Problemas com adwcleaner

Mônica escreveu:Antes de fazer isso, seria interessante ou não tentar o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] que eu utilizei lá no começo da nossa conversa?

Código:


OTS logfile created on: 30/01/2014 11:33:24 - Run 1
OTS by OldTimer - Version 3.1.47.2    Folder = C:\Users\Mônica\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16428)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 49,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 67,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 297,99 Gb Total Space | 204,07 Gb Free Space | 68,48% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: MÔNICA-NETBOOK
Current User Name: Mônica
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 30 Days
 
[Processes - Safe List]
ots (3).exe -> C:\Users\Mônica\Downloads\OTS (3).exe -> [2014/01/30 11:29:44 | 000,646,656 | ---- | M] (OldTimer Tools)
chrome.exe -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe -> [2014/01/23 03:57:02 | 000,866,584 | ---- | M] (Google Inc.)
armsvc.exe -> C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -> [2013/12/21 04:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated)
realsched.exe -> C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe -> [2013/09/11 14:52:57 | 000,295,512 | ---- | M] (RealNetworks, Inc.)
rndlresolversvc.exe -> C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe -> [2013/08/14 16:19:22 | 000,039,056 | ---- | M] ()
gbpsv.exe -> C:\Program Files (x86)\GbPlugin\gbpsv.exe -> [2013/05/23 11:48:10 | 000,410,152 | ---- | M] (GAS Tecnologia)
avgwdsvc.exe -> C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -> [2012/02/14 05:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.)
iaanotif.exe -> C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe -> [2009/06/04 20:03:32 | 000,186,904 | ---- | M] (Intel Corporation)
iaantmon.exe -> C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -> [2009/06/04 20:03:06 | 000,354,840 | ---- | M] (Intel Corporation)
lxczbmgr.exe -> C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe -> [2009/04/27 16:21:26 | 000,074,408 | ---- | M] (Lexmark International, Inc.)
lxczbmon.exe -> C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmon.exe -> [2009/04/27 16:19:38 | 000,058,024 | ---- | M] (Lexmark International, Inc.)
 
[Modules - No Company Name]
ppgooglenaclpluginchrome.dll -> C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppgooglenaclpluginchrome.dll -> [2014/01/23 03:57:00 | 000,399,640 | ---- | M] ()
pdf.dll -> C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll -> [2014/01/23 03:56:56 | 004,055,320 | ---- | M] ()
libglesv2.dll -> C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libglesv2.dll -> [2014/01/23 03:56:02 | 000,715,544 | ---- | M] ()
libegl.dll -> C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\libegl.dll -> [2014/01/23 03:56:01 | 000,100,120 | ---- | M] ()
ffmpegsumo.dll -> C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ffmpegsumo.dll -> [2014/01/23 03:55:58 | 001,634,584 | ---- | M] ()
 
[Win32 Services - Safe List]
(AdobeARMservice) Adobe Acrobat Update Service [Auto | Running] -> C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -> [2013/12/21 04:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated)
(AdobeFlashPlayerUpdateSvc) Adobe Flash Player Update Service [On_Demand | Stopped] -> C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -> [2013/12/10 23:01:13 | 000,257,416 | ---- | M] (Adobe Systems Incorporated)
(SkypeUpdate) Skype Updater [Auto | Stopped] -> C:\Program Files (x86)\Skype\Updater\Updater.exe -> [2013/09/05 10:34:30 | 000,171,680 | ---- | M] (Skype Technologies)
(RealNetworks Downloader Resolver Service) RealNetworks Downloader Resolver Service [Auto | Running] -> C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe -> [2013/08/14 16:19:22 | 000,039,056 | ---- | M] ()
(GbpSv) Gbp Service [Unknown | Running] -> C:\Program Files (x86)\GbPlugin\gbpsv.exe -> [2013/05/23 11:48:10 | 000,410,152 | ---- | M] (GAS Tecnologia)
(avgwd) Watchdog do AVG [Auto | Running] -> C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe -> [2012/02/14 05:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.)
(WinHttpAutoProxySvc) Serviço de Descoberta Automática de Proxy da Web do WinHTTP [On_Demand | Stopped] -> winhttp.dll -> [2010/11/20 10:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation)
(clr_optimization_v4.0.30319_32) Microsoft .NET Framework NGEN v4.0.30319_X86 [Auto | Stopped] -> C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -> [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation)
(clr_optimization_v2.0.50727_32) Microsoft .NET Framework NGEN v2.0.50727_X86 [Disabled | Stopped] -> C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2009/06/10 19:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation)
(IAANTMON) Intel(R) Matrix Storage Event Monitor [Auto | Running] -> C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -> [2009/06/04 20:03:06 | 000,354,840 | ---- | M] (Intel Corporation)
(lxcz_device) lxcz_device [Auto | Running] -> C:\Windows\SysWow64\lxczcoms.exe -> [2007/04/19 16:43:42 | 000,537,520 | ---- | M] ( )
 
[Driver Services - Safe List]
(usbehci) Microsoft USB 2.0 Enhanced Host Controller Miniport Driver [Kernel | On_Demand | Running] -> C:\Windows\system32\drivers\usbehci.sys -> [2014/01/17 08:18:26 | 000,000,000 | ---- | M] ()
(GbpKm) Gbp KernelMode [Kernel | Boot | Stopped] -> C:\Windows\system32\drivers\gbpkm.sys -> [2013/05/08 10:52:48 | 000,049,536 | ---- | M] (GAS Tecnologia)
(WIMMount) WIMMount [File_System | On_Demand | Stopped] -> C:\Windows\SysWOW64\drivers\wimmount.sys -> [2009/07/13 23:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation)
 
[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> ->
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> C:\Windows\SysWOW64\blank.htm ->
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.baixaki.com.br/portal/?utm_source=core&utm_medium=ppi&utm_campaign=portal ->
< Internet Explorer Settings [HKEY_USERS\.DEFAULT\] > -> ->
HKEY_USERS\.DEFAULT\: Main\\"Start Page" -> http://www.google.com ->
HKEY_USERS\.DEFAULT\: "ProxyEnable" -> 0 ->
< Internet Explorer Settings [HKEY_USERS\S-1-5-18\] > -> ->
HKEY_USERS\S-1-5-18\: Main\\"Start Page" -> http://www.google.com ->
HKEY_USERS\S-1-5-18\: "ProxyEnable" -> 0 ->
< Internet Explorer Settings [HKEY_USERS\S-1-5-19\] > -> ->
HKEY_USERS\S-1-5-19\: Main\\"Start Page" -> http://www.google.com ->
< Internet Explorer Settings [HKEY_USERS\S-1-5-20\] > -> ->
HKEY_USERS\S-1-5-20\: Main\\"Start Page" -> http://www.google.com ->
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\] > -> ->
HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\: Main\\"Start Page" -> http://www.google.com ->
HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\: Main\\"Start Page Redirect Cache" -> http://br.msn.com/?ocid=iehp ->
HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\: Main\\"Start Page Redirect Cache AcceptLangs" -> pt-br ->
HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\: Main\\"Start Page Redirect Cache_TIMESTAMP" -> A3 C2 F2 69 7B 76 CC 01  [binary data] ->
HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\: "ProxyEnable" -> 0 ->
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
HKLM\software\mozilla\Firefox\Extensions ->  ->
HKLM\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4} -> C:\PROGRAM FILES (X86)\AVG\AVG2012\FIREFOX4\ [C:\PROGRAM FILES (X86)\AVG\AVG2012\FIREFOX4\] -> [2013/11/18 12:16:14 | 000,000,000 | ---D | M]
HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [C:\PROGRAMDATA\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT] -> [2013/09/11 14:56:50 | 000,000,000 | ---D | M]
HKLM\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2} -> C:\PROGRAMDATA\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT\ [C:\PROGRAMDATA\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT\] -> [2013/09/11 14:56:50 | 000,000,000 | ---D | M]
< FireFox Extensions [User Folders] > ->
< HOSTS File > ([2011/12/16 14:52:26 | 000,000,824 | ---- | M] - 21 lines) -> C:\Windows\SysNative\Drivers\etc\hosts ->
Reset Hosts
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
{3049C3E9-B461-4BC5-8870-4C09146192CA} [HKLM] -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [RealNetworks Download and Record Plugin for Internet Explorer] -> [2013/08/14 16:21:40 | 000,542,376 | ---- | M] (RealDownloader)
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [HKLM] -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [Java(tm) Plug-In SSV Helper] -> [2013/07/05 11:29:12 | 000,463,272 | ---- | M] (Oracle Corporation)
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} [HKLM] ->  [avast! Online Security] -> File not found
{C41A1C0E-EA6C-11D4-B1B8-444553540000} [HKLM] -> C:\Program Files (x86)\GbPlugin\gbieh.dll [GbIehObj Class] -> [2013/05/23 11:47:50 | 001,389,096 | ---- | M] (Banco do Brasil)
{DBC80044-A445-435b-BC74-9C25C1C588A9} [HKLM] -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [Java(tm) Plug-In 2 SSV Helper] -> [2013/07/05 11:29:12 | 000,171,944 | ---- | M] (Oracle Corporation)
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
"{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" [HKLM] ->  [avast! Online Security] -> File not found
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"APSDaemon" -> C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe ["C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"] -> [2013/04/21 21:43:52 | 000,059,720 | ---- | M] (Apple Inc.)
"AvastUI.exe" ->  ["D:\AvastUI.exe" /nogui] -> File not found
"AVG_TRAY" -> C:\Program Files (x86)\AVG\AVG2012\avgtray.exe ["C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"] -> [2012/11/19 17:25:32 | 002,598,520 | ---- | M] (AVG Technologies CZ, s.r.o.)
"TkBellExe" -> C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe ["C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe"  -osboot] -> [2013/09/11 14:52:57 | 000,295,512 | ---- | M] (RealNetworks, Inc.)
< Run [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"Sidebar" -> C:\Program Files (x86)\Windows Sidebar\Sidebar.exe [%ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun] -> [2010/11/20 10:17:41 | 001,174,016 | ---- | M] (Microsoft Corporation)
< RunOnce [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce ->
"mctadmin" ->  [C:\Windows\System32\mctadmin.exe] -> File not found
< Run [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"Sidebar" -> C:\Program Files (x86)\Windows Sidebar\Sidebar.exe [%ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun] -> [2010/11/20 10:17:41 | 001,174,016 | ---- | M] (Microsoft Corporation)
< RunOnce [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce ->
"mctadmin" ->  [C:\Windows\System32\mctadmin.exe] -> File not found
< Run [HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\] > -> HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"9f46" -> C:\Users\Mônica\AppData\Roaming\89508\9f46.js [C:\Users\Mônica\AppData\Roaming\89508\9f46.js] -> [2014/01/30 11:00:51 | 000,047,187 | ---- | M] ()
"HP Deskjet 3510 series (NET)" -> C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe ["C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe" -deviceID "BR31CFG0MV05TY:NW" -scfn "HP Deskjet 3510 series (NET)" -AutoStart 1] -> [2012/10/17 05:29:50 | 002,573,416 | ---- | M] (Hewlett-Packard Co.)
< Software Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer ->
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel
\Control Panel\\"HomePage" ->  [0] -> File not found
< Software Policy Settings [HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000] > -> HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Policies\Microsoft\Internet Explorer ->
< CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoActiveDesktop" ->  [1] -> File not found
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"ConsentPromptBehaviorAdmin" ->  [5] -> File not found
\\"ConsentPromptBehaviorUser" ->  [3] -> File not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000] > -> HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer ->
< CurrentVersion Policy Settings [HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000] > -> HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ ->
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_USERS\S-1-5-19\] > -> HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_USERS\S-1-5-20\] > -> HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\] > -> HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 2 domain(s) found. ->
www_bancobrasil.com.br [*] -> Sites confiáveis ->
www14_bancobrasil.com.br [*] -> Sites confiáveis ->
www2_bancobrasil.com.br [*] -> Sites confiáveis ->
www_bb.com.br [*] -> Sites confiáveis ->
< Trusted Sites Ranges [HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\] > -> HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_USERS\S-1-5-21-538145900-949067246-403695909-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->
{8AD9C840-044E-11D1-B3E9-00805F499D93} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab [Java Plug-in 10.25.2] ->
{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.3.1/jinstall-1_3_1_03-windows-i586.cab [Java Plug-in 1.3.1_03] ->
{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab [Java Plug-in 1.6.0_31] ->
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab [Java Plug-in 10.25.2] ->
{D27CDB6E-AE6D-11CF-96B8-444553540000} [HKLM] -> http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab [Shockwave Flash Object] ->
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ ->
DhcpNameServer -> 192.168.1.1 192.168.0.1 ->
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->
{AE77D27F-EA08-443F-AE4E-CAB7DDA2943F}\\DhcpNameServer -> 10.1.1.1  (Controlador Fast Ethernet genérico Marvell Yukon 88E8040 PCI-E) ->
{E35AB5CA-5961-49A6-9A81-384B19F5D277}\\DhcpNameServer -> 192.168.1.1 192.168.0.1  (Adaptador de rede Broadcom 802.11n) ->
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell ->
explorer.exe -> explorer.exe -> [2011/02/25 03:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
*UserInit* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit ->
userinit.exe -> userinit.exe -> [2010/11/20 10:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
*VMApplet* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet ->
SystemPropertiesPerformance.exe -> SystemPropertiesPerformance.exe -> [2009/07/13 23:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation)
/pagefile ->  -> File not found
*MultiFile Done* -> ->
< Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ ->
 GbPluginBb -> C:\Program Files (x86)\GbPlugin\gbieh.dll -> [2013/05/23 11:47:50 | 001,389,096 | ---- | M] (Banco do Brasil)
< SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad ->
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" [HKLM] -> Reg Error: Key error. [WebCheck] -> File not found
< ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks ->
"{E37CB5F0-51F5-4395-A808-5FA49E399F83}" [HKLM] -> C:\Program Files (x86)\GbPlugin\gbieh.dll [GbPlugin ShlObj] -> [2013/05/23 11:47:50 | 001,389,096 | ---- | M] (Banco do Brasil)
< SecurityProviders [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders ->
*SecurityProviders* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\\SecurityProviders ->
credssp.dll -> credssp.dll -> [2010/11/20 10:18:24 | 000,017,408 | ---- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
< Vista Active Firewall Rules > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules ->
{062B5E09-7971-4A08-86DB-8A1432B58CA9} -> lport=3702 | profile=public | protocol=17 | dir=in | action=allow | name=@firewallapi.dll,-32809 | app=%systemroot%\system32\svchost.exe | svc=fdrespub |
{385C970E-EA11-4431-8C27-A419CCA38268} -> rport=1900 | profile=public | protocol=17 | dir=out | action=allow | name=@firewallapi.dll,-32757 | app=%systemroot%\system32\svchost.exe | svc=ssdpsrv |
{388394F6-A10F-4350-82F0-CFF4AC13118F} -> lport=5355 | profile=public | protocol=17 | dir=in | action=allow | name=@firewallapi.dll,-32801 | app=%systemroot%\system32\svchost.exe | svc=dnscache |
{3E0D1C40-FCA4-41E8-B822-5071F1C0C7FB} -> lport=6004 | profile=public | protocol=17 | dir=in | action=allow | name=microsoft office outlook | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
{62826159-AFBF-43A5-B1C2-C35789CDE980} -> lport=1900 | protocol=17 | dir=in | action=allow | name=windows live communications platform (ssdp) |
{7184B702-2B6E-4E69-905A-C70718D75FDA} -> rport=5355 | profile=public | protocol=17 | dir=out | action=allow | name=@firewallapi.dll,-32805 | app=%systemroot%\system32\svchost.exe | svc=dnscache |
{801D99D0-15FA-4827-A262-6BC75283303A} -> rport=3702 | profile=public | protocol=17 | dir=out | action=allow | name=@firewallapi.dll,-32811 | app=%systemroot%\system32\svchost.exe | svc=fdrespub |
{8C5BF30C-E4F6-4FCB-8471-F240FB812265} -> lport=3702 | profile=public | protocol=17 | dir=in | action=allow | name=@firewallapi.dll,-32785 | app=%systemroot%\system32\svchost.exe | svc=fdphost |
{9D3513C6-0D34-4828-B32D-C8F95E02C3D0} -> lport=2869 | protocol=6 | dir=in | action=allow | name=windows live communications platform (upnp) |
{9D42F60F-6D17-4FA1-858C-2ACCAAEA000B} -> rport=3702 | profile=public | protocol=17 | dir=out | action=allow | name=@firewallapi.dll,-32789 | app=%systemroot%\system32\svchost.exe | svc=fdphost |
{D47AA052-38C3-4434-89D7-0A5733D1CB55} -> lport=1900 | protocol=17 | dir=in | action=allow | name=windows live messenger (ssdp-in) | app=svchost.exe | svc=ssdpsrv |
{E45EEADE-8C0B-434B-8811-893B6FCF87FF} -> lport=1900 | profile=public | protocol=17 | dir=in | action=allow | name=@firewallapi.dll,-32753 | app=%systemroot%\system32\svchost.exe | svc=ssdpsrv |
< Vista Active Application Exception Rules > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules ->
{0BEB33D4-DFA3-452C-ADEE-DA3C2634327F} -> profile=public | protocol=6 | dir=in | action=allow | name=verificador pessoal de e-mail | app=c:\program files (x86)\avg\avg2012\avgemca.exe |
{17DC8013-7D28-4079-8D6F-B70BB2F426AB} -> dir=in | action=allow | name=windows live communications platform | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
{1C7F33D0-DB5F-4024-9B1F-ABBC01B1AC9A} -> dir=in | action=allow | name=comunicador de rede hp com (hp deskjet 3510 series) | app=c:\program files\hp\hp deskjet 3510 series\bin\hpnetworkcommunicatorcom.exe |
{2166D2E2-3965-4B55-A565-80A0057BD506} -> profile=private | protocol=6 | dir=in | action=allow | name=verificador pessoal de e-mail | app=c:\program files (x86)\avg\avg2012\avgemca.exe |
{4383A611-A28D-40DC-974A-D22486B73F60} -> profile=private | protocol=6 | dir=in | action=allow | name=proteção online | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |
{47BB8A39-EFE1-415A-B616-89374973FFA8} -> dir=in | action=allow | name=webkit | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
{4BA68A32-6741-4FFD-B44E-65100B046B84} -> profile=public | protocol=17 | dir=in | action=allow | name=lexmark communications system | app=c:\windows\system32\lxczcoms.exe |
{56B0264C-6200-47A4-AF05-91D55920CF27} -> profile=public | protocol=17 | dir=in | action=allow | name=1200 series server | app=c:\windows\syswow64\lxczcoms.exe |
{5B30159E-31C9-492C-B7E2-2CEDF5B5524C} -> profile=public | protocol=6 | dir=in | action=allow | name=avg diagnostics 2012 | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |
{5B5AC231-6091-405D-B5A4-09FF59B14269} -> dir=in | action=allow | name=configuração do dispositivo hp (hp deskjet 3510 series) | app=c:\program files\hp\hp deskjet 3510 series\bin\devicesetup.exe |
{656016F4-D266-42F5-9251-0F0A995CD2D9} -> profile=private | protocol=6 | dir=in | action=allow | name=instalador do avg | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
{66E507CB-87D1-421A-8F76-3F7A216CD79B} -> profile=public | protocol=17 | dir=in | action=allow | name=avg diagnostics 2012 | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |
{6751F307-DB91-40C9-9E69-E586FE537863} -> profile=public | protocol=17 | dir=in | action=allow | name=printer status window | app=c:\windows\system32\spool\drivers\x64\3\lxczpswx.exe |
{6995AF3E-7F5D-46AE-9F6F-260EA261073D} -> profile=private | protocol=17 | dir=in | action=allow | name=verificador pessoal de e-mail | app=c:\program files (x86)\avg\avg2012\avgemca.exe |
{6D7D9DD2-75DE-40CC-8D3A-23E78E48DCE1} -> profile=public | protocol=6 | dir=in | action=allow | name=microsoft office onenote | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
{6EEAB5CA-9E6B-485E-B542-ECA3D3326AC8} -> profile=private | protocol=17 | dir=in | action=allow | name=smlmproxy module - hp1006mc.exe | app=c:\windows\system32\spool\drivers\x64\3\hp1006mc.exe |
{7694241A-94EA-401C-AE4C-3F1885BE06CE} -> dir=in | action=allow | name=skype | app=c:\program files (x86)\skype\phone\skype.exe |
{82DC015A-BAB3-4442-AC5A-47CD280A0C1B} -> profile=private | protocol=17 | dir=in | action=allow | name=proteção online | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |
{8738B04A-51BF-48C5-AC5D-1494B4B9316D} -> dir=in | action=allow | name=comunicador de rede hp (hp deskjet 3510 series) | app=c:\program files\hp\hp deskjet 3510 series\bin\hpnetworkcommunicator.exe |
{9F287BDA-D010-435A-9D3D-B5893763C9AB} -> profile=public | protocol=6 | dir=in | action=allow | name=1200 series server | app=c:\windows\syswow64\lxczcoms.exe |
{A9151E45-7334-4EB8-B5AF-89D16F0EC9A7} -> profile=public | protocol=6 | dir=in | action=allow | name=microsoft office groove | app=c:\program files (x86)\microsoft office\office12\groove.exe |
{B7B36D54-1FBF-4AFD-AD91-CA46B57C7AAD} -> profile=private | protocol=6 | dir=in | action=allow | name=avg diagnostics 2012 | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |
{C1D34C72-E196-42D5-BBD8-5D31965E8867} -> profile=private | protocol=17 | dir=in | action=allow | name=instalador do avg | app=c:\program files (x86)\avg\avg2012\avgmfapx.exe |
{C9C6C7A6-C8E2-4B0A-A49F-03FE87D02497} -> profile=public | protocol=6 | dir=in | action=allow | name=printer status window | app=c:\windows\system32\spool\drivers\x64\3\lxczpswx.exe |
{CA7029A9-72E6-4A15-A230-600B56C57D24} -> profile=public | protocol=6 | dir=in | action=allow | name=proteção online | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |
{D1B3D0A6-A943-4F68-B2B4-71C05586B4C6} -> profile=public | protocol=17 | dir=in | action=allow | name=proteção online | app=c:\program files (x86)\avg\avg2012\avgnsa.exe |
{DCF828C5-9427-4D44-9F17-B84C59DC332A} -> profile=public | protocol=17 | dir=in | action=allow | name=verificador pessoal de e-mail | app=c:\program files (x86)\avg\avg2012\avgemca.exe |
{E4F090B4-2B79-4F3E-8CCD-CB2908F0FDC6} -> profile=public | protocol=17 | dir=in | action=allow | name=microsoft office onenote | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
{E71D5E62-7CB5-4B2B-80BD-1A8E874C7626} -> profile=public | protocol=17 | dir=in | action=allow | name=microsoft office groove | app=c:\program files (x86)\microsoft office\office12\groove.exe |
{E9B72FD2-03CC-45B7-B9FF-70F2D39DB839} -> profile=private | protocol=6 | dir=in | action=allow | name=smlmproxy module - hp1006mc.exe | app=c:\windows\system32\spool\drivers\x64\3\hp1006mc.exe |
{EA146EE7-703C-4E67-A2C2-CFD1113256FF} -> profile=public | protocol=6 | dir=in | action=allow | name=lexmark communications system | app=c:\windows\system32\lxczcoms.exe |
{F0A31C02-94EB-497E-9E58-3AC0D5672466} -> profile=private | protocol=17 | dir=in | action=allow | name=avg diagnostics 2012 | app=c:\program files (x86)\avg\avg2012\avgdiagex.exe |
{F5C50D51-4FF3-4BED-A0C4-42AA51D1BB13} -> profile=public | protocol=6 | dir=out | action=allow | name=@firewallapi.dll,-32821 | app=%systemroot%\system32\svchost.exe | svc=upnphost |
TCP Query User{900C20B6-BDB4-4498-BBAF-56F09E6E5BC5}C:\program files\java\jre6\bin\javaw.exe -> profile=public | protocol=6 | dir=in | action=allow | name=java(tm) platform se binary | app=c:\program files\java\jre6\bin\javaw.exe |
TCP Query User{C8936219-6B1D-47F9-9ADC-40BB6C84776E}C:\program files (x86)\dsnet corp\atube catcher 2.0\yct.exe -> profile=private | protocol=6 | dir=in | action=allow | name=atube catcher to download and convert videos. | app=c:\program files (x86)\dsnet corp\atube catcher 2.0\yct.exe |
UDP Query User{300A220B-E7D9-4890-A949-BC17BCC2D1C2}C:\program files\java\jre6\bin\javaw.exe -> profile=public | protocol=17 | dir=in | action=allow | name=java(tm) platform se binary | app=c:\program files\java\jre6\bin\javaw.exe |
UDP Query User{B6E11B06-2325-4558-9DD7-B4F2387AABD4}C:\program files (x86)\dsnet corp\atube catcher 2.0\yct.exe -> profile=private | protocol=17 | dir=in | action=allow | name=atube catcher to download and convert videos. | app=c:\program files (x86)\dsnet corp\atube catcher 2.0\yct.exe |
< SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot ->
< CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
"AutoRun" -> 1 ->
"DisplayName" -> Driver de CD-ROM ->
"ImagePath" -> C:\Windows\SysNative\drivers\cdrom.sys [system32\DRIVERS\cdrom.sys] -> [2010/11/20 07:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation)
< Drives with AutoRun files > ->  ->
C:\autoexec.bat [REM Dummy file for NTVDM | ] -> C:\autoexec.bat [ NTFS ] -> [2009/06/10 19:42:20 | 000,000,024 | ---- | M] ()
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 ->
< Registry Shell Spawning - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command ->
64bit-comfile [open] -> "%1" %*
64bit-exefile [open] -> "%1" %*
comfile [open] -> "%1" %* ->
exefile [open] -> "%1" %* ->
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\ ->
.com [@ = comfile] -> "%1" %* ->
.exe [@ = exefile] -> "%1" %* ->
 
[Registry - Additional Scans - Safe List]
 
[Files/Folders - Created Within 30 Days]
 32788R22FWJFW -> C:\32788R22FWJFW -> [2014/01/30 11:06:22 | 000,000,000 | ---D | C]
 89508 -> C:\Users\Mônica\AppData\Roaming\89508 -> [2014/01/29 22:25:44 | 000,000,000 | -HSD | C]
 ZHP -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP -> [2014/01/29 16:32:11 | 000,000,000 | ---D | C]
 ZHPDiag -> C:\Program Files (x86)\ZHPDiag -> [2014/01/29 16:32:06 | 000,000,000 | ---D | C]
 ZHP -> C:\Users\Mônica\AppData\Roaming\ZHP -> [2014/01/29 16:32:06 | 000,000,000 | ---D | C]
 Malwarebytes -> C:\Users\Mônica\AppData\Roaming\Malwarebytes -> [2014/01/29 13:56:04 | 000,000,000 | ---D | C]
 Malwarebytes' Anti-Malware -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware -> [2014/01/29 13:55:40 | 000,000,000 | ---D | C]
 Malwarebytes -> C:\ProgramData\Malwarebytes -> [2014/01/29 13:55:38 | 000,000,000 | ---D | C]
 Malwarebytes' Anti-Malware -> C:\Program Files (x86)\Malwarebytes' Anti-Malware -> [2014/01/29 13:55:32 | 000,000,000 | ---D | C]
 mbam-chameleon-1.62.1.1000 -> C:\Users\Mônica\Documents\mbam-chameleon-1.62.1.1000 -> [2014/01/29 13:49:36 | 000,000,000 | ---D | C]
 mbam -> C:\Users\Mônica\Desktop\mbam -> [2014/01/29 13:48:18 | 000,000,000 | ---D | C]
 UsbFix -> C:\UsbFix -> [2014/01/28 14:40:06 | 000,000,000 | ---D | C]
 AdwCleaner -> C:\AdwCleaner -> [2014/01/27 23:33:27 | 000,000,000 | ---D | C]
 ERUNT -> C:\Windows\ERUNT -> [2014/01/27 23:13:29 | 000,000,000 | ---D | C]
 JRT -> C:\JRT -> [2014/01/27 23:12:05 | 000,000,000 | ---D | C]
 Nova pasta -> C:\Users\Mônica\Desktop\Nova pasta -> [2014/01/27 23:08:25 | 000,000,000 | ---D | C]
 Avast -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast -> [2014/01/27 22:09:59 | 000,000,000 | ---D | C]
 avastSS.scr -> C:\Windows\avastSS.scr -> [2014/01/27 22:08:13 | 000,043,152 | ---- | C] (AVAST Software)
 .android -> C:\Users\Mônica\.android -> [2014/01/27 21:59:47 | 000,000,000 | ---D | C]
 cache -> C:\Users\Mônica\AppData\Local\cache -> [2014/01/27 21:59:44 | 000,000,000 | ---D | C]
 Mobogenie -> C:\Users\Mônica\Documents\Mobogenie -> [2014/01/27 21:59:28 | 000,000,000 | ---D | C]
 Mobogenie -> C:\Users\Mônica\AppData\Local\Mobogenie -> [2014/01/27 21:59:28 | 000,000,000 | ---D | C]
 AVAST Software -> C:\ProgramData\AVAST Software -> [2014/01/27 21:59:23 | 000,000,000 | ---D | C]
 887 -> C:\887 -> [2014/01/25 16:05:37 | 000,000,000 | -HSD | C]
 AGROECOLOGIA -> C:\Users\Mônica\Desktop\AGROECOLOGIA -> [2014/01/16 11:21:27 | 000,000,000 | ---D | C]
 QuickTime -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime -> [2014/01/10 10:48:03 | 000,000,000 | ---D | C]
 QuickTime -> C:\Program Files (x86)\QuickTime -> [2014/01/10 10:47:41 | 000,000,000 | ---D | C]
 Apple Computer -> C:\ProgramData\Apple Computer -> [2014/01/10 10:47:41 | 000,000,000 | ---D | C]
 CONTAS PAGAS 2014 -> C:\Users\Mônica\Documents\CONTAS PAGAS 2014 -> [2014/01/03 15:10:46 | 000,000,000 | ---D | C]
 1 C:\Windows\*.tmp files -> C:\Windows\*.tmp ->
 
[Files/Folders - Modified Within 30 Days]
 ntuser.dat -> C:\Users\Mônica\ntuser.dat -> [2014/01/30 11:36:44 | 006,553,600 | -HS- | M] ()
 GoogleUpdateTaskMachineUA.job -> C:\Windows\tasks\GoogleUpdateTaskMachineUA.job -> [2014/01/30 11:15:02 | 000,001,068 | ---- | M] ()
 cb0.js -> C:\Users\Mônica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cb0.js -> [2014/01/30 11:00:50 | 000,047,187 | ---- | M] ()
 GoogleUpdateTaskMachineCore.job -> C:\Windows\tasks\GoogleUpdateTaskMachineCore.job -> [2014/01/30 11:00:11 | 000,001,064 | ---- | M] ()
 SA.DAT -> C:\Windows\tasks\SA.DAT -> [2014/01/30 10:59:45 | 000,000,006 | -H-- | M] ()
 gbpndisrd.sys -> C:\Windows\SysWow64\drivers\gbpndisrd.sys -> [2014/01/30 10:59:41 | 000,031,088 | ---- | M] (GbPlugin NDIS Device Driver)
 ndisrd.cat -> C:\Windows\SysWow64\drivers\ndisrd.cat -> [2014/01/30 10:59:41 | 000,010,266 | ---- | M] ()
 ndisrd.inf -> C:\Windows\SysWow64\drivers\ndisrd.inf -> [2014/01/30 10:59:41 | 000,003,641 | ---- | M] ()
 ndisrd_m.inf -> C:\Windows\SysWow64\drivers\ndisrd_m.inf -> [2014/01/30 10:59:41 | 000,001,814 | ---- | M] ()
 gas.cer -> C:\Windows\SysWow64\drivers\gas.cer -> [2014/01/30 10:59:41 | 000,001,402 | ---- | M] ()
 bootstat.dat -> C:\Windows\bootstat.dat -> [2014/01/30 10:59:32 | 000,067,584 | --S- | M] ()
 hiberfil.sys -> C:\hiberfil.sys -> [2014/01/30 10:59:24 | 1602,195,456 | -HS- | M] ()
 IconCache.db -> C:\Users\Mônica\AppData\Local\IconCache.db -> [2014/01/30 10:58:10 | 002,183,706 | -H-- | M] ()
 Adobe Flash Player Updater.job -> C:\Windows\tasks\Adobe Flash Player Updater.job -> [2014/01/30 09:59:03 | 000,000,902 | ---- | M] ()
 ZHPFix.lnk -> C:\Users\Mônica\Desktop\ZHPFix.lnk -> [2014/01/29 16:32:24 | 000,001,943 | ---- | M] ()
 ZHPDiag.lnk -> C:\Users\Mônica\Desktop\ZHPDiag.lnk -> [2014/01/29 16:32:24 | 000,001,816 | ---- | M] ()
 Malwarebytes Anti-Malware.lnk -> C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk -> [2014/01/29 13:55:42 | 000,000,916 | ---- | M] ()
 UsbFix.lnk -> C:\Users\Mônica\Desktop\UsbFix.lnk -> [2014/01/28 19:06:12 | 000,001,448 | ---- | M] ()
 avastSS.scr -> C:\Windows\avastSS.scr -> [2014/01/27 22:08:13 | 000,043,152 | ---- | M] (AVAST Software)
 ntuser.pol -> C:\ProgramData\ntuser.pol -> [2014/01/25 16:23:55 | 000,000,434 | RHS- | M] ()
 USBEHCI.SYS -> C:\Windows\SysWow64\drivers\USBEHCI.SYS -> [2014/01/17 08:18:26 | 000,000,000 | ---- | M] ()
 ieuinit.inf -> C:\Windows\SysWow64\ieuinit.inf -> [2014/01/17 08:06:14 | 000,016,284 | ---- | M] ()
 material-escolar-ef1-3ano.pdf -> C:\Users\Mônica\Desktop\material-escolar-ef1-3ano.pdf -> [2014/01/16 12:43:07 | 000,248,545 | ---- | M] ()
 BR31CFG0MV05TY -> C:\Windows\SysWow64\BR31CFG0MV05TY -> [2014/01/09 20:42:05 | 000,000,000 | ---- | M] ()
 Checkin volta.pdf -> C:\Users\Mônica\Documents\Checkin volta.pdf -> [2014/01/06 09:23:09 | 000,030,999 | ---- | M] ()
 A turma do _Eu me acho_ - ÉPOCA _ Ideias.pdf -> C:\Users\Mônica\Documents\A turma do _Eu me acho_ - ÉPOCA _ Ideias.pdf -> [2014/01/05 01:15:31 | 002,229,166 | ---- | M] ()
 15 C:\Users\Mônica\AppData\Local\Temp\*.tmp files -> C:\Users\Mônica\AppData\Local\Temp\*.tmp ->
 1 C:\Windows\Temp\avg_a11772\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a11772\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a07264\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a07264\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a06276\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a06276\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a06276\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a06276\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a05404\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a05404\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a04892\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a04892\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a04776\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a04776\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a04772\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a04772\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a04504\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a04504\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a04152\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a04152\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a04152\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a04152\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a02672\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a02672\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\Temp\avg_a02576\ProgFiles\AVG Secure Search\*.tmp files -> C:\Windows\Temp\avg_a02576\ProgFiles\AVG Secure Search\*.tmp ->
 1 C:\Windows\*.tmp files -> C:\Windows\*.tmp ->
 
[Files - No Company Name]
 cb0.js -> C:\Users\Mônica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cb0.js -> [2014/01/30 11:00:50 | 000,047,187 | ---- | C] ()
 ZHPFix.lnk -> C:\Users\Mônica\Desktop\ZHPFix.lnk -> [2014/01/29 16:32:24 | 000,001,943 | ---- | C] ()
 ZHPDiag.lnk -> C:\Users\Mônica\Desktop\ZHPDiag.lnk -> [2014/01/29 16:32:24 | 000,001,816 | ---- | C] ()
 Malwarebytes Anti-Malware.lnk -> C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk -> [2014/01/29 13:55:42 | 000,000,916 | ---- | C] ()
 UsbFix.lnk -> C:\Users\Mônica\Desktop\UsbFix.lnk -> [2014/01/28 14:40:12 | 000,001,448 | ---- | C] ()
 ntuser.pol -> C:\ProgramData\ntuser.pol -> [2014/01/25 16:23:55 | 000,000,434 | RHS- | C] ()
 USBEHCI.SYS -> C:\Windows\SysWow64\drivers\USBEHCI.SYS -> [2014/01/17 08:18:26 | 000,000,000 | ---- | C] ()
 ieuinit.inf -> C:\Windows\SysWow64\ieuinit.inf -> [2014/01/17 08:06:14 | 000,016,284 | ---- | C] ()
 material-escolar-ef1-3ano.pdf -> C:\Users\Mônica\Desktop\material-escolar-ef1-3ano.pdf -> [2014/01/16 12:43:00 | 000,248,545 | ---- | C] ()
 BR31CFG0MV05TY -> C:\Windows\SysWow64\BR31CFG0MV05TY -> [2014/01/09 20:42:05 | 000,000,000 | ---- | C] ()
 Checkin volta.pdf -> C:\Users\Mônica\Documents\Checkin volta.pdf -> [2014/01/06 09:23:09 | 000,030,999 | ---- | C] ()
 A turma do _Eu me acho_ - ÉPOCA _ Ideias.pdf -> C:\Users\Mônica\Documents\A turma do _Eu me acho_ - ÉPOCA _ Ideias.pdf -> [2014/01/05 01:15:30 | 002,229,166 | ---- | C] ()
 cdr.ini -> C:\Users\Mônica\AppData\Roaming\cdr.ini -> [2013/10/08 00:26:01 | 000,000,040 | ---- | C] ()
 IconCache.db -> C:\Users\Mônica\AppData\Local\IconCache.db -> [2013/09/12 00:18:43 | 002,183,706 | -H-- | C] ()
 unins000.dat -> C:\Users\Mônica\AppData\Roaming\unins000.dat -> [2013/07/16 16:24:27 | 000,011,474 | ---- | C] ()
 REC-NET.INI -> C:\Windows\REC-NET.INI -> [2013/04/29 21:58:31 | 000,000,176 | ---- | C] ()
 Ament.ini -> C:\ProgramData\Ament.ini -> [2013/03/25 23:50:19 | 000,000,057 | ---- | C] ()
 Lexstat.ini -> C:\Windows\Lexstat.ini -> [2013/03/20 10:19:44 | 000,000,170 | ---- | C] ()
 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> C:\Users\Mônica\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini -> [2012/03/19 16:05:59 | 000,003,584 | ---- | C] ()
 lxczinpa.dll -> C:\Windows\SysWow64\lxczinpa.dll -> [2012/01/31 17:06:11 | 000,413,696 | ---- | C] ( )
 lxcziesc.dll -> C:\Windows\SysWow64\lxcziesc.dll -> [2012/01/31 17:06:11 | 000,397,312 | ---- | C] ( )
 LXCZinst.dll -> C:\Windows\SysWow64\LXCZinst.dll -> [2012/01/31 17:06:11 | 000,274,432 | ---- | C] ()
 lxczpmui.dll -> C:\Windows\SysWow64\lxczpmui.dll -> [2012/01/31 17:06:10 | 000,643,072 | ---- | C] ( )
 lxczutil.dll -> C:\Windows\SysWow64\lxczutil.dll -> [2012/01/31 17:06:10 | 000,413,696 | ---- | C] ()
 lxczusb1.dll -> C:\Windows\SysWow64\lxczusb1.dll -> [2012/01/31 17:06:09 | 000,991,232 | ---- | C] ( )
 lxczserv.dll -> C:\Windows\SysWow64\lxczserv.dll -> [2012/01/31 17:06:07 | 001,224,704 | ---- | C] ( )
 lxczppls.exe -> C:\Windows\SysWow64\lxczppls.exe -> [2012/01/31 17:06:06 | 000,181,168 | ---- | C] ( )
 lxczprox.dll -> C:\Windows\SysWow64\lxczprox.dll -> [2012/01/31 17:06:06 | 000,163,840 | ---- | C] ( )
 lxczpplc.dll -> C:\Windows\SysWow64\lxczpplc.dll -> [2012/01/31 17:06:06 | 000,094,208 | ---- | C] ( )
 lxczlmpm.dll -> C:\Windows\SysWow64\lxczlmpm.dll -> [2012/01/31 17:06:05 | 000,585,728 | ---- | C] ( )
 lxczih.exe -> C:\Windows\SysWow64\lxczih.exe -> [2012/01/31 17:06:05 | 000,385,968 | ---- | C] ( )
 lxczhbn3.dll -> C:\Windows\SysWow64\lxczhbn3.dll -> [2012/01/31 17:06:04 | 000,696,320 | ---- | C] ( )
 lxczcoms.exe -> C:\Windows\SysWow64\lxczcoms.exe -> [2012/01/31 17:06:04 | 000,537,520 | ---- | C] ( )
 lxczcomc.dll -> C:\Windows\SysWow64\lxczcomc.dll -> [2012/01/31 17:06:03 | 000,684,032 | ---- | C] ( )
 lxczcomm.dll -> C:\Windows\SysWow64\lxczcomm.dll -> [2012/01/31 17:06:03 | 000,421,888 | ---- | C] ( )
 lxczcfg.exe -> C:\Windows\SysWow64\lxczcfg.exe -> [2012/01/31 17:06:02 | 000,381,872 | ---- | C] ( )
 
[File - Lop Check]
 TuneUp Software -> C:\Users\Default\AppData\Roaming\TuneUp Software -> [2013/01/30 15:09:31 | 000,000,000 | ---D | M]
 TuneUp Software -> C:\Users\Default User\AppData\Roaming\TuneUp Software -> [2013/01/30 15:09:31 | 000,000,000 | ---D | M]
 89508 -> C:\Users\Mônica\AppData\Roaming\89508 -> [2014/01/29 22:25:44 | 000,000,000 | -HSD | M]
 AVG -> C:\Users\Mônica\AppData\Roaming\AVG -> [2012/03/28 12:22:05 | 000,000,000 | ---D | M]
 AVG2012 -> C:\Users\Mônica\AppData\Roaming\AVG2012 -> [2012/03/28 11:42:50 | 000,000,000 | ---D | M]
 Easy MP3 Recorder -> C:\Users\Mônica\AppData\Roaming\Easy MP3 Recorder -> [2012/07/11 21:39:38 | 000,000,000 | ---D | M]
 Eusing -> C:\Users\Mônica\AppData\Roaming\Eusing -> [2013/10/08 00:26:06 | 000,000,000 | ---D | M]
 freac -> C:\Users\Mônica\AppData\Roaming\freac -> [2013/10/08 00:48:36 | 000,000,000 | ---D | M]
 GetRightToGo -> C:\Users\Mônica\AppData\Roaming\GetRightToGo -> [2013/07/02 12:13:45 | 000,000,000 | ---D | M]
 MultiMi -> C:\Users\Mônica\AppData\Roaming\MultiMi -> [2012/08/12 23:48:29 | 000,000,000 | ---D | M]
 naviextras -> C:\Users\Mônica\AppData\Roaming\naviextras -> [2013/09/12 16:41:00 | 000,000,000 | ---D | M]
 PhotoScape -> C:\Users\Mônica\AppData\Roaming\PhotoScape -> [2013/08/09 20:50:37 | 000,000,000 | ---D | M]
 TuneUp Software -> C:\Users\Mônica\AppData\Roaming\TuneUp Software -> [2013/10/06 13:45:27 | 000,000,000 | ---D | M]
 Windows Live Writer -> C:\Users\Mônica\AppData\Roaming\Windows Live Writer -> [2012/07/10 10:00:54 | 000,000,000 | ---D | M]
 WinZip -> C:\Users\Mônica\AppData\Roaming\WinZip -> [2012/01/25 10:54:06 | 000,000,000 | ---D | M]
 ZHP -> C:\Users\Mônica\AppData\Roaming\ZHP -> [2014/01/29 20:39:49 | 000,000,000 | ---D | M]
 TuneUp Software -> C:\Users\TEMP\AppData\Roaming\TuneUp Software -> [2013/01/30 15:09:31 | 000,000,000 | ---D | M]
 TuneUp Software -> C:\Users\Usuário Padrão\AppData\Roaming\TuneUp Software -> [2013/01/30 15:09:31 | 000,000,000 | ---D | M]
 SCHEDLGU.TXT -> C:\Windows\Tasks\SCHEDLGU.TXT -> [2013/12/05 19:17:49 | 000,032,608 | ---- | M] ()
 
[File - Purity Scan]
 
 
[Alternate Data Streams]
@Alternate Data Stream - 181 bytes -> C:\ProgramData\TEMP:0B4227B4
< End of report >


Mônica escreveu:Desculpe, me confundi, no desktop era pra salvar o Delfix... mas a minha dúvida é quanto a isso...

Mônica escreveu:Posso tentar desinstalar o AVG da maneira convencional?