Flux 
Social bookmarking
Conservar e compartilhar o endereço de PC Seguro em seu site de social bookmarking
Conservar e compartilhar o endereço de Fórum PC Brasil em seu site de social bookmarking
Estatísticas
Temos 14810 usuários registradosO último membro registrado é Josevinil
Os nossos membros postaram um total de 36047 mensagens em 3685 assuntos
Quem está conectado?
Há 20 usuários online :: 0 registrados, 0 invisíveis e 20 visitantes Nenhum
O recorde de usuários online foi de 301 em Ter 26 Out 2021, 15:28
Procurar
Top dos mais postadores
| Power Max |
| |||
| joram |
| |||
| Wings [In Memoriam] |
| |||
| caedurodrigues |
| |||
| Amigo Brasileiro |
| |||
| luizvilarinho |
| |||
| Danii |
| |||
| Admin |
| |||
| Danilo Marsaro |
| |||
| Andreata |
|
Computador Lento + Vírus??
3 participantes
Página 1 de 1
Computador Lento + Vírus??
por brunahhdm Seg 12 maio 2014, 14:26
Olá galera me recomendaram esse fórum e eu andei vendo uns topicos e me interessei muito *-* espero que eu encontre ajuda aqui..
Estou tendo uns problemas com o meu computador, ele anda um pouco lento e até estranho... por exemplo há um tempo atrás o google chrome estava abrindo umas páginas do melondrea e mywebfind, sempre que eu abro o google chrome vem a página inicial do iminent e eu não sei o que fazer, apesar que o melondrea ja sumiu D=
E tipo a minha net é de 8MB e faz downloads a cerca de 900kb/s e para carregar um vídeo no youtube também vai super rápido, só que pra navegar em páginas comuns da internet anda um pouco lento e eu não sei ao certo o que é isso...
Não queroformatar o pc pq o windows é original e eu vou ter muuuito trabalho...
Vocês poderiam por favor me recomendar algum programa e me passar instruções para fazer uma varredura completa no meu computador e então remover todos os malwares/spywares que andam por aqui?
(desculpe se o topico está no lugar errado)
Obrigada
Estou tendo uns problemas com o meu computador, ele anda um pouco lento e até estranho... por exemplo há um tempo atrás o google chrome estava abrindo umas páginas do melondrea e mywebfind, sempre que eu abro o google chrome vem a página inicial do iminent e eu não sei o que fazer, apesar que o melondrea ja sumiu D=
E tipo a minha net é de 8MB e faz downloads a cerca de 900kb/s e para carregar um vídeo no youtube também vai super rápido, só que pra navegar em páginas comuns da internet anda um pouco lento e eu não sei ao certo o que é isso...
Não queroformatar o pc pq o windows é original e eu vou ter muuuito trabalho...
Vocês poderiam por favor me recomendar algum programa e me passar instruções para fazer uma varredura completa no meu computador e então remover todos os malwares/spywares que andam por aqui?
(desculpe se o topico está no lugar errado)
Obrigada
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por Power Max Seg 12 maio 2014, 14:34
Oi Bruna. Seja bem vinda ao Fórum PC Brasil.Baixe o programa Adwcleaner clicando no link abaixo e depois clique no botão Download Now @BleepingComputer:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executar corretamente o AdwCleaner é só seguir as dicas deste tutorial:[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Na sua próxima resposta poste o log (relatório) do Adwcleaner que estará em C:\AdwCleaner\AdwCleaner[S0].txt
Ficamos na espera.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: Computador Lento + Vírus??
por brunahhdm Seg 12 maio 2014, 15:20
# AdwCleaner v3.208 - Relatório criado 12/05/2014 às 15:11:15
# Atualizado 11/05/2014 por Xplode
# Sistema Operacional : Windows 8.1 Single Language (64 bits)
# Usuário : bruna - BRUNA
# Executando de : C:\Users\mel\Downloads\AdwCleaner.exe
# Opção : Limpar
***** [ Serviços ] *****
Serviço Deletada : hlnfd
[#] Serviço Deletada : pricemeterliveUpdate
[#] Serviço Deletada : pricemeterliveUpdatem
Serviço Deletada : SProtection
Serviço Deletada : xmkysecqun64
***** [ Arquivos / Pastas ] *****
Pasta Deletada : C:\ProgramData\baidu
[!] Pasta Deletada : C:\ProgramData\PriceMeterLiveUpdate
Pasta Deletada : C:\ProgramData\simplitec
Pasta Deletada : C:\ProgramData\safeweb
Pasta Deletada : C:\ProgramData\seaveonShare
Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
[!] Pasta Deletada : C:\Program Files (x86)\PriceMeterLiveUpdate
Pasta Deletada : C:\Program Files (x86)\simplitec
Pasta Deletada : C:\Program Files (x86)\safeweb
Pasta Deletada : C:\Program Files (x86)\Common Files\Umbrella
Pasta Deletada : C:\Program Files\003
Pasta Deletada : C:\Users\mel\AppData\Local\Genesis
[!] Pasta Deletada : C:\Users\mel\AppData\Local\Pokki
Pasta Deletada : C:\Users\mel\AppData\Local\PriceMeter
Pasta Deletada : C:\Users\mel\AppData\Local\PriceMeterLiveUpdate
Pasta Deletada : C:\Users\mel\AppData\Local\Temp\Iminent
Pasta Deletada : C:\Users\mel\AppData\LocalLow\seaveonShare
Pasta Deletada : C:\Users\mel\AppData\Roaming\337
Pasta Deletada : C:\Users\mel\AppData\Roaming\baidu
Pasta Deletada : C:\Users\mel\AppData\Roaming\PriceMeterUpdater
Pasta Deletada : C:\Users\mel\AppData\Roaming\simplitec
Pasta Deletada : C:\Users\mel\AppData\Roaming\Systweak
Pasta Deletada : C:\Users\mel\AppData\Roaming\Tencent
Pasta Deletada : C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter
Pasta Deletada : C:\Users\mel\Desktop\Tuto
Pasta Deletada : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\Extensions\ffxtlbr@iminent.com
Pasta Deletada : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\Extensions\mbna@yyylfpakc.com
Arquivo Deletada : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\Extensions\webbooster@iminent.com.xpi
Arquivo Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
Arquivo Deletada : C:\WINDOWS\System32\Drivers\{c047df5e-0fda-4055-b5db-a96a8a34a094}Gw64.sys
Arquivo Deletada : C:\WINDOWS\System32\roboot64.exe
Arquivo Deletada : C:\Users\mel\daemonprocess.txt
Arquivo Deletada : C:\Users\mel\AppData\Roaming\LiveSupport.exe_log.txt
Arquivo Deletada : C:\Users\mel\AppData\Roaming\regsvr32.exe_log.txt
Arquivo Deletada : C:\Program Files (x86)\Mozilla Firefox\defaults\pref\all-iminent.js
Arquivo Deletada : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\StartWeb.xml
Arquivo Deletada : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\user.js
Arquivo Deletada : C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemeterdownloader
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemetertask
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterUpdater.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterUpdater
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemeterwatcher
***** [ Atalhos ] *****
***** [ Registro ] *****
Valor Deletedo : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [gethighlightly@gethighlightly.com]
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
Chave Deletedo : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Chave Deletedo : HKCU\Software\Classes\Directory\shell\pokki
Chave Deletedo : HKCU\Software\Classes\Drive\shell\pokki
Chave Deletedo : HKCU\Software\Classes\lnkfile\shell\pokki
Chave Deletedo : HKCU\Software\Classes\pokki
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [genesis]
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [PriceMeterW]
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickCtrl.9
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickProcessLauncherMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickProcessLauncherMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.Update3WebControl.3
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoCreateAsync
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoCreateAsync.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreClass
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreMachineClass
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreMachineClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CredentialDialogMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CredentialDialogMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachineFallback
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.ProcessLauncher
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.ProcessLauncher.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3COMClassService
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3COMClassService.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachineFallback
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachineFallback.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=3
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=9
Chave Deletedo : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-4606583622
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{e9f32388}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Chave Deletedo : HKCU\Software\AVG Secure Search
Chave Deletedo : HKCU\Software\b1.org
Chave Deletedo : HKCU\Software\genesis
Chave Deletedo : HKCU\Software\Iminent
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\Pokki
Chave Deletedo : HKCU\Software\RegisteredApplicationsEx
Chave Deletedo : HKCU\Software\Softonic
Chave Deletedo : HKCU\Software\systweak
Chave Deletedo : HKCU\Software\TutoTag
Chave Deletedo : HKCU\Software\AppDataLow\Software\Rr Savings
Chave Deletedo : HKCU\Software\AppDataLow\Software\Supra Savings
Chave Deletedo : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Deletedo : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Chave Deletedo : HKLM\Software\b1.org
Chave Deletedo : HKLM\Software\hdcode
Chave Deletedo : HKLM\Software\simplitec
Chave Deletedo : HKLM\Software\suprasavings
Chave Deletedo : HKLM\Software\systweak
Chave Deletedo : HKLM\Software\Tutorials
Chave Deletedo : HKLM\Software\Umbrella
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\genesis
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_83453a3d886e527a470b5bb8291dd338de4b1e44
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Price Metar
Chave Deletedo : [x64] HKLM\SOFTWARE\b1.org
Chave Deletedo : [x64] HKLM\SOFTWARE\LevelQualityWatcher
Chave Deletedo : [x64] HKLM\SOFTWARE\suprasavings
Dados Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\GSSUPP~1\ASSIST~2.DLL
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DatamngrCoordinator.exe
***** [ Navegadores ] *****
-\\ Internet Explorer v11.0.9600.17037
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v28.0 (pt-BR)
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
Linha deletada : user_pref("extensions.boFn7stwz.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"s[...]
Linha deletada : user_pref("iminent.searchindex", "1");
Linha deletada : user_pref("iminent.newtabredirect", "true");
Linha deletada : user_pref("iminent.nomsi", "true");
Linha deletada : user_pref("iminent.enabledAds", "false");
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
-\\ Google Chrome v34.0.1847.131
[ Arquivo : C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deletedo [Startup_urls] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
[ Arquivo : C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [118755 octets] - [12/05/2014 15:07:39]
AdwCleaner[S0].txt - [14441 octets] - [12/05/2014 15:11:15]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14502 octets] ##########
# Atualizado 11/05/2014 por Xplode
# Sistema Operacional : Windows 8.1 Single Language (64 bits)
# Usuário : bruna - BRUNA
# Executando de : C:\Users\mel\Downloads\AdwCleaner.exe
# Opção : Limpar
***** [ Serviços ] *****
Serviço Deletada : hlnfd
[#] Serviço Deletada : pricemeterliveUpdate
[#] Serviço Deletada : pricemeterliveUpdatem
Serviço Deletada : SProtection
Serviço Deletada : xmkysecqun64
***** [ Arquivos / Pastas ] *****
Pasta Deletada : C:\ProgramData\baidu
[!] Pasta Deletada : C:\ProgramData\PriceMeterLiveUpdate
Pasta Deletada : C:\ProgramData\simplitec
Pasta Deletada : C:\ProgramData\safeweb
Pasta Deletada : C:\ProgramData\seaveonShare
Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec
[!] Pasta Deletada : C:\Program Files (x86)\PriceMeterLiveUpdate
Pasta Deletada : C:\Program Files (x86)\simplitec
Pasta Deletada : C:\Program Files (x86)\safeweb
Pasta Deletada : C:\Program Files (x86)\Common Files\Umbrella
Pasta Deletada : C:\Program Files\003
Pasta Deletada : C:\Users\mel\AppData\Local\Genesis
[!] Pasta Deletada : C:\Users\mel\AppData\Local\Pokki
Pasta Deletada : C:\Users\mel\AppData\Local\PriceMeter
Pasta Deletada : C:\Users\mel\AppData\Local\PriceMeterLiveUpdate
Pasta Deletada : C:\Users\mel\AppData\Local\Temp\Iminent
Pasta Deletada : C:\Users\mel\AppData\LocalLow\seaveonShare
Pasta Deletada : C:\Users\mel\AppData\Roaming\337
Pasta Deletada : C:\Users\mel\AppData\Roaming\baidu
Pasta Deletada : C:\Users\mel\AppData\Roaming\PriceMeterUpdater
Pasta Deletada : C:\Users\mel\AppData\Roaming\simplitec
Pasta Deletada : C:\Users\mel\AppData\Roaming\Systweak
Pasta Deletada : C:\Users\mel\AppData\Roaming\Tencent
Pasta Deletada : C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PriceMeter
Pasta Deletada : C:\Users\mel\Desktop\Tuto
Pasta Deletada : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\Extensions\ffxtlbr@iminent.com
Pasta Deletada : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\Extensions\mbna@yyylfpakc.com
Arquivo Deletada : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\Extensions\webbooster@iminent.com.xpi
Arquivo Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk
Arquivo Deletada : C:\WINDOWS\System32\Drivers\{c047df5e-0fda-4055-b5db-a96a8a34a094}Gw64.sys
Arquivo Deletada : C:\WINDOWS\System32\roboot64.exe
Arquivo Deletada : C:\Users\mel\daemonprocess.txt
Arquivo Deletada : C:\Users\mel\AppData\Roaming\LiveSupport.exe_log.txt
Arquivo Deletada : C:\Users\mel\AppData\Roaming\regsvr32.exe_log.txt
Arquivo Deletada : C:\Program Files (x86)\Mozilla Firefox\defaults\pref\all-iminent.js
Arquivo Deletada : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\StartWeb.xml
Arquivo Deletada : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\user.js
Arquivo Deletada : C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemeterdownloader
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineCore
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterLiveUpdateUpdateTaskMachineUA
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemetertask
Arquivo Deletada : C:\WINDOWS\Tasks\PriceMeterUpdater.job
Arquivo Deletada : C:\WINDOWS\System32\Tasks\PriceMeterUpdater
Arquivo Deletada : C:\WINDOWS\System32\Tasks\pricemeterwatcher
***** [ Atalhos ] *****
***** [ Registro ] *****
Valor Deletedo : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [gethighlightly@gethighlightly.com]
Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
Chave Deletedo : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
Chave Deletedo : HKCU\Software\Classes\Directory\shell\pokki
Chave Deletedo : HKCU\Software\Classes\Drive\shell\pokki
Chave Deletedo : HKCU\Software\Classes\lnkfile\shell\pokki
Chave Deletedo : HKCU\Software\Classes\pokki
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [genesis]
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Valor Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [PriceMeterW]
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickCtrl.9
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickProcessLauncherMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.OneClickProcessLauncherMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdate.Update3WebControl.3
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoCreateAsync
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoCreateAsync.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreClass
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreMachineClass
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CoreMachineClass.1
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CredentialDialogMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.CredentialDialogMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachineFallback
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.OnDemandCOMClassSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.ProcessLauncher
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.ProcessLauncher.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3COMClassService
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3COMClassService.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachine
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachine.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachineFallback
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebMachineFallback.1.0
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebSvc
Chave Deletedo : HKLM\SOFTWARE\Classes\PriceMeterLiveUpdateUpdate.Update3WebSvc.1.0
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=3
Chave Deletedo : HKLM\SOFTWARE\MozillaPlugins\@tools.updatepm.com/PriceMeterLiveUpdate Update;version=9
Chave Deletedo : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-4606583622
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{e9f32388}
Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Chave Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Chave Deletedo : HKCU\Software\AVG Secure Search
Chave Deletedo : HKCU\Software\b1.org
Chave Deletedo : HKCU\Software\genesis
Chave Deletedo : HKCU\Software\Iminent
Chave Deletedo : HKCU\Software\InstallCore
Chave Deletedo : HKCU\Software\Pokki
Chave Deletedo : HKCU\Software\RegisteredApplicationsEx
Chave Deletedo : HKCU\Software\Softonic
Chave Deletedo : HKCU\Software\systweak
Chave Deletedo : HKCU\Software\TutoTag
Chave Deletedo : HKCU\Software\AppDataLow\Software\Rr Savings
Chave Deletedo : HKCU\Software\AppDataLow\Software\Supra Savings
Chave Deletedo : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chave Deletedo : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chave Deletedo : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Chave Deletedo : HKLM\Software\b1.org
Chave Deletedo : HKLM\Software\hdcode
Chave Deletedo : HKLM\Software\simplitec
Chave Deletedo : HKLM\Software\suprasavings
Chave Deletedo : HKLM\Software\systweak
Chave Deletedo : HKLM\Software\Tutorials
Chave Deletedo : HKLM\Software\Umbrella
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\genesis
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_83453a3d886e527a470b5bb8291dd338de4b1e44
Chave Deletedo : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Price Metar
Chave Deletedo : [x64] HKLM\SOFTWARE\b1.org
Chave Deletedo : [x64] HKLM\SOFTWARE\LevelQualityWatcher
Chave Deletedo : [x64] HKLM\SOFTWARE\suprasavings
Dados Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\GSSUPP~1\ASSIST~2.DLL
Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DatamngrCoordinator.exe
***** [ Navegadores ] *****
-\\ Internet Explorer v11.0.9600.17037
Configurações Restauradas : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v28.0 (pt-BR)
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
Linha deletada : user_pref("extensions.boFn7stwz.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"s[...]
Linha deletada : user_pref("iminent.searchindex", "1");
Linha deletada : user_pref("iminent.newtabredirect", "true");
Linha deletada : user_pref("iminent.nomsi", "true");
Linha deletada : user_pref("iminent.enabledAds", "false");
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
[ Arquivo : C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js ]
-\\ Google Chrome v34.0.1847.131
[ Arquivo : C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deletedo [Startup_urls] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
[ Arquivo : C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [118755 octets] - [12/05/2014 15:07:39]
AdwCleaner[S0].txt - [14441 octets] - [12/05/2014 15:11:15]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14502 octets] ##########
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por Power Max Seg 12 maio 2014, 15:22
Desative temporariamente seu antivírus para evitar conflitos.
* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executá-lo corretamente siga as dicas deste tutorial:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.
* Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executá-lo corretamente siga as dicas deste tutorial:[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Assim que ele concluir a limpeza dos problemas acesse o log (relatório) do Zoek que estará em C:\zoek-results.txt e copie todo seu conteúdo e poste em sua próxima resposta.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: Computador Lento + Vírus??
por brunahhdm Seg 12 maio 2014, 16:04
Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by bruna on 12/05/2014 at 15:33:56,57.
Microsoft Windows 8.1 Single Language 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\mel\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
12/05/2014 15:35:48 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2481689253-1749219744-2318315373-1001\Software\Microsoft\Internet Explorer\SearchScopes\{8722E16B-04B4-488F-AC58-244FB160E999} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util melondrea deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util melondrea deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update melondrea deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update melondrea deleted successfully
==== FireFox Fix ======================
Deleted from C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js:
user_pref("browser.search.selectedEngine", "StartWeb");
Added to C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
ProfilePath: C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default
user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 1);
---- Lines extensions.boFn7stwz removed from prefs.js ----
user_pref("extensions.boFn7stwz.epoch", "1396888685");
user_pref("extensions.boFn7stwz.url", "http://toolkitfree.us/sync2/?q=hfZ9ofq7D7sMCyVUojw8rHUMg708BNmGWj8ckShGheDUojw9rdnEqdaErdn8qihIC7n0rjnEqda7rjgH
---- FireFox user.js and prefs.js backups ----
prefs_052014_1542_.backup
==== Deleting Files \ Folders ======================
C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted
C:\Users\mel\AppData\LocalLow\{78075169-26D1-DAEB-94BC-6625F8835E33} deleted
C:\Users\mel\AppData\LocalLow\{EF2CD1AF-F03E-135A-6A67-2A8358C6EDD1} deleted
C:\Users\mel\AppData\Local\Packages\windows_ie_ac_001\AC\{78075169-26D1-DAEB-94BC-6625F8835E33} deleted
C:\Users\mel\AppData\Local\Packages\windows_ie_ac_001\AC\{EF2CD1AF-F03E-135A-6A67-2A8358C6EDD1} deleted
C:\PROGRA~3\dbfdc4d4d235ae0b deleted
C:\Users\mel\.android deleted
C:\PROGRA~2\DigiiCooaupoN deleted
C:\PROGRA~2\GS Supporter deleted
C:\found.000 deleted
C:\PROGRA~3\FileSplitUpLoad.dll deleted
C:\PROGRA~3\ProductData deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\PROGRA~3\SummerSoft deleted
C:\Users\mel\AppData\Local\Pokki deleted
C:\Users\mel\AppData\Local\cache deleted
C:\Users\mel\Downloads\SoftonicDownloader_para_point-blank.exe deleted
C:\Users\mel\Downloads\SoftonicDownloader_para_slender.exe deleted
C:\windows\SysNative\tasks\Baidu Antivirus Update deleted
C:\WINDOWS\SysWow64\AI_RecycleBin deleted
C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\extensions\staged deleted
==== Firefox Extensions ======================
ProfilePath: C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default
- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default
84A176D49D40379AEDF123008E27BA33 - C:\Users\mel\AppData\Roaming\raidcall\plugins\nprcplugin.dll - Raidcall plugin
5174E3BE46B2CCCDAF9CEB5B622CEA9B - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1209149.dll - Shockwave for Director / Shockwave for Director
DDC58F83CB93B89F7261CDFCFC6E7832 - C:\Users\mel\AppData\Roaming\rcru\plugins\nprcplugin.dll - Raidcall plugin
C47AC87A8E29E0E51917F5AD99688D84 - C:\Users\mel\AppData\Local\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll - alibaba setup one click
2147C8ED020B1CE3B82BBDD3C49C8F81 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll - WacomTabletPlugin
==== Chrome Look ======================
safeweb - Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Administrador\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - bruna\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - bruna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - bruna\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - bruna\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Convidado\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
Ask Toolbar - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aaaalipaokhkccgmgkdglfinfnfhflko
Comodo DragDrop Service - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aneodkojaglhnkkdbbdnmmmgimlcaogo
Comodo Web Inspector - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn
PrivDog - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
Comodo Share Page Service - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mcmdgbiocnkpnaccjkailibfgepaccgf
Google Wallet - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Google Docs - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Wallet - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
==== Chrome Fix ======================
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aaaalipaokhkccgmgkdglfinfnfhflko deleted successfully
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_aaaalipaokhkccgmgkdglfinfnfhflko_0.localstorage deleted successfully
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_aaaalipaokhkccgmgkdglfinfnfhflko_0.localstorage-journal deleted successfully
C:\Users\Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Administrador\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\bruna\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\bruna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\bruna\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\bruna\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Convidado\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://start.iminent.com/?appId=00000000-0000-0000-0000-000000000000"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} @ieframe.dll,-12512 Url="http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
==== Reset Google Chrome ======================
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Preferences was reset successfully
C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Web Data was reset successfully
C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== shortcuts on Users Desktops ======================
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
Tool run by bruna on 12/05/2014 at 15:33:56,57.
Microsoft Windows 8.1 Single Language 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\mel\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
12/05/2014 15:35:48 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2481689253-1749219744-2318315373-1001\Software\Microsoft\Internet Explorer\SearchScopes\{8722E16B-04B4-488F-AC58-244FB160E999} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util melondrea deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util melondrea deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update melondrea deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update melondrea deleted successfully
==== FireFox Fix ======================
Deleted from C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js:
user_pref("browser.search.selectedEngine", "StartWeb");
Added to C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
ProfilePath: C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default
user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 1);
---- Lines extensions.boFn7stwz removed from prefs.js ----
user_pref("extensions.boFn7stwz.epoch", "1396888685");
user_pref("extensions.boFn7stwz.url", "http://toolkitfree.us/sync2/?q=hfZ9ofq7D7sMCyVUojw8rHUMg708BNmGWj8ckShGheDUojw9rdnEqdaErdn8qihIC7n0rjnEqda7rjgH
---- FireFox user.js and prefs.js backups ----
prefs_052014_1542_.backup
==== Deleting Files \ Folders ======================
C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted
C:\Users\mel\AppData\LocalLow\{78075169-26D1-DAEB-94BC-6625F8835E33} deleted
C:\Users\mel\AppData\LocalLow\{EF2CD1AF-F03E-135A-6A67-2A8358C6EDD1} deleted
C:\Users\mel\AppData\Local\Packages\windows_ie_ac_001\AC\{78075169-26D1-DAEB-94BC-6625F8835E33} deleted
C:\Users\mel\AppData\Local\Packages\windows_ie_ac_001\AC\{EF2CD1AF-F03E-135A-6A67-2A8358C6EDD1} deleted
C:\PROGRA~3\dbfdc4d4d235ae0b deleted
C:\Users\mel\.android deleted
C:\PROGRA~2\DigiiCooaupoN deleted
C:\PROGRA~2\GS Supporter deleted
C:\found.000 deleted
C:\PROGRA~3\FileSplitUpLoad.dll deleted
C:\PROGRA~3\ProductData deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\Package Cache deleted
C:\PROGRA~3\SummerSoft deleted
C:\Users\mel\AppData\Local\Pokki deleted
C:\Users\mel\AppData\Local\cache deleted
C:\Users\mel\Downloads\SoftonicDownloader_para_point-blank.exe deleted
C:\Users\mel\Downloads\SoftonicDownloader_para_slender.exe deleted
C:\windows\SysNative\tasks\Baidu Antivirus Update deleted
C:\WINDOWS\SysWow64\AI_RecycleBin deleted
C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\extensions\staged deleted
==== Firefox Extensions ======================
ProfilePath: C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default
- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default
84A176D49D40379AEDF123008E27BA33 - C:\Users\mel\AppData\Roaming\raidcall\plugins\nprcplugin.dll - Raidcall plugin
5174E3BE46B2CCCDAF9CEB5B622CEA9B - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1209149.dll - Shockwave for Director / Shockwave for Director
DDC58F83CB93B89F7261CDFCFC6E7832 - C:\Users\mel\AppData\Roaming\rcru\plugins\nprcplugin.dll - Raidcall plugin
C47AC87A8E29E0E51917F5AD99688D84 - C:\Users\mel\AppData\Local\Alibaba\AliSetup\0.1.0.52\npAliSetupOneClick.dll - alibaba setup one click
2147C8ED020B1CE3B82BBDD3C49C8F81 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll - WacomTabletPlugin
==== Chrome Look ======================
safeweb - Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Administrador\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - bruna\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - bruna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - bruna\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - bruna\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - Convidado\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
safeweb - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca
Ask Toolbar - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aaaalipaokhkccgmgkdglfinfnfhflko
Comodo DragDrop Service - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aneodkojaglhnkkdbbdnmmmgimlcaogo
Comodo Web Inspector - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn
PrivDog - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
Comodo Share Page Service - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mcmdgbiocnkpnaccjkailibfgepaccgf
Google Wallet - mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Google Docs - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Wallet - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - mel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
==== Chrome Fix ======================
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aaaalipaokhkccgmgkdglfinfnfhflko deleted successfully
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_aaaalipaokhkccgmgkdglfinfnfhflko_0.localstorage deleted successfully
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_aaaalipaokhkccgmgkdglfinfnfhflko_0.localstorage-journal deleted successfully
C:\Users\Administrador\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Administrador\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Administrador\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\bruna\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\bruna\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\bruna\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\bruna\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Convidado\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Convidado\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\Convidado\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\cmedfdkbehfchenfakhlpiahfkgignca deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://start.iminent.com/?appId=00000000-0000-0000-0000-000000000000"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} @ieframe.dll,-12512 Url="http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
==== Reset Google Chrome ======================
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Preferences was reset successfully
C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Web Data was reset successfully
C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== shortcuts on Users Desktops ======================
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por brunahhdm Seg 12 maio 2014, 16:07
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por brunahhdm Seg 12 maio 2014, 16:08
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
==== shortcuts on All Users Desktop ======================
C:\Users\Public\Desktop\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\Public\Desktop\Avira.lnk - C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe /showMiniGui
C:\Users\Public\Desktop\Comodo Dragon.lnk - C:\Program Files (x86)\Comodo\Dragon\dragon.exe
C:\Users\Public\Desktop\Driver Booster.lnk - C:\Program Files (x86)\IObit\Driver Booster\SkipUacExec.exe
C:\Users\Public\Desktop\IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe
==== shortcuts in Users Start Menu ======================
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
C:\Users\mel\Desktop\Bruna\Adobe Creative Cloud.lnk - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --appletID=HomePanel_BL --appletVersion=1.0
C:\Users\mel\Desktop\Bruna\farcry3 - Atalho.lnk - C:\Program Files (x86)\Ubisoft\FarCry 3\bin\farcry3.exe -language portuguese -offline
C:\Users\mel\Desktop\Bruna\Warface.lnk - C:\Level Up Games\Warface\Launcher\Launcher.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Access 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Excel 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Designer 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe /design
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft InfoPath Filler 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft OneNote 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Outlook 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft PowerPoint 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Publisher 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
C:\Users\mel\Desktop\Bruna\Programas\Microsoft Office\Microsoft Word 2010.lnk - C:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
==== shortcuts on All Users Desktop ======================
C:\Users\Public\Desktop\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\Public\Desktop\Avira.lnk - C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe /showMiniGui
C:\Users\Public\Desktop\Comodo Dragon.lnk - C:\Program Files (x86)\Comodo\Dragon\dragon.exe
C:\Users\Public\Desktop\Driver Booster.lnk - C:\Program Files (x86)\IObit\Driver Booster\SkipUacExec.exe
C:\Users\Public\Desktop\IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe
==== shortcuts in Users Start Menu ======================
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por brunahhdm Seg 12 maio 2014, 16:09
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
==== shortcuts in All Users Start Menu ======================
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7\Desinstalar Advanced SystemCare.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7\Toolbox.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /toolbox
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7\Turbo Boost.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /turboboost
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Avira Free Antivirus.lnk - C:\Program Files (x86)\Avira\AntiVir Desktop\avwin.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Avira na Internet.lnk - C:\Program Files (x86)\Avira\AntiVir Desktop\weblink.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Iniciar Avira Free Antivirus.lnk - C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\My Avira\Avira.lnk - C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe /showMiniGui
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clownfish\Clownfish.lnk - C:\Program Files (x86)\Clownfish\Clownfish.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clownfish\Uninstall.lnk - C:\Program Files (x86)\Clownfish\uninstall.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo\Dragon\Comodo Dragon.lnk - C:\Program Files (x86)\Comodo\Dragon\dragon.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo\Dragon\Uninstall Comodo Dragon.lnk - C:\Program Files (x86)\Comodo\Dragon\uninstall.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster\Desinstalar Driver Booster.lnk - C:\Program Files (x86)\IObit\Driver Booster\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster\Driver Booster.lnk - C:\Program Files (x86)\IObit\Driver Booster\SkipUacExec.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\Help.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\help.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\Uninstall IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallDisplay.exe uninstall_start
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Level Up\Combat Arms.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin.lnk - C:\Program Files (x86)\Origin\Origin.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Relatório de Erro Origin.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony\Vegas Pro 11.0\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony\Vegas Pro 11.0\Vegas Pro 11.0 Readme.lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\Readme\Vegas_readme.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony\Vegas Pro 11.0\Video Capture 6.0 Readme.lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\Readme\Videocapture_readme.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Alternate Start.lnk - C:\Program Files\SUPERAntiSpyware\RUNSAS.EXE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Help.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Professional.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Registration-Activation.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe /register
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xara\Xara 3D Maker 7\Uninstall Xara 3D Maker 7.lnk - C:\Program Files (x86)\Xara\Xara_3D_Maker_7\Xara_3D_Maker_7_en-GB_setup.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xara\Xara 3D Maker 7\Xara 3D Maker 7 Help.lnk - C:\Program Files (x86)\Xara\Xara_3D_Maker_7\System\Xara3D.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xara\Xara 3D Maker 7\Xara 3D Maker 7.lnk - C:\Program Files (x86)\Xara\Xara_3D_Maker_7\X3D.exe
==== shortcuts in Quick Launch ======================
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPENf22abfeae27a67446927d078890381efc546d3e1
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pixsta.lnk - C:\Users\mel\AppData\Local\Pokki\Engine\pokki.exe /OPEN83453a3d886e527a470b5bb8291dd338de4b1e44
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Compre Aeria Points.lnk - C:\AeriaGames\ShaiyaPT\Get Aeria Points.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Desinstalar.lnk - C:\AeriaGames\ShaiyaPT\Uninst.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Jogue Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\aeria_launcher.exe sypt
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Option.lnk - C:\AeriaGames\ShaiyaPT\CONFIG.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames\Shaiya PT\Website de Shaiya PT.lnk - C:\AeriaGames\ShaiyaPT\Shaiya PT Website.URL
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps\Uninstall.lnk - C:\Fraps\uninstall.exe
C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TweetDeck\TweetDeck.lnk - C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe
==== shortcuts in All Users Start Menu ======================
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7\Desinstalar Advanced SystemCare.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7\Toolbox.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /toolbox
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7\Turbo Boost.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /turboboost
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Avira Free Antivirus.lnk - C:\Program Files (x86)\Avira\AntiVir Desktop\avwin.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Avira na Internet.lnk - C:\Program Files (x86)\Avira\AntiVir Desktop\weblink.url
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\Avira Desktop\Iniciar Avira Free Antivirus.lnk - C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira\My Avira\Avira.lnk - C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe /showMiniGui
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clownfish\Clownfish.lnk - C:\Program Files (x86)\Clownfish\Clownfish.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clownfish\Uninstall.lnk - C:\Program Files (x86)\Clownfish\uninstall.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo\Dragon\Comodo Dragon.lnk - C:\Program Files (x86)\Comodo\Dragon\dragon.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo\Dragon\Uninstall Comodo Dragon.lnk - C:\Program Files (x86)\Comodo\Dragon\uninstall.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster\Desinstalar Driver Booster.lnk - C:\Program Files (x86)\IObit\Driver Booster\unins000.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster\Driver Booster.lnk - C:\Program Files (x86)\IObit\Driver Booster\SkipUacExec.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\Help.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\help.html
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\Uninstall IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallDisplay.exe uninstall_start
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Level Up\Combat Arms.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin.lnk - C:\Program Files (x86)\Origin\Origin.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Relatório de Erro Origin.lnk -
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony\Vegas Pro 11.0\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony\Vegas Pro 11.0\Vegas Pro 11.0 Readme.lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\Readme\Vegas_readme.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony\Vegas Pro 11.0\Video Capture 6.0 Readme.lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\Readme\Videocapture_readme.htm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Alternate Start.lnk - C:\Program Files\SUPERAntiSpyware\RUNSAS.EXE
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Help.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Professional.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Registration-Activation.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe /register
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xara\Xara 3D Maker 7\Uninstall Xara 3D Maker 7.lnk - C:\Program Files (x86)\Xara\Xara_3D_Maker_7\Xara_3D_Maker_7_en-GB_setup.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xara\Xara 3D Maker 7\Xara 3D Maker 7 Help.lnk - C:\Program Files (x86)\Xara\Xara_3D_Maker_7\System\Xara3D.chm
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xara\Xara 3D Maker 7\Xara 3D Maker 7.lnk - C:\Program Files (x86)\Xara\Xara_3D_Maker_7\X3D.exe
==== shortcuts in Quick Launch ======================
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por brunahhdm Seg 12 maio 2014, 16:10
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
==== Reset IE Proxy ======================
Value(s) before fix:
"ProxyServer"="http=127.0.0.1:51183;https=127.0.0.1:51183"
"ProxyOverride"="<-loopback>"
"ProxyEnable"=dword:00000001
Value(s) after fix:
"ProxyEnable"=dword:00000000
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\d8e3078a-9630-4046-a77b-03ffc01c7380 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90666C9F-FC7B-0B74-57EE-6908EBE76651} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{497C131E-2032-051B-B32A-C69A960FBB13} deleted successfully
==== Empty IE Cache ======================
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\mel\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\mel\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully
C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=404 folders=180 16862717 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\mel\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
PRONTO
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Autodesk SketchBookPro 2011.lnk - C:\Program Files (x86)\Autodesk\SketchBookPro2011\SketchBookPro.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Bandicam.lnk - C:\Program Files (x86)\Bandicam\bdcam.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --profile-directory=Default
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70f62c6a7f1739bd\pinned.lnk - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\shell32.dll,Options_RunDLL 1
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Adobe Photoshop CC (64 Bit).lnk - C:\Program Files\Adobe\Adobe Photoshop CC (64 Bit)\Photoshop.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare 7.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe /manual
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\aTube Catcher.lnk - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\WINDOWS\system32\calc.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\CINEMA 4D ®.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Command Prompt.lnk - C:\WINDOWS\system32\cmd.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Fraps.lnk - C:\Fraps\fraps.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\iTunes.lnk - C:\Program Files (x86)\iTunes\iTunes.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk - C:\WINDOWS\system32\mspaint.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaintTool SAI .lnk - C:\Program Files (x86)\Eddie Sekiguchi Softwares\PaintTool SAI\sai.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\TweetDeck.lnk - C:\Users\mel\AppData\Roaming\Microsoft\Installer\{6848C97D-3728-4199-A70D-817E65D96ECC}\TweetDeck.exe
C:\Users\mel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Vegas Pro 11.0 (64-bit).lnk - C:\Program Files (x86)\Sony\Vegas Pro 11.0\vegas110.exe
==== Reset IE Proxy ======================
Value(s) before fix:
"ProxyServer"="http=127.0.0.1:51183;https=127.0.0.1:51183"
"ProxyOverride"="<-loopback>"
"ProxyEnable"=dword:00000001
Value(s) after fix:
"ProxyEnable"=dword:00000000
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\d8e3078a-9630-4046-a77b-03ffc01c7380 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90666C9F-FC7B-0B74-57EE-6908EBE76651} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{497C131E-2032-051B-B32A-C69A960FBB13} deleted successfully
==== Empty IE Cache ======================
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\mel\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\mel\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\Users\mel\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully
C:\Users\mel\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=404 folders=180 16862717 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\mel\AppData\Local\Temp will be emptied at reboot
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\USURIO~1\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
PRONTO
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por Power Max Seg 12 maio 2014, 16:13
Baixe o programa Junkware Removal Tool no link abaixo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executar corretamente o programa acima é só seguir as dicas deste tutorial:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt
Ficamos na espera.
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Para executar corretamente o programa acima é só seguir as dicas deste tutorial:[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Na sua próxima resposta poste o log (relatório) do Junkware Removal Tool que estará salvo em sua área de trabalho com o nome de JRT.txt
Ficamos na espera.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: Computador Lento + Vírus??
por brunahhdm Seg 12 maio 2014, 17:25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Single Language x64
Ran by bruna on 12/05/2014 at 17:20:12,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskDragonSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskDragonSetup_RASAPI32
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12/05/2014 at 17:23:10,62
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Single Language x64
Ran by bruna on 12/05/2014 at 17:20:12,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskDragonSetup_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskDragonSetup_RASAPI32
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12/05/2014 at 17:23:10,62
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por Power Max Seg 12 maio 2014, 17:35
Faça o download do < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > < [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ... de Nicolas Coolman )Para instalá-lo e executá-lo corretamente siga as dicas deste artigo:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
* Assim que ele concluir a sua verificação, copie todo o conteúdo do seu relatório ZHPDiag.txt e poste em sua próxima resposta.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: Computador Lento + Vírus??
por brunahhdm Ter 13 maio 2014, 11:24
~ Relatório do ZHPDiag v2014.5.12.61 - Nicolas Coolman (12/05/2014)
~ Iniciado por bruna (13/05/2014 11:21:08)
~ Endereço do Website : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Blog de análise de software : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~ Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user
---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.17105
MFIE: Mozilla Firefox 28.0
GCIE: Google Chrome v34.0.1847.131
OBIE: Wacom WebTabletPlugin for Internet Explorer and Netscape v2.1.0.2
OPIE: Opera vStable 20.0.1387.91
---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 8.1 Single Language, 64-bit (Build 9600)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Softwares de proteçao do sistema
Avira Free Antivirus v14.0.3.350
SUPERAntiSpyware v5.7.1018
Windows Defender W8
---\\ Softwares d'optimização do sistema
CCleaner v4.08
---\\ Softwares de partilha do PeerToPeer (P2P)
Pando Media Booster v2.6.0.9
---\\ Monitoramento dos softwares
Adobe Flash Player 13 Plugin
Adobe Reader X
Java 7 Update 51
---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8156 MB (67% free)
System Restore: Activé (Enable)
System drive C: has 142 GB (31%) free of 450 GB
---\\ Modo de conexão ao sistema
~ Computer Name: BRUNA
~ User Name: bruna
~ All Users Names: UpdatusUser, Convidado, bruna, Administrador,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator
---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\mel\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\mel\AppData\Roaming\
~ %Desktop% : C:\Users\mel\Desktop\
~ %Favorites% : C:\Users\mel\Favorites\
~ %LocalAppData% : C:\Users\mel\AppData\Local\
~ %StartMenu% : C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 142 Go of 450 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Not Inserted)
---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 49 Legitimates Filtered in 00mn 00s
---\\ Pesquisa particular de ficheiros genéricos
[MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - Windows Explorer.) (.04/03/2014 - 09:25:49.) -- C:\Windows\Explorer.exe [2373784]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.22/08/2013 - 06:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.65C36A29A131A3A5D64B29FAC4EF6DD6] - (.Microsoft Corporation - Internet Extensions para Win32.) (.22/02/2014 - 06:11:56.) -- C:\Windows\System32\wininet.dll [2262016]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.22/02/2014 - 06:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.21/12/2013 - 05:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.239268BAB58EAE9A3FF4E08334C00451] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\AFD.sys [567296]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 09:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 08:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 05:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 06:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.03909BDBFF0DCACCABF2B2D4ADEE44DC] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.22/08/2013 - 08:38:38.) -- C:\Windows\system32\Drivers\HDAudBus.sys [78336]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Driver de porta i8042.) (.22/08/2013 - 08:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 09:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.C997E6A37BA8915224B3FB5024A34F69] - (.Microsoft Corporation - Minirdr SMB do Windows NT.) (.06/03/2014 - 06:20:23.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402944]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 08:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.20/03/2014 - 00:41:24.) -- C:\Windows\system32\Drivers\ntfs.sys [2013016]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Driver de porta paralela.) (.22/08/2013 - 08:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 08:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecionador do Dispositivo RDP da Microsoft.) (.30/09/2013 - 00:58:51.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.3595FBDF25F8BA6256072D103937D7D6] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.22/02/2014 - 12:44:13.) -- C:\Windows\system32\Drivers\volsnap.sys [311640]
~ Generic Processes: Scanned in 00mn 00s
---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 1/2999
~ Mes musiques (My Musics) : 1/955
~ Mes Videos (My Videos) : 2/124
~ Mes Favoris (My Favorites) : 1/4
~ Mes Documents (My Documents) : 1/204
~ Mon Bureau (My Desktop) : 3/9274
~ Menu demarrer (Programs) : 1/48
~ Hidden Files: Scanned in 00mn 38s
---\\ Processos lançados
[MD5.CDA339EEC2427447E6EB1D54C1B916F6] - (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4287536] [PID.4376]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.4012]
[MD5.CC78200C3ECFFA178E78308A0E160D80] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe [4672920] [PID.6836]
[MD5.ADDFB090DE67FB6251ABD242104BAEB5] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe [1270352] [PID.5376] =>P2P.BitTorrent
[MD5.5E32AEE9866C484D041AA1C0776D6976] - (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe [1313536] [PID.7408]
[MD5.EDBBDEBE0FDF577A647216C452773A90] - (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2288928] [PID.4132]
[MD5.C75A8A3D74CDD6552D22F197D3BBFF74] - (...) -- C:\Program Files (x86)\Megareg\MEGAREG.exe [27648] [PID.7492]
[MD5.FF4F87DCDAA5080281E0E70BB116086B] - (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376] [PID.7576]
[MD5.79C28DDF889C26FDD6162F796FD49BC4] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.420]
[MD5.542459D16B416D054161007FC9B1246E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032] [PID.7452]
[MD5.241B07FF7F5943B9C1BF3235F49AC1E1] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744] [PID.6900]
[MD5.D40F8C4F111B93EB36FEDF06FF8A1B69] - (.Avira Operations GmbH & Co. KG - Avira.OE.Systray.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352] [PID.7356]
[MD5.71738E5D624F00EFE56F7C35DB36267C] - (.Adobe Systems Incorporated - Adobe IPC Broker.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe [769904] [PID.1476]
[MD5.4B35BE5C6A1F3C91BD839220CEEBB1E2] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [815992] [PID.6252]
[MD5.4C2812958D3D4342FC21E47CC361D5C2] - (.No owner - Core Sync.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe [4696432] [PID.1156]
[MD5.AE9BC27D095C2F26E082C4B3D25921FE] - (.Adobe Systems Incorporated - Adobe CEF Helper.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe [395120] [PID.4212]
[MD5.077914F43279E41973EA54A61E41E0DB] - (.Twitter - TweetDeck by Twitter.) -- C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe [360952] [PID.5596]
[MD5.0D67EEBB3F9A495AE0D7D9E52BDE3704] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7874048] [PID.3520]
~ Processes Running: Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js
M2 - MFEP: prefs.js [bruna - hqnig03x.default\ascsurfingprotection@iobit.com] [] Advanced SystemCare Surfing Protection v1.0 (..)
~ Firefox Browser: 13 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:62543;https=127.0.0.1:62543 =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 19
---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
O4 - HKCU\..\Run: [Pando Media Booster] . (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKCU\..\Run: [ContentExplorer] . (.ContentExplorer - ContentExplorer.) -- C:\Users\mel\AppData\Roaming\ContentExplorer\ContentExplorer.exe
O4 - HKCU\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKCU\..\Run: [Clownfish] . (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [Aeria Ignite] . (.Aeria Games & Entertainment - Aeria Ignite.) -- C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
O4 - HKLM\..\Wow6432Node\Run: [fst_br_103] Chave orfã
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.OE.Systray.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Pando Media Booster] . (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [ContentExplorer] . (.ContentExplorer - ContentExplorer.) -- C:\Users\mel\AppData\Roaming\ContentExplorer\ContentExplorer.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Clownfish] . (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
~ Application: Scanned in 00mn 00s
---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: &Enviar para o OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: &Anotações Vinculadas do OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll =>.Microsoft Corporation
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Site na zona confiavél do Internet Explorer (05)
O15 - Trusted Zone: [HKCU\...\Domains] http.aeriagames.com
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0DEFF1A6-DEAB-4B61-B53E-2AF1D70BD882}: DhcpNameServer = 200.141.168.50 177.54.112.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{0DEFF1A6-DEAB-4B61-B53E-2AF1D70BD882}: DhcpNameServer = 200.141.168.50 177.54.112.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.141.168.50 177.54.112.22
~ Domain: Scanned in 00mn 00s
---\\ Protocolo adicional (018)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Lista dos serviços NT não Microsoft e não desativados (023)
O23 - Service: Baidu Antivirus Service (BAVSvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BAVSvc.exe (.not file.)
O23 - Service: Baidu Hips Service (BHipsSvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BHipsSvc.exe (.not file.)
~ Services: 20 Legitimates Filtered in 00mn 02s
---\\ Tarefas planificadas automaticamente (039)
[MD5.00000000000000000000000000000000] [APT] [SW.Booster-S-4606583622] (...) -- c:\programdata\greenapp\sw.booster\SW.Booster.exe (.not file.) [0] =>PUP.SafeWeb
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]
O39 - APT: - (..) -- C:\Windows\Tasks\ASC7_SkipUac_bruna.job [254]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1070]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1074]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 34db5824-9782-4862-8714-0b95816b4d62 [522]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task cd54befb-cc2b-43a9-890e-f2128a134956 [522]
O39 - APT: SW.Booster-S-4606583622 - (...) -- C:\Windows\Tasks\SW.Booster-S-4606583622.job [456] =>PUP.SafeWeb
O39 - APT: SW.Booster-S-4606583622 - (...) -- C:\Windows\System32\Tasks\SW.Booster-S-4606583622 [456] =>PUP.SafeWeb
O39 - APT: - (..) -- C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job [290]
~ Scheduled Task: 17 Legitimates Filtered in 00mn 03s
---\\ Drivers lançados ao arranque do sistema (041)
O41 - Driver: (Bfilter) . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) - C:\WINDOWS\system32\drivers\Bfilter.sys
O41 - Driver: (Bfmon) . (.Baidu, Inc. - Baidu FS Monitor Driver.) - C:\WINDOWS\system32\drivers\Bfmon.sys =>Adware.BDSearch
O41 - Driver: (Bprotect) . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) - C:\WINDOWS\system32\drivers\Bprotect.sys
O41 - Driver: ({c047df5e-0fda-4055-b5db-a96a8a34a094}Gw64) . (. - .) - C:\Windows\System32\drivers\{c047df5e-0fda-4055-b5db-a96a8a34a094}Gw64.sys (.not file.)
~ Drivers: 50 Legitimates Filtered in 00mn 00s
---\\ Software instalados (042)
O42 - Logiciel: ContentExplorer - (.ContentExplorer.net.) [HKLM][64Bits] -- ContentExplorer
O42 - Logiciel: Cross Fire AL - (.Z8Games.com.) [HKLM][64Bits] -- Cross Fire AL_is1
O42 - Logiciel: Gerenciador de Downloads - (.Level Up! Gerenciador.) [HKCU][64Bits] -- a54e16f5d00985b6
O42 - Logiciel: Megareg versão 1.0.10 - (.Megaware Industrial LTDA.) [HKLM][64Bits] -- {A208472A-31B9-48D8-B2FC-E339134BB1DE}_is1
O42 - Logiciel: Update for PriceMeter - (.Update for PriceMeter.) [HKCU][64Bits] -- PriceMeterUpdater =>PUP.PriceMeter
O42 - Logiciel: Warface - (.Level Up! Games.) [HKLM][64Bits] -- {094FAADD-5A39-4C64-911A-B4C9AD818484}_is1
O42 - Logiciel: seaveonShare - (.savensharee i.) [HKLM][64Bits] -- {62D82EC1-0D3A-DF54-8E3E-07E1337A5311} =>PUP.SaveNShare
~ Logic: 15 Legitimates Filtered in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\ARAR]
[HKCU\Software\Baidu Security] =>Adware.BDSearch
[HKCU\Software\Bark]
[HKCU\Software\ContentExplorer]
[HKCU\Software\Pando Networks]
[HKCU\Software\PriceMeter] =>PUP.PriceMeter
[HKCU\Software\TesSafe]
[HKLM\Software\Baidu Security] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Baidu_Drp_pos] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Highlightly]
[HKLM\Software\Wow6432Node\Level Up! Interactive]
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\RCBR]
[HKLM\Software\Wow6432Node\SW.Booster] =>PUP.SafeWeb
~ Key Software: 407 Legitimates Filtered in 00mn 00s
---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 28/03/2014 - 19:43:27 - [] ----D C:\Program Files (x86)\Baidu Security =>Adware.BDSearch
O43 - CFD: 05/01/2014 - 13:46:31 - [0] ----D C:\Program Files (x86)\Halo Combat Evolved
O43 - CFD: 24/04/2014 - 12:51:00 - [0] ----D C:\Program Files (x86)\Level Up Games
O43 - CFD: 26/10/2012 - 09:02:14 - [] ----D C:\Program Files (x86)\Megareg
O43 - CFD: 18/08/2013 - 13:52:32 - [] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 08/09/2013 - 14:33:33 - [] ----D C:\Program Files (x86)\Warface
O43 - CFD: 24/04/2014 - 12:47:23 - [0] ----D C:\Program Files (x86)\ZD Soft
O43 - CFD: 20/08/2013 - 22:02:15 - [] ----D C:\Program Files (x86)\Common Files\Nova pasta
O43 - CFD: 05/05/2014 - 15:51:10 - [] ----D C:\ProgramData\Baidu Security =>Adware.BDSearch
O43 - CFD: 03/04/2014 - 21:06:15 - [] ----D C:\ProgramData\GreenApp =>PUP.SafeWeb
O43 - CFD: 06/09/2013 - 15:19:22 - [] ----D C:\ProgramData\levelup downloader
O43 - CFD: 05/05/2014 - 15:51:14 - [] ----D C:\Users\mel\AppData\Roaming\Baidu Security =>Adware.BDSearch
O43 - CFD: 29/03/2014 - 11:46:26 - [] ----D C:\Users\mel\AppData\Roaming\ContentExplorer
O43 - CFD: 02/03/2014 - 12:31:01 - [] ----D C:\Users\mel\AppData\Roaming\rcru
O43 - CFD: 04/10/2013 - 16:04:56 - [0] --HAD C:\Users\mel\AppData\Local\rkwqmH6wLxJ
O43 - CFD: 18/11/2013 - 22:53:43 - [] ----D C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Level Up! Gerenciador
~ Program Folder: 275 Legitimates Filtered in 00mn 01s
---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.0F93587577DF0BD8CC72322BC12FAA9B] - 04/05/2014 - 22:22:43 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [158296]
O44 - LFC:[MD5.1F397F37FE080A42EAAD7529BA526DD6] - 04/05/2014 - 22:22:43 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [774702]
O44 - LFC:[MD5.82C478C60090F235C1D76AEAD58DF96E] - 05/05/2014 - 12:18:10 ---A- . (...) -- C:\Windows\win.ini [269]
O44 - LFC:[MD5.9E604B946F503D7D69AAD17B50D3BEF6] - 10/05/2014 - 12:01:37 ---A- . (...) -- C:\ASCInit.log [457]
O44 - LFC:[MD5.D53A0800A3E7E720F12C1FD2854CC97B] - 10/05/2014 - 12:06:01 ---A- . (...) -- C:\Windows\System32\Drivers\RTAIODAT.DAT [757301]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/05/2014 - 12:33:13 ---A- . (...) -- C:\asc_rdflag [0]
O44 - LFC:[MD5.FED005F7E6E3DA98FFC086324F82699F] - 12/05/2014 - 15:19:20 ---A- . (...) -- C:\Windows\Sandboxie.ini [1758]
O44 - LFC:[MD5.E5BC62AE4EADEDC5BBD43766D45F7931] - 12/05/2014 - 15:44:42 ---A- . (...) -- C:\zoek-results.log [117470]
O44 - LFC:[MD5.0D70A146F9B48F202CA746386E108E86] - 12/05/2014 - 15:44:43 ---A- . (...) -- C:\folders.log [79]
~ Files: 48 Legitimates Filtered in 00mn 03s
---\\ Operações e funções ao arranque do Windows Explorer (046)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Chave do registo Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{814461fc-50bd-11e3-8250-902b34f915d9}\AutoRun\command. (...) -- E:\Autorun.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s
---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:12/08/2013 - 20:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624]
O58 - SDL:27/02/2014 - 23:15:47 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\Bfilter.sys [52032]
O58 - SDL:27/02/2014 - 23:15:56 ---A- . (.Baidu, Inc. - Baidu FS Monitor Driver.) -- C:\Windows\System32\Drivers\Bfmon.sys [34624] =>Adware.BDSearch
O58 - SDL:21/01/2014 - 07:01:36 ---A- . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) -- C:\Windows\System32\Drivers\Bprotect.sys [128992]
O58 - SDL:03/12/2012 - 16:36:34 ---A- . (.Windows (R) Win 7 DDK provider - Filter Driver for HID-KMDF Interface.) -- C:\Windows\System32\Drivers\hidkmdf.sys [13728]
O58 - SDL:22/08/2013 - 09:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072]
O58 - SDL:27/08/2013 - 15:12:47 ---A- . (.TENCENT - TesSafe64 NT Driver.) -- C:\Windows\System32\TesSafe.sys [159160] =>Adware.TencentAddressBar
O58 - SDL:30/11/2010 - 16:52:57 ---A- . (.OpenLibSys.org - WinRing0.) -- C:\Windows\System32\WinRing0.sys [14416]
O58 - SDL:30/11/2010 - 16:52:58 ---A- . (.OpenLibSys.org - WinRing0.) -- C:\Windows\System32\WinRing0x64.sys [14544]
O58 - SDL:25/12/2009 - 13:50:54 ---A- . (.ZD Soft - ZD Soft Screen Capture Driver.) -- C:\Windows\SysWOW64\drivers\scncap.sys [9984]
~ Drivers: 64 Legitimates Filtered in 00mn 05s
---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Comodo - Comodo Dragon.) -- C:\Program Files (x86)\Comodo\Dragon\dragon.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.354B869D0C2707DB12F1666F1EB0C3A9] [SPRF][17/04/2014] (...) -- C:\Users\mel\Desktop\CS 1.6 - 2013.exe [280279178]
~ Files: 1 Legitimates Filtered in 00mn 04s
---\\ Lista das exceções do FireWall (FirewallRules) (O87)
O87 - FAEL: "{75A293E6-16BC-429F-8ACD-2BBD053B3EC7}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{C0C0657D-42D2-40D8-AA10-462BACF87ECB}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 2 Legitimates Filtered in 00mn 01s
---\\ Listagem dos dados da chave NameSpace (MNS) (O92)
O92 - MNS: - {1CF1260C-4DD0-4ebb-811F-33C572699FDE}
O92 - MNS: - {374DE290-123F-4565-9164-39C4925E467B}
O92 - MNS: - {3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}
O92 - MNS: - {A0953C92-50DC-43bf-BE83-3742FED03C9C}
O92 - MNS: - {A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}
O92 - MNS: - {B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
O92 - MNS: Fotos do iCloud - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ MNS: 8 Legitimates Filtered in 00mn 00s
---\\ Search Tracing Registry Key (O100)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\melondrea_RASAPI32 =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\melondrea_RASMANCS =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatemelondrea_RASAPI32 =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatemelondrea_RASMANCS =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilmelondrea_RASAPI32 =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilmelondrea_RASMANCS =>PUP.Melondrea
~ BTK: 76 Legitimates Filtered in 00mn 00s
---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 06/06/2011 64952 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 28/04/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Disabled 25/02/2014 1017424 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
SS - | Auto 10/07/1658 0 | (BAVSvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BAVSvc.exe
SS - | Auto 10/07/1658 0 | (BHipsSvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BHipsSvc.exe
SS - | Demand 03/10/2013 279000 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SS - | Auto 18/08/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 18/08/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 17/12/2013 12 | (IEEtwCollectorService) . (...) - C:\Windows\System32\IEEtwCollector.exe
SS - | Auto 03/12/2013 2151200 | (LiveUpdateSvc) . (.IObit.) - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
SS - | Demand 29/03/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 11/06/2012 724376 | (ServiceLayer) . (.Nokia.) - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 10/10/2013 144152 | (!SASCORE) . (.SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASCORE64.exe
SR - | Auto 14/01/2014 881952 | (AdvancedSystemCareService7) . (.IObit.) - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
SR - | Auto 25/02/2014 440400 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
SR - | Auto 25/02/2014 440400 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 12/02/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 05/05/2014 124496 | (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 07/03/2014 2135232 | (DragonUpdater) . (...) - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Demand 21/02/2014 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 04/03/2014 922968 | (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe
SR - | Auto 15/03/2013 1266464 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\WINDOWS\system32\PnkBstrA.exe
SR - | Auto 17/01/2014 187592 | (SbieSvc) . (.Sandboxie Holdings, LLC.) - C:\Program Files\Sandboxie\SbieSvc.exe
SR - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Demand 10/07/1658 0 | (WdNisSvc) . (...) - C:\Program Files (x86)\Windows Defender\NisSrv.exe
SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe
SR - | Auto 11/12/2012 619904 | (WTabletServiceCon) . (.Wacom Technology, Corp..) - C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
SR - | Auto 22/08/2013 37768 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 07s
---\\ Scâner Aditional (088)
Database Version : 13045 - (12/05/2014)
Clés trouvées (Keys found) : 3
Valeurs trouvées (Values found) : 1
Dossiers trouvés (Folders found) : 4
Fichiers trouvés (Files found) : 9
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceMeterUpdater] =>PUP.PriceMeter^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{62D82EC1-0D3A-DF54-8E3E-07E1337A5311}] =>PUP.SaveNShare^
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{62D82EC1-0D3A-DF54-8E3E-07E1337A5311}] =>Adware.SaveShare
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:uTorrent =>P2P.BitTorrent^
C:\Program Files (x86)\Baidu Security =>Adware.BDSearch^
C:\ProgramData\Baidu Security =>Adware.BDSearch^
C:\ProgramData\GreenApp =>PUP.SafeWeb^
C:\Users\mel\AppData\Roaming\Baidu Security =>Adware.BDSearch^
C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent^
C:\Windows\Tasks\SW.Booster-S-4606583622.job =>PUP.SafeWeb^
C:\Windows\System32\Tasks\SW.Booster-S-4606583622 =>PUP.SafeWeb^
[HKCU\Software\Baidu Security] =>Adware.BDSearch^
[HKCU\Software\PriceMeter] =>PUP.PriceMeter^
[HKLM\Software\Baidu Security] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\Baidu_Drp_pos] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\SW.Booster] =>PUP.SafeWeb^
~ Additionnel Scan: 348594 Items scanned in 00mn 43s
---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.Proxy
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.BDSearch
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.PriceMeter
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.TencentAddressBar
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Melondrea
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.SaveShare
~ MSI: 6 link(s) detected in 00mn 00s
~ 922 Legitimates filtered by white list
End of the scan (527 lines in 02mn 07s)(0)
~ Iniciado por bruna (13/05/2014 11:21:08)
~ Endereço do Website : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Blog de análise de software : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~ Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user
---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.17105
MFIE: Mozilla Firefox 28.0
GCIE: Google Chrome v34.0.1847.131
OBIE: Wacom WebTabletPlugin for Internet Explorer and Netscape v2.1.0.2
OPIE: Opera vStable 20.0.1387.91
---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 8.1 Single Language, 64-bit (Build 9600)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Softwares de proteçao do sistema
Avira Free Antivirus v14.0.3.350
SUPERAntiSpyware v5.7.1018
Windows Defender W8
---\\ Softwares d'optimização do sistema
CCleaner v4.08
---\\ Softwares de partilha do PeerToPeer (P2P)
Pando Media Booster v2.6.0.9
---\\ Monitoramento dos softwares
Adobe Flash Player 13 Plugin
Adobe Reader X
Java 7 Update 51
---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8156 MB (67% free)
System Restore: Activé (Enable)
System drive C: has 142 GB (31%) free of 450 GB
---\\ Modo de conexão ao sistema
~ Computer Name: BRUNA
~ User Name: bruna
~ All Users Names: UpdatusUser, Convidado, bruna, Administrador,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator
---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\mel\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\mel\AppData\Roaming\
~ %Desktop% : C:\Users\mel\Desktop\
~ %Favorites% : C:\Users\mel\Favorites\
~ %LocalAppData% : C:\Users\mel\AppData\Local\
~ %StartMenu% : C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 142 Go of 450 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Not Inserted)
---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 49 Legitimates Filtered in 00mn 00s
---\\ Pesquisa particular de ficheiros genéricos
[MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - Windows Explorer.) (.04/03/2014 - 09:25:49.) -- C:\Windows\Explorer.exe [2373784]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.22/08/2013 - 06:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.65C36A29A131A3A5D64B29FAC4EF6DD6] - (.Microsoft Corporation - Internet Extensions para Win32.) (.22/02/2014 - 06:11:56.) -- C:\Windows\System32\wininet.dll [2262016]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.22/02/2014 - 06:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.21/12/2013 - 05:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.239268BAB58EAE9A3FF4E08334C00451] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\AFD.sys [567296]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 09:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 08:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 05:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 06:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.03909BDBFF0DCACCABF2B2D4ADEE44DC] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.22/08/2013 - 08:38:38.) -- C:\Windows\system32\Drivers\HDAudBus.sys [78336]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Driver de porta i8042.) (.22/08/2013 - 08:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 09:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.C997E6A37BA8915224B3FB5024A34F69] - (.Microsoft Corporation - Minirdr SMB do Windows NT.) (.06/03/2014 - 06:20:23.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402944]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 08:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.20/03/2014 - 00:41:24.) -- C:\Windows\system32\Drivers\ntfs.sys [2013016]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Driver de porta paralela.) (.22/08/2013 - 08:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 08:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecionador do Dispositivo RDP da Microsoft.) (.30/09/2013 - 00:58:51.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.3595FBDF25F8BA6256072D103937D7D6] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.22/02/2014 - 12:44:13.) -- C:\Windows\system32\Drivers\volsnap.sys [311640]
~ Generic Processes: Scanned in 00mn 00s
---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 1/2999
~ Mes musiques (My Musics) : 1/955
~ Mes Videos (My Videos) : 2/124
~ Mes Favoris (My Favorites) : 1/4
~ Mes Documents (My Documents) : 1/204
~ Mon Bureau (My Desktop) : 3/9274
~ Menu demarrer (Programs) : 1/48
~ Hidden Files: Scanned in 00mn 38s
---\\ Processos lançados
[MD5.CDA339EEC2427447E6EB1D54C1B916F6] - (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4287536] [PID.4376]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.4012]
[MD5.CC78200C3ECFFA178E78308A0E160D80] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe [4672920] [PID.6836]
[MD5.ADDFB090DE67FB6251ABD242104BAEB5] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe [1270352] [PID.5376] =>P2P.BitTorrent
[MD5.5E32AEE9866C484D041AA1C0776D6976] - (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe [1313536] [PID.7408]
[MD5.EDBBDEBE0FDF577A647216C452773A90] - (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2288928] [PID.4132]
[MD5.C75A8A3D74CDD6552D22F197D3BBFF74] - (...) -- C:\Program Files (x86)\Megareg\MEGAREG.exe [27648] [PID.7492]
[MD5.FF4F87DCDAA5080281E0E70BB116086B] - (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376] [PID.7576]
[MD5.79C28DDF889C26FDD6162F796FD49BC4] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.420]
[MD5.542459D16B416D054161007FC9B1246E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032] [PID.7452]
[MD5.241B07FF7F5943B9C1BF3235F49AC1E1] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744] [PID.6900]
[MD5.D40F8C4F111B93EB36FEDF06FF8A1B69] - (.Avira Operations GmbH & Co. KG - Avira.OE.Systray.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352] [PID.7356]
[MD5.71738E5D624F00EFE56F7C35DB36267C] - (.Adobe Systems Incorporated - Adobe IPC Broker.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe [769904] [PID.1476]
[MD5.4B35BE5C6A1F3C91BD839220CEEBB1E2] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [815992] [PID.6252]
[MD5.4C2812958D3D4342FC21E47CC361D5C2] - (.No owner - Core Sync.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe [4696432] [PID.1156]
[MD5.AE9BC27D095C2F26E082C4B3D25921FE] - (.Adobe Systems Incorporated - Adobe CEF Helper.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe [395120] [PID.4212]
[MD5.077914F43279E41973EA54A61E41E0DB] - (.Twitter - TweetDeck by Twitter.) -- C:\Program Files (x86)\Twitter\TweetDeck\TweetDeck.exe [360952] [PID.5596]
[MD5.0D67EEBB3F9A495AE0D7D9E52BDE3704] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7874048] [PID.3520]
~ Processes Running: Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js
M2 - MFEP: prefs.js [bruna - hqnig03x.default\ascsurfingprotection@iobit.com] [] Advanced SystemCare Surfing Protection v1.0 (..)
~ Firefox Browser: 13 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:62543;https=127.0.0.1:62543 =>Hijacker.Proxy
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 19
---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
O4 - HKCU\..\Run: [Pando Media Booster] . (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKCU\..\Run: [ContentExplorer] . (.ContentExplorer - ContentExplorer.) -- C:\Users\mel\AppData\Roaming\ContentExplorer\ContentExplorer.exe
O4 - HKCU\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKCU\..\Run: [Clownfish] . (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [Aeria Ignite] . (.Aeria Games & Entertainment - Aeria Ignite.) -- C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
O4 - HKLM\..\Wow6432Node\Run: [fst_br_103] Chave orfã
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.OE.Systray.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Pando Media Booster] . (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [ContentExplorer] . (.ContentExplorer - ContentExplorer.) -- C:\Users\mel\AppData\Roaming\ContentExplorer\ContentExplorer.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Clownfish] . (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
~ Application: Scanned in 00mn 00s
---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: &Enviar para o OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: &Anotações Vinculadas do OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll =>.Microsoft Corporation
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Site na zona confiavél do Internet Explorer (05)
O15 - Trusted Zone: [HKCU\...\Domains] http.aeriagames.com
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0DEFF1A6-DEAB-4B61-B53E-2AF1D70BD882}: DhcpNameServer = 200.141.168.50 177.54.112.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{0DEFF1A6-DEAB-4B61-B53E-2AF1D70BD882}: DhcpNameServer = 200.141.168.50 177.54.112.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.141.168.50 177.54.112.22
~ Domain: Scanned in 00mn 00s
---\\ Protocolo adicional (018)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Lista dos serviços NT não Microsoft e não desativados (023)
O23 - Service: Baidu Antivirus Service (BAVSvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BAVSvc.exe (.not file.)
O23 - Service: Baidu Hips Service (BHipsSvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BHipsSvc.exe (.not file.)
~ Services: 20 Legitimates Filtered in 00mn 02s
---\\ Tarefas planificadas automaticamente (039)
[MD5.00000000000000000000000000000000] [APT] [SW.Booster-S-4606583622] (...) -- c:\programdata\greenapp\sw.booster\SW.Booster.exe (.not file.) [0] =>PUP.SafeWeb
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]
O39 - APT: - (..) -- C:\Windows\Tasks\ASC7_SkipUac_bruna.job [254]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1070]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1074]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 34db5824-9782-4862-8714-0b95816b4d62 [522]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task cd54befb-cc2b-43a9-890e-f2128a134956 [522]
O39 - APT: SW.Booster-S-4606583622 - (...) -- C:\Windows\Tasks\SW.Booster-S-4606583622.job [456] =>PUP.SafeWeb
O39 - APT: SW.Booster-S-4606583622 - (...) -- C:\Windows\System32\Tasks\SW.Booster-S-4606583622 [456] =>PUP.SafeWeb
O39 - APT: - (..) -- C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job [290]
~ Scheduled Task: 17 Legitimates Filtered in 00mn 03s
---\\ Drivers lançados ao arranque do sistema (041)
O41 - Driver: (Bfilter) . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) - C:\WINDOWS\system32\drivers\Bfilter.sys
O41 - Driver: (Bfmon) . (.Baidu, Inc. - Baidu FS Monitor Driver.) - C:\WINDOWS\system32\drivers\Bfmon.sys =>Adware.BDSearch
O41 - Driver: (Bprotect) . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) - C:\WINDOWS\system32\drivers\Bprotect.sys
O41 - Driver: ({c047df5e-0fda-4055-b5db-a96a8a34a094}Gw64) . (. - .) - C:\Windows\System32\drivers\{c047df5e-0fda-4055-b5db-a96a8a34a094}Gw64.sys (.not file.)
~ Drivers: 50 Legitimates Filtered in 00mn 00s
---\\ Software instalados (042)
O42 - Logiciel: ContentExplorer - (.ContentExplorer.net.) [HKLM][64Bits] -- ContentExplorer
O42 - Logiciel: Cross Fire AL - (.Z8Games.com.) [HKLM][64Bits] -- Cross Fire AL_is1
O42 - Logiciel: Gerenciador de Downloads - (.Level Up! Gerenciador.) [HKCU][64Bits] -- a54e16f5d00985b6
O42 - Logiciel: Megareg versão 1.0.10 - (.Megaware Industrial LTDA.) [HKLM][64Bits] -- {A208472A-31B9-48D8-B2FC-E339134BB1DE}_is1
O42 - Logiciel: Update for PriceMeter - (.Update for PriceMeter.) [HKCU][64Bits] -- PriceMeterUpdater =>PUP.PriceMeter
O42 - Logiciel: Warface - (.Level Up! Games.) [HKLM][64Bits] -- {094FAADD-5A39-4C64-911A-B4C9AD818484}_is1
O42 - Logiciel: seaveonShare - (.savensharee i.) [HKLM][64Bits] -- {62D82EC1-0D3A-DF54-8E3E-07E1337A5311} =>PUP.SaveNShare
~ Logic: 15 Legitimates Filtered in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\ARAR]
[HKCU\Software\Baidu Security] =>Adware.BDSearch
[HKCU\Software\Bark]
[HKCU\Software\ContentExplorer]
[HKCU\Software\Pando Networks]
[HKCU\Software\PriceMeter] =>PUP.PriceMeter
[HKCU\Software\TesSafe]
[HKLM\Software\Baidu Security] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Baidu_Drp_pos] =>Adware.BDSearch
[HKLM\Software\Wow6432Node\Highlightly]
[HKLM\Software\Wow6432Node\Level Up! Interactive]
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\RCBR]
[HKLM\Software\Wow6432Node\SW.Booster] =>PUP.SafeWeb
~ Key Software: 407 Legitimates Filtered in 00mn 00s
---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 28/03/2014 - 19:43:27 - [] ----D C:\Program Files (x86)\Baidu Security =>Adware.BDSearch
O43 - CFD: 05/01/2014 - 13:46:31 - [0] ----D C:\Program Files (x86)\Halo Combat Evolved
O43 - CFD: 24/04/2014 - 12:51:00 - [0] ----D C:\Program Files (x86)\Level Up Games
O43 - CFD: 26/10/2012 - 09:02:14 - [] ----D C:\Program Files (x86)\Megareg
O43 - CFD: 18/08/2013 - 13:52:32 - [] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 08/09/2013 - 14:33:33 - [] ----D C:\Program Files (x86)\Warface
O43 - CFD: 24/04/2014 - 12:47:23 - [0] ----D C:\Program Files (x86)\ZD Soft
O43 - CFD: 20/08/2013 - 22:02:15 - [] ----D C:\Program Files (x86)\Common Files\Nova pasta
O43 - CFD: 05/05/2014 - 15:51:10 - [] ----D C:\ProgramData\Baidu Security =>Adware.BDSearch
O43 - CFD: 03/04/2014 - 21:06:15 - [] ----D C:\ProgramData\GreenApp =>PUP.SafeWeb
O43 - CFD: 06/09/2013 - 15:19:22 - [] ----D C:\ProgramData\levelup downloader
O43 - CFD: 05/05/2014 - 15:51:14 - [] ----D C:\Users\mel\AppData\Roaming\Baidu Security =>Adware.BDSearch
O43 - CFD: 29/03/2014 - 11:46:26 - [] ----D C:\Users\mel\AppData\Roaming\ContentExplorer
O43 - CFD: 02/03/2014 - 12:31:01 - [] ----D C:\Users\mel\AppData\Roaming\rcru
O43 - CFD: 04/10/2013 - 16:04:56 - [0] --HAD C:\Users\mel\AppData\Local\rkwqmH6wLxJ
O43 - CFD: 18/11/2013 - 22:53:43 - [] ----D C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Level Up! Gerenciador
~ Program Folder: 275 Legitimates Filtered in 00mn 01s
---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.0F93587577DF0BD8CC72322BC12FAA9B] - 04/05/2014 - 22:22:43 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [158296]
O44 - LFC:[MD5.1F397F37FE080A42EAAD7529BA526DD6] - 04/05/2014 - 22:22:43 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [774702]
O44 - LFC:[MD5.82C478C60090F235C1D76AEAD58DF96E] - 05/05/2014 - 12:18:10 ---A- . (...) -- C:\Windows\win.ini [269]
O44 - LFC:[MD5.9E604B946F503D7D69AAD17B50D3BEF6] - 10/05/2014 - 12:01:37 ---A- . (...) -- C:\ASCInit.log [457]
O44 - LFC:[MD5.D53A0800A3E7E720F12C1FD2854CC97B] - 10/05/2014 - 12:06:01 ---A- . (...) -- C:\Windows\System32\Drivers\RTAIODAT.DAT [757301]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/05/2014 - 12:33:13 ---A- . (...) -- C:\asc_rdflag [0]
O44 - LFC:[MD5.FED005F7E6E3DA98FFC086324F82699F] - 12/05/2014 - 15:19:20 ---A- . (...) -- C:\Windows\Sandboxie.ini [1758]
O44 - LFC:[MD5.E5BC62AE4EADEDC5BBD43766D45F7931] - 12/05/2014 - 15:44:42 ---A- . (...) -- C:\zoek-results.log [117470]
O44 - LFC:[MD5.0D70A146F9B48F202CA746386E108E86] - 12/05/2014 - 15:44:43 ---A- . (...) -- C:\folders.log [79]
~ Files: 48 Legitimates Filtered in 00mn 03s
---\\ Operações e funções ao arranque do Windows Explorer (046)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Chave do registo Shell MountPoints2 (MPKS) (O51)
O51 - MPSK:{814461fc-50bd-11e3-8250-902b34f915d9}\AutoRun\command. (...) -- E:\Autorun.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s
---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:12/08/2013 - 20:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624]
O58 - SDL:27/02/2014 - 23:15:47 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\Bfilter.sys [52032]
O58 - SDL:27/02/2014 - 23:15:56 ---A- . (.Baidu, Inc. - Baidu FS Monitor Driver.) -- C:\Windows\System32\Drivers\Bfmon.sys [34624] =>Adware.BDSearch
O58 - SDL:21/01/2014 - 07:01:36 ---A- . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) -- C:\Windows\System32\Drivers\Bprotect.sys [128992]
O58 - SDL:03/12/2012 - 16:36:34 ---A- . (.Windows (R) Win 7 DDK provider - Filter Driver for HID-KMDF Interface.) -- C:\Windows\System32\Drivers\hidkmdf.sys [13728]
O58 - SDL:22/08/2013 - 09:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072]
O58 - SDL:27/08/2013 - 15:12:47 ---A- . (.TENCENT - TesSafe64 NT Driver.) -- C:\Windows\System32\TesSafe.sys [159160] =>Adware.TencentAddressBar
O58 - SDL:30/11/2010 - 16:52:57 ---A- . (.OpenLibSys.org - WinRing0.) -- C:\Windows\System32\WinRing0.sys [14416]
O58 - SDL:30/11/2010 - 16:52:58 ---A- . (.OpenLibSys.org - WinRing0.) -- C:\Windows\System32\WinRing0x64.sys [14544]
O58 - SDL:25/12/2009 - 13:50:54 ---A- . (.ZD Soft - ZD Soft Screen Capture Driver.) -- C:\Windows\SysWOW64\drivers\scncap.sys [9984]
~ Drivers: 64 Legitimates Filtered in 00mn 05s
---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.354B869D0C2707DB12F1666F1EB0C3A9] [SPRF][17/04/2014] (...) -- C:\Users\mel\Desktop\CS 1.6 - 2013.exe [280279178]
~ Files: 1 Legitimates Filtered in 00mn 04s
---\\ Lista das exceções do FireWall (FirewallRules) (O87)
O87 - FAEL: "{75A293E6-16BC-429F-8ACD-2BBD053B3EC7}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{C0C0657D-42D2-40D8-AA10-462BACF87ECB}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 2 Legitimates Filtered in 00mn 01s
---\\ Listagem dos dados da chave NameSpace (MNS) (O92)
O92 - MNS: - {1CF1260C-4DD0-4ebb-811F-33C572699FDE}
O92 - MNS: - {374DE290-123F-4565-9164-39C4925E467B}
O92 - MNS: - {3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}
O92 - MNS: - {A0953C92-50DC-43bf-BE83-3742FED03C9C}
O92 - MNS: - {A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}
O92 - MNS: - {B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
O92 - MNS: Fotos do iCloud - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ MNS: 8 Legitimates Filtered in 00mn 00s
---\\ Search Tracing Registry Key (O100)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\melondrea_RASAPI32 =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\melondrea_RASMANCS =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatemelondrea_RASAPI32 =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatemelondrea_RASMANCS =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilmelondrea_RASAPI32 =>PUP.Melondrea
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilmelondrea_RASMANCS =>PUP.Melondrea
~ BTK: 76 Legitimates Filtered in 00mn 00s
---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 06/06/2011 64952 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 28/04/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Disabled 25/02/2014 1017424 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
SS - | Auto 10/07/1658 0 | (BAVSvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BAVSvc.exe
SS - | Auto 10/07/1658 0 | (BHipsSvc) . (...) - C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BHipsSvc.exe
SS - | Demand 03/10/2013 279000 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SS - | Auto 18/08/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 18/08/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 17/12/2013 12 | (IEEtwCollectorService) . (...) - C:\Windows\System32\IEEtwCollector.exe
SS - | Auto 03/12/2013 2151200 | (LiveUpdateSvc) . (.IObit.) - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
SS - | Demand 29/03/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 11/06/2012 724376 | (ServiceLayer) . (.Nokia.) - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 10/10/2013 144152 | (!SASCORE) . (.SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASCORE64.exe
SR - | Auto 14/01/2014 881952 | (AdvancedSystemCareService7) . (.IObit.) - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
SR - | Auto 25/02/2014 440400 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
SR - | Auto 25/02/2014 440400 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 12/02/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 05/05/2014 124496 | (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 07/03/2014 2135232 | (DragonUpdater) . (...) - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Demand 21/02/2014 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 04/03/2014 922968 | (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe
SR - | Auto 15/03/2013 1266464 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\WINDOWS\system32\PnkBstrA.exe
SR - | Auto 17/01/2014 187592 | (SbieSvc) . (.Sandboxie Holdings, LLC.) - C:\Program Files\Sandboxie\SbieSvc.exe
SR - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Demand 10/07/1658 0 | (WdNisSvc) . (...) - C:\Program Files (x86)\Windows Defender\NisSrv.exe
SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe
SR - | Auto 11/12/2012 619904 | (WTabletServiceCon) . (.Wacom Technology, Corp..) - C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
SR - | Auto 22/08/2013 37768 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 07s
---\\ Scâner Aditional (088)
Database Version : 13045 - (12/05/2014)
Clés trouvées (Keys found) : 3
Valeurs trouvées (Values found) : 1
Dossiers trouvés (Folders found) : 4
Fichiers trouvés (Files found) : 9
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceMeterUpdater] =>PUP.PriceMeter^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{62D82EC1-0D3A-DF54-8E3E-07E1337A5311}] =>PUP.SaveNShare^
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{62D82EC1-0D3A-DF54-8E3E-07E1337A5311}] =>Adware.SaveShare
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:uTorrent =>P2P.BitTorrent^
C:\Program Files (x86)\Baidu Security =>Adware.BDSearch^
C:\ProgramData\Baidu Security =>Adware.BDSearch^
C:\ProgramData\GreenApp =>PUP.SafeWeb^
C:\Users\mel\AppData\Roaming\Baidu Security =>Adware.BDSearch^
C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent^
C:\Windows\Tasks\SW.Booster-S-4606583622.job =>PUP.SafeWeb^
C:\Windows\System32\Tasks\SW.Booster-S-4606583622 =>PUP.SafeWeb^
[HKCU\Software\Baidu Security] =>Adware.BDSearch^
[HKCU\Software\PriceMeter] =>PUP.PriceMeter^
[HKLM\Software\Baidu Security] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\Baidu Security] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\Baidu_Drp_pos] =>Adware.BDSearch^
[HKLM\Software\Wow6432Node\SW.Booster] =>PUP.SafeWeb^
~ Additionnel Scan: 348594 Items scanned in 00mn 43s
---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Hijacker.Proxy
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.BDSearch
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.PriceMeter
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.TencentAddressBar
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Melondrea
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.SaveShare
~ MSI: 6 link(s) detected in 00mn 00s
~ 922 Legitimates filtered by white list
End of the scan (527 lines in 02mn 07s)(0)
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por Power Max Ter 13 maio 2014, 12:20
Há programas desnecessários iniciando junto com o Windows, o que torna o seu PC mais lento. Para corrigir isto, siga as dicas deste tutorial:[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
De preferência deixe apenas os programas de segurança (anti-vírus/anti-spywares/firewall) iniciarem junto com o Windows.
Use também o programa Ccleaner, indicado neste tutorial acima, para fazer uma limpeza e otimização do PC agora e de tempos em tempos.
____________________________________________________________________________________________________________
Acesse o site [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e envie este arquivo destacado em azul abaixo para ser analisado:C:\Program Files (x86)\Megareg\MEGAREG.exe
Assim que a análise dele for concluída, copie o link que aparecerá na barra de endereços de seu navegador e poste este link em sua próxima resposta juntamente com o outro log pedido nesta postagem.
Maiores informações de como analisar arquivos no site Virus Total você encontra neste tutorial:
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
__________________________________________________________________________________________________________
Selecione e copie todo o texto destacado em vermelho que te passei._____________________________________________________________________________________________________________
Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas. Copie este relatório e poste em sua próxima resposta juntamente com o link da análise do arquivo no site Virus Total.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: Computador Lento + Vírus??
por brunahhdm Ter 13 maio 2014, 14:06
acho que é isso [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
ah, aqui o registro::
Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by bruna at 13/05/2014 14:24:21
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)
Reciclagem vazia (00mn 28s)
Reparação de atalhos do navegador
========== Softwares ==========
AUSENTE Uninstall Process: c:\users\mel\appdata\roaming\contentexplorer\uninstall.exe
AUSENTE Uninstall Process: c:\programdata\seaveonshare\dl.exe
========== Chaves do Registo ==========
ELIMINÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{62D82EC1-0D3A-DF54-8E3E-07E1337A5311}]
ELIMINÉ: Service: BAVSvc
ELIMINÉ: Service: BHipsSvc
ELIMINÉ Driver Key: Bfilter
ELIMINÉ Driver Key: Bfmon
ELIMINÉ Driver Key: Bprotect
ELIMINÉ Driver Key: {c047df5e-0fda-4055-b5db-a96a8a34a094}Gw64
ELIMINÉ: HKCU\Software\Baidu Security
ELIMINÉ: HKCU\Software\PriceMeter
ELIMINÉ: HKCU\Software\TesSafe
ELIMINÉ:* HKLM\Software\Baidu Security
ELIMINÉ: HKLM\Software\Wow6432Node\Baidu_Drp_pos
ELIMINÉ: HKLM\Software\Wow6432Node\Highlightly
ELIMINÉ: HKLM\Software\Wow6432Node\SW.Booster
ELIMINÉ CLSID MPSK: {814461fc-50bd-11e3-8250-902b34f915d9}
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\melondrea_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\melondrea_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatemelondrea_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatemelondrea_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilmelondrea_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilmelondrea_RASMANCS
ELIMINÉ: Service: Bonjour Service
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceMeterUpdater
========== Valores do Registo ==========
ELIMINÉ RunValue: fst_br_103
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value
========== Elementos dos dados do Registo ==========
ELIMINÉ: R1 Search Page =
========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia
========== Ficheiros ==========
ELIMINA REINICIAR: c:\windows\system32\drivers\bfilter.sys
ELIMINA REINICIAR: c:\windows\system32\drivers\bfmon.sys
ELIMINA REINICIAR: c:\windows\system32\drivers\bprotect.sys
ELIMINA REINICIAR: c:\windows\system32\tessafe.sys
ELIMINA REINICIAR: c:\program files\bonjour\mdnsresponder.exe
ELIMINÉ Temporários windows (265) (147.467.396 octets)
ELIMINÉ Flash Cookies (0) (0 octets)
========== Tarefa planificada ==========
ELIMINÉ: SW.Booster-S-4606583622
========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso
========== Recapitulativo ==========
23 : Chaves do Registo
7 : Valores do Registo
1 : Elementos dos dados do Registo
1 : Pastas
7 : Ficheiros
2 : Softwares
1 : Tarefa planificada
1 : Restauração Sistema
End of clean in 02mn 03s
========== Caminho do ficheiro do relatório ==========
C:\Users\mel\AppData\Roaming\ZHP\ZHPFix[R1].txt - 13/05/2014 14:24:49 [3119]
tudo certo?
ah, aqui o registro::
Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by bruna at 13/05/2014 14:24:21
High Elevated Privileges : OK
Windows 8 Home Premium Edition, 64-bit Service Pack 1 (9600)
Reciclagem vazia (00mn 28s)
Reparação de atalhos do navegador
========== Softwares ==========
AUSENTE Uninstall Process: c:\users\mel\appdata\roaming\contentexplorer\uninstall.exe
AUSENTE Uninstall Process: c:\programdata\seaveonshare\dl.exe
========== Chaves do Registo ==========
ELIMINÉ Logiciel Key: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{62D82EC1-0D3A-DF54-8E3E-07E1337A5311}]
ELIMINÉ: Service: BAVSvc
ELIMINÉ: Service: BHipsSvc
ELIMINÉ Driver Key: Bfilter
ELIMINÉ Driver Key: Bfmon
ELIMINÉ Driver Key: Bprotect
ELIMINÉ Driver Key: {c047df5e-0fda-4055-b5db-a96a8a34a094}Gw64
ELIMINÉ: HKCU\Software\Baidu Security
ELIMINÉ: HKCU\Software\PriceMeter
ELIMINÉ: HKCU\Software\TesSafe
ELIMINÉ:* HKLM\Software\Baidu Security
ELIMINÉ: HKLM\Software\Wow6432Node\Baidu_Drp_pos
ELIMINÉ: HKLM\Software\Wow6432Node\Highlightly
ELIMINÉ: HKLM\Software\Wow6432Node\SW.Booster
ELIMINÉ CLSID MPSK: {814461fc-50bd-11e3-8250-902b34f915d9}
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\melondrea_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\melondrea_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatemelondrea_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updatemelondrea_RASMANCS
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilmelondrea_RASAPI32
ELIMINÉ: HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilmelondrea_RASMANCS
ELIMINÉ: Service: Bonjour Service
ELIMINÉ: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PriceMeterUpdater
========== Valores do Registo ==========
ELIMINÉ RunValue: fst_br_103
ProxyFix : Configuração proxy removida com sucesso
ELIMINÉ ProxyServer Value
ELIMINÉ ProxyEnable Value
ELIMINÉ EnableHttp1_1 Value
ELIMINÉ ProxyHttp1.1 Value
ELIMINÉ ProxyOverride Value
========== Elementos dos dados do Registo ==========
ELIMINÉ: R1 Search Page =
========== Pastas ==========
Nenhuma pasta CLSID local utilizador vazia
========== Ficheiros ==========
ELIMINA REINICIAR: c:\windows\system32\drivers\bfilter.sys
ELIMINA REINICIAR: c:\windows\system32\drivers\bfmon.sys
ELIMINA REINICIAR: c:\windows\system32\drivers\bprotect.sys
ELIMINA REINICIAR: c:\windows\system32\tessafe.sys
ELIMINA REINICIAR: c:\program files\bonjour\mdnsresponder.exe
ELIMINÉ Temporários windows (265) (147.467.396 octets)
ELIMINÉ Flash Cookies (0) (0 octets)
========== Tarefa planificada ==========
ELIMINÉ: SW.Booster-S-4606583622
========== Restauração Sistema ==========
Ponto de restauro do sistema criado com sucesso
========== Recapitulativo ==========
23 : Chaves do Registo
7 : Valores do Registo
1 : Elementos dos dados do Registo
1 : Pastas
7 : Ficheiros
2 : Softwares
1 : Tarefa planificada
1 : Restauração Sistema
End of clean in 02mn 03s
========== Caminho do ficheiro do relatório ==========
C:\Users\mel\AppData\Roaming\ZHP\ZHPFix[R1].txt - 13/05/2014 14:24:49 [3119]
tudo certo?
Última edição por brunahhdm em Ter 13 maio 2014, 14:25, editado 2 vez(es)
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por Power Max Ter 13 maio 2014, 14:15
brunahhdm escreveu:acho que é isso [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Sim, é isto mesmo.Mas falta você fazer os outros procedimentos que te passei na resposta anterior.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: Computador Lento + Vírus??
por brunahhdm Ter 13 maio 2014, 15:00
Ok ja atualizei a resposta anterior com o relatório, mas não entendi uma parte do que vc me mandou... "Selecione e copie todo o texto destacado em vermelho abaixo (começando em script zhpfix e indo até emptyclsid)" Ok, depois que eu copiar esse texto ali, faço o que??
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por Power Max Ter 13 maio 2014, 15:08
Você já fez o que era para fazer, é deste jeito mesmo que você fez.brunahhdm escreveu:não entendi uma parte do que vc me mandou... "Selecione e copie todo o texto destacado em vermelho abaixo (começando em script zhpfix e indo até emptyclsid)" Ok, depois que eu copiar esse texto ali, faço o que??
___________________________________________________________
Abra novamente o ( ZHPDiag )[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Clique "SEARCH" ou "PESQUISAR" e aguarde a conclusão.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
|- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: Computador Lento + Vírus??
por brunahhdm Ter 13 maio 2014, 15:18
~ Relatório do ZHPDiag v2014.5.12.61 - Nicolas Coolman (12/05/2014)
~ Iniciado por bruna (13/05/2014 15:15:56)
~ Endereço do Website : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Blog de análise de software : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~ Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user
---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.17105
MFIE: Mozilla Firefox 28.0
GCIE: Google Chrome v34.0.1847.131
OBIE: Wacom WebTabletPlugin for Internet Explorer and Netscape v2.1.0.2
OPIE: Opera vStable 20.0.1387.91
---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 8.1 Single Language, 64-bit (Build 9600)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Softwares de proteçao do sistema
Avira Free Antivirus v14.0.3.350
SUPERAntiSpyware v5.7.1018
Windows Defender W8
---\\ Softwares d'optimização do sistema
CCleaner v4.08
---\\ Softwares de partilha do PeerToPeer (P2P)
Pando Media Booster v2.6.0.9
---\\ Monitoramento dos softwares
Adobe Flash Player 13 Plugin
Adobe Reader X
Java 7 Update 51
---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8156 MB (48% free)
System Restore: Activé (Enable)
System drive C: has 134 GB (29%) free of 450 GB
---\\ Modo de conexão ao sistema
~ Computer Name: BRUNA
~ User Name: bruna
~ All Users Names: UpdatusUser, Convidado, bruna, Administrador,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator
---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\mel\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\mel\AppData\Roaming\
~ %Desktop% : C:\Users\mel\Desktop\
~ %Favorites% : C:\Users\mel\Favorites\
~ %LocalAppData% : C:\Users\mel\AppData\Local\
~ %StartMenu% : C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 134 Go of 450 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Not Inserted)
---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 49 Legitimates Filtered in 00mn 00s
---\\ Pesquisa particular de ficheiros genéricos
[MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - Windows Explorer.) (.04/03/2014 - 09:25:49.) -- C:\Windows\Explorer.exe [2373784]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.22/08/2013 - 06:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.65C36A29A131A3A5D64B29FAC4EF6DD6] - (.Microsoft Corporation - Internet Extensions para Win32.) (.22/02/2014 - 06:11:56.) -- C:\Windows\System32\wininet.dll [2262016]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.22/02/2014 - 06:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.21/12/2013 - 05:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.239268BAB58EAE9A3FF4E08334C00451] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\AFD.sys [567296]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 09:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 08:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 05:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 06:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.03909BDBFF0DCACCABF2B2D4ADEE44DC] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.22/08/2013 - 08:38:38.) -- C:\Windows\system32\Drivers\HDAudBus.sys [78336]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Driver de porta i8042.) (.22/08/2013 - 08:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 09:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.C997E6A37BA8915224B3FB5024A34F69] - (.Microsoft Corporation - Minirdr SMB do Windows NT.) (.06/03/2014 - 06:20:23.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402944]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 08:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.20/03/2014 - 00:41:24.) -- C:\Windows\system32\Drivers\ntfs.sys [2013016]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Driver de porta paralela.) (.22/08/2013 - 08:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 08:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecionador do Dispositivo RDP da Microsoft.) (.30/09/2013 - 00:58:51.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.3595FBDF25F8BA6256072D103937D7D6] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.22/02/2014 - 12:44:13.) -- C:\Windows\system32\Drivers\volsnap.sys [311640]
~ Generic Processes: Scanned in 00mn 00s
---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 1/2999
~ Mes musiques (My Musics) : 1/957
~ Mes Videos (My Videos) : 2/124
~ Mes Favoris (My Favorites) : 1/4
~ Mes Documents (My Documents) : 1/204
~ Mon Bureau (My Desktop) : 3/9276
~ Menu demarrer (Programs) : 1/48
~ Hidden Files: Scanned in 00mn 04s
---\\ Processos lançados
[MD5.CDA339EEC2427447E6EB1D54C1B916F6] - (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4287536] [PID.4376]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.4012]
[MD5.CC78200C3ECFFA178E78308A0E160D80] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe [4672920] [PID.6836]
[MD5.ADDFB090DE67FB6251ABD242104BAEB5] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe [1270352] [PID.5376] =>P2P.BitTorrent
[MD5.5E32AEE9866C484D041AA1C0776D6976] - (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe [1313536] [PID.7408]
[MD5.EDBBDEBE0FDF577A647216C452773A90] - (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2288928] [PID.4132]
[MD5.C75A8A3D74CDD6552D22F197D3BBFF74] - (...) -- C:\Program Files (x86)\Megareg\MEGAREG.exe [27648] [PID.7492]
[MD5.FF4F87DCDAA5080281E0E70BB116086B] - (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376] [PID.7576]
[MD5.79C28DDF889C26FDD6162F796FD49BC4] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.420]
[MD5.241B07FF7F5943B9C1BF3235F49AC1E1] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744] [PID.6900]
[MD5.D40F8C4F111B93EB36FEDF06FF8A1B69] - (.Avira Operations GmbH & Co. KG - Avira.OE.Systray.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352] [PID.7356]
[MD5.71738E5D624F00EFE56F7C35DB36267C] - (.Adobe Systems Incorporated - Adobe IPC Broker.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe [769904] [PID.1476]
[MD5.4B35BE5C6A1F3C91BD839220CEEBB1E2] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [815992] [PID.6252]
[MD5.4C2812958D3D4342FC21E47CC361D5C2] - (.No owner - Core Sync.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe [4696432] [PID.1156]
[MD5.AE9BC27D095C2F26E082C4B3D25921FE] - (.Adobe Systems Incorporated - Adobe CEF Helper.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe [395120] [PID.4212]
[MD5.9D4A0ECBF734E2EECDD5B473A2D705FE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016] [PID.6632]
[MD5.2F03C763EE0DFB4DE56176737DEFB2E2] - (.Microsoft Corporation - Touch Keyboard and Handwriting Panel Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe [21184] [PID.6784]
[MD5.B1D252E989DC2701B264F493850D9999] - (.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe [9789256] [PID.6608]
[MD5.A48D22D9BC2A9F0AB83EEB4362A16935] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe [43336] [PID.7948]
[MD5.E8C9A8E30D691370BF16247A9CF6FE39] - (.Apple Inc. - distnoted.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe [24392] [PID.6464]
[MD5.542459D16B416D054161007FC9B1246E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032] [PID.7404]
[MD5.5B09C8CA6A295CBA84357D9BBE351B18] - (.Sony Creative Software Inc. - File I/O surrogate (not visible).) -- C:\Program Files\Sony\Vegas Pro 11.0\x86\FileIOSurrogate.exe [3295616] [PID.2648]
[MD5.995B43D3E820B37F12E29C1FF55F7164] - (.Sony Creative Software Inc. - Sony VST Server.) -- C:\Program Files\Sony\Vegas Pro 11.0\x86\sfvstserver.exe [3170688] [PID.384]
[MD5.8DF7F2A9B72B7CA4294BB9E59FEAEFCD] - (.Microsoft Corporation - Host WWA Microsoft.) -- C:\WINDOWS\syswow64\wwahost.exe [514560] [PID.4980]
[MD5.0D67EEBB3F9A495AE0D7D9E52BDE3704] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7874048] [PID.5664]
~ Processes Running: Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js
M2 - MFEP: prefs.js [bruna - hqnig03x.default\ascsurfingprotection@iobit.com] [] Advanced SystemCare Surfing Protection v1.0 (..)
~ Firefox Browser: 13 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 19
---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
O4 - HKCU\..\Run: [Pando Media Booster] . (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKCU\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKCU\..\Run: [Clownfish] . (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [Aeria Ignite] . (.Aeria Games & Entertainment - Aeria Ignite.) -- C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.OE.Systray.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Pando Media Booster] . (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Clownfish] . (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
~ Application: Scanned in 00mn 00s
---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: &Enviar para o OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: &Anotações Vinculadas do OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll =>.Microsoft Corporation
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Site na zona confiavél do Internet Explorer (05)
O15 - Trusted Zone: [HKCU\...\Domains] http.aeriagames.com
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0DEFF1A6-DEAB-4B61-B53E-2AF1D70BD882}: DhcpNameServer = 200.141.168.50 177.54.112.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{0DEFF1A6-DEAB-4B61-B53E-2AF1D70BD882}: DhcpNameServer = 200.141.168.50 177.54.112.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.141.168.50 177.54.112.22
~ Domain: Scanned in 00mn 00s
---\\ Protocolo adicional (018)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Tarefas planificadas automaticamente (039)
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]
O39 - APT: - (..) -- C:\Windows\Tasks\ASC7_SkipUac_bruna.job [254]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1070]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1074]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 34db5824-9782-4862-8714-0b95816b4d62 [522]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task cd54befb-cc2b-43a9-890e-f2128a134956 [522]
O39 - APT: - (..) -- C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job [290]
~ Scheduled Task: 15 Legitimates Filtered in 00mn 01s
---\\ Software instalados (042)
O42 - Logiciel: Cross Fire AL - (.Z8Games.com.) [HKLM][64Bits] -- Cross Fire AL_is1
O42 - Logiciel: Gerenciador de Downloads - (.Level Up! Gerenciador.) [HKCU][64Bits] -- a54e16f5d00985b6
O42 - Logiciel: Megareg versão 1.0.10 - (.Megaware Industrial LTDA.) [HKLM][64Bits] -- {A208472A-31B9-48D8-B2FC-E339134BB1DE}_is1
O42 - Logiciel: Warface - (.Level Up! Games.) [HKLM][64Bits] -- {094FAADD-5A39-4C64-911A-B4C9AD818484}_is1
~ Logic: 13 Legitimates Filtered in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\ARAR]
[HKCU\Software\Bark]
[HKCU\Software\Pando Networks]
[HKCU\Software\PriceMeterUpdater] =>PUP.PriceMeter
[HKLM\Software\Wow6432Node\Level Up! Interactive]
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\RCBR]
~ Key Software: 393 Legitimates Filtered in 00mn 00s
---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 05/01/2014 - 13:46:31 - [0] ----D C:\Program Files (x86)\Halo Combat Evolved
O43 - CFD: 24/04/2014 - 12:51:00 - [0] ----D C:\Program Files (x86)\Level Up Games
O43 - CFD: 26/10/2012 - 09:02:14 - [] ----D C:\Program Files (x86)\Megareg
O43 - CFD: 18/08/2013 - 13:52:32 - [] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 08/09/2013 - 14:33:33 - [] ----D C:\Program Files (x86)\Warface
O43 - CFD: 24/04/2014 - 12:47:23 - [0] ----D C:\Program Files (x86)\ZD Soft
O43 - CFD: 20/08/2013 - 22:02:15 - [] ----D C:\Program Files (x86)\Common Files\Nova pasta
O43 - CFD: 06/09/2013 - 15:19:22 - [] ----D C:\ProgramData\levelup downloader
O43 - CFD: 02/03/2014 - 12:31:01 - [] ----D C:\Users\mel\AppData\Roaming\rcru
O43 - CFD: 04/10/2013 - 16:04:56 - [0] --HAD C:\Users\mel\AppData\Local\rkwqmH6wLxJ
O43 - CFD: 18/11/2013 - 22:53:43 - [] ----D C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Level Up! Gerenciador
~ Program Folder: 270 Legitimates Filtered in 00mn 00s
---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.0F93587577DF0BD8CC72322BC12FAA9B] - 04/05/2014 - 22:22:43 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [158296]
O44 - LFC:[MD5.1F397F37FE080A42EAAD7529BA526DD6] - 04/05/2014 - 22:22:43 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [774702]
O44 - LFC:[MD5.82C478C60090F235C1D76AEAD58DF96E] - 05/05/2014 - 12:18:10 ---A- . (...) -- C:\Windows\win.ini [269]
O44 - LFC:[MD5.9E604B946F503D7D69AAD17B50D3BEF6] - 10/05/2014 - 12:01:37 ---A- . (...) -- C:\ASCInit.log [457]
O44 - LFC:[MD5.D53A0800A3E7E720F12C1FD2854CC97B] - 10/05/2014 - 12:06:01 ---A- . (...) -- C:\Windows\System32\Drivers\RTAIODAT.DAT [757301]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/05/2014 - 12:33:13 ---A- . (...) -- C:\asc_rdflag [0]
O44 - LFC:[MD5.FED005F7E6E3DA98FFC086324F82699F] - 12/05/2014 - 15:19:20 ---A- . (...) -- C:\Windows\Sandboxie.ini [1758]
O44 - LFC:[MD5.E5BC62AE4EADEDC5BBD43766D45F7931] - 12/05/2014 - 15:44:42 ---A- . (...) -- C:\zoek-results.log [117470]
O44 - LFC:[MD5.0D70A146F9B48F202CA746386E108E86] - 12/05/2014 - 15:44:43 ---A- . (...) -- C:\folders.log [79]
~ Files: 48 Legitimates Filtered in 00mn 02s
---\\ Operações e funções ao arranque do Windows Explorer (046)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s
---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:12/08/2013 - 20:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624]
O58 - SDL:27/02/2014 - 23:15:47 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\Bfilter.sys [52032]
O58 - SDL:27/02/2014 - 23:15:56 ---A- . (.Baidu, Inc. - Baidu FS Monitor Driver.) -- C:\Windows\System32\Drivers\Bfmon.sys [34624] =>Adware.BDSearch
O58 - SDL:21/01/2014 - 07:01:36 ---A- . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) -- C:\Windows\System32\Drivers\Bprotect.sys [128992]
O58 - SDL:03/12/2012 - 16:36:34 ---A- . (.Windows (R) Win 7 DDK provider - Filter Driver for HID-KMDF Interface.) -- C:\Windows\System32\Drivers\hidkmdf.sys [13728]
O58 - SDL:22/08/2013 - 09:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072]
O58 - SDL:27/08/2013 - 15:12:47 ---A- . (.TENCENT - TesSafe64 NT Driver.) -- C:\Windows\System32\TesSafe.sys [159160] =>Adware.TencentAddressBar
O58 - SDL:30/11/2010 - 16:52:57 ---A- . (.OpenLibSys.org - WinRing0.) -- C:\Windows\System32\WinRing0.sys [14416]
O58 - SDL:30/11/2010 - 16:52:58 ---A- . (.OpenLibSys.org - WinRing0.) -- C:\Windows\System32\WinRing0x64.sys [14544]
O58 - SDL:25/12/2009 - 13:50:54 ---A- . (.ZD Soft - ZD Soft Screen Capture Driver.) -- C:\Windows\SysWOW64\drivers\scncap.sys [9984]
~ Drivers: 64 Legitimates Filtered in 00mn 05s
---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Comodo - Comodo Dragon.) -- C:\Program Files (x86)\Comodo\Dragon\dragon.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.354B869D0C2707DB12F1666F1EB0C3A9] [SPRF][17/04/2014] (...) -- C:\Users\mel\Desktop\CS 1.6 - 2013.exe [280279178]
~ Files: 1 Legitimates Filtered in 00mn 02s
---\\ Lista das exceções do FireWall (FirewallRules) (O87)
O87 - FAEL: "{75A293E6-16BC-429F-8ACD-2BBD053B3EC7}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{C0C0657D-42D2-40D8-AA10-462BACF87ECB}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 2 Legitimates Filtered in 00mn 01s
---\\ Listagem dos dados da chave NameSpace (MNS) (O92)
O92 - MNS: - {1CF1260C-4DD0-4ebb-811F-33C572699FDE}
O92 - MNS: - {374DE290-123F-4565-9164-39C4925E467B}
O92 - MNS: - {3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}
O92 - MNS: - {A0953C92-50DC-43bf-BE83-3742FED03C9C}
O92 - MNS: - {A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}
O92 - MNS: - {B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
O92 - MNS: Fotos do iCloud - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ MNS: 8 Legitimates Filtered in 00mn 00s
---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 06/06/2011 64952 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 28/04/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Disabled 25/02/2014 1017424 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
SS - | Demand 03/10/2013 279000 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SS - | Auto 18/08/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 18/08/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 17/12/2013 12 | (IEEtwCollectorService) . (...) - C:\Windows\System32\IEEtwCollector.exe
SS - | Auto 03/12/2013 2151200 | (LiveUpdateSvc) . (.IObit.) - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
SS - | Demand 29/03/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 11/06/2012 724376 | (ServiceLayer) . (.Nokia.) - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SS - | Auto 22/08/2013 37768 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 10/10/2013 144152 | (!SASCORE) . (.SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASCORE64.exe
SR - | Auto 14/01/2014 881952 | (AdvancedSystemCareService7) . (.IObit.) - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
SR - | Auto 25/02/2014 440400 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
SR - | Auto 25/02/2014 440400 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 12/02/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 05/05/2014 124496 | (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
SR - | Auto 07/03/2014 2135232 | (DragonUpdater) . (...) - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Demand 21/02/2014 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 04/03/2014 922968 | (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe
SR - | Auto 15/03/2013 1266464 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\WINDOWS\system32\PnkBstrA.exe
SR - | Auto 17/01/2014 187592 | (SbieSvc) . (.Sandboxie Holdings, LLC.) - C:\Program Files\Sandboxie\SbieSvc.exe
SR - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Demand 10/07/1658 0 | (WdNisSvc) . (...) - C:\Program Files (x86)\Windows Defender\NisSrv.exe
SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe
SR - | Auto 11/12/2012 619904 | (WTabletServiceCon) . (.Wacom Technology, Corp..) - C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
~ Services: Scanned in 00mn 07s
---\\ Scâner Aditional (088)
Database Version : 13045 - (12/05/2014)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 1
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 2
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:uTorrent =>P2P.BitTorrent^
C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent^
[HKCU\Software\PriceMeterUpdater] =>PUP.PriceMeter^
~ Additionnel Scan: 348222 Items scanned in 00mn 33s
---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.PriceMeter
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.BDSearch
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.TencentAddressBar
~ MSI: 3 link(s) detected in 00mn 00s
~ 895 Legitimates filtered by white list
End of the scan (459 lines in 01mn 22s)(0)
~ Iniciado por bruna (13/05/2014 15:15:56)
~ Endereço do Website : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Blog de análise de software : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Fóruns de suporte gratuito para desinfecção : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão :
~ Lista Branca : Ativado pelo programa
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Activate by user
---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.17105
MFIE: Mozilla Firefox 28.0
GCIE: Google Chrome v34.0.1847.131
OBIE: Wacom WebTabletPlugin for Internet Explorer and Netscape v2.1.0.2
OPIE: Opera vStable 20.0.1387.91
---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 8.1 Single Language, 64-bit (Build 9600)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Softwares de proteçao do sistema
Avira Free Antivirus v14.0.3.350
SUPERAntiSpyware v5.7.1018
Windows Defender W8
---\\ Softwares d'optimização do sistema
CCleaner v4.08
---\\ Softwares de partilha do PeerToPeer (P2P)
Pando Media Booster v2.6.0.9
---\\ Monitoramento dos softwares
Adobe Flash Player 13 Plugin
Adobe Reader X
Java 7 Update 51
---\\ Informações sobre o sistema
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8156 MB (48% free)
System Restore: Activé (Enable)
System drive C: has 134 GB (29%) free of 450 GB
---\\ Modo de conexão ao sistema
~ Computer Name: BRUNA
~ User Name: bruna
~ All Users Names: UpdatusUser, Convidado, bruna, Administrador,
~ Unselected Option: 045,061,O62,065,066,080,O82,089
Logged in as Administrator
---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\mel\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\mel\AppData\Roaming\
~ %Desktop% : C:\Users\mel\Desktop\
~ %Favorites% : C:\Users\mel\Favorites\
~ %LocalAppData% : C:\Users\mel\AppData\Local\
~ %StartMenu% : C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 134 Go of 450 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Not Inserted)
---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 49 Legitimates Filtered in 00mn 00s
---\\ Pesquisa particular de ficheiros genéricos
[MD5.81394C91B7B5A7C799E249AE82491F13] - (.Microsoft Corporation - Windows Explorer.) (.04/03/2014 - 09:25:49.) -- C:\Windows\Explorer.exe [2373784]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.22/08/2013 - 06:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.65C36A29A131A3A5D64B29FAC4EF6DD6] - (.Microsoft Corporation - Internet Extensions para Win32.) (.22/02/2014 - 06:11:56.) -- C:\Windows\System32\wininet.dll [2262016]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.22/02/2014 - 06:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.21/12/2013 - 05:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.239268BAB58EAE9A3FF4E08334C00451] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\AFD.sys [567296]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 09:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 08:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 05:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06/03/2014 - 06:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.03909BDBFF0DCACCABF2B2D4ADEE44DC] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.22/08/2013 - 08:38:38.) -- C:\Windows\system32\Drivers\HDAudBus.sys [78336]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Driver de porta i8042.) (.22/08/2013 - 08:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27/11/2013 - 09:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.C997E6A37BA8915224B3FB5024A34F69] - (.Microsoft Corporation - Minirdr SMB do Windows NT.) (.06/03/2014 - 06:20:23.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402944]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 08:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.1C80517BE6836A812F6A9B99B8321351] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.20/03/2014 - 00:41:24.) -- C:\Windows\system32\Drivers\ntfs.sys [2013016]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Driver de porta paralela.) (.22/08/2013 - 08:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 08:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecionador do Dispositivo RDP da Microsoft.) (.30/09/2013 - 00:58:51.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 10:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.3595FBDF25F8BA6256072D103937D7D6] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.22/02/2014 - 12:44:13.) -- C:\Windows\system32\Drivers\volsnap.sys [311640]
~ Generic Processes: Scanned in 00mn 00s
---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 1/2999
~ Mes musiques (My Musics) : 1/957
~ Mes Videos (My Videos) : 2/124
~ Mes Favoris (My Favorites) : 1/4
~ Mes Documents (My Documents) : 1/204
~ Mon Bureau (My Desktop) : 3/9276
~ Menu demarrer (Programs) : 1/48
~ Hidden Files: Scanned in 00mn 04s
---\\ Processos lançados
[MD5.CDA339EEC2427447E6EB1D54C1B916F6] - (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4287536] [PID.4376]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.4012]
[MD5.CC78200C3ECFFA178E78308A0E160D80] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe [4672920] [PID.6836]
[MD5.ADDFB090DE67FB6251ABD242104BAEB5] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe [1270352] [PID.5376] =>P2P.BitTorrent
[MD5.5E32AEE9866C484D041AA1C0776D6976] - (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe [1313536] [PID.7408]
[MD5.EDBBDEBE0FDF577A647216C452773A90] - (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2288928] [PID.4132]
[MD5.C75A8A3D74CDD6552D22F197D3BBFF74] - (...) -- C:\Program Files (x86)\Megareg\MEGAREG.exe [27648] [PID.7492]
[MD5.FF4F87DCDAA5080281E0E70BB116086B] - (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376] [PID.7576]
[MD5.79C28DDF889C26FDD6162F796FD49BC4] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.420]
[MD5.241B07FF7F5943B9C1BF3235F49AC1E1] - (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744] [PID.6900]
[MD5.D40F8C4F111B93EB36FEDF06FF8A1B69] - (.Avira Operations GmbH & Co. KG - Avira.OE.Systray.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352] [PID.7356]
[MD5.71738E5D624F00EFE56F7C35DB36267C] - (.Adobe Systems Incorporated - Adobe IPC Broker.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe [769904] [PID.1476]
[MD5.4B35BE5C6A1F3C91BD839220CEEBB1E2] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [815992] [PID.6252]
[MD5.4C2812958D3D4342FC21E47CC361D5C2] - (.No owner - Core Sync.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe [4696432] [PID.1156]
[MD5.AE9BC27D095C2F26E082C4B3D25921FE] - (.Adobe Systems Incorporated - Adobe CEF Helper.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe [395120] [PID.4212]
[MD5.9D4A0ECBF734E2EECDD5B473A2D705FE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016] [PID.6632]
[MD5.2F03C763EE0DFB4DE56176737DEFB2E2] - (.Microsoft Corporation - Touch Keyboard and Handwriting Panel Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe [21184] [PID.6784]
[MD5.B1D252E989DC2701B264F493850D9999] - (.Apple Inc. - iTunes.) -- C:\Program Files (x86)\iTunes\iTunes.exe [9789256] [PID.6608]
[MD5.A48D22D9BC2A9F0AB83EEB4362A16935] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe [43336] [PID.7948]
[MD5.E8C9A8E30D691370BF16247A9CF6FE39] - (.Apple Inc. - distnoted.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe [24392] [PID.6464]
[MD5.542459D16B416D054161007FC9B1246E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032] [PID.7404]
[MD5.5B09C8CA6A295CBA84357D9BBE351B18] - (.Sony Creative Software Inc. - File I/O surrogate (not visible).) -- C:\Program Files\Sony\Vegas Pro 11.0\x86\FileIOSurrogate.exe [3295616] [PID.2648]
[MD5.995B43D3E820B37F12E29C1FF55F7164] - (.Sony Creative Software Inc. - Sony VST Server.) -- C:\Program Files\Sony\Vegas Pro 11.0\x86\sfvstserver.exe [3170688] [PID.384]
[MD5.8DF7F2A9B72B7CA4294BB9E59FEAEFCD] - (.Microsoft Corporation - Host WWA Microsoft.) -- C:\WINDOWS\syswow64\wwahost.exe [514560] [PID.4980]
[MD5.0D67EEBB3F9A495AE0D7D9E52BDE3704] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7874048] [PID.5664]
~ Processes Running: Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
C:\Users\mel\AppData\Roaming\Mozilla\Firefox\Profiles\hqnig03x.default\prefs.js
M2 - MFEP: prefs.js [bruna - hqnig03x.default\ascsurfingprotection@iobit.com] [] Advanced SystemCare Surfing Protection v1.0 (..)
~ Firefox Browser: 13 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 19
---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
O4 - HKCU\..\Run: [Pando Media Booster] . (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKCU\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKCU\..\Run: [Clownfish] . (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [Aeria Ignite] . (.Aeria Games & Entertainment - Aeria Ignite.) -- C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [Avira Systray] . (.Avira Operations GmbH & Co. KG - Avira.OE.Systray.) -- C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Pando Media Booster] . (.No owner - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\mel\AppData\Local\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Clownfish] . (.Bogdan Sharkov - Clownfish for Skype.) -- C:\Program Files (x86)\Clownfish\Clownfish.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-21-2481689253-1749219744-2318315373-1001\..\Run: [Advanced SystemCare 7] . (.IObit - Advanced SystemCare 7.) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe
~ Application: Scanned in 00mn 00s
---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: &Enviar para o OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: &Anotações Vinculadas do OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll =>.Microsoft Corporation
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Site na zona confiavél do Internet Explorer (05)
O15 - Trusted Zone: [HKCU\...\Domains] http.aeriagames.com
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0DEFF1A6-DEAB-4B61-B53E-2AF1D70BD882}: DhcpNameServer = 200.141.168.50 177.54.112.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{0DEFF1A6-DEAB-4B61-B53E-2AF1D70BD882}: DhcpNameServer = 200.141.168.50 177.54.112.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.141.168.50 177.54.112.22
~ Domain: Scanned in 00mn 00s
---\\ Protocolo adicional (018)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Tarefas planificadas automaticamente (039)
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]
O39 - APT: - (..) -- C:\Windows\Tasks\ASC7_SkipUac_bruna.job [254]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1070]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1074]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 34db5824-9782-4862-8714-0b95816b4d62 [522]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task cd54befb-cc2b-43a9-890e-f2128a134956 [522]
O39 - APT: - (..) -- C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job [290]
~ Scheduled Task: 15 Legitimates Filtered in 00mn 01s
---\\ Software instalados (042)
O42 - Logiciel: Cross Fire AL - (.Z8Games.com.) [HKLM][64Bits] -- Cross Fire AL_is1
O42 - Logiciel: Gerenciador de Downloads - (.Level Up! Gerenciador.) [HKCU][64Bits] -- a54e16f5d00985b6
O42 - Logiciel: Megareg versão 1.0.10 - (.Megaware Industrial LTDA.) [HKLM][64Bits] -- {A208472A-31B9-48D8-B2FC-E339134BB1DE}_is1
O42 - Logiciel: Warface - (.Level Up! Games.) [HKLM][64Bits] -- {094FAADD-5A39-4C64-911A-B4C9AD818484}_is1
~ Logic: 13 Legitimates Filtered in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\ARAR]
[HKCU\Software\Bark]
[HKCU\Software\Pando Networks]
[HKCU\Software\PriceMeterUpdater] =>PUP.PriceMeter
[HKLM\Software\Wow6432Node\Level Up! Interactive]
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\RCBR]
~ Key Software: 393 Legitimates Filtered in 00mn 00s
---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 05/01/2014 - 13:46:31 - [0] ----D C:\Program Files (x86)\Halo Combat Evolved
O43 - CFD: 24/04/2014 - 12:51:00 - [0] ----D C:\Program Files (x86)\Level Up Games
O43 - CFD: 26/10/2012 - 09:02:14 - [] ----D C:\Program Files (x86)\Megareg
O43 - CFD: 18/08/2013 - 13:52:32 - [] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 08/09/2013 - 14:33:33 - [] ----D C:\Program Files (x86)\Warface
O43 - CFD: 24/04/2014 - 12:47:23 - [0] ----D C:\Program Files (x86)\ZD Soft
O43 - CFD: 20/08/2013 - 22:02:15 - [] ----D C:\Program Files (x86)\Common Files\Nova pasta
O43 - CFD: 06/09/2013 - 15:19:22 - [] ----D C:\ProgramData\levelup downloader
O43 - CFD: 02/03/2014 - 12:31:01 - [] ----D C:\Users\mel\AppData\Roaming\rcru
O43 - CFD: 04/10/2013 - 16:04:56 - [0] --HAD C:\Users\mel\AppData\Local\rkwqmH6wLxJ
O43 - CFD: 18/11/2013 - 22:53:43 - [] ----D C:\Users\mel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Level Up! Gerenciador
~ Program Folder: 270 Legitimates Filtered in 00mn 00s
---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.0F93587577DF0BD8CC72322BC12FAA9B] - 04/05/2014 - 22:22:43 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [158296]
O44 - LFC:[MD5.1F397F37FE080A42EAAD7529BA526DD6] - 04/05/2014 - 22:22:43 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [774702]
O44 - LFC:[MD5.82C478C60090F235C1D76AEAD58DF96E] - 05/05/2014 - 12:18:10 ---A- . (...) -- C:\Windows\win.ini [269]
O44 - LFC:[MD5.9E604B946F503D7D69AAD17B50D3BEF6] - 10/05/2014 - 12:01:37 ---A- . (...) -- C:\ASCInit.log [457]
O44 - LFC:[MD5.D53A0800A3E7E720F12C1FD2854CC97B] - 10/05/2014 - 12:06:01 ---A- . (...) -- C:\Windows\System32\Drivers\RTAIODAT.DAT [757301]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 12/05/2014 - 12:33:13 ---A- . (...) -- C:\asc_rdflag [0]
O44 - LFC:[MD5.FED005F7E6E3DA98FFC086324F82699F] - 12/05/2014 - 15:19:20 ---A- . (...) -- C:\Windows\Sandboxie.ini [1758]
O44 - LFC:[MD5.E5BC62AE4EADEDC5BBD43766D45F7931] - 12/05/2014 - 15:44:42 ---A- . (...) -- C:\zoek-results.log [117470]
O44 - LFC:[MD5.0D70A146F9B48F202CA746386E108E86] - 12/05/2014 - 15:44:43 ---A- . (...) -- C:\folders.log [79]
~ Files: 48 Legitimates Filtered in 00mn 02s
---\\ Operações e funções ao arranque do Windows Explorer (046)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 19 Legitimates Filtered in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s
---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:12/08/2013 - 20:25:46 ---A- . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\Drivers\bcmfn2.sys [17624]
O58 - SDL:27/02/2014 - 23:15:47 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\Bfilter.sys [52032]
O58 - SDL:27/02/2014 - 23:15:56 ---A- . (.Baidu, Inc. - Baidu FS Monitor Driver.) -- C:\Windows\System32\Drivers\Bfmon.sys [34624] =>Adware.BDSearch
O58 - SDL:21/01/2014 - 07:01:36 ---A- . (.Baidu, Inc. - Baidu Antivirus Selfprotect Driver.) -- C:\Windows\System32\Drivers\Bprotect.sys [128992]
O58 - SDL:03/12/2012 - 16:36:34 ---A- . (.Windows (R) Win 7 DDK provider - Filter Driver for HID-KMDF Interface.) -- C:\Windows\System32\Drivers\hidkmdf.sys [13728]
O58 - SDL:22/08/2013 - 09:43:32 ---A- . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Windows x64.) -- C:\Windows\System32\Drivers\stexstor.sys [31072]
O58 - SDL:27/08/2013 - 15:12:47 ---A- . (.TENCENT - TesSafe64 NT Driver.) -- C:\Windows\System32\TesSafe.sys [159160] =>Adware.TencentAddressBar
O58 - SDL:30/11/2010 - 16:52:57 ---A- . (.OpenLibSys.org - WinRing0.) -- C:\Windows\System32\WinRing0.sys [14416]
O58 - SDL:30/11/2010 - 16:52:58 ---A- . (.OpenLibSys.org - WinRing0.) -- C:\Windows\System32\WinRing0x64.sys [14544]
O58 - SDL:25/12/2009 - 13:50:54 ---A- . (.ZD Soft - ZD Soft Screen Capture Driver.) -- C:\Windows\SysWOW64\drivers\scncap.sys [9984]
~ Drivers: 64 Legitimates Filtered in 00mn 05s
---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
O68 - StartMenuInternet:
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.354B869D0C2707DB12F1666F1EB0C3A9] [SPRF][17/04/2014] (...) -- C:\Users\mel\Desktop\CS 1.6 - 2013.exe [280279178]
~ Files: 1 Legitimates Filtered in 00mn 02s
---\\ Lista das exceções do FireWall (FirewallRules) (O87)
O87 - FAEL: "{75A293E6-16BC-429F-8ACD-2BBD053B3EC7}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{C0C0657D-42D2-40D8-AA10-462BACF87ECB}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Firewall: 2 Legitimates Filtered in 00mn 01s
---\\ Listagem dos dados da chave NameSpace (MNS) (O92)
O92 - MNS: - {1CF1260C-4DD0-4ebb-811F-33C572699FDE}
O92 - MNS: - {374DE290-123F-4565-9164-39C4925E467B}
O92 - MNS: - {3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}
O92 - MNS: - {A0953C92-50DC-43bf-BE83-3742FED03C9C}
O92 - MNS: - {A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}
O92 - MNS: - {B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
O92 - MNS: Fotos do iCloud - {F0D63F85-37EC-4097-B30D-61B4A8917118}
~ MNS: 8 Legitimates Filtered in 00mn 00s
---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 06/06/2011 64952 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 28/04/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Disabled 25/02/2014 1017424 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
SS - | Demand 03/10/2013 279000 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
SS - | Auto 18/08/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 18/08/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 17/12/2013 12 | (IEEtwCollectorService) . (...) - C:\Windows\System32\IEEtwCollector.exe
SS - | Auto 03/12/2013 2151200 | (LiveUpdateSvc) . (.IObit.) - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
SS - | Demand 29/03/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 11/06/2012 724376 | (ServiceLayer) . (.Nokia.) - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 19/02/2010 517096 | (SwitchBoard) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SS - | Auto 22/08/2013 37768 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 10/10/2013 144152 | (!SASCORE) . (.SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASCORE64.exe
SR - | Auto 14/01/2014 881952 | (AdvancedSystemCareService7) . (.IObit.) - C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
SR - | Auto 25/02/2014 440400 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
SR - | Auto 25/02/2014 440400 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 12/02/2014 43336 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 05/05/2014 124496 | (Avira.OE.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
SR - | Auto 07/03/2014 2135232 | (DragonUpdater) . (...) - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
SR - | Auto 20/04/2012 635104 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Demand 21/02/2014 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 25/06/2012 166720 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 17/07/2012 277824 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 04/03/2014 922968 | (nvsvc) . (.NVIDIA Corporation.) - C:\WINDOWS\system32\nvvsvc.exe
SR - | Auto 15/03/2013 1266464 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\WINDOWS\system32\PnkBstrA.exe
SR - | Auto 17/01/2014 187592 | (SbieSvc) . (.Sandboxie Holdings, LLC.) - C:\Program Files\Sandboxie\SbieSvc.exe
SR - | Auto 17/07/2012 365376 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Demand 10/07/1658 0 | (WdNisSvc) . (...) - C:\Program Files (x86)\Windows Defender\NisSrv.exe
SR - | Demand 10/07/1658 0 | (WinDefend) . (...) - C:\Program Files (x86)\Windows Defender\MsMpEng.exe
SR - | Auto 11/12/2012 619904 | (WTabletServiceCon) . (.Wacom Technology, Corp..) - C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
~ Services: Scanned in 00mn 07s
---\\ Scâner Aditional (088)
Database Version : 13045 - (12/05/2014)
Clés trouvées (Keys found) : 0
Valeurs trouvées (Values found) : 1
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 2
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:uTorrent =>P2P.BitTorrent^
C:\Users\mel\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent^
[HKCU\Software\PriceMeterUpdater] =>PUP.PriceMeter^
~ Additionnel Scan: 348222 Items scanned in 00mn 33s
---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.PriceMeter
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.BDSearch
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.TencentAddressBar
~ MSI: 3 link(s) detected in 00mn 00s
~ 895 Legitimates filtered by white list
End of the scan (459 lines in 01mn 22s)(0)
brunahhdm- Iniciante
- Mensagens : 12
Reputação : 0
Data de inscrição : 12/05/2014
Idade : 23
Re: Computador Lento + Vírus??
por Power Max Ter 13 maio 2014, 15:30
Ainda há programas desnecessários iniciando junto com o Windows, o que torna o seu PC mais lento. Para corrigir isto, siga as dicas deste tutorial:[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
De preferência deixe apenas os programas de segurança (anti-vírus/anti-spywares/firewall) iniciarem junto com o Windows.
Use também o programa Ccleaner, indicado neste tutorial acima, para fazer uma limpeza e otimização do PC agora e de tempos em tempos.
____________________________________________________________________________________________________________
Selecione e copie todo o texto destacado em vermelho que te passei._____________________________________________________________________________________________________________
Vá no menu: Iniciar > Todos os programas > ZHP > Clique com o botão direito do mouse sobre o Zhpfix e escolha a opção de Executar como administrador > Clique em Importação > Clique no botão GO > Clique em Oui > Caso queira que os arquivos da lixeira sejam excluídos clique em Oui novamente > Um relatório aparecerá no bloco de notas. Copie este relatório e poste em sua próxima resposta juntamente com o link da análise do arquivo no site Virus Total.
Power Max- Colaborador
- Mensagens : 9086
Reputação : 1499
Data de inscrição : 14/04/2009
Re: Computador Lento + Vírus??
por Danii Qua 28 maio 2014, 21:31
TÓPICO ARQUIVADO
Como a autora não respondeu por mais de 15 dias, o tópico foi arquivado. Caso a autora do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.
Como a autora não respondeu por mais de 15 dias, o tópico foi arquivado. Caso a autora do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.
Danii- Membro Pleno
- Mensagens : 571
Reputação : 80
Data de inscrição : 04/04/2014
Localização : Brasil
Tópicos semelhantes» PC lento; Acho que é virus
» Note book lento virus
» PC muito lento e provavelmente com vírus
» Vírus, muitos vírus - SOCORRO!!
» Virus detectado pelo avast, mas pc continua lento
» Note book lento virus
» PC muito lento e provavelmente com vírus
» Vírus, muitos vírus - SOCORRO!!
» Virus detectado pelo avast, mas pc continua lento
Página 1 de 1
Permissões neste sub-fórum
Não podes responder a tópicos