:08 - 2012-07-26 06:12 - 00000000 ___HD C:\windows\ELAMBKUP
2013-10-11 17:07 - 2013-09-25 10:03 - 00000000 ____D C:\Users\Carla\Desktop\_PACIENTES
2013-10-09 16:13 - 2013-09-18 23:38 - 00000000 ____D C:\windows\system32\MRT
2013-10-09 16:11 - 2013-09-18 23:38 - 80541720 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-07 22:51 - 2013-09-25 16:45 - 00004064 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-07 22:51 - 2013-09-25 16:45 - 00003828 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-02 13:17 - 2013-09-25 20:06 - 00000000 ____D C:\Users\Carla\Desktop\tcc Eduardo
2013-10-01 23:38 - 2013-09-19 23:17 - 00694232 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-10-01 23:38 - 2013-09-19 23:17 - 00078296 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-30 23:43 - 2013-09-11 20:11 - 00000000 ____D C:\Users\Carla\AppData\Local\Packages
2013-09-27 19:33 - 2012-11-11 23:33 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-09-27 19:23 - 2013-09-27 19:23 - 00000000 ____D C:\Users\Default\AppData\Roaming\TuneUp Software
2013-09-27 19:23 - 2013-09-27 19:23 - 00000000 ____D C:\Users\Default User\AppData\Roaming\TuneUp Software

Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe


Some content of TEMP:
====================
C:\Users\Carla\AppData\Local\Temp\Baixar Musicas Gratis_updater.exe
C:\Users\Carla\AppData\Local\Temp\MusicCodecPack__3465_il1.exe
C:\Users\Carla\AppData\Local\Temp\SF_Update.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-20 00:04

==================== End Of Log ============================

e agora tá aparecendo um tal de amonetize

obrigada























[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Olá carla porto

Baixe o arquivo fixlist.txt e salve-o na mesma pasta onde encontra-se o FRST

*Clique com o botão direito do mouse no FRST e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Clique [Fix] e cole o relatório Fixlog.txt

*Reinicie o PC

Este arquivo fixlist.txt é para uso exclusivo deste usuário e não deve ser utilizado em outro PC!

TÓPICO ARQUIVADO

Como o(a) autor(a) não respondeu ao tópico por mais de 15 dias, o mesmo foi arquivado.

Caso o(a) autor(a) do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando a reabertura.