Re: Webssearches...

por marisemaia Seg 21 Jul 2014, 09:56

O ZHP Diag, não consegue passar do 1%... ele trava... Já reinstalei umas 3 x e mesmo assim não vai...

por **Power Max** Seg 21 Jul 2014, 10:10

Desative temporariamente seu antivirus para evitar conflitos.

Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( de g3n-h@ckm@n )
|- Ao acessar o link acima, role a página e clique em Télécharger para fazer o download: [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Execute-o da forma indicada nesta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Assim que a limpeza for concluída, poste o log (relatório) que estará em C:\Shortcut_Module_07_05_2014_17_05_22.txt (estes números em vermelho irão variar pois eles mostram a data e hora em que o escaneamento foi realizado).

por marisemaia Seg 21 Jul 2014, 14:28

¤¤¤¤¤¤¤¤¤¤ | Shortcut_Module | g3n-h@ckm@n | 21.07.2014.4

¤¤¤¤¤ Vista | 7 | 8 | 8.1 - 32/64 bits ¤¤¤¤¤ - Start 10:46:40 - 21/07/2014

Atualizado : 21/07/2014 | 14.15 Por g3n-h@ckm@n

Contact : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Assistance : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Feedbacks : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Boot: Normal boot

[Marise (Administrator)] - [MARISEMAIA] - (Brasil [0416])
SID = S-1-5-21-2597956472-4088042801-1448267699-1000

Sistema : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1

Memória RAM = Total (MB) : 8369 | Livre (MB) : 2287
Pagefile = Total (MB) : 16737 | Livre (MB) : 12048
Virtual = Total (MB) : 4194 | Livre (MB) : 4039

Registro protegido, restabelecer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

¤¤¤¤¤¤¤¤¤¤ | Windows atualizado

Nenhuma atualização descoberta !!!

¤¤¤¤¤¤¤¤¤¤ | Navegadores

IE : 11.0.9600.17126 (

Microsoft Corporation. Todos os direitos reservados.)
FF : 30.0.0.5269 (

Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 36.0.1985.125 (Copyright 2012 Google Inc. All rights reserved.)
SF : 5.34.57.2 (Copyright Apple Inc. 2007-2012)

¤¤¤¤¤¤¤¤¤¤ | Security

AV : Baidu Antivirus Enabled
AM : Malwarebytes' Anti-Malware (1.0.0.532) []
FW :
WMI : OK
WU: Windows Update Service [Auto(2)] = Ordem
AS: Windows Defender [Auto(2)] = Ordem
FW: Windows FireWall Service [Auto(2)] = Ordem

Colocação apagada em um modo auxiliar !

¤¤¤¤¤¤¤¤¤¤ | FlashPlayer

ActiveX : 14.0.0.145
Plugin : 14.0.0.145

¤¤¤¤¤¤¤¤¤¤ | Processos mortos

1012 | [Owner : SISTEMA |Parent : 764] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 320.49.) - (8.17.13.2049) = C:\Windows\System32\nvvsvc.exe
160 | [Owner : SISTEMA |Parent : 764] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - (7.17.13.2049) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
564 | [Owner : SISTEMA |Parent : 764] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) - (3.2.2.0) = C:\PROGRA~2\GbPlugin\gbpsv.exe
1440 | [Owner : SISTEMA |Parent : 1012] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) - (8.17.13.2049) = C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
1484 | [Owner : SISTEMA |Parent : 1012] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 320.49.) - (8.17.13.2049) = C:\Windows\System32\nvvsvc.exe
1776 | [Owner : SISTEMA |Parent : 1116] - (.Microsoft Corporation - Windows Wireless LAN 802.11 Extensibility Framework.) - (6.1.7600.16385) = C:\Windows\System32\wlanext.exe
1784 | [Owner : SISTEMA |Parent : 636] - (.Microsoft Corporation - Host da Janela do Console.) - (6.1.7601.18229) = C:\Windows\System32\conhost.exe
1984 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corporation - Aplicativo de subsistema de spooler.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe
1616 | [Owner : SISTEMA |Parent : 764] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
1916 | [Owner : SISTEMA |Parent : 764] - (.Apple Inc. - YSLoader.exe.) - (17.327.4.24) = C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
2780 | [Owner : SISTEMA |Parent : 764] - (.Apple Inc. - Bonjour Service.) - (3.0.0.10) = C:\Program Files\Bonjour\mDNSResponder.exe
3032 | [Owner : SISTEMA |Parent : 764] - (.Broadcom Corporation. - Bluetooth Support Server.) - (6.4.0.2100) = C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
2324 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corporation - Updates Skype Click to Call.) - (7.2.15747.10003) = C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
2432 | [Owner : SERVIÇO DE REDE |Parent : 764] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) - (7.2.15747.10003) = C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
1452 | [Owner : SISTEMA |Parent : 764] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - (15.8.0.0) = C:\Program Files\Intel\WiFi\bin\EvtEng.exe
880 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corporation - Machine Debug Manager.) - (7.10.3077.0) = C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
3108 | [Owner : SISTEMA |Parent : 636] - (.Microsoft Corporation - Host da Janela do Console.) - (6.1.7601.18229) = C:\Windows\System32\conhost.exe
3312 | [Owner : UpdatusUser |Parent : 764] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - (6.4.23.3) = C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
3404 | [Owner : SISTEMA |Parent : 764] - (.Baidu Inc. - Baidu PC App Store Service.) - (4.5.1.6024) = C:\Program Files (x86)\Baidu Security\PC App Store\4.5.1.6024\PCAppStoreSvc.exe
3684 | [Owner : SISTEMA |Parent : 764] - (.arvato digital services llc - PsiService PsiService.) - (3.1.0.56) = C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
3728 | [Owner : SISTEMA |Parent : 764] - (. - .) - (0.0.0.0) = C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
3908 | [Owner : SISTEMA |Parent : 764] - (.RealNetworks, Inc. - RealPlayer Cloud Service.) - (1.0.11.1) = C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
3944 | [Owner : SISTEMA |Parent : 764] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - (15.8.0.0) = C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
1256 | [Owner : SISTEMA |Parent : 764] - (.TeamViewer GmbH - TeamViewer 9.) - (9.0.28223.0) = C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
3576 | [Owner : Marise |Parent : 764] - (.Microsoft Corporation - Processo de Host para Tarefas do Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe
2816 | [Owner : Marise |Parent : 3040] - (.Microsoft Corporation - Windows Explorer.) - (6.1.7601.17567) = C:\Windows\explorer.exe
4148 | [Owner : SISTEMA |Parent : 764] - (.Sony Corporation - VCM Intelligent Network Service Manager.) - (3.9.40.9080) = C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
4208 | [Owner : SISTEMA |Parent : 764] - (.Intel(R) Corporation - WiMAX SDK service for Intel(R) PROSet/Wireless WiMAX Software.) - (6.5.1036.1) = C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
4308 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corp. - Microsoft

Windows Live ID Service.) - (7.250.4311.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
4816 | [Owner : SISTEMA |Parent : 4308] - (.Microsoft Corp. - Microsoft

Windows Live ID Service Monitor.) - (7.250.4311.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
4836 | [Owner : Marise |Parent : 1440] - (.NVIDIA Corporation - NVIDIA Settings.) - (7.17.13.2049) = C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
5080 | [Owner : SISTEMA |Parent : 932] - (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.1.7600.16385) = C:\Windows\System32\wbem\unsecapp.exe
2284 | [Owner : SISTEMA |Parent : 764] - (.Red Bend Ltd. - Red Bend Device Management Service for Intel(R) PROSet/Wireless WiMAX Software.) - (2.0.0.28) = C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
4952 | [Owner : SISTEMA |Parent : 764] - (.Sony Corporation - VAIO Content Folder Watcher.) - (1.8.0.8260) = C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
5220 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corporation - Indexador do Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe
5740 | [Owner : SISTEMA |Parent : 764] - (.Sony Corporation - VAIO Entertainment Common Service.) - (1.3.0.9090) = C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
5712 | [Owner : Marise |Parent : 2816] - (.Intel

Corporation - Intel

PROSet/Wireless WiMAX Connection Utility.) - (6.5.4170.26793) = C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe
5168 | [Owner : Marise |Parent : 2816] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) - (16.2.16.3) = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
2676 | [Owner : Marise |Parent : 2816] - (.Realtek Semiconductor - HD Audio Background Process.) - (1.0.0.136) = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
4108 | [Owner : Marise |Parent : 2816] - (.Realtek Semiconductor - HD Audio Background Process.) - (1.0.0.136) = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
5600 | [Owner : Marise |Parent : 5992] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) - (16.2.16.3) = C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
3844 | [Owner : Marise |Parent : 2816] - (.Intel Corporation - Bluetooth LE Services Control Program.) - (2.6.0.260) = C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
3168 | [Owner : SISTEMA |Parent : 764] - (.Sony Corporation - VCM Intelligent Analyzing Manager.) - (3.9.40.9080) = C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
6188 | [Owner : SISTEMA |Parent : 764] - (.Motorola Solutions, Inc. - Bluetooth Device Monitor.) - (3.0.1304.328) = C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
6352 | [Owner : SISTEMA |Parent : 764] - (.Motorola Solutions, Inc. - Bluetooth Media Service.) - (3.0.1304.328) = C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
6480 | [Owner : SISTEMA |Parent : 764] - (.Motorola Solutions, Inc. - Bluetooth OBEX Service.) - (3.0.1304.328) = C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
6936 | [Owner : SISTEMA |Parent : 764] - (.Intel Corporation - IAStorDataSvc.) - (12.5.0.1066) = C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
6820 | [Owner : SISTEMA |Parent : 764] - (.Intel Corporation - Local Manageability Service.) - (7.0.10.1203) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
5096 | [Owner : SISTEMA |Parent : 764] - (.Sony Corporation - VAIO Content Importer.) - (3.0.0.10280) = C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
7472 | [Owner : SISTEMA |Parent : 764] - (.Apple Inc. - iPodService Module (64-bit).) - (11.2.2.3) = C:\Program Files\iPod\bin\iPodService.exe
7720 | [Owner : SISTEMA |Parent : 764] - (.Intel Corporation - User Notification Service.) - (7.0.10.1203) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
18296 | [Owner : SERVIÇO DE REDE |Parent : 764] - (.Microsoft Corporation - Serviço de Compartilhamento de Rede do Windows Media Player.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe
18640 | [Owner : Marise |Parent : 1160] - (.Microsoft Corporation - Windows Update.) - (7.6.7600.320) = C:\Windows\System32\wuauclt.exe
13328 | [Owner : Marise |Parent : 3404] - (. - .) - (0.0.0.0) = C:\Program Files (x86)\Baidu Security\PC App Store\4.5.1.6024\AppStoreUtilExe.exe
18744 | [Owner : Marise |Parent : 720] - (.Microsoft Corporation - Host da Janela do Console.) - (6.1.7601.18229) = C:\Windows\System32\conhost.exe
20332 | [Owner : Marise |Parent : 2816] - (.Nokia - Nokia Ovi Suite.) - (3.1.1.90) = C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
13832 | [Owner : SISTEMA |Parent : 764] - (.Nokia - ServiceLayer Module.) - (12.0.109.0) = C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
13332 | [Owner : SISTEMA |Parent : 13832] - (.Nokia - USB Media Server.) - (12.0.109.0) = C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
3588 | [Owner : Marise |Parent : 13832] - (.Nokia - Microsoft Bluetooth Media Server.) - (12.0.109.0) = C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
8672 | [Owner : Marise |Parent : 932] - (.Nokia - Nokia M Platform.) - (2.7.72.0) = C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
16976 | [Owner : SERVIÇO LOCAL |Parent : 1116] - (.Microsoft Corporation - Windows Driver Foundation - Processo de Host da Estrutura de Driver de Modo de Usuário.) - (6.2.9200.16384) = C:\Windows\System32\WUDFHost.exe
14164 | [Owner : Marise |Parent : 932] - (.Apple Inc. - Apple Photostreams Uploader Executable.) - (7.13.13.5) = C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
18728 | [Owner : Marise |Parent : 932] - (.Apple Inc. - Apple Push.) - (2.2.10. Cool

= C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
9476 | [Owner : Marise |Parent : 932] - (.Apple Inc. - iCloud.) - (3.1.0.3) = C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
14652 | [Owner : Marise |Parent : 764] - (.Microsoft Corporation - Processo de Host para Tarefas do Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe
9020 | [Owner : SISTEMA |Parent : 5220] - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) - (7.0.7601.17610) = C:\Windows\System32\SearchProtocolHost.exe
16796 | [Owner : SISTEMA |Parent : 1160] - (.Microsoft Corporation - Mecanismo do Agendador de Tarefas.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
18768 | [Owner : SISTEMA |Parent : 5220] - (.Microsoft Corporation - Microsoft Windows Search Filter Host.) - (7.0.7601.17610) = C:\Windows\System32\SearchFilterHost.exe
20332 | [Owner : Marise |Parent : 2816] - (.Nokia - Nokia Ovi Suite.) - (3.1.1.90) = C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
10268 | [Owner : SISTEMA |Parent : 764] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) - (3.2.2.0) = C:\PROGRA~2\GbPlugin\gbpsv.exe
19768 | [Owner : SISTEMA |Parent : 764] - (.TeamViewer GmbH - TeamViewer 9.) - (9.0.28223.0) = C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

¤¤¤¤¤¤¤¤¤¤ | RUN

04 - HKLM\..\Run : [WheelMouse] C:\ADVANC~1\wh_exec.exe
04 - HKLM64\..\Run : [IntelWirelessWiMAX] "C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe" /tasktray /nosplash
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKU\S-1-5-18\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601

¤¤¤¤¤¤¤¤¤¤ | Serviços

funcionando : WINDEFEND
Serviço parado : WINDEFEND
funcionando : MMCSS
funcionando : Dhcp
funcionando : WMPNetworkSvc
Serviço parado : WMPNetworkSvc
funcionando : TcpIp
funcionando : WinHttpAutoProxysvc
Serviço parado : WinHttpAutoProxysvc
funcionando : SSDPSRV
funcionando : MPSSvc
Serviço parado : MPSSvc
funcionando : Rasman
Serviço parado : Rasman
funcionando : LanmanServer
funcionando : DNScache
Serviço parado : DNScache
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 4, 4, 4, 7875
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : \??\C:\Windows\System32\drivers\Bprotect.sys
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : Baidu Protect
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : Base
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : C:\Program Files (x86)\Baidu Security\Baidu Antivirus
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : Working Driver FileVersion:4.4.4.73411
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1402653789
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 130503410887960180
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 4.4.4.73411
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 2014.7.17
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : \??\C:\Windows\System32\drivers\BprotectEx.sys
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : Baidu ProtectEx
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : Base
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0
Apagado prosperamente : HKLM\..\ControlSet001\Services\esgiguard : \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
Apagado prosperamente : HKLM\..\ControlSet001\Services\hjlkfdajklfed3dfa : \??\C:\Program Files (x86)\SupTab\cfgdrv64.cfg
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 4, 4, 4, 7875
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : \??\C:\Windows\System32\drivers\Bprotect.sys
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : Baidu Protect
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : Base
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : C:\Program Files (x86)\Baidu Security\Baidu Antivirus
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : Working Driver FileVersion:4.4.4.73411
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1402653789
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 130503410887960180
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 4.4.4.73411
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 2014.7.17
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : \??\C:\Windows\System32\drivers\BprotectEx.sys
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : Baidu ProtectEx
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : Base
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0
Apagado prosperamente : HKLM\..\ControlSet002\Services\esgiguard : \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys
Apagado prosperamente : HKLM\..\ControlSet002\Services\hjlkfdajklfed3dfa : \??\C:\Program Files (x86)\SupTab\cfgdrv64.cfg
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 4, 4, 4, 7875
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : \??\C:\Windows\System32\drivers\Bprotect.sys
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : Baidu Protect
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : Base
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : C:\Program Files (x86)\Baidu Security\Baidu Antivirus
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : Working Driver FileVersion:4.4.4.73411
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1402653789
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 130503410887960180
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 4.4.4.73411
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 2014.7.17
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : \??\C:\Windows\System32\drivers\BprotectEx.sys
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : Baidu ProtectEx
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : Base
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0

¤¤¤¤¤¤¤¤¤¤ | Hosts

C:\Windows\System32\Drivers\etc\hosts : Reponha para zerar prosperamente

por marisemaia Seg 21 Jul 2014, 14:31

¤¤¤¤¤¤¤¤¤¤ | Registro

Apagado prosperamente : HKLM\Software\Classes\SVRDownloadButton.DownloadSitesFilter
Apagado prosperamente : HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2597956472-4088042801-1448267699-1000\Software\BrowseSmart
Apagado prosperamente : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-18\Software\IB Updater
Apagado prosperamente : HKLM\Software\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36} : C:\Program Files (x86)\MyFree Codec\1.0b beta\AC-3\ac3dx.ax (InProcServer32)
Apagado prosperamente : HKLM\Software\Classes\CLSID\{7E6F0AF9-F437-462C-BB41-CFABAF0460AB} : AVGrabber
Apagado prosperamente : HKLM\Software\Classes\CLSID\{C520FFEA-77A8-4DBB-B0D3-0DBDE48AEF90} :(CLSID)
Apagado prosperamente : HKLM\Software\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2} : MyFree Codec Filter
Apagado prosperamente : HKLM\Software\Classes\AppID\SoftwareUpdate.exe
Apagado prosperamente : HKLM\Software\Classes\AppID\{6A070EEA-E3F8-411E-9D3A-F3814ED6D1A8} : SoftwareUpdateApp
Apagado prosperamente : HKLM64\Software\Classes\AppID\SoftwareUpdateAdmin.DLL
Apagado prosperamente : HKLM\Software\Classes\TypeLib\{7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4} : SoftwareUpdate (1.0)
Apagado prosperamente : HKLM\Software\Classes\Interface\{19497743-0DD2-48BF-83AE-1F5EADFB3602} : _IiQScanFitObjIfEvents
Apagado prosperamente : HKLM\Software\Classes\Interface\{2C7F21A8-EA0B-43D3-B317-A067C848CACB} : _IiQScanObjIfEvents
Apagado prosperamente : HKLM\Software\Classes\Interface\{2F3694D6-3C21-4A68-9BA3-4F77CE8F7C55} : IDownloadSitesFilter
Apagado prosperamente : HKLM\Software\Classes\Interface\{35A431AE-240A-4C12-925E-B0117ACEAF5A} : _IiQSelectionBorderIfEvents
Apagado prosperamente : HKLM\Software\Classes\Interface\{3856F531-CD1E-4B00-91C7-ED75EC8E7C18} : IOneTab
Apagado prosperamente : HKLM\Software\Classes\Interface\{422CA428-AACB-496A-8FDD-86758BCFB756} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Apagado prosperamente : HKLM\Software\Classes\Interface\{5EBD614F-5F04-4197-B89D-A6FD2968BB94} : _IiQLicenseManagerIfEvents
Apagado prosperamente : HKLM\Software\Classes\Interface\{63B60A2C-7F80-48B3-AAFF-7282379AB8F9} : _IiQSphereObjIfEvents
Apagado prosperamente : HKLM\Software\Classes\Interface\{977FE674-9FD1-4F9E-BBAA-84CCF0438738} : IIsiSettingsServer
Apagado prosperamente : HKLM\Software\Classes\Interface\{995E123A-2A19-4E52-872F-774C5589459C} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Apagado prosperamente : HKLM\Software\Classes\Interface\{9C0C326D-D3FA-44EA-B94E-B13D43F42997} : _IiQAttributeIfEvents
Apagado prosperamente : HKLM\Software\Classes\Interface\{A52621AD-E10F-477B-9ACB-B6181610788B} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Apagado prosperamente : HKLM\Software\Classes\Interface\{DAF611F6-C2A6-41E8-B9A9-AFC0EFFDA9ED} : ISafeshop
Apagado prosperamente : HKLM\Software\Classes\Interface\{E6C80A5E-F4FD-4942-8318-422F863F4DB3} : _IiQObjectIfEvents
Apagado prosperamente : HKLM\Software\Classes\Interface\{EB88458F-FB18-4164-9E23-35F672CB22BD} : _IiQFitObjIfEvents
Apagado prosperamente : HKLM64\Software\Classes\Interface\{19497743-0DD2-48BF-83AE-1F5EADFB3602} : _IiQScanFitObjIfEvents
Apagado prosperamente : HKLM64\Software\Classes\Interface\{2C7F21A8-EA0B-43D3-B317-A067C848CACB} : _IiQScanObjIfEvents
Apagado prosperamente : HKLM64\Software\Classes\Interface\{2F3694D6-3C21-4A68-9BA3-4F77CE8F7C55} : IDownloadSitesFilter
Apagado prosperamente : HKLM64\Software\Classes\Interface\{35A431AE-240A-4C12-925E-B0117ACEAF5A} : _IiQSelectionBorderIfEvents
Apagado prosperamente : HKLM64\Software\Classes\Interface\{3856F531-CD1E-4B00-91C7-ED75EC8E7C18} : IOneTab
Apagado prosperamente : HKLM64\Software\Classes\Interface\{422CA428-AACB-496A-8FDD-86758BCFB756} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Apagado prosperamente : HKLM64\Software\Classes\Interface\{5EBD614F-5F04-4197-B89D-A6FD2968BB94} : _IiQLicenseManagerIfEvents
Apagado prosperamente : HKLM64\Software\Classes\Interface\{63B60A2C-7F80-48B3-AAFF-7282379AB8F9} : _IiQSphereObjIfEvents
Apagado prosperamente : HKLM64\Software\Classes\Interface\{977FE674-9FD1-4F9E-BBAA-84CCF0438738} : IIsiSettingsServer
Apagado prosperamente : HKLM64\Software\Classes\Interface\{995E123A-2A19-4E52-872F-774C5589459C} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Apagado prosperamente : HKLM64\Software\Classes\Interface\{9C0C326D-D3FA-44EA-B94E-B13D43F42997} : _IiQAttributeIfEvents
Apagado prosperamente : HKLM64\Software\Classes\Interface\{A52621AD-E10F-477B-9ACB-B6181610788B} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Apagado prosperamente : HKLM64\Software\Classes\Interface\{DAF611F6-C2A6-41E8-B9A9-AFC0EFFDA9ED} : ISafeshop
Apagado prosperamente : HKLM64\Software\Classes\Interface\{E6C80A5E-F4FD-4942-8318-422F863F4DB3} : _IiQObjectIfEvents
Apagado prosperamente : HKLM64\Software\Classes\Interface\{EB88458F-FB18-4164-9E23-35F672CB22BD} : _IiQFitObjIfEvents
Apagado prosperamente : HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Softonic
¤¤¤¤¤¤¤¤¤¤ | Shortcut_Module | g3n-h@ckm@n | 21.07.2014.4

¤¤¤¤¤ Vista | 7 | 8 | 8.1 - 32/64 bits ¤¤¤¤¤ - Start 11:25:57 - 21/07/2014

Atualizado : 21/07/2014 | 14.15 Por g3n-h@ckm@n

Contact : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Assistance : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Feedbacks : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Boot: Normal boot

[Marise (Administrator)] - [MARISEMAIA] - (Brasil [0416])
SID = S-1-5-21-2597956472-4088042801-1448267699-1000

Sistema : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1

Memória RAM = Total (MB) : 8369 | Livre (MB) : 1986
Pagefile = Total (MB) : 16737 | Livre (MB) : 12530
Virtual = Total (MB) : 4194 | Livre (MB) : 4035

Registro protegido, restabelecer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

¤¤¤¤¤¤¤¤¤¤ | Windows atualizado

Nenhuma atualização descoberta !!!

¤¤¤¤¤¤¤¤¤¤ | Navegadores

IE : 11.0.9600.17126 (

Microsoft Corporation. Todos os direitos reservados.)
FF : 30.0.0.5269 (

Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 36.0.1985.125 (Copyright 2012 Google Inc. All rights reserved.)
SF : 5.34.57.2 (Copyright Apple Inc. 2007-2012)

¤¤¤¤¤¤¤¤¤¤ | Security

AV : Baidu Antivirus Enabled
AM : Malwarebytes' Anti-Malware (1.0.0.532) []
FW :
WMI : OK
WU: Windows Update Service [Auto(2)] = Ordem
AS: Windows Defender [Auto(2)] = Ordem
FW: Windows FireWall Service [Auto(2)] = Ordem

Colocação apagada em um modo auxiliar !

¤¤¤¤¤¤¤¤¤¤ | FlashPlayer

ActiveX : 14.0.0.145
Plugin : 14.0.0.145

¤¤¤¤¤¤¤¤¤¤ | Processos mortos

18048 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corp. - Microsoft

Windows Live ID Service.) - (7.250.4311.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
9024 | [Owner : SISTEMA |Parent : 764] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) - (3.2.2.0) = C:\PROGRA~2\GbPlugin\gbpsv.exe
2572 | [Owner : SISTEMA |Parent : 18048] - (.Microsoft Corp. - Microsoft

Windows Live ID Service Monitor.) - (7.250.4311.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
13544 | [Owner : SISTEMA |Parent : 764] - (.Intel Corporation - Local Manageability Service.) - (7.0.10.1203) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
19004 | [Owner : SISTEMA |Parent : 764] - (.Nokia - ServiceLayer Module.) - (12.0.109.0) = C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
6108 | [Owner : SISTEMA |Parent : 764] - (.Broadcom Corporation. - Bluetooth Support Server.) - (6.4.0.2100) = C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
4540 | [Owner : SISTEMA |Parent : 764] - (.Apple Inc. - YSLoader.exe.) - (17.327.4.24) = C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
14276 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corporation - Aplicativo de subsistema de spooler.) - (6.1.7601.17777) = C:\Windows\System32\spoolsv.exe
7996 | [Owner : SISTEMA |Parent : 764] - (.Intel(R) Corporation - WiMAX SDK service for Intel(R) PROSet/Wireless WiMAX Software.) - (6.5.1036.1) = C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
18380 | [Owner : SISTEMA |Parent : 764] - (.Red Bend Ltd. - Red Bend Device Management Service for Intel(R) PROSet/Wireless WiMAX Software.) - (2.0.0.28) = C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
10400 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corporation - Indexador do Microsoft Windows Search.) - (7.0.7601.17610) = C:\Windows\System32\SearchIndexer.exe
8228 | [Owner : SISTEMA |Parent : 10400] - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) - (7.0.7601.17610) = C:\Windows\System32\SearchProtocolHost.exe
4340 | [Owner : SISTEMA |Parent : 636] - (.Microsoft Corporation - Host da Janela do Console.) - (6.1.7601.18229) = C:\Windows\System32\conhost.exe
16764 | [Owner : Marise |Parent : 764] - (.Microsoft Corporation - Processo de Host para Tarefas do Windows.) - (6.1.7601.18010) = C:\Windows\System32\taskhost.exe
18020 | [Owner : Marise |Parent : 1160] - (.Microsoft Corporation - Mecanismo do Agendador de Tarefas.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
17456 | [Owner : Marise |Parent : 18020] - (.RealNetworks, Inc. - RealUpgrade Launcher.) - (1.3.3.66) = C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
6432 | [Owner : SISTEMA |Parent : 1160] - (.Microsoft Corporation - Mecanismo do Agendador de Tarefas.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
17356 | [Owner : Marise |Parent : 1160] - (.Microsoft Corporation - Mecanismo do Agendador de Tarefas.) - (6.1.7601.17514) = C:\Windows\System32\taskeng.exe
14392 | [Owner : Marise |Parent : 19272] - (.Microsoft Corporation - Windows Explorer.) - (6.1.7601.17567) = C:\Windows\explorer.exe
6300 | [Owner : Marise |Parent : 14392] - (.Intel

Corporation - Intel

PROSet/Wireless WiMAX Connection Utility.) - (6.5.4170.26793) = C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe
17768 | [Owner : Marise |Parent : 14392] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) - (16.2.16.3) = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
12708 | [Owner : Marise |Parent : 14392] - (.Realtek Semiconductor - HD Audio Background Process.) - (1.0.0.136) = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
8956 | [Owner : Marise |Parent : 14392] - (.Realtek Semiconductor - HD Audio Background Process.) - (1.0.0.136) = C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
17008 | [Owner : Marise |Parent : 14392] - (.Intel Corporation - Bluetooth LE Services Control Program.) - (2.6.0.260) = C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
17468 | [Owner : Marise |Parent : 14392] - (.Apple Inc. - Apple Photostreams Uploader Executable.) - (7.13.13.5) = C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
19956 | [Owner : Marise |Parent : 14392] - (.Codelines - SilentIdea.) - (4.0.0.0) = C:\Program Files (x86)\SilentIdea 4.0\SilentIdea.exe
1220 | [Owner : Marise |Parent : 8444] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) - (16.2.16.3) = C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
11596 | [Owner : Marise |Parent : 14392] - (.Google - Google Drive.) - (1.16.7009.9618) = C:\Program Files (x86)\Google\Drive\googledrivesync.exe
7316 | [Owner : Marise |Parent : 1160] - (.Microsoft Corporation - Windows Update.) - (7.6.7600.320) = C:\Windows\System32\wuauclt.exe
17948 | [Owner : Marise |Parent : 18020] - (.Sony Corporation - SHTtray.) - (3.0.0.10280) = C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
18248 | [Owner : SERVIÇO LOCAL |Parent : 1116] - (.Microsoft Corporation - Windows Driver Foundation - Processo de Host da Estrutura de Driver de Modo de Usuário.) - (6.2.9200.16384) = C:\Windows\System32\WUDFHost.exe
2400 | [Owner : Marise |Parent : 932] - (.Apple Inc. - Apple Push.) - (2.2.10. Cool

= C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
15884 | [Owner : SISTEMA |Parent : 764] - (.Motorola Solutions, Inc. - Bluetooth Device Monitor.) - (3.0.1304.328) = C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
19712 | [Owner : Marise |Parent : 14392] - (.Samsung - Kies.) - (1.0.0.1821) = C:\Program Files (x86)\Samsung\Kies\Kies.exe
8492 | [Owner : Marise |Parent : 14392] - (.Apple Inc. - iCloud.) - (3.1.0.3) = C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
20440 | [Owner : Marise |Parent : 14392] - (.Autodesk, Inc. - Autodesk 360.) - (4.0.27.1) = C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
12832 | [Owner : SERVIÇO DE REDE |Parent : 764] - (.Microsoft Corporation - Serviço de Compartilhamento de Rede do Windows Media Player.) - (12.0.7601.17514) = C:\Program Files\Windows Media Player\wmpnetwk.exe
8896 | [Owner : Marise |Parent : 14392] - (.DVDVideoSoft Ltd. - Free Video Call Recorder for Skype.) - (1.2.15.514) = C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\skyui.exe
13948 | [Owner : Marise |Parent : 14392] - (.Skype Technologies S.A. - Skype .) - (6.16.0.105) = C:\Program Files (x86)\Skype\Phone\Skype.exe
12444 | [Owner : Marise |Parent : 14392] - (.RealNetworks, Inc. - RealPlayer Cloud Service UI.) - (1.0.4.148) = C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
17780 | [Owner : Marise |Parent : 19104] - (. - Mouse Start Program.) - (4.0.0.950) = C:\Advanced Wheel Mouse\wh_exec.exe
18756 | [Owner : Marise |Parent : 11596] - (.Google - Google Drive.) - (1.16.7009.9618) = C:\Program Files (x86)\Google\Drive\googledrivesync.exe
20024 | [Owner : Marise |Parent : 14392] - (.Evernote Corp., 305 Walnut Street, Redwood City, CA 94063 - Evernote Clipper.) - (5.4.0.3698) = C:\Users\Marise\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe
20176 | [Owner : Marise |Parent : 14392] - (.Codelines - .) - (3.2.0.3) = C:\Program Files (x86)\SilentIdea\silentid.exe
12440 | [Owner : Marise |Parent : 7760] - (.Intel Corporation - IAStorIcon.) - (12.5.0.1066) = C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
5580 | [Owner : Marise |Parent : 19104] - (.Nokia - Nokia M Platform.) - (2.7.72.0) = C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
20052 | [Owner : Marise |Parent : 19104] - (.BlueStack Systems, Inc. - BlueStacks Agent.) - (0.7.18.921) = C:\Program Files (x86)\BlueStacks\HD-Agent.exe
2276 | [Owner : Marise |Parent : 19104] - (.Apple Inc. - iTunesHelper.) - (11.2.2.3) = C:\Program Files (x86)\iTunes\iTunesHelper.exe
19160 | [Owner : Marise |Parent : 19104] - (.RealNetworks, Inc. - RealNetworks Scheduler.) - (17.0.11.0) = C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
7924 | [Owner : Marise |Parent : 19104] - (.Oracle Corporation - Java(TM) Update Scheduler.) - (2.1.65.20) = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
13012 | [Owner : Marise |Parent : 19104] - (. - .) - (0.0.0.0) = C:\Program Files (x86)\Baidu Security\PC App Store\4.5.1.6024\AppStoreDeskTool.exe
10064 | [Owner : SISTEMA |Parent : 764] - (.Apple Inc. - iPodService Module (64-bit).) - (11.2.2.3) = C:\Program Files\iPod\bin\iPodService.exe
19804 | [Owner : SISTEMA |Parent : 764] - (.Skype Technologies - Skype Updater Service.) - (6.8.0.112) = C:\Program Files (x86)\Skype\Updater\Updater.exe
2984 | [Owner : Marise |Parent : 3496] - (.Baidu, Inc. - Baidu AndroidStore Helper.) - (1.2.8.1923) = C:\Program Files (x86)\Baidu Security\Android Store\1.2.8.1923\bas_helper.exe
1848 | [Owner : SISTEMA |Parent : 764] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) - (3.2.2.0) = C:\PROGRA~2\GbPlugin\gbpsv.exe
4272 | [Owner : SISTEMA |Parent : 764] - (.Intel Corporation - Local Manageability Service.) - (7.0.10.1203) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
4288 | [Owner : SISTEMA |Parent : 764] - (.Microsoft Corp. - Microsoft

Windows Live ID Service.) - (7.250.4311.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12424 | [Owner : SISTEMA |Parent : 4288] - (.Microsoft Corp. - Microsoft

Windows Live ID Service Monitor.) - (7.250.4311.0) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
3192 | [Owner : Marise |Parent : 932] - (.Microsoft Corporation - Processo de host do Windows (Rundll32).) - (6.1.7600.16385) = C:\Windows\System32\rundll32.exe

¤¤¤¤¤¤¤¤¤¤ | RUN

04 - HKLM\..\Run : [WheelMouse] C:\ADVANC~1\wh_exec.exe
04 - HKLM64\..\Run : [IntelWirelessWiMAX] "C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe" /tasktray /nosplash
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKU\S-1-5-18\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601

¤¤¤¤¤¤¤¤¤¤ | Serviços

funcionando : MMCSS
funcionando : Dhcp
funcionando : TcpIp
funcionando : WinHttpAutoProxysvc
Serviço parado : WinHttpAutoProxysvc
funcionando : SSDPSRV
funcionando : Rasman
Serviço parado : Rasman
funcionando : LanmanServer
funcionando : DNScache
Serviço parado : DNScache
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 4, 4, 4, 7875
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : \??\C:\Windows\System32\drivers\Bprotect.sys
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : Baidu Protect
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : Base
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : C:\Program Files (x86)\Baidu Security\Baidu Antivirus
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : Working Driver FileVersion:4.4.4.73411
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 1402653789
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 130503410887960180
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 4.4.4.73411
Apagado prosperamente : HKLM\..\ControlSet001\Services\Bprotect : 2014.7.17
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : \??\C:\Windows\System32\drivers\BprotectEx.sys
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : Baidu ProtectEx
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : Base
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet001\Services\BprotectEx : C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 4, 4, 4, 7875
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : \??\C:\Windows\System32\drivers\Bprotect.sys
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : Baidu Protect
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : Base
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : C:\Program Files (x86)\Baidu Security\Baidu Antivirus
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : Working Driver FileVersion:4.4.4.73411
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 1402653789
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 130503410887960180
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 4.4.4.73411
Apagado prosperamente : HKLM\..\ControlSet002\Services\Bprotect : 2014.7.17
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : \??\C:\Windows\System32\drivers\BprotectEx.sys
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : Baidu ProtectEx
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : Base
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\ControlSet002\Services\BprotectEx : C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 4, 4, 4, 7875
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : \??\C:\Windows\System32\drivers\Bprotect.sys
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : Baidu Protect
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : Base
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : C:\Program Files (x86)\Baidu Security\Baidu Antivirus
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : Working Driver FileVersion:4.4.4.73411
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 1402653789
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 130503410887960180
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 4.4.4.73411
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\Bprotect : 2014.7.17
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : \??\C:\Windows\System32\drivers\BprotectEx.sys
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : Baidu ProtectEx
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : Base
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : 1
Apagado prosperamente : HKLM\..\CurrentControlSet\Services\BprotectEx : C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0

¤¤¤¤¤¤¤¤¤¤ | Hosts

C:\Windows\System32\Drivers\etc\hosts : Reponha para zerar prosperamente

¤¤¤¤¤¤¤¤¤¤ | Registro

Apagado prosperamente : [HKLM\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]|[Plus-HD-4.1-bg.exe]
Apagado prosperamente : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc
Apagado prosperamente : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Apagado prosperamente : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Nokia Suite : C:\Users\Marise\AppData\Local\Temp\NOSEventMessages.dll
Apagado prosperamente : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\OviSuite : C:\Users\Marise\AppData\Local\Temp\NOSEventMessages.dll
Apagado prosperamente : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update BrowseSmart
Apagado prosperamente : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util BrowseSmart
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\delta-homes_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\deskSvc_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\Plus-HD-4_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\RegCleanPro_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\RegCurePro_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\SoftwareUpdate_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\tuto4pc_br_31_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\tuto4pc_br_45_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\upt4pc_br_31_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\upt4pc_br_45_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\VAFPlayer_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\winzipersvc_RASAPI32
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\delta-homes_RASMANCS
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\Plus-HD-4_RASMANCS
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\RegCleanPro_RASMANCS
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\SoftwareUpdate_RASMANCS
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\tuto4pc_br_31_RASMANCS
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\upt4pc_br_31_RASMANCS
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\VAFPlayer_RASMANCS
Apagado prosperamente : HKLM\Software\Microsoft\Tracing\winzipersvc_RASMANCS
Apagado prosperamente : HKLM64\Software\Microsoft\Tracing\DriverEasy_RASAPI32
Apagado prosperamente : HKLM64\Software\Microsoft\Tracing\DriverEasy_RASMANCS
Apagado prosperamente : HKLM\SOFTWARE\FlvPlayer
Apagado prosperamente : HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\SOFTWARE\ToolbarCleaner
Apagado prosperamente : HKU\S-1-5-18\SOFTWARE\DealPly
Apagado prosperamente : [HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Apagado prosperamente : [HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]|[DoNotAskAgain] : bing.com
delta-homes.com
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} : ShopperReports.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} : alotBHO.dll;alotBHO.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754} : ShoppingReport.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7} : PCTBrowserDefender.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} : BabylonToolbar.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825} : PCTBrowserDefender.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{57F02779-3D88-4958-8AD3-83C12D86ADC7} : advancedsearchbar.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} : alot.dll;alot.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600} : SuperfishIEAddon.dll;SuperfishIEAddon.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} : BabylonToolbar.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} : ShoppingReport.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CDEEC43D-3572-4E95-A2A5-F519D29F00C0} : advancedsearchbar.dll
Apagado prosperamente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} : BabylonToolbarTlbr.dll
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{57F02779-3D88-4958-8AD3-83C12D86ADC7}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CDEEC43D-3572-4E95-A2A5-F519D29F00C0}
Apagado prosperamente : HKLM64\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}
Apagado prosperamente : HKLM\Software\Classes\Installer\Products\14D02E18772C625439D42F83A09FB187 : 4F76E2D5BAF16E945A3AFDE1B5F558F7
Apagado prosperamente : HKLM\Software\Classes\Installer\Products\7D36A49F16A9B304F8F6091BFB7712A1 : RegHunter
Apagado prosperamente : HKLM\Software\Classes\Installer\Products\8BAD244577171E94B822900A94AE9569 : C:\Program Files\Easeware\DriverEasy\x64\FUSB3_allOS_2.1.28.1_PV\
Apagado prosperamente : HKLM\Software\Classes\Installer\Features\07977D70502BC064484E62F303545579 : Product
Apagado prosperamente : HKLM\Software\Classes\Installer\Features\C2B4A4AA56408FC3AB67720A728DCABA :
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5 : C:\Program Files (x86)\Iminent\inst\Bootstrapper\Bootstrapper.exe
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B38FC71BD72BE246B6463E7EDC62D44 : C:\Program Files\Enigma Software Group\RegHunter\SystemInformation.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0C776EBEBCBCFBE408892EE7B12517FC : C:\Program Files (x86)\Tuguu SL\VAFPlayer\
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375 : 02:\SOFTWARE\Iminent\AppInstanceUid
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DC855B36CF950E45B8116BD57BF3197 : C:\Program Files\Enigma Software Group\RegHunter\EnigmaRegMonInjDrv64.sys
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\310658A878B86C57A0D1DBA8B5F2778D : C:\Program Files (x86)\Tuguu SL\VAFPlayer\Uninstall.exe
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\343B242B7FE7109B9DFD407F7C7149D2 : C:\Program Files (x86)\Tuguu SL\VAFPlayer\FileBrowser.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43703D3EA4136911E813F1496D1AA8D8 : 01:\Software\Tuguu SL\VAFPlayer\{E3D30734-314A-1196-8E31-1F94D6A18A8D}\AppDataFolder
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\452E33C2208B96A2C611A0C7251AFF7D : C:\Program Files (x86)\Tuguu SL\VAFPlayer\VAFPlayer.exe
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46BAA20FC4F279940BCBE11658DB9FF6 : 22:\Software\EnigmaSoftwareGroup\RegHunter\RegHunterConfig\
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467 : 01:\Software\Smartbar\version
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6941EA4EC58B0466D6BDD3A5A504270A : C:\Program Files (x86)\Tuguu SL\VAFPlayer\ComponentFactory.Krypton.Toolkit.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D : 02:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP\UserSettings
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6FEF9E2E9DE9BCD48A8193F51F7E93C6 : C:\Program Files\Enigma Software Group\RegHunter\Scanner.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73115182FD04D5A8FCEE3B3B2EC86D63 : C:\Program Files (x86)\Tuguu SL\VAFPlayer\VAFPlayer.exe.config
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\757115D951DB79B489565DEF638D969D : C:\Program Files\Enigma Software Group\RegHunter\Defs\def.dat
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\83D3C395DDBF90E41A71E8AFBDB71AA6 : C:\Program Files\Enigma Software Group\RegHunter\DefManager.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8973970098B5F4C2E4A4EB377AA89875 : C:\Program Files (x86)\Tuguu SL\VAFPlayer\VAFUpdate.exe
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F5C5B5273585D0657BE15489262C4B6 : C:\Program Files (x86)\Tuguu SL\VAFPlayer\AxInterop.WMPLib.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\997D86600D6680AC2618E09303750548 : C:\Program Files (x86)\Tuguu SL\VAFPlayer\libreria.ico
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1FA773E89715C8351A125FB5A8796EE : C:\Program Files (x86)\Tuguu SL\VAFPlayer\UltraID3Lib.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6B2C864FE29ACD40BB04A1980543DFD : C:\Program Files\Enigma Software Group\RegHunter\Updater.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C97C398FEDA7104448F143EB9E4EC567 : C:\Program Files\Enigma Software Group\
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE9F50F475CC003B2C53E0AB7F487C97 : C:\Program Files (x86)\Tuguu SL\VAFPlayer\wmp.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D0CEFEA5ECF596B51530904E4D8006CA : C:\Program Files (x86)\Tuguu SL\VAFPlayer\Interop.WMPLib.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D54E80483C312496051E80903F877846 : C:\Program Files (x86)\Tuguu SL\VAFPlayer\uninstall.ico
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D7779B673F633794CA19A9285DC67607 : C:\Program Files\Enigma Software Group\RegHunter\English.lng
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F459C093EFC24F0823C7602B7FA3D0B8 : C:\Program Files (x86)\Tuguu SL\VAFPlayer\Newtonsoft.Json.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F548FC8D8F870894DB724A380645C64A : C:\Program Files\Enigma Software Group\RegHunter\Acp.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F59BE66FFFBDA8E4FBE7E1D6FF1548A8 : C:\Program Files\Enigma Software Group\RegHunter\Common.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FADDBF3F0BE572A4F951EB9A562BC283 : C:\Program Files\Enigma Software Group\RegHunter\RegHunter.exe
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FDB61DCA932A5654FA2C97BEA702A71C : C:\Program Files\Enigma Software Group\RegHunter\RegMonitor.dll
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0C776EBEBCBCFBE408892EE7B12517FC : Tuguu SL
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7D36A49F16A9B304F8F6091BFB7712A1 : C:\Program Files\Enigma Software Group\RegHunter\
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8BAD244577171E94B822900A94AE9569 : C:\Program Files\Easeware\DriverEasy\x64\FUSB3_allOS_2.1.28.1_PV\
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files (x86)\Iminent\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files (x86)\Tuguu SL\VAFPlayer\languages\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files (x86)\Tuguu SL\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files\Enigma Software Group\SpyHunter\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files (x86)\Enigma Software Group\SpyHunter\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files (x86)\Enigma Software Group\SpyHunter\Defs\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Users\Marise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files\Enigma Software Group\RegHunter\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files (x86)\Tuguu SL\VAFPlayer\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files\Enigma Software Group\]
Apagado prosperamente : [HKLM64\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files\Enigma Software Group\RegHunter\Defs\]
Apagado prosperamente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Baidu PC Faster 4.0.0.0 : Installcore|br|IBD|Bundle
Apagado prosperamente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\FlvPlayer
Apagado prosperamente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996} : C:\Program Files\Easeware\DriverEasy\x64\FUSB3_allOS_2.1.28.1_PV\
Apagado prosperamente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{36386dc9-8543-4b12-ae6b-220fd52f19f3}_is1 : "C:\Users\Marise\AppData\Roaming\unins000.exe"
Apagado prosperamente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{584F7589-11B1-434C-80B8-71F6EE6E63F6} : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Apagado prosperamente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1 : "C:\Users\Marise\AppData\Roaming\unins001.exe"
Apagado prosperamente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C547F361-5750-4CD1-9FB6-BC93827CB6C1} : C:\Program Files (x86)\ParetoLogic\RegCure Pro
Apagado prosperamente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Baidu PC Faster 4.0.0.0 : Installcore|br|IBD|Bundle
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowseSmart
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Uninstall\DriverEasy_is1
Apagado prosperamente : HKLM64\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F94A63D7-9A61-403B-8F6F-90B1BF77211A} : C:\Program Files\Enigma Software Group\RegHunter\RegHunter.exe,0
Apagado prosperamente : HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Apagado prosperamente : HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Apagado prosperamente : HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Advanced System Protector_startup
Apagado prosperamente : HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserDefendert
Apagado prosperamente : HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPly
Apagado prosperamente : HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Funmoods
Apagado prosperamente : HKLM64\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser
Apagado prosperamente : [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]|[tuto4pc_br_45] :

¤¤¤¤¤¤¤¤¤¤ | Offsets

por marisemaia Seg 21 Jul 2014, 14:32

¤¤¤¤¤¤¤¤¤¤ | reparsepoint

¤¤¤¤¤¤¤¤¤¤ | Arquivos

Apagado prosperamente : C:\Program Files (x86)\Enigma Software Group
Apagado prosperamente : C:\Program Files (x86)\FlvPlayer
Apagado prosperamente : C:\Program Files (x86)\GUM27DB.tmp
Apagado prosperamente : C:\Program Files (x86)\Plus-HD-4.1
Apagado prosperamente : C:\Program Files\Easeware
Apagado prosperamente : C:\Program Files\Enigma Software Group
Apagado prosperamente : C:\Program Files\FileViewPro\FileViewPro.Views.Message.dll (Copyright © 2011.- .UniversalFileOpener.Views.Message) FileViewPro.Views.Message.dll
Apagado prosperamente : C:\Program Files\FileViewPro\FileViewPro.Views.Mime.dll (Copyright © 2011.- .UniversalFileOpener.Views.Mime) FileViewPro.Views.Mime.dll
Apagado prosperamente : C:\Windows\System32\Config\Systemprofile\AppData\Roaming\DealPly
Apagado prosperamente : C:\spyhunter.fix (.- .)
Apagado prosperamente : C:\Users\All Users\boost_interprocess
Apagado prosperamente : C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\DriverEasy
Apagado prosperamente : C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\FlvPlayer
Apagado prosperamente : C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\MyFree Codec
Apagado prosperamente : C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\RegHunter
Apagado prosperamente : [Marise | GC] : gomekmidlodglbbmalcneegieacbdmki = Browser Security
Apagado prosperamente : [Marise | GC] : kpiglpdbbmcnncekagalndhicllimchm = Crossrider
Apagado prosperamente : C:\Users\Marise\AppData\Local\Spark\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Apagado prosperamente : C:\Users\Marise\AppData\Local\Temp\NOSEventMessages.dll (.-.)
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\Easeware
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\unins000.dat (.-.)
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\unins000.exe (.-.)
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\unins001.dat (.-.)
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\unins001.exe (.-.)
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\Baidu Security\PC Faster\3.6.0.35848\NewUpdate\I18N\1033\BaiduSafe\skin\optimizer
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\Baidu Security\PC Faster\3.6.0.35848\NewUpdate\I18N\1046\BaiduSafe\skin\optimizer
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\Baidu Security\PC Faster\3.6.0.35848\NewUpdate\I18N\1054\BaiduSafe\skin\optimizer
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk = Smartbar
Apagado prosperamente : C:\Users\Marise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
Apagado prosperamente : C:\ProgramData\FileSplitUpLoad.dll
Apagado prosperamente : C:\Users\Marise\AppData\Local\A8A15E8A-2C7B-495F-9BB1-25CF0A86ED3B.aplzod
Apagado prosperamente : C:\Windows\Installer\1a822da.msi(Snap.Do - ReSoft Ltd.)
Apagado prosperamente : C:\Windows\Installer\528acd.msi(- Enigma Software Group USA, LLC)
Apagado prosperamente : C:\Windows\Installer\592ee3.msi(- Tuguu SL)
Apagado prosperamente : C:\Windows\Installer\c43aa6.msi(- Enigma Software Group USA, LLC)

¤¤¤¤¤¤¤¤¤¤ | .LNK

¤¤¤¤¤¤¤¤¤¤ | Extensão desconhecida abrindo

¤¤¤¤¤¤¤¤¤¤ | Proxy

¤¤¤¤¤¤¤¤¤¤ | Internet Explorer

Consertado : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : about:blank -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Consertado : [HKLM\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Consertado : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Start Page] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Consertado : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\System32\blank.htm -> C:\Windows\SysWOW64\blank.htm
Consertado : [HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Consertado : [HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\Software\Microsoft\Internet Explorer\Main]|[Start Page] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Consertado : [HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\system32\blank.htm -> C:\Windows\SysWOW64\blank.htm
Consertado : [HKU\S-1-5-21-2597956472-4088042801-1448267699-1000\Software\Microsoft\Internet Explorer\Main]|[Search Page] : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] -> [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

¤¤¤¤¤¤¤¤¤¤ | Google Chrome

Apagado prosperamente : HKLM\Software\Policies\Google
[Marise] Reponha para zerar prosperamente : SearchURL

¤¤¤¤¤¤¤¤¤¤ | Firefox

¤¤¤¤¤¤¤¤¤¤ | Opera

¤¤¤¤¤¤¤¤¤¤ | StartMenuInternet

Consertado : [HKLM\Software\Clients\StartMenuInternet\Firefox.exe\shell\open\command] : C:\Program Files (x86)\Mozilla Firefox\firefox.exe -> "C:\Program Files\Mozilla Firefox\Firefox.exe"
Consertado : [HKLM\Software\Clients\StartMenuInternet\Firefox.exe\shell\safemode\command] : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode -> "C:\Program Files\Mozilla Firefox\Firefox.exe" -safe-mode
Consertado : [HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : C:\Program Files (x86)\Internet Explorer\iexplore.exe -> "C:\Program Files\Internet Explorer\iexplore.exe"
Consertado : [HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command] : "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -> "C:\Program Files\Google\Chrome\Application\chrome.exe"
Consertado : [HKLM\Software\Clients\StartMenuInternet\Safari.exe\shell\open\command] : "C:\Program Files (x86)\Safari\Safari.exe" -> "C:\Program Files\Safari\Safari.exe"

¤¤¤¤¤¤¤¤¤¤ | AppCertDlls | AppInit_DLLs

¤¤¤¤¤¤¤¤¤¤ | Javascript

¤¤¤¤¤¤¤¤¤¤ | Firewall

¤¤¤¤¤¤¤¤¤¤ | ADS

C:\ProgramData\TEMP:
Apagado prosperamente :373E1720

¤¤¤¤¤¤¤¤¤¤ | Arquivos temporários

[All Users] Arquivos temporários Apagado : 0 Ko
[Default] Arquivos temporários Apagado : 0 Ko
[Default User] Arquivos temporários Apagado : 0 Ko
[Marise] Arquivos temporários Apagado : 51602 Ko
[Public] Arquivos temporários Apagado : 0 Ko
[Todos os Usuários] Arquivos temporários Apagado : 0 Ko
[UpdatusUser] Arquivos temporários Apagado : 0 Ko
[Usuário Padrão] Arquivos temporários Apagado : 0 Ko
[C:\Windows\Temp] Arquivos temporários Apagado : 113509 Ko
[C:\Temp] Arquivos temporários Apagado : 0 Ko

Serviço reiniciado : DNScache
Serviço reiniciado : MPSsvc

Outros relatórios

Colocação restabelecida em um modo auxiliar

¤¤¤¤¤¤¤¤¤¤ | Listing

¤¤¤¤¤¤¤¤¤¤ | C:\Program Files (x86)

[18/01/2013 18:00:37] - |D| - C:\Program Files (x86)\Acro Software
[18/01/2013 18:06:34] - |D| - C:\Program Files (x86)\Adobe
[02/07/2013 08:45:19] - |D| - C:\Program Files (x86)\AGEIA Technologies
[04/03/2013 12:26:47] - |D| - C:\Program Files (x86)\Aimersoft
[24/01/2013 14:54:59] - |D| - C:\Program Files (x86)\Apple Software Update
[29/01/2013 09:20:35] - |D| - C:\Program Files (x86)\AutoCAD 2007
[29/01/2013 09:18:36] - |D| - C:\Program Files (x86)\Autodesk
[10/06/2013 16:07:02] - |D| - C:\Program Files (x86)\Baidu Security
[28/03/2014 12:28:26] - |D| - C:\Program Files (x86)\BlueStacks
[24/01/2013 14:54:36] - |D| - C:\Program Files (x86)\Bonjour
[17/06/2013 19:12:21] - |D| - C:\Program Files (x86)\Cisco
[28/01/2013 14:39:38] - |D| - C:\Program Files (x86)\CleanUp!
[14/07/2009 00:20:08] - |D| - C:\Program Files (x86)\Common Files
[14/07/2009 01:54:24] - |SH| - C:\Program Files (x86)\desktop.ini
[13/08/2013 16:49:03] - |D| - C:\Program Files (x86)\Dotz
[17/06/2013 09:13:07] - |D| - C:\Program Files (x86)\Driver Checker
[27/05/2014 15:34:07] - |D| - C:\Program Files (x86)\DVDVideoSoft
[01/05/2014 11:16:06] - |D| - C:\Program Files (x86)\Facebook Chat @Desktop
[01/03/2013 16:43:18] - |D| - C:\Program Files (x86)\FreeTime
[28/01/2013 15:16:08] - |D| - C:\Program Files (x86)\GbPlugin
[11/12/2013 07:39:40] - |D| - C:\Program Files (x86)\Google
[18/01/2013 18:00:27] - |D| - C:\Program Files (x86)\GPLGS
[11/03/2013 14:10:33] - |D| - C:\Program Files (x86)\iMobie
[23/01/2013 12:28:12] - |D| - C:\Program Files (x86)\IncrediMail
[18/01/2013 14:41:57] - |HD| - C:\Program Files (x86)\InstallShield Installation Information
[18/01/2013 14:42:22] - |D| - C:\Program Files (x86)\Intel
[14/07/2009 00:20:08] - |D| - C:\Program Files (x86)\Internet Explorer
[28/01/2013 12:33:21] - |D| - C:\Program Files (x86)\IrfanView
[03/06/2014 09:30:07] - |D| - C:\Program Files (x86)\iTunes
[28/01/2013 15:32:55] - |D| - C:\Program Files (x86)\Java
[05/12/2013 09:40:01] - |D| - C:\Program Files (x86)\K-Lite Codec Pack
[17/07/2014 12:28:07] - |D| - C:\Program Files (x86)\Malwarebytes Anti-Malware
[07/03/2013 16:29:33] - |D| - C:\Program Files (x86)\MarkAny
[23/01/2013 13:11:24] - |D| - C:\Program Files (x86)\MFP
[29/01/2013 10:12:21] - |D| - C:\Program Files (x86)\Microsoft Office
[27/03/2013 09:47:27] - |D| - C:\Program Files (x86)\Microsoft SDKs
[18/01/2013 17:57:30] - |D| - C:\Program Files (x86)\Microsoft Silverlight
[23/01/2013 13:01:15] - |D| - C:\Program Files (x86)\Microsoft SkyDrive
[23/01/2013 13:06:49] - |D| - C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[29/01/2013 10:15:13] - |D| - C:\Program Files (x86)\Microsoft Visual Studio
[29/01/2013 10:13:20] - |D| - C:\Program Files (x86)\Microsoft Visual Studio 8
[27/03/2013 09:47:26] - |D| - C:\Program Files (x86)\Microsoft Visual Studio 9.0
[29/01/2013 10:15:48] - |D| - C:\Program Files (x86)\Microsoft Works
[18/01/2013 17:54:29] - |D| - C:\Program Files (x86)\Microsoft.NET
[13/09/2013 15:03:52] - |D| - C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 7.1
[29/04/2013 15:25:24] - |D| - C:\Program Files (x86)\MiPony
[11/06/2014 09:16:39] - |D| - C:\Program Files (x86)\Mozilla Firefox
[09/07/2014 13:41:35] - |D| - C:\Program Files (x86)\Mozilla Maintenance Service
[14/07/2009 02:32:38] - |D| - C:\Program Files (x86)\MSBuild
[28/02/2013 14:05:38] - |D| - C:\Program Files (x86)\MSECache
[23/01/2013 17:33:44] - |D| - C:\Program Files (x86)\MSXML 4.0
[23/01/2013 09:29:43] - |D| - C:\Program Files (x86)\Nero
[30/01/2013 13:14:33] - |D| - C:\Program Files (x86)\Nokia
[18/06/2013 16:51:18] - |D| - C:\Program Files (x86)\NVIDIA Corporation
[27/01/2014 10:57:42] - |D| - C:\Program Files (x86)\OpenOffice 4
[26/02/2013 11:49:01] - |D| - C:\Program Files (x86)\OpenOffice.org 3
[29/07/2013 14:57:00] - |D| - C:\Program Files (x86)\Pando Networks
[31/07/2013 10:48:05] - |D| - C:\Program Files (x86)\PC Connectivity Solution
[23/01/2013 12:28:59] - |D| - C:\Program Files (x86)\Photo Notifier and Animation Creator
[01/02/2013 15:47:01] - |D| - C:\Program Files (x86)\PhotoScape
[06/05/2013 09:22:18] - |D| - C:\Program Files (x86)\QType
[27/02/2014 15:49:47] - |D| - C:\Program Files (x86)\QuickTime
[06/06/2013 14:41:36] - |D| - C:\Program Files (x86)\RaidCall
[20/06/2013 14:24:37] - |D| - C:\Program Files (x86)\Readiris10
[25/09/2013 15:11:44] - |D| - C:\Program Files (x86)\Real
[25/09/2013 15:12:56] - |D| - C:\Program Files (x86)\RealNetworks
[18/01/2013 14:54:44] - |D| - C:\Program Files (x86)\Realtek
[14/07/2009 02:32:38] - |D| - C:\Program Files (x86)\Reference Assemblies
[18/01/2013 14:41:46] - |D| - C:\Program Files (x86)\Renesas Electronics
[25/10/2013 12:14:36] - |D| - C:\Program Files (x86)\Safari
[07/03/2013 16:27:50] - |D| - C:\Program Files (x86)\Samsung
[17/04/2014 09:51:06] - |D| - C:\Program Files (x86)\SDA
[28/04/2014 15:48:22] - |D| - C:\Program Files (x86)\SilentIdea
[19/02/2014 14:32:15] - |D| - C:\Program Files (x86)\SilentIdea 4.0
[05/02/2014 07:01:39] - |RD| - C:\Program Files (x86)\Skype
[15/02/2013 09:59:15] - |D| - C:\Program Files (x86)\Sony
[15/05/2013 15:05:47] - |D| - C:\Program Files (x86)\SystemRequirementsLab
[29/01/2013 09:09:15] - |D| - C:\Program Files (x86)\TagScanner
[18/01/2013 18:00:00] - |D| - C:\Program Files (x86)\TeamViewer
[18/01/2013 14:54:42] - |HD| - C:\Program Files (x86)\Temp
[22/11/2013 06:43:51] - |D| - C:\Program Files (x86)\ThisLife Uploader
[14/07/2009 01:57:06] - |HD| - C:\Program Files (x86)\Uninstall Information
[04/03/2014 15:10:20] - |D| - C:\Program Files (x86)\uTorrent
[20/05/2014 09:44:44] - |D| - C:\Program Files (x86)\VideoLAN
[11/09/2013 11:24:54] - |D| - C:\Program Files (x86)\VS Revo Group
[01/05/2014 11:19:29] - |D| - C:\Program Files (x86)\webporpoise
[14/07/2009 02:32:38] - |D| - C:\Program Files (x86)\Windows Defender
[18/01/2013 18:12:59] - |D| - C:\Program Files (x86)\Windows Live
[14/07/2009 00:20:08] - |D| - C:\Program Files (x86)\Windows Mail
[14/07/2009 02:32:38] - |D| - C:\Program Files (x86)\Windows Media Player
[14/07/2009 00:20:08] - |D| - C:\Program Files (x86)\Windows NT
[14/07/2009 02:32:38] - |D| - C:\Program Files (x86)\Windows Photo Viewer
[14/07/2009 02:32:38] - |D| - C:\Program Files (x86)\Windows Portable Devices
[14/07/2009 02:32:38] - |D| - C:\Program Files (x86)\Windows Sidebar
[18/07/2014 13:19:59] - |D| - C:\Program Files (x86)\ZHPDiag

¤¤¤¤¤¤¤¤¤¤ | C:\Program Files

[18/01/2013 14:20:59] - |SHD| - C:\Program Files\Arquivos Comuns
[13/05/2014 12:37:49] - |D| - C:\Program Files\Autodesk
[18/01/2013 18:15:36] - |D| - C:\Program Files\AVAST Software
[24/01/2013 14:54:36] - |D| - C:\Program Files\Bonjour
[23/01/2013 08:55:15] - |D| - C:\Program Files\Broadcom
[23/01/2013 16:17:41] - |D| - C:\Program Files\CCleaner
[14/07/2009 00:20:08] - |D| - C:\Program Files\Common Files
[29/04/2013 14:50:11] - |D| - C:\Program Files\Corel
[14/07/2009 01:54:24] - |ASH| - C:\Program Files\desktop.ini
[30/01/2013 13:15:47] - |D| - C:\Program Files\DIFX
[14/07/2009 02:32:38] - |D| - C:\Program Files\DVD Maker
[11/07/2014 10:28:10] - |D| - C:\Program Files\FileViewPro
[18/01/2013 14:37:44] - |D| - C:\Program Files\Intel
[14/07/2009 00:20:08] - |D| - C:\Program Files\Internet Explorer
[03/06/2014 09:30:10] - |D| - C:\Program Files\iPod
[03/06/2014 09:30:07] - |D| - C:\Program Files\iTunes
[18/01/2013 17:59:16] - |D| - C:\Program Files\Java
[14/10/2013 15:14:42] - |D| - C:\Program Files\McAfee Security Scan
[14/07/2009 02:32:38] - |D| - C:\Program Files\Microsoft Games
[29/01/2013 10:13:25] - |D| - C:\Program Files\Microsoft Office
[18/01/2013 17:57:30] - |D| - C:\Program Files\Microsoft Silverlight
[14/07/2009 02:32:38] - |D| - C:\Program Files\MSBuild
[18/01/2013 14:44:11] - |D| - C:\Program Files\NVIDIA Corporation
[18/01/2013 14:55:15] - |D| - C:\Program Files\Realtek
[27/02/2013 07:53:52] - |D| - C:\Program Files\Recuva
[14/07/2009 02:32:38] - |D| - C:\Program Files\Reference Assemblies
[15/02/2013 12:48:44] - |D| - C:\Program Files\Sony
[18/01/2013 14:42:53] - |D| - C:\Program Files\Synaptics
[13/03/2013 15:13:29] - |D| - C:\Program Files\TeamSpeak 3 Client
[14/07/2009 02:09:26] - |HD| - C:\Program Files\Uninstall Information
[23/01/2013 08:47:27] - |D| - C:\Program Files\WIDCOMM
[14/07/2009 02:32:38] - |D| - C:\Program Files\Windows Defender
[14/07/2009 15:12:09] - |D| - C:\Program Files\Windows Journal
[23/01/2013 13:06:10] - |D| - C:\Program Files\Windows Live
[14/07/2009 00:20:08] - |D| - C:\Program Files\Windows Mail
[14/07/2009 02:32:38] - |D| - C:\Program Files\Windows Media Player
[14/07/2009 00:20:08] - |D| - C:\Program Files\Windows NT
[14/07/2009 02:32:38] - |D| - C:\Program Files\Windows Photo Viewer
[14/07/2009 02:32:38] - |D| - C:\Program Files\Windows Portable Devices
[14/07/2009 02:32:38] - |D| - C:\Program Files\Windows Sidebar
[18/01/2013 17:59:33] - |D| - C:\Program Files\WinRAR
[28/02/2014 09:25:45] - |D| - C:\Program Files\WinZip

¤¤¤¤¤¤¤¤¤¤ | C:\Program Files (x86)\Common Files

[18/01/2013 18:06:34] - |D| - C:\Program Files (x86)\Common Files\Adobe
[23/01/2013 09:29:43] - |D| - C:\Program Files (x86)\Common Files\Ahead
[24/01/2013 14:54:24] - |D| - C:\Program Files (x86)\Common Files\Apple
[29/01/2013 09:18:42] - |D| - C:\Program Files (x86)\Common Files\Autodesk Shared
[16/05/2014 09:18:31] - |D| - C:\Program Files (x86)\Common Files\DESIGNER
[27/05/2014 15:34:08] - |D| - C:\Program Files (x86)\Common Files\DVDVideoSoft
[18/01/2013 14:54:37] - |D| - C:\Program Files (x86)\Common Files\InstallShield
[17/06/2013 15:56:13] - |D| - C:\Program Files (x86)\Common Files\Intel Corporation
[18/07/2014 10:44:24] - |D| - C:\Program Files (x86)\Common Files\Java
[14/07/2009 00:20:08] - |D| - C:\Program Files (x86)\Common Files\microsoft shared
[31/07/2013 10:49:08] - |D| - C:\Program Files (x86)\Common Files\Nokia
[18/01/2013 14:43:32] - |D| - C:\Program Files (x86)\Common Files\postureAgent
[14/07/2009 00:20:08] - |D| - C:\Program Files (x86)\Common Files\Services
[12/06/2014 09:33:19] - |D| - C:\Program Files (x86)\Common Files\Skype
[15/02/2013 12:48:06] - |D| - C:\Program Files (x86)\Common Files\Sony Shared
[14/07/2009 00:20:08] - |D| - C:\Program Files (x86)\Common Files\SpeechEngines
[14/07/2009 00:20:08] - |D| - C:\Program Files (x86)\Common Files\System
[18/01/2013 18:11:16] - |D| - C:\Program Files (x86)\Common Files\Windows Live
[17/09/2013 13:33:36] - |D| - C:\Program Files (x86)\Common Files\Wise Installation Wizard
[25/06/2014 08:22:48] - |D| - C:\Program Files (x86)\Common Files\xing shared

¤¤¤¤¤¤¤¤¤¤ | C:\Program Files\Common Files

[04/03/2013 12:27:54] - |D| - C:\Program Files\Common Files\Aimersoft
[24/01/2013 14:54:44] - |D| - C:\Program Files\Common Files\Apple
[13/05/2014 12:37:49] - |D| - C:\Program Files\Common Files\Autodesk Shared
[27/03/2013 09:44:29] - |D| - C:\Program Files\Common Files\Corel
[17/06/2013 19:12:21] - |D| - C:\Program Files\Common Files\Intel
[13/05/2014 12:52:50] - |D| - C:\Program Files\Common Files\Macrovision Shared
[14/07/2009 00:20:08] - |D| - C:\Program Files\Common Files\Microsoft Shared
[29/04/2013 14:53:37] - |D| - C:\Program Files\Common Files\Protexis
[14/07/2009 00:20:08] - |D| - C:\Program Files\Common Files\Services
[18/01/2013 14:20:59] - |D| - C:\Program Files\Common Files\Sistema
[15/02/2013 12:48:35] - |D| - C:\Program Files\Common Files\Sony Shared
[14/07/2009 00:20:08] - |D| - C:\Program Files\Common Files\SpeechEngines
[14/07/2009 00:20:08] - |D| - C:\Program Files\Common Files\System

¤¤¤¤¤¤¤¤¤¤ | C:\Users\Marise\AppData\Roaming

[18/01/2013 17:46:09] - |D| - C:\Users\Marise\AppData\Roaming\Adobe
[08/02/2013 08:26:40] - |D| - C:\Users\Marise\AppData\Roaming\Ahead
[24/01/2013 14:56:22] - |D| - C:\Users\Marise\AppData\Roaming\Apple Computer
[29/01/2013 09:20:35] - |D| - C:\Users\Marise\AppData\Roaming\Autodesk
[23/10/2013 06:38:26] - |D| - C:\Users\Marise\AppData\Roaming\AVAST Software
[10/06/2013 16:07:02] - |D| - C:\Users\Marise\AppData\Roaming\Baidu Security
[27/03/2013 09:57:00] - |D| - C:\Users\Marise\AppData\Roaming\Corel
[27/05/2014 15:29:45] - |D| - C:\Users\Marise\AppData\Roaming\DVDVideoSoft
[22/03/2013 09:21:52] - |D| - C:\Users\Marise\AppData\Roaming\Feedreader
[18/01/2013 14:21:15] - |D| - C:\Users\Marise\AppData\Roaming\Identities
[11/03/2013 14:10:45] - |D| - C:\Users\Marise\AppData\Roaming\iMobie
[21/01/2014 09:58:11] - |HD| - C:\Users\Marise\AppData\Roaming\InstallJammer Registry
[18/01/2013 14:42:22] - |D| - C:\Users\Marise\AppData\Roaming\InstallShield
[18/01/2013 14:39:58] - |D| - C:\Users\Marise\AppData\Roaming\Intel
[18/01/2013 14:58:07] - |D| - C:\Users\Marise\AppData\Roaming\Intel Corporation
[28/01/2013 12:33:21] - |D| - C:\Users\Marise\AppData\Roaming\IrfanView
[11/07/2014 10:42:28] - |D| - C:\Users\Marise\AppData\Roaming\IsolatedStorage
[18/01/2013 17:46:09] - |D| - C:\Users\Marise\AppData\Roaming\Macromedia
[18/01/2013 14:21:05] - |D| - C:\Users\Marise\AppData\Roaming\Media Center Programs
[18/01/2013 14:21:05] - |SD| - C:\Users\Marise\AppData\Roaming\Microsoft
[29/04/2013 15:28:22] - |D| - C:\Users\Marise\AppData\Roaming\Mipony
[23/01/2013 10:43:05] - |D| - C:\Users\Marise\AppData\Roaming\Mozilla
[25/04/2014 14:53:37] - |D| - C:\Users\Marise\AppData\Roaming\MPC-HC
[30/01/2013 13:50:21] - |D| - C:\Users\Marise\AppData\Roaming\Nokia
[25/03/2014 08:37:15] - |D| - C:\Users\Marise\AppData\Roaming\Nokia Ovi Suite
[30/01/2013 13:50:21] - |D| - C:\Users\Marise\AppData\Roaming\Nokia Suite
[12/07/2013 14:49:58] - |D| - C:\Users\Marise\AppData\Roaming\NVIDIA
[27/01/2014 15:35:48] - |D| - C:\Users\Marise\AppData\Roaming\OpenOffice
[26/02/2013 11:52:52] - |D| - C:\Users\Marise\AppData\Roaming\OpenOffice.org
[13/06/2014 09:04:58] - |D| - C:\Users\Marise\AppData\Roaming\Oracle
[30/01/2013 13:16:41] - |D| - C:\Users\Marise\AppData\Roaming\PC Suite
[01/02/2013 15:47:28] - |D| - C:\Users\Marise\AppData\Roaming\PhotoScape
[24/05/2013 09:17:57] - |D| - C:\Users\Marise\AppData\Roaming\player
[06/06/2013 14:41:43] - |D| - C:\Users\Marise\AppData\Roaming\raidcall
[25/09/2013 15:06:35] - |D| - C:\Users\Marise\AppData\Roaming\Real
[25/09/2013 15:13:55] - |D| - C:\Users\Marise\AppData\Roaming\RealNetworks
[07/03/2013 16:27:50] - |D| - C:\Users\Marise\AppData\Roaming\Samsung
[21/01/2013 07:21:46] - |D| - C:\Users\Marise\AppData\Roaming\Skype
[29/01/2013 09:09:22] - |D| - C:\Users\Marise\AppData\Roaming\TagScanner
[22/03/2013 07:30:04] - |D| - C:\Users\Marise\AppData\Roaming\TeamViewer
[19/11/2013 12:18:39] - |D| - C:\Users\Marise\AppData\Roaming\ThisLife
[19/11/2013 12:18:51] - |D| - C:\Users\Marise\AppData\Roaming\ThisLife Uploader
[19/11/2013 10:57:12] - |D| - C:\Users\Marise\AppData\Roaming\ThisLife Uploader 2.7.185
[22/11/2013 06:34:08] - |D| - C:\Users\Marise\AppData\Roaming\ThisLife Uploader 2.7.189
[03/01/2014 11:59:15] - |D| - C:\Users\Marise\AppData\Roaming\ThisLife Uploader 2.7.202
[13/03/2013 15:26:32] - |D| - C:\Users\Marise\AppData\Roaming\TS3Client
[26/04/2013 09:10:35] - |D| - C:\Users\Marise\AppData\Roaming\uTorrent
[20/05/2014 09:50:59] - |D| - C:\Users\Marise\AppData\Roaming\vlc
[28/04/2014 14:03:59] - |D| - C:\Users\Marise\AppData\Roaming\VSee
[28/04/2014 14:03:59] - |D| - C:\Users\Marise\AppData\Roaming\VSeeInstall
[23/12/2013 11:55:29] - |A| - C:\Users\Marise\AppData\Roaming\WB.CFG
[23/01/2013 13:12:52] - |D| - C:\Users\Marise\AppData\Roaming\Windows Live Writer
[18/01/2013 17:59:34] - |D| - C:\Users\Marise\AppData\Roaming\WinRAR
[18/07/2014 12:02:42] - |D| - C:\Users\Marise\AppData\Roaming\ZHP
[04/03/2013 12:28:08] - |D| - C:\Users\Marise\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}

¤¤¤¤¤¤¤¤¤¤ | C:\Users\Marise\AppData\Local

[02/07/2014 07:49:51] - |D| - C:\Users\Marise\AppData\Local\Adobe
[23/01/2013 09:33:46] - |D| - C:\Users\Marise\AppData\Local\Ahead
[04/03/2013 12:27:56] - |D| - C:\Users\Marise\AppData\Local\Aimersoft
[07/03/2013 16:13:33] - |D| - C:\Users\Marise\AppData\Local\Android
[24/01/2013 14:55:02] - |D| - C:\Users\Marise\AppData\Local\Apple
[24/01/2013 14:56:23] - |D| - C:\Users\Marise\AppData\Local\Apple Computer
[30/07/2013 13:39:46] - |D| - C:\Users\Marise\AppData\Local\Apps
[29/01/2013 09:20:35] - |D| - C:\Users\Marise\AppData\Local\Autodesk
[23/01/2013 08:52:52] - |D| - C:\Users\Marise\AppData\Local\Broadcom
[21/10/2013 08:06:49] - |D| - C:\Users\Marise\AppData\Local\cache
[19/02/2014 14:32:32] - |D| - C:\Users\Marise\AppData\Local\Codelines
[05/02/2013 07:43:32] - |D| - C:\Users\Marise\AppData\Local\CutePDF Writer
[18/01/2013 14:21:05] - |SHD| - C:\Users\Marise\AppData\Local\Dados de aplicativos
[05/02/2013 11:09:59] - |A| - C:\Users\Marise\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[30/07/2013 13:39:43] - |D| - C:\Users\Marise\AppData\Local\Deployment
[23/01/2013 17:54:47] - |D| - C:\Users\Marise\AppData\Local\Diagnostics
[07/03/2013 16:26:26] - |D| - C:\Users\Marise\AppData\Local\Downloaded Installations
[10/04/2014 08:43:31] - |SHD| - C:\Users\Marise\AppData\Local\EmieSiteList
[10/04/2014 08:43:31] - |SHD| - C:\Users\Marise\AppData\Local\EmieUserList
[18/06/2014 09:39:59] - |D| - C:\Users\Marise\AppData\Local\Evernote
[21/05/2013 15:14:43] - |D| - C:\Users\Marise\AppData\Local\Facebook
[11/07/2014 10:43:00] - |D| - C:\Users\Marise\AppData\Local\FileViewPro
[20/06/2013 15:29:46] - |D| - C:\Users\Marise\AppData\Local\GAS Tecnologia
[18/01/2013 14:58:08] - |A| - C:\Users\Marise\AppData\Local\GDIPFONTCACHEV1.DAT
[18/01/2013 17:56:41] - |D| - C:\Users\Marise\AppData\Local\Google
[18/01/2013 14:21:05] - |SHD| - C:\Users\Marise\AppData\Local\Histórico
[25/06/2014 08:36:57] - |AH| - C:\Users\Marise\AppData\Local\IconCache.db
[25/02/2013 08:54:39] - |D| - C:\Users\Marise\AppData\Local\IM
[11/03/2013 14:10:45] - |D| - C:\Users\Marise\AppData\Local\iMobie_Inc
[18/12/2013 11:52:39] - |AH| - C:\Users\Marise\AppData\Local\keyfile3.drm
[23/01/2013 10:45:47] - |D| - C:\Users\Marise\AppData\Local\Macromedia
[18/01/2013 14:21:05] - |D| - C:\Users\Marise\AppData\Local\Microsoft
[23/01/2013 09:20:26] - |D| - C:\Users\Marise\AppData\Local\Microsoft Help
[23/01/2013 10:43:05] - |D| - C:\Users\Marise\AppData\Local\Mozilla
[30/01/2013 13:16:45] - |D| - C:\Users\Marise\AppData\Local\Nokia
[30/01/2013 13:35:02] - |D| - C:\Users\Marise\AppData\Local\NokiaAccount
[18/06/2013 16:54:14] - |D| - C:\Users\Marise\AppData\Local\NVIDIA
[01/05/2014 11:22:47] - |D| - C:\Users\Marise\AppData\Local\Olcinium
[18/01/2013 18:02:01] - |D| - C:\Users\Marise\AppData\Local\Programs
[23/01/2013 17:52:09] - |A| - C:\Users\Marise\AppData\Local\Resmon.ResmonCfg
[23/01/2013 17:45:21] - |D| - C:\Users\Marise\AppData\Local\Ricoh PF Network Scan
[07/03/2013 16:34:07] - |D| - C:\Users\Marise\AppData\Local\Samsung
[05/02/2014 07:03:21] - |D| - C:\Users\Marise\AppData\Local\Skype
[15/02/2013 12:56:45] - |D| - C:\Users\Marise\AppData\Local\Sony Corporation
[13/02/2014 09:12:18] - |D| - C:\Users\Marise\AppData\Local\Spark
[27/08/2013 11:05:33] - |D| - C:\Users\Marise\AppData\Local\Temp
[18/01/2013 14:21:05] - |SHD| - C:\Users\Marise\AppData\Local\Temporary Internet Files
[18/01/2013 14:21:12] - |D| - C:\Users\Marise\AppData\Local\VirtualStore
[18/01/2013 18:11:17] - |D| - C:\Users\Marise\AppData\Local\Windows Live
[23/01/2013 13:12:52] - |D| - C:\Users\Marise\AppData\Local\Windows Live Writer
[28/02/2014 09:26:44] - |D| - C:\Users\Marise\AppData\Local\WinZip

¤¤¤¤¤¤¤¤¤¤ | C:\ProgramData

[03/06/2014 09:30:08] - |D| - C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[18/01/2013 18:06:28] - |D| - C:\ProgramData\Adobe
[23/01/2013 09:31:02] - |D| - C:\ProgramData\Ahead
[24/01/2013 14:54:24] - |D| - C:\ProgramData\Apple
[24/01/2013 14:55:28] - |D| - C:\ProgramData\Apple Computer
[14/07/2009 02:08:56] - |SHD| - C:\ProgramData\Application Data
[29/01/2013 09:20:35] - |D| - C:\ProgramData\Autodesk
[18/01/2013 18:15:36] - |D| - C:\ProgramData\AVAST Software
[18/07/2014 06:27:35] - |D| - C:\ProgramData\Baidu
[10/06/2013 16:07:46] - |D| - C:\ProgramData\Baidu Security
[28/03/2014 12:28:26] - |D| - C:\ProgramData\BlueStacks
[14/06/2013 16:55:02] - |D| - C:\ProgramData\BlueStacksSetup
[19/02/2014 14:32:16] - |D| - C:\ProgramData\Codelines
[27/03/2013 09:43:55] - |D| - C:\ProgramData\Corel
[27/03/2013 09:38:58] - |D| - C:\ProgramData\CorelDRAW Graphics Suite X6
[18/01/2013 14:20:59] - |SHD| - C:\ProgramData\Dados de aplicativos
[14/07/2009 02:08:56] - |SHD| - C:\ProgramData\Desktop
[18/01/2013 14:20:59] - |SHD| - C:\ProgramData\Documentos
[14/07/2009 02:08:56] - |SHD| - C:\ProgramData\Documents
[18/01/2013 14:37:41] - |D| - C:\ProgramData\Downloaded Installations
[13/05/2014 13:12:53] - |D| - C:\ProgramData\FARO
[14/07/2009 02:08:56] - |SHD| - C:\ProgramData\Favorites
[18/01/2013 14:20:59] - |SHD| - C:\ProgramData\Favoritos
[13/05/2014 13:43:34] - |D| - C:\ProgramData\FLEXnet
[20/06/2013 15:29:46] - |D| - C:\ProgramData\GAS Tecnologia
[28/01/2013 15:16:08] - |D| - C:\ProgramData\GbPlugin
[24/01/2013 13:18:31] - |D| - C:\ProgramData\HP
[23/01/2013 12:28:12] - |D| - C:\ProgramData\IM
[23/01/2013 12:28:12] - |D| - C:\ProgramData\IncrediMail
[31/07/2013 11:13:06] - |D| - C:\ProgramData\Installations
[18/01/2013 14:42:21] - |D| - C:\ProgramData\InstallShield
[15/05/2013 15:36:03] - |D| - C:\ProgramData\Intel
[17/06/2013 19:12:12] - |D| - C:\ProgramData\Intel.sav
[11/07/2014 10:42:28] - |D| - C:\ProgramData\IsolatedStorage
[10/06/2013 15:41:12] - |A| - C:\ProgramData\LauncherAccess.dt
[20/12/2013 07:59:00] - |D| - C:\ProgramData\Log
[17/07/2014 12:28:07] - |D| - C:\ProgramData\Malwarebytes
[18/02/2013 15:13:05] - |D| - C:\ProgramData\McAfee
[18/02/2013 15:13:08] - |D| - C:\ProgramData\McAfee Security Scan
[18/01/2013 14:20:59] - |SHD| - C:\ProgramData\Menu Iniciar
[14/07/2009 00:20:08] - |SD| - C:\ProgramData\Microsoft
[23/01/2013 09:20:17] - |D| - C:\ProgramData\Microsoft Help
[23/01/2013 13:00:59] - |D| - C:\ProgramData\Microsoft OneDrive
[13/05/2014 12:55:36] - |A| - C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[18/01/2013 14:20:59] - |SHD| - C:\ProgramData\Modelos
[23/01/2013 10:42:45] - |D| - C:\ProgramData\Mozilla
[23/01/2013 09:29:43] - |D| - C:\ProgramData\Nero
[30/01/2013 13:16:12] - |D| - C:\ProgramData\Nokia
[30/01/2013 13:14:33] - |D| - C:\ProgramData\NokiaInstallerCache
[28/02/2014 08:16:13] - |D| - C:\ProgramData\NortonInstaller
[19/06/2013 08:48:49] - |D| - C:\ProgramData\NVIDIA
[19/06/2013 08:47:21] - |D| - C:\ProgramData\NVIDIA Corporation
[20/09/2013 11:43:03] - |D| - C:\ProgramData\Oracle
[15/05/2013 15:34:10] - |D| - C:\ProgramData\Package Cache
[30/01/2013 13:16:43] - |D| - C:\ProgramData\PC Suite
[23/01/2013 12:28:59] - |D| - C:\ProgramData\Photo Notifier and Animation Creator
[27/03/2013 09:57:01] - |D| - C:\ProgramData\Protexis64
[25/09/2013 15:11:44] - |D| - C:\ProgramData\Real
[25/09/2013 15:12:50] - |D| - C:\ProgramData\RealNetworks
[18/01/2013 14:39:51] - |D| - C:\ProgramData\Roaming
[07/03/2013 16:27:50] - |D| - C:\ProgramData\Samsung
[18/01/2013 18:04:52] - |D| - C:\ProgramData\Skype
[15/02/2013 09:53:38] - |D| - C:\ProgramData\Sony Corporation
[14/07/2009 02:08:56] - |SHD| - C:\ProgramData\Start Menu
[18/01/2013 17:58:48] - |D| - C:\ProgramData\Sun
[24/05/2013 09:16:45] - |AD| - C:\ProgramData\TEMP
[14/07/2009 02:08:56] - |SHD| - C:\ProgramData\Templates
[28/02/2014 09:25:49] - |D| - C:\ProgramData\WinZip
[12/07/2013 16:48:12] - |D| - C:\ProgramData\xml_param

[X] : [48852 Ko]

Elementos analisados : 467794 | Modificados : 8 | Infetado : 241

¤¤¤¤¤¤¤¤¤¤ |EOF| ¤¤¤¤¤¤¤¤¤¤ | 13:35:31 | [95 Ko]

por **Power Max** Seg 21 Jul 2014, 14:46

Desative temporariamente seu antivirus para evitar conflitos.

Baixe: < [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] > ( de g3n-h@ckm@n )
|- Ao acessar o link acima, role a página e clique em Télécharger para fazer o download: [Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]

Execute-o da forma indicada nesta postagem:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

Assim que a limpeza for concluída, poste o log (relatório) que estará em C:\Pre_Scan\Pre_Scan_07_05_2014_17_05_22.txt (estes números em vermelho irão variar pois eles mostram a data e hora em que o escaneamento foi realizado).

por marisemaia Qua 23 Jul 2014, 09:04

Arquivo em anexo...

por **Power Max** Qua 23 Jul 2014, 09:31

Como está o computador?

por marisemaia Qua 23 Jul 2014, 09:45

Em relação ao Websearches, não aparece mais...

por **Power Max** Qua 23 Jul 2014, 09:49

Fico feliz que o problema tenha sido resolvido.

Só para concluir a limpeza faça uma verificação completa com seu antivirus e envie os vírus que ele encontre para a quarentena dele.
___________________________________________________________________________________________________________

Webssearches... - Página 2 772309

Depois disto só para finalizar siga estes tutoriais abaixo, por gentileza:

[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
_______________________________________________________________________________________________________________________

Webssearches... - Página 2 772309

Para remover os programas usados na limpeza deste PC e criar um novo ponto de restauração seguro e sem problemas, utilize o DelFix seguindo as dicas [Tens de ter uma conta e sessão iniciada para poderes visualizar este link].
_______________________________________________________________________________________________________________________

Webssearches... - Página 2 648673379

Foi um prazer ajudar. Conte sempre conosco!

por marisemaia Qua 23 Jul 2014, 09:56

Gratidão!!!!! Webssearches... - Página 2 404338

por **Power Max** Sáb 26 Jul 2014, 20:39

CASO RESOLVIDO

Caso a autora do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.

por Conteúdo patrocinado

Seg	Ter	Qua	Qui	Sex	Sáb	Dom
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31