Desinstalar PDF Editor 3.3

Como faço para desinstalar esse programa que só aparece no menu iniciar e não tem a opção unistall ?

 Baixe o [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e salve-o no Desktop (Área de Trabalho)

Obs: Ao acessar o link acima, clique no botão Download Now 32-Bit Version

*Execute o FRST e aceite o contrato


*Clique [Scan]


*Ao término clique [OK] > [OK]



*Serão criados dois relatórios no Desktop: FRST.txt e Addition.txt

Poste estes dois relatórios em sua próxima resposta. (Obs: se não couber em uma só resposta, pode dividi-la em mais postagens).

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by Ursula (administrator) on DANIELE-PC on 05-04-2014 19:18:48
Running from C:\Users\Ursula\Downloads
Microsoft® Windows Vista™ Starter (X86) OS Language: Portuguese Brazilian
Internet Explorer Version 7
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link for 64-Bit Version: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

==================== Processes (Whitelisted) =================

(GAS Tecnologia) C:\Program Files\GbPlugin\GbpSv.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Bright) C:\Program Files\Bright\ACU.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(OpenOffice.org) C:\Program Files\BrOffice.org 2.0\program\soffice.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(OpenOffice.org) C:\Program Files\BrOffice.org 2.0\program\soffice.BIN
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1006264 2007-05-25] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4702208 2007-10-12] (Realtek Semiconductor)
HKLM\...\Run: [ACU] - C:\Program Files\Bright\ACU.exe [405540 2006-12-19] (Bright)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3774312 2014-04-03] (AVAST Software)
Winlogon\Notify\ GbPluginCef: C:\Program Files\GbPlugin\gbiehCef.dll (Caixa Economica Federal)
HKU\.DEFAULT\...\Policies\Explorer: [NoDFSTab] 1
HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 1
HKU\S-1-5-21-134228104-2085873779-558425676-1000\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5625624 2014-01-06] (SUPERAntiSpyware)
HKU\S-1-5-21-134228104-2085873779-558425676-1000\...\Policies\Explorer: [NoDFSTab] 1
HKU\S-1-5-21-134228104-2085873779-558425676-1000\...\Policies\Explorer: [NoWindowsUpdate] 1
HKU\S-1-5-21-134228104-2085873779-558425676-1000\...\MountPoints2: H - H:\Setup.exe
HKU\S-1-5-21-134228104-2085873779-558425676-1000\...\MountPoints2: {b579a4ca-68a8-11e3-b907-065043001281} - H:\Setup.exe
Startup: C:\Users\Ursula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\BrOffice.org 2.0.lnk
ShortcutTarget: BrOffice.org 2.0.lnk -> C:\Program Files\BrOffice.org 2.0\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
BHO: Facilitador de Leitor de Link Adobe PDF - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Auxiliar de Conexão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: GbIehObj Class - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files\GbPlugin\gbiehcef.dll (Caixa Economica Federal)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - No File
ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files\GbPlugin\gbiehcef.dll [1479528 2013-10-16] (Caixa Economica Federal)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-07] (SuperAdBlocker.com)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Ursula\AppData\Roaming\Mozilla\Firefox\Profiles\onxkkc26.default
FF NewTab: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
FF Keyword.URL: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: gastecnologia.com.br/sf/abn - C:\Users\Ursula\AppData\Local\GAS Tecnologia\GBBD\npsf_abn.dll (GAS Tecnologia)
FF Plugin HKCU: gastecnologia.com.br/sf/cef - C:\Users\Ursula\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll (GAS Tecnologia)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\buscape.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mercadolivre.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-br.xml
FF Extension: Red Cats (green flavor) - C:\Users\Ursula\AppData\Roaming\Mozilla\Firefox\Profiles\onxkkc26.default\Extensions\{dd30bf68-268a-4815-ad48-8740b774c764}.xpi [2013-12-12]
FF Extension: Red Cats (blue flavor) - C:\Users\Ursula\AppData\Roaming\Mozilla\Firefox\Profiles\onxkkc26.default\Extensions\{ff356687-aa08-463d-a46c-11c451824939}.xpi [2013-12-12]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-24]
FF HKCU\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886D}] - C:\Users\Ursula\AppData\Local\GAS Tecnologia\GBBD\cef\sf.xpi
FF Extension: Red Cats (green flavor) - C:\Users\Ursula\AppData\Local\GAS Tecnologia\GBBD\cef\sf.xpi [2013-12-13]
FF HKCU\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E8874}] - C:\Users\Ursula\AppData\Local\GAS Tecnologia\GBBD\abn\xpi
FF Extension: GBBD Banco Santander (Brasil) S.A. - C:\Users\Ursula\AppData\Local\GAS Tecnologia\GBBD\abn\xpi [2013-12-16]

Chrome:
=======
CHR HomePage: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
CHR DefaultSearchKeyword: google.com.br
CHR Extension: (GBBD Banco Santander (Brasil) S.A.) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\abmojiekfpcmkkfamgfcpgfgipocface [2013-12-13]
CHR Extension: (Google Docs) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-07-09]
CHR Extension: (Google Drive) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-09]
CHR Extension: (YouTube) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-09]
CHR Extension: (Pesquisa do Google) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-09]
CHR Extension: (Green Pop Theme) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffgapkaegdmcompheglkkponnpmfdcgf [2014-04-05]
CHR Extension: (Google Wallet) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-12]
CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjbodopomfddehlalfilheomcahbpei [2013-12-13]
CHR Extension: (Gmail) - C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-09]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-01-24]
CHR HKCU\...\Chrome\Extension: [abmojiekfpcmkkfamgfcpgfgipocface] - C:\Users\Ursula\AppData\Local\GAS Tecnologia\GBBD\abn\sf.crx [2013-12-13]
CHR HKCU\...\Chrome\Extension: [nnjbodopomfddehlalfilheomcahbpei] - C:\Users\Ursula\AppData\Local\GAS Tecnologia\GBBD\cef\sf.crx [2013-12-13]

========================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com)
S2 ACS; C:\Windows\system32\acs.exe [36864 2006-12-19] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-24] (AVAST Software)
R2 GbpSv; C:\Program Files\GbPlugin\GbpSv.exe [452968 2013-10-16] (GAS Tecnologia)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-01-24] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [54832 2014-01-24] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-01-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-01-24] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410784 2014-01-24] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57672 2014-01-24] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180248 2014-01-24] ()
R1 cloverm; C:\Windows\system32\Drivers\cloverm.sys [27136 2008-01-07] ()
R0 GbpKm; C:\Windows\System32\drivers\gbpkm.sys [47688 2013-07-01] (GAS Tecnologia)
S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-09] (Windows (R) Codename Longhorn DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-04-05] (Malwarebytes Corporation)
R3 MRVW225; C:\Windows\System32\DRIVERS\MRVW225.sys [299904 2005-12-21] (Bright, Inc)
S3 Ndisrd; C:\Windows\System32\DRIVERS\gbpndisrd.sys [31088 2014-04-05] (GbPlugin NDIS Device Driver)
R3 NdisrdMP; C:\Windows\System32\DRIVERS\gbpndisrd.sys [31088 2014-04-05] (GbPlugin NDIS Device Driver)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 Shield; C:\Windows\system32\Drivers\Shield.sys [58432 2008-01-08] ()
S0 Bhbase; System32\drivers\Bhbase.sys [X]
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCFApiUtil; \??\C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-05 19:18 - 2014-04-05 19:19 - 00014818 _____ () C:\Users\Ursula\Downloads\FRST.txt
2014-04-05 19:18 - 2014-04-05 19:18 - 00000000 ____D () C:\FRST
2014-04-05 19:16 - 2014-04-05 19:16 - 01145856 _____ (Farbar) C:\Users\Ursula\Downloads\FRST.exe
2014-04-05 18:30 - 2014-04-05 18:30 - 00003083 _____ () C:\Windows\WindowsUpdate.log
2014-04-05 18:25 - 2014-04-05 18:25 - 00281664 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-05 18:25 - 2014-04-05 18:25 - 00000576 _____ () C:\Windows\PFRO.log
2014-04-05 18:15 - 2014-04-05 18:15 - 00143942 _____ () C:\Users\Ursula\Documents\cópia dos registros.reg
2014-04-05 18:11 - 2014-04-05 18:11 - 00000804 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-05 18:11 - 2014-04-05 18:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-05 18:08 - 2014-04-05 18:09 - 04787368 _____ (Piriform Ltd) C:\Users\Ursula\Downloads\ccsetup412.exe
2014-04-05 18:07 - 2014-04-05 18:07 - 00008720 _____ () C:\Users\Ursula\Desktop\PureRa.txt
2014-04-05 18:04 - 2014-04-05 18:06 - 00008718 _____ () C:\PureRa.txt
2014-04-05 18:03 - 2014-04-05 18:03 - 00027505 _____ () C:\Users\Ursula\Downloads\PureRa.zip
2014-04-05 18:03 - 2014-04-05 18:03 - 00000000 ____D () C:\Users\Ursula\Downloads\PureRa
2014-04-05 13:35 - 2014-04-05 13:35 - 00031139 _____ () C:\Users\Ursula\Desktop\ZHPDiag.txt
2014-04-05 13:18 - 2014-04-05 13:18 - 00001426 _____ () C:\Users\Ursula\Desktop\ZHPFixReport.txt
2014-04-05 13:18 - 2014-04-05 13:18 - 00001426 _____ () C:\Users\Ursula\Desktop\ZHPFix[R2].txt
2014-04-05 13:16 - 2014-04-05 13:16 - 00000065 _____ () C:\Users\Ursula\Desktop\virusscan link.txt
2014-04-05 10:01 - 2014-04-05 13:35 - 00000000 ____D () C:\Users\Ursula\AppData\Roaming\ZHP
2014-04-05 10:01 - 2014-04-05 13:34 - 00000000 ____D () C:\Program Files\ZHPDiag
2014-04-05 10:01 - 2014-04-05 10:01 - 00001768 _____ () C:\Users\Ursula\Desktop\ZHPFix.lnk
2014-04-05 10:01 - 2014-04-05 10:01 - 00001645 _____ () C:\Users\Ursula\Desktop\ZHPDiag.lnk
2014-04-05 09:59 - 2014-04-05 10:00 - 06863616 _____ (Nicolas Coolman ) C:\Users\Ursula\Downloads\ZHPDiag2.exe
2014-04-05 09:50 - 2014-04-05 09:51 - 00001169 _____ () C:\Users\Ursula\Desktop\JRT.txt
2014-04-05 09:47 - 2014-04-05 09:47 - 00000000 ____D () C:\Windows\ERUNT
2014-04-05 09:39 - 2014-04-05 09:39 - 01038974 _____ (Thisisu) C:\Users\Ursula\Downloads\JRT.exe
2014-04-05 00:24 - 2014-04-05 00:24 - 00017668 _____ () C:\Users\Ursula\Desktop\zoek-results.txt
2014-04-05 00:12 - 2014-04-04 23:52 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-05 00:01 - 2014-04-05 00:23 - 00017668 _____ () C:\zoek-results.log
2014-04-05 00:00 - 2014-04-05 00:01 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (6).zip
2014-04-04 23:59 - 2014-04-05 00:00 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (5).zip
2014-04-04 23:59 - 2014-04-04 23:59 - 00000000 ____D () C:\Users\Ursula\Downloads\zoek (4)
2014-04-04 23:58 - 2014-04-04 23:58 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (4).zip
2014-04-04 23:57 - 2014-04-04 23:58 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (3).zip
2014-04-04 23:56 - 2014-04-04 23:56 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (2).zip
2014-04-04 23:54 - 2014-04-04 23:54 - 01285120 _____ () C:\Users\Ursula\Downloads\zoek (2).exe
2014-04-04 23:53 - 2014-04-04 23:54 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (1).zip
2014-04-04 23:53 - 2014-04-04 23:53 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek.zip
2014-04-04 23:51 - 2014-04-05 00:10 - 00000000 ____D () C:\zoek_backup
2014-04-04 23:51 - 2014-04-04 23:51 - 01285120 _____ () C:\Users\Ursula\Downloads\zoek (1).exe
2014-04-04 23:50 - 2014-04-04 23:50 - 01285120 _____ () C:\Users\Ursula\Downloads\zoek.exe
2014-04-04 19:55 - 2014-04-05 18:27 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-04 19:55 - 2014-04-04 20:55 - 00000899 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-04 19:55 - 2014-04-04 20:55 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-04-04 19:55 - 2014-04-04 19:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-04 19:55 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-04 19:55 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-04 19:55 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-04 19:43 - 2014-04-04 19:45 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Ursula\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-04 19:26 - 2014-04-04 19:26 - 00010254 _____ () C:\Users\Ursula\Documents\AdClear relatório.odt
2014-04-04 19:21 - 2014-04-04 19:23 - 00001274 _____ () C:\Users\Ursula\Desktop\AdwCleaner[S2].txt
2014-04-04 19:16 - 2014-04-04 19:16 - 00000372 _____ () C:\Users\Ursula\Documentos - Atalho.lnk
2014-04-04 18:38 - 2014-04-04 19:18 - 00000000 ____D () C:\AdwCleaner
2014-04-04 18:37 - 2014-04-04 18:37 - 01426178 _____ () C:\Users\Ursula\Downloads\AdwCleaner.exe
2014-04-04 18:32 - 2014-04-04 18:32 - 00007017 _____ () C:\Users\Ursula\Downloads\hijackthis.log
2014-04-04 18:31 - 2014-04-04 18:31 - 00388608 _____ (Trend Micro Inc.) C:\Users\Ursula\Downloads\HijackThis (1).exe
2014-04-04 18:25 - 2014-04-04 18:25 - 00388608 _____ (Trend Micro Inc.) C:\Users\Ursula\Downloads\HijackThis.exe
2014-04-04 15:52 - 2014-04-04 19:04 - 00000000 __SHD () C:\Users\Ursula\AppData\Roaming\ceb0
2014-04-04 15:52 - 2014-04-04 15:52 - 00000000 __SHD () C:\Program Files\d1b8
2014-04-04 15:52 - 2014-04-04 15:52 - 00000000 __SHD () C:\cf604
2014-04-04 14:55 - 2014-04-04 14:55 - 00014867 _____ () C:\Users\Ursula\Documents\seguro.odt
2014-04-04 01:51 - 2013-06-15 16:51 - 00031832 _____ () C:\Users\Ursula\Documents\file335.bmp
2014-04-04 01:51 - 2013-06-15 16:51 - 00030834 _____ () C:\Users\Ursula\Documents\file343.bmp
2014-04-04 01:51 - 2013-06-15 16:51 - 00029214 _____ () C:\Users\Ursula\Documents\file342.bmp
2014-04-04 01:51 - 2013-06-15 16:51 - 00028890 _____ () C:\Users\Ursula\Documents\file344.bmp
2014-04-04 01:50 - 2013-06-15 16:51 - 00920214 _____ () C:\Users\Ursula\Documents\file340.bmp
2014-04-04 01:48 - 2013-06-15 16:50 - 00920214 _____ () C:\Users\Ursula\Documents\file1214.bmp
2014-04-03 23:46 - 2009-08-10 16:36 - 00921654 _____ () C:\Users\Ursula\Documents\mara e eu.bmp
2014-04-03 23:46 - 2009-08-08 13:25 - 00921654 _____ () C:\Users\Ursula\Documents\etrere.bmp
2014-04-03 23:46 - 2009-08-08 13:25 - 00921654 _____ () C:\Users\Ursula\Documents\ererer.bmp
2014-04-03 23:46 - 2009-08-08 13:25 - 00921654 _____ () C:\Users\Ursula\Documents\ddddd.bmp
2014-04-03 23:45 - 2010-01-03 11:07 - 00921654 _____ () C:\Users\Ursula\Documents\untitllled.bmp
2014-04-03 23:45 - 2009-08-29 12:35 - 00921654 _____ () C:\Users\Ursula\Documents\LSLASOAOAS.bmp
2014-04-03 11:35 - 2014-04-03 11:35 - 00018512 _____ () C:\Users\Ursula\Documents\Letras diversas.odt
2014-04-03 10:44 - 2014-04-03 10:44 - 00000000 _____ () C:\Users\Ursula\Documents\mariee.map
2014-04-03 10:42 - 2014-04-03 10:43 - 00001074 _____ () C:\Users\Ursula\Documents\Marie3a.html
2014-04-03 10:40 - 2014-04-03 10:40 - 00000682 _____ () C:\Users\Ursula\Documents\Marie4.html
2014-04-03 10:25 - 2014-04-03 10:25 - 01461484 _____ () C:\Users\Ursula\Documents\Marie3a.odt
2014-04-01 20:48 - 2014-04-01 20:48 - 00041554 _____ () C:\Users\Ursula\Downloads\mc_sweetie_hearts.zip
2014-04-01 20:48 - 2014-04-01 20:48 - 00000000 ____D () C:\Users\Ursula\Downloads\mc_sweetie_hearts
2014-04-01 20:46 - 2014-04-01 20:46 - 00304615 _____ () C:\Users\Ursula\Downloads\fiolex_girls (1).zip
2014-04-01 20:46 - 2014-04-01 20:46 - 00000000 ____D () C:\Users\Ursula\Downloads\fiolex_girls (1)
2014-04-01 20:43 - 2014-04-01 20:43 - 00000000 ____D () C:\Users\Ursula\Downloads\nella_sue
2014-04-01 20:43 - 2014-04-01 20:43 - 00000000 ____D () C:\Users\Ursula\Downloads\always_in_my_heart
2014-04-01 20:41 - 2014-04-01 20:41 - 00039263 _____ () C:\Users\Ursula\Downloads\nella_sue.zip
2014-04-01 20:41 - 2014-04-01 20:41 - 00032178 _____ () C:\Users\Ursula\Downloads\always_in_my_heart.zip
2014-04-01 20:32 - 2014-04-01 20:32 - 00047319 _____ () C:\Users\Ursula\Downloads\renaissance.zip
2014-04-01 20:32 - 2014-04-01 20:32 - 00000000 ____D () C:\Users\Ursula\Downloads\renaissance
2014-04-01 20:30 - 2014-04-01 20:30 - 00105665 _____ () C:\Users\Ursula\Downloads\walker_on_the_moon.zip
2014-04-01 20:30 - 2014-04-01 20:30 - 00000000 ____D () C:\Users\Ursula\Downloads\walker_on_the_moon
2014-04-01 20:29 - 2014-04-01 20:29 - 00051987 _____ () C:\Users\Ursula\Downloads\diogene_chopinscript (1).zip
2014-04-01 20:28 - 2014-04-01 20:28 - 00000000 ____D () C:\Users\Ursula\Downloads\diogene_chopinscript
2014-04-01 20:27 - 2014-04-01 20:27 - 00072357 _____ () C:\Users\Ursula\Downloads\apostrophic-lab_scriptina.zip
2014-04-01 20:27 - 2014-04-01 20:27 - 00051987 _____ () C:\Users\Ursula\Downloads\diogene_chopinscript.zip
2014-04-01 20:27 - 2014-04-01 20:27 - 00000000 ____D () C:\Users\Ursula\Downloads\apostrophic-lab_scriptina
2014-04-01 20:23 - 2014-04-01 20:23 - 00030674 _____ () C:\Users\Ursula\Downloads\CAC-Champagne.zip
2014-04-01 20:23 - 2014-04-01 20:23 - 00000000 ____D () C:\Users\Ursula\Downloads\CAC-Champagne
2014-04-01 20:21 - 2014-04-01 20:21 - 00029663 _____ () C:\Users\Ursula\Downloads\fonts-coventry-script.zip
2014-04-01 20:21 - 2014-04-01 20:21 - 00000000 ____D () C:\Users\Ursula\Downloads\fonts-coventry-script
2014-04-01 20:08 - 2014-04-01 20:08 - 00027725 _____ () C:\Users\Ursula\Downloads\kids_written.zip
2014-04-01 20:08 - 2014-04-01 20:08 - 00021061 _____ () C:\Users\Ursula\Downloads\belphebe.zip
2014-04-01 20:04 - 2014-04-01 20:04 - 00000000 ____D () C:\Users\Ursula\Downloads\cursive_standard
2014-04-01 20:03 - 2014-04-01 20:03 - 00047847 _____ () C:\Users\Ursula\Downloads\cursive_standard.zip
2014-04-01 20:03 - 2014-04-01 20:03 - 00000000 ____D () C:\Users\Ursula\Downloads\learning_curve
2014-04-01 20:02 - 2014-04-01 20:02 - 00042634 _____ () C:\Users\Ursula\Downloads\learning_curve.zip
2014-04-01 20:00 - 2014-04-01 20:00 - 00040727 _____ () C:\Users\Ursula\Downloads\dawning_of_a_new_day.zip
2014-04-01 19:56 - 2014-04-01 19:56 - 00021406 _____ () C:\Users\Ursula\Downloads\fontdinerdotcom_luvable.zip
2014-04-01 19:56 - 2014-04-01 19:56 - 00000000 ____D () C:\Users\Ursula\Downloads\fontdinerdotcom_luvable
2014-04-01 19:55 - 2014-04-01 19:55 - 00000000 ____D () C:\Users\Ursula\Downloads\the-fontry_fty-skradjhuwn-ncv
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\maellekeita_ophélia-script
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\maellekeita_nenuphar-of-venus
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\maellekeita_animox
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\kimberly-geswein_kg-i-and-love-and-you
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\fiolex_girls
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_wednesday
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_vbdings
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_vanessasvalentine
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_sweetness
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_seriously
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_running-for-a-cause
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_puppybellies
2014-04-01 19:52 - 2014-04-01 19:52 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_please-write-me-a-sing
2014-04-01 19:52 - 2014-04-01 19:52 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_penelope-anne
2014-04-01 19:51 - 2014-04-01 19:51 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_passingnotes
2014-04-01 19:51 - 2014-04-01 19:51 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_papa-bear
2014-04-01 19:51 - 2014-04-01 19:51 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_ness
2014-04-01 19:50 - 2014-04-01 19:50 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_my-first-crush
2014-04-01 19:37 - 2014-04-01 19:37 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_loveness
2014-04-01 19:37 - 2014-04-01 19:37 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_lovemeforever (1)
2014-04-01 19:36 - 2014-04-01 19:36 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_lovemeforever
2014-04-01 19:35 - 2014-04-01 19:35 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_lilian
2014-04-01 19:32 - 2014-04-01 19:32 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_isabelle-layne
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_georgia-belle
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_fatmarker
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_cutie-patootie
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_connected
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_chunkster-jamz
2014-04-01 19:30 - 2014-04-01 19:30 - 00039597 _____ () C:\Users\Ursula\Downloads\fiolex_girls.zip
2014-04-01 19:30 - 2014-04-01 19:30 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_always-in-my-heart
2014-04-01 19:30 - 2014-04-01 19:30 - 00000000 ____D () C:\Users\Ursula\Downloads\bionez_agnez-lovely
2014-04-01 19:26 - 2014-04-01 19:26 - 00042169 _____ () C:\Users\Ursula\Downloads\bythebutterfly_loveness.zip
2014-04-01 19:26 - 2014-04-01 19:26 - 00035583 _____ () C:\Users\Ursula\Downloads\bythebutterfly_lovemeforever (1).zip
2014-04-01 19:25 - 2014-04-01 19:25 - 00236646 _____ () C:\Users\Ursula\Downloads\the-fontry_fty-skradjhuwn-ncv.zip
2014-04-01 19:24 - 2014-04-01 19:24 - 00477133 _____ () C:\Users\Ursula\Downloads\maellekeita_nenuphar-of-venus.zip
2014-04-01 19:24 - 2014-04-01 19:24 - 00042171 _____ () C:\Users\Ursula\Downloads\bionez_agnez-lovely.zip
2014-04-01 19:24 - 2014-04-01 19:24 - 00031014 _____ () C:\Users\Ursula\Downloads\maellekeita_animox.zip
2014-04-01 19:24 - 2014-04-01 19:24 - 00014693 _____ () C:\Users\Ursula\Downloads\kimberly-geswein_kg-i-and-love-and-you.zip
2014-04-01 19:23 - 2014-04-01 19:23 - 00419472 _____ () C:\Users\Ursula\Downloads\maellekeita_ophélia-script.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00105652 _____ () C:\Users\Ursula\Downloads\bythebutterfly_always-in-my-heart.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00094352 _____ () C:\Users\Ursula\Downloads\bythebutterfly_chunkster-jamz.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00090660 _____ () C:\Users\Ursula\Downloads\bythebutterfly_running-for-a-cause.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00085562 _____ () C:\Users\Ursula\Downloads\bythebutterfly_please-write-me-a-sing.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00029244 _____ () C:\Users\Ursula\Downloads\bythebutterfly_connected.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00057328 _____ () C:\Users\Ursula\Downloads\bythebutterfly_ness.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00037150 _____ () C:\Users\Ursula\Downloads\bythebutterfly_seriously.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00035583 _____ () C:\Users\Ursula\Downloads\bythebutterfly_lovemeforever.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00029616 _____ () C:\Users\Ursula\Downloads\bythebutterfly_fatmarker.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00011756 _____ () C:\Users\Ursula\Downloads\bythebutterfly_sweetness.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00237469 _____ () C:\Users\Ursula\Downloads\bythebutterfly_passingnotes.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00124978 _____ () C:\Users\Ursula\Downloads\bythebutterfly_puppybellies.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00097918 _____ () C:\Users\Ursula\Downloads\bythebutterfly_wednesday.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00074475 _____ () C:\Users\Ursula\Downloads\bythebutterfly_vanessasvalentine.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00047536 _____ () C:\Users\Ursula\Downloads\bythebutterfly_lilian.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00027643 _____ () C:\Users\Ursula\Downloads\bythebutterfly_littlemisspriss.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00173142 _____ () C:\Users\Ursula\Downloads\bythebutterfly_my-first-crush.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00163189 _____ () C:\Users\Ursula\Downloads\bythebutterfly_cutie-patootie.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00097837 _____ () C:\Users\Ursula\Downloads\bythebutterfly_isabelle-layne.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00097363 _____ () C:\Users\Ursula\Downloads\bythebutterfly_vbdings.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00050617 _____ () C:\Users\Ursula\Downloads\bythebutterfly_penelope-anne.zip
2014-04-01 19:17 - 2014-04-01 19:17 - 00167459 _____ () C:\Users\Ursula\Downloads\bythebutterfly_georgia-belle.zip
2014-04-01 19:17 - 2014-04-01 19:17 - 00124710 _____ () C:\Users\Ursula\Downloads\bythebutterfly_grandmas-garden.zip
2014-04-01 19:17 - 2014-04-01 19:17 - 00071145 _____ () C:\Users\Ursula\Downloads\bythebutterfly_papa-bear.zip
2014-04-01 19:16 - 2014-04-01 19:16 - 00000000 ____D () C:\Users\Ursula\Downloads\my_first_crush
2014-04-01 19:15 - 2014-04-01 19:15 - 00172985 _____ () C:\Users\Ursula\Downloads\my_first_crush.zip
2014-03-29 17:17 - 2014-03-29 17:44 - 00013573 _____ () C:\Users\Ursula\Documents\B.odt
2014-03-29 17:15 - 2014-03-29 17:15 - 00010231 _____ () C:\Users\Ursula\Documents\A.odt
2014-03-28 20:58 - 2014-03-29 17:53 - 00015138 _____ () C:\Users\Ursula\Documents\bombom aberto.odt
2014-03-28 10:31 - 2014-03-28 10:31 - 00013917 _____ () C:\Users\Ursula\Documents\Bombom.odt
2014-03-28 10:31 - 2014-03-28 10:31 - 00010429 _____ () C:\Users\Ursula\Documents\Bombom na travessa.odt
2014-03-27 09:28 - 2014-03-27 09:28 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 686b3579-f274-4a5a-b0f1-d27566098daa.job
2014-03-27 09:28 - 2014-03-27 09:28 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 42853260-1a30-472e-b8d4-516f628f252d.job
2014-03-27 09:28 - 2014-03-27 09:28 - 00000000 ____D () C:\Users\Ursula\AppData\Roaming\SUPERAntiSpyware.com
2014-03-27 09:27 - 2014-03-27 09:28 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-03-27 09:27 - 2014-03-27 09:27 - 00001800 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-03-27 09:27 - 2014-03-27 09:27 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-03-27 09:24 - 2014-03-27 09:26 - 18449872 _____ (SUPERAntiSpyware) C:\Users\Ursula\Downloads\SUPERAntiSpyware.exe
2014-03-26 23:32 - 2014-03-27 08:16 - 00000000 ____D () C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-03-26 23:32 - 2014-03-26 23:32 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-26 23:32 - 2014-03-26 23:32 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-03-26 23:00 - 2014-03-26 23:09 - 00017912 _____ () C:\Users\Ursula\Documents\MulheresDT.odt
2014-03-26 22:52 - 2014-03-26 22:52 - 00813232 _____ (RealNetworks, Inc.) C:\Users\Ursula\Downloads\RealPlayer_br (1).exe
2014-03-26 21:04 - 2014-03-26 21:04 - 00008601 _____ () C:\Users\Ursula\Desktop\Jessika.odt
2014-03-26 20:44 - 2014-04-01 20:04 - 00000000 ____D () C:\Users\Ursula\Downloads\Learning-Curve-Pro
2014-03-26 20:43 - 2014-03-26 20:43 - 00139237 _____ () C:\Users\Ursula\Downloads\Learning-Curve-Pro.zip
2014-03-26 20:26 - 2014-03-26 20:26 - 00000000 ____D () C:\Users\Ursula\Downloads\Little days
2014-03-26 20:21 - 2014-03-26 20:21 - 00022308 _____ () C:\Users\Ursula\Downloads\Little days.zip
2014-03-18 21:49 - 2014-03-18 21:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-17 20:42 - 2014-03-17 20:43 - 00000000 ____D () C:\Users\Ursula\Documents\PDF E DOC
2014-03-17 20:40 - 2014-03-28 20:16 - 00000000 ____D () C:\Users\Ursula\Documents\Imagens
2014-03-17 20:38 - 2014-03-17 20:39 - 00000000 ____D () C:\Users\Ursula\Downloads\PDF
2014-03-17 20:35 - 2014-03-26 22:11 - 00000000 ____D () C:\Users\Ursula\Downloads\Mp3
2014-03-17 20:27 - 2014-03-22 23:29 - 00000000 ____D () C:\Users\Ursula\Downloads\Imagens
2014-03-16 18:30 - 2014-04-05 18:26 - 00001052 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf415ee9d342f8.job

==================== One Month Modified Files and Folders =======

2014-04-05 19:19 - 2014-04-05 19:18 - 00014818 _____ () C:\Users\Ursula\Downloads\FRST.txt
2014-04-05 19:18 - 2014-04-05 19:18 - 00000000 ____D () C:\FRST
2014-04-05 19:16 - 2014-04-05 19:16 - 01145856 _____ (Farbar) C:\Users\Ursula\Downloads\FRST.exe
2014-04-05 18:32 - 2006-11-05 22:33 - 00485582 _____ () C:\Windows\system32\prfh0416.dat
2014-04-05 18:32 - 2006-11-05 22:33 - 00083754 _____ () C:\Windows\system32\prfc0416.dat
2014-04-05 18:32 - 2006-11-02 07:33 - 01264968 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-05 18:30 - 2014-04-05 18:30 - 00003083 _____ () C:\Windows\WindowsUpdate.log
2014-04-05 18:30 - 2013-08-06 17:17 - 00000000 ____D () C:\Users\Ursula\AppData\Roaming\BrOffice.org2
2014-04-05 18:27 - 2014-04-04 19:55 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-05 18:26 - 2014-03-16 18:30 - 00001052 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf415ee9d342f8.job
2014-04-05 18:26 - 2006-11-02 09:46 - 00003072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-05 18:26 - 2006-11-02 09:46 - 00003072 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-05 18:25 - 2014-04-05 18:25 - 00281664 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-05 18:25 - 2014-04-05 18:25 - 00000576 _____ () C:\Windows\PFRO.log
2014-04-05 18:25 - 2013-12-13 10:00 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\Windows\system32\Drivers\GbpNdisrd.sys
2014-04-05 18:25 - 2006-11-02 10:02 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-05 18:15 - 2014-04-05 18:15 - 00143942 _____ () C:\Users\Ursula\Documents\cópia dos registros.reg
2014-04-05 18:14 - 2014-01-13 11:40 - 00000000 ____D () C:\Users\Ursula\Tracing
2014-04-05 18:13 - 2008-07-13 10:45 - 00000000 ____D () C:\Windows\panther
2014-04-05 18:11 - 2014-04-05 18:11 - 00000804 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-05 18:11 - 2014-04-05 18:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-05 18:09 - 2014-04-05 18:08 - 04787368 _____ (Piriform Ltd) C:\Users\Ursula\Downloads\ccsetup412.exe
2014-04-05 18:07 - 2014-04-05 18:07 - 00008720 _____ () C:\Users\Ursula\Desktop\PureRa.txt
2014-04-05 18:06 - 2014-04-05 18:04 - 00008718 _____ () C:\PureRa.txt
2014-04-05 18:03 - 2014-04-05 18:03 - 00027505 _____ () C:\Users\Ursula\Downloads\PureRa.zip
2014-04-05 18:03 - 2014-04-05 18:03 - 00000000 ____D () C:\Users\Ursula\Downloads\PureRa
2014-04-05 17:52 - 2006-11-02 10:02 - 00032520 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-05 17:44 - 2006-11-02 08:18 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-05 13:35 - 2014-04-05 13:35 - 00031139 _____ () C:\Users\Ursula\Desktop\ZHPDiag.txt
2014-04-05 13:35 - 2014-04-05 10:01 - 00000000 ____D () C:\Users\Ursula\AppData\Roaming\ZHP
2014-04-05 13:34 - 2014-04-05 10:01 - 00000000 ____D () C:\Program Files\ZHPDiag
2014-04-05 13:18 - 2014-04-05 13:18 - 00001426 _____ () C:\Users\Ursula\Desktop\ZHPFixReport.txt
2014-04-05 13:18 - 2014-04-05 13:18 - 00001426 _____ () C:\Users\Ursula\Desktop\ZHPFix[R2].txt
2014-04-05 13:16 - 2014-04-05 13:16 - 00000065 _____ () C:\Users\Ursula\Desktop\virusscan link.txt
2014-04-05 12:47 - 2013-12-21 20:36 - 00000000 ____D () C:\Program Files\Bonjour
2014-04-05 10:01 - 2014-04-05 10:01 - 00001768 _____ () C:\Users\Ursula\Desktop\ZHPFix.lnk
2014-04-05 10:01 - 2014-04-05 10:01 - 00001645 _____ () C:\Users\Ursula\Desktop\ZHPDiag.lnk
2014-04-05 10:00 - 2014-04-05 09:59 - 06863616 _____ (Nicolas Coolman ) C:\Users\Ursula\Downloads\ZHPDiag2.exe
2014-04-05 09:51 - 2014-04-05 09:50 - 00001169 _____ () C:\Users\Ursula\Desktop\JRT.txt
2014-04-05 09:47 - 2014-04-05 09:47 - 00000000 ____D () C:\Windows\ERUNT
2014-04-05 09:39 - 2014-04-05 09:39 - 01038974 _____ (Thisisu) C:\Users\Ursula\Downloads\JRT.exe
2014-04-05 09:37 - 2013-12-13 09:59 - 00000000 ____D () C:\ProgramData\GAS Tecnologia
2014-04-05 00:24 - 2014-04-05 00:24 - 00017668 _____ () C:\Users\Ursula\Desktop\zoek-results.txt
2014-04-05 00:23 - 2014-04-05 00:01 - 00017668 _____ () C:\zoek-results.log
2014-04-05 00:10 - 2014-04-04 23:51 - 00000000 ____D () C:\zoek_backup
2014-04-05 00:10 - 2013-07-08 18:58 - 00000000 ____D () C:\Users\Ursula
2014-04-05 00:01 - 2014-04-05 00:00 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (6).zip
2014-04-05 00:00 - 2014-04-04 23:59 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (5).zip
2014-04-04 23:59 - 2014-04-04 23:59 - 00000000 ____D () C:\Users\Ursula\Downloads\zoek (4)
2014-04-04 23:58 - 2014-04-04 23:58 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (4).zip
2014-04-04 23:58 - 2014-04-04 23:57 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (3).zip
2014-04-04 23:56 - 2014-04-04 23:56 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (2).zip
2014-04-04 23:54 - 2014-04-04 23:54 - 01285120 _____ () C:\Users\Ursula\Downloads\zoek (2).exe
2014-04-04 23:54 - 2014-04-04 23:53 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek (1).zip
2014-04-04 23:53 - 2014-04-04 23:53 - 04095370 _____ () C:\Users\Ursula\Downloads\zoek.zip
2014-04-04 23:52 - 2014-04-05 00:12 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-04-04 23:51 - 2014-04-04 23:51 - 01285120 _____ () C:\Users\Ursula\Downloads\zoek (1).exe
2014-04-04 23:50 - 2014-04-04 23:50 - 01285120 _____ () C:\Users\Ursula\Downloads\zoek.exe
2014-04-04 23:10 - 2014-01-25 08:30 - 00000680 _____ () C:\Users\Ursula\AppData\Local\d3d9caps.dat
2014-04-04 21:48 - 2013-07-08 19:10 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-04 21:30 - 2006-11-02 08:18 - 00000000 ____D () C:\Windows\system
2014-04-04 20:55 - 2014-04-04 19:55 - 00000899 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-04-04 20:55 - 2014-04-04 19:55 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-04-04 19:55 - 2014-04-04 19:55 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-04 19:45 - 2014-04-04 19:43 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Ursula\Downloads\mbam-setup-2.0.0.1000.exe
2014-04-04 19:26 - 2014-04-04 19:26 - 00010254 _____ () C:\Users\Ursula\Documents\AdClear relatório.odt
2014-04-04 19:23 - 2014-04-04 19:21 - 00001274 _____ () C:\Users\Ursula\Desktop\AdwCleaner[S2].txt
2014-04-04 19:18 - 2014-04-04 18:38 - 00000000 ____D () C:\AdwCleaner
2014-04-04 19:16 - 2014-04-04 19:16 - 00000372 _____ () C:\Users\Ursula\Documentos - Atalho.lnk
2014-04-04 19:04 - 2014-04-04 15:52 - 00000000 __SHD () C:\Users\Ursula\AppData\Roaming\ceb0
2014-04-04 18:52 - 2013-12-12 19:56 - 00000846 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-04 18:52 - 2013-07-09 17:10 - 00001075 _____ () C:\Users\Ursula\Desktop\Google Chrome.lnk
2014-04-04 18:52 - 2013-07-09 17:10 - 00000000 ____D () C:\Users\Ursula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-04 18:52 - 2013-07-08 19:01 - 00000929 _____ () C:\Users\Ursula\Desktop\Launch Internet Explorer Browser.lnk
2014-04-04 18:52 - 2013-07-08 18:59 - 00000959 _____ () C:\Users\Ursula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-04 18:37 - 2014-04-04 18:37 - 01426178 _____ () C:\Users\Ursula\Downloads\AdwCleaner.exe
2014-04-04 18:32 - 2014-04-04 18:32 - 00007017 _____ () C:\Users\Ursula\Downloads\hijackthis.log
2014-04-04 18:31 - 2014-04-04 18:31 - 00388608 _____ (Trend Micro Inc.) C:\Users\Ursula\Downloads\HijackThis (1).exe
2014-04-04 18:25 - 2014-04-04 18:25 - 00388608 _____ (Trend Micro Inc.) C:\Users\Ursula\Downloads\HijackThis.exe
2014-04-04 15:52 - 2014-04-04 15:52 - 00000000 __SHD () C:\Program Files\d1b8
2014-04-04 15:52 - 2014-04-04 15:52 - 00000000 __SHD () C:\cf604
2014-04-04 15:52 - 2014-01-12 18:48 - 00006144 _____ () C:\Users\Ursula\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-04-04 14:55 - 2014-04-04 14:55 - 00014867 _____ () C:\Users\Ursula\Documents\seguro.odt
2014-04-03 11:35 - 2014-04-03 11:35 - 00018512 _____ () C:\Users\Ursula\Documents\Letras diversas.odt
2014-04-03 10:44 - 2014-04-03 10:44 - 00000000 _____ () C:\Users\Ursula\Documents\mariee.map
2014-04-03 10:43 - 2014-04-03 10:42 - 00001074 _____ () C:\Users\Ursula\Documents\Marie3a.html
2014-04-03 10:40 - 2014-04-03 10:40 - 00000682 _____ () C:\Users\Ursula\Documents\Marie4.html
2014-04-03 10:25 - 2014-04-03 10:25 - 01461484 _____ () C:\Users\Ursula\Documents\Marie3a.odt
2014-04-03 09:51 - 2014-04-04 19:55 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-04 19:55 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-04 19:55 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-03 08:44 - 2013-07-08 19:00 - 00072496 _____ () C:\Users\Ursula\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-01 20:48 - 2014-04-01 20:48 - 00041554 _____ () C:\Users\Ursula\Downloads\mc_sweetie_hearts.zip
2014-04-01 20:48 - 2014-04-01 20:48 - 00000000 ____D () C:\Users\Ursula\Downloads\mc_sweetie_hearts
2014-04-01 20:46 - 2014-04-01 20:46 - 00304615 _____ () C:\Users\Ursula\Downloads\fiolex_girls (1).zip
2014-04-01 20:46 - 2014-04-01 20:46 - 00000000 ____D () C:\Users\Ursula\Downloads\fiolex_girls (1)
2014-04-01 20:43 - 2014-04-01 20:43 - 00000000 ____D () C:\Users\Ursula\Downloads\nella_sue
2014-04-01 20:43 - 2014-04-01 20:43 - 00000000 ____D () C:\Users\Ursula\Downloads\always_in_my_heart
2014-04-01 20:41 - 2014-04-01 20:41 - 00039263 _____ () C:\Users\Ursula\Downloads\nella_sue.zip
2014-04-01 20:41 - 2014-04-01 20:41 - 00032178 _____ () C:\Users\Ursula\Downloads\always_in_my_heart.zip
2014-04-01 20:32 - 2014-04-01 20:32 - 00047319 _____ () C:\Users\Ursula\Downloads\renaissance.zip
2014-04-01 20:32 - 2014-04-01 20:32 - 00000000 ____D () C:\Users\Ursula\Downloads\renaissance
2014-04-01 20:30 - 2014-04-01 20:30 - 00105665 _____ () C:\Users\Ursula\Downloads\walker_on_the_moon.zip
2014-04-01 20:30 - 2014-04-01 20:30 - 00000000 ____D () C:\Users\Ursula\Downloads\walker_on_the_moon
2014-04-01 20:29 - 2014-04-01 20:29 - 00051987 _____ () C:\Users\Ursula\Downloads\diogene_chopinscript (1).zip
2014-04-01 20:28 - 2014-04-01 20:28 - 00000000 ____D () C:\Users\Ursula\Downloads\diogene_chopinscript
2014-04-01 20:27 - 2014-04-01 20:27 - 00072357 _____ () C:\Users\Ursula\Downloads\apostrophic-lab_scriptina.zip
2014-04-01 20:27 - 2014-04-01 20:27 - 00051987 _____ () C:\Users\Ursula\Downloads\diogene_chopinscript.zip
2014-04-01 20:27 - 2014-04-01 20:27 - 00000000 ____D () C:\Users\Ursula\Downloads\apostrophic-lab_scriptina
2014-04-01 20:23 - 2014-04-01 20:23 - 00030674 _____ () C:\Users\Ursula\Downloads\CAC-Champagne.zip
2014-04-01 20:23 - 2014-04-01 20:23 - 00000000 ____D () C:\Users\Ursula\Downloads\CAC-Champagne
2014-04-01 20:21 - 2014-04-01 20:21 - 00029663 _____ () C:\Users\Ursula\Downloads\fonts-coventry-script.zip
2014-04-01 20:21 - 2014-04-01 20:21 - 00000000 ____D () C:\Users\Ursula\Downloads\fonts-coventry-script
2014-04-01 20:08 - 2014-04-01 20:08 - 00027725 _____ () C:\Users\Ursula\Downloads\kids_written.zip
2014-04-01 20:08 - 2014-04-01 20:08 - 00021061 _____ () C:\Users\Ursula\Downloads\belphebe.zip
2014-04-01 20:04 - 2014-04-01 20:04 - 00000000 ____D () C:\Users\Ursula\Downloads\cursive_standard
2014-04-01 20:04 - 2014-03-26 20:44 - 00000000 ____D () C:\Users\Ursula\Downloads\Learning-Curve-Pro
2014-04-01 20:03 - 2014-04-01 20:03 - 00047847 _____ () C:\Users\Ursula\Downloads\cursive_standard.zip
2014-04-01 20:03 - 2014-04-01 20:03 - 00000000 ____D () C:\Users\Ursula\Downloads\learning_curve
2014-04-01 20:02 - 2014-04-01 20:02 - 00042634 _____ () C:\Users\Ursula\Downloads\learning_curve.zip
2014-04-01 20:00 - 2014-04-01 20:00 - 00040727 _____ () C:\Users\Ursula\Downloads\dawning_of_a_new_day.zip
2014-04-01 19:56 - 2014-04-01 19:56 - 00021406 _____ () C:\Users\Ursula\Downloads\fontdinerdotcom_luvable.zip
2014-04-01 19:56 - 2014-04-01 19:56 - 00000000 ____D () C:\Users\Ursula\Downloads\fontdinerdotcom_luvable
2014-04-01 19:55 - 2014-04-01 19:55 - 00000000 ____D () C:\Users\Ursula\Downloads\the-fontry_fty-skradjhuwn-ncv
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\maellekeita_ophélia-script
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\maellekeita_nenuphar-of-venus
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\maellekeita_animox
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\kimberly-geswein_kg-i-and-love-and-you
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\fiolex_girls
2014-04-01 19:54 - 2014-04-01 19:54 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_wednesday
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_vbdings
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_vanessasvalentine
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_sweetness
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_seriously
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_running-for-a-cause
2014-04-01 19:53 - 2014-04-01 19:53 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_puppybellies
2014-04-01 19:52 - 2014-04-01 19:52 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_please-write-me-a-sing
2014-04-01 19:52 - 2014-04-01 19:52 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_penelope-anne
2014-04-01 19:51 - 2014-04-01 19:51 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_passingnotes
2014-04-01 19:51 - 2014-04-01 19:51 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_papa-bear
2014-04-01 19:51 - 2014-04-01 19:51 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_ness
2014-04-01 19:50 - 2014-04-01 19:50 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_my-first-crush
2014-04-01 19:37 - 2014-04-01 19:37 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_loveness
2014-04-01 19:37 - 2014-04-01 19:37 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_lovemeforever (1)
2014-04-01 19:36 - 2014-04-01 19:36 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_lovemeforever
2014-04-01 19:35 - 2014-04-01 19:35 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_lilian
2014-04-01 19:32 - 2014-04-01 19:32 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_isabelle-layne
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_georgia-belle
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_fatmarker
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_cutie-patootie
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_connected
2014-04-01 19:31 - 2014-04-01 19:31 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_chunkster-jamz
2014-04-01 19:30 - 2014-04-01 19:30 - 00039597 _____ () C:\Users\Ursula\Downloads\fiolex_girls.zip
2014-04-01 19:30 - 2014-04-01 19:30 - 00000000 ____D () C:\Users\Ursula\Downloads\bythebutterfly_always-in-my-heart
2014-04-01 19:30 - 2014-04-01 19:30 - 00000000 ____D () C:\Users\Ursula\Downloads\bionez_agnez-lovely
2014-04-01 19:26 - 2014-04-01 19:26 - 00042169 _____ () C:\Users\Ursula\Downloads\bythebutterfly_loveness.zip
2014-04-01 19:26 - 2014-04-01 19:26 - 00035583 _____ () C:\Users\Ursula\Downloads\bythebutterfly_lovemeforever (1).zip
2014-04-01 19:25 - 2014-04-01 19:25 - 00236646 _____ () C:\Users\Ursula\Downloads\the-fontry_fty-skradjhuwn-ncv.zip
2014-04-01 19:24 - 2014-04-01 19:24 - 00477133 _____ () C:\Users\Ursula\Downloads\maellekeita_nenuphar-of-venus.zip
2014-04-01 19:24 - 2014-04-01 19:24 - 00042171 _____ () C:\Users\Ursula\Downloads\bionez_agnez-lovely.zip
2014-04-01 19:24 - 2014-04-01 19:24 - 00031014 _____ () C:\Users\Ursula\Downloads\maellekeita_animox.zip
2014-04-01 19:24 - 2014-04-01 19:24 - 00014693 _____ () C:\Users\Ursula\Downloads\kimberly-geswein_kg-i-and-love-and-you.zip
2014-04-01 19:23 - 2014-04-01 19:23 - 00419472 _____ () C:\Users\Ursula\Downloads\maellekeita_ophélia-script.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00105652 _____ () C:\Users\Ursula\Downloads\bythebutterfly_always-in-my-heart.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00094352 _____ () C:\Users\Ursula\Downloads\bythebutterfly_chunkster-jamz.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00090660 _____ () C:\Users\Ursula\Downloads\bythebutterfly_running-for-a-cause.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00085562 _____ () C:\Users\Ursula\Downloads\bythebutterfly_please-write-me-a-sing.zip
2014-04-01 19:22 - 2014-04-01 19:22 - 00029244 _____ () C:\Users\Ursula\Downloads\bythebutterfly_connected.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00057328 _____ () C:\Users\Ursula\Downloads\bythebutterfly_ness.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00037150 _____ () C:\Users\Ursula\Downloads\bythebutterfly_seriously.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00035583 _____ () C:\Users\Ursula\Downloads\bythebutterfly_lovemeforever.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00029616 _____ () C:\Users\Ursula\Downloads\bythebutterfly_fatmarker.zip
2014-04-01 19:20 - 2014-04-01 19:20 - 00011756 _____ () C:\Users\Ursula\Downloads\bythebutterfly_sweetness.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00237469 _____ () C:\Users\Ursula\Downloads\bythebutterfly_passingnotes.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00124978 _____ () C:\Users\Ursula\Downloads\bythebutterfly_puppybellies.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00097918 _____ () C:\Users\Ursula\Downloads\bythebutterfly_wednesday.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00074475 _____ () C:\Users\Ursula\Downloads\bythebutterfly_vanessasvalentine.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00047536 _____ () C:\Users\Ursula\Downloads\bythebutterfly_lilian.zip
2014-04-01 19:19 - 2014-04-01 19:19 - 00027643 _____ () C:\Users\Ursula\Downloads\bythebutterfly_littlemisspriss.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00173142 _____ () C:\Users\Ursula\Downloads\bythebutterfly_my-first-crush.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00163189 _____ () C:\Users\Ursula\Downloads\bythebutterfly_cutie-patootie.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00097837 _____ () C:\Users\Ursula\Downloads\bythebutterfly_isabelle-layne.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00097363 _____ () C:\Users\Ursula\Downloads\bythebutterfly_vbdings.zip
2014-04-01 19:18 - 2014-04-01 19:18 - 00050617 _____ () C:\Users\Ursula\Downloads\bythebutterfly_penelope-anne.zip
2014-04-01 19:17 - 2014-04-01 19:17 - 00167459 _____ () C:\Users\Ursula\Downloads\bythebutterfly_georgia-belle.zip
2014-04-01 19:17 - 2014-04-01 19:17 - 00124710 _____ () C:\Users\Ursula\Downloads\bythebutterfly_grandmas-garden.zip
2014-04-01 19:17 - 2014-04-01 19:17 - 00071145 _____ () C:\Users\Ursula\Downloads\bythebutterfly_papa-bear.zip
2014-04-01 19:16 - 2014-04-01 19:16 - 00000000 ____D () C:\Users\Ursula\Downloads\my_first_crush
2014-04-01 19:15 - 2014-04-01 19:15 - 00172985 _____ () C:\Users\Ursula\Downloads\my_first_crush.zip
2014-03-29 17:53 - 2014-03-28 20:58 - 00015138 _____ () C:\Users\Ursula\Documents\bombom aberto.odt
2014-03-29 17:44 - 2014-03-29 17:17 - 00013573 _____ () C:\Users\Ursula\Documents\B.odt
2014-03-29 17:15 - 2014-03-29 17:15 - 00010231 _____ () C:\Users\Ursula\Documents\A.odt
2014-03-28 20:16 - 2014-03-17 20:40 - 00000000 ____D () C:\Users\Ursula\Documents\Imagens
2014-03-28 10:31 - 2014-03-28 10:31 - 00013917 _____ () C:\Users\Ursula\Documents\Bombom.odt
2014-03-28 10:31 - 2014-03-28 10:31 - 00010429 _____ () C:\Users\Ursula\Documents\Bombom na travessa.odt
2014-03-27 09:28 - 2014-03-27 09:28 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 686b3579-f274-4a5a-b0f1-d27566098daa.job
2014-03-27 09:28 - 2014-03-27 09:28 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 42853260-1a30-472e-b8d4-516f628f252d.job
2014-03-27 09:28 - 2014-03-27 09:28 - 00000000 ____D () C:\Users\Ursula\AppData\Roaming\SUPERAntiSpyware.com
2014-03-27 09:28 - 2014-03-27 09:27 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-03-27 09:27 - 2014-03-27 09:27 - 00001800 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-03-27 09:27 - 2014-03-27 09:27 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-03-27 09:26 - 2014-03-27 09:24 - 18449872 _____ (SUPERAntiSpyware) C:\Users\Ursula\Downloads\SUPERAntiSpyware.exe
2014-03-27 08:16 - 2014-03-26 23:32 - 00000000 ____D () C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-03-26 23:32 - 2014-03-26 23:32 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-26 23:32 - 2014-03-26 23:32 - 00000000 ____D () C:\Program Files\Common Files\Wise Installation Wizard
2014-03-26 23:09 - 2014-03-26 23:00 - 00017912 _____ () C:\Users\Ursula\Documents\MulheresDT.odt
2014-03-26 22:52 - 2014-03-26 22:52 - 00813232 _____ (RealNetworks, Inc.) C:\Users\Ursula\Downloads\RealPlayer_br (1).exe
2014-03-26 22:11 - 2014-03-17 20:35 - 00000000 ____D () C:\Users\Ursula\Downloads\Mp3
2014-03-26 21:04 - 2014-03-26 21:04 - 00008601 _____ () C:\Users\Ursula\Desktop\Jessika.odt
2014-03-26 20:43 - 2014-03-26 20:43 - 00139237 _____ () C:\Users\Ursula\Downloads\Learning-Curve-Pro.zip
2014-03-26 20:26 - 2014-03-26 20:26 - 00000000 ____D () C:\Users\Ursula\Downloads\Little days
2014-03-26 20:21 - 2014-03-26 20:21 - 00022308 _____ () C:\Users\Ursula\Downloads\Little days.zip
2014-03-22 23:29 - 2014-03-17 20:27 - 00000000 ____D () C:\Users\Ursula\Downloads\Imagens
2014-03-18 21:49 - 2014-03-18 21:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-18 21:49 - 2013-12-12 19:56 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-17 20:43 - 2014-03-17 20:42 - 00000000 ____D () C:\Users\Ursula\Documents\PDF E DOC
2014-03-17 20:39 - 2014-03-17 20:38 - 00000000 ____D () C:\Users\Ursula\Downloads\PDF

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys
[2006-11-02 07:25] - [2006-11-02 06:51] - 0208488 ____A (Microsoft Corporation) 11EF6C1CAEF76B685233450A126125D6



LastRegBack: 2014-04-05 18:33

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by Ursula at 2014-04-05 19:20:32
Running from C:\Users\Ursula\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================


==================== Installed Programs ======================

0091 (HKLM\...\{43A381E6-5BD0-4534-8DB8-03ED7DE168E0}) (Version: 1.00.0000 - Bright)
Adobe Flash Player 11 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Reader 8 - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-A80000000000}) (Version: 8.0.0 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ares 3.1.7.3042 (HKLM\...\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1) (Version: 3.1.7.3042 - Ares)
Assistente de Conexão do Windows Live (HKLM\...\{51A9E3DD-37B8-47BB-8E67-5B76B3EFBC48}) (Version: 5.000.818.5 - Microsoft Corporation)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2013 - Avast Software)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Bright Client Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: - Bright)
BrOffice.org 2.0 (HKLM\...\{0BD153D1-05F8-4163-BDA0-B60D1F70343C}) (Version: 2.0.9073 - OpenOffice.org)
CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)
Ferramenta de Carregamento do Windows Live (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden
HP Deskjet 2050 J510 series Ajuda (HKLM\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.3781 - HP Photo Creations Powered by RocketLife)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - )
Malwarebytes Anti-Malware versão 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - ptb (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 pt-BR) (HKLM\...\Mozilla Firefox 28.0 (x86 pt-BR)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
Pacote de Idiomas do Microsoft .NET Framework 3.5 SP1 - PTB (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - ptb) (Version: - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: - )
Software básico do dispositivo HP Deskjet 2050 J510 series (HKLM\...\{276ACE3E-B1AB-46CE-9F35-7F394879D0E6}) (Version: 22.50.231.0 - Hewlett-Packard Co.)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.7.1018 - SUPERAntiSpyware.com)
Suporte para Aplicativos Apple (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Windows Live Call (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Essentials (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{2DF215E0-BD3C-4C98-8616-AFEF09747285}) (Version: 14.0.8117.416 - Microsoft Corporation)
ZHPDiag 2014 (HKLM\...\ZHPDiag_is1) (Version: 2014 - Nicolas Coolman)

==================== Restore Points =========================


==================== Hosts content: ==========================

2006-11-02 07:23 - 2014-04-05 00:01 - 00000781 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {1E5726C0-75BF-4407-AB06-179A437E37C9} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {51294EB6-2976-4E1B-9E4F-0FCB704A9BF3} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2006-11-02] ()
Task: {75D4361A-5C7D-4980-B057-23C699A51A36} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-134228104-2085873779-558425676-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {7677ADD4-D570-4BFE-BD03-8EAF973DEE0F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-08] (Google Inc.)
Task: {78105DFA-D44D-47CA-9134-C08D2C1E2871} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-134228104-2085873779-558425676-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {93E67B49-CD0C-41A7-AFF1-E9947348B3AE} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-134228104-2085873779-558425676-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {AB7A158B-8F35-45C3-85AD-51F1D9AF770E} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-134228104-2085873779-558425676-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {B0C11CCE-B53D-4AB8-A4A0-8C407D93CCBE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-24] (AVAST Software)
Task: {B7837B62-DBB3-4DC2-96CB-ED355D1FE698} - System32\Tasks\GoogleUpdateTaskMachineCore1cf415ee9d342f8 => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-08] (Google Inc.)
Task: {D88EA29E-F377-42DA-887D-0498C888E446} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-134228104-2085873779-558425676-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: {D8A3901F-1682-4087-A2BF-660ECB6E8A17} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2006-11-02] (Microsoft Corporation)
Task: {D922380F-039D-4FD2-8DB6-209A72159856} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {E0B50394-9AE5-4AAF-9C3D-EAC65813D51C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-08] (Google Inc.)
Task: {E7EDB72C-2111-4F43-9075-2C9F53658170} - \Baidu PC Faster Update No Task File
Task: {E8D09779-FD6B-4E6A-B819-BA0AEEAA8838} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf415ee9d342f8.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 42853260-1a30-472e-b8d4-516f628f252d.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 686b3579-f274-4a5a-b0f1-d27566098daa.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Loaded Modules (whitelisted) =============

2014-04-05 18:27 - 2014-04-05 15:11 - 02189824 _____ () C:\Program Files\AVAST Software\Avast\defs\14040504\algo.dll
2013-09-13 18:51 - 2013-09-13 18:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 18:51 - 2013-09-13 18:51 - 01242952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-24 16:43 - 2014-01-24 16:43 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2006-10-15 17:01 - 2006-10-15 17:01 - 00828416 _____ () C:\Program Files\BrOffice.org 2.0\program\libxml2.dll
2014-03-27 12:05 - 2014-03-14 21:50 - 00051016 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll
2014-03-27 12:06 - 2014-03-14 21:50 - 04061000 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll
2014-03-27 12:06 - 2014-03-14 21:50 - 00394568 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll
2014-03-27 12:05 - 2014-03-14 21:50 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll
2014-03-27 12:06 - 2014-03-14 21:50 - 13637448 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll
2014-01-15 13:34 - 2014-01-15 13:34 - 04591616 _____ () C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll
2014-01-15 13:34 - 2014-01-15 13:34 - 00112128 _____ () C:\Users\Ursula\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows\System32:01CAE29D_Cef.gbp
AlternateDataStreams: C:\Windows\system32\drivers:GbpKmAp.lst

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer => ""="Service"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk => C:\Windows\pss\Adobe Reader Speed Launch.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk => C:\Windows\pss\Adobe Reader Synchronizer.lnk.CommonStartup

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/05/2014 06:32:46 PM) (Source: WerSvc) (User: )
Description: O arquivo de destino da Plataforma de Feedback do Windows (um arquivo DLL que contém uma lista dos problemas do computador que necessitam de coleta adicional de dados para diagnóstico) não pôde ser analisado. Código de erro 8014FFF9.

Error: (04/05/2014 05:54:54 PM) (Source: EventSystem) (User: )
Description: d:\vista_gdr\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (04/05/2014 02:00:05 PM) (Source: WerSvc) (User: )
Description: O arquivo de destino da Plataforma de Feedback do Windows (um arquivo DLL que contém uma lista dos problemas do computador que necessitam de coleta adicional de dados para diagnóstico) não pôde ser analisado. Código de erro 8014FFF9.


System errors:
=============
Error: (04/05/2014 06:25:59 PM) (Source: Microsoft-Windows-TaskScheduler) (User: AUTORIDADE NT)
Description: 2147942402

Error: (04/05/2014 06:25:23 PM) (Source: volmgr) (User: )
Description: O sistema não teve êxito ao carregar o driver do despejo de memória.

Error: (04/05/2014 06:25:11 PM) (Source: volmgr) (User: )
Description: O sistema não teve êxito ao carregar o driver do despejo de memória.

Error: (04/05/2014 05:55:08 PM) (Source: DCOM) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (04/05/2014 05:55:06 PM) (Source: Service Control Manager) (User: )
Description: aswRvrt
aswSnx
aswSP
aswTdi
aswVmm
Bhbase
cloverm
SASDIFSV
SASKUTIL
spldr
Wanarpv6

Error: (04/05/2014 05:55:06 PM) (Source: Service Control Manager) (User: )
Description: Firewall do Windows13 (0xD)

Error: (04/05/2014 05:55:06 PM) (Source: Service Control Manager) (User: )
Description: Pesquisador de ComputadoresServer%%1068

Error: (04/05/2014 05:55:01 PM) (Source: DCOM) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (04/05/2014 05:54:54 PM) (Source: DCOM) (User: )
Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}

Error: (04/05/2014 05:54:45 PM) (Source: LSM) (User: )
Description: Falha ao iniciar o Serviço de Terminal. O código de status relevante foi Não é possível compartilhar este serviço no modo de segurança
.


Microsoft Office Sessions:
=========================
Error: (04/05/2014 06:32:46 PM) (Source: WerSvc)(User: )
Description: 8014FFF9

Error: (04/05/2014 05:54:54 PM) (Source: EventSystem)(User: )
Description: d:\vista_gdr\com\complus\src\events\tier1\eventsystemobj.cpp458007043c

Error: (04/05/2014 02:00:05 PM) (Source: WerSvc)(User: )
Description: 8014FFF9


CodeIntegrity Errors:
===================================
Date: 2014-04-05 19:19:55.313
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:55.194
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:55.085
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:54.977
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:54.870
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:54.759
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:54.656
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:54.557
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:54.245
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-04-05 19:19:54.132
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Percentage of memory in use: 86%
Total physical RAM: 1014.75 MB
Available physical RAM: 138.62 MB
Total Pagefile: 2297.87 MB
Available Pagefile: 874.11 MB
Total Virtual: 2047.88 MB
Available Virtual: 1907.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:74.53 GB) (Free:57.76 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive h: (Expansion Drive) (Fixed) (Total:931.51 GB) (Free:842.88 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 75 GB) (Disk ID: 9BE9E40B)
Partition 1: (Active) - (Size=75 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 932 GB) (Disk ID: 9A3BB206)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Faça o download do Usbfix [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] (ao acessar a página clique no botão representado nesta imagem (na parte direita da página) para baixá-lo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Utilize o USBFix conforme é mostrado nesta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
______________________________________________________________________________________________________________

Faça o download do [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

 Instale-o e utilize-o seguindo as dicas deste tutorial:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Na sua próxima resposta poste o relatório do McShield Anti-Malware Tool que terá o nome MCShield-AllScans.txt, o qual estará na área de trabalho (Desktop) de seu PC juntamente com o log (relatório) do Usbfix que estará em C:\UsbFix.txt

############################## | UsbFix V 7.169 | [Supressão]

Usuário: Ursula (Administrador) # DANIELE-PC
Atualizado em 31/03/2014 por El Desaparecido - Team SosVirus
Começou em 20:07:57 | 05/04/2014

Site : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Changelog : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Support : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Upload Malware : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Contato : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

PC: MSI (MS-7267)
CPU: Intel(R) Celeron(R) CPU 440 @ 2.00GHz
RAM -> [Total : 1015 Mo| Free : 299 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft® Windows Vista™ Starter (6.0.6000 32-Bit)
WB: Windows Internet Explorer : 7.0.6000.16982
WB: Google Chrome : 33.0.1750.154
WB: Mozilla Firefox : 28.0

SC: Security Center [(!) Disabled]
WU: Windows Update [Enabled]

FW: Windows FireWall [Enabled]

C:\ (%systemdrive%) -> Disco fixo # 75 Gb (58 Mb livre - 77%) [] # NTFS
D:\ -> CD-ROM
H:\ -> Disco fixo # 932 Gb (843 Mb livre - 90%) [Expansion Drive] # NTFS
I:\ -> Disco removível # 4 Gb (1 Mb livre - 35%) [] # FAT32

################## | Processos Ativos |

C:\Windows\system32\csrss.exe (ID: 528 |ParentID: 516)
C:\Windows\system32\wininit.exe (ID: 572 |ParentID: 516)
C:\Windows\system32\csrss.exe (ID: 580 |ParentID: 564)
C:\Windows\system32\winlogon.exe (ID: 616 |ParentID: 564)
C:\Windows\system32\services.exe (ID: 660 |ParentID: 572)
C:\Windows\system32\lsass.exe (ID: 676 |ParentID: 572)
C:\Windows\system32\lsm.exe (ID: 684 |ParentID: 572)
C:\Windows\system32\svchost.exe (ID: 836 |ParentID: 660)
C:\PROGRA~1\GbPlugin\GbpSv.exe (ID: 892 |ParentID: 660)
C:\Windows\system32\svchost.exe (ID: 968 |ParentID: 660)
C:\Windows\System32\svchost.exe (ID: 1004 |ParentID: 660)
C:\Windows\System32\svchost.exe (ID: 1120 |ParentID: 660)
C:\Windows\System32\svchost.exe (ID: 1172 |ParentID: 660)
C:\Windows\system32\svchost.exe (ID: 1188 |ParentID: 660)
C:\Windows\system32\AUDIODG.EXE (ID: 1264 |ParentID: 1120)
C:\Windows\system32\SLsvc.exe (ID: 1296 |ParentID: 660)
C:\Windows\system32\svchost.exe (ID: 1332 |ParentID: 660)
C:\Windows\system32\svchost.exe (ID: 1476 |ParentID: 660)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1584 |ParentID: 660)
C:\Windows\system32\Dwm.exe (ID: 1796 |ParentID: 1172)
C:\Windows\Explorer.EXE (ID: 1836 |ParentID: 1788)
C:\Windows\system32\runonce.exe (ID: 1848 |ParentID: 1836)
C:\Windows\System32\spoolsv.exe (ID: 1936 |ParentID: 660)
C:\Windows\system32\taskeng.exe (ID: 1952 |ParentID: 1188)
C:\Windows\system32\svchost.exe (ID: 1980 |ParentID: 660)
C:\Windows\system32\taskeng.exe (ID: 492 |ParentID: 1188)
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (ID: 1808 |ParentID: 660)
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 820 |ParentID: 660)
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe (ID: 1636 |ParentID: 660)
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe (ID: 2156 |ParentID: 660)
C:\Windows\system32\svchost.exe (ID: 2192 |ParentID: 660)
C:\Windows\System32\svchost.exe (ID: 2268 |ParentID: 660)
C:\Windows\system32\SearchIndexer.exe (ID: 2340 |ParentID: 660)
C:\Windows\system32\WUDFHost.exe (ID: 2528 |ParentID: 1172)
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe (ID: 2720 |ParentID: 2156)
C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe (ID: 3692 |ParentID: 1952)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 1108 |ParentID: 836)

################## | Procura genérica |

Supprimido ! I:\RECYCLER\0xB15317E2.exe

(!) Ficheiros temporários suprimido.

################## | Registro |

Supprimido ! HKU\S-1-5-21-134228104-2085873779-558425676-1000\Software\.\.\.\.\Mountpoints2\H
Supprimido ! HKU\S-1-5-21-134228104-2085873779-558425676-1000\Software\.\.\.\.\Mountpoints2\{b579a4ca-68a8-11e3-b907-065043001281}

################## | Regedit Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKCU\..\Run : [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
04 - HKLM\..\Run : [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
04 - HKLM\..\Run : [RtHDVCpl] RtHDVCpl.exe
04 - HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - HKLM\..\Run : [ACU] "C:\Program Files\Bright\ACU.exe" -nogui
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
04 - HKU\S-1-5-21-134228104-2085873779-558425676-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-134228104-2085873779-558425676-1000\..\Run : [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

################## | Listing |

[05/04/2014 - 00:23:44 | SHD] - C:\$RECYCLE.BIN
[04/04/2014 - 19:18:16 | D] - C:\AdwCleaner
[08/07/2013 - 18:50:03 | D] - C:\Arquivos de programas
[18/09/2006 - 18:43:36 | A | 0 Ko] - C:\autoexec.bat
[13/07/2008 - 10:46:18 | SHD] - C:\Boot
[02/11/2006 - 06:53:57 | RASH | 429 Ko] - C:\bootmgr
[13/07/2008 - 10:46:18 | RAS | 8 Ko] - C:\BOOTSECT.BAK
[04/04/2014 - 15:52:36 | D] - C:\cf604
[27/03/2014 - 08:19:11 | D] - C:\Config.Msi
[18/09/2006 - 18:43:37 | N | 0 Ko] - C:\config.sys
[02/11/2006 - 10:02:53 | SHD] - C:\Documents and Settings
[14/07/2008 - 00:39:11 | D] - C:\Fast Recovery
[13/07/2008 - 10:45:00 | D] - C:\Firstline
[05/04/2014 - 19:21:33 | D] - C:\FRST
[05/04/2014 - 20:05:07 | ASH | 1039720 Ko] - C:\hiberfil.sys
[04/04/2014 - 20:44:22 | N | 8 Ko | 3A8C84DA8AFA82E6469B41D72DFDBB6B] - C:\log malware.txt
[04/04/2014 - 22:23:27 | N | 8 Ko | DB97630F9C30FB690818E1F653193963] - C:\Log Malwarebyte2.txt
[05/04/2014 - 20:05:07 | ASH | 1346304 Ko] - C:\pagefile.sys
[05/04/2014 - 18:11:39 | D] - C:\Program Files
[05/04/2014 - 12:47:57 | HD] - C:\ProgramData
[05/04/2014 - 18:06:18 | N | 9 Ko | 43B30659FBEF968FD5ED7E761D3FD42D] - C:\PureRa.txt
[14/07/2008 - 00:40:44 | N | 22 Ko] - C:\Setup.log
[24/01/2014 - 15:40:20 | SHD] - C:\System Volume Information
[12/12/2013 - 19:19:48 | D] - C:\temp
[05/04/2014 - 19:53:16 | D] - C:\UsbFix
[05/04/2014 - 20:09:06 | A | 7 Ko | 37EF21273E7189D0AF935E8737EAE20B] - C:\UsbFix [Clean 2] DANIELE-PC.txt
[08/07/2013 - 18:58:32 | D] - C:\Users
[05/04/2014 - 19:18:43 | D] - C:\Windows
[05/04/2014 - 00:23:33 | N | 17 Ko] - C:\zoek-results.log
[05/04/2014 - 00:10:14 | D] - C:\zoek_backup
[19/12/2013 - 22:42:53 | SHD] - H:\$RECYCLE.BIN
[07/05/2010 - 17:01:54 | N | 0 Ko] - H:\Autorun.inf
[17/06/2013 - 20:31:00 | D] - H:\RECUPERADOS
[18/01/2013 - 09:36:09 | D] - H:\Seagate
[05/03/2009 - 00:51:02 | N | 22 Ko] - H:\SeagatePortable.ico
[16/01/2009 - 17:14:08 | N | 153 Ko | 83AC83E93D62980F1FBBB6580D87A197] - H:\Setup.exe
[04/02/2014 - 07:52:58 | SHD] - H:\System Volume Information
[18/01/2013 - 09:36:21 | D] - H:\UserGuides
[16/06/2012 - 15:29:32 | D] - I:\planta Sobrado
[16/06/2012 - 15:29:56 | D] - I:\anexos
[16/06/2012 - 15:29:50 | D] - I:\EMOTIONS
[12/03/2014 - 14:14:06 | N | 69 Ko] - I:\a.jpg
[12/03/2014 - 14:14:32 | N | 69 Ko] - I:\b.jpg
[12/03/2014 - 14:15:04 | N | 75 Ko] - I:\c.jpg
[24/05/2012 - 22:03:42 | N | 74 Ko] - I:\ditado1 (2).jpg
[12/03/2014 - 16:23:38 | N | 102 Ko] - I:\ale-palavrasefrases-728106.jpg
[12/03/2014 - 15:45:02 | N | 285 Ko] - I:\atividades-e29b04.jpg
[12/03/2014 - 15:42:50 | N | 78 Ko] - I:\auto ditado ale (2)-723819.JPG
[12/03/2014 - 15:46:06 | N | 3 Ko] - I:\palavras-segmentar-N2.jpg
[12/03/2014 - 15:53:34 | N | 319 Ko] - I:\palavras-e-frases.doc
[12/01/2014 - 22:47:34 | D] - I:\Music
[16/06/2012 - 15:29:56 | D] - I:\2007-08-27 001
[16/06/2012 - 15:29:56 | D] - I:\A raiz de rejeição
[16/06/2012 - 15:29:56 | D] - I:\AVALIAÇÃO 4ª
[16/06/2012 - 15:29:56 | D] - I:\Background e MSN
[16/06/2012 - 15:29:54 | D] - I:\Bichinhos DECORATIVOS
[16/06/2012 - 15:29:54 | D] - I:\Blogg
[16/06/2012 - 15:29:54 | D] - I:\Decoração da minha sala
[16/06/2012 - 15:29:52 | D] - I:\Desenho Infantil
[16/06/2012 - 15:29:52 | D] - I:\Diante do Trono
[16/06/2012 - 15:29:52 | D] - I:\Diretrizes fichamento
[16/06/2012 - 15:29:50 | D] - I:\Feira do Conhecimento
[16/06/2012 - 15:29:46 | D] - I:\Feira no Madre Antônia
[12/03/2014 - 14:21:16 | N | 224 Ko] - I:\Atividades Juntando Sílabas Alfabetização (10).jpg
[16/06/2012 - 15:29:46 | D] - I:\Figuras Facul
[16/06/2012 - 15:29:46 | D] - I:\Figuras fofas
[12/03/2014 - 15:39:24 | D] - I:\DIversos
[16/06/2012 - 15:29:44 | D] - I:\Figuras tumblr
[16/06/2012 - 15:29:44 | D] - I:\História do dinheiro
[16/06/2012 - 15:29:44 | D] - I:\Iana
[16/06/2012 - 15:29:44 | D] - I:\Imagens legais
[16/06/2012 - 15:29:44 | D] - I:\Jardim II Salgueiro
[16/06/2012 - 15:29:44 | D] - I:\Linguagem cartográfica
[16/06/2012 - 15:29:42 | D] - I:\MEIO AMBIENTE
[16/06/2012 - 15:29:42 | D] - I:\Minha princesa
[16/06/2012 - 15:29:42 | D] - I:\Modelo de Slides
[16/06/2012 - 15:29:42 | D] - I:\Mohread
[16/06/2012 - 15:29:40 | D] - I:\Nova Pasta (2)
[16/06/2012 - 15:29:40 | D] - I:\O pedagogo e a gestão educacional
[16/06/2012 - 15:29:40 | D] - I:\PAI
[16/06/2012 - 15:29:40 | D] - I:\Pessoas
[16/06/2012 - 15:29:40 | D] - I:\Reciclar
[16/06/2012 - 15:41:20 | D] - I:\julies
[16/06/2012 - 15:41:20 | D] - I:\língua portuguesa-gramática para terceiro ano
[16/06/2012 - 15:41:20 | D] - I:\little_days
[16/06/2012 - 15:41:18 | D] - I:\material dourado planificado
[16/06/2012 - 15:41:18 | D] - I:\musica aquarela e atividades
[16/06/2012 - 15:41:18 | D] - I:\musica O mundo do contrário Xuxa
[20/05/2013 - 22:27:34 | D] - I:\PC
[16/06/2012 - 15:29:32 | D] - I:\Sistema Monetário
[16/06/2012 - 15:29:32 | D] - I:\SNOOPY
[16/06/2012 - 15:29:32 | D] - I:\Sofinha
[16/06/2012 - 15:29:32 | D] - I:\Ursinho Teddy
[16/06/2012 - 15:34:28 | D] - I:\Pedagogo_UFPR_2009
[16/06/2012 - 15:34:28 | D] - I:\Poesias para crianças - corpo Humano
[16/06/2012 - 15:34:28 | D] - I:\problemas de quinto ano
[16/06/2012 - 15:34:28 | D] - I:\problemas quinto ano 2
[16/06/2012 - 15:34:28 | D] - I:\Professor_UFPR_2009
[16/06/2012 - 15:34:28 | D] - I:\profiles
[16/06/2012 - 15:29:32 | D] - I:\Wallpapers
[12/03/2014 - 14:24:52 | N | 51 Ko] - I:\Atividades Juntando Sílabas Alfabetização (44).jpg
[12/03/2014 - 14:25:56 | N | 279 Ko] - I:\Atividades Juntando Sílabas Alfabetização (49).jpg
[16/06/2012 - 15:34:26 | D] - I:\sistema monetario
[16/06/2012 - 15:34:26 | D] - I:\sistema_solar
[16/06/2012 - 15:34:26 | D] - I:\skydrive-2012-02-27
[16/06/2012 - 15:34:24 | D] - I:\skydrive-2012-02-27(1)
[16/06/2012 - 15:34:24 | D] - I:\skydrive-2012-02-27(2)
[16/06/2012 - 15:34:24 | D] - I:\Tatty Teddy
[16/06/2012 - 15:29:28 | D] - I:\WallPapers 2
[16/06/2012 - 15:34:22 | D] - I:\words_of_love
[16/06/2012 - 15:34:22 | D] - I:\worstveld_sling_ext
[16/06/2012 - 15:29:26 | D] - I:\WallPaPers 3
[12/03/2014 - 14:26:40 | N | 52 Ko] - I:\Atividades Juntando Sílabas Alfabetização (57).jpg
[12/03/2014 - 14:26:14 | N | 45 Ko] - I:\Atividades Juntando Sílabas Alfabetização (56).jpg
[12/03/2014 - 14:17:48 | N | 30 Ko] - I:\Atividades Juntando Sílabas Alfabetização (58).jpg
[12/03/2014 - 14:21:48 | N | 42 Ko] - I:\Atividades Juntando Sílabas Alfabetização (60).jpg
[12/03/2014 - 14:28:40 | N | 22 Ko] - I:\Atividades Juntando Sílabas Alfabetização (64).jpg
[12/03/2014 - 14:28:20 | N | 75 Ko] - I:\Atividades Juntando Sílabas Alfabetização (a58).jpg
[12/03/2014 - 14:18:06 | N | 58 Ko] - I:\Atividades Juntando Sílabas Alfabetização (62).jpg
[16/06/2012 - 15:29:56 | D] - I:\PEDAGOGO ESTADO
[22/11/2011 - 22:09:16 | D] - I:\HISTÓRIA MAIO
[25/02/2014 - 14:20:32 | D] - I:\CIÊNCIAS MAIO
[19/03/2012 - 13:56:32 | HD] - I:\RECYCLER
[06/03/2012 - 23:50:18 | D] - I:\MATEMÁTICA MAIO
[08/04/2012 - 20:47:30 | D] - I:\Cadernos Pedagógicos Ensino Medio
[08/04/2012 - 20:50:26 | D] - I:\Cad Ped Ctba
[16/04/2012 - 10:36:28 | D] - I:\atividades geografia 5º ano
[05/03/2012 - 10:14:02 | D] - I:\Apostila de Português - 5º Ano
[05/03/2012 - 10:14:38 | D] - I:\Acentuação
[05/03/2012 - 10:13:50 | D] - I:\Estudo da Língua
[06/03/2011 - 19:24:42 | D] - I:\5º ANO
[16/06/2012 - 19:36:12 | D] - I:\Favorites

################## | Vaccin |

H:\Autorun.inf -> Vacina criada por UsbFix (El Desaparecido)
I:\Autorun.inf -> Vacina criada por UsbFix (El Desaparecido)

################## | E.O.F | [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] |

MCShield ::Anti-Malware Tool:: [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

>>> v 3.0.4.27 / DB: 2014.3.30.1 / Windows Vista <<<


05/04/2014 20:21:01 > Unidade I: - escanemaneto iniciado (sem rotulo ~3827 MB, FAT32 unidade flash )...


> I:\RECYCLER

>>> I:\Recycler - Malware (pasta) > Ecluido. (14.04.05. 20.27 Recycler.711056)


=> Pastas Maliciosas : 1/1 apagado.

____________________________________________

::::: Duração do escaneamento: (Modo interativo)

Após o escaneamento com Usb Fix apareceu uma janela com este dizer:

AutoIt
Line 8540 (File "C:\UsbFix\UsbFix.exe")
Error: Variable must be of type "Object"

Abra o Usbfix > clique em Uninstall > reinicie o PC e depois nos diga se este erro acabou.

O UsbFix foi desinstalado mas a pasta do ARES e do PDF Editor 3.3 continuam .

Sim, nós vamos cuidar destes dois programas. Mas aquele erro que você tinha citado do AutoIt Line 8540 (File "C:\UsbFix\UsbFix.exe") acabou?

Sim. Ele só apareceu no final do escaneamento ao reiniciar pela 1ª vez .

No caminho:

Computador> Disco Local (C:)> Program Files

Há várias pastas vazias de programas que não estão mais em meu pc . Como por exemplo: Ares, Driver Toolkit (não sei para que serve esse programa) , Enigma Sofware Group / Spyhunter, MSN , Real Player.

 Baixe o arquivo fixlist.txt que está anexado nesta postagem e salve-o no mesmo lugar onde você deixou o Farbar (FRST) que é este local abaixo:
C:\Users\Ursula\Downloads

Execute o FRST. Clique no botão Fix.

Aguarde e ao final, o log Fixlog.txt será salvo no seu desktop.

Selecione, copie e cole o conteúdo deste Fixlog.txt em sua próxima resposta.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01
Ran by Ursula at 2014-04-05 22:19:03 Run:1
Running from C:\Users\Ursula\Downloads
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
start
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - No File
S0 Bhbase; System32\drivers\Bhbase.sys [X]
S3 BprotectEx; \??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 PCFApiUtil; \??\C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFApiUtil.sys [X]
2014-03-26 23:32 - 2014-03-26 23:32 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-04-05 12:47 - 2013-12-21 20:36 - 00000000 ____D () C:\Program Files\Bonjour
2014-03-26 23:32 - 2014-03-26 23:32 - 00000000 ____D () C:\Program Files\Enigma Software Group
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Task: {E7EDB72C-2111-4F43-9075-2C9F53658170} - \Baidu PC Faster Update No Task File
Ares 3.1.7.3042 (HKLM\...\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1) (Version: 3.1.7.3042 - Ares)
Windows Live Messenger (Version: 14.0.8117.0416 - Microsoft Corporation) Hidden
end
*****************

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key deleted successfully.
HKCR\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key not found.
HKCR\PROTOCOLS\Handler\livecall => Key deleted successfully.
HKCR\CLSID\{828030A1-22C1-4009-854F-8E305202313F} => Key not found.
HKCR\PROTOCOLS\Handler\msnim => Key deleted successfully.
HKCR\CLSID\{828030A1-22C1-4009-854F-8E305202313F} => Key not found.
Bhbase => Service deleted successfully.
BprotectEx => Service deleted successfully.
PCFApiUtil => Service deleted successfully.
C:\Program Files\Enigma Software Group => Moved successfully.
C:\Program Files\Bonjour => Moved successfully.
"C:\Program Files\Enigma Software Group" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7EDB72C-2111-4F43-9075-2C9F53658170} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7EDB72C-2111-4F43-9075-2C9F53658170} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu PC Faster Update => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ADC3E4F-34DA-48CD-8727-BB26D90257BD}\\SystemComponent => Value deleted successfully.

==== End of Fixlog ====

Como está o PC após este procedimento?

Aparentemente tudo normal .

E quanto aos programas que você queria remover, eles ainda aparecem?

Se estiverem aparecendo, faça o seguinte:

 Desative temporariamente seu antivírus para evitar conflitos.

*Clique com o botão direito do mouse no Zoek.exe e selecione [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

* Selecione e copie todo este texto destacado em vermelho que te passei e cole-o no espaço em branco do Zoek

*Clique [Run Script]

*Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

*Caso a reinicialização do PC seja solicitada, clique [OK]

* Poste o log do Zoek que estará em C:\zoek-results.txt em sua próxima resposta.

Sim. Os programas, ou melhor, as pastas ainda estão aparecendo.
Acho que devo ter excluído da forma errada e ficaram estas pastas.
Eu acho que não desinstalei, acho que excluí sem desinstalar ....

Então siga a dica que lhe passei na resposta anterior e depois poste o log do Zoek.

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Ursula on 05/04/2014 at 23:00:16,57.
Microsoft® Windows Vista™ Starter 6.0.6000 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Ursula\Downloads\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-04-05-032333.log 17668 bytes

==== System Restore Info ======================

==== Folders Found ======================

2013-12-13 13:32:04 2013-12-14 12:53:33 -------- d-----w- C:\Program Files\Ares
2013-12-13 13:32:05 2013-12-13 13:32:06 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares
2013-12-13 13:32:05 2013-12-13 13:32:06 -------- d-----w- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Ares
2013-12-13 13:24:31 2013-12-13 13:24:33 -------- d-----w- C:\Users\Ursula\AppData\Local\Ares
2014-03-27 02:32:51 2014-03-27 02:32:51 -------- d-----w- C:\FRST\Quarantine\C\Program Files\Enigma Software Group
2006-11-02 12:33:55 2006-11-02 12:33:55 -------- d-----w- C:\Program Files\MSN
2014-01-13 14:40:42 2014-01-13 14:45:02 -------- d-----w- C:\Users\Ursula\AppData\Roaming\Microsoft\MSN Messenger
2013-07-08 21:59:50 2013-07-08 21:59:50 -------- d-----w- C:\Users\Ursula\Favorites\MSN
2014-01-24 12:02:31 2014-01-24 12:02:31 -------- d-----w- C:\Users\Public\Documents\Baidu Security
2014-04-05 15:47:56 2014-04-05 15:47:56 -------- d-----w- C:\Users\Ursula\AppData\Roaming\ZHP\Quarantine\Baidu Security.DIR
2014-04-05 15:47:56 2014-01-24 12:03:33 -------- d-----w- C:\Users\Ursula\AppData\Roaming\ZHP\Quarantine\Baidu Security.DIR\Baidu Security
2014-04-05 15:47:57 2014-04-05 15:47:57 -------- d-----w- C:\Users\Ursula\AppData\Roaming\ZHP\Quarantine\Baidu Security.DIR\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall
2014-04-05 15:47:57 2014-04-05 15:47:57 -------- d-----w- C:\Users\Ursula\AppData\Roaming\ZHP\Quarantine\Baidu Security.DIR\Baidu Security\PC Faster\4.0.0.0\Uninstall\Baidu PC Faster Uninstall HK
2014-01-24 12:00:37 2014-01-24 12:00:39 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Editor 3.3
2014-01-24 12:00:37 2014-01-24 12:00:39 -------- d-----w- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\PDF Editor 3.3
2014-01-24 12:01:14 2014-01-24 12:01:14 -------- d-----w- C:\Users\Ursula\AppData\Roaming\CAD-KAS\PDF Editor 3
2014-01-13 14:40:42 2014-01-13 14:45:01 -------- d-----w- C:\Users\Ursula\AppData\Local\Microsoft\Messenger
2014-01-13 14:40:42 2014-01-13 14:45:02 -------- d-----w- C:\Users\Ursula\AppData\Roaming\Microsoft\MSN Messenger

==== Files Found ======================


--- C:\Program Files\Ares\data\GUI\Bloody\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 32822
Created time: 2013-12-13 13:32:04
Modified time: 2005-02-17 17:25:10
MD5: 2061A81B26B499D6CA6AE68D84C00889
SHA1: EF32971EB0DED12B7453F091E6DC6BFAD95B4CE8


--- C:\Program Files\Ares\data\GUI\Borravino\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 32822
Created time: 2013-12-13 13:32:05
Modified time: 2005-02-17 19:25:10
MD5: 2061A81B26B499D6CA6AE68D84C00889
SHA1: EF32971EB0DED12B7453F091E6DC6BFAD95B4CE8


--- C:\Program Files\Ares\data\GUI\Esmeralda\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 32822
Created time: 2013-12-13 13:32:05
Modified time: 2005-02-17 19:25:10
MD5: 2061A81B26B499D6CA6AE68D84C00889
SHA1: EF32971EB0DED12B7453F091E6DC6BFAD95B4CE8


--- C:\Program Files\Ares\data\GUI\General\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 32822
Created time: 2013-12-13 13:32:05
Modified time: 2005-02-17 23:25:10
MD5: 2061A81B26B499D6CA6AE68D84C00889
SHA1: EF32971EB0DED12B7453F091E6DC6BFAD95B4CE8


--- C:\Program Files\Ares\data\GUI\Mac\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 24630
Created time: 2013-12-13 13:32:05
Modified time: 2009-10-31 21:54:42
MD5: C192EBBE1C98258B0F258311C81FBB8B
SHA1: 510CC929A10E1E47A667A599D192C05CF4B7EE1A


--- C:\Program Files\Ares\data\GUI\OsThemes\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 32822
Created time: 2013-12-13 13:32:05
Modified time: 2005-02-17 23:25:10
MD5: 2061A81B26B499D6CA6AE68D84C00889
SHA1: EF32971EB0DED12B7453F091E6DC6BFAD95B4CE8


--- C:\Program Files\Ares\data\GUI\Skin Blue\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 32822
Created time: 2013-12-13 13:32:05
Modified time: 2005-02-17 14:25:10
MD5: 2061A81B26B499D6CA6AE68D84C00889
SHA1: EF32971EB0DED12B7453F091E6DC6BFAD95B4CE8


--- C:\Program Files\Ares\data\GUI\Skin Red\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 32822
Created time: 2013-12-13 13:32:05
Modified time: 2005-02-17 16:25:10
MD5: 2061A81B26B499D6CA6AE68D84C00889
SHA1: EF32971EB0DED12B7453F091E6DC6BFAD95B4CE8


--- C:\Program Files\Ares\data\GUI\Win7\mshareset.bmp ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 24630
Created time: 2013-12-13 13:32:05
Modified time: 2010-02-14 05:09:10
MD5: 5658C58D7FE98F728F65EB281DFBABD6
SHA1: E7DBD5C576900C82DFF57D7B8C95BBEEDCBA4FC5


--- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares\Ares.lnk ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 766
Created time: 2013-12-13 13:32:06
Modified time: 2013-12-13 13:32:06
MD5: 4FDABF840EE2B812555FDC79B2462BE2
SHA1: 976ADF4870C299040151D365F5208943C013C2EB


--- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Ares\Ares.lnk ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 766
Created time: 2013-12-13 13:32:06
Modified time: 2013-12-13 13:32:06
MD5: 4FDABF840EE2B812555FDC79B2462BE2
SHA1: 976ADF4870C299040151D365F5208943C013C2EB


--- C:\Users\Ursula\Downloads\ares-destiny-3.1.exe ---
Company: Ares Destiny
File Description: Ares Setup
File Version:
Product Name:
Copyright:
Original Filename:
File type: ----a-w-
File size: 2510316
Created time: 2013-12-21 22:43:22
Modified time: 2013-12-21 22:43:21
MD5: 49CE56C1F575C8A5360E6A917457509E
SHA1: 98EFC8E2A8D9FF9A404C131155A83EC8B6E859C6


--- C:\Users\Ursula\Downloads\Ares_Installer(1).exe ---
Company: Ares
File Description: Ares Setup
File Version: 3.1.7.3042
Product Name: Ares
Copyright:
Original Filename:
File type: ----a-w-
File size: 2873125
Created time: 2013-12-13 13:30:59
Modified time: 2013-12-13 13:31:21
MD5: 5D80FB326B9E800ECFECB95BFAA616F1
SHA1: DE8CD134DB279C1041771C1DEB47F8E8C23AA295


--- C:\Users\Ursula\Downloads\Ares_Installer.exe ---
Company: Ares
File Description: Ares Setup
File Version: 3.1.7.3042
Product Name: Ares
Copyright:
Original Filename:
File type: ----a-w-
File size: 2873125
Created time: 2013-12-13 13:23:08
Modified time: 2013-12-13 13:23:30
MD5: 5D80FB326B9E800ECFECB95BFAA616F1
SHA1: DE8CD134DB279C1041771C1DEB47F8E8C23AA295


--- C:\Windows\System32\DriverStore\FileRepository\prnlx001.inf_f13f0471\I386\OPTRARES.DLL ---
Company: Microsoft Corporation
File Description: Driver de impressora Optra
File Version: 6.0.5479.0 (vbl_wcp_d2_drivers.060616-1619)
Product Name: Sistema operacional Microsoft® Windows®
Copyright: © Microsoft Corporation. Todos os direitos reservados.
Original Filename: optrares.dll
File type: ----a-w-
File size: 452608
Created time: 2006-11-02 10:31:28
Modified time: 2006-11-02 09:41:11
MD5: 1965AB5B1EDE08123509A93D1570A84B
SHA1: F638D53CA8213EACAFEAF0F4E2FD09D4D274C673


--- C:\Windows\System32\spool\drivers\w32x86\3\pt-BR\OPTRARES.DLL.mui ---
Company: Microsoft Corporation
File Description: Driver de impressora Optra
File Version: 6.0.5479.0 (vbl_wcp_d2_drivers.060616-1619)
Product Name: Sistema operacional Microsoft® Windows®
Copyright: © Microsoft Corporation. Todos os direitos reservados.
Original Filename: optrares.dll.mui
File type: ----a-w-
File size: 4608
Created time: 2006-11-06 01:28:16
Modified time: 2006-11-06 01:28:16
MD5: 811F2931CD59B52FC5E6DF2898B38BF0
SHA1: 3C8E2A5952AD958CD4788A6CA5BD9304AD003A61


--- C:\Windows\winsxs\x86_prnlx001.inf.resources_31bf3856ad364e35_6.0.6000.16386_pt-br_10850080b847b207\OPTRARES.DLL.mui ---
Company: Microsoft Corporation
File Description: Driver de impressora Optra
File Version: 6.0.5479.0 (vbl_wcp_d2_drivers.060616-1619)
Product Name: Sistema operacional Microsoft® Windows®
Copyright: © Microsoft Corporation. Todos os direitos reservados.
Original Filename: optrares.dll.mui
File type: ----a-w-
File size: 4608
Created time: 2006-11-06 01:28:16
Modified time: 2006-11-06 01:28:16
MD5: 811F2931CD59B52FC5E6DF2898B38BF0
SHA1: 3C8E2A5952AD958CD4788A6CA5BD9304AD003A61


--- C:\Program Files\BrOffice.org 2.0\share\config\soffice.cfg\modules\scalc\toolbar\formsnavigationbar.xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 2108
Created time: 2006-10-16 18:01:20
Modified time: 2006-10-16 18:01:20
MD5: A639751B912690785DA845F28218CB56
SHA1: 42D420092752A20DB1FB6D938BA2C85F55A1A00F


--- C:\Program Files\BrOffice.org 2.0\share\config\soffice.cfg\modules\sdraw\toolbar\formsnavigationbar.xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 2108
Created time: 2006-10-16 18:01:20
Modified time: 2006-10-16 18:01:20
MD5: A639751B912690785DA845F28218CB56
SHA1: 42D420092752A20DB1FB6D938BA2C85F55A1A00F


--- C:\Program Files\BrOffice.org 2.0\share\config\soffice.cfg\modules\sglobal\toolbar\formsnavigationbar.xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 2108
Created time: 2006-10-16 18:01:20
Modified time: 2006-10-16 18:01:20
MD5: A639751B912690785DA845F28218CB56
SHA1: 42D420092752A20DB1FB6D938BA2C85F55A1A00F


--- C:\Program Files\BrOffice.org 2.0\share\config\soffice.cfg\modules\simpress\toolbar\formsnavigationbar.xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 2108
Created time: 2006-10-16 18:01:20
Modified time: 2006-10-16 18:01:20
MD5: A639751B912690785DA845F28218CB56
SHA1: 42D420092752A20DB1FB6D938BA2C85F55A1A00F


--- C:\Program Files\BrOffice.org 2.0\share\config\soffice.cfg\modules\sweb\toolbar\formsnavigationbar.xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 2108
Created time: 2006-10-16 18:01:20
Modified time: 2006-10-16 18:01:20
MD5: A639751B912690785DA845F28218CB56
SHA1: 42D420092752A20DB1FB6D938BA2C85F55A1A00F


--- C:\Program Files\BrOffice.org 2.0\share\config\soffice.cfg\modules\swriter\toolbar\formsnavigationbar.xml ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 2108
Created time: 2006-10-16 18:01:22
Modified time: 2006-10-16 18:01:22
MD5: A639751B912690785DA845F28218CB56
SHA1: 42D420092752A20DB1FB6D938BA2C85F55A1A00F


--- C:\Users\Ursula\AppData\Roaming\Skype\daniele.gomes.#\msn.db ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 77824
Created time: 2014-01-13 14:49:26
Modified time: 2014-01-22 09:22:55
MD5: 5A6A6577F33EE2866E6F48C04729976F
SHA1: DBF34011E4A1542AD4F5B9C858B153C57D901F40


--- C:\Users\Ursula\AppData\Roaming\Skype\daniele.gomes.#\msn.db-journal ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 62072
Created time: 2014-01-13 14:49:26
Modified time: 2014-01-22 09:22:55
MD5: 598B748F7571D47B4DB4993E1641F112
SHA1: CEEBA6488F09D88CABEEDE671901889861E42A73


--- C:\Users\Ursula\Favorites\MSN\MSN Entretenimento.url ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 133
Created time: 2013-07-08 21:59:50
Modified time: 2013-07-08 21:59:50
MD5: 4A2C00FC8BF813F487FFEE2DEF48EA5D
SHA1: 2E2F68AEF315032F13AFD946099C9EA10CFF9FD5


--- C:\Users\Ursula\Favorites\MSN\MSN Esportes.url ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 133
Created time: 2013-07-08 21:59:50
Modified time: 2013-07-08 21:59:50
MD5: 2EF21FB65B7F2211000A5575C964FC8D
SHA1: 481D1E56BDC127845001A6EDA45C7473E93CB52A


--- C:\Users\Ursula\Favorites\MSN\MSN Seu Dinheiro.url ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 133
Created time: 2013-07-08 21:59:50
Modified time: 2013-07-08 21:59:50
MD5: B60F902D483AE3299F76F29E3198BF89
SHA1: A219F6DBDB1F69054BE00CC34F6100DB8934174A


--- C:\Users\Ursula\Favorites\MSN\MSN.url ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 133
Created time: 2013-07-08 21:59:50
Modified time: 2013-07-08 21:59:50
MD5: ADEBDBBE0CDD0A09C6A7E0B33AEE0489
SHA1: 03B5954AFBEFFEAA98FBBA1DAC797585B231498B


--- C:\Windows\System32\comsnap.dll ---
Company: Microsoft Corporation
File Description: COM+ Explorer MMC Snapin
File Version: 2001.12.6930.16386 (vista_rtm.061101-2205)
Product Name: Microsoft® Windows® Operating System
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: COMSNAP.DLL
File type: ----a-w-
File size: 212992
Created time: 2006-11-02 08:51:08
Modified time: 2006-11-02 09:46:03
MD5: 995C3A4D0DC394D642ECBD893032475E
SHA1: 4EE4362C6C03E12742509409625BA9DE17978AC2


--- C:\Windows\System32\ipsmsnap.dll ---
Company: Microsoft Corporation
File Description: Snap-in do monitor de segurança IP
File Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product Name: Sistema Operacional Microsoft® Windows®
Copyright: © Microsoft Corporation. Todos os direitos reservados.
Original Filename: ipsmsnap.dll.mui
File type: ----a-w-
File size: 396288
Created time: 2006-11-02 08:56:46
Modified time: 2006-11-02 09:46:05
MD5: 51FF925241289D30E0A9816695288D92
SHA1: 45FC7783F1EDD4C9C6D87A1A2DC3E7194662C492


--- C:\Windows\System32\KBDSMSNO.DLL ---
Company: Microsoft Corporation
File Description: Sami Extended Norway Keyboard Layout
File Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product Name: Microsoft® Windows® Operating System
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: kbdsmsno.dll
File type: ----a-w-
File size: 7680
Created time: 2006-11-02 08:38:03
Modified time: 2006-11-02 09:39:43
MD5: CF3C3DB0AE3EA5B1576EA69FF8396A61
SHA1: 623E10003554141D00CB19B8638B6C31739E6548


--- C:\Windows\System32\msnetobj.dll ---
Company: Microsoft Corporation
File Description: DRM ActiveX Network Object
File Version: 11.0.6000.6324
Product Name: Microsoft® DRM
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: msnetobj.dll
File type: ----a-w-
File size: 179712
Created time: 2006-11-02 12:32:32
Modified time: 2006-11-02 12:32:32
MD5: CD2AA91C9ECCF8191F471A366A482447
SHA1: E856336EAA152110F6CBAB75E58091805A27B569


--- C:\Windows\System32\MSNP.ax ---
Company: Microsoft Corporation
File Description: Microsoft Network Provider for MPEG2 based networks.
File Version: 6.6.6000.16386 (vista_rtm.061101-2205)
Product Name: Microsoft® Windows® Operating System
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: msnp.ax
File type: ----a-w-
File size: 80896
Created time: 2006-11-02 12:31:14
Modified time: 2006-11-02 12:31:14
MD5: 2EDB595F07A571B9CD8200764C6CE6E9
SHA1: E18F18D698425B723D12668A2C8BF5E796D8F11F


--- C:\Windows\System32\pt-BR\IpsmSnap.dll.mui ---
Company: Microsoft Corporation
File Description: Snap-in do monitor de segurança IP
File Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product Name: Sistema Operacional Microsoft® Windows®
Copyright: © Microsoft Corporation. Todos os direitos reservados.
Original Filename: ipsmsnap.dll.mui
File type: ----a-w-
File size: 65536
Created time: 2006-11-06 01:29:00
Modified time: 2006-11-06 01:29:00
MD5: 2DF55270CB7B1EED4FF761569325F044
SHA1: 27DE1187085044FDC7C7FBB4987AEEE922969040


--- C:\Windows\winsxs\FileMaps\program_files_msn_c251348d92e4b3eb.cdf-ms ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 688
Created time: 2006-11-02 12:33:55
Modified time: 2006-11-02 12:33:27
MD5: 037B1C03E2D0638B8DF9EEBFE5D763C5
SHA1: DA17A21B669CC042B0C0E388FA46754F04407731


--- C:\Windows\winsxs\x86_microsoft-windows-com-complus-ui_31bf3856ad364e35_6.0.6000.16386_none_ae7101b94b4d808a\comsnap.dll ---
Company: Microsoft Corporation
File Description: COM+ Explorer MMC Snapin
File Version: 2001.12.6930.16386 (vista_rtm.061101-2205)
Product Name: Microsoft® Windows® Operating System
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: COMSNAP.DLL
File type: ----a-w-
File size: 212992
Created time: 2006-11-02 08:51:08
Modified time: 2006-11-02 09:46:03
MD5: 995C3A4D0DC394D642ECBD893032475E
SHA1: 4EE4362C6C03E12742509409625BA9DE17978AC2


--- C:\Windows\winsxs\x86_microsoft-windows-i..l-keyboard-0001043c_31bf3856ad364e35_6.0.6000.16386_none_9e55c8fc4b9cf530\KBDSMSNO.DLL ---
Company: Microsoft Corporation
File Description: Sami Extended Norway Keyboard Layout
File Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product Name: Microsoft® Windows® Operating System
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: kbdsmsno.dll
File type: ----a-w-
File size: 7680
Created time: 2006-11-02 08:38:03
Modified time: 2006-11-02 09:39:43
MD5: CF3C3DB0AE3EA5B1576EA69FF8396A61
SHA1: 623E10003554141D00CB19B8638B6C31739E6548


--- C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16386_none_6bf75946c7e1dd75\msnetobj.dll ---
Company: Microsoft Corporation
File Description: DRM ActiveX Network Object
File Version: 11.0.6000.6324
Product Name: Microsoft® DRM
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: msnetobj.dll
File type: ----a-w-
File size: 179712
Created time: 2006-11-02 12:32:32
Modified time: 2006-11-02 12:32:32
MD5: CD2AA91C9ECCF8191F471A366A482447
SHA1: E856336EAA152110F6CBAB75E58091805A27B569


--- C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866\msnetobj.dll ---
Company: Microsoft Corporation
File Description: DRM ActiveX Network Object
File Version: 11.0.6000.6324
Product Name: Microsoft® DRM
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: msnetobj.dll
File type: ----a-w-
File size: 179712
Created time: 2007-04-04 16:57:21
Modified time: 2007-04-04 16:57:21
MD5: CD2AA91C9ECCF8191F471A366A482447
SHA1: E856336EAA152110F6CBAB75E58091805A27B569


--- C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4\msnetobj.dll ---
Company: Microsoft Corporation
File Description: DRM ActiveX Network Object
File Version: 11.0.6000.6324
Product Name: Microsoft® DRM
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: msnetobj.dll
File type: ----a-w-
File size: 179712
Created time: 2007-04-04 16:57:20
Modified time: 2007-04-04 16:57:20
MD5: 8AB5DF388DA707F52F634CE4544E9786
SHA1: FAD4F7AC380C6AB06F32450A21CB4C32BEF4566D


--- C:\Windows\winsxs\x86_microsoft-windows-n..n-clients.resources_31bf3856ad364e35_6.0.6000.16386_pt-br_6152838fdd323fd9\IpsmSnap.dll.mui ---
Company: Microsoft Corporation
File Description: Snap-in do monitor de segurança IP
File Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product Name: Sistema Operacional Microsoft® Windows®
Copyright: © Microsoft Corporation. Todos os direitos reservados.
Original Filename: ipsmsnap.dll.mui
File type: ----a-w-
File size: 65536
Created time: 2006-11-06 01:29:00
Modified time: 2006-11-06 01:29:00
MD5: 2DF55270CB7B1EED4FF761569325F044
SHA1: 27DE1187085044FDC7C7FBB4987AEEE922969040


--- C:\Windows\winsxs\x86_microsoft-windows-n..rity-domain-clients_31bf3856ad364e35_6.0.6000.16386_none_18a3b9dcf54aac13\ipsmsnap.dll ---
Company: Microsoft Corporation
File Description: IP Security Monitor Snap-in
File Version: 6.0.6000.16386 (vista_rtm.061101-2205)
Product Name: Microsoft® Windows® Operating System
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: ipsmsnap.dll
File type: ----a-w-
File size: 396288
Created time: 2006-11-02 08:56:46
Modified time: 2006-11-02 09:46:05
MD5: 51FF925241289D30E0A9816695288D92
SHA1: 45FC7783F1EDD4C9C6D87A1A2DC3E7194662C492


--- C:\Windows\winsxs\x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6000.16386_none_d9c6762e5a2493a9\MSNP.ax ---
Company: Microsoft Corporation
File Description: Microsoft Network Provider for MPEG2 based networks.
File Version: 6.6.6000.16386 (vista_rtm.061101-2205)
Product Name: Microsoft® Windows® Operating System
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: msnp.ax
File type: ----a-w-
File size: 80896
Created time: 2006-11-02 12:31:14
Modified time: 2006-11-02 12:31:14
MD5: 2EDB595F07A571B9CD8200764C6CE6E9
SHA1: E18F18D698425B723D12668A2C8BF5E796D8F11F


--- C:\zoek_backup\C_Windows_system32_tasks_Baidu PC Faster Update.vir ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 3340
Created time: 2014-04-05 03:10:14
Modified time: 2014-01-24 12:03:01
MD5: 685A357BE7ABC017CE1C84A4A1AD4403
SHA1: 8946138451CF15B6DAE957BFAB85DBDC251C73A8


--- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Editor 3.3\PDF Editor 3.3.lnk ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 845
Created time: 2014-01-24 12:00:39
Modified time: 2014-01-24 12:00:39
MD5: 6FEFB30913E161C514A2B28A18D95865
SHA1: 29D26FC5BCDF54C0AA6F6556E218F1D525F219F0


--- C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\PDF Editor 3.3\PDF Editor 3.3.lnk ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 845
Created time: 2014-01-24 12:00:39
Modified time: 2014-01-24 12:00:39
MD5: 6FEFB30913E161C514A2B28A18D95865
SHA1: 29D26FC5BCDF54C0AA6F6556E218F1D525F219F0


--- C:\Program Files\Common Files\Windows Live\.cache\5b9e4dbe1cf1068\Messenger.msi ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 25367552
Created time: 2014-01-13 14:04:21
Modified time: 2010-04-17 03:24:12
MD5: 8EFA495B4DCB6553A46744FF2EB6F49A
SHA1: FD8D4D3480F7D98CD54266D10D59DB84CD49E59A


--- C:\Users\Ursula\Documents\Imagens\Bamboo_Skinny_messenger_banner_400x110.jpg ---
Company: ------
File Description: ------
File Version: ------
Product Name: ------
Copyright: ------
Original Filename: ------
File type: ----a-w-
File size: 35958
Created time: 2014-04-04 04:52:03
Modified time: 2009-10-28 11:30:42
MD5: CF15B344DBFF0FAB01166F5C95B40EBC
SHA1: C4A958660787338064D3A7868D8E8C998CE7FC7C


--- C:\Users\Ursula\Downloads\windows-live-messenger-2009.exe ---
Company: Microsoft Corporation
File Description: Windows Live Installer
File Version: 14.0.8089.0726
Product Name: Windows Live
Copyright: © Microsoft Corporation. All rights reserved.
Original Filename: wlsetup.exe
File type: ----a-w-
File size: 1154384
Created time: 2014-01-13 13:58:22
Modified time: 2014-01-13 13:58:03
MD5: D035E81A0A1CD40AF8CB65FE358D3E6C
SHA1: 9FF6CBA8E4DD28F04563A57D313516201D43114B


==== Registry Search Results for "Ares" ======================


[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_prnlx001.inf.resources_31bf3856ad364e35_6.0.6000.16386_pt-br_10850080b847b207]
"f!optrares.dll.mui"=hex:4f,00,50,00,54,00,52,00,41,00,52,00,45,00,53,00,2e,00,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{214A0F28-B737-4026-B847-4F9E37D79529}]
@="IVssDifferentialSoftwareSnapshotMgmt"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609E123E-2C5A-44D3-8F01-0B1D9A47D1FF}]
@="IVssSoftwareSnapshotProvider"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7F5BA925-CDB1-4d11-A71F-339EB7E709FD}]
@="IVssHardwareSnapshotProviderEx"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{949d7353-675f-4275-8969-f044c6277815}]
@="IVssDifferentialSoftwareSnapshotMgmt2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9593A157-44E9-4344-BBEB-44FBF9B06B10}]
@="IVssHardwareSnapshotProvider"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectMusic\SoftwareSynths]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectMusic\SoftwareSynths\{58C2B4D0-46E7-11D1-89AC-00A0C9054129}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"Inno Setup: App Path"="C:\\Program Files\\Ares"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"InstallLocation"="C:\\Program Files\\Ares\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"Inno Setup: Icon Group"="Ares"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"Inno Setup: Selected Components"="aresf"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"DisplayName"="Ares 3.1.7.3042"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"UninstallString"="\"C:\\Program Files\\Ares\\unins000.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"QuietUninstallString"="\"C:\\Program Files\\Ares\\unins000.exe\" /SILENT"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"Publisher"="Ares"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C9FF844C-02F5-4221-8AD4-0BD823533C6E}_is1]
"URLInfoAbout"="http://www.ares.net"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_prnlx001.inf.resources_31bf3856ad364e35_6.0.6000.16386_pt-br_10850080b847b207]
"f!optrares.dll.mui"=hex:4f,00,50,00,54,00,52,00,41,00,52,00,45,00,53,00,2e,00,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SeCEdit\Reg Values\MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/NullSessionShares]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GTB Standard Time]
"Display"="(GMT+02:00) Atenas, Bucareste, Istambul"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\DirectSound\Speaker Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\msvideo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LanmanServer\Shares]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\LanmanServer\Shares\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\DirectSound\Speaker Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaResources\msvideo]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\LanmanServer\Shares]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\LanmanServer\Shares\Security]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Speaker Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\msvideo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares\Security]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares]
"GUI.SkinDirectory"="C:\\Program Files\\Ares\\data\\GUI\\Skin Blue"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares]
"General.tempHomepage"="http://www.ares.net/web/register/aresd"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\bounds]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Columns]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Columns\Library]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Columns\Transfers]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\data]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\data]
"JI.AresNet1"="1"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Positions]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Positions\Library]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Positions\Transfers]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Radio]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Search.History]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Ares\Search.History\gen.gen]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\HP Deskjet 2050 J510 series]
Modo Rascunho Entrada em cores/renderização em preto: 300x300dpi Saída (Preto/Cor): AutomáticoModo Normal Entrada em cores/renderização em preto: 300x300dpi Saída (Preto/Cor): AutomáticoModo Comum-Melhor Entrada em cores/renderização em preto: 600x600dpi Saída (Preto/Cor): AutomáticoModo Foto-Melhor Entrada em cores/renderização em preto: 600x600dpi Saída (Preto/Cor): AutomáticoModo DPI máximo Entrada em cores/renderização em preto: 1200x1200dpi Saída: Automático (Preto), 4800x1200 dpi otimizado (Cor)psk:PickOneResolução600300600x300 dots per inchpsk:PickOneTecnologia HP Real LifeDesativadoAtivadopsk:PickOnePáginas a imprimirImprimir todas as páginasImprimir páginas ímpares apenasImprimir páginas pares apenaspsk:PickOneTipo de mídiaPapel comum, qualidade NormalPapel comum, qualidade Rascunho rápidoPapel comum, qualidade MelhorPapel especial, qualidade MelhorPapel fotográfico, qualidade Melhorpsk:PickOneHPHideQualitySettingspsk:PickOneImprimir e resolução máximaNãoSimpsk:PickOnehpSpeedMech329692620997315243048280924203708


[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files\\Ares\\unins000.exe"="Setup/Uninstall"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Ursula\\Downloads\\Ares_Installer.exe"="Ares Setup "

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Ursula\\Downloads\\Ares_Installer(1).exe"="Ares Setup "

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Ursula\\Downloads\\ares-destiny-3.1.exe"="Ares Setup "

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Program Files\\Ares\\unins000.exe"="Setup/Uninstall"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Ursula\\Downloads\\Ares_Installer.exe"="Ares Setup "

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Ursula\\Downloads\\Ares_Installer(1).exe"="Ares Setup "

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Ursula\\Downloads\\ares-destiny-3.1.exe"="Ares Setup "

==== Registry Search Results for "Enigma" ======================


[HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup]

[HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter]

[HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig]

[HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig]
"InstallLoc"="C:\\Program Files\\Enigma Software Group\\SpyHunter"

[HKEY_LOCAL_MACHINE\SOFTWARE\EnigmaSoftwareGroup\SpyHunter\SpyHunterConfig]
"uninstlnk"="http://sh.enigmasoftware.com/sh4/survey/uninstall_survey.php?affid=0&hwx=440a6abc9ab07328958465a2c25157b4&id=2&lang=PT&sid=revenuewire"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Enigma Software Group\\SpyHunter\\"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\\Program Files\\Enigma Software Group\\"="1"

==== Registry Search Results for "MSN" ======================


[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-com-complus-ui_31bf3856ad364e35_6.0.6000.16386_none_ae7101b94b4d808a]
"f!comsnap.dll"=hex:63,00,6f,00,6d,00,73,00,6e,00,61,00,70,00,2e,00,64,00,6c,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-i..l-keyboard-0001043c_31bf3856ad364e35_6.0.6000.16386_none_9e55c8fc4b9cf530]
"f!kbdsmsno.dll"=hex:4b,00,42,00,44,00,53,00,4d,00,53,00,4e,00,4f,00,2e,00,44,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16386_none_6bf75946c7e1dd75]
"f!msnetobj.dll"=hex:6d,00,73,00,6e,00,65,00,74,00,6f,00,62,00,6a,00,2e,00,64,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866]
"f!msnetobj.dll"=hex:6d,00,73,00,6e,00,65,00,74,00,6f,00,62,00,6a,00,2e,00,64,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4]
"f!msnetobj.dll"=hex:6d,00,73,00,6e,00,65,00,74,00,6f,00,62,00,6a,00,2e,00,64,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-n..n-clients.resources_31bf3856ad364e35_6.0.6000.16386_pt-br_6152838fdd323fd9]
"f!ipsmsnap.dll.mui"=hex:49,00,70,00,73,00,6d,00,53,00,6e,00,61,00,70,00,2e,00,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-n..rity-domain-clients_31bf3856ad364e35_6.0.6000.16386_none_18a3b9dcf54aac13]
"f!ipsmsnap.dll"=hex:69,00,70,00,73,00,6d,00,73,00,6e,00,61,00,70,00,2e,00,64,\

[HKEY_LOCAL_MACHINE\COMPONENTS\DerivedData\Components\x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6000.16386_none_d9c6762e5a2493a9]
"f!msnp.ax"=hex:4d,00,53,00,4e,00,50,00,2e,00,61,00,78,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08229782-89C8-4028-BB74-75BB58EF1488}\InprocServer32]
@="C:\\Windows\\system32\\ipsmsnap.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2797CF92-415A-43e6-A8F7-A5FAAB783719}\ProgID]
@="COMSNAP.CPartitionPropPages.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2797CF92-415A-43e6-A8F7-A5FAAB783719}\VersionIndependentProgID]
@="COMSNAP.CPartitionPropPages"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{410381DB-AF42-11D1-8F10-00C04FC2C17B}\ProgID]
@="COMSNAP.COMNSView.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{410381DB-AF42-11D1-8F10-00C04FC2C17B}\VersionIndependentProgID]
@="COMSNAP.COMNSView"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4A38E4EF-F55B-4A59-8F02-BDEFB0B1308A}\InprocServer32]
@="C:\\Windows\\System32\\MSNP.ax"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57C596D0-9370-40C0-BA0D-AB491B63255D}\InprocServer32]
@="C:\\Windows\\system32\\ipsmsnap.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{760C4B83-E211-11D2-BF3E-00805FBE84A6}\InprocServer32]
@="C:\\Windows\\System32\\msnetobj.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9305969B-F45F-47e5-A954-6EA879E874CC}\ProgID]
@="COMSNAP.CPartitionSetPropPages.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9305969B-F45F-47e5-A954-6EA879E874CC}\VersionIndependentProgID]
@="COMSNAP.CPartitionSetPropPages"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a00e1768-4a9b-4d97-afc6-99d329f605f2}\ProgID]
@="COMSNAP.CPartitionNotify.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a00e1768-4a9b-4d97-afc6-99d329f605f2}\VersionIndependentProgID]
@="COMSNAP.CPartitionNotify"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A17DA8D0-F67D-47A0-9EC4-19C486383206}\InprocServer32]
@="C:\\Windows\\system32\\ipsmsnap.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A9FC132B-096D-460B-B7D5-1DB0FAE0C062}\InprocServer32]
@="C:\\Windows\\System32\\msnetobj.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB790AA1-CDC1-478a-9351-B2E05CFCAD09}\ProgID]
@="COMSNAP.CPartitionContextMenu.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB790AA1-CDC1-478a-9351-B2E05CFCAD09}\VersionIndependentProgID]
@="COMSNAP.CPartitionContextMenu"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B2F3A67C-29DA-4C78-8831-091ED509A475}\InprocServer32]
@="C:\\Windows\\System32\\MSNP.ax"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}\ProgID]
@="COMSNAP.ComponentDataImpl.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}\VersionIndependentProgID]
@="COMSNAP.ComponentDataImpl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7FCB63B-5C55-11D1-8F00-00C04FC2C17B}\ProgID]
@="COMSNAP.SnapinAboutImpl.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7FCB63B-5C55-11D1-8F00-00C04FC2C17B}\VersionIndependentProgID]
@="COMSNAP.SnapinAboutImpl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEBD2F15-87EE-4f93-856F-6AD7E31787B3}\ProgID]
@="COMSNAP.CPartitionSetContextMenu.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEBD2F15-87EE-4f93-856F-6AD7E31787B3}\VersionIndependentProgID]
@="COMSNAP.CPartitionSetContextMenu"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FA3E1D55-16DF-446d-872E-BD04D4F39C93}\ProgID]
@="COMSNAP.CUserPropPages.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FA3E1D55-16DF-446d-872E-BD04D4F39C93}\VersionIndependentProgID]
@="COMSNAP.CUserPropPages"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.COMNSView]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.COMNSView\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.COMNSView\CurVer]
@="COMSNAP.COMNSView.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.COMNSView.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.COMNSView.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.ComponentDataImpl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.ComponentDataImpl\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.ComponentDataImpl\CurVer]
@="COMSNAP.ComponentDataImpl.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.ComponentDataImpl.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.ComponentDataImpl.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionContextMenu]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionContextMenu\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionContextMenu\CurVer]
@="COMSNAP.CPartitionContextMenu.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionContextMenu.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionContextMenu.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionNotify]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionNotify\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionNotify\CurVer]
@="COMSNAP.CPartitionNotify.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionNotify.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionNotify.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionPropPages]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionPropPages\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionPropPages\CurVer]
@="COMSNAP.CPartitionPropPages.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionPropPages.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionPropPages.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetContextMenu]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetContextMenu\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetContextMenu\CurVer]
@="COMSNAP.CPartitionSetContextMenu.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetContextMenu.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetContextMenu.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetPropPages]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetPropPages\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetPropPages\CurVer]
@="COMSNAP.CPartitionSetPropPages.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetPropPages.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CPartitionSetPropPages.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CUserPropPages]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CUserPropPages\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CUserPropPages\CurVer]
@="COMSNAP.CUserPropPages.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CUserPropPages.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.CUserPropPages.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.SnapinAboutImpl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.SnapinAboutImpl\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.SnapinAboutImpl\CurVer]
@="COMSNAP.SnapinAboutImpl.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.SnapinAboutImpl.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\COMSNAP.SnapinAboutImpl.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{01FE33C6-8FE4-4361-B32F-1F31AEA790E5}]
@="IMSNMessenger3"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03DFA498-BD30-467b-9E41-B69F8DD252AF}]
@="IMSNMessengerContacts"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0600B212-4ECD-43bb-A998-A92295F143C5}]
@="IMSNMsgrSessionManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0F66A667-732D-4509-A595-9E31358DA19C}]
@="IMSNMsgrObject"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1A5C6DC2-5927-4e62-89D1-3347337856F8}]
@="IMSNMsgrUsers"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{249E2D41-44DD-4d64-9B6B-D5FD76BD85B1}]
@="IMSNMessenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299D310C-E1E1-4322-8FA8-ABFA87542614}]
@="IMSNMsgrService"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{37A5B8D1-4ED7-42f4-A576-D35C55D96CDB}]
@="IMSNMsgrSession"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{45E9FAF4-7F7F-4289-A9B0-3D3EB0D603F8}]
@="IMSNMsgrUser2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6C5C6068-793F-4cdf-882C-E55964612978}]
@="IMSNMessengerPrivate"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6D7D5F67-D1D5-4f15-8E66-E7791C6D4D0E}]
@="IMSNMessengerIMWindow"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{74FE476D-BFE8-45c2-9035-D15E330A246D}]
@="IMSNMessengerWindow"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7F9EE13F-A982-4feb-B166-AE510E30F501}]
@="IMSNMessenger2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8771CF61-D9C6-471d-A6F5-7C84244EE3E3}]
@="IMSNMsgrServices"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8A5E6AA2-9DB5-46b8-A09A-EDD36BC57039}]
@="IMSNMessengerApp3"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DF97730-A698-4731-B98D-842E5C821759}]
@="IMSNIMsgrIMSession"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8E2C9115-7BCE-4d46-8CCE-654907BF190D}]
@="IMSNMessengerGroup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{929BB08C-B50C-4ecd-B68C-175F0B69A544}]
@="IMSNMessengerConversationWnd2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{93CFBB0C-1FC4-4dee-8BED-916EA2C9D584}]
@="IMSNMsgrIMSessions"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{99959DC6-097B-405f-A05E-EC1118041464}]
@="IMSNMessengerIMWindows"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9B7B6E54-9417-4cf1-9B6A-A469EFC20A56}]
@="IMSNMessengerContact"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A7A6964C-5E6D-456e-9E5E-96917261A697}]
@="IMSNMsgrUser"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AC07C00E-E228-4453-A89C-D95FAB2DB780}]
@="IMSNMessengerServices"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADE4983F-C783-4716-8B50-5431416EE8DA}]
@="IMSNMessengerApp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE8354E5-C007-48e3-96ED-BDC1FDC72456}]
@="IMSNMessengerConversationWnd"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B56F43F0-8F2A-4e5c-AA77-660426E00505}]
@="IMSNMsgrObject2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B60DA86A-06E4-42cc-B83E-E89E7D326DAC}]
@="IMSNMessenger4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BF9E04D9-1C43-453e-BD39-86D39CB63DBC}]
@="IMSNMsgrLock"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DD47EAF0-50C8-429a-86D2-B5FAAA3E6B10}]
@="IMSNMessengerApp2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DDF95979-1A97-4cee-92B1-93040E8E08C0}]
@="IMSNMessengerGroups"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E67C6BC4-FEA9-480d-85FA-173F1A18D399}]
@="IMSNMessengerService"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F2C2787D-95AB-40D4-942D-298F5F757874}]
@="IVssRemsnapCoordinatorInternal"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control]
@="MSN Messenger Hotmail2 Control Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control\CurVer]
@="MSNMessenger.Hotmail2Control.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1]
@="MSNMessenger.Hotmail2Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1\CurVer]
@="MSNMessenger.Hotmail2Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl]
@="MSN Messenger Hotmail Control Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl\CurVer]
@="MSNMessenger.HotmailControl.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1]
@="MSNMessenger.HotmailControl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1\CurVer]
@="MSNMessenger.HotmailControl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp\CurVer]
@="MSNMessenger.MessengerApp.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp.1\CurVer]
@="MSNMessenger.MessengerApp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller\CurVer]
@="MSNMessenger.MessengerContentInstaller.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller.1\CurVer]
@="MSNMessenger.MessengerContentInstaller"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject\CurVer]
@="MSNMessenger.MsgrObject.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject.1\CurVer]
@="MSNMessenger.MsgrObject"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager]
@="MSN Messenger Session Manager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager\CurVer]
@="MSNMessenger.MsgrSessionManager.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1]
@="MSNMessenger.MsgrSessionManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1\CurVer]
@="MSNMessenger.MsgrSessionManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch]
@="MSN Messenger P4 Quick Launch Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch\CurVer]
@="MSNMessenger.P4QuickLaunch.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1]
@="MSNMessenger.P4QuickLaunch"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1\CurVer]
@="MSNMessenger.P4QuickLaunch"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager\CurVer]
@="MSNMessenger.ToastManager.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager.1\CurVer]
@="MSNMessenger.ToastManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation\CurVer]
@="MSNMessenger.UIAutomation.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation.1\CurVer]
@="MSNMessenger.UIAutomation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv\CurVer]
@="MSNMessengerPrivate.MessengerPriv.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv.1\CurVer]
@="MSNMessengerPrivate.MessengerPriv"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1FA4B99F-3155-4A26-837B-9734C1297A1B}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{36C8B6E8-7013-462A-85B7-298F91FBC783}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{410381CD-AF42-11D1-8F10-00C04FC2C17B}\1.0]
@="ComSnap 1.0 Type Library"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{53CED51D-432B-45B2-A3E0-0CE2C24235D4}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6F1D1C70-4B8A-4273-808E-5FB78E797702}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\10"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8AA720BF-7468-4DA1-97DA-66D2E41B3DDA}\1.0]
@="msnetobj 1.0 Type Library"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8AA720BF-7468-4DA1-97DA-66D2E41B3DDA}\1.0\0\win32]
@="C:\\Windows\\System32\\msnetobj.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C1637F37-3FC8-4B37-B3B2-6CC5E202390D}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E02AD29E-80F5-46C6-B416-9B3EBDDF057E}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
@="MSN Site Access"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
"ComponentID"="MSN_Auth"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Domains\hotmail.com]
"MSN.COM"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Domains\hotmail.com]
"HTTP Mail Server"="http://services.msn.com/svcs/hotmail/httpmail.asp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
"DllName"="msntb.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
"DllName"="msntb.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D133B285-8A43-4EC7-93BE-9B909C2370F5}]
"AppName"="msnmsgr.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BEHAVIORS]
"msn6.exe"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]
"msn6.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]
"msn.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Security\MSN]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\Clients\MSN Messenger]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\{57C596D0-9370-40C0-BA0D-AB491B63255D}]
"NameStringIndirect"="@C:\\Windows\\system32\\ipsmsnap.dll,-1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MMC\SnapIns\{A17DA8D0-F67D-47A0-9EC4-19C486383206}]
"NameStringIndirect"="@C:\\Windows\\system32\\ipsmsnap.dll,-31"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSN Apps]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSN Apps\MSN Toolbar Suite]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders]
"ROOT\\MSNFS:__Win32Provider.Name=\"MSNFS_PROVIDER\""="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]
"SM_ConfigureProgramsName"="Set Program Access and Defaults"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A75413C78CE9FF4C832EFB7AEFFB455]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\MessengerService\\Clients\\MSN Messenger\\MessengerGuid"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6378366C4007D1E45ACB03110040FE5C]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5C178ED4281822448D3A4C8C74FE93B]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\MSNMSGR.EXE\\"

"gm_r_Files_6"="6uujbj_q.9w6xdH_6vXQwDf0s.2%$=i!ISlSzM$-001H&c(xx8NJFO((R(U,`uu+Wcx%S=3}AL,HhlwlQ+W%mrzbZ8TMFzbh?Z+gS1_a,%iHY9c@QMOgzCD=^AoE2g+NJ?Z0[6rppu3sVV[Me}unR=pBh_@*=BkB5]OzT6pi7=b5YbK.rPECKA}z^nCxW@vRfHXCmJcF!pW?z4KD+?fK9B-y3BfMG,2'v[&TL@L,ghyQuW@XFAHpJy(,%?ze5adC(dF97C4Si'dSR?a`ZPg@'1fF-!v*{fZ5y8ApyzR}'}}.O0A,67e[LAefn6`9=c]WQ=6g)X}+V?=.cP*PVywYh!gmFCZ+g?3m_M@(&k}yGak7KiDfa=_oq~%CZqq)cyMkGT8g+9!Ms~&UOR7Bq_ek2(]9w?hTCcB{HY$H*U-m+fi=y?s,XPhyK{2Q}cmAt5)NN?U(^X+*ITND@lNoihP9v9XcfC$!GkABcOU'M9O@r8V8jc9$NH_8Iz2O=t41t=7oM`sXefE2a7mLx00JF9.'GJ8Du$clTB'8KxT7j9X)fwxS*Nw[JUt%xX7GK@N([~'(7oO[hdnb,O.00An7S*]@BsxG0LkdEwod[A,x^AQd3Az(-}y]zb4kY=FwmMKSw4OaPo?C@_n)aAQ%KgeSg}Q`HKICG5N{E?IFnce{,lCj,R*oKD@D7?aBUBFhr5_[ym_={UDWM?=mXBi.f@zE-uUzEb+R(@D9MAEh2Q8)QnL-sy_!O=s[!JwL0rx]PmN`.rmnJ=mgm51E_8Hbw}h,uNC)v8G$rpKE-kR9_E)(HRo+D?lt,YmcZy1!3zvj4a-x&=&f)uh.pY[^rvYF3=UCWAJGlMzkFLfo}9gUetw.h9P4ICt]TnUYxGWJ?pbQb9rlmX(6'nR_pvXT%g!i{96^fyoWVy^%A4Dh7I=_d=iN])MP2bC8(b_rR=E{,@KGfs79YpSr@VV*ehS%-A667+BJ,]Hw%B'+XSE'LA*N~7kxz1-$*J7.)+VOV?)cXk9QY?u]bK3^DBS^q=EjZGE,r?.6S2BNnY)2t9e4Gb%clgUUb.l}yYJ*o9)l!.HqJ3$FZT[[HM}5RAhfdB`}zi@saXXu9F$Tj=^FBhGjT*URVu^'_D2Ta9xGYjIg}MXjqtHG[wi90@.`o!*[Y(T,fk-Q*xkGP=z$l1]%8i*pRpQN*8zq.AvZhr&6Os]Os).'5u+N8@{P`cs,DuvRcxETYw.YEA~LVA&XwyFP=0%ujprz]8q6~Z%J5=QR1FWy?uJ{q=H^1HlqRWD7_0{u''Q~MAE4{6N.oK?FCuUuV^?Kp=!4M47(41FQD($*KE,x]?o![0zhaakMbnW%E_S{f97CFB-G(F%S1]GwxBGz4@1PS`S%0NA9OVEP7'bOs@G5~s')4U2h@sP*Nj6W'?bh6Jpl+GGvM-r7M^{vf9&_UfH6.v}.S%=d=N`(u?FA2Nw.UD}xT.OsIo^8VA1U=Ox%DpTX6i@0TWo.IA1^o.y~7~U4U{=Ygqgnh=M,[Z*P[Bszt$MX8gLXU?rN(.J15vXmjrR$Sp(LM@8Ih_r@lpG5J2&YIzclPAjf{T4C`Wdo(g.^%NR`.A?XBulX8cgAb~e8BFVzA=Ke0Fzdzk'Gn{+wAwQt9A]nLD(t+_S*-W}`5KgE7Az-[.(9q{b7F1^(K=][H=TBY_?@bym(?LhFt^9T+?Zfu&(~qjqQBPSZusPx?9opWL?ldakOTN~DQk6QW=z=ya[0}QF.nDinh7^gG9MY`DE!^~F_1YCnTdP,7?lC*1dEx07o9Uu]j$xGw='jLai5Rx3b0d8O'jYWO@yx-L.d8%pwG^hjROc8e8^DOl%DX1Fqs)P,c7L8@=w0[AVSeZUM`kiTHg2DG=,H20'Ti1ls6!-yaYPIe8t%LQM7u,Dorq&CSxcscAtC?J2N6uDyd'YjM'_AD?+O*m,P(YWgu}pdwCrQ49zIkT8d`o?erl?2Wa}kg9AHt+d_xAlJ$6U~aoT5+=oj.q@KFGn%S^zt]N.,,=wA@*yCC1AY2]g3pG,&o8i8D=,V$bjF?$D$v}6`u8z4(Yb8I2`lj?AEdW,^N93sO!3-Z]Wtw7ID@sWJ@?+JO0ZZ7]T$WIkH[ND{h=kwQaZ?D'VC0[%+T,qn^?LSTX]FVdYB&!Z(*$QAu@ZGdzmmmZOC(5,&zu!*BApUh~nRTo`Cphh}Z``f]AA$fQSl(j=`x-a&.fJxr?0DGp2$3v5mN=`,@to$-@m~bIlb}uK?kklP5}2*B9H*Nn5hE?g8?XjZhv(*j8Ku!o(xmj4R@~tOjEQ*w92W,*rL)Pw*+J^IfSd9{@xxfJ!Wk2^pIwDtSls+I@eu_alvkN8fq~i%t*K$i8l!{Jab`{GW'lCFz+XIu@N=wlY5'km!^Q8K90Ac09IVD66(51MK`(eay1w^P=}}J3Q41l$8fq'hjG*'4??jiGzM@Z2.x%?J[d{*q92Wy&yd!kiJ.Y7[=Ah.GA45f,1EF[ddeuenQIy%m=HG-%pk.Zt$?S[xaRRMN9q6nOq!?F^O'}z~-KiC3?lpIQbbc(4n^3{enWx-5@Aj.1QSO84RpNAkEY-wX=+fWl]]z9a*g}W&L[Map=cPCO]zkco4g]F{o+'389FI`]4VTZ'hh$Moj$I-.@N*l{yGh0k9r@NZHPgNM@V5}aTtfB9L8{.HiAN5f8+kW=YPZlpD]lgAH,{)5?ZBtrMlAc*p44!vs87pp9@~WHe~L,?n*@QJ7K'+S?=rkyr}Tw1HKUnkZi(y}@Ppltk(ZP*m]`6U,=tFx=s,5$Fl9bf0@)l&5v_1L9Syo}Z(sAq%Rz^A6{74s?_}et!%9$$sAq.b%aNC@@!T!`E8n]q)Vr8{lh@[&9)6D8duQajkX-9G7r4g[=9wCag12acCwaV!jCk079X}5J+w*nortofD,xGa[=ck*R]_T+I1%1$4v1CUg=@5Szb~EVjI(*&KojJTRA[%~UTN0UdiGH8.,Gofs8.'g9H4R_y7_E&^aR]m0?hvBnpK5yX0Na{xRK~4+A8@AkBjVHDJMb22UX!n_8&4s_SqfYPp$gsJgDnS`AG{Jt%KX@IxDYfGD?%~!?FVF]lWHJMI2GwU%`(W.=rIjT=4vQ)Btp$bmVQ`'9n}``kmu7)35BbN8`$ok?87YquZWd*uZ'1x,f',^?4!L!6v25*WUT=[bYm~M=qjM}M}PM}Q+_%%US]f=9Da4r$9*1`J=9kf4N5e~?d*ydCWuGKvOdzsr`eTc8Asdpf,mD!)ErO1uTA-u9m)q{3&JNf7$v@n9G%C893aqhuzJ5`hShg(Y5sik?3GOKKWy[vg^t&Epf&3f?B?ecalk8aAmhLvQU,&I9I-P2y-*['.Z-vx@G3(G=-ZO^i)2$HwhhIR,*VFk=ql50,bfP=7s(OuIeOk=9d-cJ$F4d()T`dYmBXic?jxthE+]tf]I1kG02By=A*QP*kXOmUw1QdoPAguu@C?La!)HG}Sq_YCPy1xc=A0mFx9yNZ*N]D9T?vnw8L(OJ.x6)(4O$i5U_'oy@i)AS1UpEbQr.Le]nHZ!?7HP6_iZkeY-zZbuXyMD?0.BC=IO8Xn)z_%2Q]!q@CFF3z=-G5'aS().&5=,93NQyFKiz5b{-%)IQy81?E8kK8@qD!MWVl376wsQ@AQbJax}@ymF7nX&4=Yi@=%.{ea(h,6vI&1dQZ^o?U3ux+9HCQtoRxMqO8t%9,e7g`79Zh)-DSP(*L6v=NjX,5!9rRy8%`jVexq=A1B7wWOnw?dj4e,_KsLF9sDBwz&$fUsKy{W2p`0p=$x1GdP}hSc9.rc'b.6M=VkeU.Uf8UH)]f@CFlKH@15w4diSN5yWOzw4[uK792-V(bu40yG+J1iN4^jRAy]3]2+x,m@5e^2a)5Bf?r{TJd&V*F3eKJvWFWZX@+U~Gf-t`?_h&z_Lcz3u9wvJ]j09I}n6Fm98allt8'+S7*'&O$t`K@Y%-B_?@MSU--N.Ul?n}!&c{Xe(=[(28,Q&kR=F?=(5pbu-9J8m'jk-z2'ZzbPAYXV_?=Bz*TlVhRi(uJ)q4!QK@G.HVH9Twb)w3&0ydYd69QS,j&TV-6AbJ}MKURa^A]oS[DB4T]L9Sxg$'*5OAdq!4ZY?6+6%^w-a+guaAUen]BOt6PCv^d$8HYyJABK8$^RIFL)qaIS1s@Bg8cgli$9iBbgeaGq-aeZ29TzL+`BH!mobs&d1hPCq?G5.!3`VEbCs@m.0uG7f9EmTQHYLig?z(J)(S}W*=zdC)H%iD{gu{YL*eaZY=EBw7-rp4ew&gr]N,R]J@8,!6!y?t)zQ-C~0nL}s=8Kpj8HOY9x[-5)G)hu~@z%,Da^+A$Fk^VQ&6Ps~9JM%aOs4tErC4$*s4gBA?^XwzUkMU7hzZlev&+*N?L&7!QhT0Wp&N7pKTgv9Anon2g]W_yQb[ODV)s_)=+]!CQC24Nlm?+Oz0q1}?vc_AtI.B0ihc}3d=k{$=aF4%H^$fffNlrdG99*T=.]Oq]TEn2ndC3PKg}.y?gmBHGLk^.)dSh9lEh'e8r1A(aJiToTRn&F[I{1,?.Du~h4*?e^V4&bet6k?@&4YoWYC*=C}+?qiY?sv=SMj%dL-^wR-lSpqxqdy=EBvmCuPRhY}ggG$q6{B@k{`$z~m2^e}D41pvco2=GBAuO(^oS0np7zNN=5eAE1na!.h9KOFMRYB^Q*m9d53b$,=&o%0h(ZFQ8}w8['X(*)HQFyUD3rgEdyU9EMUV@OthZbwPU}EYl4_=6LFJbat[q[SE3+Sy?hp@FjdF4VoMej^`_ZHP]$1?0AE,GZlC93aGT~d0$x995`&b*qg$_mp7bb+o!iv@Ue)1fMZ6USS5vZPG'9v?1J^ts).mxX(dgcuR-0&Anl-),H8(?fZGpmvqo!{8=~FZdwkzpl}ya$AeD4U?W!Og[_[Q&`AKtQ6=^cu97L?VVPyp0o$[GkmIjKB=D%k~GwO(*bj.a*8]Ai!?v.}Toq1{FnX=?eeLVIi9iu~(Y6~UWcU*@3s3$b%9sJ&ZK^X%l8cS5*V7pGd?%Tjq8g-ZqvDx*e7C%p?98N(OqM_n?5BmwB%yjK^@?I0?J{jBWfxzetc+7$j=4{ODPDl.^hf8enGFAjT?O`cZ1kP-D?_pS4j?5O2@L0-QiwSKH's*+TzPD,P9ukyh3ETgkFSUg`i3Hi7@%3'@GTF_S&IP_ILGW0!?zQL)EHAIZr]+*Od85Dw8SbHr5JzhSEx`AXpUFd!@5$}n]23{FLskSQ)!Muo9oY-y?Qm?JXuYTdMOO7(?~C.~,z%a3eqU-d)()(X9ttJVAngeh]]i2HY&j&,?{g2G-CHt&26tEhMQ8scAc6iKI8ZCI],+ZA+Bgg19*Ju5CftY`O.^z9lL(t-@UHVDq[}I}%'yqO1G=hp@AcGP_'8t`zp1uimy38%?~IZ$l~%udC26jRq1b%_8uKt)Zb1TRC7RF63uVyQA^wrNX3X!SMml!L`PKwCABy=&f%U]h-Qn&t@[AJOAP-qEi9rn{CflqNn!*7-A``onM@-0~44{8dJwM!H9R?AtnrYjD3'aX-6IfG}@s)rDUr5wyK$2deYT?}A@g{'d5==eHu$,0`H%9oE@MB~&GB%.&+we2Lqrb~R?fw0EB[p+TWPVtpf2so69O_ca$w_fT5Cl$GaKuRx?kWdx6S*64a=mq8wwLi`@kU&ffYV+Cutyr6%3]A!ACe&kw~a_TV4MNvYBY.~@gXC}ZB-]svk%ZLO8-sr?1D)el)r`^K@*ma0YXYh?dTD1hpwTNA-USg)AuHcA(kVeVOv@McCDd6av&mC?((83Z&r51tnO0LaahC?AeV0MN}&(ZS(dJLrkNoR=o=v^awVv}2hhNsn&3j79S{8'fUBg3)6y),T=mX3?G.Y!B3sHnA[1J_=_}y&=X))7J2%RbI*Kk^*fBZLA`X'2nImR`%(BGJqWA^2Ae[(V'2RAB+x9R7tp@ZN?[gx46*WJT1LJ3+xotxQ?6_z@_2'Pj1DjiDgpC}~8iKP=u&Kj-Q7OwQzVy=P==6]3maqB7wZh`e$qzN^=?_JG=ezF'Aa[){5d-i89q(wV'Pu'2.aK4Ib5MSn8V),9!hcT3nJ8n-c~Ms1AAJ46-S9`(9iJHqlmhvq8NuxulswWxW%g,0H'0zm@e,Yb*rF~SHOPaNG+]ca=MABM4X}J^NVAN,dxw[==,r,y0p_LihO?xB5pcwf?gzRIJcMBsfgovtM?vsD?JMSVw4$1k!Uwd!lW'$}9+v.^.(obe!x_Alve[nT=?v'^wkyy?1qZdwwcSf^?AnjAEF3QOm*ER_o.UM&Am?*%Xvgx7pONlwV1r){8^^CUHJ78+3=eX]PuJ+U?4E'7br[$Tw+?x'E(3&!=ow{Z1oVY2Pfa6w^?}2%@){F_@y)8(f-Wk!Ms6aW?IC^[hnvsJr3RLluYAq(@SZ3mhrivR)UDnXR2*-b=fTLGcZaE.MO[JB0YpZ@?R_QMUF5m-v%Gj*5Hcf~=JxZR_@MSkMPIedK@d-$A!=&N%&s5wwYH1~*)LsK9VB*h]YA%tHS1{3t2H-YA4UXgZ^QmY5FS!SzrVd-=*z(a^Y[Q9Au!=k8T(17@h1S0yCQf[p^cuBXvNY==eSl+*kKcfUL2br*X[(L?'a))Xo{kdChR=?%kdr=?Pl=o@aQmLAJwG.&y,C-9LYmbD@{`)pFn-11i%cT?_OADzD]z*G{0}.JqeO7@=SAwupReK9jhRT01uiu96D+('YYA-smhLTRpv&]A+-fdXQh8~vk}HZg^`=5=c?O1].@3-FpoP1%*kEJ95x1ed,dK)n'4nz6}S$Y?7%RBr.]uS9G-viabpg(=*&9IT4a@Og_3F=40[DI9WwAw5F^k*foAKJfN7kx==5mr7RdP-bTj9=rtpBi9p}]L!z(-wl}bN!5ewC3?Z[DXLpTS0+wUD*xD.X?9=GRdshOz18oB84hm2,`?E'73)-U,Z-Q7*F]keE'Ac]$DcONcojdyX&wqnY~89zS8GvHBX%HeYj?a!Z5@Y'@(,U~Hvhg0D8%9d?,9AS5y0Bi*djjkr.q^@kN@rjs`N&uutBf!d3{8`Rk=qhusO.GQ&D=J_c)M[^s9?oU43.JM]O'MiWY5La8@j]_)W]W5Rt$AD}DDU2_8DEe+z=C6PUs^(]ww4?i8(PsK_%zT.pl]hvi(c%_9[EF`&9Lt$Z!-oB^817p=k?~YM2E9crd${.*X.V79!}AFIxi2%s,]45'!$++9Q$ksgRxKZKHE_vi8)^F@U`&@=&+l0jR~uOA?%_Q==v{sfJwVrOvwdOj(xrh@NRlu)0KW%iffpu_,e&K@7rM4)9r[yTJtf1J,XD79kqqqCZ,B9vVFqy$Mg[q=1pO+1(Qhnn4soI=,(ANAD-,2XCY+~yV&S6B)hZW=t+It]Tjnip7W+`W0i%Y8(MYI8bI$aM95pn`tmxb=jv1Jlh^1zp[`gawS%JA?$&^6[3^@WvD,*C@&$AU?4qNj-9IOZKn[{2ky^}d90JrAB502v3k9ARCo5}K=]==]42jX}&9&tCbjN{z=$V]ibAb*j.^=y5DH[Xr=e7~n.dOiAMyJ&IE1[8S9$Pi_fIy)5]b`5uC-0-{8~{8HEcquY3_-`1wn9=Z8O~EQ&'oq5'2bM{nbuBL?MQ*AvH4a{Ws1NeV!gtH?YEYGsLI7Apzva,&,vr,??hDXt.v.v2"

"ProductFeature"="[[%&Gjq-sCv6SxkTATt?6fv(C_AB%DsQZr&uR46Gzz8)Xf-LpAB2DpV^6s%0qBn=LT54zEZrlJ-p2CP_+u?8wwTjPFjz*W6x~7m'Okl?Nadg}AduF!rNk*5$rHZjs$QGiB9[sK^6!4]WR3Z(GiZFMFKE%kNgdEV=Prh,WkVtrCvk74ij*5P7n=qiFr9MbB.m.8U-y42KN39vP7}'eD)+p3f8KKU5SELdu}?rdEr+8%GNo(yW6boE,J4E$FKDC-V.lT^FRDdZR{g@JBtBEPXVb5pcs0z0wG(i[FM0EMaQCcRRx'+{9}d3XBe^{nFYpcjUK1rM`i[VtC2$iYxjbcv?(t16CW]ElABKSCo5cBkCUSvMp_+gAEqrkzJ=X9MHICed4U[dhFZZwu,7$R%t,(Q=4{@@uCQTKG(0{i(EJ]J!'B5y%Fwo}8RGgh]@]at1(8l(HB5]lp.G*8`kuyy)%g1n$DBM]7m%4MJnbpfXO]d~0C=}fh)4'f.lE95*H%b,bDc*S~PnRVukM,d[+oL)lBkqx5fS!nNxG8cjSM7Q^C+v+jc3?qo`][=pLF@LlEYg[.Awb{G5y3G0PH5ztEPLh~n1u(h'pI[EU5r`$BpyQJ03=I4afll?AzJ[eFT33de7A@Ju*1-C+(R`dEy@(TZTh}SPx?.ax8neJBq3UuziG7g@EZ.7wZh!FF]olqxu}vz,='`AH]qCEDE$EgvwhNL8d&wn`Bn?aBK*CZOWlb-R7=PGf[q0!EPub2Ji`xCU(aP-xDv(LF@Jm@!5Rs1LBW{2'0HdtAriAj3Pd1dqMj`Ec_a2CF*HrkCXO`w+jNb~CE4XoFBstx4+9'0LZ6t3TYTX_B6^8_oAOF%l]O)]GWVbwA@)o',eh`O6L'GUX(*s~A}Kw*'o.a^ZI2XlS2An*B9H@F'fY(8!TQ}r*26k%B%%ZzI8tY0Ja[,Ri?}0$Ehej@IYX7&UMAk`MN9eNCcjMjb^We&E1L~2tzHSNB(T=FDvjzM^=?.n'$G]sD)HVgN=4RpwX),p9ywb,BQA3TmdpC.]baF!'&vRnCQ%VA90UeRzv,-S4_y@pELZF4o}=U&@gG_KTaEf-E]se%u*!_iG-+C.rSvbPF!duPKA=-ZsVsZtn-Z,fC3YEH7pe6RXYN&I.W(.=E6ebb4OhycBgm$JvQ2{~A&y?sT'o[7cpCFHnQuURDME5WhYePJx=RR7D?A4NBIrNEw.bL]nKebGrJ.VkFeR3IZmJbA_aZ.0!I~39F82n3^=9=$C$W%+S=-e*BZ.FnAO,Q=cs06!`XdHnCp,=5*58tI7H*)GJ.oH]DbZ-hQZs%+igz`Ld@wAYF(g'-d&p3P1O{)Rkc){9C&huMMIZQEp7TBXc@O^mFTvg3=CbU8{,MB@h@`'qDyeljfN%[mJr0UXP}CjUCY{5]AcUOqvx2*]VK$vbEFVHlX4fbzJ=.tt5gisuCPK['IAi4^LGqv]s`d*hFC%8@fQkM)_yQ.aeXWFjCIuDig,?9y*(G[A0(lvXBBelrc+4d'tw~%2-8AECBY`]rR4YKu7OK(o%3jo)CCN{BrT,OJgBTpMcZDq$C.s$Kbyf^f`l,Pw*qg1_EsqlQrpXc5q2IBlhC6[PB^(_?TMb3.n[hb^f}QOoD=Nv-xmq*bm5b5.g,OwiB,v0fwUCGLN1v*_ofvSuE^13d)ACxO4z%.=JN_l*Eyt?-mrI0PZEX2nly*$hA_oVzIcL'&EzSz'&dftvCBcs?9SQ.)!.}b&oYD6fB@c2l`yM)Op~uOhfo2X$FrqsVGG7bqBOGqlAsvJhEYPeAFSPEWgYcLtm48d2BbDwdHvj+A[vJC8=!%LiBe+twV^5WWnLo%Zp2&zfEv^]p35WsDTpSHk6T65EC*VhP_z}Rdy4=Dax,s?3FWBN3(HJ7%^k28sQ{!q!B]j1&vo(p[%(Z%qgu5v,F0[@v&KC2,'zafTd$j_&DpvaFe2Ri'w,rX]7,i4pDrRIa7DEWQ^)&9r^OqKaE.es3%8eI_]jOwM$$vn=BQOYVR=oagTY~g'lj]]eA4Z!i^07XUa$Y*LiBbb~CoUMp+6mqO1dbN31f[}UB5BG2RuBG%]0,AK0pF1tD=5=SUk'0Xn8S)uHAhicBM'JC^aOS@LzATdd7,D!E&zYbwG`ksUU.PTqoMK)FtRN+x'5Oz+,!MDcL9_PC8DFb$e7bi%WUEvkY*'iDE76y,gv.AwITom?V^e.Ea%GMPK,Vm!TMEc@*E24DI2{3CQx{]9NS3f68g{=F60%G9tJS)`QWo}v)N_JE`hAg.&)RANWc[@uu_CiDv^D}5Q6{?YK(Xi7(I3DEWvZ?9@YZfyfwmv8uZ)`B8nfEKsZ%reXR(%I)JEaB~F*JKYa.}!rQU!0ZTaNDpl*ez{pM)^R9~eX9.n4Bfdg)+P]Lru4ss=CZhR?EQ9eNE!wvA94?a+sB_R(EoCtG1Q1O=aT1n$=7morENH='0IXE5BVU8t[7$a)Fe1oxG7Y8Mb]KU[xYQMIE@KDM%N9$G)8dMcVZ88)C+WyTQk&'`(WLgf?(=EVBsqSsGn97dHHutd^NL*PBaWr=[6sAe&cY&jU$NC!B~qvDoTy3V)R{ud^)mH2C2C4)+K'37mp.ALxQ4lpCOYd_4fRsZ*2IUyZjyqeA@N=++c})_85dmP?C0tIC*,gIlal0YU1p!z6@v4wD]S(NO6rJ{Y=,1wNl3D%EzD@kCyk(GLqtKou5fs,FOgCTR]Rpgh_hJ4=pu2.C$-_u!IbPR)^$Iu&ky!-COIBojpf[0x3eu4aNCebBk?Vyrvci8&Ui$s.sErAEZ$U@8KfAd6ElQc,cVxlFR7^wi+E`Ihe[@W+==qCB`uk{MyZTpdYgEtn6K$,D`{j~g[q)^d92pZmHeB.C0YLTZ*m'JxVJv'_[E)$FO%z)Uz@~SD*yFcJei!ZC8=!(aBI(Kx5[a.v4o)PD6F]=$C`rff``7BQ*0SjF9S-6(5tI7j!6B7TZh.ME%i^$hgHC$K~e!}@B7eWD`{SLsolv[RqwpT4La7mCwqYa5]`)iYyb24v1-X5BB+t_)(aTmp.Gni^dhKQBgzC0e_E[^LU&`7d'dZ4EMduwk)v6'EHij`y1'R}A.Zz%7h!1V5`D$oib7[EF%iOK[]UP57c!Ypm2S,WF6ku_P91fl(oWodJ7DR8BtoYD3hp4g'`?M=OnWVZC5NZYbGfO(RpDTD]n$0jCucV`mRK^1ll{Y5A]GXVE%~]G9tt,4Lqx8(T$lueE){*2S'3'6g(ZVXUx8fGDO(uQ-hXDywTj[Z3UD*3C+4@QtI^^eyOtWsMV'h'DW0=*4k+3T`{%gT1}DdiFJh,1T8$FnFfQyU)O]0&?OB,OFKU1H8djw,Hj0NU94}cxm_519QU(I3(0_0TC^l%hrx_C??e0u,3nR2lAF2HI=utQ3iWEoYtC'kkCZR49rhIx?iJs[VmEP7L@z&Ag,)MLs9q!cy?S*]29={_v?h0piX}8vX1_3npBy^=k2P{z_R!M%3V=tc8E-uGt!5d!4%NLTdz6X.+F5Th1B`&6?nmUOQ1BFS[?q^Y6c*JlRIH=c)+Ee(%=6j='N%pux*g]$qj,!7YDwr2i8yq*Y&a0qxS{w@{B'Vi~,AiR=KFcm6bZ335BjCkdpa_2Ed=$QlaPI109@TfcPMr1jk~*roL!Wx==-.PWhAXO_)H*6Wp%G+AD$sO5h.h8k5EyHn]-odUEK{K~SE!jFu8_e^s,bTIDkBgUvfttRmFAx$r8C!K=kCV.j}rh+W(acs=?pqa8KKPKCpLxVTx3^gD^fNrC[H.Xd={7Lz,CB9Tz~!uDCjY^&.G%aEL=D-C={CmF={5wl6EKW[.P3RX!k?x=3Z=Zar^{lIvKt9o].gl?5jPcyk8[dqW$U)D[T2_D]Wyvx`H9El'r&FeHQmcBLD7NV1by^3cL18GiahhAIPx1.0}Ol^m64E`s5t]8-G9-[5fdbsDu-pfa]E3AGlR7=^RVdBsmUKBU_tTEGsI[%-rIPyJ.'@M(GxoCjRZ2N{dTdpLM5+9N1@SBI+`H!?ax}@9vC)HyQy3A^2pydiq]}gK~`HnqjpU@lxCymz1I1bFJI,*gmu!EguZR7Y3yclpoAiXoVdhDTL0=ZeOF)JxFXv8zA2?Er}ZsKq^prhrV@T14rM1=syv0+dmT3@,]-DE=*1WALDI&zl0[!zzK9a76Aq8BmR9WKY)`tQtTe`&9tn@DV$HXx!(R4jjja9_sbSYF4p7q1E()uhL&j30V*Ri9R@lSth,n]IhASZfwv~Z8{t)IW^zO}5~UWNP=2nAD0c+kD'B1fHiytpZJ{w6D!%$N.MD%SG$wN5)Q)YdFe52{ax+]ecz~(QCGAQ1@J9ssWBSzSBseRrIR3Pr8CaX)a41pqQ{koxp!XY%F{eBu)fXRewMv3=!=6BkDS)pZD!s(W%l=T_Mw'!fBQ,j6Gt*IE_C4y}Y*SNY@mb+[%6e.J9lXorVH')P=Cvb*FZq}d=.2W{AxH.gC0R'@b)JE66{`wOT~f]iF2+fHkaQ5,8tY+lKJTGVEj'qHNrXABT@S+8F.'BU?!7rSlema`RD=By]%O4t9O,AfQ&RTQBp0p~!Wl{YFM}TRKfaS2?rnR8l?CjCF1mgww(qY+ybvHCy-_ICE`E9Op^'G[XqU-2n&pA,ATp%5xS2_E34l7[Rk0lZ=k!%P1p9*(7[)T.z.IQhAYUEyw-XWJOGr%vXa~mcDAXVkA31{to*!ML[pOSwDyZGE4zCfM7{L+zKkk'%AOzrp9W7NjhE?^V4w@^7APS@inCQ`8pTV@-Q(h0bECrEP*F[TPw}XM'TJ5nVC~koT&MPoQaoqYs!2Uz$B3Rvs4$K]l[a3BxV3+XY9ai`nHgK_Lj?2y5wdD2aAA'EE]_uhhrNw)N%FaQUBbKt`Xw.0Rb@]T}GjhoRCy*UBVIkqOE7cdlO5X@!Et^EHugKzVu[1^E%wRK_9MKr4*fX6.AI~,1,cEHY?eYw~?CJe}CazR8.9)clF4IK`mb?rxqgPl}pmqa1F?b'Xyc_7*l$xObhE@t.BzDzacl0pWLlr+&h`]gTA{n@!Ru9S2,U3J@Gf@vK?6gV%d2jgz1t+6}JKUgWE%7PHqG*F*.?D{paiMjTDJ.WLzu~E7N}i[vvhBDhCtDx7*vFK45WZIw-miN0?$WWsU[+f?bgH1mWRdTPASrbn^0Vsl]gJNEj1l!'Etiq@--$}jai}]Ul+RMDF*Bpt'FIsny2IdH`^{kOFxJkG@-@uKGiwNhu8s!O@pU%bKta.(Tf[nSm]?Q%?Yf=ijg@(9tSB+SMVdFsCm4o0bR0H9g!HYc3wqeRE=fo1PvllEw,)MP'0sL9D-9%Pfb!.e$JTV9pZc~t=HaM6?MsNb'AXy9(w+*R=3eK2jMv'N0noQh0&gn0D0Q$rHKla}@SlmFhV(q7F62X9*U*&9US~^$HUOE@CvG{?%?}pJ'u[X-zj-4B?lg1XrtZ0gKFu*tvIl_I?Idee!9-!?gM9^S@`^e`E]Bh7KaVz3m7MbNX1f8NE[S1gqnoZ=Ji7o,E,Q_KDZpA6MU&]G55X&ohT6G[@7%=(i?9GbZdVjYq+,K$@vkdkUJ^Ah2[p^bI3ffDB4WYblj,@!vty(9k0i%9FTdY2z&&uk5^Q__UZR&SDh8wmo$ww7BI=N&DtqB59X4K'S~u&2UFlU1oT~[==[iqAc0*)xAv-f)[)[^tA`8`uXZQGF-g2P1wA?p=C-t58lH,.yg((ose-@}kBK94CB+@V,1=gcKlH8hd=W]G[&SzS{wC$e?av1mA=q0hTWxS18*DbGe0R,RoFc5%stq+I(7z_{v9+V03BTHh+y~}d50Aab-BUP6bEV$cuw=Oy+-J.WMGb&b,=hugR3F~}?7-1nh.zpy6@P?l`LH]kJw`4T)I@fI1D7v,Qw2R!CTVmr'eN&E^D))kC`s_=oHHCu2lpe6-E%)r%@JYLkp0huT`wGfC9rk2a(vcnHpt`032OhGDAY,2EbhH^,a3(MQb^I*bCA_Pc1SNHq0Ian$*`6bhDiA2TUZ6!TDCQ?`soJZcF+g&3eTN~vSVR`,[k^h,@!mu!zxSXA6EPn94kvBeA-Z5=LI3$!{RLe0sp3gvB0fIl?JF!0Wdl)5cyq}kB{3($_4e568KLyF[`V8qFNZ5&ygIJFnBlP]G&q46?5[owIfcQ7,.[6VR!r4p9HK9WP.Qq7IP'bm=9ResABOFi$*QpjOyobwr!N(QEwvUYe)b,h.LdcS-7d*sCg_uxy+UI^B&(1=.Xunz9PkU,pwh=c)MswfIl-Or=~t.6_Y$=,7zQUv_(ak0EmfdzL,8}DU@,jks[]j3B!JC!_zNpbC4x8p2+y4`BYiwSEqB~me)up[fDAbb?1s-!L!~r{T(78Rf%_)e?lq1OuuF[LQ5n%'r3hANBrciT&?UP]+jkrK'JyY?FZYk+&~iB-ii^f{axZY}C[,b}V=8b%+yEN%$o,9g=4`w'ARI=!FQf%sT,'3M=B=mvF!$ozQ,YCVi`g.0DYBzZbYWXg0o3v[eV~'*FPmB0w]^_g$DTndFIXrPECZj~xS2NrJ1+EkD?nlf==oXvQyy`zP5I3IK!-0{@0FB5cW!%5ksgWgc%*teCt+nI'smg*VPCqEpE}4yAn[Dw!Hv$b5{2wqkgNkrCDfonYr4t.9`Gel26eK[='KyZq{[dpZ"

"AppleApplicationSupport"="=JJ*5.q6R9m~e?-X$O^78(O]jRKex@feOx'VL=,i~0mJzj^`79)?H^tiY&e6z~j{3CtHa?[$kjs,Y*IAw%IjV&OFh(k)_Do*$wkR7&wdH$S3y=dsZ.(}@PPk)8e=C@}Iq9'~YmO?`uZ)hyQ`II%Ah()Ycc2+$wkR!5sPG*i7c9a%EIdQdnl&dib_1V_MX=K0g&w*}hinr['YdwCZh(~'R[9u3MzYVZ,[iO+nR?=Wy3Kp=JM`'(Oa0}KF9A-CGuN6tLYr'Kj4ovdSh(uixf!u3MzYK]lh8UM5R=Bepx.p,GS2)a(Itr!'u9(F}Mj~HTf6T{+Ij70EZAF`tQxtw63(I~@@9tFBb@Ms^P!f*Fh0}}E_7)PVx8S6vR(X!k1QN$=hFGnJ=@K'OD^(n+98q7h4zo.0PA,[VyT`5@wqsBZwEUP*y9n%!na&D'A1'IqMfvm0@?WJh$0ZhODmV_&-)=@0B=yae]UDW1_!vww%]AKTg8.dh_txiuY8]zsM&[Vuy=G(v%jl61+25E8UQIg3?9_Ij{B0_t8u=fa3]Pxzd8g1Q&NR7ASS?f''8^2Dh($po$+,$wkRk[AxqpwLq=Ts}8BZRGa0=ojODA6y4=Qx!--*1=n!$Y3fx,86E?mpO~v9c2rdn&dw*oHBIAW&2+]_XEeBPTk-o})e0=fczIra'lSQ*quRhHLtMA$wh09!{DP2PLr]H)KcP?-qjORLj`=S[IoF+UF?.?Wg,qf{}_ad%&p-^gq]6?3a5Sl+5odFV^_{Zp[1~?K!`,*^]~YnD!=^z^(.a=1%O~ZWn(fdD-RdaAUb_8=U}p(i?M)hfriVkY5xi=e37=gj6E0lCQ%Sp@[8h(,o5Xp%lrLW9LMI&oL5h(_EU.Z&lrLWVP%6+oL5h(eZx7Z&lrLW&'2L'&a3C?D,j$m*I`Z&5BVepkEIN?pzPIOVsNl^&id)pbr-u?^)uDZWH.z'NJ'Fb2@XFAw5L4*.QRnmStO8oH]lq?d4NJc}.wnv0XFPo%'?T@rqsnz+=0@uQ9arT]26x8(Ufr@AMB?L4=,9v9irdAjtwU(%*NVk6]1C.q53Q9D8h}E5)Vrdsm.bwR(rg90hx5%ePF?ZEs{3m6BLG@SX+_F1.).dlbcru{qENA.eFi*gr'%boP`Pj.hAg?K~}{ye5e)c{7Z5TX,qe@oi9XYHH@p^{LD=`y?^{?z$aiKaDHSIHp+J?zkMb?efmz]Kv^kzG90jVtWnCA%%voH7?i?^Vk?P&RI^FAGhyo?gg),IWJ4h8^=35AwQBNIhGA~c9.g?Le6%Z=9z}'W?g`)E@.fzbBKU]=urj%ncu[V4N*3ifqtid86OtQz%x%gX7U$FX'y3_@YaY6K'0j10FClieZawV9JZlCt~x*kC.pVOm~&I[90yiBFnM@mA3H?vHly~`?a!f^kR?g1GWG!t)LnM!=dAJ,A195YAihK!O(H$eA]cN_8og}iLS[]'!1jhR=)w&=.pH&UQK1o%I%wBL@Oe'RFtmJrFY{WBp${^_AXA5xKz[gTc@+_BjCh*V96JJtvbLb?7bn^W&ps@u=E5dIcf[rOdN`%=)l'lZ8rFm@!_73ZS^}h2?*o{Y?qqiA1w{ZDXuZy7-*I`3AFGzb0nK&OX`5(p[o{C}85)cLKydI`^d%.ZY8}8v82!CTgw&pf!frEI'kxRQ?(wuc!*rZ7OK3.EW]y-JAO.Bdbc?RT]9rYaI?'`X9{(x-Ssl1&&t[GL6k,VQ@fJ$wxJ%$T]SsNXF9Tbg=!!rT^a^P.51ys{9N=[%?Dt6MlnluXu*?5PJ{Jp2?qq0Stm=FVOOb~hfr%)t=LXeoo]zRExgHR,!z`]%9DD{nEoRcT^+a.ay1^`S@X){]c(=j488j4,yB49T?1kK3-v.u~h,,?DD$Foa?350t$_eQWR[?N+SH75X9iLgMlfwsZ-Fq${0oqGQ9uR,g!B,~~]~M]mC~bvj=*P`Pc`6908i0JeX-esb?~~Mp(5@{'`PEQ8a7KO?ADM{!ti{-HU)g5V&Dl9TA8sb$%&1pyWwS(GE9i]g8MJNnVgM?RxnjuwE^!M%=@83-bde&Tay9m7^2rrP9Z0Jn]S'Vf9j[Fu_cv')=qKm*zgo{w]dLcmy]3Ne9[U(ouqTlF$BqS=9^CL`=l9V'W!]l=E5mzMrQu?g@}0-~0gBf`T3)%LF,}f%=1BsvAu6_AmxkLB9hk`C?u[`hYDSbNaU,e$^7glA9kG,WM!a.@w@klqH,mn2APyyIMBh+p)+yX*x~s!@9TtjYSk8LaZ6e6E+~n(B?)!Wo[g`bGL_N%@5pfo$A9})=ALX,kj_]HusWtN9AiDajGd.aL2HD(sg{=549)_T{Lf20!u5Zvay^U9G@iU7SD@'yTml*d!M2sXV=wc?aBhk71,_AE*1*DPc=1$69a?W.-b[L*_$Rmgt85*Qh?]mYq+9xLT7cC8S@3bnpJ]m?i6%nt*IG.8!Ah368g4!,Xgd560Rxkjj=_^fyp{xv?d'z-Pi=GIa8I`4&OC8eFW6_*'{4)YG@^(nyNZEbBc~+Xr3-0~]=WzsG[,w)oMesZ3NcD9T?^PVDmxl)m[G{VD)+hcdAWS25%Y&EioXTXZD?62a8@Kb7{KX1*Ib,S`.}R1c?4BnbaSiUSzh2l?J)s3[@VXr^HKPK)ot=eq+ZYVY?cY*fEeCi[)_BljF4[jM=(WRY_i3zVTb25]S?U2t9T)CXR}[kh!7NIg1(=^t@5uX`@]~))zuY}{%HT=V@J3f47p-wX9O`6Bv9r&K=&SS^^mO$J=q0[A!H=Fx9uDxB3+7auo=4{Z2w6Zg=`OKjuPm8[-43~p'w0*e9%1Drhq}L].wc6BgSo669WF=Ph,(n-1'4TOKwT1}@]OHFr'D)aC3qHPIq]EP?W0SCO)yJzj,3FDqV6q+=?F~Hi]Ua`*_lUNpBaYY?23g&&7y3P8CR.MdSBq^@$v9jAUrKt^'yr?rAPVW@`sO'JD.loh]RmQ8@sf2@-Fd13h6a0S^qx[)yW_P?nFz16bm)Vtp)j%s('R&91BT{U6rhOd1.0HasR@e809EM*QOuk9P'P]ofkg$9aZ'n1^U!)Z_V~+?)e.y9SqaMVeu.LGoyhNl5pHt=l[IU0&}v'TfBg!]`(QY=G.0gP_Hn$ZX2C&^ots@=mNzdBF6pCUq3[]jSh&$@4QyEfMbh)EO_oZGV!VG=,mi?ZFx0+xcVy8TLwCs@r0]@Z'LDX-LH5So[iTo?BEh-J-P*ovh}9%zpw8(?P]U~JDS-=*AHbdqzuSW9@3Fa!4n00&)P5aKA?nCAT4Z@F_sUY_w-{'T1XtT?['`TH[Ltl3de[`E1UUb?lQ.razqU}HW8fAoyd5`8}{Hu9'uJ*gDcQc1331!=77~*OXeN&y7ZgJu^lAy9Ak[HhzCrK0]vE}Wd6-`A15^6M0e]tK?$^j@EAKY8@Guz0cDmoleO]DLVIxS?)QQg_Us*soOQGdz.BtJ9R-lg5ZF*JUi@}wWTUz*?YtqEkc,JYU{~'G_)V5@=qr^[`S'=Lcp?DQ6yM1%9fex2t?V}]c!f0ufgf2~8e'[c?iHOM=XEGU$t~0d=R%A(naS^3.wKPhIlvcc?'@=!Ch7WvN8avem`6Ue8{XlKwYBrHM9MMBO`U.k=NVMK9c7oMDrY]1{Mu5l8^KenW.)Tvy[4pMZI]j$?O6y_nv^7c3+_7NV?!Z!=-vtnr5PE+qCIhFmc}Y~?_),S@nC8rYZr==QSqD3A7pliYWyY0]7kn-B*fPM=RWq7lsJp)rMKY@CafTZ=IYw0I-I]Fe}f_y%hD-y8`mK7ry^0?*7RyU+Wl)H?a?sD(b&IV5KzUf6c69$9M2pDcng@ch&{P0R8BII?ccE?TAh%_HfHB`w3^2-@)KLoUf{F{5qu95J(FaL?5tKZ.rdXQE56D~So1K^=P3(-E4fTRlf~)NicxTh@@%!Bdnp)AWO6P(+ax7y@%h^4RwDD@QCnR2'JO&79hs-s1NUP10z=%XKtP9W?rP~'n{5e$gvi)l$1rq@9`T!Y+V]@z4'C,MAV}~ZAOj~5hzh5]8FBJ-rlMkq8fwSXJe!!0^~yIvtfJ`s8v!m}DDzK6IU@*QRmW[{=]H8^D]fs@nS4!bM@2rI9jfP.-SxZR1AEEbEBJ&V?Fg7C^?eJHiV!i?5_yU'9@1=l=^k7_!^Tl+M2m+4=K@G{qW5DKOV?NG.qR*r@0+(4&noEuD)reu+[PFK@wo[sUde^Yn_gQh&]c+r@OMgxy~P}Q-U'1fr%(x}?fJrBY3hRqFX&F21*(n+?PuuY-jP}5kN4'~Yvn,-=*iK%P*FIpy%GBP)ZjQu8jhQfdHlv?]*ZA398H5?A%E7F?ecCv)?SBEJ.z[N=?bTOC-Kw)=DJ4@HC~d}@bir?$k*-'w*6~zU,S)2?$[SAt5NfcZW^tTN&&jO=nE2Bk8FTs)hHXlw1`a0?uvbYkUqXw4mLJv-(=(8@_j!6HEr)86(,WCM^j&D@Qib[lzM@YIfTnFU(6F3?!gWkhY,5pUPG6}uix9I?$9VS^$1m=0FH5fDyzGt@+xFXX]r0~W,Zu=AFoYEAu6G_6D'47dq!pQcO}Wc@Ydiku$+.MG,'3hCHlvR99hctf[~yF807LEN{}On95m~rk&=v8K]p2bPj)Qq?2N3u_e.T6Y3Ruxz@qy,915[)RhAG~=yw==.L7@5=cLb3Le8)5fC^wZsA8Xe?bx.eEoz*o*uadR%P%Ux8dFS*01c.GZk6N[?g3*t9jK{7-l3@Tv~}KSv1@5{@p1y^=7hlLkv.*p&r4s'A{`Q(N-OI.M_w6ksC@,C9Z=J*s^G}^c1LAW?_@X4ADlYPvvMt,IdB$cA*.BU9D[a&oB_h0e3n5%bu8wHA+~YuJxY'Qu^c+2MCyV89gtzj_yzn3-uhki1@7H1?_Nzxul7Q*a[3x&yFpJf=BCOJ__r1P8jM,{$}(2Q?luYICk0q(H]YQU0qriD9UX9IA%io9d9SZ2D{od?=z2ut=IfQrQ[i0Nx{TkPAu-F`(mT$[P(nRADGB_?9=0gyd{kKtBFgb0vpaPN?b=q[?`p.Xqe1&Hb}s7i8jgh*oXC@O^.yP7wVZcS9sy*(^W5!p6@y+Y(o.Vx=dFQe$R0b)IRqp}dA(if=](%~M[WMdrz[grw@`Y5?we)!RnMaLwee7Op3]by?WO&?uCEq}jm2jhO=e@7@fA@n]GqJocctPQXp]E,=wVA^_9^_?egU5J3KpI=AX}KjBwN!dbwrjJ(63b094p+S%)2_Vcv(Pjc3L_Q?Nmsxvu-ld@EM1h7Nx&K@xF[Gfy`eraTX%lDQaUY@0&,-D`ni%P@+zJ?$1@l8X%[Q3x1hOTh86KV-uGH=zITSxARS!KdVJWv@=+A@Y3{nNNa=pA4&LeQD&.,@'J+zZ],M3v!DVUn_4j}?2]$I9=b~)elHGxxJtMn93tYm5Go~Tyv+&sXt+LQ@BhU[yswIVeQC`YI_^@0?vaM]_(UO]PhPcYBxRuE?(9}rhkp%6Sf4b0Qh+Ga=%NCp[Ufs$Cu)q+$G+Jk?Tdme,Idt{jU3k!qSDSw9UC&p&NLesMBS_D*X@TPAh8{_6Mj^b2pfm~Zb!KE=iM=avychY4O$ZKFm.uD?ir5%+k9EaR84A8su%KB?!pnC58Ow@e18htT,zt799@!S*T57lc{~fz]iIkI94mI%F$Z9u`?0+^p]w&AAhO,H2kXJn!e)LiRz0b[=zEPo]$lY@Z-D@Zg*{c194f8z])Ma-2w!U(CcFOt@q*[!k?LUr'~6ja9(pu)A2!c^^kA1F`Qm$uv,yln=}A5GrBG(EnmNOhb8fw^?YpnEZDCix$2bc_s3aaHAb=[UKv?)5x36f{,=[Sv?0Q&qn4teFHIC(+G1X,U9?GD474ktyN2IhYzkCcB@39yP'yPv=A-!}FGeeg7@t}bT(UB,&-o9V_bALkI?VM@jP4F(p*uSW2?7Q_,@h'b)dI-F&)Q9QQim510A,TkpJXqCC]}o7NMi-sK?HAIHsJ]A-]W7h07G2Y0?NSzpbjBcW^hXeM96x!R=2DpjlIY^89MbYu2{-KY9JkA=kCnN&g*.9`^bA=j9UPfSVs!C9&6Pnse'2g3=z@ZSyHG1yDgM!]0y,,V?E5iWRaRATW4-z6w,3.m?+)*(lvcU.qAGc8-f{z==e}1*oPx}{WPSn7)$82'@$wNGr{$G$6i*r+!y+c==}bMS3s]j84r?&}z`(c2=em`(!)~A]H.~$mX!Myq=-2pw1+gVJd_f9hekiis=]+?spL3A1srrhf5KZ$e=L}^G9[=n%_}-~7*{K*[=`M)yF5D9lP+t!}jbN@TATY9X)k`5*t0!3Y`nr+X?[@S,^T-!PRJ6i1{M)ov?ryEW8oIEemajUX9{4b69G`jsX2JACG.7`E*@}W(?70$wK?J*UMMlh7*+(NE=XZ%BA_Q55Gk-SLF4MHz=[d!,Zoz.Zi47alvM'i-AX)6qI?rf(w!&&6%Ke2a?!hTR7Y2^homU)Lftvez89bU`direwGH2quH4tf4?NmLk$ZfkU@5cC%JX2Lb=Ferd$kG6^BHWNtUrKP]@MDa[@4)eG.c1tN3Z96)9+$VeW@V1F0QS,PLvjST@7J=9*A@N9'L7Zo2Cd^h=o6&PkBd0JyB88G,iNh1A3)+pfH=,nx@c$}*tY!O=o)_E@BAc[IIZ)R%f'49?mYlEbxP^,*Gi&5U3OP_8ciIJN4GPOb?6=x&3An&AxmSNR`w![I!1sBG2?o4AUh8SlKE+[`PEEnbzaKD?(hbn!IR8-o7dh.DuI}w9AU9aOOVFt%czP34{d-7=9f54{4c`h`UH0q-VB1O=Jzvcdz(J5UWN40R?m5i@I?Xt$q85mnQJxAfm_43@Pm8Af2d~gGkU0)Qcg.d@$$7n&}`MYe`w]5@XYOj8E9i*V9M,[ud}2g5VpBs@QrJ!5@YQ)UYzP0WiO.^?mGfFkUprwWTISnOs'iJ?uElSLH4[ki'h&)P9N]&AE2llj[8Z?74q)7T)z=HAHi8oR}zo^+`F'hDe]`h=HUr`lRLhY4_9aQ*kAxd9JE?(!%0aCC,5[8DRd6q=~At1='`X&`k$]r6Rb}B@[+17lL0I%0[EU&j?Z~g=!NcO`G@G2Wql2TJ=W%k9mjmJ=_dw.9'u-k*h{IFAkeW7l7ns3^C$Y+^HsuL9~u0A0%{LK8I9$W!2eXZ=T,CIg0(@{PG{Bfai+`dA3Ne,XL5LUj-*m'xOqJ^?Q'F[Xrbh}mFk)t%CNtN9y6`p33km%^3t%H.7,-x@&C+~!I15kHamyjO]=z8=Y`QpXJ).}2u*zbi']=u?EC{ahP)K[GEUfBpd'Le?PWu5A]yX!QrQ39hxKDy=vXjh+4]{O6Xy?!c)5wT@7&'1Sx^6&%ksLqN'*fCAgrfiik).0M5wOzA%{zh88W3DhAQv]@&t9'y&zyh@MZBb,?zO0EO89Rrl]'@9*z{d*DR70%+sw)o~(Kp@UTj+1JBI-I+,d13afoG@+tz_hMtl-{{3QWJX7n=A?D1H$o!whJB_c[Of'vx@)X-QuS22-,%EWGcc=v59J[^yCk``(uzgHT^e^gFAzjfkj5@k+0C74?3),i&?HuikVG65gIQZF[dEU?Q@[@k!Pv`ScK%@8Na4&qDAD]Am*E}!}C,kcI7?BEa=9qJjIyWYSH^)x}@]U{{9q'xszzfgRNEyG[InN,'@U%5&sDZU1JuPAN@KCxp?Sm7{VfHn3cxbHL9KJ2aAmQnt?WVY6qNHk9*x}M9AU_QNyop-jyBN*hxII,q=XSMAS$EwYL[M}4[NHCN9~.CVHJp22Aj0siPGrM[=E.yNI9=S6=Kjy^UBq,m?Pv9cM(Sq5Jhb+0_8ybj?a0$GWvGS$eg39,eCms{8MtoHTLE}nA0Z$pe,FRh?m8!zx!RT1rRuQ@TK]D]@GfltwYUm@h?&6aw08Js=8L9Dztjeq5}(maw-x'u8uIsY(}tdJjA}MZZ~aB'9xHew=~uZ}ED.xg%aO4AA!P^Tt42@0P6IP!wrE77@C,-w!Wg{Ai_PsZ]Zr!5@jYAd!1_.K$~u?yyrfAw@@&}%X?FJ9[tK@MdgETD@me1.rc(2f[-Z^b5rTdA?D$[xCoxzFmuX7lX!h1p?Jve^+AMyFkvAz~dM+E&9f~b{IIcAZMswlYeyV`i8I%D-Q^B8E]q8bIbxcS%?tj%*jozrQ1LDLpW.E$x8dna9.4k9o5,!HQ_yA55=AODet.a{SrRFHWj+xd!9&HE?l]E(AUu7H_+StB%94!jtZWG)8vqeN&E}31Q@H~1cE)y*`Q?XC1+qW%L@9'pRG,?-g=5Xl{.PMg&9k!XXv}PCCvCdZ5KBWF%@lL6?XQw2?bCVmB^7JMa=@~7L!quu{t}ihij-tT6?_{U}id15,?Nw.ja*VOf8Drgp$HBYicZasz*?Lh3@z9%u(ZeHeXA5HXZs7RC94C31f.~uY?EwRV75[l9?Ye=m^5$f=k@$z6?0BCC@&Th`!FkT((SfzfyFr=b8!nhvJ4f5pv@+5BPb}719Y{?n7uu=x&nA4cCQx1m9kEW59CR*,eLW[OY}[,^89.Fm,~3,k5]T`daUPUB9fmukIVC5@Ds}TmwVuFaA[j-.9?PG]u{u(@zIEHT@~yNZ?H!cU)SsD'T7trg8Ny=@$$GLXBX~gQ?)[X3?n1qnK*nQ2Rgj$BP-2lV96^,vZ![i$e^5n]jymrS@K1u-Uy1+tN_f1JLYiSIA)S(@m@Y}~fEW1wHBE_bAS7MncGvmC8$p)y@uEpFAV!pg,[Yq!2tBNCAyIAm?nuQH3T''42F`6Q)}xk&9%u6U8!6K.@dLyYT@5}_=.H7_SzF578p%,.hINPt8s-lo_G@Duc?N-jrjLlj82F2Xw}H)5]hPeF^(,0eAfM%{tG3+oahknHEK^t~=$A(u]e-N2%Avh-g7Vr]8wC2(afp7{HRR*I=eK8~8kAP4_)U3={VhK1xaOHb=YZtd6U%c6@G@4qpLzi$?ZuxL%xe~}dwMe70{3C+9+D'v=x{5dJ15+nj0S*I=t$KFGKAZIXtfGu_c'hbAaQw($n%9eA3ZuMsZM8p=e*Fwf7iSBq&.N8Yk+MR@Msah)J@~qY2wFBepcA59t-2lYB-7Opg9epb~EpdA+8Rcd5U5^6WUm{hh2d.9S2l]nvqWEPRXz93*fTA?qf0.0!.MM-M*3Jd~*&z?ReRD3=1xc,-aIjkz{Ux=0^'KS{k[3.zE(W0K8^^8.&K8fyb!aMcAf08To11?M$My8PfIWxjDhE71[3(@BOTopmmt%LsOgI`FXxr?`sx}0fwT,z&k2@T'jLJ=f7nuAPDa]?5kY?doJL99NjC]S2T9tpwDQ[B7*GE@tEE9*gIBJ9IoY3yq4g`A2]?wg28t]['@B{vBK5??sSLl4Y+M.`0Jf(NbUU095Vyp5oTZPbB)Xp?gmef9(`-ZSCX7E'}Jb`1*V[l8?,T7KhC(_X(-zybV8iM@VOFg998TqYH75Op_hh)AfIA3psSIbjlS548Y@^IA[}dK6B.T_t7W*F'L8^O@Hm6FpZwlw'.9L,XUr,F@xL_S(PZ+Am0)tDIY(pw@1A`iIQL,^5(mCD4t,hW=wPr$w5{dW6Dk~P$v6{H?H+]pPUe%RLNWJKU25*I9+[kE!8Ay-s728v4H]LA9bcBy,$]Do-IKPEHOP7[@JcBVO[)z^,9R.Nr=1I]=+MJm2~r)ADi,]&Nlffq='vPJ$cN$+`*Y-Fg?hBw?zN.`bE]R$'3O0@emL-+9E+!a&}^{^!ttYR*r@c2Ab*^Av~3[zEzT[%HJ)s^A]bGemKP2S_`f2?$4}c6AF'6iIl=}[UAPC6hmCEr9vUJj9ziR3B67Xj5YXbb=Zr9!WaZ5e`oFg=a=asMAvo$@54lzgd0R9!ro!Z~@a^[hfoY&3G8e!~?uukm9?Re+8Ta?KuoaJ@1`rXu9j3foB~ffH98b^3%77$I=$J5zZrm]I4c]]HwR}qp9i%Rf?u@9H&3I~Fg_A~u=U+75YqUve&c^NrYk_xZ8H_zs4F2L]*)3{xrfZH`8z6KOWX0k$mLj$u@([$I9+1zEJR*m=MYyXdQ]8J]8TV'.KUdhaL_5v3fKzBx@0xE5v$pl8&-N)=,5Jbn=XPxlrD*uQ]xC9=NRyP*@vZbFf~%wC0(KmLb)NFn9H]$N?mJ*KNQF]Ja^Q+Y@wA+Lts{cYmE?+_u$6Nv?},CKq(dn&{L,HCEquDJA^kSScdyHt9t_fgoaIny?[]MoKOWXM=P4euAFnm*?E[F=W&^u@N(9XXH3Ssm8ut6ZvZHnL3z2YJAxKHY8W%t'%9@WeQ9R6A_w1jj?yQId$Wt^U[m')zE%Nf`AiL=kD0^@^MS$)-Vu?y%9c`%%I*l&VDKAX0AwdE79q%PNkqY_Iet9k,(=cw_9`U]k$q3[1BVztr)}6aD=6.V$2IdV?I9QM10KIBh(V2qw6+$wkROs8hP{&2Q@'+RWs[zY6Y]zDcx@$Kh(Pj.6q+lVnYgOg&'!vu_@H{+j,a.-NMXSoMV2ogR?)r?wR}Cazgsv7+F)o+X?$-KJ1q@g+93AB0*C%o%@hXBKQ)PeT5[oF8e,Q{K9%W^poBUXME?)rtb1uN)9_,[FQ+BQB@M~W[i08`V=*xPW]v$b*)IbuLh9vHp?c}Ap9^y!B(UIK^Bi-ta?Q4w&4)(e1ZpaJ$=tk^j8JLTyn$DGVm=*$VRibPF?'v5=qGZ?=@"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Parental Controls\HTTPExemptions]
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-com-complus-ui_31bf3856ad364e35_6.0.6000.16386_none_ae7101b94b4d808a]
"f!comsnap.dll"=hex:63,00,6f,00,6d,00,73,00,6e,00,61,00,70,00,2e,00,64,00,6c,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-i..l-keyboard-0001043c_31bf3856ad364e35_6.0.6000.16386_none_9e55c8fc4b9cf530]
"f!kbdsmsno.dll"=hex:4b,00,42,00,44,00,53,00,4d,00,53,00,4e,00,4f,00,2e,00,44,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16386_none_6bf75946c7e1dd75]
"f!msnetobj.dll"=hex:6d,00,73,00,6e,00,65,00,74,00,6f,00,62,00,6a,00,2e,00,64,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.16404_none_6c4bd9f8c7a2c866]
"f!msnetobj.dll"=hex:6d,00,73,00,6e,00,65,00,74,00,6f,00,62,00,6a,00,2e,00,64,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-mediaplayer-drm_31bf3856ad364e35_6.0.6000.20500_none_6cd1759be0c402d4]
"f!msnetobj.dll"=hex:6d,00,73,00,6e,00,65,00,74,00,6f,00,62,00,6a,00,2e,00,64,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-n..n-clients.resources_31bf3856ad364e35_6.0.6000.16386_pt-br_6152838fdd323fd9]
"f!ipsmsnap.dll.mui"=hex:49,00,70,00,73,00,6d,00,53,00,6e,00,61,00,70,00,2e,00,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-n..rity-domain-clients_31bf3856ad364e35_6.0.6000.16386_none_18a3b9dcf54aac13]
"f!ipsmsnap.dll"=hex:69,00,70,00,73,00,6d,00,73,00,6e,00,61,00,70,00,2e,00,64,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\DerivedData\Components\x86_microsoft-windows-v..e-filters-tvdigital_31bf3856ad364e35_6.0.6000.16386_none_d9c6762e5a2493a9]
"f!msnp.ax"=hex:4d,00,53,00,4e,00,50,00,2e,00,61,00,78,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Live\Messenger]
"RollbackParameters"="/x MsnMsgs.Msi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Realtek\AECBF\icrcAudioProcessingDemo\GSCBeamformer\PostFiltering]
"Tmsne"="2.000000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\0001043b]
"Layout File"="KBDSMSNO.DLL"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Keyboard Layouts\0001043b]
"Layout File"="KBDSMSNO.DLL"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\0001043b]
"Layout File"="KBDSMSNO.DLL"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\SearchPlatform\Preferences]
"BreadCrumbBarSearchDefault"="MSNSearch"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\SearchPlatform\Preferences]
"IEAddressBarSearchDefault"="MSNSearch"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\SearchPlatform\Preferences]
"BreadCrumbBarSearchDefault"="MSNSearch"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\SearchPlatform\Preferences]
"IEAddressBarSearchDefault"="MSNSearch"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\IM Providers\MSN Messenger]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\PerPassportSettings]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\PerPassportSettings\3767025741]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\PerPassportSettings\3767025741\GroupState]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\RetailDbgZoneLevels]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\RetailDbgZones]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\SQM]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\SearchPlatform\Preferences]
"BreadCrumbBarSearchDefault"="MSNSearch"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\SearchPlatform\Preferences]
"IEAddressBarSearchDefault"="MSNSearch"

==== Registry Search Results for "Real Player" ======================

No instances of string "Real Player" found.

==== Registry Search Results for "Baidu" ======================


[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Bhbase]
"DisplayName"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BprotectEx]
"DisplayName"="Baidu ProtectEx"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BprotectEx]
"InstPath"="C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\PCFApiUtil]
"ImagePath"="\\??\\C:\\Program Files\\Baidu Security\\PC Faster\\4.0.0.0\\PCFApiUtil.sys"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHBASE\0000]
"DeviceDesc"="Baidu Hook Base"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BPROTECTEX\0000]
"DeviceDesc"="Baidu ProtectEx"

==== Registry Search Results for "PDF Editor" ======================

No instances of string "PDF Editor" found.

==== Registry Search Results for "Messenger" ======================


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wlcshrtctv2\LiveCall\ShellNew]
"Command"="\"C:\\Program Files\\Windows Live\\Messenger\\wlcstart.exe\" %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A886F29-465A-4aea-8B8E-BE926BFAE83E}]
@="EapQecMessenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F4E3CDA9AD43DC847872BB629D2075DB]
"ProductName"="Windows Live Messenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F4E3CDA9AD43DC847872BB629D2075DB\SourceList]
"PackageName"="Messenger.msi"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F4E3CDA9AD43DC847872BB629D2075DB\SourceList\Media]
"1"="Messenger;"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{01FE33C6-8FE4-4361-B32F-1F31AEA790E5}]
@="IMSNMessenger3"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{031D524E-9968-40af-BF08-8037CCDF01ED}]
@="IMessengerToastManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03DFA498-BD30-467b-9E41-B69F8DD252AF}]
@="IMSNMessengerContacts"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1510FB87-5676-40B9-A227-5D0B66866F81}]
@="IEapQecCallbackForMessenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{249E2D41-44DD-4d64-9B6B-D5FD76BD85B1}]
@="IMSNMessenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2E50547B-A8AA-4f60-B57E-1F414711007B}]
@="IMessengerServices"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2E50547C-A8AA-4f60-B57E-1F414711007B}]
@="IMessengerService"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{51A01E38-7505-401B-ABC9-F460E1499728}]
@="DMessengerContentEvents"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{647C4DDA-B572-4eef-871A-7ED254E680F7}]
@="IMessengerContent2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6C5C6068-793F-4cdf-882C-E55964612978}]
@="IMSNMessengerPrivate"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6D7D5F67-D1D5-4f15-8E66-E7791C6D4D0E}]
@="IMSNMessengerIMWindow"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{74FE476D-BFE8-45c2-9035-D15E330A246D}]
@="IMSNMessengerWindow"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C95459B-C8E7-4605-B641-45EB06866659}]
@="IMessengerPrivate"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7ED70824-03AD-41C1-AB1A-950621776881}]
@="IEapQecMessenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7F9EE13F-A982-4feb-B166-AE510E30F501}]
@="IMSNMessenger2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{83B2A407-22B9-4842-97C6-DE30EC6DAC3E}]
@="IMessengerContent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8A5E6AA2-9DB5-46b8-A09A-EDD36BC57039}]
@="IMSNMessengerApp3"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8E2C9115-7BCE-4d46-8CCE-654907BF190D}]
@="IMSNMessengerGroup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{929BB08C-B50C-4ecd-B68C-175F0B69A544}]
@="IMSNMessengerConversationWnd2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{99959DC6-097B-405f-A05E-EC1118041464}]
@="IMSNMessengerIMWindows"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9B7B6E54-9417-4cf1-9B6A-A469EFC20A56}]
@="IMSNMessengerContact"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AC07C00E-E228-4453-A89C-D95FAB2DB780}]
@="IMSNMessengerServices"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADE4983F-C783-4716-8B50-5431416EE8DA}]
@="IMSNMessengerApp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AE8354E5-C007-48e3-96ED-BDC1FDC72456}]
@="IMSNMessengerConversationWnd"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B60DA86A-06E4-42cc-B83E-E89E7D326DAC}]
@="IMSNMessenger4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C13963FE-7E55-4e5c-9F51-45C4E39700CF}]
@="DMessengerToastManagerEvents"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D50C3186-0F89-48f8-B204-3604629DEE10}]
@="IMessenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D50C3286-0F89-48f8-B204-3604629DEE10}]
@="IMessenger2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D50C3386-0F89-48f8-B204-3604629DEE10}]
@="IMessenger3"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D50C3486-0F89-48f8-B204-3604629DEE10}]
@="IMessenger4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D6B0E4C8-FAD6-4885-B271-0DC5A584ADF8}]
@="IMessengerWindow"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D6B0E4C9-FAD6-4885-B271-0DC5A584ADF8}]
@="IMessengerConversationWnd"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DD47EAF0-50C8-429a-86D2-B5FAAA3E6B10}]
@="IMSNMessengerApp2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DDF95979-1A97-4cee-92B1-93040E8E08C0}]
@="IMSNMessengerGroups"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E1554AB6-8CFA-40aa-95DD-75B452CF29EE}]
@="IMessengerToast"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E1AF1028-B884-44cb-A535-1C3C11A3D1DB}]
@="IMessengerGroups"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E1AF1038-B884-44cb-A535-1C3C11A3D1DB}]
@="IMessengerGroup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E67C6BC4-FEA9-480d-85FA-173F1A18D399}]
@="IMSNMessengerService"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E7479A0D-BB19-44a5-968F-6F41D93EE0BC}]
@="IMessengerContacts"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E7479A0F-BB19-44a5-968F-6F41D93EE0BC}]
@="IMessengerContact"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.MsgrSessionManager]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.MsgrSessionManager]
@="Messenger MsgrSession Manager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.MsgrSessionManager\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.MsgrSessionManager\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.MsgrSessionManager\CurVer]
@="Messenger.MsgrSessionManager.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.MsgrSessionManager.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.MsgrSessionManager.1]
@="Messenger.MsgrSessionManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.MsgrSessionManager.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.UIAutomation]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.UIAutomation]
@="Messenger Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.UIAutomation\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.UIAutomation\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.UIAutomation\CurVer]
@="Messenger.UIAutomation.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.UIAutomation.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.UIAutomation.1]
@="Messenger.UIAutomation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Messenger.UIAutomation.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MessengerPrivate.MessengerPriv]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MessengerPrivate.MessengerPriv]
@="Messenger Private Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MessengerPrivate.MessengerPriv\CurVer]
@="MessengerPrivate.MessengerPriv.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1]
@="MessengerPrivate.MessengerPriv"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MessengerPrivate.MessengerPriv.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control]
@="MSN Messenger Hotmail2 Control Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control\CurVer]
@="MSNMessenger.Hotmail2Control.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1]
@="MSNMessenger.Hotmail2Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.Hotmail2Control.1\CurVer]
@="MSNMessenger.Hotmail2Control"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl]
@="MSN Messenger Hotmail Control Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl\CurVer]
@="MSNMessenger.HotmailControl.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1]
@="MSNMessenger.HotmailControl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.HotmailControl.1\CurVer]
@="MSNMessenger.HotmailControl"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp\CurVer]
@="MSNMessenger.MessengerApp.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerApp.1\CurVer]
@="MSNMessenger.MessengerApp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller\CurVer]
@="MSNMessenger.MessengerContentInstaller.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MessengerContentInstaller.1\CurVer]
@="MSNMessenger.MessengerContentInstaller"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject\CurVer]
@="MSNMessenger.MsgrObject.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrObject.1\CurVer]
@="MSNMessenger.MsgrObject"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager]
@="MSN Messenger Session Manager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager\CurVer]
@="MSNMessenger.MsgrSessionManager.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1]
@="MSNMessenger.MsgrSessionManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.MsgrSessionManager.1\CurVer]
@="MSNMessenger.MsgrSessionManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch]
@="MSN Messenger P4 Quick Launch Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch\CurVer]
@="MSNMessenger.P4QuickLaunch.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1]
@="MSNMessenger.P4QuickLaunch"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.P4QuickLaunch.1\CurVer]
@="MSNMessenger.P4QuickLaunch"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager\CurVer]
@="MSNMessenger.ToastManager.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.ToastManager.1\CurVer]
@="MSNMessenger.ToastManager"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation\CurVer]
@="MSNMessenger.UIAutomation.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessenger.UIAutomation.1\CurVer]
@="MSNMessenger.UIAutomation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv\CurVer]
@="MSNMessengerPrivate.MessengerPriv.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv.1\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSNMessengerPrivate.MessengerPriv.1\CurVer]
@="MSNMessengerPrivate.MessengerPriv"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0C9455A6-F708-4DD1-B8AD-62956663E299}\1.0\0]
@="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0C9455A6-F708-4DD1-B8AD-62956663E299}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0C9455A6-F708-4DD1-B8AD-62956663E299}\1.0\HELPDIR]
@="C:\\Program Files\\Windows Live\\Messenger\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1FA4B99F-3155-4A26-837B-9734C1297A1B}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{36C8B6E8-7013-462A-85B7-298F91FBC783}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{534E82CE-8042-4F98-ACD8-A3858BCBED0F}\2.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\wlcui.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{534E82CE-8042-4F98-ACD8-A3858BCBED0F}\2.0\HELPDIR]
@="C:\\Program Files\\Windows Live\\Messenger\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{53CED51D-432B-45B2-A3E0-0CE2C24235D4}\1.0]
@="Messenger Private Type Library"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{53CED51D-432B-45B2-A3E0-0CE2C24235D4}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6F1D1C70-4B8A-4273-808E-5FB78E797702}\1.0]
@="Messenger Signature Sound Type Library"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6F1D1C70-4B8A-4273-808E-5FB78E797702}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\10"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{95115322-062A-4EBC-8F43-1EB8D4ACC38D}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msvs.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C1637F37-3FC8-4B37-B3B2-6CC5E202390D}\1.0]
@="Messenger Content Installer"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C1637F37-3FC8-4B37-B3B2-6CC5E202390D}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E02AD29E-80F5-46C6-B416-9B3EBDDF057E}\1.0]
@="Messenger API Type Library"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E02AD29E-80F5-46C6-B416-9B3EBDDF057E}\1.0\0\win32]
@="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\\2"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wlcsdk.MessengerDialer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wlcsdk.MessengerDialer]
@="MessengerDialer Class"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wlcsdk.MessengerDialer\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wlcsdk.MessengerDialer\CurVer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wlcsdk.MessengerDialer\CurVer]
@="wlcsdk.MessengerDialer.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wlcsdk.MessengerDialer.1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wlcsdk.MessengerDialer.1]
@="MessengerDialer Class"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wlcsdk.MessengerDialer.1\CLSID]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D133B285-8A43-4EC7-93BE-9B909C2370F5}]
"AppPath"="C:\\Program Files\\Windows Live\\Messenger\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\UIPlugins\{0776F107-F5A6-404B-9A78-7027FA6EAADD}]
"FriendlyName"="Plug-in de Música do Windows Live Messenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\UIPlugins\{0776F107-F5A6-404B-9A78-7027FA6EAADD}]
"Description"="Altera sua mensagem pessoal no Windows Live Messenger para mostrar a música que está sendo tocada no momento."

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\Clients]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\Clients\MSN Messenger]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\Clients\MSN Messenger]
"MessengerGuid"="5C4C8078-24CF-4c71-B05E-8B1D935DB5AC"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\Clients\MSN Messenger]
"MessengerPrivateGuid"="762DAFB9-15BD-4b41-B919-F3D5023D1E78"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\SessionManager]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\SessionManager\Apps]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\SessionManager\Apps\{56b994a7-380f-410b-9985-c809d78c1bdc}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MessengerService\SessionManager\Apps\{703EA1A8-D73E-43e3-852C-EE85B5D872C2}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01C9E983599D6584CAC0DE6638B757E9]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\vimdone.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CA3015D029A4AC43B4ED3260B32FC6D]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\rtmpltfm.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14B90C6FA1DEB794CB13048FCE3547BA]
"9D5300950AFBA6047A0F74C9270CDD2B"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\155EB5199D7AD1D40BBC834D2458EAB0]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msvsui.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\194D69032113C2E4482B69820DCD6DCC]
"9D5300950AFBA6047A0F74C9270CDD2B"="C:\\Program Files\\Windows Live\\Messenger\\wlcuires.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A75413C78CE9FF4C832EFB7AEFFB455]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\MessengerService\\Clients\\MSN Messenger\\MessengerGuid"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\207FE47CE297986408BAFC8BE10A21C9]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\highcont.thm"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BC41CF3D67379943A23E26A5DF428D1]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msgsres.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DBA8F6B1BA6BAE43B29676295BCD78F]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\356A7405AC5E1764B826323400DD1BD6]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\Windows Live\\Messenger\\RollbackCommand"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3A5A9AA020BC62A4288BE2447D5D2BC8]
"9D5300950AFBA6047A0F74C9270CDD2B"="C:\\Program Files\\Windows Live\\Messenger\\wlcui.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3C10130CC2997B648846052CDEBB50AC]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\uccapi.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3E1D840EDC08EC24A8401762147F59DB]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msvs.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4632B1FF666A8914ABBB8135099487BF]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\Windows Live\\Messenger\\PrimaryService"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46C07488E8F5EEE44BBCE74B771C55AA]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\online.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\56625754FB293DA45814EB7EB176D437]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\uccapires.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\568DA59F2E20AB24991D0FB46BD9B760]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\uxcontacts.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5A4863BB5C9454547A2E308F2864B870]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msgrvsta.thm"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5A6310AEA9D184A45BFFA8E0ACFD2F6E]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\usertiles.mct"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D62FD38BCD9BEC4AA41AA94E233E7BA]
"9D5300950AFBA6047A0F74C9270CDD2B"="C:\\Program Files\\Windows Live\\Messenger\\wlchtc.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5F22127F4D2A8DF4EBED400A3433696B]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\license.rtf"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5F2C0DEB900AB924A90EE73D7A091D66]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\custsat.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6378366C4007D1E45ACB03110040FE5C]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69CC7232907705D4187172CA7E8F1A58]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\uxcore.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE216A8A4AFEAA4088160B5C01F136B]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\wmv9vcm.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B859743781E0A04F866924ECD48D7E9]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\uxcalendar.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6E00E70BB3B1F294B92DAC40DFD56B50]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\backgrounds.mct"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\791B494DC7D51254DB21047A93EDC9C8]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\type.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A624A7CF1944224D878EAE1BF4BB2AB]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\liveNatTrav.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7F755AFE2A7E1A44F8804A321BB02433]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\outgoing.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81975FDC08542AF46A5A5A150AFBEBE6]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msgsc.14.0.8117.0416.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\850BFC2ADBCF22C4D8A02578501F2BAD]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\scenes.mct"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D30F2DD647CC694F8C0BB8051AB42AE]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msidcrl40.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F01EA2A08F321741B4A18828F9039A3]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\ErrorResponse.xml"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8FE8B36E32683F241B3936DD51238388]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\Windows Live\\Messenger\\MaxAVBitrate"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92573B16ACC8A0241942E6BE809EA3C4]
"9D5300950AFBA6047A0F74C9270CDD2B"="C:\\Program Files\\Windows Live\\Messenger\\phone.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9352B3790CA39AB4EB783BF208A35091]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msgswcam.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6A0A1CC64F2B444DAA98E514B1D9A2D]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\dynamicbackgrounds.mct"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A86FB707C5C0B54429B17F1B556FF4C6]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msgrapp.14.0.8117.0416.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1FBC8AADF7686F478A61B909F6B2F06]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\Windows Live\\Communications Clients\\Shared\\Messenger Install Root"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B2BA023D1BA5247479BF2F774B82CB81]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\phone.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6B2686FA4E1397408759D563C2F1710]
"9D5300950AFBA6047A0F74C9270CDD2B"="C:\\Program Files\\Windows Live\\Messenger\\wlcstart.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B911CFCBB77069146A0E35FBA3D9838E]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\psmsong.14.0.8117.0416.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA92EEC6C4FC2A64A8EC8324821B678F]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\vvpltfrm.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD9EA70955F77A046B501FEA22E96F0D]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\sqmapi.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C4EFF69D091A8B04C9B20A76B43C6F20]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\wldlog.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C62B5DFFFB27A2943B7AE1654D43244B]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\wldcore.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C97C9F9F44A7AC24EAD360AD6CD5CC48]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\newemail.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D342C34E0D78F2C4CBF9C024263F3E67]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\Windows Live\\Messenger\\MsiProductCode"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5DF475856989C74B80DAE9D470C076E]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\PresenceIM.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DE8A0B6879AF1824AA9D47C9148AAB6B]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\wmaecdmort.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF561E74D2DFE6B4CA21C50049BD5F8D]
"F4E3CDA9AD43DC847872BB629D2075DB"="02:\\SOFTWARE\\Microsoft\\Windows Live\\Messenger\\InstallationDirectory"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E0608D59132D1AE43A93C89FA4D35C4D]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\sounds.mct"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E708D8987850FF1448ECBBAF48D2D2EF]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\msgslang.14.0.8117.0416.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96FBC421333D1B439A5ADD6828C2BE2]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\nudge.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1551D1E22EB3E949835DEBA0667A7FF]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F715460710E98474498EBAC693E9A9AE]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\newalert.wma"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FC8BCFA70EEFEBB42B7A0DAB75A20D29]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\livetransport.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FCC20B6BBD14A3046968425311E89869]
"F4E3CDA9AD43DC847872BB629D2075DB"="C:\\Program Files\\Windows Live\\Messenger\\winks.mct"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F4E3CDA9AD43DC847872BB629D2075DB\InstallProperties]
"DisplayName"="Windows Live Messenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Parental Controls\HTTPExemptions]
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ADC3E4F-34DA-48CD-8727-BB26D90257BD}]
"DisplayName"="Windows Live Messenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Live\Communications Clients\Shared]
"Messenger Install Root"="C:\\Program Files\\Windows Live\\Messenger\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Live\Messenger]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Live\Messenger]
"PrimaryService"=".NET Messenger Service"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Live\Messenger]
"InstallationDirectory"="C:\\Program Files\\Windows Live\\Messenger\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc]
"sirenacm.dll"="Messenger Audio Codec"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{3FF7885D-F26C-4FAF-ACAE-CAFCC1905F0A}"="v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=svchost.exe|Svc=ssdpsrv|Name=Windows Live Messenger (SSDP-In)|EmbedCtxt=@C:\\Program Files\\Windows Live\\Messenger\\msgsres.dll,-4200|Edge=FALSE|"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{3FF7885D-F26C-4FAF-ACAE-CAFCC1905F0A}"="v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=svchost.exe|Svc=ssdpsrv|Name=Windows Live Messenger (SSDP-In)|EmbedCtxt=@C:\\Program Files\\Windows Live\\Messenger\\msgsres.dll,-4200|Edge=FALSE|"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{3FF7885D-F26C-4FAF-ACAE-CAFCC1905F0A}"="v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=svchost.exe|Svc=ssdpsrv|Name=Windows Live Messenger (SSDP-In)|EmbedCtxt=@C:\\Program Files\\Windows Live\\Messenger\\msgsres.dll,-4200|Edge=FALSE|"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Shell\MuiCache]
"@C:\\Program Files\\Windows Live\\Messenger\\msgsres.dll,-4200"="Windows Live Messenger"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\Shell\MuiCache]
"@C:\\Program Files\\Windows Live\\Messenger\\msgsres.dll,-4200"="Windows Live Messenger"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Baixaki]
"windows-live-messenger-2009.exe"="1389621502790,http://esd.baixaki.com.br/programas/39032/windows-live-messenger-2009.exe"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\IM Providers\MSN Messenger]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\PerPassportSettings]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\PerPassportSettings\3767025741]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\PerPassportSettings\3767025741\GroupState]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\RetailDbgZoneLevels]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\RetailDbgZones]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\MSNMessenger\SQM]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\SQMClient\messenger]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\SQMClient\messenger\Sampling]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\Tracing\uccapi\WindowsLiveMessenger]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\UCCPlatform\WindowsLiveMessenger]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\UCCPlatform\WindowsLiveMessenger\AudioCapture]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\UCCPlatform\WindowsLiveMessenger\AudioRender]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\UCCPlatform\WindowsLiveMessenger\Codec]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\UCCPlatform\WindowsLiveMessenger\Quality]

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Microsoft\Windows\Shell\MuiCache]
"@C:\\Program Files\\Windows Live\\Messenger\\msgsres.dll,-4200"="Windows Live Messenger"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Ursula\\Downloads\\windows-live-messenger-2009.exe"="Windows Live Installer"

[HKEY_USERS\S-1-5-21-134228104-2085873779-558425676-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\\Users\\Ursula\\Downloads\\windows-live-messenger-2009.exe"="Windows Live Installer"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\Shell\MuiCache]
"@C:\\Program Files\\Windows Live\\Messenger\\msgsres.dll,-4200"="Windows Live Messenger"

==== C:\zoek_backup content ======================

C:\zoek_backup (files=530 folders=29 609723466 bytes)

==== EOF on 05/04/2014 at 23:16:56,51 ======================