Social bookmarking
Conservar e compartilhar o endereço de PC Seguro em seu site de social bookmarking
Conservar e compartilhar o endereço de Fórum PC Brasil em seu site de social bookmarking
Estatísticas
Temos 14810 usuários registradosO último membro registrado é Josevinil
Os nossos membros postaram um total de 36047 mensagens em 3685 assuntos
Quem está conectado?
Há 12 usuários online :: 0 registrados, 0 invisíveis e 12 visitantes :: 1 motor de buscaNenhum
O recorde de usuários online foi de 301 em Ter 26 Out 2021, 15:28
Procurar
Top dos mais postadores
Power Max | ||||
joram | ||||
Wings [In Memoriam] | ||||
caedurodrigues | ||||
Amigo Brasileiro | ||||
luizvilarinho | ||||
Danii | ||||
Admin | ||||
Danilo Marsaro | ||||
Andreata |
Eliminar searchult dos navegadores
3 participantes
Página 1 de 1
Eliminar searchult dos navegadores
Boa tarde,
Estou com essa página searchult em meus navegadores.
Já tentei retirar manualmente (nas configurações de cada navegador), já passei todos os antivírus sugeridos no link [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e não sei mais o que fazer. Todos esses antivírus acham, isolam, mas não excluem a maldita página de navegação.
Obrigada!
Estou com essa página searchult em meus navegadores.
Já tentei retirar manualmente (nas configurações de cada navegador), já passei todos os antivírus sugeridos no link [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] e não sei mais o que fazer. Todos esses antivírus acham, isolam, mas não excluem a maldita página de navegação.
Obrigada!
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
Boa tarde Ana Machado,
Um grande abraço.
- Baixe: <[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] ><[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]> ( ...Nicolas Coolman)
- Salve-o no Disco local (C ou D).
- Desabilite seu antivírus, e execute ZHPDiag.exe para instalar.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] - Execute o ícone do pergaminho!
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem] - Clique na opção "COMPLETA" e aguarde a conclusão.
- Clique OK e,ao concluir, poste o relatório! ( ZHPDiag.txt )
- Obs: O relatório por ser extenso deve ser postado em um desses sites:
- Acesse: <[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]>
- Ou acesse:<[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]>
- Ou anexe-o <[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]> << Link
- Maiores informações:<[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]> << Hospedagem !
Um grande abraço.
caedurodrigues- Analista
- Mensagens : 947
Reputação : 161
Data de inscrição : 21/10/2013
Idade : 54
Localização : Apiacá
Re: Eliminar searchult dos navegadores
- ZHPlog:
~ Iniciado por Professor (20/01/2015 18:20:08)
~ Facebook : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Endereço do Webforum : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão : Versão atualizada.
~ Lista Branca : Desativado pelo Utilizador
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Deactivate by user
---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.17501
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
Boa noite Ana Machado, o relatório está incompleto, se você não estiver conseguindo anexá-lo, poste em partes aqui no fórum.
Ou acesse: <[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]>
Um grande abraço.
Ou acesse: <[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]>
- Clique [Selecionar arquivo...], localize o relatório ZHPDiag e clique [Abrir]
- Selecione 4 jours e clique [Créer le lien Cjoint]
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] - Cole o link criado ao lado de Le lien a été créé:
Um grande abraço.
caedurodrigues- Analista
- Mensagens : 947
Reputação : 161
Data de inscrição : 21/10/2013
Idade : 54
Localização : Apiacá
Re: Eliminar searchult dos navegadores
~ Relatório do ZHPDiag v2015.1.18.7 - Nicolas Coolman (18/01/2015)
~ Iniciado por Professor (21/01/2015 10:17:42)
~ Facebook : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Endereço do Webforum : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão : Versão atualizada.
~ Lista Branca : Desativado pelo Utilizador
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Deactivate by user
---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.17501
MFIE: Mozilla Firefox 35.0 (Defaut)
GCIE: Google Chrome v39.0.2171.99
---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 7 Home Basic, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Softwares de proteçao do sistema
Malwarebytes Anti-Malware versão 2.0.4.1028
Microsoft Security Client PT-BR Language Pack v2.1.1116.0
Windows Defender W7 (Deactivate)
---\\ Softwares d'optimização do sistema
---\\ Softwares de partilha do PeerToPeer (P2P)
---\\ Monitoramento dos softwares
Adobe Flash Player 16 NPAPI
Adobe Reader XI
Java 7 Update 67
---\\ Informações sobre o sistema
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3032 MB (57% free)
System Restore: Activé (Enable)
System drive C: has 156 GB (52%) free of 298 GB
---\\ Modo de conexão ao sistema
~ Computer Name: ANACÁSSIA-PC
~ User Name: Professor
~ All Users Names: Professor, Convidado, Administrador,
~ Unselected Option: None
Logged in as Administrator
---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\Professor\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Professor\AppData\Roaming\
~ %Desktop% : C:\Users\Professor\Desktop\
~ %Favorites% : C:\Users\Professor\Favorites\
~ %LocalAppData% : C:\Users\Professor\AppData\Local\
~ %StartMenu% : C:\Users\Professor\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 156 Go of 298 Go)
D: CD-ROM drive (Not Inserted)
~ Iniciado por Professor (21/01/2015 10:17:42)
~ Facebook : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Endereço do Webforum : [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Tradução pelo utilizador
~ Estatuto da versão : Versão atualizada.
~ Lista Branca : Desativado pelo Utilizador
~ Elevação dos Privilégios : OK
~ Controle de Conta de Utilizador : Deactivate by user
---\\ Navegadores Internet
MSIE: Internet Explorer v11.0.9600.17501
MFIE: Mozilla Firefox 35.0 (Defaut)
GCIE: Google Chrome v39.0.2171.99
---\\ Informações sobre os produtos Windows
~ Langage: Portugais
Windows 7 Home Basic, 32-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Softwares de proteçao do sistema
Malwarebytes Anti-Malware versão 2.0.4.1028
Microsoft Security Client PT-BR Language Pack v2.1.1116.0
Windows Defender W7 (Deactivate)
---\\ Softwares d'optimização do sistema
---\\ Softwares de partilha do PeerToPeer (P2P)
---\\ Monitoramento dos softwares
Adobe Flash Player 16 NPAPI
Adobe Reader XI
Java 7 Update 67
---\\ Informações sobre o sistema
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3032 MB (57% free)
System Restore: Activé (Enable)
System drive C: has 156 GB (52%) free of 298 GB
---\\ Modo de conexão ao sistema
~ Computer Name: ANACÁSSIA-PC
~ User Name: Professor
~ All Users Names: Professor, Convidado, Administrador,
~ Unselected Option: None
Logged in as Administrator
---\\ As variáveis de ambiente
~ System Unit : C:\
~ %AppZHP% : C:\Users\Professor\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Professor\AppData\Roaming\
~ %Desktop% : C:\Users\Professor\Desktop\
~ %Favorites% : C:\Users\Professor\Favorites\
~ %LocalAppData% : C:\Users\Professor\AppData\Local\
~ %StartMenu% : C:\Users\Professor\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumeração das unidades dos discos
C: Hard drive, Flash drive, Thumb drive (Free 156 Go of 298 Go)
D: CD-ROM drive (Not Inserted)
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
---\\ Estado do Centro de Segurança do Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 50 Scanned in 00mn 00s
---\\ Pesquisa particular de ficheiros genéricos
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Windows Explorer.) (.25/02/2011 - 02:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 22:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.5E4E0E43E0A5BF9F089696DFA7A3D677] - (.Microsoft Corporation - Internet Extensions para Win32.) (.21/11/2014 - 22:00:20.) -- C:\Windows\System32\wininet.dll [1888256]
[MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.16/07/2014 - 22:39:27.) -- C:\Windows\System32\Winlogon.exe [304128]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.20/11/2010 - 09:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 03:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 22:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 20:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 05:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 05:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 06:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 20:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 20:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.26/04/2011 - 23:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 05:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.23/01/2014 - 23:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 20:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/07/2009 - 20:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 20:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.7FE680A3DFA421C4A8E4879AE4C5AAB0] - (.Microsoft Corporation - TDI Translation Driver.) (.10/11/2014 - 22:32:14.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.20/11/2010 - 09:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Generic Processes: Scanned in 00mn 00s
---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 2/9824
~ Mes musiques (My Musics) : 11/5045
~ Mes Videos (My Videos) : 1/167
~ Mes Favoris (My Favorites) : 1/30
~ Mes Documents (My Documents) : 1/23835
~ Mon Bureau (My Desktop) : 2/5559
~ Menu demarrer (Programs) : 1/8
~ Hidden Files: Scanned in 00mn 10s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 50 Scanned in 00mn 00s
---\\ Pesquisa particular de ficheiros genéricos
[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Windows Explorer.) (.25/02/2011 - 02:30:54.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 22:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.5E4E0E43E0A5BF9F089696DFA7A3D677] - (.Microsoft Corporation - Internet Extensions para Win32.) (.21/11/2014 - 22:00:20.) -- C:\Windows\System32\wininet.dll [1888256]
[MD5.52449FD429D6053B78AE564DEF303870] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.16/07/2014 - 22:39:27.) -- C:\Windows\System32\Winlogon.exe [304128]
[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.20/11/2010 - 09:21:24.) -- C:\Windows\System32\sppcomapi.dll [193536]
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 03:36:07.) -- C:\Windows\system32\Drivers\AFD.sys [338944]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 22:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]
[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 20:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 05:38:10.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]
[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 05:42:32.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 06:59:29.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 20:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 20:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.26/04/2011 - 23:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 05:39:44.) -- C:\Windows\system32\Drivers\netBT.sys [187904]
[MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.23/01/2014 - 23:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 20:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/07/2009 - 20:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 20:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]
[MD5.7FE680A3DFA421C4A8E4879AE4C5AAB0] - (.Microsoft Corporation - TDI Translation Driver.) (.10/11/2014 - 22:32:14.) -- C:\Windows\system32\Drivers\tdx.sys [74752]
[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.20/11/2010 - 09:30:16.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]
~ Generic Processes: Scanned in 00mn 00s
---\\ Estatuto dos ficheiros ocultos (Oculto/Total)
~ Mes images (My Pictures) : 2/9824
~ Mes musiques (My Musics) : 11/5045
~ Mes Videos (My Videos) : 1/167
~ Mes Favoris (My Favorites) : 1/30
~ Mes Documents (My Documents) : 1/23835
~ Mon Bureau (My Desktop) : 2/5559
~ Menu demarrer (Programs) : 1/8
~ Hidden Files: Scanned in 00mn 10s
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
---\\ Processos lançados
[MD5.C40AB5C64CA6FC95D2DA4B43675FE9BD] - (.No owner - G-Buster Browser Defense - Service.) -- C:\Program Files\GbPlugin\gbpsv.exe [208264] [PID.796]
[MD5.A4B109D057E15A438CE74E5B71187417] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192] [PID.908]
[MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [81088] [PID.1772]
[MD5.1992C2A1867D95AA3A0802539358D162] - (.No owner - Service.) -- C:\Program Files\Autodesk\Autodesk Content Service\Connect.Service.ContentService.exe [18656] [PID.1800]
[MD5.F7434401AE320BB97903A3C1865242FB] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [582944] [PID.1984]
[MD5.1F79342D9EB530A48742F651E570983A] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176] [PID.488]
[MD5.E4938E0A376CF0B9D989EE5C0A146891] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520] [PID.448]
[MD5.0BB29DE40C9D9529793DCDB59A43CF5B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.1688]
[MD5.5F82D8188B370B0CF185D4AE2B9B4A0E] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016] [PID.1728]
[MD5.7CF1B716372B89568AE4C0FE769F5869] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872] [PID.1836]
[MD5.627FA58ADC043704F9D14CA44340956F] - (.Sony Corporation - Device Information Provider.) -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe [360224] [PID.2160]
[MD5.06A49B7BDC36CFBF97DD90804F833369] - (.No owner - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024] [PID.2228]
[MD5.C314391535B8BBA4238C13D663B07F83] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2296696] [PID.2352]
[MD5.3C13F26A4766752314A5413038BD86B4] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.2400]
[MD5.7548066DF68A8A1A56B043359F915F37] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840] [PID.2568]
[MD5.F61E8488C82B2CAD9C23324A99D2F8E1] - (.Cyberlink - Power2Go Express.) -- C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe [2532648] [PID.3008]
[MD5.395BCC9122E705F6586217E32CD01CC9] - (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe [1837672] [PID.3032]
[MD5.C2127A599F383ECD8FD61EFB654F2B7C] - (.No owner - AmCapTray MFC Application.) -- C:\Program Files\AMCap\AmCapTray.exe [36864] [PID.3044]
[MD5.73165EE830627D2B974124F57209F98F] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [795936] [PID.3052]
[MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\windows\system32\DllHost.exe [7168] [PID.3108]
[MD5.135724D3F79E261B63628D75A6DD0817] - (.Hewlett-Packard Co. - HPNetworkCommunicator.) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\HPNetworkCommunicator.exe [673384] [PID.1004]
[MD5.DCFD8420B3455B400A88DE28341DAC34] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [30872672] [PID.6140]
[MD5.CF87A1DE791347E75B98885214CED2B8] - (.Microsoft Corporation - Serviço da Plataforma de Proteção de Softwa.) -- C:\windows\system32\sppsvc.exe [3179520] [PID.4024]
[MD5.58F52FBF326EC6E98564F6A8F1AB604F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8155648] [PID.5328]
~ Processes Running: Scanned in 00mn 01s
---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\Professor\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Pasta de extensão do Google Chrome
~ Google Lines Browser: 0 Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
C:\Users\Professor\AppData\Roaming\Mozilla\Firefox\Profiles\8j9n2di7.default\prefs.js
C:\Users\Professor\AppData\Roaming\Mozilla\Firefox\Profiles\zxzhof7f.default-1421697259274\prefs.js
M0 - MFSP: prefs.js [Professor - 8j9n2di7.default] [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
M0 - MFSP: prefs.js [Professor - zxzhof7f.default-1421697259274] [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll =>.Google Inc
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.67.2] - (...) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (.not file.)
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.67.2] - (...) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (.not file.)
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=16.4.3505.0912] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
~ Firefox Browser: 16 Scanned in 00mn 00s
---\\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 18 Scanned in 00mn 00s
[MD5.C40AB5C64CA6FC95D2DA4B43675FE9BD] - (.No owner - G-Buster Browser Defense - Service.) -- C:\Program Files\GbPlugin\gbpsv.exe [208264] [PID.796]
[MD5.A4B109D057E15A438CE74E5B71187417] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192] [PID.908]
[MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [81088] [PID.1772]
[MD5.1992C2A1867D95AA3A0802539358D162] - (.No owner - Service.) -- C:\Program Files\Autodesk\Autodesk Content Service\Connect.Service.ContentService.exe [18656] [PID.1800]
[MD5.F7434401AE320BB97903A3C1865242FB] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [582944] [PID.1984]
[MD5.1F79342D9EB530A48742F651E570983A] - (.Microsoft Corporation - Updates Skype Click to Call.) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176] [PID.488]
[MD5.E4938E0A376CF0B9D989EE5C0A146891] - (.Microsoft Corporation - Phone Number Recognition (PNR) module.) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520] [PID.448]
[MD5.0BB29DE40C9D9529793DCDB59A43CF5B] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.1688]
[MD5.5F82D8188B370B0CF185D4AE2B9B4A0E] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [969016] [PID.1728]
[MD5.7CF1B716372B89568AE4C0FE769F5869] - (.Microsoft Corporation - Machine Debug Manager.) -- C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872] [PID.1836]
[MD5.627FA58ADC043704F9D14CA44340956F] - (.Sony Corporation - Device Information Provider.) -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe [360224] [PID.2160]
[MD5.06A49B7BDC36CFBF97DD90804F833369] - (.No owner - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024] [PID.2228]
[MD5.C314391535B8BBA4238C13D663B07F83] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2296696] [PID.2352]
[MD5.3C13F26A4766752314A5413038BD86B4] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.2400]
[MD5.7548066DF68A8A1A56B043359F915F37] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [354840] [PID.2568]
[MD5.F61E8488C82B2CAD9C23324A99D2F8E1] - (.Cyberlink - Power2Go Express.) -- C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe [2532648] [PID.3008]
[MD5.395BCC9122E705F6586217E32CD01CC9] - (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe [1837672] [PID.3032]
[MD5.C2127A599F383ECD8FD61EFB654F2B7C] - (.No owner - AmCapTray MFC Application.) -- C:\Program Files\AMCap\AmCapTray.exe [36864] [PID.3044]
[MD5.73165EE830627D2B974124F57209F98F] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [795936] [PID.3052]
[MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\windows\system32\DllHost.exe [7168] [PID.3108]
[MD5.135724D3F79E261B63628D75A6DD0817] - (.Hewlett-Packard Co. - HPNetworkCommunicator.) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\HPNetworkCommunicator.exe [673384] [PID.1004]
[MD5.DCFD8420B3455B400A88DE28341DAC34] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe [30872672] [PID.6140]
[MD5.CF87A1DE791347E75B98885214CED2B8] - (.Microsoft Corporation - Serviço da Plataforma de Proteção de Softwa.) -- C:\windows\system32\sppsvc.exe [3179520] [PID.4024]
[MD5.58F52FBF326EC6E98564F6A8F1AB604F] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8155648] [PID.5328]
~ Processes Running: Scanned in 00mn 01s
---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)
C:\Users\Professor\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Pasta de extensão do Google Chrome
~ Google Lines Browser: 0 Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)
C:\Users\Professor\AppData\Roaming\Mozilla\Firefox\Profiles\8j9n2di7.default\prefs.js
C:\Users\Professor\AppData\Roaming\Mozilla\Firefox\Profiles\zxzhof7f.default-1421697259274\prefs.js
M0 - MFSP: prefs.js [Professor - 8j9n2di7.default] [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
M0 - MFSP: prefs.js [Professor - zxzhof7f.default-1421697259274] [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll =>.Google Inc
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.67.2] - (...) -- C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (.not file.)
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.67.2] - (...) -- C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (.not file.)
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=16.4.3505.0912] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
~ Firefox Browser: 16 Scanned in 00mn 00s
---\\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.10.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ IE Browser: 18 Scanned in 00mn 00s
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
---\\ Internet Explorer, Gestão do Proxy (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects do navegador (02)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} . (.Banco do Brasil - Gbieh Module.) -- C:\PROGRAM FILES\GBPLUGIN\gbieh.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ BHO: 6 Scanned in 00mn 00s
---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKCU\..\Run: [Power2GoExpress] . (.Cyberlink - Power2Go Express.) -- C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
O4 - HKCU\..\Run: [HP Deskjet 4620 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2396384228-542160120-3763448860-1000\..\Run: [Power2GoExpress] . (.Cyberlink - Power2Go Express.) -- C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
O4 - HKUS\S-1-5-21-2396384228-542160120-3763448860-1000\..\Run: [HP Deskjet 4620 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
~ Application: Scanned in 00mn 00s
---\\ Icones das opções IE invisiveis no painel das configurações (05)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico
O9 - Extra button: Exibir ou ocultar HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Provedor de Correção de Nomeação de Emails.) -- C:\windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Provedor de serviços do Microsoft Windows Sockets 2.0.) -- C:\windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
~ Winsock: 9 Scanned in 00mn 00s
---\\ Site na zona confiavél do Internet Explorer (05)
O15 - Trusted Zone: [HKCU\...\Domains\www] *.bancobrasil.com.br
O15 - Trusted Zone: [HKCU\...\Domains\www] *.bb.com.br
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Objets ActiveX: Scanned in 00mn 00s
---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpDomain = domain.name
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8514EBC-3C72-4F35-9E13-D0B546DD25F3}: DhcpDomain = domain.name
O17 - HKLM\System\CS1\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpDomain = domain.name
O17 - HKLM\System\CS1\Services\Tcpip\..\{B8514EBC-3C72-4F35-9E13-D0B546DD25F3}: DhcpDomain = domain.name
O17 - HKLM\System\CS2\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpDomain = domain.name
O17 - HKLM\System\CS2\Services\Tcpip\..\{B8514EBC-3C72-4F35-9E13-D0B546DD25F3}: DhcpDomain = domain.name
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Protocolo adicional (018)
O18 - Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1-mon . (...) --
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: GbPluginBb . (.Banco do Brasil - Gbieh Module.) -- C:\Program Files\GbPlugin\gbieh.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Chave do Registo autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Lista dos serviços NT não Microsoft e não desativados (023)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Autodesk Content Service (Autodesk Content Service) . (.No owner - Service.) - C:\Program Files\Autodesk\Autodesk Content Service\Connect.Service.ContentService.exe
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Gbp Service (GbpSv) . (.No owner - G-Buster Browser Defense - Service.) - C:\Program Files\GbPlugin\gbpsv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: PMBDeviceInfoProvider (PMBDeviceInfoProvider) . (.Sony Corporation - Device Information Provider.) - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.No owner - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Net Service Event Handler (Sed) . (...) - C:\Users\Professor\AppData\Roaming\ntsvc\ntsvc.exe (.not file.)
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 6 (TeamViewer6) . (.TeamViewer GmbH - TeamViewer Remote Control Application.) - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
~ Services: 11 Scanned in 00mn 07s
---\\ Enumeração Ativa do Ambiente de trabalho & Editor MHTML (024)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Listagem dos dados do BootExecute (Bex) (034)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tarefas planificadas automaticamente (039)
[MD5.3E04F1E482357B1FC8B088197C3D9FF8] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152]
[MD5.CB1719E3EA00A0C114A8AD2655F43754] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
[MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107912]
[MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107912]
[MD5.6D51713A36C0733A4BDD94EAD5A33AD9] [APT] [HPCustParticipation HP Deskjet 4620 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\HPCustPartic.exe [2938984]
[MD5.31F3A72C51934C8B6D53C159D025604E] [APT] [{04B3DB3A-05CF-4F50-9931-A0766A3429F6}] (.TeamViewer GmbH.) -- C:\Program Files\TeamViewer\Version6\TeamViewer.exe [7832440]
[MD5.2E09F9CF3CE0B2DAD38DD6BF67712C38] [APT] [{177B630E-9127-42F4-AB34-95B22B18DDB9}] (.Geomática / FATEC-UFSM.) -- C:\CAMPEIRO7\Campeiro7.exe [8822784]
[MD5.00000000000000000000000000000000] [APT] [{21EA85CF-168A-480C-9CA3-4E09C69F396D}] (...) -- c:\users\Professor\appdata\local\lollipop\lollipop.bat (.not file.) [0] =>Adware.Lollipop
[MD5.31F3A72C51934C8B6D53C159D025604E] [APT] [{41A07645-EEBC-402C-ADE8-8264F9BF6987}] (.TeamViewer GmbH.) -- C:\Program Files\TeamViewer\Version6\TeamViewer.exe [7832440]
[MD5.00000000000000000000000000000000] [APT] [{4A7488D4-62A9-4C52-A568-5D155165DEAB}] (...) -- D:\7-X86\DRV\W7410\Hotkey\Driver\Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{585E6749-2CCC-4CDF-8BAC-20FF0CADD161}] (...) -- C:\Users\Professor\Desktop\AutoCAD_2012_English_Win_32bit.exe (.not file.) [0]
[MD5.B685DC47E5A49B6B8B2FD517AB9D5621] [APT] [{66C1B356-D784-4435-B281-1F84E101ABBA}] (...) -- C:\Users\Professor\Downloads\AutoCAD_2012_English_Win_32bit.exe [1144011680]
[MD5.00000000000000000000000000000000] [APT] [{D2C53F5C-1861-4F2B-AC28-85E311E9EAA2}] (...) -- c:\users\Professor\appdata\local\google\chrome\application\chrome.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DC414F64-BADB-47D2-91F0-FE4E33C7C706}] (...) -- C:\Users\Professor\Documents\AutoCAD_2012_English_Win_32bit.exe (.not file.) [0]
[MD5.73165EE830627D2B974124F57209F98F] [APT] [{FC78CA67-7BEA-4AD7-9345-BFC5157387F9}] (.Broadcom Corporation..) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [795936]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [902]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1054]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1054]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1058]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1058]
~ Scheduled Task: 19 Scanned in 00mn 23s
---\\ Componentes instalados (ActiveSetup Installed Components) (040)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API de tema do Windows.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Processador de comandos do Windows.) -- C:\windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extensão shell da pasta FTP do Microsoft Internet Explorer.) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL comum do Shell do Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitário de Inicialização por Usuário do Internet Explorer.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\39.0.2171.99\Installer\chrmstp.exe
~ Active Setup: 11 Scanned in 00mn 00s
---\\ Drivers lançados ao arranque do sistema (041)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Agendador de pacotes de serviço.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Driver do Subsistema de Buffer da Unidade R.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 60 Scanned in 00mn 00s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Redireção do ficheiro Hosts (01)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects do navegador (02)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} . (.Banco do Brasil - Gbieh Module.) -- C:\PROGRAM FILES\GBPLUGIN\gbieh.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ BHO: 6 Scanned in 00mn 00s
---\\ Aplicações iniciadas por registo & pastas (04)
O4 - HKCU\..\Run: [Power2GoExpress] . (.Cyberlink - Power2Go Express.) -- C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
O4 - HKCU\..\Run: [HP Deskjet 4620 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2396384228-542160120-3763448860-1000\..\Run: [Power2GoExpress] . (.Cyberlink - Power2Go Express.) -- C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
O4 - HKUS\S-1-5-21-2396384228-542160120-3763448860-1000\..\Run: [HP Deskjet 4620 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
~ Application: Scanned in 00mn 00s
---\\ Icones das opções IE invisiveis no painel das configurações (05)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Program Files\Microsoft Office\Office12\REFBARH.ICO
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico
O9 - Extra button: Exibir ou ocultar HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} . (.Hewlett-Packard Co. - HP Smart Web Printing add-on for Internet Explorer.) -- C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Provedor de Correção de Nomeação de Emails.) -- C:\windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\windows\system32\wshbth.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Provedor de serviços do Microsoft Windows Sockets 2.0.) -- C:\windows\system32\mswsock.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\windows\system32\winrnr.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation
~ Winsock: 9 Scanned in 00mn 00s
---\\ Site na zona confiavél do Internet Explorer (05)
O15 - Trusted Zone: [HKCU\...\Domains\www] *.bancobrasil.com.br
O15 - Trusted Zone: [HKCU\...\Domains\www] *.bb.com.br
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
~ Objets ActiveX: Scanned in 00mn 00s
---\\ Alteração Dominio/Clientes DNS (017)
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpDomain = domain.name
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8514EBC-3C72-4F35-9E13-D0B546DD25F3}: DhcpDomain = domain.name
O17 - HKLM\System\CS1\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpDomain = domain.name
O17 - HKLM\System\CS1\Services\Tcpip\..\{B8514EBC-3C72-4F35-9E13-D0B546DD25F3}: DhcpDomain = domain.name
O17 - HKLM\System\CS2\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{9D87132C-1689-43AA-8A68-45B0F6078A22}: DhcpDomain = domain.name
O17 - HKLM\System\CS2\Services\Tcpip\..\{B8514EBC-3C72-4F35-9E13-D0B546DD25F3}: DhcpDomain = domain.name
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Protocolo adicional (018)
O18 - Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1-mon . (...) --
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: GbPluginBb . (.Banco do Brasil - Gbieh Module.) -- C:\Program Files\GbPlugin\gbieh.dll
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Chave do Registo autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Lista dos serviços NT não Microsoft e não desativados (023)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Autodesk Content Service (Autodesk Content Service) . (.No owner - Service.) - C:\Program Files\Autodesk\Autodesk Content Service\Connect.Service.ContentService.exe
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Gbp Service (GbpSv) . (.No owner - G-Buster Browser Defense - Service.) - C:\Program Files\GbPlugin\gbpsv.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: PMBDeviceInfoProvider (PMBDeviceInfoProvider) . (.Sony Corporation - Device Information Provider.) - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.No owner - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Net Service Event Handler (Sed) . (...) - C:\Users\Professor\AppData\Roaming\ntsvc\ntsvc.exe (.not file.)
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 6 (TeamViewer6) . (.TeamViewer GmbH - TeamViewer Remote Control Application.) - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
~ Services: 11 Scanned in 00mn 07s
---\\ Enumeração Ativa do Ambiente de trabalho & Editor MHTML (024)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Listagem dos dados do BootExecute (Bex) (034)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tarefas planificadas automaticamente (039)
[MD5.3E04F1E482357B1FC8B088197C3D9FF8] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152]
[MD5.CB1719E3EA00A0C114A8AD2655F43754] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
[MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107912]
[MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107912]
[MD5.6D51713A36C0733A4BDD94EAD5A33AD9] [APT] [HPCustParticipation HP Deskjet 4620 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Deskjet 4620 series\Bin\HPCustPartic.exe [2938984]
[MD5.31F3A72C51934C8B6D53C159D025604E] [APT] [{04B3DB3A-05CF-4F50-9931-A0766A3429F6}] (.TeamViewer GmbH.) -- C:\Program Files\TeamViewer\Version6\TeamViewer.exe [7832440]
[MD5.2E09F9CF3CE0B2DAD38DD6BF67712C38] [APT] [{177B630E-9127-42F4-AB34-95B22B18DDB9}] (.Geomática / FATEC-UFSM.) -- C:\CAMPEIRO7\Campeiro7.exe [8822784]
[MD5.00000000000000000000000000000000] [APT] [{21EA85CF-168A-480C-9CA3-4E09C69F396D}] (...) -- c:\users\Professor\appdata\local\lollipop\lollipop.bat (.not file.) [0] =>Adware.Lollipop
[MD5.31F3A72C51934C8B6D53C159D025604E] [APT] [{41A07645-EEBC-402C-ADE8-8264F9BF6987}] (.TeamViewer GmbH.) -- C:\Program Files\TeamViewer\Version6\TeamViewer.exe [7832440]
[MD5.00000000000000000000000000000000] [APT] [{4A7488D4-62A9-4C52-A568-5D155165DEAB}] (...) -- D:\7-X86\DRV\W7410\Hotkey\Driver\Setup.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{585E6749-2CCC-4CDF-8BAC-20FF0CADD161}] (...) -- C:\Users\Professor\Desktop\AutoCAD_2012_English_Win_32bit.exe (.not file.) [0]
[MD5.B685DC47E5A49B6B8B2FD517AB9D5621] [APT] [{66C1B356-D784-4435-B281-1F84E101ABBA}] (...) -- C:\Users\Professor\Downloads\AutoCAD_2012_English_Win_32bit.exe [1144011680]
[MD5.00000000000000000000000000000000] [APT] [{D2C53F5C-1861-4F2B-AC28-85E311E9EAA2}] (...) -- c:\users\Professor\appdata\local\google\chrome\application\chrome.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{DC414F64-BADB-47D2-91F0-FE4E33C7C706}] (...) -- C:\Users\Professor\Documents\AutoCAD_2012_English_Win_32bit.exe (.not file.) [0]
[MD5.73165EE830627D2B974124F57209F98F] [APT] [{FC78CA67-7BEA-4AD7-9345-BFC5157387F9}] (.Broadcom Corporation..) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [795936]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [902]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1054]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1054]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1058]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1058]
~ Scheduled Task: 19 Scanned in 00mn 23s
---\\ Componentes instalados (ActiveSetup Installed Components) (040)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API de tema do Windows.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Processador de comandos do Windows.) -- C:\windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extensão shell da pasta FTP do Microsoft Internet Explorer.) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL comum do Shell do Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitário de Inicialização por Usuário do Internet Explorer.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\39.0.2171.99\Installer\chrmstp.exe
~ Active Setup: 11 Scanned in 00mn 00s
---\\ Drivers lançados ao arranque do sistema (041)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Agendador de pacotes de serviço.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Driver do Subsistema de Buffer da Unidade R.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Drivers: 60 Scanned in 00mn 00s
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
---\\ Software instalados (042)
O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {A80FA752-C491-4ED9-ABF0-4278563160B2}
O42 - Logiciel: 3D - (.Laboratório de Geomática - DER/CCR/UFSM.) [HKLM] -- {75A890E6-F558-4DBE-9127-2E6C0472E96E}
O42 - Logiciel: ALPS Touch Pad Driver - (...) [HKLM] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}
O42 - Logiciel: AMCap - (...) [HKLM] -- {449F20E4-84F6-4023-BBFC-3988A97B857C}
O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Reader XI (11.0.10) - Português - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1046-7B44-AB0000000001}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001802114130}
O42 - Logiciel: AmIcoSingLun - (.Alcor Micro Co., Ltd..) [HKLM] -- InstallShield_{BF91B300-EEBC-4223-96F3-0FCBF7241B50}
O42 - Logiciel: Audacity 1.3.12 (Unicode) - (.Audacity Team.) [HKLM] -- Audacity 1.3 Beta (Unicode)_is1
O42 - Logiciel: AutoCAD 2012 - English - (.Autodesk.) [HKLM] -- AutoCAD 2012 - English
O42 - Logiciel: AutoCAD 2012 - English - (.Autodesk.) [HKLM] -- {5783F2D7-A001-0409-0002-0060B0CE6BBA}
O42 - Logiciel: Autodesk CAD Manager Tools - (.Autodesk.) [HKLM] -- {5783F2D7-0111-0409-0010-0060B0CE6BBA}
O42 - Logiciel: Autodesk Content Service - (.Autodesk.) [HKLM] -- {086F9A69-CD39-4893-A9FB-D3A0634CE3F7}
O42 - Logiciel: Autodesk Design Review 2012 - (.Autodesk, Inc..) [HKLM] -- Autodesk Design Review 2012
O42 - Logiciel: Autodesk Inventor Fusion 2012 - (.Autodesk, Inc..) [HKLM] -- Autodesk Inventor Fusion 2012
O42 - Logiciel: Autodesk Inventor Fusion 2012 - (.Autodesk, Inc..) [HKLM] -- {FFF5619F-6669-4EC5-A85E-9994F70A9E5D}
O42 - Logiciel: Autodesk Inventor Fusion 2012 Language Pack - (.Autodesk, Inc..) [HKLM] -- {FFF7F80F-929E-497F-A112-B070DE816128}
O42 - Logiciel: Autodesk Inventor Fusion plug-in for AutoCAD 2012 - (.Autodesk.) [HKLM] -- Autodesk Inventor Fusion plug-in for AutoCAD 2012
O42 - Logiciel: Autodesk Inventor Fusion plug-in for AutoCAD 2012 - (.Autodesk.) [HKLM] -- {EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}
O42 - Logiciel: Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012 - (.Autodesk.) [HKLM] -- {E552C39C-C70E-464F-9733-8311331BDD90}
O42 - Logiciel: Autodesk Material Library 2012 - (.Autodesk.) [HKLM] -- {8F0837C2-EE09-4903-88F3-1976FE7FFF4E}
O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2012 - (.Autodesk.) [HKLM] -- {65420DC9-306E-4371-905F-F4DC3B418E52}
O42 - Logiciel: Autodesk Network License Manager - (.Autodesk.) [HKLM] -- {EAB8A41D-FABA-4569-A0A1-60A8B358D6F1}
O42 - Logiciel: CAR - Módulo de Cadastro - (.Ministério do Meio Ambiente.) [HKLM] -- {B74B7514-A26E-4FF4-B68A-07123F18C350}
O42 - Logiciel: CR CAMPEIRO 7 - (.Laboratório de Geomática DER-CCR-UFSM.) [HKLM] -- Sistema de Gerenciamento Agropecuário CAMPEIRO 7~31F3910B_is1
O42 - Logiciel: Cadub 2.1 - (...) [HKLM] -- Cadub_is1
O42 - Logiciel: Convert Image - (.Softinterface, Inc..) [HKLM] -- Convert Image_is1 =>PUP.ConvertMe
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: FARO LS 1.1.406.58 - (.FARO Scanner Production.) [HKLM] -- {951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}
O42 - Logiciel: FFmpeg v0.6.2 for Audacity - (...) [HKLM] -- FFmpeg for Audacity_is1
O42 - Logiciel: Free 3GP Video Converter version 3.5 - (.DVDVideoSoft Limited..) [HKLM] -- Free 3GP Video Converter_is1
O42 - Logiciel: Free WMA to MP3 Converter 1.16 - (.Jodix Technologies Ltd..) [HKLM] -- Free WMA to MP3 Converter_is1
O42 - Logiciel: Galeria de Fotos - (.Microsoft Corporation.) [HKLM] -- {F5248B7E-779A-4FA4-8134-D1933D8680FA}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {6F545E5E-4595-11E2-93B6-B8AC6F97B88E} =>.Google Inc
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Customer Participation Program 13.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
O42 - Logiciel: HP Deskjet 4620 series Ajuda - (.Hewlett Packard.) [HKLM] -- {55ABE602-CC50-446D-A9EA-41D6C2160D1A}
O42 - Logiciel: HP Deskjet 4620 series Estudo de aprimoramento de produtos - (.Hewlett-Packard Co..) [HKLM] -- {6F49F49A-5414-486B-BAB7-072A1A4BAC39}
O42 - Logiciel: HP Deskjet 4620 series Software básico do dispositivo - (.Hewlett-Packard Co..) [HKLM] -- {FEEE2CB1-3565-465F-A8A1-13E3970C142D}
O42 - Logiciel: HP Imaging Device Functions 13.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
O42 - Logiciel: HP Photosmart C4400 All-In-One Driver Software 13.0 Rel. 3 - (.HP.) [HKLM] -- {8181C5B7-2FF5-4677-BA6A-8E2C3F5A7601} =>.Hewlett-Packard Co
O42 - Logiciel: HP Photosmart Essential 3.5 - (.HP.) [HKLM] -- HP Photosmart Essential =>.Hewlett-Packard Co
O42 - Logiciel: HP Smart Web Printing 4.60 - (.HP.) [HKLM] -- HP Smart Web Printing
O42 - Logiciel: HP Solution Center 13.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM] -- {846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}
O42 - Logiciel: Hotkey Utility - (.FIC, Inc..) [HKLM] -- Hotkey Utility_is1
O42 - Logiciel: I.R.I.S. OCR - (.HP.) [HKLM] -- {CA6BCA2F-EDEB-408F-850B-31404BE16A61}
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java 7 Update 67 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F03217067FF}
O42 - Logiciel: LAME v3.98.3 for Audacity - (...) [HKLM] -- LAME for Audacity_is1
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware versão 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft Antimalware Service PT-BR Language Pack - (.Microsoft Corporation.) [HKLM] -- {3099E885-DE8A-4099-ABE2-561DC8589DFA}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {107F27B7-8EE4-4B3A-9CE5-497B120369DC}
O42 - Logiciel: Microsoft Security Client PT-BR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
O42 - Logiciel: Motorola SM56 Data Fax Modem - (.Motorola Inc.) [HKLM] -- SMSERIAL
O42 - Logiciel: Mozilla Firefox 35.0 (x86 pt-BR) - (.Mozilla.) [HKLM] -- Mozilla Firefox 35.0 (x86 pt-BR)
O42 - Logiciel: Nero BurnLite 10 - (.Nero AG.) [HKLM] -- {842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}
O42 - Logiciel: Nero BurnLite 10 - (.Nero AG.) [HKLM] -- {AB627AF2-9C7E-4DBD-816B-3B2646B81E89}
O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}
O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: OCR Software by I.R.I.S. 13.0 - (.HP.) [HKLM] -- HPOCR
O42 - Logiciel: PMB - (.Sony Corporation.) [HKLM] -- {B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}
O42 - Logiciel: Paint.NET v3.5.5 - (.dotPDN LLC.) [HKLM] -- {F0E2B312-D7FD-4349-A9B6-E90B36DB1BD0}
O42 - Logiciel: PhotoScape - (...) [HKLM] -- PhotoScape
O42 - Logiciel: PowerDVD - (.PowerDVDCorp..) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {9D3D8C60-A55F-4fed-B2B9-173F09590E16}
O42 - Logiciel: RMVB WMV to AVI Converter 2.10 - (.Apecsoft, Inc..) [HKLM] -- Apecsoft RMVB WMV to AVI Converter_is1
O42 - Logiciel: Realtek Ethernet Controller Driver For Windows Vista and Later - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Shop for HP Supplies - (.HP.) [HKLM] -- Shop for HP Supplies
O42 - Logiciel: SigmaPlot 11.0 - (.Systat Software, Inc..) [HKLM] -- {B1A88375-BAB9-4081-B58F-A137FC6ED2A4}
O42 - Logiciel: Sistema Campeiro7 - (.Laboratório de Geomática - DER/CCR/UFSM.) [HKLM] -- {128A6EB8-2117-4A89-835C-3F0919F756A6}
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}
O42 - Logiciel: Skype™ 7.0 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Software WIDCOMM Bluetooth - (.Broadcom Corporation.) [HKLM] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E}
O42 - Logiciel: Spring 5.1.5 Português_x86 - (...) [HKLM] -- Spring 5.1.5 Português_x86
O42 - Logiciel: TeamViewer 6 - (.TeamViewer GmbH.) [HKLM] -- TeamViewer 6
O42 - Logiciel: The SAS System V8 - (...) [HKLM] -- SAS v8
O42 - Logiciel: Uninstall 1.0.0.1 - (...) [HKLM] -- Uninstall_is1
O42 - Logiciel: WinRAR 4.01 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} =>.Microsoft Corporation
O42 - Logiciel: Wondershare Video Converter Ultimate(Build 6.0.1.0) - (.Wondershare Software.) [HKLM] -- Wondershare Video Converter Ultimate_is1
~ Logic: 41 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\4Media]
[HKCU\Software\AMI]
[HKCU\Software\Adobe]
[HKCU\Software\AdsFix]
[HKCU\Software\Affinix]
[HKCU\Software\Agilix]
[HKCU\Software\Alps]
[HKCU\Software\AppDataLow\Software\Autodesk]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\AppDataLow]
[HKCU\Software\Audacity]
[HKCU\Software\AutoHelpDesk]
[HKCU\Software\Autodesk, Inc.]
[HKCU\Software\Autodesk]
[HKCU\Software\Avg]
[HKCU\Software\Baidu Security]
[HKCU\Software\Baixaki]
[HKCU\Software\Bitdefender]
[HKCU\Software\CAPCAR]
[HKCU\Software\Chromium]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\ClkApp]
[HKCU\Software\ConverterCenter]
[HKCU\Software\Cyberlink]
[HKCU\Software\DSP-worx]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\Data Dynamics]
[HKCU\Software\Digital River]
[HKCU\Software\Earth Resource Mapping]
[HKCU\Software\FSCR Master]
[HKCU\Software\Finalhit]
[HKCU\Software\GNU]
[HKCU\Software\GbPlugin]
[HKCU\Software\Google]
[HKCU\Software\Guru]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\I.R.I.S.]
[HKCU\Software\IM Providers]
[HKCU\Software\INPE-DPI]
[HKCU\Software\INTEL]
[HKCU\Software\Iris]
[HKCU\Software\LAV]
[HKCU\Software\Lake]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LtdStrInfo]
[HKCU\Software\Macromedia]
[HKCU\Software\Mooii]
[HKCU\Software\Motorola]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NSWB]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Pictures Software Inc]
[HKCU\Software\Policies]
[HKCU\Software\ProtectedHp]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\SAS Institute Inc.]
[HKCU\Software\Skype]
[HKCU\Software\Sony Corporation]
[HKCU\Software\StudioV5]
[HKCU\Software\Sysinternals]
[HKCU\Software\TeamViewer]
[HKCU\Software\Trolltech]
[HKCU\Software\UNO by Claude Toupin]
[HKCU\Software\UltraDownloads.com.br]
[HKCU\Software\Unity]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WSVCUPlugin]
[HKCU\Software\Widcomm]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wondershare]
[HKCU\Software\Wow6432Node]
[HKCU\Software\WsAudio_Device]
[HKCU\Software\antiufo]
[HKCU\Software\dskMetrics]
[HKCU\Software\g3n-h@ckm@n]
[HKCU\Software\gamani]
[HKCU\Software\i.Tech]
[HKLM\Software\0892CCEA-3029-46F2-BD98-F3177431F5F8] =>PUP.CrossRider
[HKLM\Software\360Safe]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVG]
[HKLM\Software\Adobe]
[HKLM\Software\AdsFix]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Alps]
[HKLM\Software\Ariad]
[HKLM\Software\Astro Gemini Software]
[HKLM\Software\Autodesk]
[HKLM\Software\Baidu Security]
[HKLM\Software\Baidu_Drp_pos]
[HKLM\Software\CCB]
[HKLM\Software\CLSYSTEM]
[HKLM\Software\COMODO]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\D20A6820-7C28-4015-945F-09F8551FCE45] =>PUP.CrossRider
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\Earth Resource Mapping]
[HKLM\Software\FFmpeg for Audacity]
[HKLM\Software\FIC HotKey]
[HKLM\Software\Google]
[HKLM\Software\HC-inemA3-nv]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\ICE]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Jodix]
[HKLM\Software\JreMetrics]
[HKLM\Software\Kaydara]
[HKLM\Software\Lake]
[HKLM\Software\Lame for Audacity]
[HKLM\Software\Licenses]
[HKLM\Software\Loani]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MaxPower]
[HKLM\Software\Mooii]
[HKLM\Software\Motorola]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nero]
[HKLM\Software\NtSvcHandler]
[HKLM\Software\ODBC]
[HKLM\Software\Paint.NET]
[HKLM\Software\Policies]
[HKLM\Software\ProtectedHp]
[HKLM\Software\REALTEK Semiconductor Corp.]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SAS Institute Inc.]
[HKLM\Software\SRS Labs]
[HKLM\Software\SYSTAT Software Inc.]
[HKLM\Software\SiteSee]
[HKLM\Software\Skype]
[HKLM\Software\Sony Corporation]
[HKLM\Software\Sysinternals]
[HKLM\Software\TeamViewer]
[HKLM\Software\Volatile]
[HKLM\Software\Waves Audio]
[HKLM\Software\Widcomm]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows]
[HKLM\Software\WondershareSysMenuDATA]
[HKLM\Software\Wondershare]
[HKLM\Software\Wow6432Node]
[HKLM\Software\g3n-h@ckm@n]
[HKLM\Software\mozilla.org]
[HKLM\Software\searchult]
[HKLM\Software\waterfalls]
~ Key Software: 303 Scanned in 00mn 00s
---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 20/10/2014 - 09:59:57 - [] ----D C:\Program Files\Adobe
O43 - CFD: 04/05/2010 - 10:49:50 - [] ----D C:\Program Files\AMCap
O43 - CFD: 04/05/2010 - 10:42:25 - [] ----D C:\Program Files\AmIcoSingLun
O43 - CFD: 04/05/2010 - 10:28:31 - [] ----D C:\Program Files\Apoint2K
O43 - CFD: 23/02/2012 - 22:21:05 - [] ----D C:\Program Files\Apostilas Objetiva
O43 - CFD: 20/06/2010 - 21:44:08 - [] -S--D C:\Program Files\Arquivos Comuns
O43 - CFD: 11/02/2011 - 21:29:33 - [] ----D C:\Program Files\Audacity 1.3 Beta (Unicode)
O43 - CFD: 14/09/2013 - 12:30:13 - [] ----D C:\Program Files\Autodesk
O43 - CFD: 20/06/2010 - 22:34:57 - [] ----D C:\Program Files\AVG
O43 - CFD: 20/01/2015 - 08:15:42 - [] ----D C:\Program Files\Baidu Security
O43 - CFD: 29/09/2014 - 11:18:49 - [] ----D C:\Program Files\CapCar
O43 - CFD: 20/01/2015 - 07:59:28 - [] ----D C:\Program Files\Common Files
O43 - CFD: 04/05/2010 - 11:44:03 - [] ----D C:\Program Files\CyberLink
O43 - CFD: 19/05/2012 - 18:22:57 - [] ----D C:\Program Files\DVD Maker
O43 - CFD: 16/08/2010 - 19:37:24 - [] ----D C:\Program Files\DVDVideoSoft
O43 - CFD: 13/11/2011 - 20:03:05 - [] ----D C:\Program Files\Ffmpeg For Audacity
O43 - CFD: 19/05/2011 - 12:39:11 - [] ----D C:\Program Files\Free Screensavers
O43 - CFD: 24/06/2012 - 19:31:17 - [] ----D C:\Program Files\Free WMA to MP3 Converter
O43 - CFD: 11/08/2011 - 12:11:50 - [] ----D C:\Program Files\GbPlugin
O43 - CFD: 19/01/2015 - 18:35:25 - [] ----D C:\Program Files\Google
O43 - CFD: 23/05/2011 - 23:27:58 - [] ----D C:\Program Files\Hotkey_Utility
O43 - CFD: 04/12/2014 - 10:57:14 - [] ----D C:\Program Files\HP
O43 - CFD: 29/06/2011 - 17:02:44 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 04/02/2011 - 14:08:17 - [] ----D C:\Program Files\Intel
O43 - CFD: 11/12/2014 - 07:37:19 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 18/02/2011 - 20:48:39 - [] ----D C:\Program Files\LimeWire
O43 - CFD: 19/01/2015 - 16:55:03 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 21/06/2010 - 09:38:43 - [] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 14/07/2009 - 02:52:30 - [] ----D C:\Program Files\Microsoft Games
O43 - CFD: 02/01/2012 - 13:40:48 - [] ----D C:\Program Files\Microsoft Office
O43 - CFD: 10/09/2014 - 18:33:33 - [] ----D C:\Program Files\Microsoft Security Client
O43 - CFD: 18/09/2012 - 22:09:25 - [] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 04/05/2010 - 11:03:06 - [] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 04/05/2010 - 10:59:57 - [] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 21/06/2010 - 09:36:46 - [] ----D C:\Program Files\Microsoft Works
O43 - CFD: 15/02/2011 - 10:22:36 - [] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 27/04/2014 - 12:26:17 - [] ----D C:\Program Files\Ministério do Meio Ambiente
O43 - CFD: 04/05/2010 - 10:32:09 - [] ----D C:\Program Files\Motorola
O43 - CFD: 19/01/2015 - 11:28:14 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 04/05/2010 - 11:03:11 - [] ----D C:\Program Files\MSBuild
O43 - CFD: 07/03/2011 - 20:04:15 - [] ----D C:\Program Files\Nero
O43 - CFD: 25/07/2010 - 12:18:29 - [] ----D C:\Program Files\Paint.NET
O43 - CFD: 25/07/2010 - 12:32:22 - [] ----D C:\Program Files\PhotoScape
O43 - CFD: 11/05/2010 - 17:09:04 - [] ----D C:\Program Files\Realtek
O43 - CFD: 11/05/2010 - 17:10:26 - [] ----D C:\Program Files\REALTEK PCIE Wireless LAN Driver
O43 - CFD: 14/07/2009 - 02:52:30 - [] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 21/04/2011 - 22:23:44 - [] ----D C:\Program Files\RMVB WMV to AVI Converter
O43 - CFD: 01/07/2001 - 17:06:55 - [] ----D C:\Program Files\SAS Institute
O43 - CFD: 15/06/2011 - 18:29:33 - [] ----D C:\Program Files\SigmaPlot
O43 - CFD: 05/01/2015 - 10:17:09 - [] R---D C:\Program Files\Skype
O43 - CFD: 14/06/2012 - 22:37:42 - [] ----D C:\Program Files\Softinterface, Inc
O43 - CFD: 30/10/2010 - 21:33:50 - [] ----D C:\Program Files\Sony
O43 - CFD: 30/06/2010 - 19:02:23 - [] ----D C:\Program Files\Spring515_Portugues_x86
O43 - CFD: 10/09/2014 - 18:10:33 - [] ----D C:\Program Files\Studio V5
O43 - CFD: 19/03/2011 - 17:48:30 - [] ----D C:\Program Files\TeamViewer
O43 - CFD: 11/05/2010 - 17:13:44 - [0] ----D C:\Program Files\Temp
O43 - CFD: 14/07/2009 - 02:53:23 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 04/05/2010 - 10:36:50 - [] ----D C:\Program Files\WIDCOMM
O43 - CFD: 09/07/2013 - 21:51:08 - [] ----D C:\Program Files\Windows Defender
O43 - CFD: 21/05/2013 - 15:16:27 - [] ----D C:\Program Files\Windows Live
O43 - CFD: 19/05/2012 - 18:22:58 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 18/12/2013 - 21:00:59 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 20/06/2010 - 21:44:08 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 19/05/2012 - 18:22:57 - [] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 19/05/2012 - 18:22:57 - [] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 19/05/2012 - 18:22:57 - [] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 27/08/2011 - 13:33:10 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 20/01/2015 - 18:37:18 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 20/10/2014 - 10:10:58 - [] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 14/09/2013 - 12:32:06 - [] ----D C:\Program Files\Common Files\Autodesk Shared
O43 - CFD: 14/05/2014 - 12:11:35 - [] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 22/10/2014 - 10:55:28 - [] ----D C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 20/06/2010 - 22:07:15 - [] ----D C:\Program Files\Common Files\Hewlett-Packard
O43 - CFD: 20/06/2010 - 22:07:20 - [] ----D C:\Program Files\Common Files\HP
O43 - CFD: 04/05/2010 - 11:42:10 - [] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 22/08/2014 - 21:31:28 - [] ----D C:\Program Files\Common Files\Java
O43 - CFD: 14/09/2013 - 12:23:10 - [] ----D C:\Program Files\Common Files\Macrovision Shared
O43 - CFD: 18/09/2012 - 22:07:46 - [] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 07/03/2011 - 20:03:52 - [] ----D C:\Program Files\Common Files\Nero
O43 - CFD: 14/07/2009 - 00:37:05 - [] ----D C:\Program Files\Common Files\Services
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\Program Files\Common Files\Sistema
O43 - CFD: 10/10/2014 - 08:43:35 - [] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 14/07/2009 - 00:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 11/07/2012 - 16:44:34 - [] ----D C:\Program Files\Common Files\System
O43 - CFD: 20/06/2010 - 22:51:38 - [] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 20/06/2010 - 22:49:57 - [] -SH-D C:\Program Files\Common Files\WindowsLiveInstaller
O43 - CFD: 19/10/2014 - 22:02:01 - [] ----D C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 20/10/2014 - 10:10:56 - [] ----D C:\ProgramData\Adobe
O43 - CFD: 21/09/2013 - 16:39:28 - [] ----D C:\ProgramData\Autodesk
O43 - CFD: 18/03/2014 - 20:41:47 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 29/09/2010 - 20:37:09 - [] ----D C:\ProgramData\avg8
O43 - CFD: 25/05/2010 - 02:13:23 - [] ----D C:\ProgramData\CyberLink
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Dados de aplicativos
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Documentos
O43 - CFD: 04/05/2010 - 11:47:25 - [] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Favoritos
O43 - CFD: 21/09/2013 - 16:40:49 - [] ----D C:\ProgramData\FLEXnet
O43 - CFD: 17/01/2012 - 14:46:45 - [] ----D C:\ProgramData\gas
O43 - CFD: 11/08/2011 - 12:11:50 - [] ----D C:\ProgramData\GbPlugin
O43 - CFD: 20/06/2010 - 22:24:19 - [] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 04/12/2014 - 10:55:11 - [] ----D C:\ProgramData\HP
O43 - CFD: 20/06/2010 - 22:07:35 - [] ----D C:\ProgramData\HP Product Assistant
O43 - CFD: 10/11/2014 - 11:10:49 - [] ----D C:\ProgramData\IsolatedStorage
O43 - CFD: 10/03/2014 - 22:42:31 - [] ----D C:\ProgramData\Log
O43 - CFD: 19/01/2015 - 16:45:15 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 12/03/2012 - 10:41:33 - [] ----D C:\ProgramData\McAfee
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Menu Iniciar
O43 - CFD: 19/01/2015 - 14:53:21 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 10/12/2014 - 15:57:09 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Modelos
O43 - CFD: 06/05/2012 - 20:02:10 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 07/03/2011 - 20:04:15 - [] ----D C:\ProgramData\Nero
O43 - CFD: 05/01/2015 - 10:17:16 - [] ----D C:\ProgramData\Skype
O43 - CFD: 30/10/2010 - 21:34:27 - [] ----D C:\ProgramData\Sony Corporation
O43 - CFD: 24/06/2010 - 18:44:50 - [] ----D C:\ProgramData\Sun
O43 - CFD: 12/01/2013 - 23:18:09 - [] ---AD C:\ProgramData\Temp
O43 - CFD: 20/06/2010 - 22:25:04 - [] ----D C:\ProgramData\WEBREG
O43 - CFD: 20/06/2010 - 22:48:27 - [] ----D C:\ProgramData\WLInstaller
O43 - CFD: 20/08/2014 - 19:39:21 - [] ----D C:\ProgramData\Wondershare
O43 - CFD: 20/06/2010 - 21:45:45 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 04/05/2010 - 11:04:19 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 21/04/2011 - 22:23:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apecsoft RMVB WMV to AVI Converter
O43 - CFD: 19/01/2015 - 15:36:34 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apostilas Objetiva
O43 - CFD: 20/11/2014 - 13:55:30 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares
O43 - CFD: 14/09/2013 - 12:32:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
O43 - CFD: 23/05/2013 - 15:35:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cadub
O43 - CFD: 25/08/2013 - 14:28:19 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CAMPEIRO7
O43 - CFD: 22/05/2014 - 22:20:25 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
O43 - CFD: 14/06/2012 - 22:39:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image
O43 - CFD: 04/05/2010 - 11:42:52 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
O43 - CFD: 16/08/2010 - 19:37:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
O43 - CFD: 14/07/2009 - 02:42:31 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 19/01/2015 - 18:35:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 23/10/2014 - 10:19:31 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth =>.Google Inc
O43 - CFD: 20/11/2014 - 13:55:30 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123-Brazil
O43 - CFD: 04/12/2014 - 10:57:10 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 04/05/2010 - 10:05:18 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
O43 - CFD: 01/07/2001 - 17:24:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IT Service Vision
O43 - CFD: 20/11/2014 - 13:55:30 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 24/06/2012 - 19:31:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jodix
O43 - CFD: 14/07/2009 - 02:42:30 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 19/01/2015 - 16:55:03 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 14/07/2010 - 22:09:47 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 04/05/2010 - 10:59:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
O43 - CFD: 23/07/2014 - 11:52:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ministério do Meio Ambiente
O43 - CFD: 07/03/2011 - 20:03:47 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 20/11/2014 - 13:55:30 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 25/07/2010 - 12:32:29 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
O43 - CFD: 30/10/2010 - 21:35:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB
O43 - CFD: 15/06/2011 - 18:30:10 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SigmaPlot
O43 - CFD: 10/10/2014 - 08:43:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 30/06/2010 - 19:02:23 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spring 5.1.5 Português _x86
O43 - CFD: 22/10/2014 - 10:57:50 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 01/07/2001 - 17:25:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The SAS System
O43 - CFD: 27/08/2011 - 13:33:10 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 20/01/2015 - 18:19:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 10/10/2012 - 12:25:25 - [] ----D C:\Users\Professor\AppData\Roaming\4Media
O43 - CFD: 12/03/2012 - 10:55:02 - [] ----D C:\Users\Professor\AppData\Roaming\Adobe
O43 - CFD: 13/12/2014 - 16:53:32 - [] ----D C:\Users\Professor\AppData\Roaming\Audacity
O43 - CFD: 21/09/2013 - 16:39:28 - [] ----D C:\Users\Professor\AppData\Roaming\Autodesk
O43 - CFD: 02/01/2012 - 13:50:08 - [] ----D C:\Users\Professor\AppData\Roaming\CyberLink
O43 - CFD: 29/07/2010 - 12:09:02 - [] ----D C:\Users\Professor\AppData\Roaming\HP
O43 - CFD: 04/12/2014 - 10:56:22 - [] ----D C:\Users\Professor\AppData\Roaming\HpUpdate
O43 - CFD: 03/05/2010 - 17:54:51 - [] ----D C:\Users\Professor\AppData\Roaming\Identities
O43 - CFD: 04/05/2010 - 10:04:55 - [] ----D C:\Users\Professor\AppData\Roaming\InstallShield
O43 - CFD: 10/11/2014 - 11:10:49 - [] ----D C:\Users\Professor\AppData\Roaming\IsolatedStorage
O43 - CFD: 10/09/2014 - 18:22:06 - [] ----D C:\Users\Professor\AppData\Roaming\LogoMaker
O43 - CFD: 04/05/2010 - 11:54:59 - [] ----D C:\Users\Professor\AppData\Roaming\Macromedia
O43 - CFD: 19/01/2015 - 17:15:36 - [] ----D C:\Users\Professor\AppData\Roaming\Macwebtoise
O43 - CFD: 19/05/2011 - 11:45:52 - [] ----D C:\Users\Professor\AppData\Roaming\Marine Aquarium 3
O43 - CFD: 19/01/2015 - 17:53:54 - [] -S--D C:\Users\Professor\AppData\Roaming\Microsoft
O43 - CFD: 22/06/2010 - 21:05:04 - [] ----D C:\Users\Professor\AppData\Roaming\Mozilla
O43 - CFD: 07/03/2011 - 20:04:35 - [] ----D C:\Users\Professor\AppData\Roaming\Nero
O43 - CFD: 22/08/2014 - 21:34:38 - [] ----D C:\Users\Professor\AppData\Roaming\Oracle
O43 - CFD: 24/11/2013 - 20:10:37 - [] ----D C:\Users\Professor\AppData\Roaming\PhotoFiltre 7
O43 - CFD: 15/01/2015 - 15:20:18 - [] ----D C:\Users\Professor\AppData\Roaming\PhotoScape
O43 - CFD: 21/01/2015 - 10:15:54 - [] ----D C:\Users\Professor\AppData\Roaming\Skype
O43 - CFD: 14/06/2012 - 22:37:51 - [] ----D C:\Users\Professor\AppData\Roaming\Softinterface, Inc
O43 - CFD: 30/10/2010 - 21:41:20 - [] ----D C:\Users\Professor\AppData\Roaming\Sony Corporation
O43 - CFD: 29/09/2014 - 12:11:37 - [] ----D C:\Users\Professor\AppData\Roaming\Unity
O43 - CFD: 27/08/2011 - 13:33:33 - [] ----D C:\Users\Professor\AppData\Roaming\WinRAR
O43 - CFD: 20/08/2014 - 15:47:20 - [] ----D C:\Users\Professor\AppData\Roaming\Wondershare Video Converter Ultimate
O43 - CFD: 21/01/2015 - 10:18:32 - [] ----D C:\Users\Professor\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 19/01/2015 - 20:58:22 - [] ----D C:\Users\Professor\AppData\Local\Adobe
O43 - CFD: 19/01/2011 - 14:33:28 - [] ----D C:\Users\Professor\AppData\Local\Apps
O43 - CFD: 18/02/2011 - 20:50:10 - [] ----D C:\Users\Professor\AppData\Local\Ares
O43 - CFD: 27/03/2014 - 20:33:12 - [] ----D C:\Users\Professor\AppData\Local\Autodesk
O43 - CFD: 04/05/2010 - 10:37:52 - [] ----D C:\Users\Professor\AppData\Local\Broadcom
O43 - CFD: 20/01/2015 - 16:22:39 - [] ----D C:\Users\Professor\AppData\Local\cache
O43 - CFD: 22/05/2014 - 19:35:00 - [] ----D C:\Users\Professor\AppData\Local\Comodo
O43 - CFD: 27/10/2014 - 07:56:44 - [] ----D C:\Users\Professor\AppData\Local\Diagnostics
O43 - CFD: 23/07/2014 - 11:24:15 - [] ----D C:\Users\Professor\AppData\Local\Downloaded Installations
O43 - CFD: 19/03/2014 - 19:43:31 - [0] ----D C:\Users\Professor\AppData\Local\ElevatedDiagnostics
O43 - CFD: 19/01/2015 - 14:53:34 - [] -SH-D C:\Users\Professor\AppData\Local\EmieBrowserModeList
O43 - CFD: 17/08/2014 - 17:12:25 - [] -SH-D C:\Users\Professor\AppData\Local\EmieSiteList
O43 - CFD: 17/08/2014 - 17:12:25 - [] -SH-D C:\Users\Professor\AppData\Local\EmieUserList
O43 - CFD: 19/01/2015 - 18:35:43 - [] ----D C:\Users\Professor\AppData\Local\Google
O43 - CFD: 04/12/2014 - 11:03:38 - [] ----D C:\Users\Professor\AppData\Local\HP
O43 - CFD: 09/08/2012 - 12:32:33 - [] ----D C:\Users\Professor\AppData\Local\Macromedia
O43 - CFD: 13/12/2014 - 15:58:30 - [] ----D C:\Users\Professor\AppData\Local\Microsoft
O43 - CFD: 03/08/2010 - 16:47:29 - [] ----D C:\Users\Professor\AppData\Local\Microsoft Games
O43 - CFD: 04/07/2010 - 12:31:35 - [] ----D C:\Users\Professor\AppData\Local\Microsoft Help
O43 - CFD: 04/10/2013 - 19:33:24 - [] ----D C:\Users\Professor\AppData\Local\Mozilla
O43 - CFD: 10/11/2014 - 11:11:42 - [] ----D C:\Users\Professor\AppData\Local\Paint.NET
O43 - CFD: 18/08/2014 - 10:38:52 - [] ----D C:\Users\Professor\AppData\Local\Programs
O43 - CFD: 30/03/2014 - 16:32:25 - [] ----D C:\Users\Professor\AppData\Local\Skype
O43 - CFD: 09/06/2011 - 11:17:23 - [] ----D C:\Users\Professor\AppData\Local\Songr
O43 - CFD: 21/01/2015 - 10:17:31 - [] ----D C:\Users\Professor\AppData\Local\Temp
O43 - CFD: 20/08/2014 - 13:52:45 - [] ----D C:\Users\Professor\AppData\Local\VirtualStore
O43 - CFD: 21/05/2013 - 09:19:36 - [] ----D C:\Users\Professor\AppData\Local\Windows Live
O43 - CFD: 21/10/2014 - 20:35:42 - [] ----D C:\Users\Professor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
O43 - CFD: 22/08/2014 - 09:26:41 - [] ----D C:\Users\Professor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dispositivos Bluetooth
O43 - CFD: 10/11/2014 - 10:44:08 - [] R---D C:\Users\Professor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
~ Program Folder: 214 Scanned in 00mn 00s
---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.03F899F521D2AAED1C55008F734DF252] - 14/01/2015 - 06:50:30 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\Drivers\mrxdav.sys [116224]
O44 - LFC:[MD5.F115C5CD29E512F18BD7138A094B77E5] - 14/01/2015 - 06:50:36 ---A- . (.Microsoft Corporation - Reconhecimento de Locais de Rede 2.) -- C:\Windows\System32\nlasvc.dll [242688]
O44 - LFC:[MD5.FD9692A3D31E021207D3C2A9DDDC2BE3] - 14/01/2015 - 06:50:39 ---A- . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864]
O44 - LFC:[MD5.306EB846F88E58C7E763946DE95952E3] - 14/01/2015 - 06:50:40 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Proxy.) -- C:\Windows\System32\TSWbPrxy.exe [46592]
O44 - LFC:[MD5.8A289EF0AE709327D6AA9769E108B5A6] - 14/01/2015 - 06:51:03 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe [3916728]
O44 - LFC:[MD5.2AF481C03C0383ADE09FFEDA0C583140] - 14/01/2015 - 06:51:04 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntkrnlpa.exe [3971512]
O44 - LFC:[MD5.348E3DFC717E77368FF41E665303F0DC] - 14/01/2015 - 17:12:44 ---A- . (.Microsoft Corporation - Ferramentas de Remoção de Software Mal-Inte.) -- C:\Windows\System32\MRT.exe [110348472]
O44 - LFC:[MD5.A3F4391DFDF2F9E9FE4EAD193265A5AD] - 19/01/2015 - 15:45:15 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256]
O44 - LFC:[MD5.312CD3307F600E7CD340B79B3DCB3A01] - 19/01/2015 - 15:45:15 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928]
O44 - LFC:[MD5.9BD41E40039098BF5F8FE878A9A6989E] - 19/01/2015 - 15:45:16 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [75480]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/01/2015 - 19:20:24 ---A- . (...) -- C:\Windows\setuperr.log [0]
O44 - LFC:[MD5.45979024BEFB7DB31BE0C99A44997362] - 19/01/2015 - 19:57:03 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [701616]
O44 - LFC:[MD5.E0AC7C714BB1A0646298967AB20DDAE4] - 19/01/2015 - 19:57:03 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [71344]
O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 20/01/2015 - 06:33:26 ---A- . (...) -- C:\Windows\zoek-delete.exe [24064]
O44 - LFC:[MD5.D54C5DCE43C135C638C552212204129A] - 20/01/2015 - 07:06:21 ---A- . (...) -- C:\Windows\PFRO.log [691154]
O44 - LFC:[MD5.570B91D01B214C0E829DB358DB3675E9] - 20/01/2015 - 07:08:55 ---A- . (...) -- C:\zoek-results.log [27206]
O44 - LFC:[MD5.3DF6B7CA64539392DA9F0681C894290D] - 20/01/2015 - 12:23:57 ---A- . (...) -- C:\AdsFix_20_01_2015_13_23_57.txt [33355]
O44 - LFC:[MD5.DF644D8A9AD502C0DB0FA8A19FEAD33C] - 20/01/2015 - 12:48:24 R--A- . (...) -- C:\Pre_Scan_20_01_2015_13_48_24.txt [14927]
O44 - LFC:[MD5.E570239983AA75E89B105CE43F92F21F] - 20/01/2015 - 15:16:46 ---A- . (...) -- C:\Windows\setupact.log [448]
O44 - LFC:[MD5.2B1785D99119EF764C8BF54AE776B5FC] - 20/01/2015 - 17:19:18 ---A- . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\ZHPDiag2.exe [6865579]
O44 - LFC:[MD5.C3137BF19DAF6B1EA1E34E43BA0A53A1] - 20/01/2015 - 17:28:26 ---A- . (...) -- C:\20be8497-3c07-4bd7-a2fc-d9beedc0b7f1.dmp [25704]
O44 - LFC:[MD5.7756361F271989CE4D31AFC033273AFE] - 20/01/2015 - 17:29:10 ---A- . (...) -- C:\0f04f896-0c5b-4dd0-9d38-4d14f9844747.dmp [25128]
O44 - LFC:[MD5.E56F371A8C55F1BD86270EDFEDB0CAF5] - 20/01/2015 - 17:29:55 ---A- . (...) -- C:\7acd279e-b188-46dc-84cb-8a5bb4814823.dmp [27820]
O44 - LFC:[MD5.81838278692C86CDBF35B29432C7E6F7] - 20/01/2015 - 17:37:19 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.427F8CDDB6C2F40C57A3F9F58BBBE019] - 20/01/2015 - 17:41:03 ---A- . (...) -- C:\a5809b47-dd1a-484c-b973-c23b56d5a036.dmp [25688]
O44 - LFC:[MD5.4C8ABD81E7CDE6C34BF3E033662667C4] - 20/01/2015 - 20:19:16 ---A- . (...) -- C:\19ce4d1e-58c2-4002-b3c6-09b0edf5cb2b.dmp [25232]
O44 - LFC:[MD5.2D02CBA707AA6D0D6DB7E79DF2DA46F2] - 20/01/2015 - 20:19:52 ---A- . (...) -- C:\0289ba64-2291-4b3d-8baa-4393522f0a54.dmp [25136]
O44 - LFC:[MD5.53747B954F32E23F21BBC2613948414B] - 20/01/2015 - 20:21:04 ---A- . (...) -- C:\23184093-238d-410c-a6a8-d01ca651f8cf.dmp [25972]
O44 - LFC:[MD5.E7361778BD36B208989A0ABE32EDFADC] - 20/01/2015 - 20:21:49 ---A- . (...) -- C:\ed647b1c-ecfc-4343-bdc4-4adef5daf6f4.dmp [26888]
O44 - LFC:[MD5.CD99DC746E231D0F333CA42397DA908C] - 20/01/2015 - 20:22:50 ---A- . (...) -- C:\2b4dc3e7-9be9-4385-8447-5e8dfd2ff4c7.dmp [26300]
O44 - LFC:[MD5.DE6435E52B487DB22AB186F61838D77B] - 21/01/2015 - 06:25:29 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.8E2E9CCD873ABF180F48BCAEEEBE347D] - 21/01/2015 - 06:25:58 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [114904]
O44 - LFC:[MD5.C664F063DEE15E13DF35353D7602A7A3] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1641082]
O44 - LFC:[MD5.8402AD98ACC9993B70FEB2BFC489619D] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\perfc009.dat [122884]
O44 - LFC:[MD5.760E896A73A14942DE8FBABC659677F8] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\perfh009.dat [656418]
O44 - LFC:[MD5.35F8ADA922D677A57EA20263835A82A3] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [148396]
O44 - LFC:[MD5.2FB3D56F11DE8C7B7FFA8457279D213F] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [707962]
O44 - LFC:[MD5.5AE5EC2961B30C11D03386126B6FC05F] - 21/01/2015 - 07:10:26 ---A- . (...) -- C:\7e5d038e-ce17-4bf3-8032-120063a76335.dmp [25940]
O44 - LFC:[MD5.5103AFF5BC5A26BF0AF904D80C8C9D6C] - 21/01/2015 - 07:11:10 ---A- . (...) -- C:\1ccbf2ba-9a72-4768-a8fa-a714c6561b42.dmp [27200]
O44 - LFC:[MD5.68929FF841DA6C8DF67B5760CC81725D] - 21/01/2015 - 07:12:28 ---A- . (...) -- C:\368a3092-9311-4005-9141-8ac4a7acf3c1.dmp [26244]
O44 - LFC:[MD5.E8A086C081DBB745AF8234B2871F27F4] - 21/01/2015 - 07:13:15 ---A- . (...) -- C:\652e0b4a-3ffa-461f-9052-3163a485d803.dmp [26016]
O44 - LFC:[MD5.0C3604C37E4308F9E7BA9C491C1AA72B] - 21/01/2015 - 07:56:28 ---A- . (...) -- C:\05b9678d-d519-42c1-9eca-72c61d0c1dcd.dmp [24212]
O44 - LFC:[MD5.56D25F2ACFD77F9DB241928F8A9E3C8E] - 21/01/2015 - 07:57:13 ---A- . (...) -- C:\e8e5322e-cc29-4499-97e8-9e141a4c007a.dmp [26912]
O44 - LFC:[MD5.EA34CC06CBC456D2377AE0A5EA3D49F9] - 21/01/2015 - 07:57:58 ---A- . (...) -- C:\bb590ce0-e969-4b97-9948-72901eb3f20f.dmp [26688]
O44 - LFC:[MD5.8A9CDC3B49DE1AFD909B27AE288A86DD] - 21/01/2015 - 08:57:37 ---A- . (...) -- C:\Windows\WindowsUpdate.log [2026383]
~ Files: 45 Scanned in 00mn 15s
---\\ Operações e funções ao arranque do Windows Explorer (046)
O46 - SEH:ShellExecuteHooks - GbPlugin ShlObj - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES\GBPLUGIN\gbieh.dll
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Negação do serviço (Local Security Authority) (048)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Mecanismo cliente do 'Editor de configuração de segurança Windows'.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pacote de Segurança Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s
---\\ Controlo do Modo de Segurança (CSB) (49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Driver de porta de mouse serial.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Driver de Extensão do Gerenciador de Volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Tempo de Execução da Estrutura de Driver em Modo Kernel.) -- C:\Windows\System32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Driver de porta de mouse serial.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Driver de Extensão do Gerenciador de Volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Tempo de Execução da Estrutura de Driver em Modo Kernel.) -- C:\Windows\System32\Drivers\Wdf01000.sys
~ CSB: 15 Scanned in 00mn 00s
---\\ Chave do registo Shell MountPoints2 (MPSK) (O51)
O51 - MPSK:{775f5f09-1025-11e0-9524-002243fc03b6}\AutoRun\command. (...) -- E:\iStudio.exe (.not file.)
O51 - MPSK:{c434e122-56ea-11df-8735-806e6f6e6963}\AutoRun\command. (...) -- D:\SETUP.exe (.not file.)
~ Keys: Scanned in 00mn 00s
O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {A80FA752-C491-4ED9-ABF0-4278563160B2}
O42 - Logiciel: 3D - (.Laboratório de Geomática - DER/CCR/UFSM.) [HKLM] -- {75A890E6-F558-4DBE-9127-2E6C0472E96E}
O42 - Logiciel: ALPS Touch Pad Driver - (...) [HKLM] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}
O42 - Logiciel: AMCap - (...) [HKLM] -- {449F20E4-84F6-4023-BBFC-3988A97B857C}
O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Reader XI (11.0.10) - Português - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1046-7B44-AB0000000001}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001802114130}
O42 - Logiciel: AmIcoSingLun - (.Alcor Micro Co., Ltd..) [HKLM] -- InstallShield_{BF91B300-EEBC-4223-96F3-0FCBF7241B50}
O42 - Logiciel: Audacity 1.3.12 (Unicode) - (.Audacity Team.) [HKLM] -- Audacity 1.3 Beta (Unicode)_is1
O42 - Logiciel: AutoCAD 2012 - English - (.Autodesk.) [HKLM] -- AutoCAD 2012 - English
O42 - Logiciel: AutoCAD 2012 - English - (.Autodesk.) [HKLM] -- {5783F2D7-A001-0409-0002-0060B0CE6BBA}
O42 - Logiciel: Autodesk CAD Manager Tools - (.Autodesk.) [HKLM] -- {5783F2D7-0111-0409-0010-0060B0CE6BBA}
O42 - Logiciel: Autodesk Content Service - (.Autodesk.) [HKLM] -- {086F9A69-CD39-4893-A9FB-D3A0634CE3F7}
O42 - Logiciel: Autodesk Design Review 2012 - (.Autodesk, Inc..) [HKLM] -- Autodesk Design Review 2012
O42 - Logiciel: Autodesk Inventor Fusion 2012 - (.Autodesk, Inc..) [HKLM] -- Autodesk Inventor Fusion 2012
O42 - Logiciel: Autodesk Inventor Fusion 2012 - (.Autodesk, Inc..) [HKLM] -- {FFF5619F-6669-4EC5-A85E-9994F70A9E5D}
O42 - Logiciel: Autodesk Inventor Fusion 2012 Language Pack - (.Autodesk, Inc..) [HKLM] -- {FFF7F80F-929E-497F-A112-B070DE816128}
O42 - Logiciel: Autodesk Inventor Fusion plug-in for AutoCAD 2012 - (.Autodesk.) [HKLM] -- Autodesk Inventor Fusion plug-in for AutoCAD 2012
O42 - Logiciel: Autodesk Inventor Fusion plug-in for AutoCAD 2012 - (.Autodesk.) [HKLM] -- {EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}
O42 - Logiciel: Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012 - (.Autodesk.) [HKLM] -- {E552C39C-C70E-464F-9733-8311331BDD90}
O42 - Logiciel: Autodesk Material Library 2012 - (.Autodesk.) [HKLM] -- {8F0837C2-EE09-4903-88F3-1976FE7FFF4E}
O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2012 - (.Autodesk.) [HKLM] -- {65420DC9-306E-4371-905F-F4DC3B418E52}
O42 - Logiciel: Autodesk Network License Manager - (.Autodesk.) [HKLM] -- {EAB8A41D-FABA-4569-A0A1-60A8B358D6F1}
O42 - Logiciel: CAR - Módulo de Cadastro - (.Ministério do Meio Ambiente.) [HKLM] -- {B74B7514-A26E-4FF4-B68A-07123F18C350}
O42 - Logiciel: CR CAMPEIRO 7 - (.Laboratório de Geomática DER-CCR-UFSM.) [HKLM] -- Sistema de Gerenciamento Agropecuário CAMPEIRO 7~31F3910B_is1
O42 - Logiciel: Cadub 2.1 - (...) [HKLM] -- Cadub_is1
O42 - Logiciel: Convert Image - (.Softinterface, Inc..) [HKLM] -- Convert Image_is1 =>PUP.ConvertMe
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink DVD Suite - (.CyberLink Corp..) [HKLM] -- {1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM] -- {40BF1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: FARO LS 1.1.406.58 - (.FARO Scanner Production.) [HKLM] -- {951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}
O42 - Logiciel: FFmpeg v0.6.2 for Audacity - (...) [HKLM] -- FFmpeg for Audacity_is1
O42 - Logiciel: Free 3GP Video Converter version 3.5 - (.DVDVideoSoft Limited..) [HKLM] -- Free 3GP Video Converter_is1
O42 - Logiciel: Free WMA to MP3 Converter 1.16 - (.Jodix Technologies Ltd..) [HKLM] -- Free WMA to MP3 Converter_is1
O42 - Logiciel: Galeria de Fotos - (.Microsoft Corporation.) [HKLM] -- {F5248B7E-779A-4FA4-8134-D1933D8680FA}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {6F545E5E-4595-11E2-93B6-B8AC6F97B88E} =>.Google Inc
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Customer Participation Program 13.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
O42 - Logiciel: HP Deskjet 4620 series Ajuda - (.Hewlett Packard.) [HKLM] -- {55ABE602-CC50-446D-A9EA-41D6C2160D1A}
O42 - Logiciel: HP Deskjet 4620 series Estudo de aprimoramento de produtos - (.Hewlett-Packard Co..) [HKLM] -- {6F49F49A-5414-486B-BAB7-072A1A4BAC39}
O42 - Logiciel: HP Deskjet 4620 series Software básico do dispositivo - (.Hewlett-Packard Co..) [HKLM] -- {FEEE2CB1-3565-465F-A8A1-13E3970C142D}
O42 - Logiciel: HP Imaging Device Functions 13.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
O42 - Logiciel: HP Photosmart C4400 All-In-One Driver Software 13.0 Rel. 3 - (.HP.) [HKLM] -- {8181C5B7-2FF5-4677-BA6A-8E2C3F5A7601} =>.Hewlett-Packard Co
O42 - Logiciel: HP Photosmart Essential 3.5 - (.HP.) [HKLM] -- HP Photosmart Essential =>.Hewlett-Packard Co
O42 - Logiciel: HP Smart Web Printing 4.60 - (.HP.) [HKLM] -- HP Smart Web Printing
O42 - Logiciel: HP Solution Center 13.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM] -- {846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}
O42 - Logiciel: Hotkey Utility - (.FIC, Inc..) [HKLM] -- Hotkey Utility_is1
O42 - Logiciel: I.R.I.S. OCR - (.HP.) [HKLM] -- {CA6BCA2F-EDEB-408F-850B-31404BE16A61}
O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- HDMI
O42 - Logiciel: Intel® Matrix Storage Manager - (.Intel Corporation.) [HKLM] -- {9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}
O42 - Logiciel: Java 7 Update 67 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F03217067FF}
O42 - Logiciel: LAME v3.98.3 for Audacity - (...) [HKLM] -- LAME for Audacity_is1
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware versão 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft Antimalware Service PT-BR Language Pack - (.Microsoft Corporation.) [HKLM] -- {3099E885-DE8A-4099-ABE2-561DC8589DFA}
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {107F27B7-8EE4-4B3A-9CE5-497B120369DC}
O42 - Logiciel: Microsoft Security Client PT-BR Language Pack - (.Microsoft Corporation.) [HKLM] -- {50779A29-834E-4E36-BBEB-B7CABC67A825}
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client
O42 - Logiciel: Motorola SM56 Data Fax Modem - (.Motorola Inc.) [HKLM] -- SMSERIAL
O42 - Logiciel: Mozilla Firefox 35.0 (x86 pt-BR) - (.Mozilla.) [HKLM] -- Mozilla Firefox 35.0 (x86 pt-BR)
O42 - Logiciel: Nero BurnLite 10 - (.Nero AG.) [HKLM] -- {842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}
O42 - Logiciel: Nero BurnLite 10 - (.Nero AG.) [HKLM] -- {AB627AF2-9C7E-4DBD-816B-3B2646B81E89}
O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}
O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: OCR Software by I.R.I.S. 13.0 - (.HP.) [HKLM] -- HPOCR
O42 - Logiciel: PMB - (.Sony Corporation.) [HKLM] -- {B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}
O42 - Logiciel: Paint.NET v3.5.5 - (.dotPDN LLC.) [HKLM] -- {F0E2B312-D7FD-4349-A9B6-E90B36DB1BD0}
O42 - Logiciel: PhotoScape - (...) [HKLM] -- PhotoScape
O42 - Logiciel: PowerDVD - (.PowerDVDCorp..) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {9D3D8C60-A55F-4fed-B2B9-173F09590E16}
O42 - Logiciel: RMVB WMV to AVI Converter 2.10 - (.Apecsoft, Inc..) [HKLM] -- Apecsoft RMVB WMV to AVI Converter_is1
O42 - Logiciel: Realtek Ethernet Controller Driver For Windows Vista and Later - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906
O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
O42 - Logiciel: Shop for HP Supplies - (.HP.) [HKLM] -- Shop for HP Supplies
O42 - Logiciel: SigmaPlot 11.0 - (.Systat Software, Inc..) [HKLM] -- {B1A88375-BAB9-4081-B58F-A137FC6ED2A4}
O42 - Logiciel: Sistema Campeiro7 - (.Laboratório de Geomática - DER/CCR/UFSM.) [HKLM] -- {128A6EB8-2117-4A89-835C-3F0919F756A6}
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}
O42 - Logiciel: Skype™ 7.0 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Software WIDCOMM Bluetooth - (.Broadcom Corporation.) [HKLM] -- {9E9D49A4-1DF4-4138-B7DB-5D87A893088E}
O42 - Logiciel: Spring 5.1.5 Português_x86 - (...) [HKLM] -- Spring 5.1.5 Português_x86
O42 - Logiciel: TeamViewer 6 - (.TeamViewer GmbH.) [HKLM] -- TeamViewer 6
O42 - Logiciel: The SAS System V8 - (...) [HKLM] -- SAS v8
O42 - Logiciel: Uninstall 1.0.0.1 - (...) [HKLM] -- Uninstall_is1
O42 - Logiciel: WinRAR 4.01 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} =>.Microsoft Corporation
O42 - Logiciel: Wondershare Video Converter Ultimate(Build 6.0.1.0) - (.Wondershare Software.) [HKLM] -- Wondershare Video Converter Ultimate_is1
~ Logic: 41 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\4Media]
[HKCU\Software\AMI]
[HKCU\Software\Adobe]
[HKCU\Software\AdsFix]
[HKCU\Software\Affinix]
[HKCU\Software\Agilix]
[HKCU\Software\Alps]
[HKCU\Software\AppDataLow\Software\Autodesk]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Unity]
[HKCU\Software\AppDataLow]
[HKCU\Software\Audacity]
[HKCU\Software\AutoHelpDesk]
[HKCU\Software\Autodesk, Inc.]
[HKCU\Software\Autodesk]
[HKCU\Software\Avg]
[HKCU\Software\Baidu Security]
[HKCU\Software\Baixaki]
[HKCU\Software\Bitdefender]
[HKCU\Software\CAPCAR]
[HKCU\Software\Chromium]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\ClkApp]
[HKCU\Software\ConverterCenter]
[HKCU\Software\Cyberlink]
[HKCU\Software\DSP-worx]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\Data Dynamics]
[HKCU\Software\Digital River]
[HKCU\Software\Earth Resource Mapping]
[HKCU\Software\FSCR Master]
[HKCU\Software\Finalhit]
[HKCU\Software\GNU]
[HKCU\Software\GbPlugin]
[HKCU\Software\Google]
[HKCU\Software\Guru]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\I.R.I.S.]
[HKCU\Software\IM Providers]
[HKCU\Software\INPE-DPI]
[HKCU\Software\INTEL]
[HKCU\Software\Iris]
[HKCU\Software\LAV]
[HKCU\Software\Lake]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LtdStrInfo]
[HKCU\Software\Macromedia]
[HKCU\Software\Mooii]
[HKCU\Software\Motorola]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NSWB]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Pictures Software Inc]
[HKCU\Software\Policies]
[HKCU\Software\ProtectedHp]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\SAS Institute Inc.]
[HKCU\Software\Skype]
[HKCU\Software\Sony Corporation]
[HKCU\Software\StudioV5]
[HKCU\Software\Sysinternals]
[HKCU\Software\TeamViewer]
[HKCU\Software\Trolltech]
[HKCU\Software\UNO by Claude Toupin]
[HKCU\Software\UltraDownloads.com.br]
[HKCU\Software\Unity]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\WSVCUPlugin]
[HKCU\Software\Widcomm]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wondershare]
[HKCU\Software\Wow6432Node]
[HKCU\Software\WsAudio_Device]
[HKCU\Software\antiufo]
[HKCU\Software\dskMetrics]
[HKCU\Software\g3n-h@ckm@n]
[HKCU\Software\gamani]
[HKCU\Software\i.Tech]
[HKLM\Software\0892CCEA-3029-46F2-BD98-F3177431F5F8] =>PUP.CrossRider
[HKLM\Software\360Safe]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVG]
[HKLM\Software\Adobe]
[HKLM\Software\AdsFix]
[HKLM\Software\AdwCleaner]
[HKLM\Software\Alps]
[HKLM\Software\Ariad]
[HKLM\Software\Astro Gemini Software]
[HKLM\Software\Autodesk]
[HKLM\Software\Baidu Security]
[HKLM\Software\Baidu_Drp_pos]
[HKLM\Software\CCB]
[HKLM\Software\CLSYSTEM]
[HKLM\Software\COMODO]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CyberLink]
[HKLM\Software\D20A6820-7C28-4015-945F-09F8551FCE45] =>PUP.CrossRider
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\Earth Resource Mapping]
[HKLM\Software\FFmpeg for Audacity]
[HKLM\Software\FIC HotKey]
[HKLM\Software\Google]
[HKLM\Software\HC-inemA3-nv]
[HKLM\Software\HP]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\ICE]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\Jodix]
[HKLM\Software\JreMetrics]
[HKLM\Software\Kaydara]
[HKLM\Software\Lake]
[HKLM\Software\Lame for Audacity]
[HKLM\Software\Licenses]
[HKLM\Software\Loani]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\MaxPower]
[HKLM\Software\Mooii]
[HKLM\Software\Motorola]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nero]
[HKLM\Software\NtSvcHandler]
[HKLM\Software\ODBC]
[HKLM\Software\Paint.NET]
[HKLM\Software\Policies]
[HKLM\Software\ProtectedHp]
[HKLM\Software\REALTEK Semiconductor Corp.]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SAS Institute Inc.]
[HKLM\Software\SRS Labs]
[HKLM\Software\SYSTAT Software Inc.]
[HKLM\Software\SiteSee]
[HKLM\Software\Skype]
[HKLM\Software\Sony Corporation]
[HKLM\Software\Sysinternals]
[HKLM\Software\TeamViewer]
[HKLM\Software\Volatile]
[HKLM\Software\Waves Audio]
[HKLM\Software\Widcomm]
[HKLM\Software\WinRAR]
[HKLM\Software\Windows]
[HKLM\Software\WondershareSysMenuDATA]
[HKLM\Software\Wondershare]
[HKLM\Software\Wow6432Node]
[HKLM\Software\g3n-h@ckm@n]
[HKLM\Software\mozilla.org]
[HKLM\Software\searchult]
[HKLM\Software\waterfalls]
~ Key Software: 303 Scanned in 00mn 00s
---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 20/10/2014 - 09:59:57 - [] ----D C:\Program Files\Adobe
O43 - CFD: 04/05/2010 - 10:49:50 - [] ----D C:\Program Files\AMCap
O43 - CFD: 04/05/2010 - 10:42:25 - [] ----D C:\Program Files\AmIcoSingLun
O43 - CFD: 04/05/2010 - 10:28:31 - [] ----D C:\Program Files\Apoint2K
O43 - CFD: 23/02/2012 - 22:21:05 - [] ----D C:\Program Files\Apostilas Objetiva
O43 - CFD: 20/06/2010 - 21:44:08 - [] -S--D C:\Program Files\Arquivos Comuns
O43 - CFD: 11/02/2011 - 21:29:33 - [] ----D C:\Program Files\Audacity 1.3 Beta (Unicode)
O43 - CFD: 14/09/2013 - 12:30:13 - [] ----D C:\Program Files\Autodesk
O43 - CFD: 20/06/2010 - 22:34:57 - [] ----D C:\Program Files\AVG
O43 - CFD: 20/01/2015 - 08:15:42 - [] ----D C:\Program Files\Baidu Security
O43 - CFD: 29/09/2014 - 11:18:49 - [] ----D C:\Program Files\CapCar
O43 - CFD: 20/01/2015 - 07:59:28 - [] ----D C:\Program Files\Common Files
O43 - CFD: 04/05/2010 - 11:44:03 - [] ----D C:\Program Files\CyberLink
O43 - CFD: 19/05/2012 - 18:22:57 - [] ----D C:\Program Files\DVD Maker
O43 - CFD: 16/08/2010 - 19:37:24 - [] ----D C:\Program Files\DVDVideoSoft
O43 - CFD: 13/11/2011 - 20:03:05 - [] ----D C:\Program Files\Ffmpeg For Audacity
O43 - CFD: 19/05/2011 - 12:39:11 - [] ----D C:\Program Files\Free Screensavers
O43 - CFD: 24/06/2012 - 19:31:17 - [] ----D C:\Program Files\Free WMA to MP3 Converter
O43 - CFD: 11/08/2011 - 12:11:50 - [] ----D C:\Program Files\GbPlugin
O43 - CFD: 19/01/2015 - 18:35:25 - [] ----D C:\Program Files\Google
O43 - CFD: 23/05/2011 - 23:27:58 - [] ----D C:\Program Files\Hotkey_Utility
O43 - CFD: 04/12/2014 - 10:57:14 - [] ----D C:\Program Files\HP
O43 - CFD: 29/06/2011 - 17:02:44 - [] --H-D C:\Program Files\InstallShield Installation Information
O43 - CFD: 04/02/2011 - 14:08:17 - [] ----D C:\Program Files\Intel
O43 - CFD: 11/12/2014 - 07:37:19 - [] ----D C:\Program Files\Internet Explorer
O43 - CFD: 18/02/2011 - 20:48:39 - [] ----D C:\Program Files\LimeWire
O43 - CFD: 19/01/2015 - 16:55:03 - [] ----D C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 21/06/2010 - 09:38:43 - [] ----D C:\Program Files\Microsoft CAPICOM 2.1.0.2
O43 - CFD: 14/07/2009 - 02:52:30 - [] ----D C:\Program Files\Microsoft Games
O43 - CFD: 02/01/2012 - 13:40:48 - [] ----D C:\Program Files\Microsoft Office
O43 - CFD: 10/09/2014 - 18:33:33 - [] ----D C:\Program Files\Microsoft Security Client
O43 - CFD: 18/09/2012 - 22:09:25 - [] ----D C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 04/05/2010 - 11:03:06 - [] ----D C:\Program Files\Microsoft Visual Studio
O43 - CFD: 04/05/2010 - 10:59:57 - [] ----D C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 21/06/2010 - 09:36:46 - [] ----D C:\Program Files\Microsoft Works
O43 - CFD: 15/02/2011 - 10:22:36 - [] ----D C:\Program Files\Microsoft.NET
O43 - CFD: 27/04/2014 - 12:26:17 - [] ----D C:\Program Files\Ministério do Meio Ambiente
O43 - CFD: 04/05/2010 - 10:32:09 - [] ----D C:\Program Files\Motorola
O43 - CFD: 19/01/2015 - 11:28:14 - [] ----D C:\Program Files\Mozilla Firefox
O43 - CFD: 04/05/2010 - 11:03:11 - [] ----D C:\Program Files\MSBuild
O43 - CFD: 07/03/2011 - 20:04:15 - [] ----D C:\Program Files\Nero
O43 - CFD: 25/07/2010 - 12:18:29 - [] ----D C:\Program Files\Paint.NET
O43 - CFD: 25/07/2010 - 12:32:22 - [] ----D C:\Program Files\PhotoScape
O43 - CFD: 11/05/2010 - 17:09:04 - [] ----D C:\Program Files\Realtek
O43 - CFD: 11/05/2010 - 17:10:26 - [] ----D C:\Program Files\REALTEK PCIE Wireless LAN Driver
O43 - CFD: 14/07/2009 - 02:52:30 - [] ----D C:\Program Files\Reference Assemblies
O43 - CFD: 21/04/2011 - 22:23:44 - [] ----D C:\Program Files\RMVB WMV to AVI Converter
O43 - CFD: 01/07/2001 - 17:06:55 - [] ----D C:\Program Files\SAS Institute
O43 - CFD: 15/06/2011 - 18:29:33 - [] ----D C:\Program Files\SigmaPlot
O43 - CFD: 05/01/2015 - 10:17:09 - [] R---D C:\Program Files\Skype
O43 - CFD: 14/06/2012 - 22:37:42 - [] ----D C:\Program Files\Softinterface, Inc
O43 - CFD: 30/10/2010 - 21:33:50 - [] ----D C:\Program Files\Sony
O43 - CFD: 30/06/2010 - 19:02:23 - [] ----D C:\Program Files\Spring515_Portugues_x86
O43 - CFD: 10/09/2014 - 18:10:33 - [] ----D C:\Program Files\Studio V5
O43 - CFD: 19/03/2011 - 17:48:30 - [] ----D C:\Program Files\TeamViewer
O43 - CFD: 11/05/2010 - 17:13:44 - [0] ----D C:\Program Files\Temp
O43 - CFD: 14/07/2009 - 02:53:23 - [0] --H-D C:\Program Files\Uninstall Information
O43 - CFD: 04/05/2010 - 10:36:50 - [] ----D C:\Program Files\WIDCOMM
O43 - CFD: 09/07/2013 - 21:51:08 - [] ----D C:\Program Files\Windows Defender
O43 - CFD: 21/05/2013 - 15:16:27 - [] ----D C:\Program Files\Windows Live
O43 - CFD: 19/05/2012 - 18:22:58 - [] ----D C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 18/12/2013 - 21:00:59 - [] ----D C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 20/06/2010 - 21:44:08 - [] ----D C:\Program Files\Windows NT
O43 - CFD: 19/05/2012 - 18:22:57 - [] ----D C:\Program Files\Windows Photo Viewer
O43 - CFD: 19/05/2012 - 18:22:57 - [] ----D C:\Program Files\Windows Portable Devices
O43 - CFD: 19/05/2012 - 18:22:57 - [] ----D C:\Program Files\Windows Sidebar
O43 - CFD: 27/08/2011 - 13:33:10 - [] ----D C:\Program Files\WinRAR
O43 - CFD: 20/01/2015 - 18:37:18 - [] ----D C:\Program Files\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 20/10/2014 - 10:10:58 - [] ----D C:\Program Files\Common Files\Adobe
O43 - CFD: 14/09/2013 - 12:32:06 - [] ----D C:\Program Files\Common Files\Autodesk Shared
O43 - CFD: 14/05/2014 - 12:11:35 - [] ----D C:\Program Files\Common Files\DESIGNER
O43 - CFD: 22/10/2014 - 10:55:28 - [] ----D C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 20/06/2010 - 22:07:15 - [] ----D C:\Program Files\Common Files\Hewlett-Packard
O43 - CFD: 20/06/2010 - 22:07:20 - [] ----D C:\Program Files\Common Files\HP
O43 - CFD: 04/05/2010 - 11:42:10 - [] ----D C:\Program Files\Common Files\InstallShield
O43 - CFD: 22/08/2014 - 21:31:28 - [] ----D C:\Program Files\Common Files\Java
O43 - CFD: 14/09/2013 - 12:23:10 - [] ----D C:\Program Files\Common Files\Macrovision Shared
O43 - CFD: 18/09/2012 - 22:07:46 - [] ----D C:\Program Files\Common Files\microsoft shared
O43 - CFD: 07/03/2011 - 20:03:52 - [] ----D C:\Program Files\Common Files\Nero
O43 - CFD: 14/07/2009 - 00:37:05 - [] ----D C:\Program Files\Common Files\Services
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\Program Files\Common Files\Sistema
O43 - CFD: 10/10/2014 - 08:43:35 - [] ----D C:\Program Files\Common Files\Skype
O43 - CFD: 14/07/2009 - 00:37:05 - [] ----D C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 11/07/2012 - 16:44:34 - [] ----D C:\Program Files\Common Files\System
O43 - CFD: 20/06/2010 - 22:51:38 - [] ----D C:\Program Files\Common Files\Windows Live
O43 - CFD: 20/06/2010 - 22:49:57 - [] -SH-D C:\Program Files\Common Files\WindowsLiveInstaller
O43 - CFD: 19/10/2014 - 22:02:01 - [] ----D C:\Program Files\Common Files\Wise Installation Wizard
O43 - CFD: 20/10/2014 - 10:10:56 - [] ----D C:\ProgramData\Adobe
O43 - CFD: 21/09/2013 - 16:39:28 - [] ----D C:\ProgramData\Autodesk
O43 - CFD: 18/03/2014 - 20:41:47 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 29/09/2010 - 20:37:09 - [] ----D C:\ProgramData\avg8
O43 - CFD: 25/05/2010 - 02:13:23 - [] ----D C:\ProgramData\CyberLink
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Dados de aplicativos
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Documentos
O43 - CFD: 04/05/2010 - 11:47:25 - [] ----D C:\ProgramData\Downloaded Installations
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Favoritos
O43 - CFD: 21/09/2013 - 16:40:49 - [] ----D C:\ProgramData\FLEXnet
O43 - CFD: 17/01/2012 - 14:46:45 - [] ----D C:\ProgramData\gas
O43 - CFD: 11/08/2011 - 12:11:50 - [] ----D C:\ProgramData\GbPlugin
O43 - CFD: 20/06/2010 - 22:24:19 - [] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 04/12/2014 - 10:55:11 - [] ----D C:\ProgramData\HP
O43 - CFD: 20/06/2010 - 22:07:35 - [] ----D C:\ProgramData\HP Product Assistant
O43 - CFD: 10/11/2014 - 11:10:49 - [] ----D C:\ProgramData\IsolatedStorage
O43 - CFD: 10/03/2014 - 22:42:31 - [] ----D C:\ProgramData\Log
O43 - CFD: 19/01/2015 - 16:45:15 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 12/03/2012 - 10:41:33 - [] ----D C:\ProgramData\McAfee
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Menu Iniciar
O43 - CFD: 19/01/2015 - 14:53:21 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 10/12/2014 - 15:57:09 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 20/06/2010 - 21:44:08 - [] -SH-D C:\ProgramData\Modelos
O43 - CFD: 06/05/2012 - 20:02:10 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 07/03/2011 - 20:04:15 - [] ----D C:\ProgramData\Nero
O43 - CFD: 05/01/2015 - 10:17:16 - [] ----D C:\ProgramData\Skype
O43 - CFD: 30/10/2010 - 21:34:27 - [] ----D C:\ProgramData\Sony Corporation
O43 - CFD: 24/06/2010 - 18:44:50 - [] ----D C:\ProgramData\Sun
O43 - CFD: 12/01/2013 - 23:18:09 - [] ---AD C:\ProgramData\Temp
O43 - CFD: 20/06/2010 - 22:25:04 - [] ----D C:\ProgramData\WEBREG
O43 - CFD: 20/06/2010 - 22:48:27 - [] ----D C:\ProgramData\WLInstaller
O43 - CFD: 20/08/2014 - 19:39:21 - [] ----D C:\ProgramData\Wondershare
O43 - CFD: 20/06/2010 - 21:45:45 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 04/05/2010 - 11:04:19 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 21/04/2011 - 22:23:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apecsoft RMVB WMV to AVI Converter
O43 - CFD: 19/01/2015 - 15:36:34 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apostilas Objetiva
O43 - CFD: 20/11/2014 - 13:55:30 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares
O43 - CFD: 14/09/2013 - 12:32:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
O43 - CFD: 23/05/2013 - 15:35:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cadub
O43 - CFD: 25/08/2013 - 14:28:19 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CAMPEIRO7
O43 - CFD: 22/05/2014 - 22:20:25 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
O43 - CFD: 14/06/2012 - 22:39:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image
O43 - CFD: 04/05/2010 - 11:42:52 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
O43 - CFD: 16/08/2010 - 19:37:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
O43 - CFD: 14/07/2009 - 02:42:31 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 19/01/2015 - 18:35:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 23/10/2014 - 10:19:31 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth =>.Google Inc
O43 - CFD: 20/11/2014 - 13:55:30 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123-Brazil
O43 - CFD: 04/12/2014 - 10:57:10 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 04/05/2010 - 10:05:18 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel® Matrix Storage Manager
O43 - CFD: 01/07/2001 - 17:24:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IT Service Vision
O43 - CFD: 20/11/2014 - 13:55:30 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 24/06/2012 - 19:31:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jodix
O43 - CFD: 14/07/2009 - 02:42:30 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 19/01/2015 - 16:55:03 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 14/07/2010 - 22:09:47 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 04/05/2010 - 10:59:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
O43 - CFD: 23/07/2014 - 11:52:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ministério do Meio Ambiente
O43 - CFD: 07/03/2011 - 20:03:47 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 20/11/2014 - 13:55:30 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 25/07/2010 - 12:32:29 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
O43 - CFD: 30/10/2010 - 21:35:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB
O43 - CFD: 15/06/2011 - 18:30:10 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SigmaPlot
O43 - CFD: 10/10/2014 - 08:43:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 30/06/2010 - 19:02:23 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spring 5.1.5 Português _x86
O43 - CFD: 22/10/2014 - 10:57:50 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 01/07/2001 - 17:25:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The SAS System
O43 - CFD: 27/08/2011 - 13:33:10 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 20/01/2015 - 18:19:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 10/10/2012 - 12:25:25 - [] ----D C:\Users\Professor\AppData\Roaming\4Media
O43 - CFD: 12/03/2012 - 10:55:02 - [] ----D C:\Users\Professor\AppData\Roaming\Adobe
O43 - CFD: 13/12/2014 - 16:53:32 - [] ----D C:\Users\Professor\AppData\Roaming\Audacity
O43 - CFD: 21/09/2013 - 16:39:28 - [] ----D C:\Users\Professor\AppData\Roaming\Autodesk
O43 - CFD: 02/01/2012 - 13:50:08 - [] ----D C:\Users\Professor\AppData\Roaming\CyberLink
O43 - CFD: 29/07/2010 - 12:09:02 - [] ----D C:\Users\Professor\AppData\Roaming\HP
O43 - CFD: 04/12/2014 - 10:56:22 - [] ----D C:\Users\Professor\AppData\Roaming\HpUpdate
O43 - CFD: 03/05/2010 - 17:54:51 - [] ----D C:\Users\Professor\AppData\Roaming\Identities
O43 - CFD: 04/05/2010 - 10:04:55 - [] ----D C:\Users\Professor\AppData\Roaming\InstallShield
O43 - CFD: 10/11/2014 - 11:10:49 - [] ----D C:\Users\Professor\AppData\Roaming\IsolatedStorage
O43 - CFD: 10/09/2014 - 18:22:06 - [] ----D C:\Users\Professor\AppData\Roaming\LogoMaker
O43 - CFD: 04/05/2010 - 11:54:59 - [] ----D C:\Users\Professor\AppData\Roaming\Macromedia
O43 - CFD: 19/01/2015 - 17:15:36 - [] ----D C:\Users\Professor\AppData\Roaming\Macwebtoise
O43 - CFD: 19/05/2011 - 11:45:52 - [] ----D C:\Users\Professor\AppData\Roaming\Marine Aquarium 3
O43 - CFD: 19/01/2015 - 17:53:54 - [] -S--D C:\Users\Professor\AppData\Roaming\Microsoft
O43 - CFD: 22/06/2010 - 21:05:04 - [] ----D C:\Users\Professor\AppData\Roaming\Mozilla
O43 - CFD: 07/03/2011 - 20:04:35 - [] ----D C:\Users\Professor\AppData\Roaming\Nero
O43 - CFD: 22/08/2014 - 21:34:38 - [] ----D C:\Users\Professor\AppData\Roaming\Oracle
O43 - CFD: 24/11/2013 - 20:10:37 - [] ----D C:\Users\Professor\AppData\Roaming\PhotoFiltre 7
O43 - CFD: 15/01/2015 - 15:20:18 - [] ----D C:\Users\Professor\AppData\Roaming\PhotoScape
O43 - CFD: 21/01/2015 - 10:15:54 - [] ----D C:\Users\Professor\AppData\Roaming\Skype
O43 - CFD: 14/06/2012 - 22:37:51 - [] ----D C:\Users\Professor\AppData\Roaming\Softinterface, Inc
O43 - CFD: 30/10/2010 - 21:41:20 - [] ----D C:\Users\Professor\AppData\Roaming\Sony Corporation
O43 - CFD: 29/09/2014 - 12:11:37 - [] ----D C:\Users\Professor\AppData\Roaming\Unity
O43 - CFD: 27/08/2011 - 13:33:33 - [] ----D C:\Users\Professor\AppData\Roaming\WinRAR
O43 - CFD: 20/08/2014 - 15:47:20 - [] ----D C:\Users\Professor\AppData\Roaming\Wondershare Video Converter Ultimate
O43 - CFD: 21/01/2015 - 10:18:32 - [] ----D C:\Users\Professor\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 19/01/2015 - 20:58:22 - [] ----D C:\Users\Professor\AppData\Local\Adobe
O43 - CFD: 19/01/2011 - 14:33:28 - [] ----D C:\Users\Professor\AppData\Local\Apps
O43 - CFD: 18/02/2011 - 20:50:10 - [] ----D C:\Users\Professor\AppData\Local\Ares
O43 - CFD: 27/03/2014 - 20:33:12 - [] ----D C:\Users\Professor\AppData\Local\Autodesk
O43 - CFD: 04/05/2010 - 10:37:52 - [] ----D C:\Users\Professor\AppData\Local\Broadcom
O43 - CFD: 20/01/2015 - 16:22:39 - [] ----D C:\Users\Professor\AppData\Local\cache
O43 - CFD: 22/05/2014 - 19:35:00 - [] ----D C:\Users\Professor\AppData\Local\Comodo
O43 - CFD: 27/10/2014 - 07:56:44 - [] ----D C:\Users\Professor\AppData\Local\Diagnostics
O43 - CFD: 23/07/2014 - 11:24:15 - [] ----D C:\Users\Professor\AppData\Local\Downloaded Installations
O43 - CFD: 19/03/2014 - 19:43:31 - [0] ----D C:\Users\Professor\AppData\Local\ElevatedDiagnostics
O43 - CFD: 19/01/2015 - 14:53:34 - [] -SH-D C:\Users\Professor\AppData\Local\EmieBrowserModeList
O43 - CFD: 17/08/2014 - 17:12:25 - [] -SH-D C:\Users\Professor\AppData\Local\EmieSiteList
O43 - CFD: 17/08/2014 - 17:12:25 - [] -SH-D C:\Users\Professor\AppData\Local\EmieUserList
O43 - CFD: 19/01/2015 - 18:35:43 - [] ----D C:\Users\Professor\AppData\Local\Google
O43 - CFD: 04/12/2014 - 11:03:38 - [] ----D C:\Users\Professor\AppData\Local\HP
O43 - CFD: 09/08/2012 - 12:32:33 - [] ----D C:\Users\Professor\AppData\Local\Macromedia
O43 - CFD: 13/12/2014 - 15:58:30 - [] ----D C:\Users\Professor\AppData\Local\Microsoft
O43 - CFD: 03/08/2010 - 16:47:29 - [] ----D C:\Users\Professor\AppData\Local\Microsoft Games
O43 - CFD: 04/07/2010 - 12:31:35 - [] ----D C:\Users\Professor\AppData\Local\Microsoft Help
O43 - CFD: 04/10/2013 - 19:33:24 - [] ----D C:\Users\Professor\AppData\Local\Mozilla
O43 - CFD: 10/11/2014 - 11:11:42 - [] ----D C:\Users\Professor\AppData\Local\Paint.NET
O43 - CFD: 18/08/2014 - 10:38:52 - [] ----D C:\Users\Professor\AppData\Local\Programs
O43 - CFD: 30/03/2014 - 16:32:25 - [] ----D C:\Users\Professor\AppData\Local\Skype
O43 - CFD: 09/06/2011 - 11:17:23 - [] ----D C:\Users\Professor\AppData\Local\Songr
O43 - CFD: 21/01/2015 - 10:17:31 - [] ----D C:\Users\Professor\AppData\Local\Temp
O43 - CFD: 20/08/2014 - 13:52:45 - [] ----D C:\Users\Professor\AppData\Local\VirtualStore
O43 - CFD: 21/05/2013 - 09:19:36 - [] ----D C:\Users\Professor\AppData\Local\Windows Live
O43 - CFD: 21/10/2014 - 20:35:42 - [] ----D C:\Users\Professor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
O43 - CFD: 22/08/2014 - 09:26:41 - [] ----D C:\Users\Professor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dispositivos Bluetooth
O43 - CFD: 10/11/2014 - 10:44:08 - [] R---D C:\Users\Professor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
~ Program Folder: 214 Scanned in 00mn 00s
---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)
O44 - LFC:[MD5.03F899F521D2AAED1C55008F734DF252] - 14/01/2015 - 06:50:30 ---A- . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\Drivers\mrxdav.sys [116224]
O44 - LFC:[MD5.F115C5CD29E512F18BD7138A094B77E5] - 14/01/2015 - 06:50:36 ---A- . (.Microsoft Corporation - Reconhecimento de Locais de Rede 2.) -- C:\Windows\System32\nlasvc.dll [242688]
O44 - LFC:[MD5.FD9692A3D31E021207D3C2A9DDDC2BE3] - 14/01/2015 - 06:50:39 ---A- . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864]
O44 - LFC:[MD5.306EB846F88E58C7E763946DE95952E3] - 14/01/2015 - 06:50:40 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Proxy.) -- C:\Windows\System32\TSWbPrxy.exe [46592]
O44 - LFC:[MD5.8A289EF0AE709327D6AA9769E108B5A6] - 14/01/2015 - 06:51:03 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe [3916728]
O44 - LFC:[MD5.2AF481C03C0383ADE09FFEDA0C583140] - 14/01/2015 - 06:51:04 ---A- . (.Microsoft Corporation - NT Kernel & System.) -- C:\Windows\System32\ntkrnlpa.exe [3971512]
O44 - LFC:[MD5.348E3DFC717E77368FF41E665303F0DC] - 14/01/2015 - 17:12:44 ---A- . (.Microsoft Corporation - Ferramentas de Remoção de Software Mal-Inte.) -- C:\Windows\System32\MRT.exe [110348472]
O44 - LFC:[MD5.A3F4391DFDF2F9E9FE4EAD193265A5AD] - 19/01/2015 - 15:45:15 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256]
O44 - LFC:[MD5.312CD3307F600E7CD340B79B3DCB3A01] - 19/01/2015 - 15:45:15 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928]
O44 - LFC:[MD5.9BD41E40039098BF5F8FE878A9A6989E] - 19/01/2015 - 15:45:16 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [75480]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 19/01/2015 - 19:20:24 ---A- . (...) -- C:\Windows\setuperr.log [0]
O44 - LFC:[MD5.45979024BEFB7DB31BE0C99A44997362] - 19/01/2015 - 19:57:03 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [701616]
O44 - LFC:[MD5.E0AC7C714BB1A0646298967AB20DDAE4] - 19/01/2015 - 19:57:03 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [71344]
O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 20/01/2015 - 06:33:26 ---A- . (...) -- C:\Windows\zoek-delete.exe [24064]
O44 - LFC:[MD5.D54C5DCE43C135C638C552212204129A] - 20/01/2015 - 07:06:21 ---A- . (...) -- C:\Windows\PFRO.log [691154]
O44 - LFC:[MD5.570B91D01B214C0E829DB358DB3675E9] - 20/01/2015 - 07:08:55 ---A- . (...) -- C:\zoek-results.log [27206]
O44 - LFC:[MD5.3DF6B7CA64539392DA9F0681C894290D] - 20/01/2015 - 12:23:57 ---A- . (...) -- C:\AdsFix_20_01_2015_13_23_57.txt [33355]
O44 - LFC:[MD5.DF644D8A9AD502C0DB0FA8A19FEAD33C] - 20/01/2015 - 12:48:24 R--A- . (...) -- C:\Pre_Scan_20_01_2015_13_48_24.txt [14927]
O44 - LFC:[MD5.E570239983AA75E89B105CE43F92F21F] - 20/01/2015 - 15:16:46 ---A- . (...) -- C:\Windows\setupact.log [448]
O44 - LFC:[MD5.2B1785D99119EF764C8BF54AE776B5FC] - 20/01/2015 - 17:19:18 ---A- . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\ZHPDiag2.exe [6865579]
O44 - LFC:[MD5.C3137BF19DAF6B1EA1E34E43BA0A53A1] - 20/01/2015 - 17:28:26 ---A- . (...) -- C:\20be8497-3c07-4bd7-a2fc-d9beedc0b7f1.dmp [25704]
O44 - LFC:[MD5.7756361F271989CE4D31AFC033273AFE] - 20/01/2015 - 17:29:10 ---A- . (...) -- C:\0f04f896-0c5b-4dd0-9d38-4d14f9844747.dmp [25128]
O44 - LFC:[MD5.E56F371A8C55F1BD86270EDFEDB0CAF5] - 20/01/2015 - 17:29:55 ---A- . (...) -- C:\7acd279e-b188-46dc-84cb-8a5bb4814823.dmp [27820]
O44 - LFC:[MD5.81838278692C86CDBF35B29432C7E6F7] - 20/01/2015 - 17:37:19 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.427F8CDDB6C2F40C57A3F9F58BBBE019] - 20/01/2015 - 17:41:03 ---A- . (...) -- C:\a5809b47-dd1a-484c-b973-c23b56d5a036.dmp [25688]
O44 - LFC:[MD5.4C8ABD81E7CDE6C34BF3E033662667C4] - 20/01/2015 - 20:19:16 ---A- . (...) -- C:\19ce4d1e-58c2-4002-b3c6-09b0edf5cb2b.dmp [25232]
O44 - LFC:[MD5.2D02CBA707AA6D0D6DB7E79DF2DA46F2] - 20/01/2015 - 20:19:52 ---A- . (...) -- C:\0289ba64-2291-4b3d-8baa-4393522f0a54.dmp [25136]
O44 - LFC:[MD5.53747B954F32E23F21BBC2613948414B] - 20/01/2015 - 20:21:04 ---A- . (...) -- C:\23184093-238d-410c-a6a8-d01ca651f8cf.dmp [25972]
O44 - LFC:[MD5.E7361778BD36B208989A0ABE32EDFADC] - 20/01/2015 - 20:21:49 ---A- . (...) -- C:\ed647b1c-ecfc-4343-bdc4-4adef5daf6f4.dmp [26888]
O44 - LFC:[MD5.CD99DC746E231D0F333CA42397DA908C] - 20/01/2015 - 20:22:50 ---A- . (...) -- C:\2b4dc3e7-9be9-4385-8447-5e8dfd2ff4c7.dmp [26300]
O44 - LFC:[MD5.DE6435E52B487DB22AB186F61838D77B] - 21/01/2015 - 06:25:29 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.8E2E9CCD873ABF180F48BCAEEEBE347D] - 21/01/2015 - 06:25:58 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [114904]
O44 - LFC:[MD5.C664F063DEE15E13DF35353D7602A7A3] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1641082]
O44 - LFC:[MD5.8402AD98ACC9993B70FEB2BFC489619D] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\perfc009.dat [122884]
O44 - LFC:[MD5.760E896A73A14942DE8FBABC659677F8] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\perfh009.dat [656418]
O44 - LFC:[MD5.35F8ADA922D677A57EA20263835A82A3] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [148396]
O44 - LFC:[MD5.2FB3D56F11DE8C7B7FFA8457279D213F] - 21/01/2015 - 06:33:51 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [707962]
O44 - LFC:[MD5.5AE5EC2961B30C11D03386126B6FC05F] - 21/01/2015 - 07:10:26 ---A- . (...) -- C:\7e5d038e-ce17-4bf3-8032-120063a76335.dmp [25940]
O44 - LFC:[MD5.5103AFF5BC5A26BF0AF904D80C8C9D6C] - 21/01/2015 - 07:11:10 ---A- . (...) -- C:\1ccbf2ba-9a72-4768-a8fa-a714c6561b42.dmp [27200]
O44 - LFC:[MD5.68929FF841DA6C8DF67B5760CC81725D] - 21/01/2015 - 07:12:28 ---A- . (...) -- C:\368a3092-9311-4005-9141-8ac4a7acf3c1.dmp [26244]
O44 - LFC:[MD5.E8A086C081DBB745AF8234B2871F27F4] - 21/01/2015 - 07:13:15 ---A- . (...) -- C:\652e0b4a-3ffa-461f-9052-3163a485d803.dmp [26016]
O44 - LFC:[MD5.0C3604C37E4308F9E7BA9C491C1AA72B] - 21/01/2015 - 07:56:28 ---A- . (...) -- C:\05b9678d-d519-42c1-9eca-72c61d0c1dcd.dmp [24212]
O44 - LFC:[MD5.56D25F2ACFD77F9DB241928F8A9E3C8E] - 21/01/2015 - 07:57:13 ---A- . (...) -- C:\e8e5322e-cc29-4499-97e8-9e141a4c007a.dmp [26912]
O44 - LFC:[MD5.EA34CC06CBC456D2377AE0A5EA3D49F9] - 21/01/2015 - 07:57:58 ---A- . (...) -- C:\bb590ce0-e969-4b97-9948-72901eb3f20f.dmp [26688]
O44 - LFC:[MD5.8A9CDC3B49DE1AFD909B27AE288A86DD] - 21/01/2015 - 08:57:37 ---A- . (...) -- C:\Windows\WindowsUpdate.log [2026383]
~ Files: 45 Scanned in 00mn 15s
---\\ Operações e funções ao arranque do Windows Explorer (046)
O46 - SEH:ShellExecuteHooks - GbPlugin ShlObj - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRAM FILES\GBPLUGIN\gbieh.dll
~ ShellExecuteHooks: Scanned in 00mn 00s
---\\ Negação do serviço (Local Security Authority) (048)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Mecanismo cliente do 'Editor de configuração de segurança Windows'.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pacote de Segurança Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s
---\\ Controlo do Modo de Segurança (CSB) (49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Driver de porta de mouse serial.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Driver de Extensão do Gerenciador de Volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\Wdf01000.sys . (.Microsoft Corporation - Tempo de Execução da Estrutura de Driver em Modo Kernel.) -- C:\Windows\System32\Drivers\Wdf01000.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Driver de porta de mouse serial.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Driver de Extensão do Gerenciador de Volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\Wdf01000.sys . (.Microsoft Corporation - Tempo de Execução da Estrutura de Driver em Modo Kernel.) -- C:\Windows\System32\Drivers\Wdf01000.sys
~ CSB: 15 Scanned in 00mn 00s
---\\ Chave do registo Shell MountPoints2 (MPSK) (O51)
O51 - MPSK:{775f5f09-1025-11e0-9524-002243fc03b6}\AutoRun\command. (...) -- E:\iStudio.exe (.not file.)
O51 - MPSK:{c434e122-56ea-11df-8735-806e6f6e6963}\AutoRun\command. (...) -- D:\SETUP.exe (.not file.)
~ Keys: Scanned in 00mn 00s
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
---\\ Pesquisa de infeções nos drivers (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
O52 - TDSD: \Drivers32\"vidc.xvid"="xvidvfw.dll" . (...) -- C:\Windows\System32\xvidvfw.dll
O52 - TDSD: \Drivers32\"vidc.x264"="x264vfw.dll" . (.x264vfw project - x264vfw - H.264/MPEG-4 AVC codec.) -- C:\Windows\System32\x264vfw.dll
O52 - TDSD: \Drivers32\"vidc.lags"="lagarith.dll" . (.No owner - Lagarith.) -- C:\Windows\System32\lagarith.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"x264vfw.dll"="x264 Video Codec" . (.x264vfw project - x264vfw - H.264/MPEG-4 AVC codec.) -- C:\Windows\System32\x264vfw.dll
O52 - TDSD: \drivers.desc\"lagarith.dll"="Lagarith lossless codec [LAGS]" . (.No owner - Lagarith.) -- C:\Windows\System32\lagarith.dll
~ TDSD: 9 Scanned in 00mn 00s
---\\ Enumeração das chaves do registo SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0
~ MWPS: 18 Scanned in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
~ MWPE Keys: 2 Scanned in 00mn 00s
---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:17/09/2012 - 19:58:30 R--A- . (.360.cn - 360FileOem.) -- C:\Windows\System32\Drivers\360FileOem.sys [152880]
O58 - SDL:17/09/2012 - 19:58:32 R--A- . (.360安全中心 - 360HookOem.) -- C:\Windows\System32\Drivers\360HookOem.sys [61488]
O58 - SDL:17/09/2012 - 19:58:32 R--A- . (.360安全中心 - 360RegOem.) -- C:\Windows\System32\Drivers\360RegOem.sys [29744]
O58 - SDL:17/09/2012 - 19:58:32 R--A- . (.360安全中心 - 360安全卫士 - SelfProtection.) -- C:\Windows\System32\Drivers\360SpOEM.sys [64048]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422976]
O58 - SDL:13/07/2009 - 22:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [297552]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\Drivers\adpu320.sys [146512]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [14400]
O58 - SDL:11/03/2011 - 02:38:37 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [80256]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\System32\Drivers\amdsbs.sys [159312]
O58 - SDL:11/03/2011 - 02:38:37 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [22400]
O58 - SDL:15/10/2009 - 19:33:04 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\System32\Drivers\Apfiltr.sys [227376]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [76368]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [86608]
O58 - SDL:13/07/2009 - 19:02:49 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60x.sys [229888]
O58 - SDL:11/03/2014 - 00:14:02 ---A- . (.Baidu, Inc. - Baidu Antivirus Hook Base.) -- C:\Windows\System32\Drivers\Bhbase.sys [47456]
O58 - SDL:13/07/2009 - 19:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [13568]
O58 - SDL:13/07/2009 - 19:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [5248]
O58 - SDL:13/07/2009 - 21:57:25 ---A- . (.Brother Industries Ltd. - Brother Serial I/F Driver (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [272128]
O58 - SDL:13/07/2009 - 19:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [62336]
O58 - SDL:13/07/2009 - 19:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [12160]
O58 - SDL:13/07/2009 - 19:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [11904]
O58 - SDL:01/07/2009 - 12:46:14 ---A- . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\System32\Drivers\btwaudio.sys [86056]
O58 - SDL:01/07/2009 - 12:46:12 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\System32\Drivers\btwavdt.sys [108072]
O58 - SDL:07/04/2009 - 15:32:50 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\System32\Drivers\btwl2cap.sys [29472]
O58 - SDL:01/07/2009 - 12:46:04 ---A- . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\System32\Drivers\btwrchid.sys [18344]
O58 - SDL:13/07/2009 - 19:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbdx.sys [430080]
O58 - SDL:13/07/2009 - 22:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [15952]
O58 - SDL:13/07/2009 - 22:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\Drivers\djsvs.sys [70720]
O58 - SDL:13/07/2009 - 22:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [453712]
O58 - SDL:13/07/2009 - 19:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbdx.sys [3100160]
O58 - SDL:18/07/2011 - 08:13:36 ---A- . (.GAS Tecnologia - GbPlugin Device Driver.) -- C:\Windows\System32\Drivers\gbpkm.sys [43600]
O58 - SDL:13/07/2009 - 19:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [26624]
O58 - SDL:13/07/2009 - 22:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [67152]
O58 - SDL:04/06/2009 - 18:43:16 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\Drivers\iaStor.sys [330264]
O58 - SDL:11/03/2011 - 02:38:51 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\Drivers\iaStorV.sys [332160]
O58 - SDL:25/08/2010 - 18:31:30 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdkmd32.sys [9024512]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [41040]
O58 - SDL:03/11/2014 - 06:04:18 ---A- . (.Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP).) -- C:\Windows\System32\Drivers\iSafeNetFilter.sys [43688] =>PUP.Elex
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [95824]
O58 - SDL:13/07/2009 - 22:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [89168]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [54864]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [96848]
O58 - SDL:21/11/2014 - 05:14:06 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256]
O58 - SDL:21/11/2014 - 05:14:10 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [75480]
O58 - SDL:21/01/2015 - 06:25:58 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [114904]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\System32\Drivers\megasas.sys [30800]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [235584]
O58 - SDL:21/11/2014 - 05:14:20 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928]
O58 - SDL:13/07/2009 - 22:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [44624]
O58 - SDL:11/03/2011 - 02:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [117120]
O58 - SDL:11/03/2011 - 02:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [143744]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1383488]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [106064]
O58 - SDL:05/11/2009 - 21:14:56 ---A- . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Driver.) -- C:\Windows\System32\Drivers\Rt86win7.sys [230912]
O58 - SDL:28/10/2009 - 10:39:26 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHDA.sys [2785568]
O58 - SDL:02/10/2009 - 12:33:24 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\Windows\System32\Drivers\rtl8192se.sys [862208]
O58 - SDL:13/07/2009 - 17:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [20480]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [40016]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [77888]
O58 - SDL:05/05/2009 - 15:15:58 ---A- . (.Motorola Inc. - Motorola SM56 Modem WDM Driver.) -- C:\Windows\System32\Drivers\smserial.sys [1095808]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [21072]
O58 - SDL:06/07/2009 - 11:49:52 ---A- . (.First International Computer, Inc. - Utility Program Component.) -- C:\Windows\System32\Drivers\UPCDRV.sys [10240]
O58 - SDL:13/07/2009 - 22:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [16976]
O58 - SDL:13/07/2009 - 22:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [141904]
O58 - SDL:13/07/2009 - 18:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:13/07/2009 - 18:40:44 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:13/07/2009 - 18:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:13/07/2009 - 18:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:13/07/2009 - 18:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:13/07/2009 - 18:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:13/07/2009 - 18:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:13/07/2009 - 18:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:13/07/2009 - 18:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:13/07/2009 - 18:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:13/07/2009 - 18:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:13/07/2009 - 18:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:13/07/2009 - 18:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:13/07/2009 - 18:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:13/07/2009 - 18:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
~ Drivers: 80 Scanned in 00mn 05s
---\\ Últimos ficheiros alterados ou criados (Utilizador) (061)
O61 - LFC: 15/01/2015 - 10:18:59 ---A- . (...) -- C:\Users\Professor\AppData\Local\Adobe\Acrobat\11.0\UserCache.bin [120682]
O61 - LFC: 15/01/2015 - 10:19:28 ---A- . (...) -- C:\Users\Professor\Documents\CAR - Offline Update.exe [3189380]
O61 - LFC: 16/01/2015 - 10:19:25 ---A- . (...) -- C:\Users\Professor\AppData\Roaming\Macwebtoise\ProtectInstall.exe [657272]
O61 - LFC: 19/01/2015 - 10:19:28 ---A- . (...) -- C:\Users\Professor\Downloads\Firefox Setup Stub 35.0.exe [243656]
O61 - LFC: 19/01/2015 - 10:19:28 ---A- . (...) -- C:\Users\Professor\Downloads\adwcleaner_4.108.exe [2186752]
O61 - LFC: 19/01/2015 - 10:19:29 ---A- . (...) -- C:\Users\Professor\Downloads\Spyware%20Terminator.exe [576728]
O61 - LFC: 19/01/2015 - 10:19:29 ---A- . (.Enigma Software Group USA, LLC..) -- C:\Users\Professor\Music\53-SpyHunter-Installer.exe [2998656] =>PUP.EnigmaSoftware
O61 - LFC: 19/01/2015 - 10:19:29 ---A- . (.Malwarebytes Corporation.) -- C:\Users\Professor\Downloads\mbam-setup-2.0.4.1028.exe [20447072]
O61 - LFC: 20/01/2015 - 10:19:23 ---A- . (.Flexera Software, Inc..) -- C:\Users\Professor\AppData\Local\Temp\FNP_ACT_InstallerCA.dll [1433424]
O61 - LFC: 20/01/2015 - 10:19:24 ---A- . (...) -- C:\Users\Professor\AppData\Roaming\Autodesk\AutoCAD 2012 - English\R18.2\enu\AdExchangeBrowser.bin [1603]
O61 - LFC: 20/01/2015 - 10:19:27 ---A- . (...) -- C:\Users\Professor\Desktop\AdsFix.exe [2442752]
O61 - LFC: 20/01/2015 - 10:19:28 ---A- . (...) -- C:\Users\Professor\Desktop\Pre_Scan.exe [2468352]
O61 - LFC: 20/01/2015 - 10:19:29 ---A- . (...) -- C:\Users\Professor\Downloads\zoek(1).exe [1295360]
O61 - LFC: 20/01/2015 - 10:19:29 ---A- . (...) -- C:\Users\Professor\Downloads\zoek.exe [1295360]
O61 - LFC: 20/01/2015 - 10:19:29 ---A- . (.Thisisu.) -- C:\Users\Professor\Downloads\JRT.exe [1707939]
~ 16 Fichiers temporaires (Temporary files)
~ 579 Fichiers cookies (Cookies files)
~ Files: 15 Scanned in 00mn 30s
---\\ Ficheiros Alternate Data Stream (ADS) (O62)
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\:4055C67C_Bb.gbp
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\drivers\:GbpKmAp.lst
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\:GbpKmAp.lst
~ ADS: Scanned in 00mn 01s
---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Lista dos serviços Legacy du registo (064)
O64 - Services: CurCS - 11/03/2014 - C:\Windows\System32\drivers\Bhbase.sys (Bhbase) .(.Baidu, Inc. - Baidu Antivirus Hook Base.) - LEGACY_BHBASE
O64 - Services: CurCS - 18/07/2011 - C:\Windows\System32\drivers\gbpkm.sys (GbpKm) .(.GAS Tecnologia - GbPlugin Device Driver.) - LEGACY_GBPKM
O64 - Services: CurCS - 21/11/2014 - C:\windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - 21/01/2015 - C:\windows\system32\drivers\MBAMSwissArmy.sys (MBAMSwissArmy) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMSWISSARMY
O64 - Services: CurCS - 21/11/2014 - C:\windows\system32\drivers\mwac.sys (MBAMWebAccessControl) .(.Malwarebytes Corporation - Malwarebytes Web Access Control.) - LEGACY_MBAMWEBACCESSCONTROL
O64 - Services: CurCS - 26/05/1745 - C:\Users\PROFES~1\AppData\Local\Temp\mbr.sys (mbr) .(...) - LEGACY_MBR
O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Legacy: 242 Scanned in 00mn 00s
---\\ Associações Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos'.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <BaiduSparkHTML>[HKLM\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.scr> <AutoCADScriptFile>[HKCU\..\open\Command] (.Microsoft Corporation - Bloco de notas.) -- C:\windows\system32\notepad.exe
~ FASS Keys: 13 Scanned in 00mn 00s
---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files\internet explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {012E1000-F331-11DB-8314-0800200C9A66} - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {0191A6B0-1154-4C22-9182-23A95BBE92D9} - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-19] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-20] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
~ Keys: Scanned in 00mn 00s
---\\ Listagem dos serviços iniciados pelo Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Serviço de Experiência com Aplicativo.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Cartão Inteligente da Microsof.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Cartão Inteligente da Microsof.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\Windows\System32\srvsvc.dll [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Diretiva de Grupo.) -- C:\Windows\System32\gpsvc.dll [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\Windows\System32\ikeext.dll [679424]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Serviço de Áudio do Windows.) -- C:\Windows\System32\Audiosrv.dll [475136]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acesso Remoto.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\Windows\System32\rasmans.dll [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistema (SENS).) -- C:\Windows\System32\sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft(R) Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242176]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gerenciador de Conexões Remotas do Servidor Host da Sessão da Área de.) -- C:\Windows\System32\termsrv.dll [523776]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [1973728]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de plano de fundo.) -- C:\Windows\System32\qmgr.dll [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em uma rede IPv4..) -- C:\Windows\System32\iphlpsvc.dll [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\Windows\system32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\Windows\System32\appinfo.dll [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Serviço Agendador de Classes de Multimídia.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\Windows\System32\schedsvc.dll [750592]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Serviço de Gerenciamento de Chaves.) -- C:\Windows\System32\kmsvc.dll [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho Remota.) -- C:\Windows\System32\sessenv.dll [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\Windows\System32\browser.dll [102912]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\Windows\System32\bdesvc.dll [76800]
~ Services: 32 Scanned in 00mn 00s
---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.4491E92D6536D0E37D1EC38B93975BF5] [SPRF][20/01/2015] (.No owner - AdsFix.) -- C:\Users\Professor\Desktop\AdsFix.exe [2442752]
[MD5.9E430B8148A12A51407A511E5DD35C82] [SPRF][20/01/2015] (.No owner - Pre_Scan.) -- C:\Users\Professor\Desktop\Pre_Scan.exe [2468352]
[MD5.E3815CD387F4E37269914D7762903CE4] [SPRF][03/02/2011] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropENU.dll [113888]
~ Files: 3 Scanned in 00mn 00s
---\\ Listagem dos dados da chave NameSpace (MNS) (O92)
O92 - MNS: - {35B6525E-071A-4EA9-B3BD-F6A742572F08}
~ MNS: 1 Scanned in 00mn 00s
---\\ Search CLSID Registry Key (O101)
[HKCR\CLSID\{B52079A0-FF82-489C-9AE2-5299709B9E8F}] (SectionViewpointCmd Object) =>Adware.MetaStream
~ BCK: 7184 Scanned in 00mn 15s
---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 19/01/2015 267440 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 14/09/2013 1044816 | (FLEXnet Licensing Service) . (.Flexera Software, Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Demand 23/10/2014 107912 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 23/10/2014 107912 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 10/07/1658 0 | (MozillaMaintenance) . (...) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 04/05/2010 503080 | (NAUpdate) . (.Nero AG.) - C:\Program Files\Nero\Update\NASvc.exe
SS - | Auto 13/07/2009 20992 | C:\windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Auto 13/07/2009 20992 | C:\windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Demand 30/01/2001 41984 | (sasrfcService) . (...) - C:\Program Files\SAS Institute\SAS\V8\access\sasexe\sasrfc.exe
SS - | Auto 10/07/1658 0 | (Sed) . (...) - C:\Users\Professor\AppData\Roaming\ntsvc\ntsvc.exe
SS - | Auto 11/12/2014 315496 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Demand 13/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 19/12/2014 81088 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 02/02/2011 18656 | (Autodesk Content Service) . (...) - C:\Program Files\Autodesk\Autodesk Content Service\Connect.Service.ContentService.exe
SR - | Auto 01/07/2009 582944 | (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
SR - | Auto 18/07/2011 208264 | (GbpSv) . (...) - C:\Program Files\GbPlugin\gbpsv.exe
SR - | Demand 13/07/2009 20992 | C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 13/07/2009 20992 | C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 04/06/2009 354840 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SR - | Auto 21/11/2014 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
SR - | Auto 21/11/2014 969016 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 22/08/2014 22192 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe
SR - | Auto 24/10/2009 360224 | (PMBDeviceInfoProvider) . (.Sony Corporation.) - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
SR - | Auto 14/05/2007 272024 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
SR - | Auto 01/03/2011 2296696 | (TeamViewer6) . (.TeamViewer GmbH.) - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
SR - | Auto 13/07/2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 18s
---\\ Pesquisa de infeção no Registo Mestre de Inicialização (MBR) (080)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Run by Professor at 21/01/2015 10:21:14
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys halmacpi.dll
C:\windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Matrix Storage Manager driver
1 ntkrnlpa!IofCallDriver[0x83441BBA] >> \Device\Harddisk0\DR0[0x878A8970]
3 CLASSPNP[0x8BDAC59E] >> ntkrnlpa!IofCallDriver[0x83441BBA] >> \Device\Ide\IAAStorageDevice-1[0x86E42028]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 13 Scanned in 00mn 02s
---\\ Pesquisa de infeção no Registo Mestre de Inicialização (MBRCheck) (080)
Written by ad13, [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Run by Professor at 21/01/2015 10:21:16
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s
---\\ Scâner Aditional (088)
Database Version : 13008 - (18/01/2015)
Clés trouvées (Keys found) : 2
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 3
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Convert Image_is1] =>PUP.ConvertMe^
[HKLM\Software\360Safe] =>Trojan.Lozavita
[HKLM\Software\0892CCEA-3029-46F2-BD98-F3177431F5F8] =>PUP.CrossRider^
[HKLM\Software\D20A6820-7C28-4015-945F-09F8551FCE45] =>PUP.CrossRider^
[HKCR\CLSID\{B52079A0-FF82-489C-9AE2-5299709B9E8F}] (SectionViewpointCmd Object) =>Adware.MetaStream^
~ Additionnel Scan: 442449 Items scanned in 00mn 28s
---\\ Informações complémentaires do módulos
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Internet Explorer, Gestão do Proxy (R5)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Browser Helper Objects do navegador (02)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Aplicações iniciadas por registo & pastas (04)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Chave do registo Shell MountPoints2 (MPSK) (O51)
~ AMI: 4 Scanned in 00mn 00s
---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.Lollipop
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.ConvertMe
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.CrossRider
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Elex
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.EnigmaSoftware
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.MetaStream
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Trojan.Lozavita
~ MSI: 8 link(s) detected in 00mn 00s
End of the scan (1380 lines in 04mn 07s)(0)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak® Codec.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"msacm.l3codecp"="l3codecp.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm
O52 - TDSD: \Drivers32\"vidc.xvid"="xvidvfw.dll" . (...) -- C:\Windows\System32\xvidvfw.dll
O52 - TDSD: \Drivers32\"vidc.x264"="x264vfw.dll" . (.x264vfw project - x264vfw - H.264/MPEG-4 AVC codec.) -- C:\Windows\System32\x264vfw.dll
O52 - TDSD: \Drivers32\"vidc.lags"="lagarith.dll" . (.No owner - Lagarith.) -- C:\Windows\System32\lagarith.dll
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"x264vfw.dll"="x264 Video Codec" . (.x264vfw project - x264vfw - H.264/MPEG-4 AVC codec.) -- C:\Windows\System32\x264vfw.dll
O52 - TDSD: \drivers.desc\"lagarith.dll"="Lagarith lossless codec [LAGS]" . (.No owner - Lagarith.) -- C:\Windows\System32\lagarith.dll
~ TDSD: 9 Scanned in 00mn 00s
---\\ Enumeração das chaves do registo SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0
~ MWPS: 18 Scanned in 00mn 00s
---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1
~ MWPE Keys: 2 Scanned in 00mn 00s
---\\ Lista dos drivers do sistema (SDL) (O58)
O58 - SDL:17/09/2012 - 19:58:30 R--A- . (.360.cn - 360FileOem.) -- C:\Windows\System32\Drivers\360FileOem.sys [152880]
O58 - SDL:17/09/2012 - 19:58:32 R--A- . (.360安全中心 - 360HookOem.) -- C:\Windows\System32\Drivers\360HookOem.sys [61488]
O58 - SDL:17/09/2012 - 19:58:32 R--A- . (.360安全中心 - 360RegOem.) -- C:\Windows\System32\Drivers\360RegOem.sys [29744]
O58 - SDL:17/09/2012 - 19:58:32 R--A- . (.360安全中心 - 360安全卫士 - SelfProtection.) -- C:\Windows\System32\Drivers\360SpOEM.sys [64048]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [422976]
O58 - SDL:13/07/2009 - 22:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [297552]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\Drivers\adpu320.sys [146512]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [14400]
O58 - SDL:11/03/2011 - 02:38:37 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [80256]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\System32\Drivers\amdsbs.sys [159312]
O58 - SDL:11/03/2011 - 02:38:37 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [22400]
O58 - SDL:15/10/2009 - 19:33:04 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\System32\Drivers\Apfiltr.sys [227376]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [76368]
O58 - SDL:13/07/2009 - 22:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [86608]
O58 - SDL:13/07/2009 - 19:02:49 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60x.sys [229888]
O58 - SDL:11/03/2014 - 00:14:02 ---A- . (.Baidu, Inc. - Baidu Antivirus Hook Base.) -- C:\Windows\System32\Drivers\Bhbase.sys [47456]
O58 - SDL:13/07/2009 - 19:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [13568]
O58 - SDL:13/07/2009 - 19:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [5248]
O58 - SDL:13/07/2009 - 21:57:25 ---A- . (.Brother Industries Ltd. - Brother Serial I/F Driver (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [272128]
O58 - SDL:13/07/2009 - 19:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [62336]
O58 - SDL:13/07/2009 - 19:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [12160]
O58 - SDL:13/07/2009 - 19:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [11904]
O58 - SDL:01/07/2009 - 12:46:14 ---A- . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\System32\Drivers\btwaudio.sys [86056]
O58 - SDL:01/07/2009 - 12:46:12 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\System32\Drivers\btwavdt.sys [108072]
O58 - SDL:07/04/2009 - 15:32:50 ---A- . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\System32\Drivers\btwl2cap.sys [29472]
O58 - SDL:01/07/2009 - 12:46:04 ---A- . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\System32\Drivers\btwrchid.sys [18344]
O58 - SDL:13/07/2009 - 19:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbdx.sys [430080]
O58 - SDL:13/07/2009 - 22:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [15952]
O58 - SDL:13/07/2009 - 22:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\Drivers\djsvs.sys [70720]
O58 - SDL:13/07/2009 - 22:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [453712]
O58 - SDL:13/07/2009 - 19:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbdx.sys [3100160]
O58 - SDL:18/07/2011 - 08:13:36 ---A- . (.GAS Tecnologia - GbPlugin Device Driver.) -- C:\Windows\System32\Drivers\gbpkm.sys [43600]
O58 - SDL:13/07/2009 - 19:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [26624]
O58 - SDL:13/07/2009 - 22:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [67152]
O58 - SDL:04/06/2009 - 18:43:16 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\Drivers\iaStor.sys [330264]
O58 - SDL:11/03/2011 - 02:38:51 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\Drivers\iaStorV.sys [332160]
O58 - SDL:25/08/2010 - 18:31:30 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdkmd32.sys [9024512]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [41040]
O58 - SDL:03/11/2014 - 06:04:18 ---A- . (.Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP).) -- C:\Windows\System32\Drivers\iSafeNetFilter.sys [43688] =>PUP.Elex
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [95824]
O58 - SDL:13/07/2009 - 22:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [89168]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [54864]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [96848]
O58 - SDL:21/11/2014 - 05:14:06 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [23256]
O58 - SDL:21/11/2014 - 05:14:10 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [75480]
O58 - SDL:21/01/2015 - 06:25:58 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [114904]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\System32\Drivers\megasas.sys [30800]
O58 - SDL:13/07/2009 - 22:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [235584]
O58 - SDL:21/11/2014 - 05:14:20 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [51928]
O58 - SDL:13/07/2009 - 22:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [44624]
O58 - SDL:11/03/2011 - 02:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [117120]
O58 - SDL:11/03/2011 - 02:39:00 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [143744]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1383488]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [106064]
O58 - SDL:05/11/2009 - 21:14:56 ---A- . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Driver.) -- C:\Windows\System32\Drivers\Rt86win7.sys [230912]
O58 - SDL:28/10/2009 - 10:39:26 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHDA.sys [2785568]
O58 - SDL:02/10/2009 - 12:33:24 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\Windows\System32\Drivers\rtl8192se.sys [862208]
O58 - SDL:13/07/2009 - 17:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [20480]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [40016]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [77888]
O58 - SDL:05/05/2009 - 15:15:58 ---A- . (.Motorola Inc. - Motorola SM56 Modem WDM Driver.) -- C:\Windows\System32\Drivers\smserial.sys [1095808]
O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [21072]
O58 - SDL:06/07/2009 - 11:49:52 ---A- . (.First International Computer, Inc. - Utility Program Component.) -- C:\Windows\System32\Drivers\UPCDRV.sys [10240]
O58 - SDL:13/07/2009 - 22:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [16976]
O58 - SDL:13/07/2009 - 22:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [141904]
O58 - SDL:13/07/2009 - 18:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:13/07/2009 - 18:40:44 ---A- . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:13/07/2009 - 18:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:13/07/2009 - 18:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:13/07/2009 - 18:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:13/07/2009 - 18:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:13/07/2009 - 18:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:13/07/2009 - 18:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:13/07/2009 - 18:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:13/07/2009 - 18:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:13/07/2009 - 18:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:13/07/2009 - 18:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:13/07/2009 - 18:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:13/07/2009 - 18:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:13/07/2009 - 18:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
~ Drivers: 80 Scanned in 00mn 05s
---\\ Últimos ficheiros alterados ou criados (Utilizador) (061)
O61 - LFC: 15/01/2015 - 10:18:59 ---A- . (...) -- C:\Users\Professor\AppData\Local\Adobe\Acrobat\11.0\UserCache.bin [120682]
O61 - LFC: 15/01/2015 - 10:19:28 ---A- . (...) -- C:\Users\Professor\Documents\CAR - Offline Update.exe [3189380]
O61 - LFC: 16/01/2015 - 10:19:25 ---A- . (...) -- C:\Users\Professor\AppData\Roaming\Macwebtoise\ProtectInstall.exe [657272]
O61 - LFC: 19/01/2015 - 10:19:28 ---A- . (...) -- C:\Users\Professor\Downloads\Firefox Setup Stub 35.0.exe [243656]
O61 - LFC: 19/01/2015 - 10:19:28 ---A- . (...) -- C:\Users\Professor\Downloads\adwcleaner_4.108.exe [2186752]
O61 - LFC: 19/01/2015 - 10:19:29 ---A- . (...) -- C:\Users\Professor\Downloads\Spyware%20Terminator.exe [576728]
O61 - LFC: 19/01/2015 - 10:19:29 ---A- . (.Enigma Software Group USA, LLC..) -- C:\Users\Professor\Music\53-SpyHunter-Installer.exe [2998656] =>PUP.EnigmaSoftware
O61 - LFC: 19/01/2015 - 10:19:29 ---A- . (.Malwarebytes Corporation.) -- C:\Users\Professor\Downloads\mbam-setup-2.0.4.1028.exe [20447072]
O61 - LFC: 20/01/2015 - 10:19:23 ---A- . (.Flexera Software, Inc..) -- C:\Users\Professor\AppData\Local\Temp\FNP_ACT_InstallerCA.dll [1433424]
O61 - LFC: 20/01/2015 - 10:19:24 ---A- . (...) -- C:\Users\Professor\AppData\Roaming\Autodesk\AutoCAD 2012 - English\R18.2\enu\AdExchangeBrowser.bin [1603]
O61 - LFC: 20/01/2015 - 10:19:27 ---A- . (...) -- C:\Users\Professor\Desktop\AdsFix.exe [2442752]
O61 - LFC: 20/01/2015 - 10:19:28 ---A- . (...) -- C:\Users\Professor\Desktop\Pre_Scan.exe [2468352]
O61 - LFC: 20/01/2015 - 10:19:29 ---A- . (...) -- C:\Users\Professor\Downloads\zoek(1).exe [1295360]
O61 - LFC: 20/01/2015 - 10:19:29 ---A- . (...) -- C:\Users\Professor\Downloads\zoek.exe [1295360]
O61 - LFC: 20/01/2015 - 10:19:29 ---A- . (.Thisisu.) -- C:\Users\Professor\Downloads\JRT.exe [1707939]
~ 16 Fichiers temporaires (Temporary files)
~ 579 Fichiers cookies (Cookies files)
~ Files: 15 Scanned in 00mn 30s
---\\ Ficheiros Alternate Data Stream (ADS) (O62)
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\:4055C67C_Bb.gbp
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\drivers\:GbpKmAp.lst
O62 - ADS:Alternate Data Stream File - C:\Windows\System32\Drivers\:GbpKmAp.lst
~ ADS: Scanned in 00mn 01s
---\\ Lista das ferramentas de remoção de vírus (LAT) (063)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Lista dos serviços Legacy du registo (064)
O64 - Services: CurCS - 11/03/2014 - C:\Windows\System32\drivers\Bhbase.sys (Bhbase) .(.Baidu, Inc. - Baidu Antivirus Hook Base.) - LEGACY_BHBASE
O64 - Services: CurCS - 18/07/2011 - C:\Windows\System32\drivers\gbpkm.sys (GbpKm) .(.GAS Tecnologia - GbPlugin Device Driver.) - LEGACY_GBPKM
O64 - Services: CurCS - 21/11/2014 - C:\windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
O64 - Services: CurCS - 21/01/2015 - C:\windows\system32\drivers\MBAMSwissArmy.sys (MBAMSwissArmy) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMSWISSARMY
O64 - Services: CurCS - 21/11/2014 - C:\windows\system32\drivers\mwac.sys (MBAMWebAccessControl) .(.Malwarebytes Corporation - Malwarebytes Web Access Control.) - LEGACY_MBAMWEBACCESSCONTROL
O64 - Services: CurCS - 26/05/1745 - C:\Users\PROFES~1\AppData\Local\Temp\mbr.sys (mbr) .(...) - LEGACY_MBR
O64 - Services: CurCS - 13/07/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Legacy: 242 Scanned in 00mn 00s
---\\ Associações Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos'.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <BaiduSparkHTML>[HKLM\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.exe> <exefile>[HKCU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.scr> <AutoCADScriptFile>[HKCU\..\open\Command] (.Microsoft Corporation - Bloco de notas.) -- C:\windows\system32\notepad.exe
~ FASS Keys: 13 Scanned in 00mn 00s
---\\ Menu de inicialização Internet (068)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files\internet explorer\iexplore.exe
~ Keys: Scanned in 00mn 00s
---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)
O69 - SBI: SearchScopes [HKCU] {012E1000-F331-11DB-8314-0800200C9A66} - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {0191A6B0-1154-4C22-9182-23A95BBE92D9} - (Google) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-19] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-20] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
~ Keys: Scanned in 00mn 00s
---\\ Listagem dos serviços iniciados pelo Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Serviço de Experiência com Aplicativo.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Cartão Inteligente da Microsof.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Cartão Inteligente da Microsof.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\Windows\System32\srvsvc.dll [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Diretiva de Grupo.) -- C:\Windows\System32\gpsvc.dll [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\Windows\System32\ikeext.dll [679424]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Serviço de Áudio do Windows.) -- C:\Windows\System32\Audiosrv.dll [475136]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acesso Remoto.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\Windows\System32\rasmans.dll [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistema (SENS).) -- C:\Windows\System32\sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft(R) Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242176]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gerenciador de Conexões Remotas do Servidor Host da Sessão da Área de.) -- C:\Windows\System32\termsrv.dll [523776]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [1973728]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de plano de fundo.) -- C:\Windows\System32\qmgr.dll [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em uma rede IPv4..) -- C:\Windows\System32\iphlpsvc.dll [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\Windows\system32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\Windows\System32\appinfo.dll [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Serviço Agendador de Classes de Multimídia.) -- C:\Windows\System32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164864]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\Windows\System32\schedsvc.dll [750592]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Serviço de Gerenciamento de Chaves.) -- C:\Windows\System32\kmsvc.dll [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho Remota.) -- C:\Windows\System32\sessenv.dll [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\Windows\System32\browser.dll [102912]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\Windows\System32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\Windows\System32\bdesvc.dll [76800]
~ Services: 32 Scanned in 00mn 00s
---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)
[MD5.4491E92D6536D0E37D1EC38B93975BF5] [SPRF][20/01/2015] (.No owner - AdsFix.) -- C:\Users\Professor\Desktop\AdsFix.exe [2442752]
[MD5.9E430B8148A12A51407A511E5DD35C82] [SPRF][20/01/2015] (.No owner - Pre_Scan.) -- C:\Users\Professor\Desktop\Pre_Scan.exe [2468352]
[MD5.E3815CD387F4E37269914D7762903CE4] [SPRF][03/02/2011] (.Autodesk, Inc. - Autodesk i-drop control.) -- C:\Windows\Downloaded Program Files\IDropENU.dll [113888]
~ Files: 3 Scanned in 00mn 00s
---\\ Listagem dos dados da chave NameSpace (MNS) (O92)
O92 - MNS: - {35B6525E-071A-4EA9-B3BD-F6A742572F08}
~ MNS: 1 Scanned in 00mn 00s
---\\ Search CLSID Registry Key (O101)
[HKCR\CLSID\{B52079A0-FF82-489C-9AE2-5299709B9E8F}] (SectionViewpointCmd Object) =>Adware.MetaStream
~ BCK: 7184 Scanned in 00mn 15s
---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)
SS - | Demand 19/01/2015 267440 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 14/09/2013 1044816 | (FLEXnet Licensing Service) . (.Flexera Software, Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Demand 23/10/2014 107912 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 23/10/2014 107912 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 10/07/1658 0 | (MozillaMaintenance) . (...) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 04/05/2010 503080 | (NAUpdate) . (.Nero AG.) - C:\Program Files\Nero\Update\NASvc.exe
SS - | Auto 13/07/2009 20992 | C:\windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Auto 13/07/2009 20992 | C:\windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Demand 30/01/2001 41984 | (sasrfcService) . (...) - C:\Program Files\SAS Institute\SAS\V8\access\sasexe\sasrfc.exe
SS - | Auto 10/07/1658 0 | (Sed) . (...) - C:\Users\Professor\AppData\Roaming\ntsvc\ntsvc.exe
SS - | Auto 11/12/2014 315496 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe
SS - | Demand 13/07/2009 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 19/12/2014 81088 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 02/02/2011 18656 | (Autodesk Content Service) . (...) - C:\Program Files\Autodesk\Autodesk Content Service\Connect.Service.ContentService.exe
SR - | Auto 01/07/2009 582944 | (btwdins) . (.Broadcom Corporation..) - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
SR - | Auto 18/07/2011 208264 | (GbpSv) . (...) - C:\Program Files\GbPlugin\gbpsv.exe
SR - | Demand 13/07/2009 20992 | C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 13/07/2009 20992 | C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 04/06/2009 354840 | (IAANTMON) . (.Intel Corporation.) - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SR - | Auto 21/11/2014 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
SR - | Auto 21/11/2014 969016 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
SR - | Auto 22/08/2014 22192 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe
SR - | Auto 24/10/2009 360224 | (PMBDeviceInfoProvider) . (.Sony Corporation.) - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
SR - | Auto 14/05/2007 272024 | (RichVideo) . (...) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
SR - | Auto 01/03/2011 2296696 | (TeamViewer6) . (.TeamViewer GmbH.) - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
SR - | Auto 13/07/2009 20992 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 18s
---\\ Pesquisa de infeção no Registo Mestre de Inicialização (MBR) (080)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Run by Professor at 21/01/2015 10:21:14
device: opened successfully
user: MBR read successfully
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys halmacpi.dll
C:\windows\system32\DRIVERS\iaStor.sys Intel Corporation Intel Matrix Storage Manager driver
1 ntkrnlpa!IofCallDriver[0x83441BBA] >> \Device\Harddisk0\DR0[0x878A8970]
3 CLASSPNP[0x8BDAC59E] >> ntkrnlpa!IofCallDriver[0x83441BBA] >> \Device\Ide\IAAStorageDevice-1[0x86E42028]
kernel: MBR read successfully
user & kernel MBR OK
~ MBR: 13 Scanned in 00mn 02s
---\\ Pesquisa de infeção no Registo Mestre de Inicialização (MBRCheck) (080)
Written by ad13, [Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Run by Professor at 21/01/2015 10:21:16
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 04s
---\\ Scâner Aditional (088)
Database Version : 13008 - (18/01/2015)
Clés trouvées (Keys found) : 2
Valeurs trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 3
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Convert Image_is1] =>PUP.ConvertMe^
[HKLM\Software\360Safe] =>Trojan.Lozavita
[HKLM\Software\0892CCEA-3029-46F2-BD98-F3177431F5F8] =>PUP.CrossRider^
[HKLM\Software\D20A6820-7C28-4015-945F-09F8551FCE45] =>PUP.CrossRider^
[HKCR\CLSID\{B52079A0-FF82-489C-9AE2-5299709B9E8F}] (SectionViewpointCmd Object) =>Adware.MetaStream^
~ Additionnel Scan: 442449 Items scanned in 00mn 28s
---\\ Informações complémentaires do módulos
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Internet Explorer, Gestão do Proxy (R5)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Browser Helper Objects do navegador (02)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Aplicações iniciadas por registo & pastas (04)
~ [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>.Chave do registo Shell MountPoints2 (MPSK) (O51)
~ AMI: 4 Scanned in 00mn 00s
---\\ Sumário das deteções encontradas na sua estação
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.Lollipop
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.ConvertMe
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.CrossRider
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.Elex
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.EnigmaSoftware
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Adware.MetaStream
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>Trojan.Lozavita
~ MSI: 8 link(s) detected in 00mn 00s
End of the scan (1380 lines in 04mn 07s)(0)
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]
Ana Machado- Iniciante
- Mensagens : 9
Reputação : 0
Data de inscrição : 20/01/2015
Re: Eliminar searchult dos navegadores
Boa tarde Ana Machado, desculpe-me a demora.
Você tem conhecimento desses arquivos:
C:\CAMPEIRO7\Campeiro7.exe <==
E:\iStudio.exe (provalmente em um mídia removível) <==
D:\SETUP.exe (CD-ROM drive) <==
Um grande abraço.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
< Peço aos visitantes que não utilizem este script em outros computadores,sob risco de danos irreparáveis aos mesmos! >
Você tem conhecimento desses arquivos:
C:\CAMPEIRO7\Campeiro7.exe <==
E:\iStudio.exe (provalmente em um mídia removível) <==
D:\SETUP.exe (CD-ROM drive) <==
- Execute este script na ferramenta ZHPFix.
- Copie estas informações que estão em vermelho para o Bloco de notas.
- Com o Bloco de notas aberto, faça: ctrl+a >> ctrl+c.
- À seguir, minimize o Bloco de notas.
Script ZHPFix
FirewallRaz
EmptyPrefetch
EmptyTemp
EmptyFlash
Hiddenfix
O23 - Service: Net Service Event Handler (Sed) . (...) - C:\Users\Professor\AppData\Roaming\ntsvc\ntsvc.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{21EA85CF-168A-480C-9CA3-4E09C69F396D}] (...) -- c:\users\Professor\appdata\local\lollipop\lollipop.bat (.not file.) [0] =>Adware.Lollipop
O42 - Logiciel: Convert Image - (.Softinterface, Inc..) [HKLM] -- Convert Image_is1 =>PUP.ConvertMe
[HKCU\Software\Baidu Security]
[HKCU\Software\Baixaki]
[HKLM\Software\0892CCEA-3029-46F2-BD98-F3177431F5F8] =>PUP.CrossRider
[HKLM\Software\360Safe]
[HKLM\Software\Baidu Security]
[HKLM\Software\Baidu_Drp_pos]
[HKLM\Software\D20A6820-7C28-4015-945F-09F8551FCE45] =>PUP.CrossRider
[HKLM\Software\searchult]
O43 - CFD: 20/01/2015 - 08:15:42 - [] ----D C:\Program Files\Baidu Security
O43 - CFD: 10/03/2014 - 22:42:31 - [] ----D C:\ProgramData\Log
O43 - CFD: 20/11/2014 - 13:55:30 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hao123-Brazil
O58 - SDL:11/03/2014 - 00:14:02 ---A- . (.Baidu, Inc. - Baidu Antivirus Hook Base.) -- C:\Windows\System32\Drivers\Bhbase.sys [47456]
O58 - SDL:03/11/2014 - 06:04:18 ---A- . (.Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP).) -- C:\Windows\System32\Drivers\iSafeNetFilter.sys [43688] =>PUP.Elex
O61 - LFC: 19/01/2015 - 10:19:29 ---A- . (.Enigma Software Group USA, LLC..) -- C:\Users\Professor\Music\53-SpyHunter-Installer.exe [2998656] =>PUP.EnigmaSoftware
O67 - Shell Spawning: <.html> <BaiduSparkHTML>[HKLM\..\open\Command] (.Not Key.)
O69 - SBI: SearchScopes [HKUS\.DEFAULT] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-18] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-19] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
O69 - SBI: SearchScopes [HKUS\S-1-5-20] {425ED333-6083-428a-92C9-0CFC28B9D1BF} - (YAC Safe Search) - [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] =>PUP.YetAnotherCleaner
[HKCR\CLSID\{B52079A0-FF82-489C-9AE2-5299709B9E8F}] (SectionViewpointCmd Object) =>Adware.MetaStream
SS - | Auto 10/07/1658 0 | (Sed) . (...) - C:\Users\Professor\AppData\Roaming\ntsvc\ntsvc.exe
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Convert Image_is1] =>PUP.ConvertMe^
[HKLM\Software\360Safe] =>Trojan.Lozavita
[HKLM\Software\0892CCEA-3029-46F2-BD98-F3177431F5F8] =>PUP.CrossRider^
[HKLM\Software\D20A6820-7C28-4015-945F-09F8551FCE45] =>PUP.CrossRider^
[HKCR\CLSID\{B52079A0-FF82-489C-9AE2-5299709B9E8F}] (SectionViewpointCmd Object) =>Adware.MetaStream^
ServiceStop:Sed
sysrestore - Abra a ferramenta ZHPFix. <[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]>
- Clique em IMPORTAÇÃO > OK
- Clique "GO".
- Poste o Relatório!
Um grande abraço.
[Tens de ter uma conta e sessão iniciada para poderes visualizar esta imagem]
< Peço aos visitantes que não utilizem este script em outros computadores,sob risco de danos irreparáveis aos mesmos! >
caedurodrigues- Analista
- Mensagens : 947
Reputação : 161
Data de inscrição : 21/10/2013
Idade : 54
Localização : Apiacá
Re: Eliminar searchult dos navegadores
Tópico Arquivado
Como o autor não respondeu por mais de 45 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.
Como o autor não respondeu por mais de 45 dias, o tópico foi arquivado. Caso o autor do tópico necessite, o mesmo será reaberto, para isso deverá entrar em contato com um dos membros da [Tens de ter uma conta e sessão iniciada para poderes visualizar este link] solicitando o desbloqueio.
joram- Administrador
- Mensagens : 4162
Reputação : 471
Data de inscrição : 26/01/2014
Localização : Rio de Janeiro
Tópicos semelhantes
» Virus Searchult
» Navegadores alterados
» Navegadores alterados
» PROBLEMAS COM NAVEGADORES.
» Bordas nos navegadores
» Navegadores alterados
» Navegadores alterados
» PROBLEMAS COM NAVEGADORES.
» Bordas nos navegadores
Página 1 de 1
Permissões neste sub-fórum
Não podes responder a tópicos
|
|