[Resolvido] Computador infectado, não consigo limpar maquina

• Baixe:<> <(...by Oleg N. Scherbakov)>
  
• Salve-o no desktop!
  
• Desabilite seu antivírus!
  
• Para Windows 7, clique direito em JRT.exe e execute-o como
  

# AdwCleaner v4.103 - Relatório criado 03/12/2014 às 13:23:48

# Atualizado 01/12/2014 por Xplode

# Database : 2014-12-03.1 [Live]

# Sistema Operacional : Windows 7 Home Premium Service Pack 1 (64 bits)

# Usuário : Michelly Boone - MICHELLYBOONE

# Executando de : C:\Users\Michelly Boone\Downloads\adwcleaner_4.103.exe

# Opção : Limpar



***** [ Serviços ] *****





***** [ Arquivos / Pastas ] *****



Pasta Deletada : C:\ProgramData\Babylon

Pasta Deletada : C:\ProgramData\baidu

Pasta Deletada : C:\ProgramData\BitGuard

Pasta Deletada : C:\ProgramData\FileCure

Pasta Deletada : C:\ProgramData\ParetoLogic

Pasta Deletada : C:\ProgramData\Trymedia

Pasta Deletada : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper

Pasta Deletada : C:\Program Files (x86)\ParetoLogic

Pasta Deletada : C:\Program Files (x86)\Shop-Up

Pasta Deletada : C:\Program Files (x86)\WinZipper

Pasta Deletada : C:\Program Files (x86)\Common Files\ParetoLogic

Pasta Deletada : C:\Program Files (x86)\Common Files\Umbrella

Pasta Deletada : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\DealPly

Pasta Deletada : C:\Users\Michelly Boone\AppData\Local\genienext

Pasta Deletada : C:\Users\Michelly Boone\AppData\Local\Mobogenie

Pasta Deletada : C:\Users\Michelly Boone\AppData\Local\webplayer

Pasta Deletada : C:\Users\Michelly Boone\AppData\Roaming\BabSolution

Pasta Deletada : C:\Users\Michelly Boone\AppData\Roaming\Babylon

Pasta Deletada : C:\Users\Michelly Boone\AppData\Roaming\baidu

Pasta Deletada : C:\Users\Michelly Boone\AppData\Roaming\eIntaller

Pasta Deletada : C:\Users\Michelly Boone\AppData\Roaming\WinZipper

Pasta Deletada : C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard

Pasta Deletada : C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie

Arquivo Deletada : C:\Users\Michelly Boone\daemonprocess.txt

Arquivo Deletada : C:\Users\Michelly Boone\AppData\LocalLow\SkwConfig.bin

Arquivo Deletada : C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_start.iminent.com_0.localstorage



***** [ Tarefas ] *****



Tarefa Deletedo : BitGuard

Tarefa Deletedo : BonanzaDealsLiveUpdateTaskMachineCore

Tarefa Deletedo : BonanzaDealsLiveUpdateTaskMachineUA

Tarefa Deletedo : Dealply

Tarefa Deletedo : Desk 365 RunAsStdUser



***** [ Atalhos ] *****



Atalho Desinfectada : C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk



***** [ Registro ] *****



Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\jmhhdaimhfblnamlcdijbaakkifakade

Chave Deletedo : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

Valor Deletedo : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]

Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Chave Deletedo : HKLM\SOFTWARE\Classes\Prod.cap

Valor Deletedo : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]

Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc

Chave Deletedo : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc

Chave Deletedo : HKCU\Software\a6dfd0b63ce947

Chave Deletedo : HKLM\SOFTWARE\a6dfd0b63ce947

Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}

Chave Deletedo : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Chave Deletedo : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

Chave Deletedo : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}

Chave Deletedo : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}

Chave Deletedo : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}

Chave Deletedo : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}

Chave Deletedo : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

Chave Deletedo : HKCU\Software\BrowserMngr

Chave Deletedo : HKCU\Software\filescout

Chave Deletedo : HKCU\Software\IM

Chave Deletedo : HKCU\Software\ImInstaller

Chave Deletedo : HKCU\Software\lollipop

Chave Deletedo : HKCU\Software\Microsoft\Babylon

Chave Deletedo : HKCU\Software\AppDataLow\Software\adawarebp

Chave Deletedo : HKCU\Software\AppDataLow\Software\findlyrics

Chave Deletedo : HKLM\SOFTWARE\Babylon

Chave Deletedo : HKLM\SOFTWARE\BrowserMngr

Chave Deletedo : HKLM\SOFTWARE\Desksvc

Chave Deletedo : HKLM\SOFTWARE\eSafeSecControl

Chave Deletedo : HKLM\SOFTWARE\hdcode

Chave Deletedo : HKLM\SOFTWARE\portaldositesSoftware

Chave Deletedo : HKLM\SOFTWARE\Trymedia Systems

Chave Deletedo : HKLM\SOFTWARE\V9

Chave Deletedo : HKLM\SOFTWARE\winzipersvc

Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}

Chave Deletedo : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winzipper

Chave Deletedo : HKLM\SOFTWARE\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193

Chave Deletedo : HKLM\SOFTWARE\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193

Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7

Chave Deletedo : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193



***** [ Navegadores ] *****



-\\ Internet Explorer v11.0.9600.17420





-\\ Google Chrome v37.0.2062.124





-\\ Opera v0.0.0.0





*************************



AdwCleaner[R0].txt - [8394 octets] - [03/12/2014 13:04:49]

AdwCleaner[S0].txt - [7463 octets] - [03/12/2014 13:23:48]



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7523 octets] ##########



Relatório JRT.txt



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.0 (11.29.2014:1)

OS: Windows 7 Home Premium x64

Ran by Michelly Boone on 03/12/2014 at 13:37:47,71

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~









~~~ Services







~~~ Registry Values



Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL







~~~ Registry Keys



Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{473C3C89-BBA4-43EC-B96E-4F0111BA3DD1}







~~~ Files



Successfully deleted: [File] "C:\Users\Michelly Boone\appdata\local\google\chrome\user data\default\local storage\http_start.iminent.com_0.localstorage-journal"







~~~ Folders



Successfully deleted: [Folder] "C:\ProgramData\baidu security"

Successfully deleted: [Folder] "C:\Users\Michelly Boone\AppData\Roaming\baidu security"

Successfully deleted: [Folder] "C:\Program Files (x86)\baidu security"

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{00CC33AF-03CF-4866-8CEA-F59A28640B39}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{08E5A5CF-B897-4CAA-AA00-E316543679CF}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{0C8A847D-14EE-440F-B465-F7EFBF5DF852}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{0E7580FD-7371-4F70-AAFD-BC859CF54BB6}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{1D13A68B-7FE3-4763-96D7-09EA92CAE713}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{1D1E8393-6655-4AD4-99AF-27ACE4995FAF}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{1D36F9A6-CD14-4433-A12C-B0607B8A79B2}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{1D7E3DF3-ECF0-4DE8-B3A0-A516E52A7EDC}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{1DCE94C3-B5F4-4119-8331-39F2072D0BCD}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{20062941-8E9E-4135-BCC2-CFFA9E728091}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{22B6DC57-F40B-4FB3-B1A0-DE66E86A913F}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{25F0CA4D-5A16-4547-A7B8-F2C56D8D8A8C}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{2AE866B4-4C22-40CF-AC3F-10769B74C96E}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{2C34F6A8-9C40-43E6-BC50-714BE41803A2}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{2D80D1DA-DBFC-4E36-88D4-9A1C4DA280D5}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{2DABD588-B86D-44C1-8D77-49D5BBB76670}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{2DDC8EA7-310E-4019-B338-0904AC8A64C1}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{30D02BF9-43D1-4E71-9849-7DF1E09B8660}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{37502206-FDE1-4565-9AF1-4F5B7A307B97}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{37F51FB9-CBDB-48E9-B572-BDC9A4D610A1}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{3A10EDB6-36B6-4468-AE04-46180FBA5D57}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{3A8AA654-3F4C-4848-8C01-9077522AC4B8}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{3CE029DB-AA4C-403E-930E-192552833935}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{3CEE033B-5E2F-42BE-B011-71F2CD654E8B}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{3DD2E23D-0277-4DE5-A71B-3813E3830329}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{3E8F94F2-F433-4992-BBB9-7C39D2E29FA5}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{403B264C-D23D-401D-AE0C-D238CADE1C70}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{417AF863-80A4-45C8-A143-363C2E60396C}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{453C7E40-DC4A-4A9C-8BD3-DF3927979BBC}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{464055D8-C344-4E91-BB0F-8997B98E9D5F}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{4A8A7344-A1F0-41E3-A7EE-8856FBB73153}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{4B64A56B-4BD9-4837-9BCC-D742EE0184FC}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{4C5187EA-19A0-48B1-866D-A9D9D6AD95BD}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{53931CF4-1A96-4E6C-A4D2-9E0DCAFE7176}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{56CD0963-E7AA-484E-B96A-38EAEDE27936}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{590AFE58-B7B1-488B-90AD-1EF0DD97F1F0}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{5E38BEE1-19B4-44A8-BFE5-31F027CD4275}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{629C41F5-2152-4A27-8925-CA7F7D45318B}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{62F761EE-FE82-4C1F-9642-5A0C49B541D8}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{63648D9E-895E-49AB-8C83-316E7E3977BF}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{6533EAE4-DBC1-4B55-B500-5923CDA9FB47}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{65A8361C-E396-47B8-A7BE-18E3F4A74097}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{6650A946-44E6-496F-B996-F9EAF5CCDA6A}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{69E71152-9E80-4731-B5FC-B2736484E14A}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{6A42A9F9-108F-4A4A-97D7-404761A7223A}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{6AC75F74-ABF6-49BB-BCCB-1F7C7BEC705F}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{6F645E59-05C6-41E4-9683-D115C4438288}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{733FDACB-4C39-4159-98F3-C2D1C58C3F7E}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{7502DF46-126B-4442-A24A-01B90740ED32}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{80130E57-728A-4E6B-8F2A-87AF4753A0C8}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{84CD922A-C18F-44AB-AECF-421F24681694}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{85AEFD40-BCA2-4F07-92EC-F8DE9B5040B5}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{8D308BD8-2B5F-45AF-BBA5-BD73F8EA1572}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{9913FFB5-7C57-4DA2-B59E-BAE91033ABE1}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{A02369EE-84AE-4DC8-921D-D0E5D1827C63}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{A13FC7E6-2683-4E05-90DB-29C609910B63}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{A4191E50-8725-4983-82D1-0A8FFC8F11FA}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{A4C737B0-F4F4-40CD-BC8A-0FB5F76DD95A}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{A4D37992-80BA-40C2-929B-A36249AF710F}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{ACF6BEAB-D6D8-426F-9F83-CB155E4C3718}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{B08D8AAB-96B2-44AB-8975-D06CAFCC760A}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{B5047F9A-27E7-4AFE-829C-99AA3AEA2D01}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{B6D4B646-8618-44D6-BE22-91EBE543C222}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{BA5EE981-55EF-4A67-92EA-233463DEA147}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{BBCED25A-3460-4B74-B4F2-AA7173435B8F}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{BCC5B243-11F6-46ED-91BB-E36C46879E3F}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{BFBD7EFC-998D-4C81-B367-86433C3347CC}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{C27144D4-6E16-4FC6-BDC2-47DA74276A7B}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{C4ACA974-09E3-4043-A453-48595EF1223B}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{C4B5C939-6861-44CA-B477-D81F3BCE7D7C}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{C55BDF47-E593-4529-AA84-5D825DA32790}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{C8EB011B-B340-4B5F-9A10-D63F1FE8D09E}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{CBA2F9AA-C337-4950-9C52-5B8639BC4595}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{CD6AF62B-C3D3-4667-9F24-A61F3AB7E231}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{D50E22A6-F571-43E2-8CF4-DB1C5E8429BD}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{DC1F02BA-7A45-4BD8-9265-7DBC880832F0}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{DD27F6D4-1E22-4033-85FA-9CA949716AFF}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{DEF59B04-E970-492D-A9CB-554C6370B83C}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{E13F7D07-EF62-40F6-9930-FFC6A2C1DDF9}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{E5AB1CB2-F22C-4A5A-96FF-9AB33A15FC60}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{E5AB4C44-0E72-4FE9-8164-B01624CEF93B}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{EA36E981-46C8-40FA-9B6D-DDE6E5507FED}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{EB588965-C990-4DB2-82EA-0FF33FE8204B}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{EC2A2B10-8C7E-43E0-831A-A90AB4CF22E5}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{EF9AFC2F-A49A-4F50-8C8E-8B8A00DE3C49}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{F3B7307F-E459-4886-909A-0AB4EFE64172}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{F435781B-B0AB-448F-8263-24B7AA0AAB5A}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{F6F1D91A-E09D-409D-90B0-4A7565709252}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{F9D874BA-583B-4DD2-9095-C52C1B0F66B6}

Successfully deleted: [Empty Folder] C:\Users\Michelly Boone\appdata\local\{FE439E4C-4093-463A-86F3-BBEA99E4543B}







~~~ Event Viewer Logs were cleared











~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 03/12/2014 at 13:40:45,85

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

• Baixe:<> <(...by Farbar)>
  
• Ou aqui:<Farbar Recovery Scan Tool 64-bits>
  
• Salve-a na Área de trabalho !
  
• Execute a ferramenta ! Clique "Yes" >> "Scan".
  
  
  
• Verifique se as caixinhas em "Whitelist" estão assinaladas.
  
• Em "Optional Scan",deixe marcada a checkbox "Addition.txt".
  
• Será gerado o relatório! (FRST.txt)
  
• Ps: Será gerado,também,o relatório "Addition.txt" que estará disponibilizado na 1ª execução da ferramenta.
  
• Acesse: <>
  
• Ou anexe-o no fórum !
  

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014

Ran by Michelly Boone (administrator) on MICHELLYBOONE on 03-12-2014 15:06:17

Running from C:\Users\Michelly Boone\Desktop

Loaded Profile: Michelly Boone (Available profiles: Michelly Boone)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Português (Brasil)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: <a href="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/" target="_blank">http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/</a>



==================== Processes (Whitelisted) =================



(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)



(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe

(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

(Positivo Informática S.A) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe

(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe

(OEM) C:\Program Files (x86)\OEM\LIVE! OSD 1.35\osd.exe

(Dropbox, Inc.) C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Quartzo Desenvolvimento de Software  Ltda.) C:\Program Files (x86)\qubnfe\qubnfe.exe

(GAS Tecnologia LTDA) C:\Program Files (x86)\Diebold\Warsaw\core.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(Positivo Informática S.A) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryPower.exe

(GAS Tecnologia LTDA) C:\Program Files (x86)\Diebold\Warsaw\core.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

() C:\Program Files (x86)\Soft Organizer\SoftOrganizerAgent.exe

(Positivo Informática S.A.) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Backup\PositivoSmartBackup.exe

(Positivo Informática S.A.) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Áudio\AudioPower.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareDesktop.exe

(Thisisu) C:\Users\Michelly Boone\Downloads\JRT.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\plugin-nm-server.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Users\Michelly Boone\Downloads\setup_11.0.3.8.x01_2014_12_03_09_36.exe

() C:\Users\Michelly Boone\AppData\Local\Temp\RarSFX0\3738614.exe

(Kaspersky Lab) C:\Users\Michelly Boone\AppData\Local\Temp\2457729\3738614.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\DeviceDisplayObjectProvider.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe





==================== Registry (Whitelisted) ==================



(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)



HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-18] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2392872 2010-10-14] (Synaptics Incorporated)

HKLM\...\Run: [StartUpManagerPositivo] => C:\Program Files\Positivo Informática\Gerenciador de Inicialização Positivo\ManagerWindows.exe [171520 2012-03-01] ()

HKLM\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-21] (Microsoft Corporation)

HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe [8925504 2014-10-15] ()

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740888 2013-04-24] (Sony Corporation)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [qubnfe] => C:\Program Files (x86)\qubnfe\qubnfe.exe [1208632 2012-08-01] (Quartzo Desenvolvimento de Software  Ltda.)

HKLM-x32\...\Run: [Diebold - Warsaw] => C:\Program Files (x86)\Diebold\Warsaw\core.exe [518968 2014-07-12] (GAS Tecnologia LTDA)

HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-11-11] (Kaspersky Lab ZAO)

HKLM-x32\...\RunOnce: [GrpConv] => grpconv -o

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\ GbPluginBb-x32: C:\Program Files (x86)\GbPlugin\gbieh.dll (Banco do Brasil)

Winlogon\Notify\ GbPluginUni-x32: C:\Program Files (x86)\GbPlugin\gbiehUni.dll (Banco Itaú Unibanco)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Run: [HP Deskjet 3510 series (NET)] => C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1305408 2014-11-13] (Lavasoft)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OSD.lnk

ShortcutTarget: OSD.lnk -> C:\Windows\Installer\{73289228-1853-4623-982A-EB17FF0270CA}\_6C478F4E8D2A2AC0FD0413.exe ()

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk

ShortcutTarget: Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk -> C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_41748424.lnk

ShortcutTarget: _uninst_41748424.lnk -> C:\Users\Michelly Boone\AppData\Local\Temp\_uninst_41748424.bat ()

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll (Kaspersky Lab ZAO)

ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll (Kaspersky Lab ZAO)

BootExecute: autocheck autochk * bddel.exe



==================== Internet (Whitelisted) ====================



(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)



HKU\S-1-5-21-597722200-2002237864-835144990-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch</a>

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = <a href="http://positivo.br.msn.com?pc=MAPT" target="_blank">http://positivo.br.msn.com?pc=MAPT</a>

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL = <a href="http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox" target="_blank">http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox</a>

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL = <a href="http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox" target="_blank">http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox</a>

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL =

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL =

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ ´Ñ;áa´[¦†8 º~RÙxœòÜ8'£-)xä URL =

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Auxiliar de Conexão de Conta da Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\Program Files (x86)\GbPlugin\gbieh.dll (Banco do Brasil)

BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files (x86)\GbPlugin\gbiehuni.dll (Banco Itaú Unibanco)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Toolbar: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> No Name - {742E70CF-7770-412D-86CB-230B322E807C} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll [1513528 2013-11-22] (Banco Itaú Unibanco)

ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll [1754664 2014-07-31] (Banco do Brasil)

Tcpip\Parameters: [DhcpNameServer] 200.85.32.2 200.85.32.3



FireFox:

========

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: <a href="/comunidade/members/user.636732">@google.com</a>/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/bb -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll (GAS Tecnologia)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/cef -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll (GAS Tecnologia)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/uni -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_uni.dll (GAS Tecnologia)

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]url_advisor@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]url_advisor@kaspersky.com[/EMAIL]

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]url_advisor@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL]

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]content_blocker@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]content_blocker@kaspersky.com[/EMAIL]

FF Extension: Gevaarlijke websiteblokkering - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]content_blocker@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]anti_banner@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]anti_banner@kaspersky.com[/EMAIL]

FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]anti_banner@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]online_banking@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]online_banking@kaspersky.com[/EMAIL]

FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]online_banking@kaspersky.com[/EMAIL] [2014-11-25]

FF HKU\.DEFAULT\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] - C:\ProgramData\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension

FF HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Firefox\Extensions: [{58bd07eb-0ee0-4df0-8121-dc9b693373df}] - C:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension



Chrome:

=======

CHR HomePage: Default -> hxxp://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A

CHR StartupUrls: Default -> "hxxp://<a href="'http://www.jw.org/es'" target="_blank">www.jw.org/es</a>", "<a href="'https://bay173.mail.live.com/default.aspx?id=64855%2c64855&mkt=pt-BR&form=MWGELB&publ=MSNTOOL&crea=TEXT_CIMS015888_Hotmail_PT-BR_0x0_33485#fid=fl91BAlyyxDUuJCJbBzPF7zQ2'" target="_blank">https://bay173.mail.live.com/default.aspx?id=64855,64855&mkt=pt-BR&form=MWGELB&publ=MSNTOOL&crea=TEXT_CIMS015888_Hotmail_PT-BR_0x0_33485#fid=fl91BAlyyxDUuJCJbBzPF7zQ2</a>"

CHR DefaultSearchKeyword: Default -> start.iminent.com

CHR DefaultSearchURL: Default -> <a href="http://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A&ref=toolbox&q={searchTerms}" target="_blank">http://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A&ref=toolbox&q={searchTerms}</a>

CHR DefaultSuggestURL: Default ->

CHR Profile: C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-05]

CHR Extension: (Google Drive) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-26]

CHR Extension: (YouTube) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-26]

CHR Extension: (Adblock Plus) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-28]

CHR Extension: (Pesquisa do Google) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-26]

CHR Extension: (Kaspersky URL Advisor) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-11-25]

CHR Extension: (GBBD Guardião - Itaú 30 horas) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmpojlddncminmkddkpoegdjhojjipg [2014-11-21]

CHR Extension: (Proteção Kaspersky) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2014-11-25]

CHR Extension: (Google Wallet) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjbodopomfddehlalfilheomcahbpei [2013-11-21]

CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2014-07-06]

CHR Extension: (Gmail) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-26]

CHR Extension: (Anti-Banner) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-11-25]

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2013-11-11]

CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - <a href="https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh" target="_blank">https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh</a> [2013-11-11]

CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2013-11-11]



==================== Services (Whitelisted) =================



(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)



R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)

S4 AppManagerService; C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Experience\PositivoAplicativosService.exe [65304 2013-10-10] (Positivo Informática S.A.)

R2 avp; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-11-11] (Kaspersky Lab ZAO)

R2 BatteryManagerSrv; C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe [45056 2012-03-20] (Positivo Informática S.A) [File not signed]

S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

S3 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [818888 2013-09-25] (Infowatch)

R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [546104 2014-07-21] (GAS Tecnologia)

S3 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]

S2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe [707888 2014-10-15] ()

S2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [1351512 2014-11-13] (Lavasoft Limited)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-04-24] (Sony Corporation)

S2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [15208 2014-11-13] ()

R2 Warsaw Technology; C:\Program Files (x86)\Diebold\Warsaw\core.exe [518968 2014-07-12] (GAS Tecnologia LTDA)



==================== Drivers (Whitelisted) ====================



(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)



R0 41748424; C:\Windows\System32\DRIVERS\41748424.sys [458336 2014-12-03] (Kaspersky Lab ZAO)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)

R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2014-08-21] (BitDefender)

R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2014-08-21] (BitDefender)

S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2014-08-21] (BitDefender)

R1 BdfNdisf; c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [93160 2014-07-10] (BitDefender LLC)

R1 bdfwfpf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [102992 2014-07-10] (BitDefender LLC)

S3 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [76096 2013-08-08] (Baidu, Inc.)

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)

R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)

S0 GbpKm; C:\Windows\SysWOW64\drivers\GbpKm.sys [49536 2013-05-08] (GAS Tecnologia)

R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.0.56\gzflt.sys [150256 2014-07-10] (BitDefender LLC)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-11-25] (Kaspersky Lab ZAO)

U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-11-25] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628288 2014-11-25] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-11-25] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-11-11] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-11-11] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-11-11] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-11-11] (Kaspersky Lab ZAO)

R2 LiveGpdKBFilter; C:\Windows\System32\Drivers\LiveGpdKBFilter.sys [11168 2010-01-21] (Windows (R) Win 7 DDK provider) [File not signed]

R2 LiveIO; C:\Windows\System32\Drivers\LiveIO.sys [14240 2010-01-21] () [File not signed]

R3 Livekbc; C:\Windows\System32\Drivers\Livekbc.sys [11680 2010-01-21] (Systems Internals) [File not signed]

R3 Livemouclass; C:\Windows\System32\Drivers\Livemouclass.sys [11168 2010-01-21] (Systems Internals) [File not signed]

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

R3 PositivoAudioDriverWdm; C:\Windows\System32\DRIVERS\pad.sys [69520 2011-08-11] (Positivo Informática S.A.)

S3 RSUSBSTOR; C:\Windows\System32\Drivers\RtsUStor.sys [225280 2009-09-01] (Realtek Semiconductor Corp.) [File not signed]

S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-01] (Realtek Semiconductor Corp.) [File not signed]

S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [389240 2014-07-10] (BitDefender S.R.L.)

S1 BAPIDRV; system32\DRIVERS\BAPIDRV64.sys [X]

S3 BTMCOM; \SystemRoot\System32\Drivers\btmcom.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]

U2 wuaserv; No ImagePath



==================== NetSvcs (Whitelisted) ===================



(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)





==================== One Month Created Files and Folders ========



(If an entry is included in the fixlist, the file\folder will be moved.)



2014-12-03 14:54 - 2014-12-03 14:54 - 00003028 _____ () C:\Windows\System32\Tasks\{9D4A5D2F-E370-4D01-9DCD-C54FA36EE9D8}

2014-12-03 14:53 - 2014-12-03 14:53 - 00003028 _____ () C:\Windows\System32\Tasks\{64FD857D-6973-4B84-AB8E-DA5999222384}

2014-12-03 14:51 - 2014-12-03 14:51 - 00000000 ____D () C:\Users\Michelly Boone\Desktop\11075872_REDE_WIN7_x64_00

2014-12-03 14:50 - 2014-12-03 14:50 - 00003028 _____ () C:\Windows\System32\Tasks\{A2BECC90-8B37-4DD4-8F9A-831307A59721}

2014-12-03 14:40 - 2014-12-03 14:40 - 05800448 _____ () C:\Users\Michelly Boone\Downloads\11075872_REDE_WIN7_X64_00 (1).exe

2014-12-03 14:19 - 2014-12-03 09:35 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\41748424.sys

2014-12-03 13:40 - 2014-12-03 13:40 - 00011656 _____ () C:\Users\Michelly Boone\Desktop\JRT.txt

2014-12-03 13:37 - 2014-12-03 13:37 - 00000000 ____D () C:\Windows\ERUNT

2014-12-03 13:33 - 2014-12-03 13:33 - 01707646 _____ (Thisisu) C:\Users\Michelly Boone\Downloads\JRT.exe

2014-12-03 13:04 - 2014-12-03 13:24 - 00000000 ____D () C:\AdwCleaner

2014-12-03 13:03 - 2014-12-03 13:03 - 00000210 _____ () C:\Users\Michelly Boone\Mensagens de erro.txt

2014-12-03 13:00 - 2014-12-03 13:01 - 02154496 _____ () C:\Users\Michelly Boone\Downloads\adwcleaner_4.103.exe

2014-12-03 10:54 - 2014-12-03 10:54 - 00000000 ____D () C:\Users\Todos os Usuários\Dell

2014-12-03 10:54 - 2014-12-03 10:54 - 00000000 ____D () C:\ProgramData\Dell

2014-12-03 10:51 - 2014-12-03 10:53 - 15712632 _____ (Dell Inc.) C:\Users\Michelly Boone\Downloads\dell_n1e1215f39b1d.exe

2014-12-03 10:45 - 2014-12-03 11:27 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Device Doctor

2014-12-03 10:45 - 2014-12-03 10:45 - 00001979 _____ () C:\Users\Michelly Boone\Desktop\Speed Up This PC.lnk

2014-12-03 10:45 - 2014-12-03 10:45 - 00001022 _____ () C:\Users\Michelly Boone\Desktop\Device Doctor.lnk

2014-12-03 10:45 - 2014-12-03 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Device Doctor

2014-12-03 10:45 - 2014-12-03 10:45 - 00000000 ____D () C:\Program Files (x86)\Device Doctor

2014-12-03 10:43 - 2014-12-03 10:43 - 01481976 _____ (Device Doctor Software Inc. ) C:\Users\Michelly Boone\Downloads\DeviceDoctor_Bundle.exe

2014-12-03 10:28 - 2014-12-03 13:29 - 00065536 _____ () C:\Windows\system32\Ikeext.etl

2014-12-03 08:23 - 2014-12-03 08:34 - 165181728 _____ () C:\Users\Michelly Boone\Downloads\setup_11.0.3.8.x01_2014_12_03_09_36.exe

2014-12-03 01:51 - 2014-12-03 01:51 - 00001421 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 14 Compact Mode.lnk

2014-12-03 01:51 - 2014-12-03 01:51 - 00001259 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 14.lnk

2014-12-03 01:51 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo

2014-12-03 01:26 - 2014-12-03 01:26 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Ashampoo Burning Studio FREE

2014-12-03 01:22 - 2014-12-03 01:51 - 00001234 _____ () C:\Users\Public\Desktop\CleverReach.com.lnk

2014-12-03 01:22 - 2014-12-03 01:51 - 00000214 _____ () C:\Users\Public\Desktop\Your Software Deals.url

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\ashampoo

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\Users\Todos os Usuários\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\Program Files (x86)\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:22 - 00001263 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk

2014-12-03 01:19 - 2014-12-03 01:21 - 33551464 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Michelly Boone\Downloads\ashampoo_burning_studio_free_1.14.5_sm.exe

2014-12-03 00:54 - 2014-12-03 00:54 - 00182179 _____ () C:\Users\Michelly Boone\Downloads\burncdcc.zip

2014-12-03 00:35 - 2014-12-03 05:48 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48DB2CCA.sys

2014-12-03 00:32 - 2014-12-03 00:33 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\kav_rescue_10

2014-12-03 00:29 - 2014-12-03 00:29 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\Kaspersky Rescue2Usb

2014-12-03 00:27 - 2014-12-03 00:27 - 00387584 _____ () C:\Users\Michelly Boone\Downloads\rescue2usb.exe

2014-12-03 00:08 - 2014-12-03 00:27 - 309819392 _____ () C:\Users\Michelly Boone\Downloads\kav_rescue_10.iso

2014-12-02 19:14 - 2014-12-02 19:14 - 00003208 _____ () C:\Windows\System32\Tasks\{7EC6DFFA-08E6-4A33-8972-1D5A604B37D0}

2014-12-02 12:36 - 2014-12-02 12:37 - 00051470 _____ () C:\Users\Michelly Boone\Desktop\Addition.txt

2014-12-02 12:35 - 2014-12-03 15:06 - 00031821 _____ () C:\Users\Michelly Boone\Desktop\FRST.txt

2014-12-02 12:34 - 2014-12-03 15:06 - 00000000 ____D () C:\FRST

2014-12-02 12:33 - 2014-12-02 12:33 - 02117120 _____ (Farbar) C:\Users\Michelly Boone\Desktop\FRST64.exe

2014-12-02 11:27 - 2014-12-02 11:27 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Kaspersky Disk Rescue

2014-12-02 11:26 - 2014-12-02 11:26 - 308682752 _____ () C:\Users\Michelly Boone\Documents\Kaspersky Disk Rescue.iso

2014-12-01 23:55 - 2014-12-01 23:55 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\backups

2014-12-01 23:28 - 2014-12-01 23:28 - 00388608 _____ (Trend Micro Inc.) C:\Users\Michelly Boone\Downloads\HiJackThis (1).exe

2014-12-01 23:14 - 2014-12-01 23:22 - 186654544 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup (1).exe

2014-12-01 22:52 - 2014-12-01 22:52 - 00002992 _____ () C:\Windows\System32\Tasks\{6ABCB2DA-F359-4B3C-B47A-7716CEFE125B}

2014-12-01 22:18 - 2014-12-01 22:18 - 00290704 _____ () C:\Windows\Minidump\120114-30217-01.dmp

2014-12-01 22:17 - 2014-12-03 13:28 - 00486092 _____ () C:\Windows\PFRO.log

2014-12-01 22:17 - 2014-12-01 22:17 - 599877401 _____ () C:\Windows\MEMORY.DMP

2014-12-01 21:48 - 2014-12-03 13:33 - 00117100 _____ () C:\Windows\WindowsUpdate.log

2014-12-01 21:44 - 2014-12-03 13:28 - 00001176 _____ () C:\Windows\setupact.log

2014-12-01 21:44 - 2014-12-01 21:44 - 00000000 _____ () C:\Windows\setuperr.log

2014-12-01 21:39 - 2014-12-01 21:39 - 00016254 _____ () C:\Users\Michelly Boone\Documents\cc_20141201_213920.reg

2014-12-01 21:12 - 2014-12-01 21:44 - 00000902 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-01 21:00 - 2014-12-01 21:02 - 05037464 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avastclear.exe

2014-12-01 20:58 - 2014-12-01 20:58 - 00000280 _____ () C:\Windows\system32\2014-12-01-23-58-47.018-aswFe.exe-5224.log

2014-12-01 20:55 - 2014-12-01 20:56 - 04001367 _____ () C:\Users\Michelly Boone\Downloads\ServicesRepair.exe

2014-12-01 20:16 - 2014-12-01 20:16 - 00000247 _____ () C:\Windows\system32\2014-12-01-23-16-53.078-aswFe.exe-3908.log

2014-12-01 20:11 - 2014-12-01 20:16 - 00000247 _____ () C:\Windows\system32\2014-12-01-23-11-00.074-aswFe.exe-7596.log

2014-12-01 20:10 - 2014-12-01 20:10 - 00000197 _____ () C:\Windows\system32\2014-12-01-23-10-56.005-AvastVBoxSVC.exe-8256.log

2014-12-01 19:57 - 2014-12-01 19:57 - 00001261 _____ () C:\Windows\unins000.dat

2014-12-01 19:57 - 2014-12-01 19:56 - 01187697 _____ () C:\Windows\unins000.exe

2014-12-01 19:56 - 2014-12-01 19:56 - 01241367 _____ () C:\Users\Michelly Boone\Downloads\Atv Avast P. 2014 by owinner.net.rar

2014-12-01 19:56 - 2014-12-01 19:56 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\Atv Avast P. 2014 by owinner.net

2014-12-01 19:42 - 2014-12-01 19:42 - 04978536 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup_online.exe

2014-12-01 19:37 - 2014-12-01 19:37 - 00002992 _____ () C:\Windows\System32\Tasks\{4428844F-1BE9-4C11-B0E1-84E47071EB9F}

2014-12-01 19:37 - 2014-12-01 19:37 - 00002992 _____ () C:\Windows\System32\Tasks\{313301DC-B1EA-45A4-BA62-9FE981A2919D}

2014-12-01 19:36 - 2014-12-01 19:36 - 00002992 _____ () C:\Windows\System32\Tasks\{9E66C78F-CE9F-42F4-9A82-61F87D769002}

2014-12-01 19:35 - 2014-12-01 19:35 - 00002992 _____ () C:\Windows\System32\Tasks\{ADBD9797-50F7-42F7-9317-67FB0D04672E}

2014-12-01 19:24 - 2014-12-01 19:24 - 00000000 ____D () C:\Windows\SysWOW64\vbox

2014-12-01 19:24 - 2014-12-01 19:24 - 00000000 ____D () C:\Windows\system32\vbox

2014-12-01 18:58 - 2014-12-01 19:06 - 186654544 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup.exe

2014-11-30 06:35 - 2014-11-30 06:35 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\144355D9.sys

2014-11-30 06:26 - 2014-11-30 06:26 - 00089088 _____ () C:\Users\Michelly Boone\Downloads\Apontamento de horas_Novembro_2014_6 hrs_15 min.xls

2014-11-27 13:31 - 2014-08-28 23:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-11-27 13:31 - 2014-05-08 06:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-11-27 13:30 - 2014-09-04 23:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-11-27 13:30 - 2014-09-04 22:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-11-26 18:06 - 2014-11-26 18:09 - 68794592 _____ () C:\Users\Michelly Boone\Downloads\w_xvid.avi

2014-11-26 17:47 - 2014-11-26 17:47 - 00000000 ____D () C:\Program Files\Intel

2014-11-26 17:46 - 2014-11-27 09:45 - 00000000 ____D () C:\Driver_allOS

2014-11-26 17:36 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Realtek WLAN Driver

2014-11-26 16:59 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Driver Checker

2014-11-26 16:57 - 2014-11-26 16:57 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Opera Software

2014-11-26 16:57 - 2014-11-26 16:57 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\Opera Software

2014-11-26 16:55 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Opera

2014-11-26 16:12 - 2014-11-26 16:12 - 00178254 _____ () C:\Users\Michelly Boone\Downloads\DRP14 (1).torrent

2014-11-26 16:07 - 2014-11-27 09:14 - 00000048 _____ () C:\RB.rdat

2014-11-26 16:07 - 2014-11-27 09:14 - 00000048 _____ () C:\License_Time.rdat

2014-11-26 16:03 - 2014-11-26 16:03 - 00178254 _____ () C:\Users\Michelly Boone\Downloads\DRP14.torrent

2014-11-26 15:55 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\DriverPackSolution

2014-11-26 15:37 - 2014-11-27 13:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverPack Solution Lite

2014-11-26 15:37 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files\DriverPack Solution Lite 13

2014-11-26 15:17 - 2014-11-26 15:17 - 00000000 ____D () C:\Users\Michelly Boone\Desktop\realtek_rtl_gigabit_and_fast_ethernet_nic_driver

2014-11-26 15:16 - 2014-11-26 15:16 - 02468743 _____ () C:\Users\Michelly Boone\Desktop\realtek_rtl_gigabit_and_fast_ethernet_nic_driver.zip

2014-11-26 09:43 - 2014-11-26 09:43 - 00001186 _____ () C:\Users\Michelly Boone\Desktop\proba.txt

2014-11-25 22:44 - 2014-11-25 22:44 - 01430885 _____ () C:\Users\Michelly Boone\Downloads\Tr Formulaires.zip

2014-11-25 17:24 - 2014-11-25 17:24 - 00000000 __SHD () C:\Users\Michelly Boone\AppData\Local\EmieBrowserModeList

2014-11-25 12:07 - 2014-11-25 12:49 - 00002176 _____ () C:\Users\Michelly Boone\Desktop\Safe Money.lnk

2014-11-25 12:03 - 2014-11-25 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky PURE 3.0

2014-11-25 12:03 - 2014-11-25 12:02 - 00001038 _____ () C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk

2014-11-25 12:02 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys

2014-11-25 12:02 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys

2014-11-25 11:48 - 2014-11-25 11:57 - 196671712 _____ (Kaspersky Lab ZAO) C:\Users\Michelly Boone\Downloads\pur13.0.2.558es-mx.exe

2014-11-25 11:06 - 2014-12-03 14:19 - 00000000 ____D () C:\Users\Todos os Usuários\Kaspersky Lab

2014-11-25 11:06 - 2014-12-03 14:19 - 00000000 ____D () C:\ProgramData\Kaspersky Lab

2014-11-25 11:06 - 2014-11-25 12:43 - 00000000 ____D () C:\Windows\ELAMBKUP

2014-11-25 11:06 - 2014-11-25 12:03 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab

2014-11-25 11:00 - 2014-10-15 05:28 - 00023752 _____ (360安全中心) C:\Windows\SysWOW64\Drivers\efimon.sys

2014-11-25 09:54 - 2014-11-25 09:55 - 12450561 _____ (PC Tools ) C:\Users\Michelly Boone\Downloads\sdsetup (1).exe

2014-11-25 09:52 - 2014-11-25 09:53 - 13000981 _____ (PC Tools ) C:\Users\Michelly Boone\Downloads\sdsetup.exe

2014-11-25 09:32 - 2014-11-25 09:32 - 00035427 _____ () C:\ComboFix.txt

2014-11-25 09:02 - 2011-06-26 03:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-11-25 09:02 - 2010-11-07 14:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-11-25 09:02 - 2009-04-20 01:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00098816 _____ () C:\Windows\sed.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00080412 _____ () C:\Windows\grep.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00068096 _____ () C:\Windows\zip.exe

2014-11-25 09:00 - 2014-11-25 09:32 - 00000000 ____D () C:\Qoobox

2014-11-25 09:00 - 2014-11-25 09:29 - 00000000 ____D () C:\Windows\erdnt

2014-11-25 08:57 - 2014-11-25 08:58 - 05598874 ____R (Swearware) C:\Users\Michelly Boone\Downloads\ComboFix.exe

2014-11-25 08:50 - 2014-12-02 10:55 - 00015501 _____ () C:\Users\Michelly Boone\Downloads\hijackthis.log

2014-11-25 08:49 - 2014-11-25 08:49 - 00388608 _____ (Trend Micro Inc.) C:\Users\Michelly Boone\Downloads\HijackThis.exe

2014-11-25 08:30 - 2014-11-25 08:30 - 00001024 _____ () C:\.rnd

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ___HD () C:\Program Files (x86)\GAS Tecnologia

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\Users\Todos os Usuários\Package Cache

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\ProgramData\Package Cache

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\Program Files (x86)\Diebold

2014-11-25 06:54 - 2014-11-25 06:54 - 00000000 ____D () C:\Users\Todos os Usuários\BitDefender

2014-11-25 06:54 - 2014-11-25 06:54 - 00000000 ____D () C:\ProgramData\BitDefender

2014-11-25 06:37 - 2014-12-01 20:02 - 00004648 _____ () C:\Windows\SysWOW64\LavasoftTcpService.ini

2014-11-25 06:37 - 2014-12-01 20:02 - 00002480 _____ () C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini

2014-11-25 06:37 - 2014-12-01 20:02 - 00002480 _____ () C:\Windows\system32\LavasoftTcpServiceOff.ini

2014-11-25 06:37 - 2014-11-27 13:22 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\Lavasoft

2014-11-25 06:37 - 2014-11-25 06:37 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\LavasoftStatistics

2014-11-25 06:37 - 2014-11-13 18:42 - 00358736 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll

2014-11-25 06:37 - 2014-11-13 18:42 - 00312424 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll

2014-11-25 06:36 - 2014-11-25 06:36 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-11-25 06:34 - 2014-12-03 13:31 - 00002265 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-11-25 06:34 - 2014-11-25 06:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft

2014-11-25 06:34 - 2014-07-10 14:09 - 02084072 _____ (Bitdefender) C:\Windows\system32\bdnc.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 01061776 _____ (BitDefender S.R.L.) C:\Windows\system32\bdsmtpp.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00209984 _____ (BitDefender) C:\Windows\system32\BdFirewallSDK.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00195016 _____ (BitDefender) C:\Windows\system32\httproxy.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00156936 _____ () C:\Windows\system32\bdfwcore.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00155912 _____ (BitDefender S.R.L.) C:\Windows\system32\bdpop3p.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00122928 _____ (BitDefender) C:\Windows\system32\OEMbdpredir.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00096160 _____ (BitDefender) C:\Windows\system32\bdpredir.dll

2014-11-25 06:32 - 2014-11-25 06:32 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf

2014-11-25 06:30 - 2014-11-25 06:30 - 00000000 ____D () C:\Program Files\Lavasoft

2014-11-25 06:27 - 2014-11-25 06:35 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Lavasoft

2014-11-25 06:27 - 2014-11-25 06:27 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:35 - 00000000 ____D () C:\Users\Todos os Usuários\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:35 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:26 - 01707144 _____ () C:\Users\Michelly Boone\Downloads\Adaware_Installer.exe

2014-11-25 05:52 - 2014-11-25 05:52 - 00000156 _____ () C:\Users\Michelly Boone\Documents\ativar-registro.reg

2014-11-25 03:12 - 2014-11-25 03:12 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-11-25 03:11 - 2014-11-25 03:12 - 02347384 _____ (ESET) C:\Users\Michelly Boone\Downloads\esetsmartinstaller_ptg.exe

2014-11-25 02:57 - 2014-11-25 02:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Michelly Boone\Downloads\rkill.com

2014-11-25 01:46 - 2014-12-03 13:31 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-11-25 01:45 - 2014-12-02 19:21 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-11-25 01:45 - 2014-12-02 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-11-25 01:45 - 2014-12-02 19:21 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-11-25 01:45 - 2014-11-25 01:45 - 00000000 ____D () C:\Users\Todos os Usuários\Malwarebytes

2014-11-25 01:45 - 2014-11-25 01:45 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-11-25 01:45 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-11-25 01:45 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-11-25 01:45 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-11-25 01:41 - 2014-11-25 01:43 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Michelly Boone\Downloads\mbam-setup-2.0.3.1025.exe

2014-11-25 01:38 - 2014-11-25 01:38 - 00042396 _____ () C:\Users\Michelly Boone\Downloads\MbrScan.log

2014-11-25 01:38 - 2014-11-25 01:38 - 00000512 _____ () C:\Users\Michelly Boone\Downloads\Dump_Hdd0_DR0.mbr

2014-11-25 01:37 - 2014-11-25 01:37 - 00147456 _____ (Eric_71) C:\Users\Michelly Boone\Downloads\MbrScan.exe

2014-11-24 23:06 - 2014-11-24 23:23 - 166189576 _____ (Kaspersky Lab) C:\Users\Michelly Boone\Downloads\kis2013_13.0.1.4190ES_3831.exe

2014-11-24 22:49 - 2013-10-01 23:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-11-24 22:49 - 2013-10-01 23:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-11-24 22:49 - 2013-10-01 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-11-24 22:49 - 2013-10-01 22:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-11-24 22:49 - 2013-10-01 22:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-11-24 22:49 - 2013-10-01 22:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-11-24 22:49 - 2013-10-01 22:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-11-24 22:49 - 2013-10-01 21:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-11-24 22:49 - 2013-10-01 21:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-11-24 22:49 - 2013-10-01 21:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-11-24 22:49 - 2013-10-01 21:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-11-24 22:49 - 2013-10-01 21:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-11-24 22:49 - 2013-10-01 20:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-11-24 22:49 - 2013-10-01 20:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-11-24 22:49 - 2013-10-01 20:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-11-24 22:49 - 2013-10-01 19:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-11-24 22:47 - 2012-08-23 11:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-11-24 22:47 - 2012-08-23 11:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-11-24 22:47 - 2012-08-23 11:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys

2014-11-24 22:47 - 2012-08-23 08:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-11-24 22:47 - 2012-08-23 07:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-11-24 22:45 - 2014-11-07 16:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-11-24 22:45 - 2014-11-07 16:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-11-24 22:45 - 2014-11-06 01:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-11-24 22:45 - 2014-11-06 01:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-11-24 22:45 - 2014-11-06 01:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-11-24 22:45 - 2014-11-06 00:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-11-24 22:45 - 2014-11-06 00:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-11-24 22:45 - 2014-11-06 00:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-11-24 22:45 - 2014-11-06 00:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-11-24 22:45 - 2014-11-06 00:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-11-24 22:45 - 2014-11-06 00:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-11-24 22:45 - 2014-11-06 00:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-11-24 22:45 - 2014-11-06 00:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-11-24 22:45 - 2014-11-06 00:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-11-24 22:45 - 2014-11-06 00:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-11-24 22:45 - 2014-11-06 00:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-11-24 22:45 - 2014-11-06 00:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-11-24 22:45 - 2014-11-06 00:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-11-24 22:45 - 2014-11-06 00:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-11-24 22:45 - 2014-11-06 00:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-11-24 22:45 - 2014-11-06 00:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-11-24 22:45 - 2014-11-06 00:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-11-24 22:45 - 2014-11-06 00:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-11-24 22:45 - 2014-11-06 00:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-11-24 22:45 - 2014-11-06 00:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-11-24 22:45 - 2014-11-06 00:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-11-24 22:45 - 2014-11-06 00:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-11-24 22:45 - 2014-11-06 00:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-11-24 22:45 - 2014-11-06 00:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-11-24 22:45 - 2014-11-06 00:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-11-24 22:45 - 2014-11-06 00:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-11-24 22:45 - 2014-11-06 00:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-11-24 22:45 - 2014-11-05 23:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-11-24 22:45 - 2014-11-05 23:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-11-24 22:45 - 2014-11-05 23:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-11-24 22:45 - 2014-11-05 23:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-11-24 22:45 - 2014-11-05 23:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-11-24 22:45 - 2014-11-05 23:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-11-24 22:45 - 2014-11-05 23:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-11-24 22:45 - 2014-11-05 23:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-11-24 22:45 - 2014-11-05 23:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-11-24 22:45 - 2014-11-05 23:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-11-24 22:45 - 2014-11-05 23:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-11-24 22:45 - 2014-11-05 23:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-11-24 22:45 - 2014-11-05 23:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-11-24 22:45 - 2014-11-05 23:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-11-24 22:45 - 2014-11-05 23:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-11-24 22:45 - 2014-11-05 23:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-11-24 22:45 - 2014-11-05 23:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-11-24 22:45 - 2014-11-05 23:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-11-24 22:45 - 2014-11-05 23:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-11-24 22:45 - 2014-11-05 23:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-11-24 22:45 - 2014-11-05 22:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-11-24 22:45 - 2014-11-05 22:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-11-24 22:45 - 2014-11-05 22:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-11-24 22:45 - 2014-11-05 22:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-11-24 22:43 - 2014-11-11 00:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-11-24 22:43 - 2014-11-11 00:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2014-11-24 22:43 - 2014-11-10 23:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-11-24 22:43 - 2014-11-10 23:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2014-11-24 22:43 - 2014-11-05 14:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-11-24 22:43 - 2014-11-05 14:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-11-24 22:43 - 2014-11-05 14:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-11-24 22:43 - 2014-10-13 23:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-11-24 22:43 - 2014-10-13 23:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-11-24 22:43 - 2014-10-13 23:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-11-24 22:43 - 2014-10-13 23:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-11-24 22:43 - 2014-10-13 23:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-11-24 22:43 - 2014-10-13 22:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-11-24 22:43 - 2014-10-13 22:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-11-24 22:43 - 2014-10-13 22:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2014-11-24 22:43 - 2014-10-13 22:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-11-24 22:43 - 2014-10-02 23:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-11-24 22:42 - 2014-10-24 22:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-11-24 22:42 - 2014-10-24 22:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-11-24 22:42 - 2014-10-13 23:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-11-24 22:42 - 2014-10-13 22:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-11-24 22:42 - 2014-10-09 21:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-11-24 22:42 - 2014-09-19 06:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-11-24 22:42 - 2014-08-21 03:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-11-24 22:42 - 2014-08-21 03:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-11-24 22:42 - 2014-08-21 03:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-11-24 22:42 - 2014-08-21 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-11-24 22:42 - 2014-08-11 23:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2014-11-24 22:42 - 2014-08-11 22:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2014-11-24 22:40 - 2014-10-17 23:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-11-24 22:40 - 2014-10-17 22:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-11-24 22:40 - 2013-04-09 20:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-11-24 22:40 - 2013-04-02 19:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-11-24 22:25 - 2014-11-24 22:52 - 00459224 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-11-24 21:44 - 2014-11-24 22:35 - 00111856 _____ () C:\Users\Michelly Boone\AppData\Local\GDIPFONTCACHEV1.DAT

2014-11-24 21:44 - 2014-11-24 21:44 - 00347816 _____ (Microsoft Corporation) C:\Users\Michelly Boone\Downloads\MicrosoftFixit.wu.MATSKB.Run.exe

2014-11-24 20:21 - 2014-11-24 20:27 - 00007602 _____ () C:\Users\Michelly Boone\AppData\Local\resmon.resmoncfg

2014-11-22 11:56 - 2014-11-22 12:09 - 87438296 _____ () C:\Users\Michelly Boone\Downloads\Atalaya ultimo bien(1)_xvid.avi

2014-11-22 10:36 - 2014-11-22 10:51 - 131542756 _____ () C:\Users\Michelly Boone\Downloads\Atalaya 22 11.avi

2014-11-18 21:06 - 2014-11-24 22:23 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\Users\Todos os Usuários\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\ProgramData\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YoWindow

2014-11-18 19:09 - 2014-11-20 08:31 - 00000000 ____D () C:\Program Files (x86)\YoWindow

2014-11-18 19:08 - 2014-11-18 19:09 - 12370472 _____ () C:\Users\Michelly Boone\Downloads\yosetup.exe

2014-11-18 12:40 - 2014-11-18 12:40 - 00262144 _____ () C:\Users\Michelly Boone\Desktop\WinMTR.exe

2014-11-12 09:44 - 2014-11-12 09:45 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-11-05 14:53 - 2014-11-05 14:53 - 00001158 _____ () C:\Users\Michelly Boone\Desktop\Format Factory.lnk

2014-11-05 14:53 - 2014-11-05 14:53 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory

2014-11-05 14:52 - 2014-11-05 14:52 - 00000000 ____D () C:\Program Files (x86)\FreeTime



==================== One Month Modified Files and Folders =======



(If an entry is included in the fixlist, the file\folder will be moved.)



2014-12-03 14:56 - 2012-10-14 22:33 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\CrashDumps

2014-12-03 14:55 - 2011-12-23 07:50 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-12-03 14:07 - 2013-07-15 18:44 - 00000000 ____D () C:\Users\Todos os Usuários\GAS Tecnologia

2014-12-03 14:07 - 2013-07-15 18:44 - 00000000 ____D () C:\ProgramData\GAS Tecnologia

2014-12-03 13:38 - 2009-07-14 01:45 - 00027744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-12-03 13:38 - 2009-07-14 01:45 - 00027744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-12-03 13:30 - 2014-02-28 07:24 - 00000000 ___RD () C:\Users\Michelly Boone\Dropbox

2014-12-03 13:30 - 2014-02-28 07:22 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Dropbox

2014-12-03 13:29 - 2014-01-17 10:28 - 00000000 ____D () C:\Users\Public\interapp

2014-12-03 13:29 - 2009-07-14 02:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-12-03 13:28 - 2014-02-13 12:04 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\Windows\SysWOW64\Drivers\gbpndisrd.sys

2014-12-03 13:28 - 2014-02-13 12:04 - 00010266 _____ () C:\Windows\SysWOW64\Drivers\ndisrd.cat

2014-12-03 13:28 - 2014-02-13 12:04 - 00001402 _____ () C:\Windows\SysWOW64\Drivers\gas.cer

2014-12-03 13:24 - 2012-04-26 09:45 - 00000000 ____D () C:\Users\Michelly Boone

2014-12-03 13:16 - 2012-04-28 13:43 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Skype

2014-12-03 11:21 - 2011-12-23 07:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-12-03 10:29 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\tracing

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ____D () C:\Users\Todos os Usuários\Skype

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ____D () C:\ProgramData\Skype

2014-12-01 22:56 - 2013-06-07 14:46 - 00000000 ____D () C:\Users\Todos os Usuários\AVAST Software

2014-12-01 22:56 - 2013-06-07 14:46 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-12-01 22:18 - 2013-02-04 17:19 - 00000000 ____D () C:\Windows\Minidump

2014-12-01 21:35 - 2012-04-28 13:55 - 00000000 ____D () C:\Users\Michelly Boone\Tracing

2014-12-01 21:12 - 2013-11-27 22:29 - 00003842 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-01 21:12 - 2013-07-13 21:56 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-01 21:12 - 2013-07-13 21:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-01 21:09 - 2014-02-13 12:04 - 00000000 ____D () C:\Users\Todos os Usuários\GbPlugin

2014-12-01 21:09 - 2014-02-13 12:04 - 00000000 ____D () C:\ProgramData\GbPlugin

2014-11-27 13:22 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-11-27 13:22 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\security

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\Users\Todos os Usuários\HP

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\ProgramData\HP

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\Program Files (x86)\HP

2014-11-27 13:21 - 2012-04-28 14:45 - 00000000 __RHD () C:\MSOCache

2014-11-27 13:21 - 2011-12-23 07:51 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-11-27 13:21 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\registration

2014-11-27 08:59 - 2014-01-06 12:08 - 00068608 ___SH () C:\Users\Michelly Boone\Documents\Thumbs.db

2014-11-25 12:42 - 2013-11-11 22:55 - 00628288 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2014-11-25 12:42 - 2013-11-11 22:55 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2014-11-25 12:42 - 2013-11-11 22:55 - 00092768 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2014-11-25 12:42 - 2012-08-02 15:09 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2014-11-25 11:05 - 2014-03-18 19:23 - 00000000 ____D () C:\Program Files (x86)\PSafe

2014-11-25 09:32 - 2009-07-14 00:20 - 00000000 __RHD () C:\Users\Default

2014-11-25 09:22 - 2009-07-13 23:34 - 00000215 _____ () C:\Windows\system.ini

2014-11-25 09:05 - 2014-02-13 09:17 - 00000000 ____D () C:\Users\Todos os Usuários\Temp

2014-11-25 09:05 - 2014-02-13 09:17 - 00000000 ____D () C:\ProgramData\Temp

2014-11-25 05:52 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\LiveKernelReports

2014-11-25 02:00 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\Offline Web Pages

2014-11-24 22:53 - 2009-07-14 00:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-24 22:50 - 2014-05-06 19:14 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-11-24 22:50 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-11-24 22:16 - 2012-04-30 00:30 - 00000000 ____D () C:\Users\Todos os Usuários\Microsoft Help

2014-11-24 22:16 - 2012-04-30 00:30 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-11-24 22:13 - 2011-12-23 08:01 - 01610696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-11-24 22:13 - 2011-04-12 10:40 - 00709116 _____ () C:\Windows\system32\prfh0416.dat

2014-11-24 22:13 - 2011-04-12 10:40 - 00149296 _____ () C:\Windows\system32\prfc0416.dat

2014-11-24 22:13 - 2009-07-14 02:13 - 01610696 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-11-24 22:12 - 2013-12-15 14:46 - 00000000 ____D () C:\Windows\system32\MRT

2014-11-24 22:07 - 2012-04-28 14:53 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-11-18 19:16 - 2013-11-18 23:44 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Sony

2014-11-16 05:55 - 2014-02-28 07:23 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-11-15 12:05 - 2013-06-07 20:49 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\vlc

2014-11-12 09:48 - 2012-04-26 09:48 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Adobe

2014-11-12 09:44 - 2012-04-28 13:41 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-11-12 09:44 - 2011-12-23 08:14 - 00000000 ____D () C:\Users\Todos os Usuários\Adobe

2014-11-12 09:44 - 2011-12-23 08:14 - 00000000 ____D () C:\ProgramData\Adobe

2014-11-11 18:07 - 2012-11-11 14:07 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Ixia

2014-11-10 14:27 - 2009-07-14 02:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-11-10 14:27 - 2009-07-14 02:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU(31).TXT

2014-11-08 05:58 - 2014-02-13 12:04 - 00000000 ____D () C:\Program Files (x86)\GbPlugin

2014-11-06 10:18 - 2009-07-14 02:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-11-05 14:55 - 2013-11-18 22:45 - 00000000 ____D () C:\Users\Michelly Boone\Documents\FFOutput

2014-11-05 14:53 - 2014-06-03 12:38 - 00000000 __SHD () C:\Users\Todos os Usuários\360Quarant

2014-11-05 14:53 - 2014-06-03 12:38 - 00000000 __SHD () C:\ProgramData\360Quarant

2014-11-05 14:53 - 2014-05-30 12:41 - 00000000 ____D () C:\$360Section

2014-11-04 14:30 - 2010-11-21 00:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe



Files to move or delete:

====================

C:\Program Files\Windows Sidebar\sidebar.exe





Some content of TEMP:

====================

C:\Users\Michelly Boone\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplk50ee.dll

C:\Users\Michelly Boone\AppData\Local\Temp\Quarantine.exe

C:\Users\Michelly Boone\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Michelly Boone\AppData\Local\Temp\sqlite3.dll





==================== Bamital & volsnap Check =================



(There is no automatic fix for files that do not pass verification.)



C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed





LastRegBack: 2014-11-25 00:57



==================== End Of Log ============================



Relatório Addition.txt



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014

Ran by Michelly Boone (administrator) on MICHELLYBOONE on 03-12-2014 15:06:17

Running from C:\Users\Michelly Boone\Desktop

Loaded Profile: Michelly Boone (Available profiles: Michelly Boone)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Português (Brasil)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: <a href="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/" target="_blank">http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/</a>



==================== Processes (Whitelisted) =================



(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)



(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe

(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

(Positivo Informática S.A) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe

(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe

(OEM) C:\Program Files (x86)\OEM\LIVE! OSD 1.35\osd.exe

(Dropbox, Inc.) C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Quartzo Desenvolvimento de Software  Ltda.) C:\Program Files (x86)\qubnfe\qubnfe.exe

(GAS Tecnologia LTDA) C:\Program Files (x86)\Diebold\Warsaw\core.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(Positivo Informática S.A) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryPower.exe

(GAS Tecnologia LTDA) C:\Program Files (x86)\Diebold\Warsaw\core.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

() C:\Program Files (x86)\Soft Organizer\SoftOrganizerAgent.exe

(Positivo Informática S.A.) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Backup\PositivoSmartBackup.exe

(Positivo Informática S.A.) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Áudio\AudioPower.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareDesktop.exe

(Thisisu) C:\Users\Michelly Boone\Downloads\JRT.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\plugin-nm-server.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Users\Michelly Boone\Downloads\setup_11.0.3.8.x01_2014_12_03_09_36.exe

() C:\Users\Michelly Boone\AppData\Local\Temp\RarSFX0\3738614.exe

(Kaspersky Lab) C:\Users\Michelly Boone\AppData\Local\Temp\2457729\3738614.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\DeviceDisplayObjectProvider.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe





==================== Registry (Whitelisted) ==================



(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)



HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-18] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2392872 2010-10-14] (Synaptics Incorporated)

HKLM\...\Run: [StartUpManagerPositivo] => C:\Program Files\Positivo Informática\Gerenciador de Inicialização Positivo\ManagerWindows.exe [171520 2012-03-01] ()

HKLM\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-21] (Microsoft Corporation)

HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe [8925504 2014-10-15] ()

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740888 2013-04-24] (Sony Corporation)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [qubnfe] => C:\Program Files (x86)\qubnfe\qubnfe.exe [1208632 2012-08-01] (Quartzo Desenvolvimento de Software  Ltda.)

HKLM-x32\...\Run: [Diebold - Warsaw] => C:\Program Files (x86)\Diebold\Warsaw\core.exe [518968 2014-07-12] (GAS Tecnologia LTDA)

HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-11-11] (Kaspersky Lab ZAO)

HKLM-x32\...\RunOnce: [GrpConv] => grpconv -o

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\ GbPluginBb-x32: C:\Program Files (x86)\GbPlugin\gbieh.dll (Banco do Brasil)

Winlogon\Notify\ GbPluginUni-x32: C:\Program Files (x86)\GbPlugin\gbiehUni.dll (Banco Itaú Unibanco)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Run: [HP Deskjet 3510 series (NET)] => C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1305408 2014-11-13] (Lavasoft)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OSD.lnk

ShortcutTarget: OSD.lnk -> C:\Windows\Installer\{73289228-1853-4623-982A-EB17FF0270CA}\_6C478F4E8D2A2AC0FD0413.exe ()

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk

ShortcutTarget: Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk -> C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_41748424.lnk

ShortcutTarget: _uninst_41748424.lnk -> C:\Users\Michelly Boone\AppData\Local\Temp\_uninst_41748424.bat ()

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll (Kaspersky Lab ZAO)

ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll (Kaspersky Lab ZAO)

BootExecute: autocheck autochk * bddel.exe



==================== Internet (Whitelisted) ====================



(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)



HKU\S-1-5-21-597722200-2002237864-835144990-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch</a>

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = <a href="http://positivo.br.msn.com?pc=MAPT" target="_blank">http://positivo.br.msn.com?pc=MAPT</a>

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL = <a href="http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox" target="_blank">http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox</a>

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL = <a href="http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox" target="_blank">http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox</a>

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL =

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL =

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ ´Ñ;áa´[¦†8 º~RÙxœòÜ8'£-)xä URL =

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Auxiliar de Conexão de Conta da Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\Program Files (x86)\GbPlugin\gbieh.dll (Banco do Brasil)

BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files (x86)\GbPlugin\gbiehuni.dll (Banco Itaú Unibanco)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Toolbar: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> No Name - {742E70CF-7770-412D-86CB-230B322E807C} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll [1513528 2013-11-22] (Banco Itaú Unibanco)

ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll [1754664 2014-07-31] (Banco do Brasil)

Tcpip\Parameters: [DhcpNameServer] 200.85.32.2 200.85.32.3



FireFox:

========

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: <a href="/comunidade/members/user.636732">@google.com</a>/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/bb -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll (GAS Tecnologia)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/cef -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll (GAS Tecnologia)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/uni -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_uni.dll (GAS Tecnologia)

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]url_advisor@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]url_advisor@kaspersky.com[/EMAIL]

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]url_advisor@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL]

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]content_blocker@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]content_blocker@kaspersky.com[/EMAIL]

FF Extension: Gevaarlijke websiteblokkering - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]content_blocker@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]anti_banner@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]anti_banner@kaspersky.com[/EMAIL]

FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]anti_banner@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]online_banking@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]online_banking@kaspersky.com[/EMAIL]

FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]online_banking@kaspersky.com[/EMAIL] [2014-11-25]

FF HKU\.DEFAULT\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] - C:\ProgramData\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension

FF HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Firefox\Extensions: [{58bd07eb-0ee0-4df0-8121-dc9b693373df}] - C:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension



Chrome:

=======

CHR HomePage: Default -> hxxp://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A

CHR StartupUrls: Default -> "hxxp://<a href="'http://www.jw.org/es'" target="_blank">www.jw.org/es</a>", "<a href="'https://bay173.mail.live.com/default.aspx?id=64855%2c64855&mkt=pt-BR&form=MWGELB&publ=MSNTOOL&crea=TEXT_CIMS015888_Hotmail_PT-BR_0x0_33485#fid=fl91BAlyyxDUuJCJbBzPF7zQ2'" target="_blank">https://bay173.mail.live.com/default.aspx?id=64855,64855&mkt=pt-BR&form=MWGELB&publ=MSNTOOL&crea=TEXT_CIMS015888_Hotmail_PT-BR_0x0_33485#fid=fl91BAlyyxDUuJCJbBzPF7zQ2</a>"

CHR DefaultSearchKeyword: Default -> start.iminent.com

CHR DefaultSearchURL: Default -> <a href="http://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A&ref=toolbox&q={searchTerms}" target="_blank">http://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A&ref=toolbox&q={searchTerms}</a>

CHR DefaultSuggestURL: Default ->

CHR Profile: C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-05]

CHR Extension: (Google Drive) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-26]

CHR Extension: (YouTube) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-26]

CHR Extension: (Adblock Plus) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-28]

CHR Extension: (Pesquisa do Google) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-26]

CHR Extension: (Kaspersky URL Advisor) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-11-25]

CHR Extension: (GBBD Guardião - Itaú 30 horas) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmpojlddncminmkddkpoegdjhojjipg [2014-11-21]

CHR Extension: (Proteção Kaspersky) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2014-11-25]

CHR Extension: (Google Wallet) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjbodopomfddehlalfilheomcahbpei [2013-11-21]

CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2014-07-06]

CHR Extension: (Gmail) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-26]

CHR Extension: (Anti-Banner) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-11-25]

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2013-11-11]

CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - <a href="https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh" target="_blank">https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh</a> [2013-11-11]

CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2013-11-11]



==================== Services (Whitelisted) =================



(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)



R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)

S4 AppManagerService; C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Experience\PositivoAplicativosService.exe [65304 2013-10-10] (Positivo Informática S.A.)

R2 avp; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-11-11] (Kaspersky Lab ZAO)

R2 BatteryManagerSrv; C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe [45056 2012-03-20] (Positivo Informática S.A) [File not signed]

S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

S3 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [818888 2013-09-25] (Infowatch)

R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [546104 2014-07-21] (GAS Tecnologia)

S3 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]

S2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe [707888 2014-10-15] ()

S2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [1351512 2014-11-13] (Lavasoft Limited)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-04-24] (Sony Corporation)

S2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [15208 2014-11-13] ()

R2 Warsaw Technology; C:\Program Files (x86)\Diebold\Warsaw\core.exe [518968 2014-07-12] (GAS Tecnologia LTDA)



==================== Drivers (Whitelisted) ====================



(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)



R0 41748424; C:\Windows\System32\DRIVERS\41748424.sys [458336 2014-12-03] (Kaspersky Lab ZAO)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)

R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2014-08-21] (BitDefender)

R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2014-08-21] (BitDefender)

S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2014-08-21] (BitDefender)

R1 BdfNdisf; c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [93160 2014-07-10] (BitDefender LLC)

R1 bdfwfpf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [102992 2014-07-10] (BitDefender LLC)

S3 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [76096 2013-08-08] (Baidu, Inc.)

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)

R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)

S0 GbpKm; C:\Windows\SysWOW64\drivers\GbpKm.sys [49536 2013-05-08] (GAS Tecnologia)

R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.0.56\gzflt.sys [150256 2014-07-10] (BitDefender LLC)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-11-25] (Kaspersky Lab ZAO)

U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-11-25] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628288 2014-11-25] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-11-25] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-11-11] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-11-11] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-11-11] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-11-11] (Kaspersky Lab ZAO)

R2 LiveGpdKBFilter; C:\Windows\System32\Drivers\LiveGpdKBFilter.sys [11168 2010-01-21] (Windows (R) Win 7 DDK provider) [File not signed]

R2 LiveIO; C:\Windows\System32\Drivers\LiveIO.sys [14240 2010-01-21] () [File not signed]

R3 Livekbc; C:\Windows\System32\Drivers\Livekbc.sys [11680 2010-01-21] (Systems Internals) [File not signed]

R3 Livemouclass; C:\Windows\System32\Drivers\Livemouclass.sys [11168 2010-01-21] (Systems Internals) [File not signed]

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

R3 PositivoAudioDriverWdm; C:\Windows\System32\DRIVERS\pad.sys [69520 2011-08-11] (Positivo Informática S.A.)

S3 RSUSBSTOR; C:\Windows\System32\Drivers\RtsUStor.sys [225280 2009-09-01] (Realtek Semiconductor Corp.) [File not signed]

S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-01] (Realtek Semiconductor Corp.) [File not signed]

S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [389240 2014-07-10] (BitDefender S.R.L.)

S1 BAPIDRV; system32\DRIVERS\BAPIDRV64.sys [X]

S3 BTMCOM; \SystemRoot\System32\Drivers\btmcom.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]

U2 wuaserv; No ImagePath



==================== NetSvcs (Whitelisted) ===================



(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)





==================== One Month Created Files and Folders ========



(If an entry is included in the fixlist, the file\folder will be moved.)



2014-12-03 14:54 - 2014-12-03 14:54 - 00003028 _____ () C:\Windows\System32\Tasks\{9D4A5D2F-E370-4D01-9DCD-C54FA36EE9D8}

2014-12-03 14:53 - 2014-12-03 14:53 - 00003028 _____ () C:\Windows\System32\Tasks\{64FD857D-6973-4B84-AB8E-DA5999222384}

2014-12-03 14:51 - 2014-12-03 14:51 - 00000000 ____D () C:\Users\Michelly Boone\Desktop\11075872_REDE_WIN7_x64_00

2014-12-03 14:50 - 2014-12-03 14:50 - 00003028 _____ () C:\Windows\System32\Tasks\{A2BECC90-8B37-4DD4-8F9A-831307A59721}

2014-12-03 14:40 - 2014-12-03 14:40 - 05800448 _____ () C:\Users\Michelly Boone\Downloads\11075872_REDE_WIN7_X64_00 (1).exe

2014-12-03 14:19 - 2014-12-03 09:35 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\41748424.sys

2014-12-03 13:40 - 2014-12-03 13:40 - 00011656 _____ () C:\Users\Michelly Boone\Desktop\JRT.txt

2014-12-03 13:37 - 2014-12-03 13:37 - 00000000 ____D () C:\Windows\ERUNT

2014-12-03 13:33 - 2014-12-03 13:33 - 01707646 _____ (Thisisu) C:\Users\Michelly Boone\Downloads\JRT.exe

2014-12-03 13:04 - 2014-12-03 13:24 - 00000000 ____D () C:\AdwCleaner

2014-12-03 13:03 - 2014-12-03 13:03 - 00000210 _____ () C:\Users\Michelly Boone\Mensagens de erro.txt

2014-12-03 13:00 - 2014-12-03 13:01 - 02154496 _____ () C:\Users\Michelly Boone\Downloads\adwcleaner_4.103.exe

2014-12-03 10:54 - 2014-12-03 10:54 - 00000000 ____D () C:\Users\Todos os Usuários\Dell

2014-12-03 10:54 - 2014-12-03 10:54 - 00000000 ____D () C:\ProgramData\Dell

2014-12-03 10:51 - 2014-12-03 10:53 - 15712632 _____ (Dell Inc.) C:\Users\Michelly Boone\Downloads\dell_n1e1215f39b1d.exe

2014-12-03 10:45 - 2014-12-03 11:27 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Device Doctor

2014-12-03 10:45 - 2014-12-03 10:45 - 00001979 _____ () C:\Users\Michelly Boone\Desktop\Speed Up This PC.lnk

2014-12-03 10:45 - 2014-12-03 10:45 - 00001022 _____ () C:\Users\Michelly Boone\Desktop\Device Doctor.lnk

2014-12-03 10:45 - 2014-12-03 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Device Doctor

2014-12-03 10:45 - 2014-12-03 10:45 - 00000000 ____D () C:\Program Files (x86)\Device Doctor

2014-12-03 10:43 - 2014-12-03 10:43 - 01481976 _____ (Device Doctor Software Inc. ) C:\Users\Michelly Boone\Downloads\DeviceDoctor_Bundle.exe

2014-12-03 10:28 - 2014-12-03 13:29 - 00065536 _____ () C:\Windows\system32\Ikeext.etl

2014-12-03 08:23 - 2014-12-03 08:34 - 165181728 _____ () C:\Users\Michelly Boone\Downloads\setup_11.0.3.8.x01_2014_12_03_09_36.exe

2014-12-03 01:51 - 2014-12-03 01:51 - 00001421 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 14 Compact Mode.lnk

2014-12-03 01:51 - 2014-12-03 01:51 - 00001259 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 14.lnk

2014-12-03 01:51 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo

2014-12-03 01:26 - 2014-12-03 01:26 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Ashampoo Burning Studio FREE

2014-12-03 01:22 - 2014-12-03 01:51 - 00001234 _____ () C:\Users\Public\Desktop\CleverReach.com.lnk

2014-12-03 01:22 - 2014-12-03 01:51 - 00000214 _____ () C:\Users\Public\Desktop\Your Software Deals.url

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\ashampoo

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\Users\Todos os Usuários\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\Program Files (x86)\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:22 - 00001263 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk

2014-12-03 01:19 - 2014-12-03 01:21 - 33551464 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Michelly Boone\Downloads\ashampoo_burning_studio_free_1.14.5_sm.exe

2014-12-03 00:54 - 2014-12-03 00:54 - 00182179 _____ () C:\Users\Michelly Boone\Downloads\burncdcc.zip

2014-12-03 00:35 - 2014-12-03 05:48 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48DB2CCA.sys

2014-12-03 00:32 - 2014-12-03 00:33 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\kav_rescue_10

2014-12-03 00:29 - 2014-12-03 00:29 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\Kaspersky Rescue2Usb

2014-12-03 00:27 - 2014-12-03 00:27 - 00387584 _____ () C:\Users\Michelly Boone\Downloads\rescue2usb.exe

2014-12-03 00:08 - 2014-12-03 00:27 - 309819392 _____ () C:\Users\Michelly Boone\Downloads\kav_rescue_10.iso

2014-12-02 19:14 - 2014-12-02 19:14 - 00003208 _____ () C:\Windows\System32\Tasks\{7EC6DFFA-08E6-4A33-8972-1D5A604B37D0}

2014-12-02 12:36 - 2014-12-02 12:37 - 00051470 _____ () C:\Users\Michelly Boone\Desktop\Addition.txt

2014-12-02 12:35 - 2014-12-03 15:06 - 00031821 _____ () C:\Users\Michelly Boone\Desktop\FRST.txt

2014-12-02 12:34 - 2014-12-03 15:06 - 00000000 ____D () C:\FRST

2014-12-02 12:33 - 2014-12-02 12:33 - 02117120 _____ (Farbar) C:\Users\Michelly Boone\Desktop\FRST64.exe

2014-12-02 11:27 - 2014-12-02 11:27 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Kaspersky Disk Rescue

2014-12-02 11:26 - 2014-12-02 11:26 - 308682752 _____ () C:\Users\Michelly Boone\Documents\Kaspersky Disk Rescue.iso

2014-12-01 23:55 - 2014-12-01 23:55 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\backups

2014-12-01 23:28 - 2014-12-01 23:28 - 00388608 _____ (Trend Micro Inc.) C:\Users\Michelly Boone\Downloads\HiJackThis (1).exe

2014-12-01 23:14 - 2014-12-01 23:22 - 186654544 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup (1).exe

2014-12-01 22:52 - 2014-12-01 22:52 - 00002992 _____ () C:\Windows\System32\Tasks\{6ABCB2DA-F359-4B3C-B47A-7716CEFE125B}

2014-12-01 22:18 - 2014-12-01 22:18 - 00290704 _____ () C:\Windows\Minidump\120114-30217-01.dmp

2014-12-01 22:17 - 2014-12-03 13:28 - 00486092 _____ () C:\Windows\PFRO.log

2014-12-01 22:17 - 2014-12-01 22:17 - 599877401 _____ () C:\Windows\MEMORY.DMP

2014-12-01 21:48 - 2014-12-03 13:33 - 00117100 _____ () C:\Windows\WindowsUpdate.log

2014-12-01 21:44 - 2014-12-03 13:28 - 00001176 _____ () C:\Windows\setupact.log

2014-12-01 21:44 - 2014-12-01 21:44 - 00000000 _____ () C:\Windows\setuperr.log

2014-12-01 21:39 - 2014-12-01 21:39 - 00016254 _____ () C:\Users\Michelly Boone\Documents\cc_20141201_213920.reg

2014-12-01 21:12 - 2014-12-01 21:44 - 00000902 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-01 21:00 - 2014-12-01 21:02 - 05037464 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avastclear.exe

2014-12-01 20:58 - 2014-12-01 20:58 - 00000280 _____ () C:\Windows\system32\2014-12-01-23-58-47.018-aswFe.exe-5224.log

2014-12-01 20:55 - 2014-12-01 20:56 - 04001367 _____ () C:\Users\Michelly Boone\Downloads\ServicesRepair.exe

2014-12-01 20:16 - 2014-12-01 20:16 - 00000247 _____ () C:\Windows\system32\2014-12-01-23-16-53.078-aswFe.exe-3908.log

2014-12-01 20:11 - 2014-12-01 20:16 - 00000247 _____ () C:\Windows\system32\2014-12-01-23-11-00.074-aswFe.exe-7596.log

2014-12-01 20:10 - 2014-12-01 20:10 - 00000197 _____ () C:\Windows\system32\2014-12-01-23-10-56.005-AvastVBoxSVC.exe-8256.log

2014-12-01 19:57 - 2014-12-01 19:57 - 00001261 _____ () C:\Windows\unins000.dat

2014-12-01 19:57 - 2014-12-01 19:56 - 01187697 _____ () C:\Windows\unins000.exe

2014-12-01 19:56 - 2014-12-01 19:56 - 01241367 _____ () C:\Users\Michelly Boone\Downloads\Atv Avast P. 2014 by owinner.net.rar

2014-12-01 19:56 - 2014-12-01 19:56 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\Atv Avast P. 2014 by owinner.net

2014-12-01 19:42 - 2014-12-01 19:42 - 04978536 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup_online.exe

2014-12-01 19:37 - 2014-12-01 19:37 - 00002992 _____ () C:\Windows\System32\Tasks\{4428844F-1BE9-4C11-B0E1-84E47071EB9F}

2014-12-01 19:37 - 2014-12-01 19:37 - 00002992 _____ () C:\Windows\System32\Tasks\{313301DC-B1EA-45A4-BA62-9FE981A2919D}

2014-12-01 19:36 - 2014-12-01 19:36 - 00002992 _____ () C:\Windows\System32\Tasks\{9E66C78F-CE9F-42F4-9A82-61F87D769002}

2014-12-01 19:35 - 2014-12-01 19:35 - 00002992 _____ () C:\Windows\System32\Tasks\{ADBD9797-50F7-42F7-9317-67FB0D04672E}

2014-12-01 19:24 - 2014-12-01 19:24 - 00000000 ____D () C:\Windows\SysWOW64\vbox

2014-12-01 19:24 - 2014-12-01 19:24 - 00000000 ____D () C:\Windows\system32\vbox

2014-12-01 18:58 - 2014-12-01 19:06 - 186654544 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup.exe

2014-11-30 06:35 - 2014-11-30 06:35 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\144355D9.sys

2014-11-30 06:26 - 2014-11-30 06:26 - 00089088 _____ () C:\Users\Michelly Boone\Downloads\Apontamento de horas_Novembro_2014_6 hrs_15 min.xls

2014-11-27 13:31 - 2014-08-28 23:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-11-27 13:31 - 2014-05-08 06:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-11-27 13:30 - 2014-09-04 23:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-11-27 13:30 - 2014-09-04 22:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-11-26 18:06 - 2014-11-26 18:09 - 68794592 _____ () C:\Users\Michelly Boone\Downloads\w_xvid.avi

2014-11-26 17:47 - 2014-11-26 17:47 - 00000000 ____D () C:\Program Files\Intel

2014-11-26 17:46 - 2014-11-27 09:45 - 00000000 ____D () C:\Driver_allOS

2014-11-26 17:36 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Realtek WLAN Driver

2014-11-26 16:59 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Driver Checker

2014-11-26 16:57 - 2014-11-26 16:57 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Opera Software

2014-11-26 16:57 - 2014-11-26 16:57 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\Opera Software

2014-11-26 16:55 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Opera

2014-11-26 16:12 - 2014-11-26 16:12 - 00178254 _____ () C:\Users\Michelly Boone\Downloads\DRP14 (1).torrent

2014-11-26 16:07 - 2014-11-27 09:14 - 00000048 _____ () C:\RB.rdat

2014-11-26 16:07 - 2014-11-27 09:14 - 00000048 _____ () C:\License_Time.rdat

2014-11-26 16:03 - 2014-11-26 16:03 - 00178254 _____ () C:\Users\Michelly Boone\Downloads\DRP14.torrent

2014-11-26 15:55 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\DriverPackSolution

2014-11-26 15:37 - 2014-11-27 13:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverPack Solution Lite

2014-11-26 15:37 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files\DriverPack Solution Lite 13

2014-11-26 15:17 - 2014-11-26 15:17 - 00000000 ____D () C:\Users\Michelly Boone\Desktop\realtek_rtl_gigabit_and_fast_ethernet_nic_driver

2014-11-26 15:16 - 2014-11-26 15:16 - 02468743 _____ () C:\Users\Michelly Boone\Desktop\realtek_rtl_gigabit_and_fast_ethernet_nic_driver.zip

2014-11-26 09:43 - 2014-11-26 09:43 - 00001186 _____ () C:\Users\Michelly Boone\Desktop\proba.txt

2014-11-25 22:44 - 2014-11-25 22:44 - 01430885 _____ () C:\Users\Michelly Boone\Downloads\Tr Formulaires.zip

2014-11-25 17:24 - 2014-11-25 17:24 - 00000000 __SHD () C:\Users\Michelly Boone\AppData\Local\EmieBrowserModeList

2014-11-25 12:07 - 2014-11-25 12:49 - 00002176 _____ () C:\Users\Michelly Boone\Desktop\Safe Money.lnk

2014-11-25 12:03 - 2014-11-25 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky PURE 3.0

2014-11-25 12:03 - 2014-11-25 12:02 - 00001038 _____ () C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk

2014-11-25 12:02 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys

2014-11-25 12:02 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys

2014-11-25 11:48 - 2014-11-25 11:57 - 196671712 _____ (Kaspersky Lab ZAO) C:\Users\Michelly Boone\Downloads\pur13.0.2.558es-mx.exe

2014-11-25 11:06 - 2014-12-03 14:19 - 00000000 ____D () C:\Users\Todos os Usuários\Kaspersky Lab

2014-11-25 11:06 - 2014-12-03 14:19 - 00000000 ____D () C:\ProgramData\Kaspersky Lab

2014-11-25 11:06 - 2014-11-25 12:43 - 00000000 ____D () C:\Windows\ELAMBKUP

2014-11-25 11:06 - 2014-11-25 12:03 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab

2014-11-25 11:00 - 2014-10-15 05:28 - 00023752 _____ (360安全中心) C:\Windows\SysWOW64\Drivers\efimon.sys

2014-11-25 09:54 - 2014-11-25 09:55 - 12450561 _____ (PC Tools ) C:\Users\Michelly Boone\Downloads\sdsetup (1).exe

2014-11-25 09:52 - 2014-11-25 09:53 - 13000981 _____ (PC Tools ) C:\Users\Michelly Boone\Downloads\sdsetup.exe

2014-11-25 09:32 - 2014-11-25 09:32 - 00035427 _____ () C:\ComboFix.txt

2014-11-25 09:02 - 2011-06-26 03:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-11-25 09:02 - 2010-11-07 14:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-11-25 09:02 - 2009-04-20 01:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00098816 _____ () C:\Windows\sed.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00080412 _____ () C:\Windows\grep.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00068096 _____ () C:\Windows\zip.exe

2014-11-25 09:00 - 2014-11-25 09:32 - 00000000 ____D () C:\Qoobox

2014-11-25 09:00 - 2014-11-25 09:29 - 00000000 ____D () C:\Windows\erdnt

2014-11-25 08:57 - 2014-11-25 08:58 - 05598874 ____R (Swearware) C:\Users\Michelly Boone\Downloads\ComboFix.exe

2014-11-25 08:50 - 2014-12-02 10:55 - 00015501 _____ () C:\Users\Michelly Boone\Downloads\hijackthis.log

2014-11-25 08:49 - 2014-11-25 08:49 - 00388608 _____ (Trend Micro Inc.) C:\Users\Michelly Boone\Downloads\HijackThis.exe

2014-11-25 08:30 - 2014-11-25 08:30 - 00001024 _____ () C:\.rnd

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ___HD () C:\Program Files (x86)\GAS Tecnologia

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\Users\Todos os Usuários\Package Cache

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\ProgramData\Package Cache

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\Program Files (x86)\Diebold

2014-11-25 06:54 - 2014-11-25 06:54 - 00000000 ____D () C:\Users\Todos os Usuários\BitDefender

2014-11-25 06:54 - 2014-11-25 06:54 - 00000000 ____D () C:\ProgramData\BitDefender

2014-11-25 06:37 - 2014-12-01 20:02 - 00004648 _____ () C:\Windows\SysWOW64\LavasoftTcpService.ini

2014-11-25 06:37 - 2014-12-01 20:02 - 00002480 _____ () C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini

2014-11-25 06:37 - 2014-12-01 20:02 - 00002480 _____ () C:\Windows\system32\LavasoftTcpServiceOff.ini

2014-11-25 06:37 - 2014-11-27 13:22 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\Lavasoft

2014-11-25 06:37 - 2014-11-25 06:37 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\LavasoftStatistics

2014-11-25 06:37 - 2014-11-13 18:42 - 00358736 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll

2014-11-25 06:37 - 2014-11-13 18:42 - 00312424 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll

2014-11-25 06:36 - 2014-11-25 06:36 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-11-25 06:34 - 2014-12-03 13:31 - 00002265 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-11-25 06:34 - 2014-11-25 06:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft

2014-11-25 06:34 - 2014-07-10 14:09 - 02084072 _____ (Bitdefender) C:\Windows\system32\bdnc.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 01061776 _____ (BitDefender S.R.L.) C:\Windows\system32\bdsmtpp.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00209984 _____ (BitDefender) C:\Windows\system32\BdFirewallSDK.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00195016 _____ (BitDefender) C:\Windows\system32\httproxy.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00156936 _____ () C:\Windows\system32\bdfwcore.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00155912 _____ (BitDefender S.R.L.) C:\Windows\system32\bdpop3p.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00122928 _____ (BitDefender) C:\Windows\system32\OEMbdpredir.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00096160 _____ (BitDefender) C:\Windows\system32\bdpredir.dll

2014-11-25 06:32 - 2014-11-25 06:32 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf

2014-11-25 06:30 - 2014-11-25 06:30 - 00000000 ____D () C:\Program Files\Lavasoft

2014-11-25 06:27 - 2014-11-25 06:35 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Lavasoft

2014-11-25 06:27 - 2014-11-25 06:27 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:35 - 00000000 ____D () C:\Users\Todos os Usuários\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:35 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:26 - 01707144 _____ () C:\Users\Michelly Boone\Downloads\Adaware_Installer.exe

2014-11-25 05:52 - 2014-11-25 05:52 - 00000156 _____ () C:\Users\Michelly Boone\Documents\ativar-registro.reg

2014-11-25 03:12 - 2014-11-25 03:12 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-11-25 03:11 - 2014-11-25 03:12 - 02347384 _____ (ESET) C:\Users\Michelly Boone\Downloads\esetsmartinstaller_ptg.exe

2014-11-25 02:57 - 2014-11-25 02:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Michelly Boone\Downloads\rkill.com

2014-11-25 01:46 - 2014-12-03 13:31 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-11-25 01:45 - 2014-12-02 19:21 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-11-25 01:45 - 2014-12-02 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-11-25 01:45 - 2014-12-02 19:21 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-11-25 01:45 - 2014-11-25 01:45 - 00000000 ____D () C:\Users\Todos os Usuários\Malwarebytes

2014-11-25 01:45 - 2014-11-25 01:45 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-11-25 01:45 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-11-25 01:45 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-11-25 01:45 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-11-25 01:41 - 2014-11-25 01:43 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Michelly Boone\Downloads\mbam-setup-2.0.3.1025.exe

2014-11-25 01:38 - 2014-11-25 01:38 - 00042396 _____ () C:\Users\Michelly Boone\Downloads\MbrScan.log

2014-11-25 01:38 - 2014-11-25 01:38 - 00000512 _____ () C:\Users\Michelly Boone\Downloads\Dump_Hdd0_DR0.mbr

2014-11-25 01:37 - 2014-11-25 01:37 - 00147456 _____ (Eric_71) C:\Users\Michelly Boone\Downloads\MbrScan.exe

2014-11-24 23:06 - 2014-11-24 23:23 - 166189576 _____ (Kaspersky Lab) C:\Users\Michelly Boone\Downloads\kis2013_13.0.1.4190ES_3831.exe

2014-11-24 22:49 - 2013-10-01 23:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-11-24 22:49 - 2013-10-01 23:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-11-24 22:49 - 2013-10-01 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-11-24 22:49 - 2013-10-01 22:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-11-24 22:49 - 2013-10-01 22:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-11-24 22:49 - 2013-10-01 22:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-11-24 22:49 - 2013-10-01 22:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-11-24 22:49 - 2013-10-01 21:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-11-24 22:49 - 2013-10-01 21:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-11-24 22:49 - 2013-10-01 21:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-11-24 22:49 - 2013-10-01 21:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-11-24 22:49 - 2013-10-01 21:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-11-24 22:49 - 2013-10-01 20:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-11-24 22:49 - 2013-10-01 20:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-11-24 22:49 - 2013-10-01 20:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-11-24 22:49 - 2013-10-01 19:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-11-24 22:47 - 2012-08-23 11:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-11-24 22:47 - 2012-08-23 11:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-11-24 22:47 - 2012-08-23 11:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys

2014-11-24 22:47 - 2012-08-23 08:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-11-24 22:47 - 2012-08-23 07:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-11-24 22:45 - 2014-11-07 16:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-11-24 22:45 - 2014-11-07 16:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-11-24 22:45 - 2014-11-06 01:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-11-24 22:45 - 2014-11-06 01:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-11-24 22:45 - 2014-11-06 01:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-11-24 22:45 - 2014-11-06 00:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-11-24 22:45 - 2014-11-06 00:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-11-24 22:45 - 2014-11-06 00:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-11-24 22:45 - 2014-11-06 00:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-11-24 22:45 - 2014-11-06 00:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-11-24 22:45 - 2014-11-06 00:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-11-24 22:45 - 2014-11-06 00:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-11-24 22:45 - 2014-11-06 00:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-11-24 22:45 - 2014-11-06 00:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-11-24 22:45 - 2014-11-06 00:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-11-24 22:45 - 2014-11-06 00:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-11-24 22:45 - 2014-11-06 00:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-11-24 22:45 - 2014-11-06 00:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-11-24 22:45 - 2014-11-06 00:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-11-24 22:45 - 2014-11-06 00:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-11-24 22:45 - 2014-11-06 00:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-11-24 22:45 - 2014-11-06 00:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-11-24 22:45 - 2014-11-06 00:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-11-24 22:45 - 2014-11-06 00:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-11-24 22:45 - 2014-11-06 00:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-11-24 22:45 - 2014-11-06 00:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-11-24 22:45 - 2014-11-06 00:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-11-24 22:45 - 2014-11-06 00:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-11-24 22:45 - 2014-11-06 00:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-11-24 22:45 - 2014-11-06 00:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-11-24 22:45 - 2014-11-06 00:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-11-24 22:45 - 2014-11-06 00:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-11-24 22:45 - 2014-11-05 23:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-11-24 22:45 - 2014-11-05 23:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-11-24 22:45 - 2014-11-05 23:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-11-24 22:45 - 2014-11-05 23:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-11-24 22:45 - 2014-11-05 23:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-11-24 22:45 - 2014-11-05 23:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-11-24 22:45 - 2014-11-05 23:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-11-24 22:45 - 2014-11-05 23:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-11-24 22:45 - 2014-11-05 23:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-11-24 22:45 - 2014-11-05 23:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-11-24 22:45 - 2014-11-05 23:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-11-24 22:45 - 2014-11-05 23:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-11-24 22:45 - 2014-11-05 23:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-11-24 22:45 - 2014-11-05 23:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-11-24 22:45 - 2014-11-05 23:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-11-24 22:45 - 2014-11-05 23:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-11-24 22:45 - 2014-11-05 23:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-11-24 22:45 - 2014-11-05 23:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-11-24 22:45 - 2014-11-05 23:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-11-24 22:45 - 2014-11-05 23:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-11-24 22:45 - 2014-11-05 22:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-11-24 22:45 - 2014-11-05 22:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-11-24 22:45 - 2014-11-05 22:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-11-24 22:45 - 2014-11-05 22:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-11-24 22:43 - 2014-11-11 00:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-11-24 22:43 - 2014-11-11 00:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2014-11-24 22:43 - 2014-11-10 23:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-11-24 22:43 - 2014-11-10 23:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2014-11-24 22:43 - 2014-11-05 14:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-11-24 22:43 - 2014-11-05 14:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-11-24 22:43 - 2014-11-05 14:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-11-24 22:43 - 2014-10-13 23:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-11-24 22:43 - 2014-10-13 23:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-11-24 22:43 - 2014-10-13 23:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-11-24 22:43 - 2014-10-13 23:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-11-24 22:43 - 2014-10-13 23:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-11-24 22:43 - 2014-10-13 22:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-11-24 22:43 - 2014-10-13 22:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-11-24 22:43 - 2014-10-13 22:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2014-11-24 22:43 - 2014-10-13 22:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-11-24 22:43 - 2014-10-02 23:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-11-24 22:42 - 2014-10-24 22:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-11-24 22:42 - 2014-10-24 22:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-11-24 22:42 - 2014-10-13 23:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-11-24 22:42 - 2014-10-13 22:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-11-24 22:42 - 2014-10-09 21:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-11-24 22:42 - 2014-09-19 06:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-11-24 22:42 - 2014-08-21 03:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-11-24 22:42 - 2014-08-21 03:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-11-24 22:42 - 2014-08-21 03:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-11-24 22:42 - 2014-08-21 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-11-24 22:42 - 2014-08-11 23:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2014-11-24 22:42 - 2014-08-11 22:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2014-11-24 22:40 - 2014-10-17 23:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-11-24 22:40 - 2014-10-17 22:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-11-24 22:40 - 2013-04-09 20:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-11-24 22:40 - 2013-04-02 19:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-11-24 22:25 - 2014-11-24 22:52 - 00459224 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-11-24 21:44 - 2014-11-24 22:35 - 00111856 _____ () C:\Users\Michelly Boone\AppData\Local\GDIPFONTCACHEV1.DAT

2014-11-24 21:44 - 2014-11-24 21:44 - 00347816 _____ (Microsoft Corporation) C:\Users\Michelly Boone\Downloads\MicrosoftFixit.wu.MATSKB.Run.exe

2014-11-24 20:21 - 2014-11-24 20:27 - 00007602 _____ () C:\Users\Michelly Boone\AppData\Local\resmon.resmoncfg

2014-11-22 11:56 - 2014-11-22 12:09 - 87438296 _____ () C:\Users\Michelly Boone\Downloads\Atalaya ultimo bien(1)_xvid.avi

2014-11-22 10:36 - 2014-11-22 10:51 - 131542756 _____ () C:\Users\Michelly Boone\Downloads\Atalaya 22 11.avi

2014-11-18 21:06 - 2014-11-24 22:23 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\Users\Todos os Usuários\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\ProgramData\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YoWindow

2014-11-18 19:09 - 2014-11-20 08:31 - 00000000 ____D () C:\Program Files (x86)\YoWindow

2014-11-18 19:08 - 2014-11-18 19:09 - 12370472 _____ () C:\Users\Michelly Boone\Downloads\yosetup.exe

2014-11-18 12:40 - 2014-11-18 12:40 - 00262144 _____ () C:\Users\Michelly Boone\Desktop\WinMTR.exe

2014-11-12 09:44 - 2014-11-12 09:45 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-11-05 14:53 - 2014-11-05 14:53 - 00001158 _____ () C:\Users\Michelly Boone\Desktop\Format Factory.lnk

2014-11-05 14:53 - 2014-11-05 14:53 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory

2014-11-05 14:52 - 2014-11-05 14:52 - 00000000 ____D () C:\Program Files (x86)\FreeTime



==================== One Month Modified Files and Folders =======



(If an entry is included in the fixlist, the file\folder will be moved.)



2014-12-03 14:56 - 2012-10-14 22:33 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\CrashDumps

2014-12-03 14:55 - 2011-12-23 07:50 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-12-03 14:07 - 2013-07-15 18:44 - 00000000 ____D () C:\Users\Todos os Usuários\GAS Tecnologia

2014-12-03 14:07 - 2013-07-15 18:44 - 00000000 ____D () C:\ProgramData\GAS Tecnologia

2014-12-03 13:38 - 2009-07-14 01:45 - 00027744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-12-03 13:38 - 2009-07-14 01:45 - 00027744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-12-03 13:30 - 2014-02-28 07:24 - 00000000 ___RD () C:\Users\Michelly Boone\Dropbox

2014-12-03 13:30 - 2014-02-28 07:22 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Dropbox

2014-12-03 13:29 - 2014-01-17 10:28 - 00000000 ____D () C:\Users\Public\interapp

2014-12-03 13:29 - 2009-07-14 02:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-12-03 13:28 - 2014-02-13 12:04 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\Windows\SysWOW64\Drivers\gbpndisrd.sys

2014-12-03 13:28 - 2014-02-13 12:04 - 00010266 _____ () C:\Windows\SysWOW64\Drivers\ndisrd.cat

2014-12-03 13:28 - 2014-02-13 12:04 - 00001402 _____ () C:\Windows\SysWOW64\Drivers\gas.cer

2014-12-03 13:24 - 2012-04-26 09:45 - 00000000 ____D () C:\Users\Michelly Boone

2014-12-03 13:16 - 2012-04-28 13:43 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Skype

2014-12-03 11:21 - 2011-12-23 07:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-12-03 10:29 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\tracing

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ____D () C:\Users\Todos os Usuários\Skype

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ____D () C:\ProgramData\Skype

2014-12-01 22:56 - 2013-06-07 14:46 - 00000000 ____D () C:\Users\Todos os Usuários\AVAST Software

2014-12-01 22:56 - 2013-06-07 14:46 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-12-01 22:18 - 2013-02-04 17:19 - 00000000 ____D () C:\Windows\Minidump

2014-12-01 21:35 - 2012-04-28 13:55 - 00000000 ____D () C:\Users\Michelly Boone\Tracing

2014-12-01 21:12 - 2013-11-27 22:29 - 00003842 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-01 21:12 - 2013-07-13 21:56 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-01 21:12 - 2013-07-13 21:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-01 21:09 - 2014-02-13 12:04 - 00000000 ____D () C:\Users\Todos os Usuários\GbPlugin

2014-12-01 21:09 - 2014-02-13 12:04 - 00000000 ____D () C:\ProgramData\GbPlugin

2014-11-27 13:22 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-11-27 13:22 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\security

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\Users\Todos os Usuários\HP

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\ProgramData\HP

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\Program Files (x86)\HP

2014-11-27 13:21 - 2012-04-28 14:45 - 00000000 __RHD () C:\MSOCache

2014-11-27 13:21 - 2011-12-23 07:51 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-11-27 13:21 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\registration

2014-11-27 08:59 - 2014-01-06 12:08 - 00068608 ___SH () C:\Users\Michelly Boone\Documents\Thumbs.db

2014-11-25 12:42 - 2013-11-11 22:55 - 00628288 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2014-11-25 12:42 - 2013-11-11 22:55 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2014-11-25 12:42 - 2013-11-11 22:55 - 00092768 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2014-11-25 12:42 - 2012-08-02 15:09 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2014-11-25 11:05 - 2014-03-18 19:23 - 00000000 ____D () C:\Program Files (x86)\PSafe

2014-11-25 09:32 - 2009-07-14 00:20 - 00000000 __RHD () C:\Users\Default

2014-11-25 09:22 - 2009-07-13 23:34 - 00000215 _____ () C:\Windows\system.ini

2014-11-25 09:05 - 2014-02-13 09:17 - 00000000 ____D () C:\Users\Todos os Usuários\Temp

2014-11-25 09:05 - 2014-02-13 09:17 - 00000000 ____D () C:\ProgramData\Temp

2014-11-25 05:52 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\LiveKernelReports

2014-11-25 02:00 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\Offline Web Pages

2014-11-24 22:53 - 2009-07-14 00:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-24 22:50 - 2014-05-06 19:14 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-11-24 22:50 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-11-24 22:16 - 2012-04-30 00:30 - 00000000 ____D () C:\Users\Todos os Usuários\Microsoft Help

2014-11-24 22:16 - 2012-04-30 00:30 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-11-24 22:13 - 2011-12-23 08:01 - 01610696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-11-24 22:13 - 2011-04-12 10:40 - 00709116 _____ () C:\Windows\system32\prfh0416.dat

2014-11-24 22:13 - 2011-04-12 10:40 - 00149296 _____ () C:\Windows\system32\prfc0416.dat

2014-11-24 22:13 - 2009-07-14 02:13 - 01610696 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-11-24 22:12 - 2013-12-15 14:46 - 00000000 ____D () C:\Windows\system32\MRT

2014-11-24 22:07 - 2012-04-28 14:53 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-11-18 19:16 - 2013-11-18 23:44 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Sony

2014-11-16 05:55 - 2014-02-28 07:23 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-11-15 12:05 - 2013-06-07 20:49 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\vlc

2014-11-12 09:48 - 2012-04-26 09:48 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Adobe

2014-11-12 09:44 - 2012-04-28 13:41 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-11-12 09:44 - 2011-12-23 08:14 - 00000000 ____D () C:\Users\Todos os Usuários\Adobe

2014-11-12 09:44 - 2011-12-23 08:14 - 00000000 ____D () C:\ProgramData\Adobe

2014-11-11 18:07 - 2012-11-11 14:07 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Ixia

2014-11-10 14:27 - 2009-07-14 02:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-11-10 14:27 - 2009-07-14 02:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU(31).TXT

2014-11-08 05:58 - 2014-02-13 12:04 - 00000000 ____D () C:\Program Files (x86)\GbPlugin

2014-11-06 10:18 - 2009-07-14 02:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-11-05 14:55 - 2013-11-18 22:45 - 00000000 ____D () C:\Users\Michelly Boone\Documents\FFOutput

2014-11-05 14:53 - 2014-06-03 12:38 - 00000000 __SHD () C:\Users\Todos os Usuários\360Quarant

2014-11-05 14:53 - 2014-06-03 12:38 - 00000000 __SHD () C:\ProgramData\360Quarant

2014-11-05 14:53 - 2014-05-30 12:41 - 00000000 ____D () C:\$360Section

2014-11-04 14:30 - 2010-11-21 00:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe



Files to move or delete:

====================

C:\Program Files\Windows Sidebar\sidebar.exe





Some content of TEMP:

====================

C:\Users\Michelly Boone\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplk50ee.dll

C:\Users\Michelly Boone\AppData\Local\Temp\Quarantine.exe

C:\Users\Michelly Boone\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Michelly Boone\AppData\Local\Temp\sqlite3.dll





==================== Bamital & volsnap Check =================



(There is no automatic fix for files that do not pass verification.)



C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed





LastRegBack: 2014-11-25 00:57



==================== End Of Log ============================

FRST.txt



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014

Ran by Michelly Boone (administrator) on MICHELLYBOONE on 03-12-2014 16:05:36

Running from C:\Users\Michelly Boone\Desktop

Loaded Profile: Michelly Boone (Available profiles: Michelly Boone)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Português (Brasil)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: <a href="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/" target="_blank">http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/</a>



==================== Processes (Whitelisted) =================



(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)



(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe

(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

(Positivo Informática S.A) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe

(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe

(OEM) C:\Program Files (x86)\OEM\LIVE! OSD 1.35\osd.exe

(Dropbox, Inc.) C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Quartzo Desenvolvimento de Software  Ltda.) C:\Program Files (x86)\qubnfe\qubnfe.exe

(GAS Tecnologia LTDA) C:\Program Files (x86)\Diebold\Warsaw\core.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(Positivo Informática S.A) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryPower.exe

(GAS Tecnologia LTDA) C:\Program Files (x86)\Diebold\Warsaw\core.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

() C:\Program Files (x86)\Soft Organizer\SoftOrganizerAgent.exe

(Positivo Informática S.A.) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Backup\PositivoSmartBackup.exe

(Positivo Informática S.A.) C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Áudio\AudioPower.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareDesktop.exe

(Thisisu) C:\Users\Michelly Boone\Downloads\JRT.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\plugin-nm-server.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Users\Michelly Boone\Downloads\setup_11.0.3.8.x01_2014_12_03_09_36.exe

() C:\Users\Michelly Boone\AppData\Local\Temp\RarSFX0\3738614.exe

(Kaspersky Lab) C:\Users\Michelly Boone\AppData\Local\Temp\2457729\3738614.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe





==================== Registry (Whitelisted) ==================



(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)



HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-18] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2392872 2010-10-14] (Synaptics Incorporated)

HKLM\...\Run: [StartUpManagerPositivo] => C:\Program Files\Positivo Informática\Gerenciador de Inicialização Positivo\ManagerWindows.exe [171520 2012-03-01] ()

HKLM\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\sidebar.exe [1475584 2010-11-21] (Microsoft Corporation)

HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe [8925504 2014-10-15] ()

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740888 2013-04-24] (Sony Corporation)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [qubnfe] => C:\Program Files (x86)\qubnfe\qubnfe.exe [1208632 2012-08-01] (Quartzo Desenvolvimento de Software  Ltda.)

HKLM-x32\...\Run: [Diebold - Warsaw] => C:\Program Files (x86)\Diebold\Warsaw\core.exe [518968 2014-07-12] (GAS Tecnologia LTDA)

HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-11-11] (Kaspersky Lab ZAO)

HKLM-x32\...\RunOnce: [GrpConv] => grpconv -o

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\ GbPluginBb-x32: C:\Program Files (x86)\GbPlugin\gbieh.dll (Banco do Brasil)

Winlogon\Notify\ GbPluginUni-x32: C:\Program Files (x86)\GbPlugin\gbiehUni.dll (Banco Itaú Unibanco)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Run: [HP Deskjet 3510 series (NET)] => C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1305408 2014-11-13] (Lavasoft)

HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OSD.lnk

ShortcutTarget: OSD.lnk -> C:\Windows\Installer\{73289228-1853-4623-982A-EB17FF0270CA}\_6C478F4E8D2A2AC0FD0413.exe ()

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk

ShortcutTarget: Monitorar alertas de tinta - HP Deskjet 3510 series (Rede).lnk -> C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

Startup: C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_41748424.lnk

ShortcutTarget: _uninst_41748424.lnk -> C:\Users\Michelly Boone\AppData\Local\Temp\_uninst_41748424.bat ()

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File

ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll (Kaspersky Lab ZAO)

ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll (Kaspersky Lab ZAO)

BootExecute: autocheck autochk * bddel.exe



==================== Internet (Whitelisted) ====================



(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)



HKU\S-1-5-21-597722200-2002237864-835144990-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch</a>

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" target="_blank">http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = <a href="http://positivo.br.msn.com?pc=MAPT" target="_blank">http://positivo.br.msn.com?pc=MAPT</a>

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL = <a href="http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox" target="_blank">http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox</a>

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL = <a href="http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox" target="_blank">http://www.bing.com/search?q={searchTerms}&form=POSTDF&pc=POS2&src=IE-SearchBox</a>

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL =

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> {1BF81ED8-1279-409A-9093-467ED8E1E8B7} URL =

SearchScopes: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± vË°!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ ´Ñ;áa´[¦†8 º~RÙxœòÜ8'£-)xä URL =

BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Auxiliar de Conexão de Conta da Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} -> C:\Program Files (x86)\GbPlugin\gbieh.dll (Banco do Brasil)

BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\Program Files (x86)\GbPlugin\gbiehuni.dll (Banco Itaú Unibanco)

BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Toolbar: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> No Name - {742E70CF-7770-412D-86CB-230B322E807C} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\Program Files (x86)\GbPlugin\gbiehuni.dll [1513528 2013-11-22] (Banco Itaú Unibanco)

ShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files (x86)\GbPlugin\gbieh.dll [1754664 2014-07-31] (Banco do Brasil)

Tcpip\Parameters: [DhcpNameServer] 200.85.32.2 200.85.32.3



FireFox:

========

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: <a href="/comunidade/members/user.636732">@google.com</a>/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/bb -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll (GAS Tecnologia)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/cef -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll (GAS Tecnologia)

FF Plugin HKU\S-1-5-21-597722200-2002237864-835144990-1000: gastecnologia.com.br/sf/uni -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_uni.dll (GAS Tecnologia)

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]url_advisor@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]url_advisor@kaspersky.com[/EMAIL]

FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]url_advisor@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL]

FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]virtual_keyboard@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]content_blocker@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]content_blocker@kaspersky.com[/EMAIL]

FF Extension: Gevaarlijke websiteblokkering - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]content_blocker@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]anti_banner@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]anti_banner@kaspersky.com[/EMAIL]

FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]anti_banner@kaspersky.com[/EMAIL] [2014-11-25]

FF HKLM-x32\...\Firefox\Extensions: [[EMAIL]online_banking@kaspersky.com[/EMAIL]] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]online_banking@kaspersky.com[/EMAIL]

FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\[EMAIL]online_banking@kaspersky.com[/EMAIL] [2014-11-25]

FF HKU\.DEFAULT\...\Firefox\Extensions: [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] - C:\ProgramData\Browser Manager\2.2.643.41\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension

FF HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Firefox\Extensions: [{58bd07eb-0ee0-4df0-8121-dc9b693373df}] - C:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension



Chrome:

=======

CHR HomePage: Default -> hxxp://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A

CHR StartupUrls: Default -> "hxxp://<a href="'http://www.jw.org/es'" target="_blank">www.jw.org/es</a>", "<a href="'https://bay173.mail.live.com/default.aspx?id=64855%2c64855&mkt=pt-BR&form=MWGELB&publ=MSNTOOL&crea=TEXT_CIMS015888_Hotmail_PT-BR_0x0_33485#fid=fl91BAlyyxDUuJCJbBzPF7zQ2'" target="_blank">https://bay173.mail.live.com/default.aspx?id=64855,64855&mkt=pt-BR&form=MWGELB&publ=MSNTOOL&crea=TEXT_CIMS015888_Hotmail_PT-BR_0x0_33485#fid=fl91BAlyyxDUuJCJbBzPF7zQ2</a>"

CHR DefaultSearchKeyword: Default -> start.iminent.com

CHR DefaultSearchURL: Default -> <a href="http://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A&ref=toolbox&q={searchTerms}" target="_blank">http://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A&ref=toolbox&q={searchTerms}</a>

CHR DefaultSuggestURL: Default ->

CHR Profile: C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-05]

CHR Extension: (Google Drive) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-12-26]

CHR Extension: (YouTube) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-12-26]

CHR Extension: (Adblock Plus) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-28]

CHR Extension: (Pesquisa do Google) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-12-26]

CHR Extension: (Kaspersky URL Advisor) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-11-25]

CHR Extension: (GBBD Guardião - Itaú 30 horas) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmpojlddncminmkddkpoegdjhojjipg [2014-11-21]

CHR Extension: (Proteção Kaspersky) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpoimibckejjdjcfbdnajaicnklhfplh [2014-11-25]

CHR Extension: (Google Wallet) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjbodopomfddehlalfilheomcahbpei [2013-11-21]

CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2014-07-06]

CHR Extension: (Gmail) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-12-26]

CHR Extension: (Anti-Banner) - C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-11-25]

CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2013-11-11]

CHR HKLM-x32\...\Chrome\Extension: [lpoimibckejjdjcfbdnajaicnklhfplh] - <a href="https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh" target="_blank">https://chrome.google.com/webstore/detail/lpoimibckejjdjcfbdnajaicnklhfplh</a> [2013-11-11]

CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2013-11-11]



==================== Services (Whitelisted) =================



(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)



R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)

S4 AppManagerService; C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Experience\PositivoAplicativosService.exe [65304 2013-10-10] (Positivo Informática S.A.)

R2 avp; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-11-11] (Kaspersky Lab ZAO)

R2 BatteryManagerSrv; C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe [45056 2012-03-20] (Positivo Informática S.A) [File not signed]

S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

S3 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [818888 2013-09-25] (Infowatch)

R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [546104 2014-07-21] (GAS Tecnologia)

S3 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed]

S2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe [707888 2014-10-15] ()

S2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe [1351512 2014-11-13] (Lavasoft Limited)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [483864 2013-04-24] (Sony Corporation)

S2 SearchProtectionService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe [15208 2014-11-13] ()

R2 Warsaw Technology; C:\Program Files (x86)\Diebold\Warsaw\core.exe [518968 2014-07-12] (GAS Tecnologia LTDA)



==================== Drivers (Whitelisted) ====================



(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)



R0 41748424; C:\Windows\System32\DRIVERS\41748424.sys [458336 2014-12-03] (Kaspersky Lab ZAO)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)

R3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2014-08-21] (BitDefender)

R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2014-08-21] (BitDefender)

S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2014-08-21] (BitDefender)

R1 BdfNdisf; c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys [93160 2014-07-10] (BitDefender LLC)

R1 bdfwfpf; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys [102992 2014-07-10] (BitDefender LLC)

S3 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [76096 2013-08-08] (Baidu, Inc.)

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)

R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)

S0 GbpKm; C:\Windows\SysWOW64\drivers\GbpKm.sys [49536 2013-05-08] (GAS Tecnologia)

R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.0.56\gzflt.sys [150256 2014-07-10] (BitDefender LLC)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-11-25] (Kaspersky Lab ZAO)

U5 klflt; C:\Windows\System32\Drivers\klflt.sys [92768 2014-11-25] (Kaspersky Lab ZAO)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [628288 2014-11-25] (Kaspersky Lab ZAO)

R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-11-25] (Kaspersky Lab ZAO)

R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2013-11-11] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-11-11] (Kaspersky Lab ZAO)

R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-11-11] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-11-11] (Kaspersky Lab ZAO)

R2 LiveGpdKBFilter; C:\Windows\System32\Drivers\LiveGpdKBFilter.sys [11168 2010-01-21] (Windows (R) Win 7 DDK provider) [File not signed]

R2 LiveIO; C:\Windows\System32\Drivers\LiveIO.sys [14240 2010-01-21] () [File not signed]

R3 Livekbc; C:\Windows\System32\Drivers\Livekbc.sys [11680 2010-01-21] (Systems Internals) [File not signed]

R3 Livemouclass; C:\Windows\System32\Drivers\Livemouclass.sys [11168 2010-01-21] (Systems Internals) [File not signed]

S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)

R3 PositivoAudioDriverWdm; C:\Windows\System32\DRIVERS\pad.sys [69520 2011-08-11] (Positivo Informática S.A.)

S3 RSUSBSTOR; C:\Windows\System32\Drivers\RtsUStor.sys [225280 2009-09-01] (Realtek Semiconductor Corp.) [File not signed]

S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-01] (Realtek Semiconductor Corp.) [File not signed]

S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [389240 2014-07-10] (BitDefender S.R.L.)

S1 BAPIDRV; system32\DRIVERS\BAPIDRV64.sys [X]

S3 BTMCOM; \SystemRoot\System32\Drivers\btmcom.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]

U2 wuaserv; No ImagePath



==================== NetSvcs (Whitelisted) ===================



(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)





==================== One Month Created Files and Folders ========



(If an entry is included in the fixlist, the file\folder will be moved.)



2014-12-03 14:54 - 2014-12-03 14:54 - 00003028 _____ () C:\Windows\System32\Tasks\{9D4A5D2F-E370-4D01-9DCD-C54FA36EE9D8}

2014-12-03 14:53 - 2014-12-03 14:53 - 00003028 _____ () C:\Windows\System32\Tasks\{64FD857D-6973-4B84-AB8E-DA5999222384}

2014-12-03 14:51 - 2014-12-03 14:51 - 00000000 ____D () C:\Users\Michelly Boone\Desktop\11075872_REDE_WIN7_x64_00

2014-12-03 14:50 - 2014-12-03 14:50 - 00003028 _____ () C:\Windows\System32\Tasks\{A2BECC90-8B37-4DD4-8F9A-831307A59721}

2014-12-03 14:40 - 2014-12-03 14:40 - 05800448 _____ () C:\Users\Michelly Boone\Downloads\11075872_REDE_WIN7_X64_00 (1).exe

2014-12-03 14:19 - 2014-12-03 09:35 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\41748424.sys

2014-12-03 13:40 - 2014-12-03 13:40 - 00011656 _____ () C:\Users\Michelly Boone\Desktop\JRT.txt

2014-12-03 13:37 - 2014-12-03 13:37 - 00000000 ____D () C:\Windows\ERUNT

2014-12-03 13:33 - 2014-12-03 13:33 - 01707646 _____ (Thisisu) C:\Users\Michelly Boone\Downloads\JRT.exe

2014-12-03 13:04 - 2014-12-03 13:24 - 00000000 ____D () C:\AdwCleaner

2014-12-03 13:03 - 2014-12-03 13:03 - 00000210 _____ () C:\Users\Michelly Boone\Mensagens de erro.txt

2014-12-03 13:00 - 2014-12-03 13:01 - 02154496 _____ () C:\Users\Michelly Boone\Downloads\adwcleaner_4.103.exe

2014-12-03 10:54 - 2014-12-03 10:54 - 00000000 ____D () C:\Users\Todos os Usuários\Dell

2014-12-03 10:54 - 2014-12-03 10:54 - 00000000 ____D () C:\ProgramData\Dell

2014-12-03 10:51 - 2014-12-03 10:53 - 15712632 _____ (Dell Inc.) C:\Users\Michelly Boone\Downloads\dell_n1e1215f39b1d.exe

2014-12-03 10:45 - 2014-12-03 11:27 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Device Doctor

2014-12-03 10:45 - 2014-12-03 10:45 - 00001979 _____ () C:\Users\Michelly Boone\Desktop\Speed Up This PC.lnk

2014-12-03 10:45 - 2014-12-03 10:45 - 00001022 _____ () C:\Users\Michelly Boone\Desktop\Device Doctor.lnk

2014-12-03 10:45 - 2014-12-03 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Device Doctor

2014-12-03 10:45 - 2014-12-03 10:45 - 00000000 ____D () C:\Program Files (x86)\Device Doctor

2014-12-03 10:43 - 2014-12-03 10:43 - 01481976 _____ (Device Doctor Software Inc. ) C:\Users\Michelly Boone\Downloads\DeviceDoctor_Bundle.exe

2014-12-03 10:28 - 2014-12-03 13:29 - 00065536 _____ () C:\Windows\system32\Ikeext.etl

2014-12-03 08:23 - 2014-12-03 08:34 - 165181728 _____ () C:\Users\Michelly Boone\Downloads\setup_11.0.3.8.x01_2014_12_03_09_36.exe

2014-12-03 01:51 - 2014-12-03 01:51 - 00001421 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 14 Compact Mode.lnk

2014-12-03 01:51 - 2014-12-03 01:51 - 00001259 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 14.lnk

2014-12-03 01:51 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo

2014-12-03 01:26 - 2014-12-03 01:26 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Ashampoo Burning Studio FREE

2014-12-03 01:22 - 2014-12-03 01:51 - 00001234 _____ () C:\Users\Public\Desktop\CleverReach.com.lnk

2014-12-03 01:22 - 2014-12-03 01:51 - 00000214 _____ () C:\Users\Public\Desktop\Your Software Deals.url

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\ashampoo

2014-12-03 01:22 - 2014-12-03 01:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\Users\Todos os Usuários\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:50 - 00000000 ____D () C:\Program Files (x86)\Ashampoo

2014-12-03 01:22 - 2014-12-03 01:22 - 00001263 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk

2014-12-03 01:19 - 2014-12-03 01:21 - 33551464 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Michelly Boone\Downloads\ashampoo_burning_studio_free_1.14.5_sm.exe

2014-12-03 00:54 - 2014-12-03 00:54 - 00182179 _____ () C:\Users\Michelly Boone\Downloads\burncdcc.zip

2014-12-03 00:35 - 2014-12-03 05:48 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48DB2CCA.sys

2014-12-03 00:32 - 2014-12-03 00:33 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\kav_rescue_10

2014-12-03 00:29 - 2014-12-03 00:29 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\Kaspersky Rescue2Usb

2014-12-03 00:27 - 2014-12-03 00:27 - 00387584 _____ () C:\Users\Michelly Boone\Downloads\rescue2usb.exe

2014-12-03 00:08 - 2014-12-03 00:27 - 309819392 _____ () C:\Users\Michelly Boone\Downloads\kav_rescue_10.iso

2014-12-02 19:14 - 2014-12-02 19:14 - 00003208 _____ () C:\Windows\System32\Tasks\{7EC6DFFA-08E6-4A33-8972-1D5A604B37D0}

2014-12-02 12:36 - 2014-12-03 15:07 - 00038716 _____ () C:\Users\Michelly Boone\Desktop\Addition.txt

2014-12-02 12:35 - 2014-12-03 16:07 - 00031969 _____ () C:\Users\Michelly Boone\Desktop\FRST.txt

2014-12-02 12:34 - 2014-12-03 16:05 - 00000000 ____D () C:\FRST

2014-12-02 12:33 - 2014-12-02 12:33 - 02117120 _____ (Farbar) C:\Users\Michelly Boone\Desktop\FRST64.exe

2014-12-02 11:27 - 2014-12-02 11:27 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Kaspersky Disk Rescue

2014-12-02 11:26 - 2014-12-02 11:26 - 308682752 _____ () C:\Users\Michelly Boone\Documents\Kaspersky Disk Rescue.iso

2014-12-01 23:55 - 2014-12-01 23:55 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\backups

2014-12-01 23:28 - 2014-12-01 23:28 - 00388608 _____ (Trend Micro Inc.) C:\Users\Michelly Boone\Downloads\HiJackThis (1).exe

2014-12-01 23:14 - 2014-12-01 23:22 - 186654544 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup (1).exe

2014-12-01 22:52 - 2014-12-01 22:52 - 00002992 _____ () C:\Windows\System32\Tasks\{6ABCB2DA-F359-4B3C-B47A-7716CEFE125B}

2014-12-01 22:18 - 2014-12-01 22:18 - 00290704 _____ () C:\Windows\Minidump\120114-30217-01.dmp

2014-12-01 22:17 - 2014-12-03 13:28 - 00486092 _____ () C:\Windows\PFRO.log

2014-12-01 22:17 - 2014-12-01 22:17 - 599877401 _____ () C:\Windows\MEMORY.DMP

2014-12-01 21:48 - 2014-12-03 13:33 - 00117100 _____ () C:\Windows\WindowsUpdate.log

2014-12-01 21:44 - 2014-12-03 13:28 - 00001176 _____ () C:\Windows\setupact.log

2014-12-01 21:44 - 2014-12-01 21:44 - 00000000 _____ () C:\Windows\setuperr.log

2014-12-01 21:39 - 2014-12-01 21:39 - 00016254 _____ () C:\Users\Michelly Boone\Documents\cc_20141201_213920.reg

2014-12-01 21:12 - 2014-12-01 21:44 - 00000902 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-12-01 21:00 - 2014-12-01 21:02 - 05037464 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avastclear.exe

2014-12-01 20:58 - 2014-12-01 20:58 - 00000280 _____ () C:\Windows\system32\2014-12-01-23-58-47.018-aswFe.exe-5224.log

2014-12-01 20:55 - 2014-12-01 20:56 - 04001367 _____ () C:\Users\Michelly Boone\Downloads\ServicesRepair.exe

2014-12-01 20:16 - 2014-12-01 20:16 - 00000247 _____ () C:\Windows\system32\2014-12-01-23-16-53.078-aswFe.exe-3908.log

2014-12-01 20:11 - 2014-12-01 20:16 - 00000247 _____ () C:\Windows\system32\2014-12-01-23-11-00.074-aswFe.exe-7596.log

2014-12-01 20:10 - 2014-12-01 20:10 - 00000197 _____ () C:\Windows\system32\2014-12-01-23-10-56.005-AvastVBoxSVC.exe-8256.log

2014-12-01 19:57 - 2014-12-01 19:57 - 00001261 _____ () C:\Windows\unins000.dat

2014-12-01 19:57 - 2014-12-01 19:56 - 01187697 _____ () C:\Windows\unins000.exe

2014-12-01 19:56 - 2014-12-01 19:56 - 01241367 _____ () C:\Users\Michelly Boone\Downloads\Atv Avast P. 2014 by owinner.net.rar

2014-12-01 19:56 - 2014-12-01 19:56 - 00000000 ____D () C:\Users\Michelly Boone\Downloads\Atv Avast P. 2014 by owinner.net

2014-12-01 19:42 - 2014-12-01 19:42 - 04978536 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup_online.exe

2014-12-01 19:37 - 2014-12-01 19:37 - 00002992 _____ () C:\Windows\System32\Tasks\{4428844F-1BE9-4C11-B0E1-84E47071EB9F}

2014-12-01 19:37 - 2014-12-01 19:37 - 00002992 _____ () C:\Windows\System32\Tasks\{313301DC-B1EA-45A4-BA62-9FE981A2919D}

2014-12-01 19:36 - 2014-12-01 19:36 - 00002992 _____ () C:\Windows\System32\Tasks\{9E66C78F-CE9F-42F4-9A82-61F87D769002}

2014-12-01 19:35 - 2014-12-01 19:35 - 00002992 _____ () C:\Windows\System32\Tasks\{ADBD9797-50F7-42F7-9317-67FB0D04672E}

2014-12-01 19:24 - 2014-12-01 19:24 - 00000000 ____D () C:\Windows\SysWOW64\vbox

2014-12-01 19:24 - 2014-12-01 19:24 - 00000000 ____D () C:\Windows\system32\vbox

2014-12-01 18:58 - 2014-12-01 19:06 - 186654544 _____ (AVAST Software) C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup.exe

2014-11-30 06:35 - 2014-11-30 06:35 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\144355D9.sys

2014-11-30 06:26 - 2014-11-30 06:26 - 00089088 _____ () C:\Users\Michelly Boone\Downloads\Apontamento de horas_Novembro_2014_6 hrs_15 min.xls

2014-11-27 13:31 - 2014-08-28 23:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2014-11-27 13:31 - 2014-05-08 06:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-11-27 13:30 - 2014-09-04 23:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-11-27 13:30 - 2014-09-04 22:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-11-26 18:06 - 2014-11-26 18:09 - 68794592 _____ () C:\Users\Michelly Boone\Downloads\w_xvid.avi

2014-11-26 17:47 - 2014-11-26 17:47 - 00000000 ____D () C:\Program Files\Intel

2014-11-26 17:46 - 2014-11-27 09:45 - 00000000 ____D () C:\Driver_allOS

2014-11-26 17:36 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Realtek WLAN Driver

2014-11-26 16:59 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Driver Checker

2014-11-26 16:57 - 2014-11-26 16:57 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Opera Software

2014-11-26 16:57 - 2014-11-26 16:57 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\Opera Software

2014-11-26 16:55 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Opera

2014-11-26 16:12 - 2014-11-26 16:12 - 00178254 _____ () C:\Users\Michelly Boone\Downloads\DRP14 (1).torrent

2014-11-26 16:07 - 2014-11-27 09:14 - 00000048 _____ () C:\RB.rdat

2014-11-26 16:07 - 2014-11-27 09:14 - 00000048 _____ () C:\License_Time.rdat

2014-11-26 16:03 - 2014-11-26 16:03 - 00178254 _____ () C:\Users\Michelly Boone\Downloads\DRP14.torrent

2014-11-26 15:55 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files (x86)\DriverPackSolution

2014-11-26 15:37 - 2014-11-27 13:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverPack Solution Lite

2014-11-26 15:37 - 2014-11-27 13:21 - 00000000 ____D () C:\Program Files\DriverPack Solution Lite 13

2014-11-26 15:17 - 2014-11-26 15:17 - 00000000 ____D () C:\Users\Michelly Boone\Desktop\realtek_rtl_gigabit_and_fast_ethernet_nic_driver

2014-11-26 15:16 - 2014-11-26 15:16 - 02468743 _____ () C:\Users\Michelly Boone\Desktop\realtek_rtl_gigabit_and_fast_ethernet_nic_driver.zip

2014-11-26 09:43 - 2014-11-26 09:43 - 00001186 _____ () C:\Users\Michelly Boone\Desktop\proba.txt

2014-11-25 22:44 - 2014-11-25 22:44 - 01430885 _____ () C:\Users\Michelly Boone\Downloads\Tr Formulaires.zip

2014-11-25 17:24 - 2014-11-25 17:24 - 00000000 __SHD () C:\Users\Michelly Boone\AppData\Local\EmieBrowserModeList

2014-11-25 12:07 - 2014-11-25 12:49 - 00002176 _____ () C:\Users\Michelly Boone\Desktop\Safe Money.lnk

2014-11-25 12:03 - 2014-11-25 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky PURE 3.0

2014-11-25 12:03 - 2014-11-25 12:02 - 00001038 _____ () C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk

2014-11-25 12:02 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys

2014-11-25 12:02 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys

2014-11-25 11:48 - 2014-11-25 11:57 - 196671712 _____ (Kaspersky Lab ZAO) C:\Users\Michelly Boone\Downloads\pur13.0.2.558es-mx.exe

2014-11-25 11:06 - 2014-12-03 15:25 - 00000000 ____D () C:\Users\Todos os Usuários\Kaspersky Lab

2014-11-25 11:06 - 2014-12-03 15:25 - 00000000 ____D () C:\ProgramData\Kaspersky Lab

2014-11-25 11:06 - 2014-11-25 12:43 - 00000000 ____D () C:\Windows\ELAMBKUP

2014-11-25 11:06 - 2014-11-25 12:03 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab

2014-11-25 11:00 - 2014-10-15 05:28 - 00023752 _____ (360安全中心) C:\Windows\SysWOW64\Drivers\efimon.sys

2014-11-25 09:54 - 2014-11-25 09:55 - 12450561 _____ (PC Tools ) C:\Users\Michelly Boone\Downloads\sdsetup (1).exe

2014-11-25 09:52 - 2014-11-25 09:53 - 13000981 _____ (PC Tools ) C:\Users\Michelly Boone\Downloads\sdsetup.exe

2014-11-25 09:32 - 2014-11-25 09:32 - 00035427 _____ () C:\ComboFix.txt

2014-11-25 09:02 - 2011-06-26 03:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-11-25 09:02 - 2010-11-07 14:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-11-25 09:02 - 2009-04-20 01:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00098816 _____ () C:\Windows\sed.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00080412 _____ () C:\Windows\grep.exe

2014-11-25 09:02 - 2000-08-30 21:00 - 00068096 _____ () C:\Windows\zip.exe

2014-11-25 09:00 - 2014-11-25 09:32 - 00000000 ____D () C:\Qoobox

2014-11-25 09:00 - 2014-11-25 09:29 - 00000000 ____D () C:\Windows\erdnt

2014-11-25 08:57 - 2014-11-25 08:58 - 05598874 ____R (Swearware) C:\Users\Michelly Boone\Downloads\ComboFix.exe

2014-11-25 08:50 - 2014-12-02 10:55 - 00015501 _____ () C:\Users\Michelly Boone\Downloads\hijackthis.log

2014-11-25 08:49 - 2014-11-25 08:49 - 00388608 _____ (Trend Micro Inc.) C:\Users\Michelly Boone\Downloads\HijackThis.exe

2014-11-25 08:30 - 2014-11-25 08:30 - 00001024 _____ () C:\.rnd

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ___HD () C:\Program Files (x86)\GAS Tecnologia

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\Users\Todos os Usuários\Package Cache

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\ProgramData\Package Cache

2014-11-25 08:29 - 2014-11-25 08:29 - 00000000 ____D () C:\Program Files (x86)\Diebold

2014-11-25 06:54 - 2014-11-25 06:54 - 00000000 ____D () C:\Users\Todos os Usuários\BitDefender

2014-11-25 06:54 - 2014-11-25 06:54 - 00000000 ____D () C:\ProgramData\BitDefender

2014-11-25 06:37 - 2014-12-01 20:02 - 00004648 _____ () C:\Windows\SysWOW64\LavasoftTcpService.ini

2014-11-25 06:37 - 2014-12-01 20:02 - 00002480 _____ () C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini

2014-11-25 06:37 - 2014-12-01 20:02 - 00002480 _____ () C:\Windows\system32\LavasoftTcpServiceOff.ini

2014-11-25 06:37 - 2014-11-27 13:22 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\Lavasoft

2014-11-25 06:37 - 2014-11-25 06:37 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\LavasoftStatistics

2014-11-25 06:37 - 2014-11-13 18:42 - 00358736 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll

2014-11-25 06:37 - 2014-11-13 18:42 - 00312424 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll

2014-11-25 06:36 - 2014-11-25 06:36 - 00000000 ____D () C:\Program Files (x86)\Lavasoft

2014-11-25 06:34 - 2014-12-03 13:31 - 00002265 _____ () C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk

2014-11-25 06:34 - 2014-11-25 06:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft

2014-11-25 06:34 - 2014-07-10 14:09 - 02084072 _____ (Bitdefender) C:\Windows\system32\bdnc.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 01061776 _____ (BitDefender S.R.L.) C:\Windows\system32\bdsmtpp.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00209984 _____ (BitDefender) C:\Windows\system32\BdFirewallSDK.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00195016 _____ (BitDefender) C:\Windows\system32\httproxy.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00156936 _____ () C:\Windows\system32\bdfwcore.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00155912 _____ (BitDefender S.R.L.) C:\Windows\system32\bdpop3p.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00122928 _____ (BitDefender) C:\Windows\system32\OEMbdpredir.dll

2014-11-25 06:34 - 2014-07-10 14:08 - 00096160 _____ (BitDefender) C:\Windows\system32\bdpredir.dll

2014-11-25 06:32 - 2014-11-25 06:32 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf

2014-11-25 06:30 - 2014-11-25 06:30 - 00000000 ____D () C:\Program Files\Lavasoft

2014-11-25 06:27 - 2014-11-25 06:35 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Lavasoft

2014-11-25 06:27 - 2014-11-25 06:27 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:35 - 00000000 ____D () C:\Users\Todos os Usuários\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:35 - 00000000 ____D () C:\ProgramData\Lavasoft

2014-11-25 06:26 - 2014-11-25 06:26 - 01707144 _____ () C:\Users\Michelly Boone\Downloads\Adaware_Installer.exe

2014-11-25 05:52 - 2014-11-25 05:52 - 00000156 _____ () C:\Users\Michelly Boone\Documents\ativar-registro.reg

2014-11-25 03:12 - 2014-11-25 03:12 - 00000000 ____D () C:\Program Files (x86)\ESET

2014-11-25 03:11 - 2014-11-25 03:12 - 02347384 _____ (ESET) C:\Users\Michelly Boone\Downloads\esetsmartinstaller_ptg.exe

2014-11-25 02:57 - 2014-11-25 02:57 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Michelly Boone\Downloads\rkill.com

2014-11-25 01:46 - 2014-12-03 13:31 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-11-25 01:45 - 2014-12-02 19:21 - 00001062 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-11-25 01:45 - 2014-12-02 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-11-25 01:45 - 2014-12-02 19:21 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-11-25 01:45 - 2014-11-25 01:45 - 00000000 ____D () C:\Users\Todos os Usuários\Malwarebytes

2014-11-25 01:45 - 2014-11-25 01:45 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-11-25 01:45 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-11-25 01:45 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-11-25 01:45 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-11-25 01:41 - 2014-11-25 01:43 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Michelly Boone\Downloads\mbam-setup-2.0.3.1025.exe

2014-11-25 01:38 - 2014-11-25 01:38 - 00042396 _____ () C:\Users\Michelly Boone\Downloads\MbrScan.log

2014-11-25 01:38 - 2014-11-25 01:38 - 00000512 _____ () C:\Users\Michelly Boone\Downloads\Dump_Hdd0_DR0.mbr

2014-11-25 01:37 - 2014-11-25 01:37 - 00147456 _____ (Eric_71) C:\Users\Michelly Boone\Downloads\MbrScan.exe

2014-11-24 23:06 - 2014-11-24 23:23 - 166189576 _____ (Kaspersky Lab) C:\Users\Michelly Boone\Downloads\kis2013_13.0.1.4190ES_3831.exe

2014-11-24 22:49 - 2013-10-01 23:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2014-11-24 22:49 - 2013-10-01 23:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-11-24 22:49 - 2013-10-01 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-11-24 22:49 - 2013-10-01 22:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2014-11-24 22:49 - 2013-10-01 22:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2014-11-24 22:49 - 2013-10-01 22:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-11-24 22:49 - 2013-10-01 22:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-11-24 22:49 - 2013-10-01 21:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-11-24 22:49 - 2013-10-01 21:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-11-24 22:49 - 2013-10-01 21:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2014-11-24 22:49 - 2013-10-01 21:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-11-24 22:49 - 2013-10-01 21:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2014-11-24 22:49 - 2013-10-01 20:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-11-24 22:49 - 2013-10-01 20:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2014-11-24 22:49 - 2013-10-01 20:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-11-24 22:49 - 2013-10-01 19:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2014-11-24 22:47 - 2012-08-23 11:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2014-11-24 22:47 - 2012-08-23 11:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2014-11-24 22:47 - 2012-08-23 11:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys

2014-11-24 22:47 - 2012-08-23 08:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2014-11-24 22:47 - 2012-08-23 07:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2014-11-24 22:45 - 2014-11-07 16:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-11-24 22:45 - 2014-11-07 16:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-11-24 22:45 - 2014-11-06 01:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-11-24 22:45 - 2014-11-06 01:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-11-24 22:45 - 2014-11-06 01:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-11-24 22:45 - 2014-11-06 00:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-11-24 22:45 - 2014-11-06 00:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-11-24 22:45 - 2014-11-06 00:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-11-24 22:45 - 2014-11-06 00:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-11-24 22:45 - 2014-11-06 00:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-11-24 22:45 - 2014-11-06 00:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-11-24 22:45 - 2014-11-06 00:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-11-24 22:45 - 2014-11-06 00:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2014-11-24 22:45 - 2014-11-06 00:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-11-24 22:45 - 2014-11-06 00:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-11-24 22:45 - 2014-11-06 00:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-11-24 22:45 - 2014-11-06 00:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-11-24 22:45 - 2014-11-06 00:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-11-24 22:45 - 2014-11-06 00:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2014-11-24 22:45 - 2014-11-06 00:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2014-11-24 22:45 - 2014-11-06 00:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-11-24 22:45 - 2014-11-06 00:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-11-24 22:45 - 2014-11-06 00:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-11-24 22:45 - 2014-11-06 00:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-11-24 22:45 - 2014-11-06 00:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-11-24 22:45 - 2014-11-06 00:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-11-24 22:45 - 2014-11-06 00:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-11-24 22:45 - 2014-11-06 00:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-11-24 22:45 - 2014-11-06 00:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-11-24 22:45 - 2014-11-06 00:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-11-24 22:45 - 2014-11-06 00:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2014-11-24 22:45 - 2014-11-06 00:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-11-24 22:45 - 2014-11-05 23:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-11-24 22:45 - 2014-11-05 23:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-11-24 22:45 - 2014-11-05 23:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-11-24 22:45 - 2014-11-05 23:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2014-11-24 22:45 - 2014-11-05 23:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-11-24 22:45 - 2014-11-05 23:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-11-24 22:45 - 2014-11-05 23:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-11-24 22:45 - 2014-11-05 23:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2014-11-24 22:45 - 2014-11-05 23:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-11-24 22:45 - 2014-11-05 23:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-11-24 22:45 - 2014-11-05 23:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-11-24 22:45 - 2014-11-05 23:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-11-24 22:45 - 2014-11-05 23:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-11-24 22:45 - 2014-11-05 23:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-11-24 22:45 - 2014-11-05 23:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-11-24 22:45 - 2014-11-05 23:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-11-24 22:45 - 2014-11-05 23:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2014-11-24 22:45 - 2014-11-05 23:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-11-24 22:45 - 2014-11-05 23:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-11-24 22:45 - 2014-11-05 23:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-11-24 22:45 - 2014-11-05 22:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-11-24 22:45 - 2014-11-05 22:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-11-24 22:45 - 2014-11-05 22:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-11-24 22:45 - 2014-11-05 22:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-11-24 22:43 - 2014-11-11 00:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-11-24 22:43 - 2014-11-11 00:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll

2014-11-24 22:43 - 2014-11-10 23:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-11-24 22:43 - 2014-11-10 23:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll

2014-11-24 22:43 - 2014-11-05 14:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2014-11-24 22:43 - 2014-11-05 14:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2014-11-24 22:43 - 2014-11-05 14:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2014-11-24 22:43 - 2014-10-13 23:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2014-11-24 22:43 - 2014-10-13 23:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2014-11-24 22:43 - 2014-10-13 23:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-11-24 22:43 - 2014-10-13 23:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2014-11-24 22:43 - 2014-10-13 23:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2014-11-24 22:43 - 2014-10-13 22:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2014-11-24 22:43 - 2014-10-13 22:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-11-24 22:43 - 2014-10-13 22:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2014-11-24 22:43 - 2014-10-13 22:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2014-11-24 22:43 - 2014-10-02 23:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-11-24 22:43 - 2014-10-02 23:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2014-11-24 22:43 - 2014-10-02 22:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-11-24 22:42 - 2014-10-24 22:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-11-24 22:42 - 2014-10-24 22:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-11-24 22:42 - 2014-10-13 23:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-11-24 22:42 - 2014-10-13 22:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-11-24 22:42 - 2014-10-09 21:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-11-24 22:42 - 2014-09-19 06:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2014-11-24 22:42 - 2014-09-19 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2014-11-24 22:42 - 2014-09-19 06:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2014-11-24 22:42 - 2014-08-21 03:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-11-24 22:42 - 2014-08-21 03:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2014-11-24 22:42 - 2014-08-21 03:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-11-24 22:42 - 2014-08-21 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2014-11-24 22:42 - 2014-08-11 23:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2014-11-24 22:42 - 2014-08-11 22:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2014-11-24 22:40 - 2014-10-17 23:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-11-24 22:40 - 2014-10-17 22:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-11-24 22:40 - 2013-04-09 20:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2014-11-24 22:40 - 2013-04-02 19:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2014-11-24 22:25 - 2014-11-24 22:52 - 00459224 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-11-24 21:44 - 2014-11-24 22:35 - 00111856 _____ () C:\Users\Michelly Boone\AppData\Local\GDIPFONTCACHEV1.DAT

2014-11-24 21:44 - 2014-11-24 21:44 - 00347816 _____ (Microsoft Corporation) C:\Users\Michelly Boone\Downloads\MicrosoftFixit.wu.MATSKB.Run.exe

2014-11-24 20:21 - 2014-11-24 20:27 - 00007602 _____ () C:\Users\Michelly Boone\AppData\Local\resmon.resmoncfg

2014-11-22 11:56 - 2014-11-22 12:09 - 87438296 _____ () C:\Users\Michelly Boone\Downloads\Atalaya ultimo bien(1)_xvid.avi

2014-11-22 10:36 - 2014-11-22 10:51 - 131542756 _____ () C:\Users\Michelly Boone\Downloads\Atalaya 22 11.avi

2014-11-18 21:06 - 2014-11-24 22:23 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\Users\Todos os Usuários\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\ProgramData\YoWindow

2014-11-18 21:06 - 2014-11-18 21:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YoWindow

2014-11-18 19:09 - 2014-11-20 08:31 - 00000000 ____D () C:\Program Files (x86)\YoWindow

2014-11-18 19:08 - 2014-11-18 19:09 - 12370472 _____ () C:\Users\Michelly Boone\Downloads\yosetup.exe

2014-11-18 12:40 - 2014-11-18 12:40 - 00262144 _____ () C:\Users\Michelly Boone\Desktop\WinMTR.exe

2014-11-12 09:44 - 2014-11-12 09:45 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-11-05 14:53 - 2014-11-05 14:53 - 00001158 _____ () C:\Users\Michelly Boone\Desktop\Format Factory.lnk

2014-11-05 14:53 - 2014-11-05 14:53 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory

2014-11-05 14:52 - 2014-11-05 14:52 - 00000000 ____D () C:\Program Files (x86)\FreeTime



==================== One Month Modified Files and Folders =======



(If an entry is included in the fixlist, the file\folder will be moved.)



2014-12-03 15:56 - 2009-07-14 01:45 - 00027744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-12-03 15:56 - 2009-07-14 01:45 - 00027744 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-12-03 15:46 - 2011-04-12 10:40 - 00709116 _____ () C:\Windows\system32\prfh0416.dat

2014-12-03 15:46 - 2011-04-12 10:40 - 00149296 _____ () C:\Windows\system32\prfc0416.dat

2014-12-03 15:46 - 2009-07-14 02:13 - 01645422 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-12-03 15:39 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-12-03 14:56 - 2012-10-14 22:33 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Local\CrashDumps

2014-12-03 14:55 - 2011-12-23 07:50 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-12-03 14:07 - 2013-07-15 18:44 - 00000000 ____D () C:\Users\Todos os Usuários\GAS Tecnologia

2014-12-03 14:07 - 2013-07-15 18:44 - 00000000 ____D () C:\ProgramData\GAS Tecnologia

2014-12-03 13:30 - 2014-02-28 07:24 - 00000000 ___RD () C:\Users\Michelly Boone\Dropbox

2014-12-03 13:30 - 2014-02-28 07:22 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Dropbox

2014-12-03 13:29 - 2014-01-17 10:28 - 00000000 ____D () C:\Users\Public\interapp

2014-12-03 13:29 - 2009-07-14 02:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-12-03 13:28 - 2014-02-13 12:04 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\Windows\SysWOW64\Drivers\gbpndisrd.sys

2014-12-03 13:28 - 2014-02-13 12:04 - 00010266 _____ () C:\Windows\SysWOW64\Drivers\ndisrd.cat

2014-12-03 13:28 - 2014-02-13 12:04 - 00001402 _____ () C:\Windows\SysWOW64\Drivers\gas.cer

2014-12-03 13:24 - 2012-04-26 09:45 - 00000000 ____D () C:\Users\Michelly Boone

2014-12-03 13:16 - 2012-04-28 13:43 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Skype

2014-12-03 11:21 - 2011-12-23 07:50 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-12-03 10:29 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\tracing

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ____D () C:\Users\Todos os Usuários\Skype

2014-12-03 06:03 - 2012-04-28 13:43 - 00000000 ____D () C:\ProgramData\Skype

2014-12-01 22:56 - 2013-06-07 14:46 - 00000000 ____D () C:\Users\Todos os Usuários\AVAST Software

2014-12-01 22:56 - 2013-06-07 14:46 - 00000000 ____D () C:\ProgramData\AVAST Software

2014-12-01 22:18 - 2013-02-04 17:19 - 00000000 ____D () C:\Windows\Minidump

2014-12-01 21:35 - 2012-04-28 13:55 - 00000000 ____D () C:\Users\Michelly Boone\Tracing

2014-12-01 21:12 - 2013-11-27 22:29 - 00003842 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-12-01 21:12 - 2013-07-13 21:56 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-12-01 21:12 - 2013-07-13 21:56 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-12-01 21:09 - 2014-02-13 12:04 - 00000000 ____D () C:\Users\Todos os Usuários\GbPlugin

2014-12-01 21:09 - 2014-02-13 12:04 - 00000000 ____D () C:\ProgramData\GbPlugin

2014-11-27 13:22 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\security

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\Users\Todos os Usuários\HP

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\ProgramData\HP

2014-11-27 13:21 - 2013-10-05 22:09 - 00000000 ____D () C:\Program Files (x86)\HP

2014-11-27 13:21 - 2012-04-28 14:45 - 00000000 __RHD () C:\MSOCache

2014-11-27 13:21 - 2011-12-23 07:51 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-11-27 13:21 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\registration

2014-11-27 08:59 - 2014-01-06 12:08 - 00068608 ___SH () C:\Users\Michelly Boone\Documents\Thumbs.db

2014-11-25 12:42 - 2013-11-11 22:55 - 00628288 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys

2014-11-25 12:42 - 2013-11-11 22:55 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys

2014-11-25 12:42 - 2013-11-11 22:55 - 00092768 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys

2014-11-25 12:42 - 2012-08-02 15:09 - 00029792 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klim6.sys

2014-11-25 11:05 - 2014-03-18 19:23 - 00000000 ____D () C:\Program Files (x86)\PSafe

2014-11-25 09:32 - 2009-07-14 00:20 - 00000000 __RHD () C:\Users\Default

2014-11-25 09:22 - 2009-07-13 23:34 - 00000215 _____ () C:\Windows\system.ini

2014-11-25 09:05 - 2014-02-13 09:17 - 00000000 ____D () C:\Users\Todos os Usuários\Temp

2014-11-25 09:05 - 2014-02-13 09:17 - 00000000 ____D () C:\ProgramData\Temp

2014-11-25 05:52 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\LiveKernelReports

2014-11-25 02:00 - 2009-07-14 02:32 - 00000000 ____D () C:\Windows\Offline Web Pages

2014-11-24 22:53 - 2009-07-14 00:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-24 22:50 - 2014-05-06 19:14 - 00000000 ___SD () C:\Windows\system32\CompatTel

2014-11-24 22:50 - 2009-07-14 00:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-11-24 22:16 - 2012-04-30 00:30 - 00000000 ____D () C:\Users\Todos os Usuários\Microsoft Help

2014-11-24 22:16 - 2012-04-30 00:30 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-11-24 22:13 - 2011-12-23 08:01 - 01610696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-11-24 22:12 - 2013-12-15 14:46 - 00000000 ____D () C:\Windows\system32\MRT

2014-11-24 22:07 - 2012-04-28 14:53 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-11-18 19:16 - 2013-11-18 23:44 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Sony

2014-11-16 05:55 - 2014-02-28 07:23 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-11-15 12:05 - 2013-06-07 20:49 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\vlc

2014-11-12 09:48 - 2012-04-26 09:48 - 00000000 ____D () C:\Users\Michelly Boone\AppData\Roaming\Adobe

2014-11-12 09:44 - 2012-04-28 13:41 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-11-12 09:44 - 2011-12-23 08:14 - 00000000 ____D () C:\Users\Todos os Usuários\Adobe

2014-11-12 09:44 - 2011-12-23 08:14 - 00000000 ____D () C:\ProgramData\Adobe

2014-11-11 18:07 - 2012-11-11 14:07 - 00000000 ____D () C:\Users\Michelly Boone\Documents\Ixia

2014-11-10 14:27 - 2009-07-14 02:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-11-10 14:27 - 2009-07-14 02:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU(31).TXT

2014-11-08 05:58 - 2014-02-13 12:04 - 00000000 ____D () C:\Program Files (x86)\GbPlugin

2014-11-06 10:18 - 2009-07-14 02:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-11-05 14:55 - 2013-11-18 22:45 - 00000000 ____D () C:\Users\Michelly Boone\Documents\FFOutput

2014-11-05 14:53 - 2014-06-03 12:38 - 00000000 __SHD () C:\Users\Todos os Usuários\360Quarant

2014-11-05 14:53 - 2014-06-03 12:38 - 00000000 __SHD () C:\ProgramData\360Quarant

2014-11-05 14:53 - 2014-05-30 12:41 - 00000000 ____D () C:\$360Section

2014-11-04 14:30 - 2010-11-21 00:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe



Files to move or delete:

====================

C:\Program Files\Windows Sidebar\sidebar.exe





Some content of TEMP:

====================

C:\Users\Michelly Boone\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplk50ee.dll

C:\Users\Michelly Boone\AppData\Local\Temp\Quarantine.exe

C:\Users\Michelly Boone\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Michelly Boone\AppData\Local\Temp\sqlite3.dll





==================== Bamital & volsnap Check =================



(There is no automatic fix for files that do not pass verification.)



C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed





LastRegBack: 2014-11-25 00:57



==================== End Of Log ============================



Addition.txt



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2014

Ran by Michelly Boone at 2014-12-03 16:07:43

Running from C:\Users\Michelly Boone\Desktop

Boot Mode: Normal

==========================================================





==================== Security Center ========================



(If an entry is included in the fixlist, it will be removed.)



AV: Kaspersky PURE 3.0 (Disabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}

AV: Ad-Aware Antivirus (Disabled - Out of date) {D87B6541-12A1-DAEA-0033-9B8057AAB996}

AS: Ad-Aware Antivirus (Disabled - Out of date) {631A84A5-349B-D564-3A83-A0F22C2DF32B}

AS: Kaspersky PURE 3.0 (Disabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Ad-Aware Firewall (Disabled) {E040E464-58CE-DBB2-2B6C-32B5A979FEED}

FW: Kaspersky PURE 3.0 (Disabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}



==================== Installed Programs ======================



(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)



ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)

ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden

Ad-Aware Antivirus (HKLM\...\{6D1428BD-E5F2-4378-B620-E7442E7C2BFB}_AdAwareUpdater) (Version: 11.4.6792.0 - Lavasoft)

Ad-Aware Web Companion (x32 Version: 1.0.788.1475 - Lavasoft) Hidden

AdAwareInstaller (Version: 11.4.6792.0 - Lavasoft) Hidden

AdAwareUpdater (Version: 11.4.6792.0 - Lavasoft) Hidden

Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.239 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.09) - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)

AntimalwareEngine (Version: 3.0.0.56 - Lavasoft) Hidden

AntispamEngine (Version: 2.4.2158.0 - Lavasoft) Hidden

ARIS EXPRESS (HKLM-x32\...\{49ABE0DF-5BC9-40E8-8996-7A2938BFB5C2}) (Version: 2.4 - Software AG)

Ashampoo Burning Studio 14 v.14.0.9 (HKLM-x32\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1) (Version: 14.0.9 - Ashampoo GmbH & Co. KG)

Ashampoo Burning Studio FREE v.1.14.5 (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.14.5 - Ashampoo GmbH & Co. KG)

Avast License by ZeNiX [2014-01-11] (HKLM-x32\...\Avast_2050_ZeNiX [2014-01-11]_is1) (Version:  - )

AvcEngine (Version: 3.10.7820.0 - Lavasoft) Hidden

Bejeweled(R) 3 (remove only) (HKLM-x32\...\Bejeweled(R) 3) (Version:  - )

Bing Bar (HKLM-x32\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)

CCleaner (HKLM\...\CCleaner) (Version: 4.02 - Piriform)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Desinstalar impressora EPSON TX133 TX135 Series (HKLM\...\EPSON TX133 TX135 Series) (Version:  - SEIKO EPSON Corporation)

Device Doctor v3.1 (HKLM-x32\...\Device Doctor_is1) (Version: 3.1 - Device Doctor Software Inc.)

Dropbox (HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)

Epson Easy Photo Print 2 (HKLM-x32\...\{E65AE514-9C14-48DE-BAE5-64A4F9CB6FE5}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print Plug-in for Windows Live Photo Gallery (HKLM-x32\...\EEPPPlugIn) (Version:  - SEIKO EPSON Corporation)

Epson Easy Photo Print Plug-in for Windows Live Photo Gallery Setup (x32 Version: 1.00.0000 - SEIKO EPSON Corporation) Hidden

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

FirewallEngine (Version: 1.6.0.0 - Lavasoft) Hidden

FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory)

Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

GBBD Guardião - Itaú 30 horas (HKLM-x32\...\{70e5f739-1d2a-40ae-bbc9-4b3e6af4c831}_is1) (Version: 3.7.1.1 - )

Gerenciador de Inicialização Positivo (HKLM\...\{E365D4D7-BD51-4A7F-8ECA-0B6C0C42D3CF}_is1) (Version: 1.0.16.1 - Positivo Informática S.A.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)

Google Drive (HKLM-x32\...\{C6640705-7479-4EE5-BC86-879F05F65E74}) (Version: 1.17.7290.4094 - Google, Inc.)

Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

HP Deskjet 3510 series Ajuda (HKLM-x32\...\{949C49A5-91B7-40D2-AF9A-15681454074A}) (Version: 28.0.0 - Hewlett Packard)

HP Deskjet 3510 series Estudo de aprimoramento de produtos (HKLM\...\{34B5B8D3-4106-4713-AAE1-DAE898EEB21C}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Deskjet 3510 series Software básico do dispositivo (HKLM\...\{B332BF47-16DD-476D-AE00-31DC6DE5B87A}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12412 - HP)

HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)

Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Kaspersky Internet Security 2013 (HKLM-x32\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab)

Kaspersky PURE 3.0 (HKLM-x32\...\InstallWIX_{D0702EE9-9DE4-419A-9C6C-4730B1C985BA}) (Version: 13.0.2.558 - Kaspersky Lab)

Kaspersky PURE 3.0 (x32 Version: 13.0.2.558 - Kaspersky Lab) Hidden

LavasoftTcpService (x32 Version: 2.2.9.5 - Lavasoft) Hidden

LIVE! Control Center 1.11(X64) (HKLM\...\{271F5A67-A83A-4985-B41B-201EB267E6CF}) (Version: 1.11 - OEM)

LIVE! OSD 1.35 (HKLM-x32\...\{73289228-1853-4623-982A-EB17FF0270CA}) (Version: 1.35 - OEM)

Malwarebytes Anti-Malware versión 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office com Clique para Executar 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0416-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Starter 2010 - Português (Brasil) (HKLM-x32\...\{90140011-0066-0416-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\OneDriveSetup.exe) (Version: 17.0.4041.0512 - Microsoft Corporation)

Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (HKLM-x32\...\{95140000-007D-0409-0000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Módulo Adicional de Segurança CAIXA (HKLM-x32\...\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1) (Version: Módulo Adicional de Segurança CAIXA - )

Módulo de Segurança - Banco do Brasil (HKLM-x32\...\{36386dc9-8543-4b12-ae6b-220fd52f19f3}_is1) (Version: 3.10.0.1 - )

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

OnlineThreatsEngine (Version: 2.2.3.0 - Lavasoft) Hidden

PDF Reader (HKU\S-1-5-21-597722200-2002237864-835144990-1000\...\PDF Reader) (Version:  - )

Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

PlayMemories Home (HKLM-x32\...\{0657DE52-8F5C-4073-B70C-ED4F3F7FA076}) (Version: 7.0.03.04240 - Sony Corporation)

Positivo 3D Incrível (HKLM-x32\...\{137637BF-F32A-48B3-A5FE-D677FCB1A80B}_is1) (Version: 1.0.0.4 - Positivo Informática S.A.)

Positivo Aplicativos (HKLM\...\{AAB13E97-449B-4D5B-BDE2-AB47B938B722}_is1) (Version: 1.3.10.4 - Positivo Informática S.A.)

Positivo Áudio (HKLM\...\{D00FA097-5115-400D-84AD-4ADEF3EBDB5E}_is1) (Version: 1.4.1.0 - Positivo Informática S.A.)

Positivo Backup (HKLM-x32\...\{387B3DFA-BB12-45E6-B431-4A7BF2EBD985}_is1) (Version: 1.5.2.2 - Positivo Informática S.A.)

Positivo Bateria (HKLM-x32\...\{FD6F6859-2863-4ABB-87D0-A263F3E9FF45}_is1) (Version: 1.4.4.0 - Positivo Informática S.A.)

Positivo Conversor 3D (HKLM\...\{D0582368-2DFF-48EA-AC8D-1FA8E31CA38C}_is1) (Version: 1.1.1.8 - Positivo Informática S.A.)

Positivo NIS 2012 License Activator (HKLM-x32\...\{5400FA29-4A55-4EB9-AD27-AF20DBD334E1}_is1) (Version: 1.2.0.0 - Positivo Informática S.A.)

Positivo Roteador (HKLM-x32\...\{f1cb797f-bf34-495c-bda9-efe098837651}_is1) (Version: 1.0.0.9 - Positivo Informática S.A.)

Positivo Sincronize (HKLM-x32\...\{6DA3261A-DCEB-401A-ABE0-A367C252B86C}_is1) (Version: 1.5.3.0 - Positivo Informática S.A.)

Positivo WebCam (HKLM-x32\...\{E11C7438-7550-4676-92CE-846CC5DA3548}_is1) (Version: 1.4.1.1 - Positivo Informática S.A.)

QuickKey 1.00 (HKLM-x32\...\{BF73DC38-2331-4CCB-AF7F-594EF8604711}_is1) (Version: 1.00 - OEM)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6293 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30104 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4123-B2B9-173F09590E16}) (Version: 1.00.0174 - REALTEK Semiconductor Corp.)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)

Soft Organizer version 3.51 (HKLM-x32\...\Soft Organizer_is1) (Version: 3.51 - ChemTable Software)

Software de Cadastro Positivo 6.0 (HKLM-x32\...\{4A33ECF3-6AC6-4A9B-932C-4E81625423C7}_is1) (Version: 6.0.0.0 - Positivo Informática)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.19.0 - Synaptics Incorporated)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)

Tutorial 1.0 (HKLM-x32\...\{1C86726E-4A85-4322-8A1C-56EDE170FAB5}_is1) (Version: 1.0.0.0 - Positivo Informática)

VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)

Warsaw 1.3.1 (HKLM-x32\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.3.1 - GAS Tecnologia)

Watchtower Library 2011 - Português (HKLM-x32\...\{A6F7D429-0021-4AD5-9B7D-CB135E7DE322}) (Version: 13.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)

Watchtower Library 2013 - español (HKLM-x32\...\{79D301F3-DA92-4C78-820D-BBEC0AC08118}) (Version: 15.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.)

Web Companion (HKLM-x32\...\{0AB46A9E-1335-46CC-81A2-F34AB8DCAD62}_WebCompanion) (Version: 1.0.788.1475 - Lavasoft)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

X-Lite 3.0 (HKLM-x32\...\X-Lite 1.5_is1) (Version:  - CounterPath Solutions Inc.)

YoWindow (HKLM-x32\...\yowindow) (Version: 3 - RepkaSoft)



==================== Custom CLSID (selected items): ==========================



(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)



CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0000}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll (GAS Tecnologia)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0013}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_uni_64.dll (GAS Tecnologia)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0000}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll (GAS Tecnologia)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0013}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_uni_64.dll (GAS Tecnologia)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\FileSyncApi64.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-597722200-2002237864-835144990-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)



==================== Restore Points  =========================



26-11-2014 03:00:05 Windows Update

26-11-2014 13:03:41 Instalação de Pacote de Driver de Dispositivo: Microsoft Adaptadores de rede

26-11-2014 18:07:21 Windows Update

26-11-2014 20:07:58 Instalado Realtek USB 2.0 Card Reader

26-11-2014 20:36:06 Instalado Realtek WLAN Driver

26-11-2014 20:38:46 Instalado Realtek Ethernet Controller Driver

27-11-2014 11:53:37 Instalado Realtek Ethernet Controller Driver

27-11-2014 12:01:18 Instalado Realtek Ethernet Controller Driver

27-11-2014 12:11:02 Operação de restauração

27-11-2014 13:28:44 Instalado Realtek Ethernet Controller Driver

27-11-2014 13:41:42 Instalado Realtek Ethernet Controller Driver

27-11-2014 16:16:14 Operação de restauração

27-11-2014 16:35:33 Windows Update

27-11-2014 18:32:08 Windows Update

01-12-2014 22:10:16 avast! antivirus system restore point

01-12-2014 22:21:31 avast! antivirus system restore point

01-12-2014 22:23:26 Instalação de Pacote de Driver de Dispositivo: Avast Serviço de Rede

01-12-2014 22:43:00 avast! antivirus system restore point

01-12-2014 22:50:58 Instalação de Pacote de Driver de Dispositivo: Avast Serviço de Rede

01-12-2014 23:37:41 avast! antivirus system restore point

01-12-2014 23:39:32 Instalação de Pacote de Driver de Dispositivo: Avast Serviço de Rede

02-12-2014 00:04:19 avast! antivirus system restore point

02-12-2014 01:08:59 avast! antivirus system restore point

02-12-2014 01:32:41 avast! antivirus system restore point

02-12-2014 01:33:28 avast! antivirus system restore point

02-12-2014 01:35:31 avast! antivirus system restore point

02-12-2014 01:43:18 Instalação de Pacote de Driver de Dispositivo: Avast Serviço de Rede

02-12-2014 01:54:09 avast! antivirus system restore point

02-12-2014 17:25:21 Windows Update

03-12-2014 13:49:49 Instalação - Drive PCI placa de rede

03-12-2014 13:55:44 Instalado Realtek Ethernet Controller Driver For Windows Vista aù•à1

03-12-2014 14:21:30 Instalado Realtek Ethernet Controller All-In-One Windows Driver

03-12-2014 14:28:15 Instalado Realtek Ethernet Controller All-In-One Windows Driver

03-12-2014 17:54:50 Removido Realtek Ethernet Controller All-In-One Windows Driver



==================== Hosts content: ==========================



(If needed Hosts: directive could be included in the fixlist to reset Hosts.)



2009-07-13 23:34 - 2014-12-01 21:09 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost



==================== Scheduled Tasks (whitelisted) =============



(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)



Task: {02A8C7E4-1F5C-42E9-B4CD-9E1C7EE0B1C8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-26] (Google Inc.)

Task: {0587B16B-61DC-4E2F-A432-CD943ECCDD62} - System32\Tasks\{9D4A5D2F-E370-4D01-9DCD-C54FA36EE9D8} => C:\Users\Michelly Boone\Desktop\11075872_REDE_WIN7_x64_00\setup.exe [2010-06-09] (Acresso Software Inc.)

Task: {09063558-F31F-4869-806A-881B2AEDF03A} - System32\Tasks\{313301DC-B1EA-45A4-BA62-9FE981A2919D} => C:\Program Files\AVAST Software\Avast\AvastUI.exe

Task: {0FC59B26-EFE9-4DB7-AD14-37E0F58E5BE1} - System32\Tasks\{9E66C78F-CE9F-42F4-9A82-61F87D769002} => C:\Program Files\AVAST Software\Avast\AvastUI.exe

Task: {117279E4-360E-41D0-98F0-EB87E583A623} - System32\Tasks\{A2BECC90-8B37-4DD4-8F9A-831307A59721} => C:\Users\Michelly Boone\Downloads\11075872_REDE_WIN7_X64_00 (1).exe [2014-12-03] ()

Task: {185AC1EA-03A3-4BC4-98B6-31B90A68364D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-26] (Google Inc.)

Task: {23B43765-28AE-4D42-A4A6-778D1ED21998} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-01] (Adobe Systems Incorporated)

Task: {2C1EDF36-4615-4EC2-96DE-23DDDCDB0A5B} - System32\Tasks\{64FD857D-6973-4B84-AB8E-DA5999222384} => C:\Users\Michelly Boone\Desktop\11075872_REDE_WIN7_x64_00\setup.exe [2010-06-09] (Acresso Software Inc.)

Task: {332634A2-91A2-418D-B37E-6C5C41EFEED6} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {4CBD918C-7B4F-44BE-A5E7-D48E462EA60F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)

Task: {505CCA2B-D296-4EF3-9407-D54E4BCE53F6} - System32\Tasks\HPCustParticipation HP Deskjet 3510 series => C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {55D789C2-7739-42E3-A2CA-FB98F13E8EE6} - System32\Tasks\{4428844F-1BE9-4C11-B0E1-84E47071EB9F} => C:\Program Files\AVAST Software\Avast\AvastUI.exe

Task: {5930CD56-FAAC-4F54-B6EA-B3744057F8F0} - System32\Tasks\{6ABCB2DA-F359-4B3C-B47A-7716CEFE125B} => C:\Program Files\AVAST Software\Avast\avastui.exe

Task: {6EF5FBEB-BC6C-40A9-9F8F-2C74D0F5D60B} - System32\Tasks\Games\UpdateCheck_S-1-5-21-597722200-2002237864-835144990-1000

Task: {96EBE6FC-DA81-4D56-8E3C-9D5734582306} - System32\Tasks\{616BF0FB-798D-4870-B691-CBC4913EB511} => Iexplore.exe <a href="http://ui.skype.com/ui/0/5.10.0.116/pt/abandoninstall?page=tsProgressBar" target="_blank">http://ui.skype.com/ui/0/5.10.0.116/pt/abandoninstall?page=tsProgressBar</a>

Task: {ADB85830-6ED3-4572-88A0-93034C69786C} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2013-11-18] ()

Task: {D4F40F3B-18F5-495A-AE3F-7B04473F347A} - System32\Tasks\{ADBD9797-50F7-42F7-9317-67FB0D04672E} => C:\Program Files\AVAST Software\Avast\AvastUI.exe

Task: {DAF906A0-200E-45F7-A671-003844B5C664} - System32\Tasks\InstallerTracingAgent => C:\Program Files (x86)\Soft Organizer\SoftOrganizerAgent.exe [2014-02-26] () <==== ATTENTION

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe



==================== Loaded Modules (whitelisted) =============



2011-11-01 11:09 - 2010-11-12 12:08 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 08925504 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe

2014-10-15 14:03 - 2014-10-15 14:03 - 03396400 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\RCF.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00123744 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\boost_filesystem-vc100-mt-1_55.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00024408 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\boost_system-vc100-mt-1_55.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00055648 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\boost_date_time-vc100-mt-1_55.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00103768 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\boost_thread-vc100-mt-1_55.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00033624 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\boost_chrono-vc100-mt-1_55.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00500056 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\boost_locale-vc100-mt-1_55.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 02132800 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\HtmlFramework.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00066872 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\DllStorage.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00869712 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTrayDefaultSkin.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00811328 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\Localization.dll

2014-02-06 03:35 - 2014-02-26 20:44 - 01235032 _____ () C:\Program Files (x86)\Soft Organizer\SoftOrganizerAgent.exe

2014-10-15 14:03 - 2014-10-15 14:03 - 16893248 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareDesktop.exe

2014-10-15 14:03 - 2014-10-15 14:03 - 00788824 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\boost_regex-vc100-mt-1_55.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 00451440 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\boost_program_options-vc100-mt-1_55.dll

2014-10-15 14:03 - 2014-10-15 14:03 - 09304408 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareDesktopDefaultSkin.dll

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2014-10-15 14:03 - 2014-10-15 14:03 - 02753360 _____ () C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareShellExtension.dll

2014-12-03 08:23 - 2014-12-03 08:34 - 165181728 _____ () C:\Users\Michelly Boone\Downloads\setup_11.0.3.8.x01_2014_12_03_09_36.exe

2014-12-03 14:19 - 2014-12-03 09:38 - 00820080 _____ () C:\Users\Michelly Boone\AppData\Local\Temp\RarSFX0\3738614.exe

2012-12-20 18:19 - 2012-12-20 18:19 - 00479752 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\dblite.dll

2012-12-20 18:19 - 2012-12-20 18:19 - 01310728 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\kpcengine.2.2.dll

2010-01-08 10:04 - 2010-01-08 10:04 - 00100352 _____ () C:\Program Files (x86)\OEM\LIVE! OSD 1.35\LiveIO.dll

2014-12-03 13:30 - 2014-12-03 13:30 - 00043008 _____ () c:\Users\Michelly Boone\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplk50ee.dll

2013-08-23 16:01 - 2013-08-23 16:01 - 25100288 _____ () C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\libcef.dll

2013-10-19 19:25 - 2012-03-12 10:54 - 00194560 _____ () C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Áudio\LibSoundManager.dll

2014-10-16 07:50 - 2014-10-16 07:50 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll

2011-12-23 07:53 - 2010-11-05 22:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2014-10-01 07:49 - 2014-09-23 01:06 - 01098056 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libglesv2.dll

2014-10-01 07:49 - 2014-09-23 01:06 - 00174408 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libegl.dll

2014-10-01 07:49 - 2014-09-23 01:07 - 08577864 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll

2014-10-01 07:49 - 2014-09-23 01:07 - 00331592 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll

2014-10-01 07:49 - 2014-09-23 01:06 - 01660232 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ffmpegsumo.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf

2014-10-01 07:49 - 2014-09-23 01:07 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll



==================== Alternate Data Streams (whitelisted) =========



(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)



AlternateDataStreams: C:\Windows\System32:287B8032_Bb.gbp

AlternateDataStreams: C:\Windows\System32:287B8032_Uni.gbp



==================== Safe Mode (whitelisted) ===================



(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)





==================== EXE Association (whitelisted) =============



(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)





==================== MSCONFIG/TASK MANAGER disabled items =========



(Currently there is no automatic fix for this section.)





========================= Accounts: ==========================



Administrador (S-1-5-21-597722200-2002237864-835144990-500 - Administrator - Disabled)

Convidado (S-1-5-21-597722200-2002237864-835144990-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-597722200-2002237864-835144990-1002 - Limited - Enabled)

Michelly Boone (S-1-5-21-597722200-2002237864-835144990-1000 - Administrator - Enabled) => C:\Users\Michelly Boone



==================== Faulty Device Manager Devices =============



Name: BAPIDRV

Description: BAPIDRV

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: BAPIDRV

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.





==================== Event log errors: =========================



Application errors:

==================

Error: (12/03/2014 02:55:53 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nome de aplicativo com falha: explorer.exe, versão: 6.1.7601.17567, carimbo de hora: 0x4d6727a7

Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000

Código de exceção: 0xc0000005

Deslocamento com falha: 0x65c46c6a

Identificação do processo com falha: 0x9b0

Hora de início do aplicativo com falha: 0xexplorer.exe0

Caminho do aplicativo com falha: explorer.exe1

FCaminho do módulo de falhas: explorer.exe2

Identificação do Relatório: explorer.exe3



Error: (12/03/2014 02:54:55 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..





Details:

AddLegacyDriverFiles: Unable to back up image of binary 3738614drv.



System Error:

O sistema não pode encontrar o arquivo especificado.

.





System errors:

=============

Error: (12/03/2014 03:44:17 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}





Microsoft Office Sessions:

=========================

Error: (12/03/2014 02:55:53 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: explorer.exe6.1.7601.175674d6727a7unknown0.0.0.000000000c000000565c46c6a9b001d00f226060e15dC:\Windows\SysWOW64\explorer.exeunknown9f2be867-7b15-11e4-b42b-94f72357ea16



Error: (12/03/2014 02:54:55 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description:

Details:

AddLegacyDriverFiles: Unable to back up image of binary 3738614drv.



System Error:

O sistema não pode encontrar o arquivo especificado.





CodeIntegrity Errors:

===================================

  Date: 2014-12-03 13:28:37.999

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-03 13:28:37.983

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-03 05:47:00.797

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-03 05:47:00.781

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-02 22:36:37.876

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-02 22:36:37.844

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-02 21:50:32.872

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-02 21:50:32.856

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-02 21:13:27.881

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.



  Date: 2014-12-02 21:13:27.865

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\RtsUStor.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.





==================== Memory info ===========================



Processor: Intel(R) Core(TM) i7-2620M CPU @ 2.70GHz

Percentage of memory in use: 67%

Total physical RAM: 5990.5 MB

Available physical RAM: 1921.3 MB

Total Pagefile: 11979.18 MB

Available Pagefile: 7405.68 MB

Total Virtual: 8192 MB

Available Virtual: 8191.86 MB



==================== Drives ================================



Drive c: () (Fixed) (Total:688.87 GB) (Free:556.79 GB) NTFS



==================== MBR & Partition Table ==================



========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 588178DD)

Partition 1: (Active) - (Size=9.8 GB) - (Type=27)

Partition 2: (Not Active) - (Size=688.9 GB) - (Type=07 NTFS)



==================== End Of Log ============================

• Copie estas informações que estão em vermelho,para o Bloco de Notas.
  
• Salve-a com o nome fixlist.txt
  
• Salve-a no mesmo local em que se encontra a FRST
  
  

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-12-2014

Ran by Michelly Boone at 2014-12-03 17:27:11 Run:1

Running from C:\Users\Michelly Boone\Desktop

Loaded Profile: Michelly Boone (Available profiles: Michelly Boone)

Boot Mode: Normal

==============================================



Content of fixlist:

*****************

start

CloseProcesses:

HKLM-x32\...\Run: [] => [X]

HKU\S-1-5-21-597722200-2002237864-835144990-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

Toolbar: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

Toolbar: HKU\S-1-5-21-597722200-2002237864-835144990-1000 -> No Name - {742E70CF-7770-412D-86CB-230B322E807C} - No File

CHR DefaultSearchURL: Default -> <a href="http://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A&ref=toolbox&q={searchTerms}" target="_blank">http://start.iminent.com/?appId=0FC5F93A-3549-42B1-9025-DE47F4278C0A&ref=toolbox&q={searchTerms}</a>

S3 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [76096 2013-08-08] (Baidu, Inc.)

S1 BAPIDRV; system32\DRIVERS\BAPIDRV64.sys [X]

S3 BTMCOM; \SystemRoot\System32\Drivers\btmcom.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 dcdbas; system32\DRIVERS\dcdbas64.sys [X]

2014-12-03 13:33 - 2014-12-03 13:33 - 01707646 _____ (Thisisu) C:\Users\Michelly Boone\Downloads\JRT.exe

2014-12-03 13:04 - 2014-12-03 13:24 - 00000000 ____D () C:\AdwCleaner

2014-12-03 13:00 - 2014-12-03 13:01 - 02154496 _____ () C:\Users\Michelly Boone\Downloads\adwcleaner_4.103.exe

2014-11-25 09:32 - 2014-11-25 09:32 - 00035427 _____ () C:\ComboFix.txt

2014-11-25 09:00 - 2014-11-25 09:32 - 00000000 ____D () C:\Qoobox

2014-11-25 11:05 - 2014-03-18 19:23 - 00000000 ____D () C:\Program Files (x86)\PSafe

C:\Users\Michelly Boone\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplk50ee.dll

C:\Users\Michelly Boone\AppData\Local\Temp\Quarantine.exe

C:\Users\Michelly Boone\AppData\Local\Temp\SkypeSetup.exe

C:\Users\Michelly Boone\AppData\Local\Temp\sqlite3.dll

Task: {DAF906A0-200E-45F7-A671-003844B5C664} - System32\Tasks\InstallerTracingAgent => C:\Program Files (x86)\Soft Organizer\SoftOrganizerAgent.exe [2014-02-26] () <==== ATTENTION

emptytemp:

end

*****************



Processes closed successfully.

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.

"HKU\S-1-5-21-597722200-2002237864-835144990-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value deleted successfully.

"HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" => Key not found.

HKU\S-1-5-21-597722200-2002237864-835144990-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{742E70CF-7770-412D-86CB-230B322E807C} => value deleted successfully.

"HKCR\CLSID\{742E70CF-7770-412D-86CB-230B322E807C}" => Key not found.

Chrome DefaultSearchURL deleted successfully.

BprotectEx => Service deleted successfully.

BAPIDRV => Service deleted successfully.

BTMCOM => Service deleted successfully.

catchme => Service deleted successfully.

dcdbas => Service deleted successfully.

C:\Users\Michelly Boone\Downloads\JRT.exe => Moved successfully.

C:\AdwCleaner => Moved successfully.

C:\Users\Michelly Boone\Downloads\adwcleaner_4.103.exe => Moved successfully.

C:\ComboFix.txt => Moved successfully.

C:\Qoobox => Moved successfully.

C:\Program Files (x86)\PSafe => Moved successfully.

C:\Users\Michelly Boone\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplk50ee.dll => Moved successfully.

C:\Users\Michelly Boone\AppData\Local\Temp\Quarantine.exe => Moved successfully.

C:\Users\Michelly Boone\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.

C:\Users\Michelly Boone\AppData\Local\Temp\sqlite3.dll => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DAF906A0-200E-45F7-A671-003844B5C664}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DAF906A0-200E-45F7-A671-003844B5C664}" => Key deleted successfully.

C:\Windows\System32\Tasks\InstallerTracingAgent => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\InstallerTracingAgent" => Key deleted successfully.

EmptyTemp: => Removed 1.1 GB temporary data.





The system needed a reboot.



==== End of Fixlog ====

• Baixe: <ZHPDiag ><> ( ...Nicolas Coolman)
  
• Salve-o no Disco local (C ou D).
  
• Desabilite seu antivírus, e execute ZHPDiag.exe para instalar.
  
  
  
• Execute o ícone do pergaminho!
  
  
  
• Clique na opção "COMPLETA" e aguarde a conclusão.
  
• Clique OK e,ao concluir, poste o relatório! ( ZHPDiag.txt )
  
• Obs: O relatório por ser extenso deve ser postado em um desses sites:
  
• Acesse: <>
  
• Ou anexe-o no fórum !
  

<a href="http://cjoint.com/?DLedvpi76NE" target="_blank">http://cjoint.com/?DLedvpi76NE</a>



~ Relatório do ZHPDiag v2014.11.30.168 - Nicolas Coolman (30/11/2014)

~ Iniciado por Michelly Boone (03/12/2014 23:00:13)

~ Facebook : <a href="https://www.facebook.com/nicolascoolman1" target="_blank">https://www.facebook.com/nicolascoolman1</a>

~ Endereço do Webforum : <a href="http://forum.nicolascoolman.fr" target="_blank">http://forum.nicolascoolman.fr</a>

~ Tradução pelo utilizador

~ Estatuto da versão : Versão atualizada.

~ Lista Branca : Desativado pelo Utilizador

~ Elevação dos Privilégios : OK

~ Controle de Conta de Utilizador : Activate by user





---\\ Navegadores Internet

MSIE: Internet Explorer v11.0.9600.17420 (Defaut)

GCIE: Google Chrome v37.0.2062.124



---\\ Informações sobre os produtos Windows

~ Langage: Portugais

Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)

Windows Server License Manager Script : OK



---\\ Softwares de proteçao do sistema

FirewallEngine v1.6.0.0

Kaspersky Internet Security 2013 v13.0.1.4190

Kaspersky PURE 3.0 v13.0.2.558

Malwarebytes Anti-Malware versión 2.0.4.1028

Ad-Aware Antivirus v11.4.6792.0

Ad-Aware Web Companion v1.0.788.1475

ESET Online Scanner v3

Windows Defender W7 (Activate)



---\\ Softwares d'optimização do sistema

CCleaner v4.02



---\\ Softwares de partilha do PeerToPeer (P2P)



---\\ Monitoramento dos softwares

Adobe Flash Player 15 ActiveX

Adobe Reader XI



---\\ Informações sobre o sistema

~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel

~ Operating System: 64 Bits

Boot mode: Normal (Normal boot)

Total RAM: 5990 MB (54% free)

System Restore: Activé (Enable)

System drive C: has 558 GB (81%) free of 689 GB



---\\ Modo de conexão ao sistema

~ Computer Name: MICHELLYBOONE

~ User Name: Michelly Boone

~ All Users Names: Michelly Boone, HomeGroupUser$, Convidado, Administrador,

~ Unselected Option: None

Logged in as Administrator



---\\ As variáveis de ambiente

~ System Unit : C:\

~ %AppZHP% : C:\Users\Michelly Boone\AppData\Roaming\ZHP\

~ %AppData% : C:\Users\Michelly Boone\AppData\Roaming\

~ %Desktop% : C:\Users\Michelly Boone\Desktop\

~ %Favorites% : C:\Users\Michelly Boone\Favorites\

~ %LocalAppData% : C:\Users\Michelly Boone\AppData\Local\

~ %StartMenu% : C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\

~ %Windir% : C:\Windows\

~ %System% : C:\Windows\System32\



---\\ Enumeração das unidades dos discos

C: Hard drive, Flash drive, Thumb drive (Free 558 Go of 689 Go)

D: CD-ROM drive (Not Inserted)

Q: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)







---\\ Estado do Centro de Segurança do Windows

[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK

[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK

[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

~ Security Center: 49 Scanned in 00mn 00s







---\\ Pesquisa particular de ficheiros genéricos

[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Windows Explorer.) (.07/07/2011 - 09:20:31.) -- C:\Windows\Explorer.exe [2871808]

[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 21:39:52.) -- C:\Windows\System32\Wininit.exe [129024]

[MD5.6FC2819A4F80AAB2DADEDFC1EFEE3C3F] - (.Microsoft Corporation - Internet Extensions para Win32.) (.05/11/2014 - 22:17:24.) -- C:\Windows\System32\wininet.dll [2365440]

[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.16/07/2014 - 22:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]

[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.20/11/2010 - 23:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]

[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 02:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]

[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 21:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]

[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 19:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]

[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 23:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]

[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 23:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]

[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 23:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]

[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 19:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]

[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 20:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]

[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.07/07/2011 - 09:22:59.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]

[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 23:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]

[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.23/01/2014 - 22:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]

[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 20:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]

[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 23:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]

[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 20:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]

[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 23:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296]

[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.20/11/2010 - 23:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]

~ Generic Processes: Scanned in 00mn 00s







---\\ Estatuto dos ficheiros ocultos (Oculto/Total)

~ Mes images (My Pictures) : 2/2680

Mes musiques (My Musics) : 4/4 (Modified)

~ Mes Videos (My Videos) : 4/24

~ Mes Favoris (My Favorites) : 1/20

~ Mes Documents (My Documents) : 3/4096

~ Mon Bureau (My Desktop) : 2/238

~ Menu demarrer (Programs) : 1/35

~ Hidden Files: Scanned in 00mn 01s







---\\ Processos lançados

[MD5.3C13F26A4766752314A5413038BD86B4] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [7229752] [PID.4688]

[MD5.1841BE26ACDFEFF72BC5E7FB938D3612] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) -- C:\Program Files (x86)\GbPlugin\gbpsv.exe [546104] [PID.944]

[MD5.8CF1D44836690AD6463D9D26A8FEB9E5] - (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1305408] [PID.4784]

[MD5.1B292C5BDD0B620343E69F41F14B9C80] - (.OEM - Live! OSD.) -- C:\Program Files (x86)\OEM\LIVE! OSD 1.35\osd.exe [491424] [PID.2688]

[MD5.AB0C872B1FFE283D20C91C8E575E2F67] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\Michelly Boone\AppData\Roaming\Dropbox\bin\Dropbox.exe [35419192] [PID.5240]

[MD5.4A73AB8412D3AA6CFAD24051FF9DBFA7] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160] [PID.5624]

[MD5.125AFA09A1D72030586434BBDE4BEC08] - (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [740888] [PID.5788]

[MD5.CE5C9977DA751DDC30952AC4DCBCA788] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.5876]

[MD5.BBA3D3ECF021A48C93CD985FCDA23774] - (.Quartzo Desenvolvimento de Software Ltda. - No Comment.) -- C:\Program Files (x86)\qubnfe\qubnfe.exe [1208632] [PID.6036]

[MD5.CD9109534403399ACC7D2A079F9B5608] - (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) -- C:\Program Files (x86)\Diebold\Warsaw\core.exe [518968] [PID.3196]

[MD5.7E91655B4947EC1B18B3BC1645839145] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128] [PID.1740]

[MD5.DFC999E39D7465077B45F08C53BEE076] - (.Positivo Informática S.A. - Positivo Áudio.) -- C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Áudio\AudioPower.exe [1015808] [PID.1732]

[MD5.5AB8DB8F9CADBFBB3C132E8316FE337E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808] [PID.7492]

[MD5.629DEE09973078A7FB39A5370F7E9372] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus Plugins Native Messagi.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\plugin-nm-server.exe [883392] [PID.8292]

[MD5.42D4456168E4A85AE1C29CCB008DC803] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8135680] [PID.6764]

~ Processes Running: Scanned in 00mn 00s







---\\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)

C:\Users\Michelly Boone\AppData\Local\Google\Chrome\User Data\Default\Preferences



---\\ Pasta de extensão do Google Chrome

~ Google Lines Browser: 0 Scanned in 00mn 00s







---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)

M2 - MFEP: RegExtension {58bd07eb-0ee0-4df0-8121-dc9b693373df} . (...) -- C:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension (.not file.) =>PUP.Babylon

P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll

P2 - FPN: [HKCU] [gastecnologia.com.br/sf/bb] - (.GAS Tecnologia - Internet Banking Helper.) -- C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll

P2 - FPN: [HKCU] [gastecnologia.com.br/sf/cef] - (.GAS Tecnologia - Internet Banking Helper.) -- C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll

P2 - FPN: [HKCU] [gastecnologia.com.br/sf/uni] - (.GAS Tecnologia - Internet Banking Helper.) -- C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_uni.dll

~ Firefox Browser: 6 Scanned in 00mn 00s







---\\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4)

R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = <a href="http://google.com" target="_blank">http://google.com</a>

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = <a href="http://www.microsoft.com" target="_blank">http://www.microsoft.com</a>

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com" target="_blank">http://go.microsoft.com</a>

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://go.microsoft.com" target="_blank">http://go.microsoft.com</a>

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://go.microsoft.com" target="_blank">http://go.microsoft.com</a>

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com" target="_blank">http://go.microsoft.com</a>

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://www.google.com" target="_blank">http://www.google.com</a>

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons

R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk

R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navegador da Internet.) (11.00.9600.17239 (winblue_gdr.140724-2228)) -- C:\Windows\SysWOW64\ieframe.dll

R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1

~ IE Browser: 18 Scanned in 00mn 00s







---\\ Internet Explorer, Gestão do Proxy (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Proxy management: Scanned in 00mn 00s







---\\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas

F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: Shell=C:\Windows\explorer.exe

F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe

~ Keys: Scanned in 00mn 00s







---\\ Redireção do ficheiro Hosts (01)

~ Le fichier hôte est sain (The hosts file is clean) (1)

~ Hosts File: Scanned in 00mn 00s







---\\ Browser Helper Objects do navegador (02)

O2 - BHO: ContentBlockerBrowserHelperObject [64Bits] - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} . (.Kaspersky Lab ZAO - Content Blocker Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll

O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.dll

O2 - BHO: VirtualKeyboardBrowserHelperObject [64Bits] - {73455575-E40C-433C-9784-C78DC7761455} . (.Kaspersky Lab ZAO - Virtual Keyboard Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll

O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Auxiliar de Conexão de Conta da Microsoft [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Safe Money Plugin [64Bits] - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} . (.Kaspersky Lab ZAO - Safe Money Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll

O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll

O2 - BHO: G-Buster Browser Defense [64Bits] - {C41A1C0E-EA6C-11D4-B1B8-444553540000} . (.Banco do Brasil - Gbieh Module.) -- C:\Program Files (x86)\GbPlugin\gbieh.dll

O2 - BHO: G-Buster Browser Defense Itaú Unibanco [64Bits] - {C41A1C0E-EA6C-11D4-B1B8-444553540008} . (.Banco Itaú Unibanco - Gbieh Module.) -- C:\Program Files (x86)\GbPlugin\gbiehuni.dll

O2 - BHO: Bing Bar Helper [64Bits] - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (...) -- "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (.not file.) =>Toolbar.Bing

O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: link filter bho [64Bits] - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - URL Advisor Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll

O2 - BHO: (no name) [64Bits] - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} Chave orfã

~ BHO: 22 Scanned in 00mn 00s







---\\ Barras do Internet Explorer (03))

O3 - Toolbar: Easy Photo Print - [HKLM]{9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION / CyCom Technology - Epson Easy Photo Print (TBL x64).) -- C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll

~ Toolbar: Scanned in 00mn 00s







---\\ Aplicações iniciadas por registo & pastas (04)

O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)

O4 - HKLM\..\Run: [StartUpManagerPositivo] . (...) -- C:\Program Files\Positivo Informática\Gerenciador de Inicialização Positivo\ManagerWindows.exe

O4 - HKLM\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [AdAwareTray] . (...) -- C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareTray.exe

O4 - HKCU\..\Run: [HP Deskjet 3510 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co

O4 - HKCU\..\Run: [Web Companion] . (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe

O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Wow6432Node\Run: [PMBVolumeWatcher] . (.Sony Corporation - Media Check Tool.) -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co

O4 - HKLM\..\Wow6432Node\Run: [qubnfe] . (.Quartzo Desenvolvimento de Software Ltda. - No Comment.) -- C:\Program Files (x86)\qubnfe\qubnfe.exe

O4 - HKLM\..\Wow6432Node\Run: [Diebold - Warsaw] . (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) -- C:\Program Files (x86)\Diebold\Warsaw\core.exe

O4 - HKLM\..\Wow6432Node\Run: [AVP] . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

O4 - HKUS\.DEFAULT\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-18\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe

O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation

O4 - HKUS\S-1-5-21-597722200-2002237864-835144990-1000\..\Run: [HP Deskjet 3510 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Deskjet 3510 series\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co

O4 - HKUS\S-1-5-21-597722200-2002237864-835144990-1000\..\Run: [Web Companion] . (.Lavasoft - Web Companion.) -- C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe

~ Application: Scanned in 00mn 00s







---\\ Icones das opções IE invisiveis no painel das configurações (05)

O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no

~ IE Control Panel: 1 Scanned in 00mn 00s







---\\ Boutões da barra de ferramentas principal do Internet Explorer (09)

O9 - Extra button: Teclado Virtual [64Bits] - {0C4CC089-D306-440D-9772-464E226F6539} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\kbrd.ico

O9 - Extra button: &Enviar para o OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.)

O9 - Extra button: &Anotações Vinculadas do OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.)

O9 - Extra button: Skype Click to Call settings [64Bits] - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- c:\program files (x86)\skype\toolbars\internet explorer x64\icon.ico

O9 - Extra button: Comprobación de direcciones URL [64Bits] - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\logo.ico

~ IE Extra Buttons: Scanned in 00mn 00s







---\\ Winsock hijacker (Layered Service Provider) (O10)

O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll

O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Provedor de Correção de Nomeação de Emails.) -- C:\Windows\system32\napinsp.dll

O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - PNRP Name Space Provider.) -- C:\Windows\system32\pnrpnsp.dll

O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Provedor de serviços do Microsoft Windows Sockets 2.0.) -- C:\Windows\system32\mswsock.dll

O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll

O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll

O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation

O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation

~ Winsock: 9 Scanned in 00mn 00s







---\\ Site na zona confiavél do Internet Explorer (05)

O15 - Trusted Zone: [HKCU\...\Domains\www] *.bancobrasil.com.br

O15 - Trusted Zone: [HKCU\...\Domains\www] *.bb.com.br

O15 - Trusted Zone: [HKCU\...\Domains] *.itau.com.br

O15 - Trusted Zone: [HKCU\...\Domains\www] *.itau.com.br

~ IE Zone Confiance: Scanned in 00mn 00s







---\\ Alteração Dominio/Clientes DNS (017)

O17 - HKLM\System\CCS\Services\Tcpip\..\{767A26C3-25BC-4F10-AFE0-C72B17BA267C}: DhcpNameServer = 200.85.32.2 200.85.32.3

O17 - HKLM\System\CS1\Services\Tcpip\..\{767A26C3-25BC-4F10-AFE0-C72B17BA267C}: DhcpNameServer = 200.85.32.2 200.85.32.3

O17 - HKLM\System\CS2\Services\Tcpip\..\{767A26C3-25BC-4F10-AFE0-C72B17BA267C}: DhcpNameServer = 200.85.32.2 200.85.32.3

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.85.32.2 200.85.32.3

~ Domain: Scanned in 00mn 00s







---\\ Protocolo adicional (018)

O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --

O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation

~ Protocole Additionnel: Scanned in 00mn 00s







---\\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

~ Winlogon: Scanned in 00mn 00s







---\\ Chave do Registo autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

~ SSODL: 1 Scanned in 00mn 00s







---\\ Lista dos serviços NT não Microsoft e não desativados (023)

O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

O23 - Service: Servicio Kaspersky Anti-Virus (avp) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

O23 - Service: Battery Manager Service (BatteryManagerSrv) . (.Positivo Informática S.A - Battery Power Service.) - C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe

O23 - Service: CryptoStorage control service (CSObjectsSrv) . (.Infowatch - InfoWatch CryptoStorage Protected objects c.) - C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe

O23 - Service: EPSON V3 Service4(04) (EPSON_PM_RPCV4_04) . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.exe =>.Epson Seiko Corporation

O23 - Service: Gbp Service (GbpSv) . (.GAS Tecnologia - G-Buster Browser Defense - Service.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe

O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) . (...) - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe

O23 - Service: LavasoftTcpService (LavasoftTcpService) . (.Lavasoft Limited - No Comment.) - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe

O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

O23 - Service: PMBDeviceInfoProvider (PMBDeviceInfoProvider) . (.Sony Corporation - Device Information Provider.) - C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

O23 - Service: IE Search Set (SearchProtectionService) . (.No owner - SPWindowsService.) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe =>PUP.SearchProtect

O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: TeamViewer 9 (TeamViewer9) . (.TeamViewer GmbH - TeamViewer 9.) - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

O23 - Service: Warsaw Technology (Warsaw Technology) . (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) - C:\Program Files (x86)\Diebold\Warsaw\core.exe

~ Services: 18 Scanned in 00mn 06s







---\\ Enumeração Ativa do Ambiente de trabalho & Editor MHTML (024)

O24 - Default MHTML Editor: Last - .(...) - (.not file.)

~ Desktop Component: 4 Scanned in 00mn 00s







---\\ Listagem dos dados do BootExecute (Bex) (034)

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O34 - HKLM BootExecute: (bddel.exe) - File not found

~ BEX: 2 Scanned in 00mn 00s







---\\ Tarefas planificadas automaticamente (039)

[MD5.F79623288F2A357AB20288B5DC4F452A] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [267440]

[MD5.518545E8CBD79EBF42891A6066578118] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [3591960]

[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]

[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648]

[MD5.33D99B9EE34DED2A819AC99CC3E5C8A5] [APT] [HP Photo Creations Communicator] (...) -- C:\ProgramData\HP Photo Creations\Communicator.exe [185920]

[MD5.28405F60CCF4023CD253B0EB3640C078] [APT] [HPCustParticipation HP Deskjet 3510 series] (.Hewlett-Packard Co..) -- C:\Program Files\HP\HP Deskjet 3510 series\Bin\HPCustPartic.exe [4119656]

[MD5.00000000000000000000000000000000] [APT] [{313301DC-B1EA-45A4-BA62-9FE981A2919D}] (...) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe (.not file.) [0]

[MD5.00000000000000000000000000000000] [APT] [{4428844F-1BE9-4C11-B0E1-84E47071EB9F}] (...) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe (.not file.) [0]

[MD5.00000000000000000000000000000000] [APT] [{63486721-98D3-4A5F-9195-B827AFB4203A}] (...) -- C:\Program Files (x86)\Desk 365\eUninstall.exe (.not file.) [0] =>Hijacker.22Find

[MD5.5FD3EEB9A90AA1AD07DD483378CC52F1] [APT] [{64FD857D-6973-4B84-AB8E-DA5999222384}] (.Acresso Software Inc..) -- C:\Users\Michelly Boone\Desktop\11075872_REDE_WIN7_x64_00\setup.exe [398832]

[MD5.00000000000000000000000000000000] [APT] [{6ABCB2DA-F359-4B3C-B47A-7716CEFE125B}] (...) -- C:\Program Files\AVAST Software\Avast\avastui.exe (.not file.) [0]

[MD5.9A2347903D6EDB84C10F288BC0578C1C] [APT] [{7EC6DFFA-08E6-4A33-8972-1D5A604B37D0}] (.Trend Micro Inc..) -- C:\Users\Michelly Boone\Downloads\HiJackThis (1).exe [388608]

[MD5.5FD3EEB9A90AA1AD07DD483378CC52F1] [APT] [{9D4A5D2F-E370-4D01-9DCD-C54FA36EE9D8}] (.Acresso Software Inc..) -- C:\Users\Michelly Boone\Desktop\11075872_REDE_WIN7_x64_00\setup.exe [398832]

[MD5.00000000000000000000000000000000] [APT] [{9E66C78F-CE9F-42F4-9A82-61F87D769002}] (...) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe (.not file.) [0]

[MD5.0F2DCC74E238C5CFCA3F18B0A5A428ED] [APT] [{A2BECC90-8B37-4DD4-8F9A-831307A59721}] (...) -- C:\Users\Michelly Boone\Downloads\11075872_REDE_WIN7_X64_00 (1).exe [5800448]

[MD5.00000000000000000000000000000000] [APT] [{ADBD9797-50F7-42F7-9317-67FB0D04672E}] (...) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe (.not file.) [0]

O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [902]

O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [902]

~ Scheduled Task: 18 Scanned in 00mn 02s







---\\ Componentes instalados (ActiveSetup Installed Components) (040)

O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation

O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation

O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API de tema do Windows.) -- C:\Windows\System32\themeui.dll

O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Processador de comandos do Windows.) -- C:\Windows\system32\cmd.exe

O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation

O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extensão shell da pasta FTP do Microsoft Internet Explorer.) -- C:\Windows\System32\msieftp.dll

O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Recursos do Windows Media Player.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation

O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL comum do Shell do Windows.) -- C:\Windows\System32\shell32.dll

O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitário de Inicialização por Usuário do Internet Explorer.) -- C:\Windows\System32\ie4uinit.exe

O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll

~ Active Setup: 10 Scanned in 00mn 00s







---\\ Drivers lançados ao arranque do sistema (041)

O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys

O41 - Driver: (BdfNdisf) . (.BitDefender LLC - BitDefender Firewall NDIS6 Filter Driver.) - c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys

O41 - Driver: (bdfwfpf) . (.BitDefender LLC - BitDefender Firewall WFP Filter Driver.) - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys

O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\drivers\blbdrive.sys

O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys

O41 - Driver: (CSVirtualDiskDrv) . (.Infowatch - Virtual Volume Container Driver (wnet).) - C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys

O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys

O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys

O41 - Driver: (KLIF) . (.Kaspersky Lab ZAO - Klif Mini-Filter [fre_wlh_x64].) - C:\Windows\System32\DRIVERS\klif.sys

O41 - Driver: (KLIM6) . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - C:\Windows\System32\DRIVERS\klim6.sys

O41 - Driver: (kltdi) . (.Kaspersky Lab ZAO - Network filtering component.) - C:\Windows\System32\DRIVERS\kltdi.sys

O41 - Driver: (kneps) . (.Kaspersky Lab ZAO - KNEPS Power.) - C:\Windows\System32\DRIVERS\kneps.sys

O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys

O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys

O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys

O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys

O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Agendador de pacotes de serviço.) - C:\Windows\System32\DRIVERS\pacer.sys

O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Driver do Subsistema de Buffer da Unidade R.) - C:\Windows\System32\DRIVERS\rdbss.sys

O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys

O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys

O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys

O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys

O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys

O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys

O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys

O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys

O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys

O41 - Driver: Ambiente de suporte a provedores de serviços não-IFS do Windows Socket 2.0 (ws2ifsl) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\Windows\system32\drivers\ws2ifsl.sys

~ Drivers: 84 Scanned in 00mn 00s







---\\ Software instalados (042)

O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- ABBYY FineReader 9.0 Sprint

O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- {F9000000-0018-0000-0000-074957833700}

O42 - Logiciel: ARIS EXPRESS - (.Software AG.) [HKLM][64Bits] -- {49ABE0DF-5BC9-40E8-8996-7A2938BFB5C2}

O42 - Logiciel: Ad-Aware Antivirus - (.Lavasoft.) [HKLM][64Bits] -- {6D1428BD-E5F2-4378-B620-E7442E7C2BFB}_AdAwareUpdater

O42 - Logiciel: Ad-Aware Web Companion - (.Lavasoft.) [HKLM][64Bits] -- {0AB46A9E-1335-46CC-81A2-F34AB8DCAD62}

O42 - Logiciel: AdAwareInstaller - (.Lavasoft.) [HKLM][64Bits] -- {E56846B3-745F-443C-9C17-BC371A0902E0}

O42 - Logiciel: AdAwareUpdater - (.Lavasoft.) [HKLM][64Bits] -- {6D1428BD-E5F2-4378-B620-E7442E7C2BFB}

O42 - Logiciel: Adobe Flash Player 15 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX

O42 - Logiciel: Adobe Reader XI (11.0.09) - Português - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1046-7B44-AB0000000001}

O42 - Logiciel: AntimalwareEngine - (.Lavasoft.) [HKLM][64Bits] -- {CC347FC6-C8D7-493A-B70E-1D89E22691A7}

O42 - Logiciel: AntispamEngine - (.Lavasoft.) [HKLM][64Bits] -- {721A858C-9C26-4832-8958-CDAFFC596E3D}

O42 - Logiciel: Ashampoo Burning Studio 14 v.14.0.9 - (.Ashampoo GmbH & Co. KG.) [HKLM][64Bits] -- {91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1

O42 - Logiciel: Ashampoo Burning Studio FREE v.1.14.5 - (.Ashampoo GmbH & Co. KG.) [HKLM][64Bits] -- {91B33C97-91F8-FFB3-581B-BC952C901685}_is1

O42 - Logiciel: Avast License by ZeNiX [2014-01-11] - (...) [HKLM][64Bits] -- Avast_2050_ZeNiX [2014-01-11]_is1

O42 - Logiciel: AvcEngine - (.Lavasoft.) [HKLM][64Bits] -- {235E711E-20A7-4BF4-8913-B295343A4996}

O42 - Logiciel: Bejeweled(R) 3 (remove only) - (...) [HKLM][64Bits] -- Bejeweled(R) 3

O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM][64Bits] -- {B4089055-D468-45A4-A6BA-5A138DD715FC} =>Toolbar.Bing

O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner

O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9}

O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}

O42 - Logiciel: Desinstalar impressora EPSON TX133 TX135 Series - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON TX133 TX135 Series

O42 - Logiciel: Device Doctor v3.1 - (.Device Doctor Software Inc..) [HKLM][64Bits] -- Device Doctor_is1

O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox

O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM][64Bits] -- EPSON Scanner

O42 - Logiciel: ESET Online Scanner v3 - (...) [HKLM][64Bits] -- ESET Online Scanner

O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {E65AE514-9C14-48DE-BAE5-64A4F9CB6FE5}

O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178}

O42 - Logiciel: FirewallEngine - (.Lavasoft.) [HKLM][64Bits] -- {877C7A27-7529-4B0C-BA7B-4D697E90DDC1}

O42 - Logiciel: FormatFactory 3.3.5.0 - (.Format Factory.) [HKLM][64Bits] -- FormatFactory

O42 - Logiciel: GBBD Guardião - Itaú 30 horas - (...) [HKLM][64Bits] -- {70e5f739-1d2a-40ae-bbc9-4b3e6af4c831}_is1

O42 - Logiciel: Galeria de Fotos - (.Microsoft Corporation.) [HKLM][64Bits] -- {9EE1AE8B-4872-41CA-8C9A-C33D899523E0}

O42 - Logiciel: Gerenciador de Inicialização Positivo - (.Positivo Informática S.A..) [HKLM][64Bits] -- {E365D4D7-BD51-4A7F-8ECA-0B6C0C42D3CF}_is1

O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome

O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM][64Bits] -- {C6640705-7479-4EE5-BC86-879F05F65E74}

O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM][64Bits] -- {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} =>.Google Inc

O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

O42 - Logiciel: HP Deskjet 3510 series Ajuda - (.Hewlett Packard.) [HKLM][64Bits] -- {949C49A5-91B7-40D2-AF9A-15681454074A}

O42 - Logiciel: HP Deskjet 3510 series Estudo de aprimoramento de produtos - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {34B5B8D3-4106-4713-AAE1-DAE898EEB21C}

O42 - Logiciel: HP Deskjet 3510 series Software básico do dispositivo - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {B332BF47-16DD-476D-AE00-31DC6DE5B87A}

O42 - Logiciel: HP FWUpdateEDO2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {415FA9AD-DA10-4ABE-97B6-5051D4795C90}

O42 - Logiciel: HP Photo Creations - (.HP.) [HKLM][64Bits] -- HP Photo Creations

O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}

O42 - Logiciel: Intel(R) Control Center - (.Intel Corporation.) [HKLM][64Bits] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421}

O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}

O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}

O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}

O42 - Logiciel: Java 7 Update 25 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217025FF}

O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79}

O42 - Logiciel: Kaspersky Internet Security 2013 - (.Kaspersky Lab.) [HKLM][64Bits] -- InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}

O42 - Logiciel: Kaspersky PURE 3.0 - (.Kaspersky Lab.) [HKLM][64Bits] -- InstallWIX_{D0702EE9-9DE4-419A-9C6C-4730B1C985BA}

O42 - Logiciel: Kaspersky PURE 3.0 - (.Kaspersky Lab.) [HKLM][64Bits] -- {D0702EE9-9DE4-419A-9C6C-4730B1C985BA}

O42 - Logiciel: LIVE! Control Center 1.11(X64) - (.OEM.) [HKLM][64Bits] -- {271F5A67-A83A-4985-B41B-201EB267E6CF}

O42 - Logiciel: LIVE! OSD 1.35 - (.OEM.) [HKLM][64Bits] -- {73289228-1853-4623-982A-EB17FF0270CA}

O42 - Logiciel: LavasoftTcpService - (.Lavasoft.) [HKLM][64Bits] -- {655F6B43-070A-403C-9DAF-3FCC813C2E59}

O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}

O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM][64Bits] -- {40719211-D09A-11DF-BA30-0013D3D69929}

O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}

O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77}

O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9}

O42 - Logiciel: Malwarebytes Anti-Malware versión 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1

O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe

O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

O42 - Logiciel: Microsoft XNA Framework Redistributable 4.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}

O42 - Logiciel: Módulo Adicional de Segurança CAIXA - (...) [HKLM][64Bits] -- {5d01f486-f32d-462e-8830-cc1d116e8ece}_is1

O42 - Logiciel: Módulo de Segurança - Banco do Brasil - (...) [HKLM][64Bits] -- {36386dc9-8543-4b12-ae6b-220fd52f19f3}_is1

O42 - Logiciel: OnlineThreatsEngine - (.Lavasoft.) [HKLM][64Bits] -- {A8F67345-FA75-4E99-AEBA-DE9BFE708A49}

O42 - Logiciel: PDF Reader - (...) [HKCU][64Bits] -- PDF Reader

O42 - Logiciel: PlayMemories Home - (.Sony Corporation.) [HKLM][64Bits] -- {0657DE52-8F5C-4073-B70C-ED4F3F7FA076}

O42 - Logiciel: Positivo 3D Incrível - (.Positivo Informática S.A..) [HKLM][64Bits] -- {137637BF-F32A-48B3-A5FE-D677FCB1A80B}_is1

O42 - Logiciel: Positivo Aplicativos - (.Positivo Informática S.A..) [HKLM][64Bits] -- {AAB13E97-449B-4D5B-BDE2-AB47B938B722}_is1

O42 - Logiciel: Positivo Backup - (.Positivo Informática S.A..) [HKLM][64Bits] -- {387B3DFA-BB12-45E6-B431-4A7BF2EBD985}_is1

O42 - Logiciel: Positivo Bateria - (.Positivo Informática S.A..) [HKLM][64Bits] -- {FD6F6859-2863-4ABB-87D0-A263F3E9FF45}_is1

O42 - Logiciel: Positivo Conversor 3D - (.Positivo Informática S.A..) [HKLM][64Bits] -- {D0582368-2DFF-48EA-AC8D-1FA8E31CA38C}_is1

O42 - Logiciel: Positivo NIS 2012 License Activator - (.Positivo Informática S.A..) [HKLM][64Bits] -- {5400FA29-4A55-4EB9-AD27-AF20DBD334E1}_is1

O42 - Logiciel: Positivo Roteador - (.Positivo Informática S.A..) [HKLM][64Bits] -- {f1cb797f-bf34-495c-bda9-efe098837651}_is1

O42 - Logiciel: Positivo Sincronize - (.Positivo Informática S.A..) [HKLM][64Bits] -- {6DA3261A-DCEB-401A-ABE0-A367C252B86C}_is1

O42 - Logiciel: Positivo WebCam - (.Positivo Informática S.A..) [HKLM][64Bits] -- {E11C7438-7550-4676-92CE-846CC5DA3548}_is1

O42 - Logiciel: Positivo Áudio - (.Positivo Informática S.A..) [HKLM][64Bits] -- {D00FA097-5115-400D-84AD-4ADEF3EBDB5E}_is1

O42 - Logiciel: QuickKey 1.00 - (.OEM.) [HKLM][64Bits] -- {BF73DC38-2331-4CCB-AF7F-594EF8604711}_is1

O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9D3D8C60-A55F-4123-B2B9-173F09590E16}

O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}

O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}

O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701}

O42 - Logiciel: Skype™ 6.22 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}

O42 - Logiciel: Soft Organizer version 3.51 - (.ChemTable Software.) [HKLM][64Bits] -- Soft Organizer_is1

O42 - Logiciel: Software de Cadastro Positivo 6.0 - (.Positivo Informática.) [HKLM][64Bits] -- {4A33ECF3-6AC6-4A9B-932C-4E81625423C7}_is1

O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey

O42 - Logiciel: TeamViewer 9 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer 9

O42 - Logiciel: Tutorial 1.0 - (.Positivo Informática.) [HKLM][64Bits] -- {1C86726E-4A85-4322-8A1C-56EDE170FAB5}_is1

O42 - Logiciel: VLC media player 2.1.3 - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN

O42 - Logiciel: Warsaw 1.3.1 - (.GAS Tecnologia.) [HKLM][64Bits] -- {20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1

O42 - Logiciel: Watchtower Library 2011 - Português - (.Watchtower Bible and Tract Society of Pennsylvania, Inc..) [HKLM][64Bits] -- {A6F7D429-0021-4AD5-9B7D-CB135E7DE322}

O42 - Logiciel: Watchtower Library 2013 - español - (.Watchtower Bible and Tract Society of Pennsylvania, Inc..) [HKLM][64Bits] -- {79D301F3-DA92-4C78-820D-BBEC0AC08118}

O42 - Logiciel: Web Companion - (.Lavasoft.) [HKLM][64Bits] -- {0AB46A9E-1335-46CC-81A2-F34AB8DCAD62}_WebCompanion

O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver

O42 - Logiciel: X-Lite 3.0 - (.CounterPath Solutions Inc..) [HKLM][64Bits] -- X-Lite 1.5_is1

O42 - Logiciel: YoWindow - (.RepkaSoft.) [HKLM][64Bits] -- yowindow

~ Logic: 44 Scanned in 00mn 00s







---\\ HKCU & HKLM Software Keys

[HKCU\Software\ABBYY]

[HKCU\Software\ASProtect]

[HKCU\Software\Adobe]

[HKCU\Software\AppDataLow\Software\Adobe]

[HKCU\Software\AppDataLow\Software\JavaSoft]

[HKCU\Software\AppDataLow\Software\adawarebp]

[HKCU\Software\AppDataLow]

[HKCU\Software\Ashampoo]

[HKCU\Software\Baidu Security]

[HKCU\Software\Baixaki]

[HKCU\Software\ChemTable Software]

[HKCU\Software\Classes]

[HKCU\Software\Clients]

[HKCU\Software\CounterPath]

[HKCU\Software\DVDVideoSoft]

[HKCU\Software\Device Doctor]

[HKCU\Software\DirectShow]

[HKCU\Software\EBInstaller]

[HKCU\Software\EPSON]

[HKCU\Software\ESET]

[HKCU\Software\F-Secure]

[HKCU\Software\FreeTime]

[HKCU\Software\G Data]

[HKCU\Software\GNU]

[HKCU\Software\Gabest]

[HKCU\Software\GameHouse]

[HKCU\Software\GbAs]

[HKCU\Software\GbPlugin]

[HKCU\Software\Google]

[HKCU\Software\HP]

[HKCU\Software\Haali]

[HKCU\Software\Hewlett-Packard]

[HKCU\Software\IM Providers]

[HKCU\Software\Intel]

[HKCU\Software\JavaSoft]

[HKCU\Software\KasperskyLab]

[HKCU\Software\Leadertech]

[HKCU\Software\LiveOSD]

[HKCU\Software\MCAFEE]

[HKCU\Software\Macromedia]

[HKCU\Software\Macrovision]

[HKCU\Software\MozillaPlugins]

[HKCU\Software\Netscape]

[HKCU\Software\ODBC]

[HKCU\Software\PSafe]

[HKCU\Software\Piriform]

[HKCU\Software\Policies]

[HKCU\Software\PopCap]

[HKCU\Software\Positivo Informatica]

[HKCU\Software\Positivo Informática]

[HKCU\Software\Positivo]

[HKCU\Software\Realtek]

[HKCU\Software\Skype]

[HKCU\Software\Sony Corporation]

[HKCU\Software\Sony Creative Software]

[HKCU\Software\Symantec]

[HKCU\Software\Synaptics]

[HKCU\Software\Sysinternals]

[HKCU\Software\TeamViewer]

[HKCU\Software\Trolltech]

[HKCU\Software\Visan]

[HKCU\Software\Watchtower]

[HKCU\Software\WinRAR SFX]

[HKCU\Software\WinRAR]

[HKCU\Software\Wow6432Node]

[HKCU\Software\ZebHelpProcess Helper]

[HKCU\Software\a6dfd0]

[HKCU\Software\kde.org]

[HKCU\Software\mozilla]

[HKCU\Software\qubnfe]

[HKCU\Software\repkasoft]

[HKLM\Software\ATI Technologies]

[HKLM\Software\AVC3]

[HKLM\Software\Adobe]

[HKLM\Software\CBSTEST]

[HKLM\Software\Canon]

[HKLM\Software\Classes]

[HKLM\Software\Clients]

[HKLM\Software\EPSON]

[HKLM\Software\G Data]

[HKLM\Software\HP]

[HKLM\Software\Hewlett-Packard]

[HKLM\Software\IM Providers]

[HKLM\Software\InfoWatch]

[HKLM\Software\InstalledOptions]

[HKLM\Software\Intel]

[HKLM\Software\Lavasoft]

[HKLM\Software\Macromedia]

[HKLM\Software\Macrovision]

[HKLM\Software\MozillaPlugins]

[HKLM\Software\Mozilla]

[HKLM\Software\ODBC]

[HKLM\Software\Piriform]

[HKLM\Software\Policies]

[HKLM\Software\Positivo Informatica]

[HKLM\Software\Positivo]

[HKLM\Software\Realtek Semiconductor Corp.]

[HKLM\Software\Realtek]

[HKLM\Software\RegisteredApplications]

[HKLM\Software\SRS Labs]

[HKLM\Software\Sonic]

[HKLM\Software\Synaptics]

[HKLM\Software\Volatile]

[HKLM\Software\Wow6432Node\ABBYY]

[HKLM\Software\Wow6432Node\AdobeFlashPlayerUpdate]

[HKLM\Software\Wow6432Node\Adobe]

[HKLM\Software\Wow6432Node\AdwCleaner]

[HKLM\Software\Wow6432Node\Ashampoo]

[HKLM\Software\Wow6432Node\AutoHelpDesk]

[HKLM\Software\Wow6432Node\AviSynth]

[HKLM\Software\Wow6432Node\Baidu Security]

[HKLM\Software\Wow6432Node\Classes]

[HKLM\Software\Wow6432Node\Clients]

[HKLM\Software\Wow6432Node\DVDVideoSoft]

[HKLM\Software\Wow6432Node\EPSON]

[HKLM\Software\Wow6432Node\Eset]

[HKLM\Software\Wow6432Node\G Data]

[HKLM\Software\Wow6432Node\GNU]

[HKLM\Software\Wow6432Node\Google]

[HKLM\Software\Wow6432Node\HaaliMkx]

[HKLM\Software\Wow6432Node\Hewlett-Packard]

[HKLM\Software\Wow6432Node\IDS]

[HKLM\Software\Wow6432Node\IM Providers]

[HKLM\Software\Wow6432Node\InfoWatch]

[HKLM\Software\Wow6432Node\Intel]

[HKLM\Software\Wow6432Node\JavaSoft]

[HKLM\Software\Wow6432Node\JreMetrics]

[HKLM\Software\Wow6432Node\KasperskyLab]

[HKLM\Software\Wow6432Node\Lavasoft]

[HKLM\Software\Wow6432Node\LiveControlCenter]

[HKLM\Software\Wow6432Node\Macromedia]

[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]

[HKLM\Software\Wow6432Node\MozillaPlugins]

[HKLM\Software\Wow6432Node\Mozilla]

[HKLM\Software\Wow6432Node\ODBC]

[HKLM\Software\Wow6432Node\Policies]

[HKLM\Software\Wow6432Node\Positivo Informatica]

[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]

[HKLM\Software\Wow6432Node\Realtek]

[HKLM\Software\Wow6432Node\RegisteredApplications]

[HKLM\Software\Wow6432Node\RocketLife]

[HKLM\Software\Wow6432Node\SEIKO EPSON CORPORATION]

[HKLM\Software\Wow6432Node\Skype]

[HKLM\Software\Wow6432Node\Sony Corporation]

[HKLM\Software\Wow6432Node\Sony Creative Software]

[HKLM\Software\Wow6432Node\Swearware]

[HKLM\Software\Wow6432Node\Symantec]

[HKLM\Software\Wow6432Node\TeamViewer]

[HKLM\Software\Wow6432Node\VideoLAN]

[HKLM\Software\Wow6432Node\Visan]

[HKLM\Software\Wow6432Node\WATCHTOWER]

[HKLM\Software\Wow6432Node\WinMTR]

[HKLM\Software\Wow6432Node\WinRAR]

[HKLM\Software\Wow6432Node\Wow6432Node]

[HKLM\Software\Wow6432Node\Zylom Games]

[HKLM\Software\Wow6432Node\repkasoft]

[HKLM\Software\Wow6432Node\v9magic]

[HKLM\Software\Wow6432Node]

~ Key Software: 302 Scanned in 00mn 00s







---\\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 20/02/2013 - 07:50:31 - [] ----D C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint

O43 - CFD: 12/11/2014 - 09:44:45 - [] ----D C:\Program Files (x86)\Adobe

O43 - CFD: 03/12/2014 - 01:50:08 - [] ----D C:\Program Files (x86)\Ashampoo

O43 - CFD: 31/07/2014 - 00:15:30 - [] ----D C:\Program Files (x86)\Cisco

O43 - CFD: 03/12/2014 - 13:24:00 - [] ----D C:\Program Files (x86)\Common Files

O43 - CFD: 06/06/2013 - 14:43:04 - [] ----D C:\Program Files (x86)\CounterPath

O43 - CFD: 03/12/2014 - 10:45:02 - [] ----D C:\Program Files (x86)\Device Doctor

O43 - CFD: 25/11/2014 - 08:29:15 - [] ----D C:\Program Files (x86)\Diebold

O43 - CFD: 27/11/2014 - 13:21:58 - [] ----D C:\Program Files (x86)\Driver Checker

O43 - CFD: 27/11/2014 - 13:21:58 - [] ---AD C:\Program Files (x86)\DriverPackSolution

O43 - CFD: 08/02/2014 - 11:35:07 - [] ----D C:\Program Files (x86)\epson

O43 - CFD: 08/02/2014 - 11:35:07 - [] ----D C:\Program Files (x86)\Epson Software

O43 - CFD: 25/11/2014 - 03:12:31 - [] ----D C:\Program Files (x86)\ESET

O43 - CFD: 05/11/2014 - 14:52:49 - [] ----D C:\Program Files (x86)\FreeTime

O43 - CFD: 15/01/2014 - 13:11:43 - [0] ----D C:\Program Files (x86)\G Data

O43 - CFD: 25/11/2014 - 08:29:15 - [] --H-D C:\Program Files (x86)\GAS Tecnologia

O43 - CFD: 08/11/2014 - 05:58:18 - [] ----D C:\Program Files (x86)\GbPlugin

O43 - CFD: 02/05/2014 - 17:56:10 - [] ----D C:\Program Files (x86)\Google

O43 - CFD: 29/04/2013 - 14:27:14 - [] ----D C:\Program Files (x86)\GVT

O43 - CFD: 27/11/2014 - 13:21:11 - [] ----D C:\Program Files (x86)\HP

O43 - CFD: 05/10/2013 - 22:10:40 - [] ----D C:\Program Files (x86)\HP Photo Creations

O43 - CFD: 03/12/2014 - 18:02:22 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information

O43 - CFD: 27/11/2014 - 13:21:12 - [] ----D C:\Program Files (x86)\Intel

O43 - CFD: 24/11/2014 - 22:50:48 - [] ----D C:\Program Files (x86)\Internet Explorer

O43 - CFD: 14/07/2013 - 22:27:32 - [] ----D C:\Program Files (x86)\Java

O43 - CFD: 25/11/2014 - 12:03:40 - [] ----D C:\Program Files (x86)\Kaspersky Lab

O43 - CFD: 25/11/2014 - 06:36:42 - [] ----D C:\Program Files (x86)\Lavasoft

O43 - CFD: 02/12/2014 - 19:21:17 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware

O43 - CFD: 27/11/2014 - 13:21:13 - [] ----D C:\Program Files (x86)\Microsoft

O43 - CFD: 08/03/2013 - 16:18:25 - [] ----D C:\Program Files (x86)\Microsoft Analysis Services

O43 - CFD: 14/12/2013 - 01:00:19 - [] ----D C:\Program Files (x86)\Microsoft Application Virtualization Client

O43 - CFD: 08/03/2013 - 16:23:22 - [] ----D C:\Program Files (x86)\Microsoft Office

O43 - CFD: 28/07/2014 - 06:42:37 - [] ----D C:\Program Files (x86)\Microsoft Silverlight

O43 - CFD: 02/10/2012 - 21:27:00 - [] ----D C:\Program Files (x86)\Microsoft SkyDrive =>.Microsoft Corporation

O43 - CFD: 31/07/2014 - 00:34:03 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

O43 - CFD: 08/03/2013 - 16:18:32 - [] ----D C:\Program Files (x86)\Microsoft Sync Framework

O43 - CFD: 08/03/2013 - 16:18:32 - [] ----D C:\Program Files (x86)\Microsoft Synchronization Services

O43 - CFD: 17/01/2014 - 06:02:41 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio 8

O43 - CFD: 23/12/2011 - 08:22:01 - [] ----D C:\Program Files (x86)\Microsoft XNA

O43 - CFD: 08/03/2013 - 16:18:32 - [] ----D C:\Program Files (x86)\Microsoft.NET

O43 - CFD: 17/08/2012 - 18:10:08 - [] ----D C:\Program Files (x86)\Mozilla Firefox

O43 - CFD: 08/03/2013 - 16:18:32 - [] ----D C:\Program Files (x86)\MSBuild

O43 - CFD: 23/12/2011 - 07:53:12 - [] ----D C:\Program Files (x86)\OEM

O43 - CFD: 27/11/2014 - 13:21:55 - [] ----D C:\Program Files (x86)\Opera

O43 - CFD: 17/08/2012 - 18:10:01 - [] ----D C:\Program Files (x86)\PDFReader

O43 - CFD: 19/10/2013 - 19:22:49 - [] ----D C:\Program Files (x86)\Positivo Informática

O43 - CFD: 17/01/2014 - 10:56:59 - [] -SH-D C:\Program Files (x86)\qubnfe

O43 - CFD: 23/12/2011 - 07:55:06 - [] ----D C:\Program Files (x86)\QuickKey

O43 - CFD: 03/12/2014 - 14:55:19 - [] ----D C:\Program Files (x86)\Realtek

O43 - CFD: 23/12/2011 - 07:56:01 - [] ----D C:\Program Files (x86)\REALTEK PCIE Wireless LAN Driver

O43 - CFD: 27/11/2014 - 13:21:55 - [] ----D C:\Program Files (x86)\Realtek WLAN Driver

O43 - CFD: 14/07/2009 - 02:32:38 - [] ----D C:\Program Files (x86)\Reference Assemblies

O43 - CFD: 03/12/2014 - 06:03:45 - [] R---D C:\Program Files (x86)\Skype

O43 - CFD: 30/07/2014 - 23:57:35 - [] ----D C:\Program Files (x86)\Soft Organizer

O43 - CFD: 07/02/2014 - 18:23:16 - [] ----D C:\Program Files (x86)\Sony

O43 - CFD: 02/05/2014 - 17:39:59 - [] ----D C:\Program Files (x86)\TeamViewer

O43 - CFD: 23/12/2011 - 07:51:24 - [0] --H-D C:\Program Files (x86)\Temp

O43 - CFD: 14/07/2009 - 01:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information

O43 - CFD: 27/11/2012 - 10:54:39 - [0] ----D C:\Program Files (x86)\v9Soft

O43 - CFD: 07/06/2013 - 20:49:10 - [] ----D C:\Program Files (x86)\VideoLAN

O43 - CFD: 05/09/2014 - 10:56:43 - [] ----D C:\Program Files (x86)\Watchtower

O43 - CFD: 14/12/2013 - 11:49:37 - [] ----D C:\Program Files (x86)\Windows Defender

O43 - CFD: 31/07/2014 - 00:34:02 - [] ----D C:\Program Files (x86)\Windows Live

O43 - CFD: 12/04/2011 - 10:40:11 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation

O43 - CFD: 16/10/2014 - 07:28:06 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation

O43 - CFD: 14/07/2009 - 02:32:38 - [] ----D C:\Program Files (x86)\Windows NT

O43 - CFD: 12/04/2011 - 10:40:11 - [] ----D C:\Program Files (x86)\Windows Photo Viewer

O43 - CFD: 21/11/2010 - 00:31:38 - [] ----D C:\Program Files (x86)\Windows Portable Devices

O43 - CFD: 12/04/2011 - 10:40:11 - [] ----D C:\Program Files (x86)\Windows Sidebar

O43 - CFD: 12/08/2012 - 21:52:21 - [] ----D C:\Program Files (x86)\WinRAR

O43 - CFD: 20/11/2014 - 08:31:12 - [] ----D C:\Program Files (x86)\YoWindow

O43 - CFD: 03/12/2014 - 22:58:31 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman

O43 - CFD: 31/07/2014 - 00:14:05 - [] ----D C:\Program Files (x86)\Zylom Games

O43 - CFD: 20/02/2013 - 07:46:42 - [] ----D C:\Program Files (x86)\Common Files\ABBYY

O43 - CFD: 12/11/2014 - 09:45:09 - [] ----D C:\Program Files (x86)\Common Files\Adobe

O43 - CFD: 16/05/2014 - 12:43:52 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER

O43 - CFD: 25/11/2014 - 12:01:49 - [] ----D C:\Program Files (x86)\Common Files\InfoWatch

O43 - CFD: 23/12/2011 - 07:50:48 - [] ----D C:\Program Files (x86)\Common Files\InstallShield

O43 - CFD: 24/11/2014 - 22:16:01 - [] ----D C:\Program Files (x86)\Common Files\Intel

O43 - CFD: 14/07/2013 - 22:27:55 - [] ----D C:\Program Files (x86)\Common Files\Java

O43 - CFD: 31/07/2014 - 00:32:31 - [] ----D C:\Program Files (x86)\Common Files\microsoft shared

O43 - CFD: 27/11/2014 - 13:22:05 - [] ----D C:\Program Files (x86)\Common Files\postureAgent

O43 - CFD: 14/07/2009 - 00:20:08 - [] ----D C:\Program Files (x86)\Common Files\Services

O43 - CFD: 17/09/2014 - 15:50:26 - [] ----D C:\Program Files (x86)\Common Files\Skype

O43 - CFD: 14/07/2009 - 00:20:08 - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines

O43 - CFD: 29/04/2013 - 14:22:03 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared

O43 - CFD: 08/03/2013 - 16:18:25 - [] ----D C:\Program Files (x86)\Common Files\System

O43 - CFD: 31/07/2014 - 00:30:15 - [] ----D C:\Program Files (x86)\Common Files\Windows Live

O43 - CFD: 05/11/2014 - 14:53:15 - [] -SH-D C:\ProgramData\360Quarant

O43 - CFD: 20/02/2013 - 07:51:25 - [] ----D C:\ProgramData\ABBYY

O43 - CFD: 12/11/2014 - 09:44:45 - [] ----D C:\ProgramData\Adobe

O43 - CFD: 14/07/2009 - 02:08:56 - [] -SH-D C:\ProgramData\Application Data

O43 - CFD: 03/12/2014 - 01:50:10 - [] ----D C:\ProgramData\Ashampoo

O43 - CFD: 19/10/2013 - 19:25:12 - [0] ----D C:\ProgramData\Audio

O43 - CFD: 26/04/2012 - 09:47:20 - [0] ----D C:\ProgramData\Audio Power

O43 - CFD: 01/12/2014 - 22:56:14 - [] ----D C:\ProgramData\AVAST Software

O43 - CFD: 25/11/2014 - 06:54:59 - [] ----D C:\ProgramData\BitDefender

O43 - CFD: 13/02/2014 - 12:08:12 - [] ----D C:\ProgramData\boost_interprocess

O43 - CFD: 18/06/2012 - 20:49:46 - [] --H-D C:\ProgramData\CanonBJ

O43 - CFD: 06/06/2013 - 14:43:19 - [] ----D C:\ProgramData\CounterPath

O43 - CFD: 26/04/2012 - 09:45:20 - [] -SH-D C:\ProgramData\Dados de aplicativos

O43 - CFD: 03/12/2014 - 10:54:50 - [] ----D C:\ProgramData\Dell

O43 - CFD: 14/07/2009 - 02:08:56 - [] -SH-D C:\ProgramData\Desktop

O43 - CFD: 26/04/2012 - 09:45:20 - [] -SH-D C:\ProgramData\Documentos

O43 - CFD: 14/07/2009 - 02:08:56 - [] -SH-D C:\ProgramData\Documents

O43 - CFD: 20/02/2013 - 07:42:38 - [] ----D C:\ProgramData\EPSON

O43 - CFD: 11/01/2014 - 21:52:43 - [] ----D C:\ProgramData\f-secure

O43 - CFD: 14/07/2009 - 02:08:56 - [] -SH-D C:\ProgramData\Favorites

O43 - CFD: 26/04/2012 - 09:45:20 - [] -SH-D C:\ProgramData\Favoritos

O43 - CFD: 01/01/2014 - 10:11:56 - [] ----D C:\ProgramData\FLEXnet

O43 - CFD: 29/04/2013 - 14:25:19 - [] ----D C:\ProgramData\fssg

O43 - CFD: 15/01/2014 - 12:19:41 - [] ----D C:\ProgramData\G Data

O43 - CFD: 03/12/2014 - 16:19:22 - [] ----D C:\ProgramData\GAS Tecnologia

O43 - CFD: 01/12/2014 - 21:09:17 - [] ----D C:\ProgramData\GbPlugin

O43 - CFD: 27/11/2014 - 13:21:15 - [] ----D C:\ProgramData\HP

O43 - CFD: 02/02/2014 - 13:10:51 - [] ----D C:\ProgramData\HP Photo Creations

O43 - CFD: 23/12/2011 - 07:57:40 - [] ----D C:\ProgramData\Intel

O43 - CFD: 03/12/2014 - 22:53:53 - [] ----D C:\ProgramData\Kaspersky Lab

O43 - CFD: 25/11/2014 - 06:35:26 - [] ----D C:\ProgramData\Lavasoft

O43 - CFD: 25/11/2014 - 01:45:52 - [] ----D C:\ProgramData\Malwarebytes

O43 - CFD: 28/10/2014 - 06:54:14 - [] ----D C:\ProgramData\McAfee

O43 - CFD: 26/04/2012 - 09:45:20 - [] -SH-D C:\ProgramData\Menu Iniciar

O43 - CFD: 27/11/2014 - 13:21:19 - [] -S--D C:\ProgramData\Microsoft

O43 - CFD: 24/11/2014 - 22:16:25 - [] ----D C:\ProgramData\Microsoft Help

O43 - CFD: 20/02/2014 - 12:21:53 - [] ----D C:\ProgramData\Microsoft OneDrive

O43 - CFD: 02/10/2012 - 21:26:45 - [] ----D C:\ProgramData\Microsoft SkyDrive =>.Microsoft Corporation

O43 - CFD: 26/04/2012 - 09:45:20 - [] -SH-D C:\ProgramData\Modelos

O43 - CFD: 30/05/2014 - 12:41:12 - [] ----D C:\ProgramData\Norton

O43 - CFD: 29/04/2013 - 14:21:44 - [] ----D C:\ProgramData\NortonInstaller

O43 - CFD: 25/11/2014 - 08:29:34 - [] ----D C:\ProgramData\Package Cache

O43 - CFD: 17/10/2013 - 21:24:25 - [] ----D C:\ProgramData\Positivo

O43 - CFD: 27/03/2014 - 17:12:20 - [] ----D C:\ProgramData\PSafe

O43 - CFD: 03/12/2014 - 06:03:48 - [] ----D C:\ProgramData\Skype

O43 - CFD: 18/11/2013 - 23:54:13 - [] ----D C:\ProgramData\Sony

O43 - CFD: 16/08/2013 - 22:33:00 - [] ----D C:\ProgramData\Sony Corporation

O43 - CFD: 14/07/2009 - 02:08:56 - [] -SH-D C:\ProgramData\Start Menu

O43 - CFD: 14/07/2013 - 22:27:56 - [] ----D C:\ProgramData\Sun

O43 - CFD: 25/11/2014 - 09:05:59 - [0] ----D C:\ProgramData\Temp

O43 - CFD: 14/07/2009 - 02:08:56 - [] -SH-D C:\ProgramData\Templates

O43 - CFD: 20/02/2013 - 07:41:24 - [] ----D C:\ProgramData\UDL

O43 - CFD: 17/06/2012 - 17:15:53 - [] ----D C:\ProgramData\VirtualizedApplications

O43 - CFD: 18/11/2013 - 23:33:21 - [] ----D C:\ProgramData\Visan

O43 - CFD: 18/11/2014 - 21:06:38 - [] ----D C:\ProgramData\YoWindow

O43 - CFD: 20/02/2013 - 07:46:51 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint

O43 - CFD: 24/11/2014 - 22:53:00 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

O43 - CFD: 14/07/2009 - 01:57:13 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools

O43 - CFD: 06/06/2013 - 15:13:46 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ARIS Platform

O43 - CFD: 03/12/2014 - 01:51:02 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo

O43 - CFD: 07/06/2013 - 14:13:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

O43 - CFD: 03/12/2014 - 10:45:03 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Device Doctor

O43 - CFD: 27/11/2014 - 13:21:54 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverPack Solution Lite

O43 - CFD: 20/02/2013 - 07:56:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON

O43 - CFD: 08/02/2014 - 11:34:36 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

O43 - CFD: 23/12/2011 - 07:48:32 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

O43 - CFD: 02/05/2014 - 17:56:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

O43 - CFD: 03/09/2014 - 21:22:25 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

O43 - CFD: 17/12/2013 - 07:37:14 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth =>.Google Inc

O43 - CFD: 05/10/2013 - 22:10:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

O43 - CFD: 23/12/2011 - 07:55:37 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel

O43 - CFD: 25/11/2014 - 12:03:48 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky PURE 3.0

O43 - CFD: 25/11/2014 - 06:36:42 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft

O43 - CFD: 14/07/2009 - 01:57:09 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance

O43 - CFD: 02/12/2014 - 19:21:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

O43 - CFD: 08/03/2013 - 16:24:04 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

O43 - CFD: 17/06/2012 - 17:17:29 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Português (Brasil))

O43 - CFD: 26/07/2014 - 15:36:18 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

O43 - CFD: 23/12/2011 - 07:53:13 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OSD

O43 - CFD: 16/08/2013 - 22:33:12 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlayMemories Home

O43 - CFD: 19/10/2013 - 19:22:49 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Positivo Informática

O43 - CFD: 31/07/2014 - 00:14:05 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Positivo Jogos

O43 - CFD: 30/05/2014 - 12:37:52 - [0] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSafe

O43 - CFD: 08/03/2013 - 16:18:35 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint

O43 - CFD: 17/09/2014 - 15:50:27 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

O43 - CFD: 30/07/2014 - 23:57:35 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soft Organizer

O43 - CFD: 25/11/2014 - 00:27:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

O43 - CFD: 12/04/2011 - 11:19:43 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC

O43 - CFD: 17/11/2013 - 09:04:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

O43 - CFD: 28/04/2012 - 15:16:08 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Watchtower Library 2011

O43 - CFD: 05/09/2014 - 10:49:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Watchtower Library 2013

O43 - CFD: 31/07/2014 - 00:35:27 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live

O43 - CFD: 12/08/2012 - 21:52:25 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

O43 - CFD: 06/06/2013 - 14:43:05 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\X-Lite

O43 - CFD: 18/11/2014 - 21:06:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YoWindow

O43 - CFD: 03/12/2014 - 22:58:32 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman

O43 - CFD: 12/11/2014 - 09:48:00 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Adobe

O43 - CFD: 03/12/2014 - 01:51:17 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Ashampoo

O43 - CFD: 06/02/2014 - 03:35:47 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\ChemTable Software

O43 - CFD: 03/12/2014 - 11:27:07 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Device Doctor

O43 - CFD: 03/12/2014 - 22:52:28 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Dropbox

O43 - CFD: 16/09/2014 - 22:32:31 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\dvdcss

O43 - CFD: 19/11/2013 - 17:46:07 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\DVDVideoSoft

O43 - CFD: 05/08/2013 - 11:53:28 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Epson

O43 - CFD: 01/08/2014 - 15:35:11 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\HpUpdate

O43 - CFD: 26/04/2012 - 09:45:51 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Identities

O43 - CFD: 20/02/2013 - 07:39:34 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\InstallShield

O43 - CFD: 26/04/2012 - 09:46:26 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Intel Corporation

O43 - CFD: 25/11/2014 - 06:35:26 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Lavasoft

O43 - CFD: 25/11/2014 - 06:37:40 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\LavasoftStatistics

O43 - CFD: 20/02/2013 - 07:52:11 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Leadertech

O43 - CFD: 26/04/2012 - 09:55:09 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Macromedia

O43 - CFD: 12/04/2011 - 11:19:43 - [0] ----D C:\Users\Michelly Boone\AppData\Roaming\Media Center Programs

O43 - CFD: 18/11/2014 - 15:40:37 - [] -S--D C:\Users\Michelly Boone\AppData\Roaming\Microsoft

O43 - CFD: 25/10/2012 - 08:30:28 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Mural Positivo

O43 - CFD: 01/08/2012 - 14:42:12 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\MuralDosAmigos

O43 - CFD: 26/11/2014 - 16:57:23 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Opera Software

O43 - CFD: 19/10/2013 - 19:14:09 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Positivo

O43 - CFD: 28/03/2014 - 05:52:53 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Positivo Backup

O43 - CFD: 19/03/2014 - 06:56:01 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\PSafe

O43 - CFD: 19/11/2013 - 00:05:50 - [0] ----D C:\Users\Michelly Boone\AppData\Roaming\Publish Providers

O43 - CFD: 03/12/2014 - 13:16:29 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Skype

O43 - CFD: 19/11/2013 - 18:30:35 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\SmileysWeLove =>Adware.SmileyBar

O43 - CFD: 23/03/2013 - 12:50:03 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\SoftGrid Client

O43 - CFD: 18/11/2014 - 19:16:45 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Sony

O43 - CFD: 15/08/2013 - 20:35:57 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Sony Corporation

O43 - CFD: 17/08/2012 - 18:10:28 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\SumatraPDF

O43 - CFD: 02/05/2014 - 17:40:13 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\TeamViewer

O43 - CFD: 28/04/2012 - 14:40:06 - [0] ----D C:\Users\Michelly Boone\AppData\Roaming\TP

O43 - CFD: 18/11/2013 - 23:33:21 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Visan

O43 - CFD: 15/11/2014 - 12:05:24 - [0] ----D C:\Users\Michelly Boone\AppData\Roaming\vlc

O43 - CFD: 28/04/2012 - 15:20:07 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Watchtower

O43 - CFD: 23/03/2013 - 09:02:15 - [0] ----D C:\Users\Michelly Boone\AppData\Roaming\Windows Live Writer

O43 - CFD: 12/08/2012 - 21:51:13 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\WinRAR

O43 - CFD: 24/11/2014 - 22:23:50 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\YoWindow

O43 - CFD: 03/12/2014 - 23:00:32 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\ZHP =>.Nicolas Coolman

O43 - CFD: 20/02/2013 - 07:48:46 - [] ----D C:\Users\Michelly Boone\AppData\Local\ABBYY

O43 - CFD: 28/10/2014 - 06:54:20 - [] ----D C:\Users\Michelly Boone\AppData\Local\Adobe

O43 - CFD: 26/12/2012 - 11:02:43 - [] ----D C:\Users\Michelly Boone\AppData\Local\Apps

O43 - CFD: 03/12/2014 - 01:51:21 - [] ----D C:\Users\Michelly Boone\AppData\Local\ashampoo

O43 - CFD: 05/12/2013 - 15:26:05 - [] ----D C:\Users\Michelly Boone\AppData\Local\avgchrome

O43 - CFD: 17/01/2014 - 10:42:21 - [0] ----D C:\Users\Michelly Boone\AppData\Local\cache

O43 - CFD: 06/02/2014 - 03:35:46 - [] ----D C:\Users\Michelly Boone\AppData\Local\ChemTable Software

O43 - CFD: 06/06/2013 - 14:43:16 - [] ----D C:\Users\Michelly Boone\AppData\Local\CounterPath

O43 - CFD: 03/12/2014 - 14:56:08 - [] ----D C:\Users\Michelly Boone\AppData\Local\CrashDumps

O43 - CFD: 26/04/2012 - 09:45:39 - [] -SH-D C:\Users\Michelly Boone\AppData\Local\Dados de aplicativos

O43 - CFD: 26/12/2012 - 11:03:38 - [0] ----D C:\Users\Michelly Boone\AppData\Local\Deployment

O43 - CFD: 01/12/2014 - 19:38:17 - [] ----D C:\Users\Michelly Boone\AppData\Local\Diagnostics

O43 - CFD: 03/12/2014 - 14:52:12 - [] ----D C:\Users\Michelly Boone\AppData\Local\ElevatedDiagnostics

O43 - CFD: 25/11/2014 - 17:24:24 - [] -SH-D C:\Users\Michelly Boone\AppData\Local\EmieBrowserModeList

O43 - CFD: 31/05/2014 - 06:55:03 - [] -SH-D C:\Users\Michelly Boone\AppData\Local\EmieSiteList

O43 - CFD: 31/05/2014 - 06:55:03 - [] -SH-D C:\Users\Michelly Boone\AppData\Local\EmieUserList

O43 - CFD: 12/08/2012 - 16:10:15 - [] ----D C:\Users\Michelly Boone\AppData\Local\GameHouse

O43 - CFD: 15/07/2013 - 18:44:54 - [] ----D C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia

O43 - CFD: 08/03/2013 - 16:14:01 - [] ----D C:\Users\Michelly Boone\AppData\Local\Google

O43 - CFD: 26/04/2012 - 09:45:39 - [] -SH-D C:\Users\Michelly Boone\AppData\Local\Histórico

O43 - CFD: 05/10/2013 - 22:16:12 - [] ----D C:\Users\Michelly Boone\AppData\Local\HP

O43 - CFD: 27/11/2014 - 13:22:08 - [] ----D C:\Users\Michelly Boone\AppData\Local\Lavasoft

O43 - CFD: 17/10/2014 - 20:31:47 - [] ----D C:\Users\Michelly Boone\AppData\Local\Microsoft

O43 - CFD: 27/08/2014 - 17:52:34 - [] ----D C:\Users\Michelly Boone\AppData\Local\Microsoft Games

O43 - CFD: 30/04/2012 - 00:30:21 - [0] ----D C:\Users\Michelly Boone\AppData\Local\Microsoft Help

O43 - CFD: 26/11/2014 - 16:57:25 - [] ----D C:\Users\Michelly Boone\AppData\Local\Opera Software

O43 - CFD: 12/08/2012 - 21:57:18 - [] ----D C:\Users\Michelly Boone\AppData\Local\PopCap Games

O43 - CFD: 25/10/2012 - 08:31:20 - [] ----D C:\Users\Michelly Boone\AppData\Local\Positivo News

O43 - CFD: 24/01/2013 - 10:09:35 - [] ----D C:\Users\Michelly Boone\AppData\Local\PositivoSync_data

O43 - CFD: 24/01/2013 - 10:14:38 - [] ----D C:\Users\Michelly Boone\AppData\Local\Positivo_BGH

O43 - CFD: 25/10/2012 - 20:37:18 - [] ----D C:\Users\Michelly Boone\AppData\Local\Positivo_Informática_S.A

O43 - CFD: 24/01/2013 - 10:13:49 - [] ----D C:\Users\Michelly Boone\AppData\Local\Programs

O43 - CFD: 19/03/2014 - 06:56:06 - [] ----D C:\Users\Michelly Boone\AppData\Local\PSafe

O43 - CFD: 02/03/2014 - 06:50:23 - [] ----D C:\Users\Michelly Boone\AppData\Local\Skype

O43 - CFD: 28/04/2012 - 14:40:00 - [] ----D C:\Users\Michelly Boone\AppData\Local\SoftGrid Client

O43 - CFD: 19/11/2013 - 00:03:24 - [] ----D C:\Users\Michelly Boone\AppData\Local\Sony

O43 - CFD: 26/04/2012 - 09:46:41 - [] ----D C:\Users\Michelly Boone\AppData\Local\SRS Labs

O43 - CFD: 03/12/2014 - 23:00:19 - [] ----D C:\Users\Michelly Boone\AppData\Local\Temp

O43 - CFD: 26/04/2012 - 09:45:39 - [] -SH-D C:\Users\Michelly Boone\AppData\Local\Temporary Internet Files

O43 - CFD: 17/01/2014 - 12:03:32 - [] ----D C:\Users\Michelly Boone\AppData\Local\VirtualStore

O43 - CFD: 21/08/2014 - 12:02:12 - [] ----D C:\Users\Michelly Boone\AppData\Local\Windows Live

O43 - CFD: 23/03/2013 - 09:02:22 - [] ----D C:\Users\Michelly Boone\AppData\Local\Windows Live Writer

O43 - CFD: 14/07/2009 - 01:54:32 - [] R---D C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

O43 - CFD: 15/08/2014 - 07:47:15 - [] R---D C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

O43 - CFD: 03/12/2014 - 01:51:02 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ashampoo

O43 - CFD: 16/11/2014 - 05:55:23 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

O43 - CFD: 05/11/2014 - 14:53:00 - [] ----D C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory

O43 - CFD: 14/07/2009 - 01:49:38 - [] R---D C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

O43 - CFD: 03/12/2014 - 14:19:37 - [] R---D C:\Users\Michelly Boone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

~ Program Folder: 273 Scanned in 00mn 00s







---\\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)

O44 - LFC:[MD5.04C182F5C42FEADCE5B4FEB9D45490BE] - 01/12/2014 - 18:56:51 ---A- . (.No owner - Setup/Uninstall.) -- C:\Windows\unins000.exe [1187697]

O44 - LFC:[MD5.53CF683C8285554F7341AD001BB89873] - 01/12/2014 - 18:57:26 ---A- . (...) -- C:\Windows\unins000.dat [1261]

O44 - LFC:[MD5.9B435A68351E673BFF266D79E1B0B22A] - 01/12/2014 - 19:02:36 ---A- . (...) -- C:\Windows\System32\LavasoftTcpServiceOff.ini [2480]

O44 - LFC:[MD5.247BF7854CBAF69CEDE8777DC966DE50] - 01/12/2014 - 19:10:59 ---A- . (...) -- C:\Windows\System32\2014-12-01-23-10-56.005-AvastVBoxSVC.exe-8256.log [197]

O44 - LFC:[MD5.4FE42514E52CB088254EF4628BF841E9] - 01/12/2014 - 19:16:40 ---A- . (...) -- C:\Windows\System32\2014-12-01-23-11-00.074-aswFe.exe-7596.log [247]

O44 - LFC:[MD5.FA9E01DD03C003929A0E270476C8583D] - 01/12/2014 - 19:16:57 ---A- . (...) -- C:\Windows\System32\2014-12-01-23-16-53.078-aswFe.exe-3908.log [247]

O44 - LFC:[MD5.22FD68946D604F8240C791053C5EB3C7] - 01/12/2014 - 19:58:49 ---A- . (...) -- C:\Windows\System32\2014-12-01-23-58-47.018-aswFe.exe-5224.log [280]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 01/12/2014 - 20:44:39 ---A- . (...) -- C:\Windows\setuperr.log [0]

O44 - LFC:[MD5.3B02DBCCB1623779A208A6DFB721F927] - 01/12/2014 - 21:17:54 ---A- . (...) -- C:\Windows\MEMORY.DMP [599877401]

O44 - LFC:[MD5.3979875CD5F9631794E2AAA3F1A5E4C0] - 03/12/2014 - 02:18:11 ---A- . (...) -- C:\Windows\ntbtlog.txt [299588]

O44 - LFC:[MD5.26C43960C99EE861A5D0EDC4DCF3B1C3] - 03/12/2014 - 04:48:54 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\48DB2CCA.sys [129752]

O44 - LFC:[MD5.795EC29BA21F1D948FD6FD740C00B599] - 03/12/2014 - 08:35:55 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\System32\Drivers\41748424.sys [458336]

O44 - LFC:[MD5.A731F282ABB2E3499B91443CC4CCAB48] - 03/12/2014 - 15:33:56 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1645422]

O44 - LFC:[MD5.C1D1DDB4344E43B33F37F8B91A70624A] - 03/12/2014 - 15:33:56 ---A- . (...) -- C:\Windows\System32\perfc009.dat [123784]

O44 - LFC:[MD5.773AED52CD3113C43C42EB6E6689B02F] - 03/12/2014 - 15:33:56 ---A- . (...) -- C:\Windows\System32\perfh009.dat [657572]

O44 - LFC:[MD5.187AB8CB22B7573C923EAD184FCD0BC1] - 03/12/2014 - 15:33:56 ---A- . (...) -- C:\Windows\System32\prfc0416.dat [149296]

O44 - LFC:[MD5.BB27700A2AE0CFBC0D10B8AC96DA3C31] - 03/12/2014 - 15:33:56 ---A- . (...) -- C:\Windows\System32\prfh0416.dat [709116]

O44 - LFC:[MD5.87517CA1E6CAF70628062F4A6507599D] - 03/12/2014 - 17:02:34 ---A- . (...) -- C:\Windows\PFRO.log [491336]

O44 - LFC:[MD5.E69D09E1B9AD506ABEF0F7FE575363A6] - 03/12/2014 - 21:51:28 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]

O44 - LFC:[MD5.738C95907196426BF366270B64E42BA9] - 03/12/2014 - 21:51:36 ---A- . (...) -- C:\Windows\setupact.log [1456]

O44 - LFC:[MD5.26C43960C99EE861A5D0EDC4DCF3B1C3] - 03/12/2014 - 21:53:14 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [129752]

O44 - LFC:[MD5.B686008362DE9B2567737A67A8C8B5A3] - 03/12/2014 - 21:56:01 ---A- . (...) -- C:\Windows\WindowsUpdate.log [128215]

O44 - LFC:[MD5.CA43F8904E24BBE49982E4C0B29E6579] - 21/11/2014 - 05:14:08 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816]

O44 - LFC:[MD5.478CC94C937D235CB0A96AB8F2359D81] - 21/11/2014 - 05:14:12 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [93400]

O44 - LFC:[MD5.A646C2DDB8C46E9B20A326FAF566646C] - 21/11/2014 - 05:14:22 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [63704]

O44 - LFC:[MD5.D92FB5770CBDE049A4732B76A77F6864] - 24/11/2014 - 21:07:30 ---A- . (.Microsoft Corporation - Ferramentas de Remoção de Software Mal-Inte.) -- C:\Windows\System32\MRT.exe [103374192]

O44 - LFC:[MD5.B938AF16A521C913791C6F7AFF032757] - 24/11/2014 - 21:40:49 ---A- . (.Microsoft Corporation - No Comment.) -- C:\Windows\System32\oleaut32.dll [861696]

O44 - LFC:[MD5.DD85F00EC31F77315AE992B7B0411D65] - 24/11/2014 - 21:40:55 ---A- . (.Microsoft Corporation - Serviços de Tipografia de DirectX da Micros.) -- C:\Windows\System32\DWrite.dll [1643520]

O44 - LFC:[MD5.2720C94ADCC1727A66365CCB1CE456C4] - 24/11/2014 - 21:42:21 ---A- . (.Microsoft Corporation - Windows Installer.) -- C:\Windows\System32\msi.dll [3241984]

O44 - LFC:[MD5.93C055B6AAD76360A60CB7E59A491531] - 24/11/2014 - 21:42:33 ---A- . (.Microsoft Corporation - Driver Win32 multiusuário.) -- C:\Windows\System32\win32k.sys [3198976]

O44 - LFC:[MD5.934735F508E297504460935B71E99F0B] - 24/11/2014 - 21:42:35 ---A- . (.Microsoft Corporation - Gerenciador de Objetos 2.) -- C:\Windows\System32\packager.dll [77824]

O44 - LFC:[MD5.1FEBD408F32DFC523882E7DA5AC57819] - 24/11/2014 - 21:42:42 ---A- . (.Microsoft Corporation - Microsoft IME.) -- C:\Windows\System32\IMJP10K.DLL [878080]

O44 - LFC:[MD5.336BA030AB7B05300CB0B5C6AFB27176] - 24/11/2014 - 21:42:49 ---A- . (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll [22016]

O44 - LFC:[MD5.DF30FC54FFF79BC744B22A4850A3CF92] - 24/11/2014 - 21:42:49 ---A- . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\TSpkg.dll [86528]

O44 - LFC:[MD5.109CC0DF72CC07A6CB59D2995255A1DA] - 24/11/2014 - 21:42:50 ---A- . (.Microsoft Corporation - Biblioteca criptográfica do Windows.) -- C:\Windows\System32\ncrypt.dll [309760]

O44 - LFC:[MD5.47C48C705F4F1EFC99B50B43AE4301FE] - 24/11/2014 - 21:42:50 ---A- . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll [314880]

O44 - LFC:[MD5.55F0CF40479A1FC89CFA578909A540F2] - 24/11/2014 - 21:42:50 ---A- . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll [210944]

O44 - LFC:[MD5.A71B81AC2C14ABA013CCF1225D9E3E36] - 24/11/2014 - 21:42:50 ---A- . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll [342016]

O44 - LFC:[MD5.364ECFF4ABD9D575F4F7CF7EB7928EF3] - 24/11/2014 - 21:42:59 ---A- . (.Microsoft Corporation - MSXML 3.0 SP11.) -- C:\Windows\System32\msxml3.dll [1882624]

O44 - LFC:[MD5.D005697F0467BBDDAB7638496DA5DB52] - 24/11/2014 - 21:42:59 ---A- . (.Microsoft Corporation - XML Resources.) -- C:\Windows\System32\msxml3r.dll [2048]

O44 - LFC:[MD5.6021CF6A11DE9B5FC1BD210B6855C497] - 24/11/2014 - 21:43:00 ---A- . (.Microsoft Corporation - Application Experience Program Inventory Co.) -- C:\Windows\System32\aeinv.dll [424448]

O44 - LFC:[MD5.9F1FA4F36406693C77CC5779AA7E532D] - 24/11/2014 - 21:43:00 ---A- . (.Microsoft Corporation - Atualizador de Dados de Compatibilidade ent.) -- C:\Windows\System32\aepdu.dll [228864]

O44 - LFC:[MD5.F992AAE3F2DF1D7D2A75B681B0C5280E] - 24/11/2014 - 21:43:00 ---A- . (.Microsoft Corporation - General Telemetry.) -- C:\Windows\System32\generaltel.dll [304640]

O44 - LFC:[MD5.7184AEACDA13E64B10F84E9DD79C8A01] - 24/11/2014 - 21:43:05 ---A- . (.Microsoft Corporation - DLL de eventos de auditoria de segurança.) -- C:\Windows\System32\msaudite.dll [146432]

O44 - LFC:[MD5.58F87BF5659C8EBC61EB439C916F2F9A] - 24/11/2014 - 21:43:05 ---A- . (.Microsoft Corporation - DLL do Esquema de auditoria de segurança.) -- C:\Windows\System32\adtschema.dll [681984]

O44 - LFC:[MD5.008CD4EBFABCF78D0F19B3778492648C] - 24/11/2014 - 21:43:05 ---A- . (.Microsoft Corporation - Gerenciador de Conexões Remotas do Servidor.) -- C:\Windows\System32\termsrv.dll [683520]

O44 - LFC:[MD5.A2C9E45F4069A002E985D1563D16813B] - 24/11/2014 - 21:43:15 ---A- . (.Microsoft Corporation - Audio Engine.) -- C:\Windows\System32\AudioEng.dll [440832]

O44 - LFC:[MD5.9383B21A4B77C130940262DDC5F3F49B] - 24/11/2014 - 21:43:15 ---A- . (.Microsoft Corporation - Audio Ks Endpoint.) -- C:\Windows\System32\AUDIOKSE.dll [500224]

O44 - LFC:[MD5.B1BB7B91C3C878FDB2874138CE81C4EF] - 24/11/2014 - 21:43:15 ---A- . (.Microsoft Corporation - Media Foundation Crash Dump Encryption DLL.) -- C:\Windows\System32\EncDump.dll [284672]

O44 - LFC:[MD5.DE3E38431B00C2EA247C53675DCF01A0] - 24/11/2014 - 21:43:15 ---A- . (.Microsoft Corporation - Serviço de Áudio do Windows.) -- C:\Windows\System32\audiosrv.dll [680960]

O44 - LFC:[MD5.FAFCB80D42A65964B6F4945283B8C10F] - 24/11/2014 - 21:43:15 ---A- . (.Microsoft Corporation - Sessão de Áudio.) -- C:\Windows\System32\AudioSes.dll [296448]

O44 - LFC:[MD5.C4C1B73FC2FF151BA08E1EAFDE2A2FAF] - 24/11/2014 - 21:43:20 ---A- . (.Microsoft Corporation - DLL do servidor LSA.) -- C:\Windows\System32\lsasrv.dll [1460736]

O44 - LFC:[MD5.41774FF331F609EF442B7398EE6202B1] - 24/11/2014 - 21:43:20 ---A- . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\Drivers\ksecpkg.sys [155064]

O44 - LFC:[MD5.8A8CB073A4B9F9D97CFA8CA9C1C851CE] - 24/11/2014 - 21:43:20 ---A- . (.Microsoft Corporation - Pacote de Segurança Kerberos.) -- C:\Windows\System32\kerberos.dll [728064]

O44 - LFC:[MD5.1306E6A1BF4D506CD687DF9F947270F2] - 24/11/2014 - 21:43:20 ---A- . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll [241152]

O44 - LFC:[MD5.EE3592B010E3F69D141323E592C01A1A] - 24/11/2014 - 21:45:49 ---A- . (.Microsoft Corporation - Classificação da Internet e DLL de gerencia.) -- C:\Windows\System32\msrating.dll [199680]

O44 - LFC:[MD5.BBD6A636AAA65D874F3863280CD8373D] - 24/11/2014 - 21:45:49 ---A- . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll [25110016]

O44 - LFC:[MD5.4B6D9AB2ECD11AF5F6B1C42D938E0A85] - 24/11/2014 - 21:45:50 ---A- . (.Microsoft Corporation - DAC for Trident DOM.) -- C:\Windows\System32\MshtmlDac.dll [88064]

O44 - LFC:[MD5.6FC2819A4F80AAB2DADEDFC1EFEE3C3F] - 24/11/2014 - 21:45:50 ---A- . (.Microsoft Corporation - Internet Extensions para Win32.) -- C:\Windows\System32\wininet.dll [2365440]

O44 - LFC:[MD5.98088A13F65BE35DA3693F264740CEEC] - 24/11/2014 - 21:45:50 ---A- . (.Microsoft Corporation - Microsoft (R) HTML Media DLL.) -- C:\Windows\System32\mshtmlmedia.dll [1359360]

O44 - LFC:[MD5.7EC80DB959695D4F927D2D601DA59F35] - 24/11/2014 - 21:45:50 ---A- . (.Microsoft Corporation - Microsoft ® JScript Diagnostics.) -- C:\Windows\System32\jscript9diag.dll [814080]

O44 - LFC:[MD5.F208D7FB40FD80EA9F123BABF687359C] - 24/11/2014 - 21:45:50 ---A- . (.Microsoft Corporation - Microsoft ® JScript.) -- C:\Windows\System32\jscript9.dll [6040064]

O44 - LFC:[MD5.B6DC4597FF946B0C8B29650A71F52D4E] - 24/11/2014 - 21:45:50 ---A- . (.Microsoft Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll [580096]

O44 - LFC:[MD5.69602F6259598A7837CB83D3608FE293] - 24/11/2014 - 21:45:51 ---A- . (.Microsoft Corporation - Mecanismo da Interface do Usuário do Intern.) -- C:\Windows\System32\ieui.dll [633856]

O44 - LFC:[MD5.7EE5FBD190BF5B27F7977EA6CBF0DCAC] - 24/11/2014 - 21:45:51 ---A- . (.Microsoft Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll [92160]

O44 - LFC:[MD5.154B8555A118BCFD95F358390E418B00] - 24/11/2014 - 21:45:51 ---A- . (.Microsoft Corporation - Navegador da Internet.) -- C:\Windows\System32\ieframe.dll [14390272]

O44 - LFC:[MD5.31F2A5ECFD2C75F970A3007ACD5627C7] - 24/11/2014 - 21:45:52 ---A- . (.Microsoft Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll [54784]

O44 - LFC:[MD5.5C9D58591D0091630452B04F35527240] - 24/11/2014 - 21:45:52 ---A- . (.Microsoft Corporation - Painel de Controle da Internet.) -- C:\Windows\System32\inetcpl.cpl [2124288]

O44 - LFC:[MD5.BA4EC6139B8830BBA9CC5D065CA5796C] - 24/11/2014 - 21:45:52 ---A- . (.Microsoft Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll [2884096]

O44 - LFC:[MD5.08BCDD6C9E23D00309F359620461DFE8] - 24/11/2014 - 21:45:52 ---A- . (.Microsoft Corporation - Utilitário de Instalação Autônoma do IE 7.0.) -- C:\Windows\System32\ieUnatt.exe [144384]

O44 - LFC:[MD5.E17C34BECCD1388E9B386A9F82F01222] - 24/11/2014 - 21:45:53 ---A- . (.Microsoft Corporation - IE ETW Collector Service Resources.) -- C:\Windows\System32\ieetwcollectorres.dll [4096]

O44 - LFC:[MD5.6507CA9349500A535AF70670F248E525] - 24/11/2014 - 21:45:53 ---A- . (.Microsoft Corporation - Mapa de versão IOD.) -- C:\Windows\System32\iesetup.dll [66560]

O44 - LFC:[MD5.1E30BECF0DB35481588FB72C9CF97CA2] - 24/11/2014 - 21:45:53 ---A- . (.Microsoft Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [800768]

O44 - LFC:[MD5.BD708EBEDB35E474F1A19747154ACC47] - 24/11/2014 - 21:45:53 ---A- . (.Microsoft Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\System32\ieapfltr.dll [799232]

O44 - LFC:[MD5.C6A719FD0B07B2DD0ADACD07636F4BAD] - 24/11/2014 - 21:45:53 ---A- . (.Microsoft Corporation - Microsoft Spell Checking Facility.) -- C:\Windows\System32\MsSpellCheckingFacility.exe [968704]

O44 - LFC:[MD5.56651A76C63DAF2C593F1F767FC8A856] - 24/11/2014 - 21:45:54 ---A- . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll [1550336]

O44 - LFC:[MD5.1C216980E7D21100A357B52B3C45F78D] - 24/11/2014 - 21:45:54 ---A- . (.Microsoft Corporation - Identidade visual IEAK.) -- C:\Windows\System32\iedkcs32.dll [388272]

O44 - LFC:[MD5.1F3794CE1AEA5DA12ACF90210EAE4ECB] - 24/11/2014 - 21:45:55 ---A- . (.Microsoft Corporation - IE ETW Collector Proxy Stub Resources.) -- C:\Windows\System32\ieetwproxystub.dll [48640]

O44 - LFC:[MD5.7293701905DF1F40760C851F20DDC9EC] - 24/11/2014 - 21:45:55 ---A- . (.Microsoft Corporation - IE ETW Collector Service.) -- C:\Windows\System32\ieetwcollector.exe [114688]

O44 - LFC:[MD5.33098C85B789630865CD3F5D22FB0DFC] - 24/11/2014 - 21:45:55 ---A- . (.Microsoft Corporation - JavaScript Performance Collection Agent.) -- C:\Windows\System32\JavaScriptCollectionAgent.dll [77824]

O44 - LFC:[MD5.854B230F5D77486B67D809FFB8A10C7E] - 24/11/2014 - 21:45:55 ---A- . (.Microsoft Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb [2724864]

O44 - LFC:[MD5.26BC4EC95E363DD59171710E22108F15] - 24/11/2014 - 21:45:55 ---A- . (.Microsoft Corporation - Processamento de RunOnce estendido com inte.) -- C:\Windows\System32\iernonce.dll [34304]

O44 - LFC:[MD5.4E47ABA3C6C5032446A2AF7EFD026037] - 24/11/2014 - 21:45:55 ---A- . (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe [716800]

O44 - LFC:[MD5.D346E07D62E3D4BEAB040939744EC31B] - 24/11/2014 - 21:47:55 ---A- . (.Microsoft Corporation - RDP Audio Endpoint.) -- C:\Windows\System32\rdpendp_winip.dll [228864]

O44 - LFC:[MD5.AD4D0AEDB5993EDA31EB80A54EDBC344] - 24/11/2014 - 21:47:55 ---A- . (.Microsoft Corporation - UMRDP Display Driver.) -- C:\Windows\System32\rdpudd.dll [243200]

O44 - LFC:[MD5.313F68E1A3E6345A4F47A36B07062F34] - 24/11/2014 - 21:47:57 ---A- . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\Windows\System32\Drivers\rdpvideominiport.sys [19456]

O44 - LFC:[MD5.AD64450A4ABE076F5CB34CC08EEACB07] - 24/11/2014 - 21:47:57 ---A- . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\Windows\System32\Drivers\TsUsbGD.sys [30208]

O44 - LFC:[MD5.A4420969E5AB94856E5C0C02E6099D3F] - 24/11/2014 - 21:49:09 ---A- . (.Microsoft Corporation - Remote Desktop Services Client for Microsof.) -- C:\Windows\System32\rdvidcrl.dll [1057280]

O44 - LFC:[MD5.8E75B1112C374EBDF18FD640DA2F0655] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - Conexão de Área de Trabalho Remota.) -- C:\Windows\System32\mstsc.exe [1147392]

O44 - LFC:[MD5.E9981ECE8D894CEF7038FD1D040EB426] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - Driver do Filtro de Hub USB da Área de Trab.) -- C:\Windows\System32\Drivers\TsUsbFlt.sys [56832]

O44 - LFC:[MD5.FEC6178962DFF33074D39CA907971405] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - Extensão GP de Redirecionamento USB da Área.) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll [12800]

O44 - LFC:[MD5.149A388C17F04AD1F99B477A43BE1A9F] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Acces.) -- C:\Windows\System32\MsRdpWebAccess.dll [56832]

O44 - LFC:[MD5.0D2C2FAC4F29B5868D39B7267058CFEF] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - Microsoft Remote Desktop Services Web Proxy.) -- C:\Windows\System32\TSWbPrxy.exe [83968]

O44 - LFC:[MD5.5289A00E2D21BB3A7D6761646543ED5C] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - QEC de Gateway RD.) -- C:\Windows\System32\tsgqec.dll [62976]

O44 - LFC:[MD5.108C257D765AAD2E6EC46557DA0B02BD] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - Remote Desktop USB Redirection GP Extension.) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe [13824]

O44 - LFC:[MD5.79EE5ECB4BE89343E4CF1E48F7769F59] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - Tempo de Execução de Conexão de RemoteApp e.) -- C:\Windows\System32\wksprt.exe [420864]

O44 - LFC:[MD5.7BD2E6E2458A5B95F8341244C7FC7DD4] - 24/11/2014 - 21:49:10 ---A- . (.Microsoft Corporation - WorkspaceRuntime ProxyStub DLL.) -- C:\Windows\System32\wksprtPS.dll [18944]

O44 - LFC:[MD5.DDED7C5558B3AE09F568945281A9A6D1] - 24/11/2014 - 21:49:11 ---A- . (.Microsoft Corporation - Coinstalador do Driver USB Genérico da Área.) -- C:\Windows\System32\TsUsbGDCoInstaller.dll [44544]

O44 - LFC:[MD5.16E132E0454E284BC08E72BDB2DB4A1D] - 24/11/2014 - 21:52:22 ---A- . (...) -- C:\Windows\System32\FNTCACHE.DAT [459224]

O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 25/11/2014 - 05:32:02 --HA- . (...) -- C:\Windows\System32\Drivers\Msft_Kernel_avchv_01009.Wdf [0]

O44 - LFC:[MD5.8AB8CC8200DF2148BEA11FD7F520EA3A] - 25/11/2014 - 05:34:51 ---A- . (.BitDefender - BitDefender Firewall.) -- C:\Windows\System32\BdFirewallSDK.dll [209984]

O44 - LFC:[MD5.E32E201688F60CBEF10439F568F94DF5] - 25/11/2014 - 05:34:51 ---A- . (.No owner - BitDefender Firewall Core Library.) -- C:\Windows\System32\bdfwcore.dll [156936]

O44 - LFC:[MD5.5A60405B7D88A6B6DF933DCCE778DD99] - 25/11/2014 - 05:34:52 ---A- . (.BitDefender - BitDefender Proxy Redirector User-Mode Modu.) -- C:\Windows\System32\bdpredir.dll [96160]

O44 - LFC:[MD5.FD4C613364F59BAAC59A2C4F5F0EE52B] - 25/11/2014 - 05:34:52 ---A- . (.BitDefender - Http Filter Proxy.) -- C:\Windows\System32\httproxy.dll [195016]

O44 - LFC:[MD5.0A13D6818BCBF860EDCEC1ED1E7B9698] - 25/11/2014 - 05:34:52 ---A- . (.BitDefender - OEMBdpredir Dynamic Link Library.) -- C:\Windows\System32\OEMbdpredir.dll [122928]

O44 - LFC:[MD5.73D9B14B7C8621500675F8123043C864] - 25/11/2014 - 05:34:52 ---A- . (.BitDefender S.R.L. - BitDefender POP3 Proxy.) -- C:\Windows\System32\bdpop3p.dll [155912]

O44 - LFC:[MD5.44CF1CE6512CA6B54083156DF7DE3359] - 25/11/2014 - 05:34:52 ---A- . (.BitDefender S.R.L. - BitDefender SMTP Proxy.) -- C:\Windows\System32\bdsmtpp.dll [1061776]

O44 - LFC:[MD5.435123639E3DA3A90A58DD5030D0D220] - 25/11/2014 - 05:34:56 ---A- . (.Bitdefender - Bitdefender Nimbus Client.) -- C:\Windows\System32\bdnc.dll [2084072]

O44 - LFC:[MD5.36F55A7B749ADBA4617483D5E75C820E] - 25/11/2014 - 05:37:21 ---A- . (.Lavasoft Limited - No Comment.) -- C:\Windows\System32\LavasoftTcpService64.dll [358736]

O44 - LFC:[MD5.476192C95325D86C16BDF8BE8760156F] - 25/11/2014 - 07:30:42 ---A- . (...) -- C:\.rnd [1024]

O44 - LFC:[MD5.F042EE4C8D66248D9B86DCF52ABAE416] - 25/11/2014 - 08:02:03 ---A- . (...) -- C:\Windows\PEV.exe [256000]

O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 25/11/2014 - 08:02:03 ---A- . (...) -- C:\Windows\grep.exe [80412]

O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 25/11/2014 - 08:02:03 ---A- . (...) -- C:\Windows\sed.exe [98816]

O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 25/11/2014 - 08:02:03 ---A- . (...) -- C:\Windows\zip.exe [68096]

O44 - LFC:[MD5.753BC16326FEE4A421ACB636CCD602F4] - 25/11/2014 - 08:02:03 ---A- . (.NirSoft - NirCmd.) -- C:\Windows\NIRCMD.exe [60416]

O44 - LFC:[MD5.A46842C9B0C567A5A9584E83A163560C] - 25/11/2014 - 08:02:03 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\Windows\SWREG.exe [518144]

O44 - LFC:[MD5.0297C72529807322B152F517FDB0A9FC] - 25/11/2014 - 08:02:03 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\Windows\SWSC.exe [406528]

O44 - LFC:[MD5.0277C027A26428DB64EF4F64F52BB4FD] - 25/11/2014 - 08:02:04 ---A- . (...) -- C:\Windows\MBR.exe [208896]

O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 25/11/2014 - 08:22:55 ---A- . (...) -- C:\Windows\system.ini [215]

O44 - LFC:[MD5.04199CA5C4A6F6E935906A74EAFCA8E7] - 25/11/2014 - 11:02:15 ---A- . (.Infowatch - Cryptographic Algorithm Lib Driver..) -- C:\Windows\System32\Drivers\CSCrySec.sys [84536]

O44 - LFC:[MD5.7D7F90460F1309B5205BF8CDFAD63E42] - 25/11/2014 - 11:02:18 ---A- . (.Infowatch - Virtual Volume Container Driver (wnet).) -- C:\Windows\System32\Drivers\CSVirtualDiskDrv.sys [66616]

O44 - LFC:[MD5.59096EC53048A9A760889062E2B1FBB3] - 25/11/2014 - 11:42:49 ---A- . (.Kaspersky Lab ZAO - Filter Core [fre_wlh_x64].) -- C:\Windows\System32\Drivers\klflt.sys [92768]

O44 - LFC:[MD5.795EC29BA21F1D948FD6FD740C00B599] - 25/11/2014 - 11:42:49 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\System32\Drivers\kl1.sys [458336]

O44 - LFC:[MD5.31B69BFF28348503E4BD10C2A4F66D05] - 25/11/2014 - 11:42:50 ---A- . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) -- C:\Windows\System32\Drivers\klim6.sys [29792]

O44 - LFC:[MD5.70D959CB6DC1F2AC6AFF3AC20891939D] - 25/11/2014 - 11:42:50 ---A- . (.Kaspersky Lab ZAO - Klif Mini-Filter [fre_wlh_x64].) -- C:\Windows\System32\Drivers\klif.sys [628288]

O44 - LFC:[MD5.58EECD332B68BB36DF1E8B1384A5CCFE] - 27/11/2014 - 08:14:52 ---A- . (...) -- C:\License_Time.rdat [48]

O44 - LFC:[MD5.5EE61AF78EF3CF7DE7812C8EDCE0A9D8] - 27/11/2014 - 08:14:52 ---A- . (...) -- C:\RB.rdat [48]

O44 - LFC:[MD5.6DD73E4E947DB3B0608321AE13210D94] - 27/11/2014 - 12:30:35 ---A- . (.Microsoft Corporation - Cliente ActiveX dos Serviços de Área de Tra.) -- C:\Windows\System32\mstscax.dll [6584320]

O44 - LFC:[MD5.2147C5330F983D76A36B73F4A804F778] - 27/11/2014 - 12:31:02 ---A- . (.Microsoft Corporation - Remote Desktop Protocol Group Policy Extens.) -- C:\Windows\System32\RdpGroupPolicyExtension.dll [16384]

O44 - LFC:[MD5.E9CB5F138943D383DB67F29AAB60453F] - 27/11/2014 - 12:31:02 ---A- . (.Microsoft Corporation - TS RDPCore DLL.) -- C:\Windows\System32\rdpcorets.dll [3179520]

O44 - LFC:[MD5.26C43960C99EE861A5D0EDC4DCF3B1C3] - 30/11/2014 - 05:35:06 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\144355D9.sys [129752]

~ Files: 133 Scanned in 00mn 19s







---\\ Operações e funções ao arranque do Windows Explorer (046)

O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL

O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL

O46 - SEH:ShellExecuteHooks - GbPlugin ShlObj [64Bits] - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL

O46 - SEH:ShellExecuteHooks - GbPlugin ShlObj [64Bits] - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL

~ ShellExecuteHooks: Scanned in 00mn 00s







---\\ Negação do serviço (Local Security Authority) (048)

O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Mecanismo cliente do 'Editor de configuração de segurança Windows'.) -- C:\Windows\System32\scecli.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pacote de Segurança Kerberos.) -- C:\Windows\System32\kerberos.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll

O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll

~ LSA: 9 Scanned in 00mn 00s







---\\ Controlo do Modo de Segurança (CSB) (49)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Driver de porta de mouse serial.) -- C:\Windows\System32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Driver de Extensão do Gerenciador de Volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Driver de porta de mouse serial.) -- C:\Windows\System32\Drivers\sermouse.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Driver de Extensão do Gerenciador de Volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys

~ CSB: 13 Scanned in 00mn 00s







---\\ Pesquisa de infeções nos drivers (HKLM)(TDSD) (O52)

O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm

~ TDSD: 2 Scanned in 00mn 00s







---\\ Enumeração das chaves do registo SecurityProviders (MCSP) (O54)

O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll

O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll

~ MSCP: 2 Scanned in 00mn 00s







---\\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5

O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3

O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1

O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1

O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1

O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0

O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0

O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0

O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1

O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0

O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0

O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1

O55 - MWPS:[HKCU\...\Policies\System] - "DisableRegistryTools"=0

O55 - MWPS:[HKCU\...\Policies\System] - "DisableTaskMgr"=0

~ MWPS: 20 Scanned in 00mn 00s







---\\ Enumeração das chaves do registo PoliciesExplorer (MWPE) (O56)

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoLowDiskSpaceChecks"=1

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=189

O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDrives"=0

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=189

O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDrives"=0

~ MWPE Keys: 5 Scanned in 00mn 00s







---\\ Lista dos drivers do sistema (SDL) (O58)

O58 - SDL:30/11/2014 - 05:35:06 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\144355D9.sys [129752]

O58 - SDL:03/12/2014 - 08:35:55 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\System32\Drivers\41748424.sys [458336]

O58 - SDL:03/12/2014 - 04:48:54 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\48DB2CCA.sys [129752]

O58 - SDL:13/07/2009 - 21:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]

O58 - SDL:13/07/2009 - 21:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [339536]

O58 - SDL:13/07/2009 - 21:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\Drivers\adpu320.sys [182864]

O58 - SDL:13/07/2009 - 21:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [15440]

O58 - SDL:07/07/2011 - 09:24:25 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [107904]

O58 - SDL:13/07/2009 - 21:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [194128]

O58 - SDL:07/07/2011 - 09:24:25 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [27008]

O58 - SDL:13/07/2009 - 21:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [87632]

O58 - SDL:13/07/2009 - 21:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [97856]

O58 - SDL:21/08/2014 - 11:30:50 ---A- . (.BitDefender - Active Virus Control filter driver.) -- C:\Windows\System32\Drivers\avc3.sys [727592]

O58 - SDL:21/08/2014 - 11:30:50 ---A- . (.BitDefender - BitDefender AntiVirus Active Virus Control Hypervisor driver.) -- C:\Windows\System32\Drivers\avchv.sys [261056]

O58 - SDL:21/08/2014 - 11:30:50 ---A- . (.BitDefender - Active Virus Control Kernel Filtering driver.) -- C:\Windows\System32\Drivers\avckf.sys [601360]

O58 - SDL:10/06/2009 - 16:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60a.sys [270848]

O58 - SDL:10/07/2014 - 13:08:36 ---A- . (.BitDefender LLC - BitDefender Firewall NDIS6 Filter Driver.) -- C:\Windows\System32\Drivers\BdfNdisf6.sys [93160]

O58 - SDL:07/08/2013 - 23:25:30 ---A- . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\Drivers\BprotectEx.sys [76096]

O58 - SDL:10/06/2009 - 16:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [18432]

O58 - SDL:10/06/2009 - 16:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [8704]

O58 - SDL:13/07/2009 - 21:19:07 ---A- . (.Brother Industries Ltd. - Brother Serial I/F Driver (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [286720]

O58 - SDL:10/06/2009 - 16:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [47104]

O58 - SDL:10/06/2009 - 16:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [14976]

O58 - SDL:10/06/2009 - 16:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [14720]

O58 - SDL:10/06/2009 - 16:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [468480]

O58 - SDL:13/07/2009 - 21:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [17488]

O58 - SDL:02/06/2011 - 13:39:44 ---A- . (.Infowatch - Cryptographic Algorithm Lib Driver..) -- C:\Windows\System32\Drivers\CSCrySec.sys [84536]

O58 - SDL:02/06/2011 - 13:39:44 ---A- . (.Infowatch - Virtual Volume Container Driver (wnet).) -- C:\Windows\System32\Drivers\CSVirtualDiskDrv.sys [66616]

O58 - SDL:13/07/2009 - 21:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]

O58 - SDL:10/06/2009 - 16:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3286016]

O58 - SDL:10/06/2009 - 16:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]

O58 - SDL:19/10/2010 - 22:34:26 ---A- . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\Drivers\HECIx64.sys [56344]

O58 - SDL:20/11/2010 - 23:23:47 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [78720]

O58 - SDL:05/11/2010 - 21:45:48 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStor.sys [438808]

O58 - SDL:07/07/2011 - 09:24:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [410496]

O58 - SDL:29/01/2014 - 22:02:28 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdkmd64.sys [5363200]

O58 - SDL:13/07/2009 - 21:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [44112]

O58 - SDL:14/10/2010 - 23:28:16 ---A- . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\Drivers\IntcDAud.sys [317440]

O58 - SDL:25/11/2014 - 11:42:49 ---A- . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\System32\Drivers\kl1.sys [458336]

O58 - SDL:25/11/2014 - 11:42:49 ---A- . (.Kaspersky Lab ZAO - Filter Core [fre_wlh_x64].) -- C:\Windows\System32\Drivers\klflt.sys [92768]

O58 - SDL:25/11/2014 - 11:42:50 ---A- . (.Kaspersky Lab ZAO - Klif Mini-Filter [fre_wlh_x64].) -- C:\Windows\System32\Drivers\klif.sys [628288]

O58 - SDL:25/11/2014 - 11:42:50 ---A- . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) -- C:\Windows\System32\Drivers\klim6.sys [29792]

O58 - SDL:11/11/2013 - 21:55:06 ---A- . (.Kaspersky Lab ZAO - KLKBDFLT Keyboard Device Filter [fre_wlh_x64].) -- C:\Windows\System32\Drivers\klkbdflt.sys [29280]

O58 - SDL:11/11/2013 - 21:55:06 ---A- . (.Kaspersky Lab ZAO - KLMOUFLT Mouse Device Filter [fre_wlh_x64].) -- C:\Windows\System32\Drivers\klmouflt.sys [29280]

O58 - SDL:11/11/2013 - 21:55:06 ---A- . (.Kaspersky Lab ZAO - Network filtering component.) -- C:\Windows\System32\Drivers\kltdi.sys [54368]

O58 - SDL:11/11/2013 - 21:55:06 ---A- . (.Kaspersky Lab ZAO - KNEPS Power.) -- C:\Windows\System32\Drivers\kneps.sys [178448]

O58 - SDL:21/01/2010 - 10:08:32 ---A- . (.Windows (R) Win 7 DDK provider - KBFiltr.) -- C:\Windows\System32\Drivers\LiveGpdKBFilter.sys [11168]

O58 - SDL:21/01/2010 - 09:32:16 ---A- . (...) -- C:\Windows\System32\Drivers\LiveIO.sys [14240]

O58 - SDL:21/01/2010 - 10:07:50 ---A- . (.Systems Internals - Windows NT Caps-lock Ctrl Swapper.) -- C:\Windows\System32\Drivers\Livekbc.sys [11680]

O58 - SDL:21/01/2010 - 10:08:04 ---A- . (.Systems Internals - Windows NT Caps-lock Ctrl Swapper.) -- C:\Windows\System32\Drivers\Livemouclass.sys [11168]

O58 - SDL:13/07/2009 - 21:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [114752]

O58 - SDL:13/07/2009 - 21:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [106560]

O58 - SDL:13/07/2009 - 21:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [65600]

O58 - SDL:13/07/2009 - 21:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [115776]

O58 - SDL:21/11/2014 - 05:14:08 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\mbam.sys [25816]

O58 - SDL:21/11/2014 - 05:14:12 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [93400]

O58 - SDL:03/12/2014 - 21:53:14 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\Drivers\MBAMSwissArmy.sys [129752]

O58 - SDL:13/07/2009 - 21:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\System32\Drivers\megasas.sys [35392]

O58 - SDL:13/07/2009 - 21:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [284736]

O58 - SDL:21/11/2014 - 05:14:22 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\Drivers\mwac.sys [63704]

O58 - SDL:13/07/2009 - 21:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [51264]

O58 - SDL:07/07/2011 - 09:24:25 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [148352]

O58 - SDL:07/07/2011 - 09:24:25 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [166272]

O58 - SDL:11/08/2011 - 15:53:44 ---A- . (.Positivo Informática S.A. - Kernel-mode WDM driver.) -- C:\Windows\System32\Drivers\pad.sys [69520]

O58 - SDL:13/07/2009 - 21:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1524816]

O58 - SDL:13/07/2009 - 21:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [128592]

O58 - SDL:10/06/2011 - 05:34:52 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver.) -- C:\Windows\System32\Drivers\Rt64win7.sys [539240]

O58 - SDL:18/01/2011 - 19:12:34 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHD64.sys [2719336]

O58 - SDL:01/11/2010 - 23:48:38 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL81892CE NDIS Driverr.) -- C:\Windows\System32\Drivers\rtl8192ce.sys [1103464]

O58 - SDL:01/09/2009 - 15:58:08 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\System32\Drivers\RtsUStor.sys [225280]

O58 - SDL:10/06/2009 - 16:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040]

O58 - SDL:13/07/2009 - 21:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [43584]

O58 - SDL:13/07/2009 - 21:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [80464]

O58 - SDL:13/07/2009 - 21:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]

O58 - SDL:14/10/2010 - 01:26:48 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\Drivers\SynTP.sys [1395760]

O58 - SDL:10/07/2014 - 13:09:30 ---A- . (.BitDefender S.R.L. - Trufos Kernel Module.) -- C:\Windows\System32\Drivers\Trufos.sys [389240]

O58 - SDL:13/07/2009 - 21:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [17488]

O58 - SDL:13/07/2009 - 21:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [161872]

O58 - SDL:21/01/2010 - 10:08:32 ---A- . (.Windows (R) Win 7 DDK provider - KBFiltr.) -- C:\Windows\System32\LiveGpdKBFilter.sys [11168]

O58 - SDL:21/01/2010 - 09:32:16 ---A- . (...) -- C:\Windows\System32\LiveIO.sys [14240]

O58 - SDL:21/01/2010 - 10:07:50 ---A- . (.Systems Internals - Windows NT Caps-lock Ctrl Swapper.) -- C:\Windows\System32\Livekbc.sys [11680]

O58 - SDL:21/01/2010 - 10:08:04 ---A- . (.Systems Internals - Windows NT Caps-lock Ctrl Swapper.) -- C:\Windows\System32\Livemouclass.sys [11168]

O58 - SDL:15/10/2014 - 04:28:10 ---A- . (.360安全中心 - 360Efimon Driver.) -- C:\Windows\SysWOW64\drivers\efimon.sys [23752]

O58 - SDL:08/05/2013 - 09:52:48 ---A- . (.GAS Tecnologia - GbPlugin Device Driver.) -- C:\Windows\SysWOW64\drivers\gbpkm.sys [49536]

O58 - SDL:03/12/2014 - 21:51:36 ---A- . (.GbPlugin NDIS Device Driver - GbPlugin NDIS Device Driver.) -- C:\Windows\SysWOW64\drivers\gbpndisrd.sys [31088]

O58 - SDL:01/09/2009 - 15:58:08 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\SysWOW64\drivers\RtsUStor.sys [225280]

~ Drivers: 86 Scanned in 00mn 01s







---\\ Últimos ficheiros alterados ou criados (Utilizador) (061)

O61 - LFC: 01/12/2014 - 23:01:01 ---A- . (.AVAST Software.) -- C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup (1).exe [186654544]

O61 - LFC: 01/12/2014 - 23:01:01 ---A- . (.AVAST Software.) -- C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup.exe [186654544]

O61 - LFC: 01/12/2014 - 23:01:01 ---A- . (.AVAST Software.) -- C:\Users\Michelly Boone\Downloads\avast_premier_antivirus_setup_online.exe [4978536]

O61 - LFC: 01/12/2014 - 23:01:01 ---A- . (.AVAST Software.) -- C:\Users\Michelly Boone\Downloads\avastclear.exe [5037464]

O61 - LFC: 01/12/2014 - 23:01:02 ---A- . (.Trend Micro Inc..) -- C:\Users\Michelly Boone\Downloads\HiJackThis (1).exe [388608]

O61 - LFC: 01/12/2014 - 23:01:03 ---A- . (...) -- C:\Users\Michelly Boone\Downloads\ServicesRepair.exe [4001367]

O61 - LFC: 02/12/2014 - 23:01:01 ---A- . (.Farbar.) -- C:\Users\Michelly Boone\Desktop\FRST-OlderVersion\FRST64.exe [2117120]

O61 - LFC: 02/12/2014 - 23:01:02 ---A- . (...) -- C:\Users\Michelly Boone\Downloads\rescue2usb.exe [387584]

O61 - LFC: 03/12/2014 - 23:00:56 ---A- . (...) -- C:\Users\Michelly Boone\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplylgi9.dll [43008]

O61 - LFC: 03/12/2014 - 23:00:56 ---A- . (.GAS Tecnologia.) -- C:\Users\Michelly Boone\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll [4481864]

O61 - LFC: 03/12/2014 - 23:01:01 ---A- . (...) -- C:\Users\Michelly Boone\Downloads\11075872_REDE_WIN7_X64_00 (1).exe [5800448]

O61 - LFC: 03/12/2014 - 23:01:01 ---A- . (.Ashampoo GmbH & Co. KG.) -- C:\Users\Michelly Boone\Downloads\ashampoo_burning_studio_free_1.14.5_sm.exe [33551464]

O61 - LFC: 03/12/2014 - 23:01:01 ---A- . (.Farbar.) -- C:\Users\Michelly Boone\Desktop\FRST64.exe [2117632]

O61 - LFC: 03/12/2014 - 23:01:02 ---A- . (.Dell Inc..) -- C:\Users\Michelly Boone\Downloads\dell_n1e1215f39b1d.exe [15712632]

O61 - LFC: 03/12/2014 - 23:01:02 ---A- . (.Device Doctor Software Inc..) -- C:\Users\Michelly Boone\Downloads\DeviceDoctor_Bundle.exe [1481976]

O61 - LFC: 03/12/2014 - 23:01:03 ---A- . (...) -- C:\Users\Michelly Boone\Downloads\setup_11.0.3.8.x01_2014_12_03_09_36.exe [165181728]

O61 - LFC: 03/12/2014 - 23:01:03 ---A- . (.Nicolas Coolman.) -- C:\Users\Michelly Boone\Downloads\ZHPDiag2.exe [6866303] =>.Nicolas Coolman

~ 105 Fichiers temporaires (Temporary files)

~ Files: 17 Scanned in 00mn 06s







---\\ Lista das ferramentas de remoção de vírus (LAT) (063)

O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman

~ ADS: Scanned in 00mn 00s







---\\ Lista dos serviços Legacy du registo (064)

O64 - Services: CurCS - 03/12/2014 - C:\Windows\System32\DRIVERS\41748424.sys (41748424) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_41748424

O64 - Services: CurCS - 21/08/2014 - C:\Windows\System32\DRIVERS\avc3.sys (avc3) .(.BitDefender - Active Virus Control filter driver.) - LEGACY_AVC3

O64 - Services: CurCS - 21/08/2014 - C:\Windows\System32\DRIVERS\avckf.sys (avckf) .(.BitDefender - Active Virus Control Kernel Filtering drive.) - LEGACY_AVCKF

O64 - Services: CurCS - 10/07/2014 - c:\program files\lavasoft\ad-aware antivirus\firewall engine\1.6.0.0\drivers\bdfndisf6.sys (BdfNdisf) .(.BitDefender LLC - BitDefender Firewall NDIS6 Filter Driver.) - LEGACY_BDFNDISF

O64 - Services: CurCS - 10/07/2014 - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Firewall Engine\1.6.0.0\Drivers\bdfwfpf.sys (bdfwfpf) .(.BitDefender LLC - BitDefender Firewall WFP Filter Driver.) - LEGACY_BDFWFPF

O64 - Services: CurCS - 02/06/2011 - C:\Windows\System32\DRIVERS\CSCrySec.sys (CSCrySec) .(.Infowatch - Cryptographic Algorithm Lib Driver..) - LEGACY_CSCRYSEC

O64 - Services: CurCS - 02/06/2011 - C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys (CSVirtualDiskDrv) .(.Infowatch - Virtual Volume Container Driver (wnet).) - LEGACY_CSVIRTUALDISKDRV

O64 - Services: CurCS - 10/07/2014 - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\3.0.0.56\gzflt.sys (gzflt) .(.BitDefender LLC - BitDefender Gonzales FileSystem Driver.) - LEGACY_GZFLT

O64 - Services: CurCS - 25/11/2014 - C:\Windows\System32\DRIVERS\kl1.sys (kl1) .(.Kaspersky Lab ZAO - Kaspersky Unified Driver.) - LEGACY_KL1

O64 - Services: CurCS - 25/11/2014 - C:\Windows\System32\DRIVERS\klif.sys (KLIF) .(.Kaspersky Lab ZAO - Klif Mini-Filter [fre_wlh_x64].) - LEGACY_KLIF

O64 - Services: CurCS - 25/11/2014 - C:\Windows\System32\DRIVERS\klim6.sys (KLIM6) .(.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) - LEGACY_KLIM6

O64 - Services: CurCS - 11/11/2013 - C:\Windows\System32\DRIVERS\kltdi.sys (kltdi) .(.Kaspersky Lab ZAO - Network filtering component.) - LEGACY_KLTDI

O64 - Services: CurCS - 11/11/2013 - C:\Windows\System32\DRIVERS\kneps.sys (kneps) .(.Kaspersky Lab ZAO - KNEPS Power.) - LEGACY_KNEPS

O64 - Services: CurCS - 21/11/2014 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR

O64 - Services: CurCS - 03/12/2014 - C:\Windows\system32\drivers\MBAMSwissArmy.sys (MBAMSwissArmy) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMSWISSARMY

O64 - Services: CurCS - 21/11/2014 - C:\Windows\system32\drivers\mwac.sys (MBAMWebAccessControl) .(.Malwarebytes Corporation - Malwarebytes Web Access Control.) - LEGACY_MBAMWEBACCESSCONTROL

O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV

~ Legacy: 126 Scanned in 00mn 00s







---\\ Associações Shell Spawning (O67)

O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation

O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos'.) -- C:\Windows\System32\eventvwr.exe

O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*

O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe

O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe

O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S

O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)

~ FASS Keys: 11 Scanned in 00mn 00s







---\\ Menu de inicialização Internet (068)

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe

~ Keys: Scanned in 00mn 00s







---\\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - <a href="http://www.bing.com" target="_blank">http://www.bing.com</a>

~ Keys: Scanned in 00mn 00s







---\\ Listagem dos serviços iniciados pelo Svchost (SSS) (O83)

O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Serviço de Experiência com Aplicativo.) -- C:\Windows\System32\aelupsvc.dll [72192]

O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Cartão Inteligente da Microsof.) -- C:\Windows\System32\certprop.dll [80384]

O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Cartão Inteligente da Microsof.) -- C:\Windows\System32\certprop.dll [80384]

O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\Windows\System32\srvsvc.dll [236032]

O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Diretiva de Grupo.) -- C:\Windows\System32\gpsvc.dll [777728]

O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\Windows\System32\ikeext.dll [859648]

O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Serviço de Áudio do Windows.) -- C:\Windows\System32\Audiosrv.dll [680960]

O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acesso Remoto.) -- C:\Windows\System32\rasauto.dll [99328]

O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\Windows\System32\rasmans.dll [344064]

O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll [97792]

O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistema (SENS).) -- C:\Windows\System32\sens.dll [64512]

O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\Windows\System32\ipnathlp.dll [359424]

O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft(R) Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928]

O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gerenciador de Conexões Remotas do Servidor Host da Sessão da Área de.) -- C:\Windows\System32\termsrv.dll [683520]

O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [2477536]

O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de plano de fundo.) -- C:\Windows\System32\qmgr.dll [849920]

O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll [370688]

O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em uma rede IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344]

O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\Windows\system32\seclogon.dll [30720]

O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\Windows\System32\appinfo.dll [70144]

O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672]

O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Serviço Agendador de Classes de Multimídia.) -- C:\Windows\System32\mmcss.dll [67584]

O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688]

O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho Remota.) -- C:\Windows\System32\sessenv.dll [121856]

O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\Windows\System32\browser.dll [136704]

O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\Windows\System32\eapsvc.dll [111104]

O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\Windows\System32\schedsvc.dll [1110016]

O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Serviço de Gerenciamento de Chaves.) -- C:\Windows\System32\kmsvc.dll [90624]

O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\Windows\System32\wercplsupport.dll [84480]

O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920]

O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\Windows\System32\themeservice.dll [44544]

O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\Windows\System32\bdesvc.dll [100864]

~ Services: 32 Scanned in 00mn 00s







---\\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)

[MD5.6055A05996226DD578A3C3B1AF94D644] [SPRF][06/02/2014] (...) -- C:\ProgramData\ntuser.dat [262144]

[MD5.4393840D9227D50A2FAFF9FC1209DF92] [SPRF][15/07/2013] (...) -- C:\Users\Michelly Boone\AppData\Roaming\unins000.dat [11669]

[MD5.DEBA5093D7DE0313E6BD3BE6C3E496E2] [SPRF][15/07/2013] (.No owner - Setup/Uninstall.) -- C:\Users\Michelly Boone\AppData\Roaming\unins000.exe [720594]

[MD5.C5911CFEBB49FD7AC85F2DFC6EE0A996] [SPRF][13/02/2014] (...) -- C:\Users\Michelly Boone\AppData\Roaming\unins001.dat [15542]

[MD5.7C2D37AB893BFA6713B64D06988777FE] [SPRF][13/02/2014] (.No owner - Setup/Uninstall.) -- C:\Users\Michelly Boone\AppData\Roaming\unins001.exe [720594]

[MD5.5974FC4E73E564CC0243260624298934] [SPRF][12/08/2014] (...) -- C:\Users\Michelly Boone\AppData\Roaming\unins002.dat [17220]

[MD5.6E0BB5B9C845CDC764B2998FE612F73E] [SPRF][12/08/2014] (.No owner - Setup/Uninstall.) -- C:\Users\Michelly Boone\AppData\Roaming\unins002.exe [815314]

[MD5.AEED85060B2A31847910E7FE2A27F433] [SPRF][03/12/2014] (.Farbar - Farbar Recovery Scan Tool.) -- C:\Users\Michelly Boone\Desktop\FRST64.exe [2117632]

[MD5.52700D0D0DCB7A73473ED796C46E9E9B] [SPRF][23/06/2014] (...) -- C:\Users\Michelly Boone\Desktop\testeConexao.bat [90]

[MD5.312D07090050D0E03903C162296CB5E6] [SPRF][18/11/2014] (.No owner - WinMTR MFC Application.) -- C:\Users\Michelly Boone\Desktop\WinMTR.exe [262144]

[MD5.5C5BEF5EFA28BBC8A2E436F2D886CA65] [SPRF][06/06/2013] (.CounterPath Solutions Inc. - X-Lite Setup.) -- C:\Users\Michelly Boone\Desktop\X-Lite_Win32_1104o_56125_100106.exe [9810576]

~ Files: 11 Scanned in 00mn 00s







---\\ Listagem dos códigos dos software (PUC) (090)

O90 - PUC: "5509804B864D4A546AABA531D87D51CF" . (.Bing Bar.) -- C:\Windows\Installer\{B4089055-D468-45A4-A6BA-5A138DD715FC}\icon_installer_ico =>Toolbar.Bing

~ Update Products: 1 Scanned in 00mn 00s







---\\ Pesquisa dos pacotes WindowsInstaller (WIS) (O93) (NTFS)

[MD5.683EF495176EB6BF6C18BDA0A304C22E] [WIS][21/10/2011] (.Microsoft Corporation - Bing Bar.) -- C:\Windows\Installer\4e1319.msi [4771840] =>Toolbar.Bing

~ WIS: 1 Scanned in 00mn 02s







---\\ Estado general dos serviços não Microsoft (EGS) (SR=Executados, SS=Parados)

SS - | Demand 12/09/2014 64704 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

SS - | Demand 01/12/2014 267440 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

SS - | Disabled 10/10/2013 65304 | (AppManagerService) . (.Positivo Informática S.A..) - C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Experience\PositivoAplicativosService.exe

SS - | Demand 21/10/2011 196176 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe =>Toolbar.Bing

SS - | Demand 13/10/2011 249648 | (BBUpdate) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe =>Toolbar.Bing

SS - | Demand 29/01/2014 279000 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe

SS - | Demand 26/12/2012 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

SS - | Demand 26/12/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

SS - | Demand 10/07/1658 0 | (KMService) . (...) - C:\Windows\system32\srvany.exe

SS - | Auto 03/04/2014 315008 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe

SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation

SR - | Auto 14/05/2009 759048 | (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

SR - | Auto 11/11/2013 356128 | (avp) . (.Kaspersky Lab ZAO.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe

SR - | Auto 20/03/2012 45056 | (BatteryManagerSrv) . (.Positivo Informática S.A.) - C:\Program Files (x86)\Positivo Informática\Positivo Experience\Positivo Bateria\BatteryManagerService.exe

SR - | Auto 25/09/2013 818888 | (CSObjectsSrv) . (.Infowatch.) - C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe

SR - | Auto 20/02/2013 151648 | (EPSON_PM_RPCV4_04) . (.SEIKO EPSON CORPORATION.) - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.exe

SR - | Auto 21/07/2014 546104 | (GbpSv) . (.GAS Tecnologia.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe

SR - | Auto 05/11/2010 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

SR - | Auto 15/10/2014 707888 | (LavasoftAdAwareService11) . (...) - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.4.6792.0\AdAwareService.exe

SR - | Auto 13/11/2014 1351512 | (LavasoftTcpService) . (.Lavasoft Limited.) - C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.2.9.5\LavasoftTcpService.exe

SR - | Auto 05/10/2010 325656 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

SR - | Auto 21/11/2014 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

SR - | Auto 21/11/2014 969016 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

SR - | Auto 24/04/2013 483864 | (PMBDeviceInfoProvider) . (.Sony Corporation.) - C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

SR - | Auto 13/11/2014 15208 | (SearchProtectionService) . (...) - C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.WinService.exe =>PUP.SearchProtect

SR - | Auto 25/04/2014 5024576 | (TeamViewer9) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

SR - | Auto 05/10/2010 2655768 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

SR - | Auto 12/07/2014 518968 | (Warsaw Technology) . (.GAS Tecnologia LTDA.) - C:\Program Files (x86)\Diebold\Warsaw\core.exe

SR - | Auto 13/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

SR - | Auto 13/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe

~ Services: Scanned in 00mn 07s







---\\ Pesquisa de infeção no Registo Mestre de Inicialização (MBR) (080)

Run by Michelly Boone at 03/12/2014 23:01:42

~ OS 64 not supported by MBR tool

~ MBR: 0 Scanned in 00mn 00s







---\\ Pesquisa de infeção no Registo Mestre de Inicialização (MBRCheck) (080)

Written by ad13, <a href="http://ad13.geekstog" target="_blank">http://ad13.geekstog</a>

Run by Michelly Boone at 03/12/2014 23:01:44

********* Dump file Name *********

C:\PhysicalDisk0_MBR.bin

~ MBR: Scanned in 00mn 02s







---\\ Scâner Aditional (088)

Database Version : 13026 - (30/11/2014)

Clés trouvées (Keys found) : 5

Valeurs trouvées (Values found) : 0

Dossiers trouvés (Folders found) : 3

Fichiers trouvés (Files found) : 1



[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}] =>Toolbar.Bing^

[HKLM\SYSTEM\CurrentControlSet\Services\SearchProtectionService] =>PUP.SearchProtect^

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B4089055-D468-45A4-A6BA-5A138DD715FC}] =>Toolbar.Bing^

[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B4089055-D468-45A4-A6BA-5A138DD715FC}] =>Toolbar.Agent

[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc] =>PUP.eSafeSecurity

C:\Users\Michelly Boone\AppData\Roaming\Mozilla\Firefox\Profiles\EP: RegExtension {58bd07eb-0ee0-4df0-8121-dc9b693373df} . (...) -- C:\extensions\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension (.not file.) =>PUP.Babylon^

C:\Users\Michelly Boone\AppData\Roaming\SmileysWeLove =>Adware.SmileyBar^

C:\Program Files (x86)\V9Soft =>PUP.V9Software

C:\Windows\Installer\4e1319.msi =>Toolbar.Bing^

~ Additionnel Scan: 276839 Items scanned in 00mn 18s







---\\ Informações complémentaires do módulos

~ <a href="http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/" target="_blank">http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/</a> =>.Internet Explorer, Gestão do Proxy (R5)

~ <a href="http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/" target="_blank">http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/</a> =>.Browser Helper Objects do navegador (02)

~ <a href="http://nicolascoolman.fr/o3-internet-explorer-toolbars/" target="_blank">http://nicolascoolman.fr/o3-internet-explorer-toolbars/</a> =>.Barras do Internet Explorer (03))

~ <a href="http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/" target="_blank">http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/</a> =>.Aplicações iniciadas por registo & pastas (04)

~ AMI: 4 Scanned in 00mn 00s







---\\ Sumário das deteções encontradas na sua estação

<a href="http://nicolascoolman.fr/pup-babylon" target="_blank">http://nicolascoolman.fr/pup-babylon</a> =>PUP.Babylon

<a href="http://nicolascoolman.fr/pup-searchprotect" target="_blank">http://nicolascoolman.fr/pup-searchprotect</a> =>PUP.SearchProtect

<a href="http://nicolascoolman.fr/hijacker-22find" target="_blank">http://nicolascoolman.fr/hijacker-22find</a> =>Hijacker.22Find

<a href="http://nicolascoolman.fr/adware-smileybar" target="_blank">http://nicolascoolman.fr/adware-smileybar</a> =>Adware.SmileyBar

<a href="http://www.nicolascoolman.fr/blog/" target="_blank">http://www.nicolascoolman.fr/blog/</a> =>Toolbar.Agent

<a href="http://nicolascoolman.fr/pup-esafesecurity" target="_blank">http://nicolascoolman.fr/pup-esafesecurity</a> =>PUP.eSafeSecurity

<a href="http://nicolascoolman.fr/pup-v9software" target="_blank">http://nicolascoolman.fr/pup-v9software</a> =>PUP.V9Software

~ MSI: 7 link(s) detected in 00mn 00s







End of the scan (1542 lines in 01mn 52s)(0)

• Execute este script na ferramenta ZHPFix.
  
• Copie estas informações que estão em vermelho para o Bloco de notas.
  
• Com o Bloco de notas aberto, faça: ctrl+a >> ctrl+c.
  
• À seguir, minimize o Bloco de notas.
  
  

Rapport de ZHPFix 2014.10.24.12 par Nicolas Coolman, Update du 24/10/2014

Fichier d'export Registre :

Run by Michelly Boone at 04/12/2014 12:29:19

High Elevated Privileges : OK

Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)



Reciclagem vazia (00mn 05s)

Prefetcher vazio



========== Estado dos serviços ==========

SearchProtectionService Parado



========== Chaves do Registo ==========

ELIMINÉ: Service: SearchProtectionService

ELIMINÉ: HKCU\Software\Baidu Security

ELIMINÉ: HKCU\Software\Baixaki

ELIMINÉ: HKCU\Software\PSafe

ELIMINÉ: HKLM\Software\Wow6432Node\Baidu Security

ELIMINÉ: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B4089055-D468-45A4-A6BA-5A138DD715FC}

ELIMINÉ: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\eSafeSvc



========== Valores do Registo ==========

Ausente Valor Perfil Padrão: FirewallRaz :

Ausente Valor Perfil Domínio FirewallRaz :

ELIMINÉ: RegExtension: {58bd07eb-0ee0-4df0-8121-dc9b693373df}



========== Pastas ==========

ELIMINÉ Temporários windows (42)

ELIMINÉ Flash Cookies (0)

ELIMINÉ: C:\Program Files (x86)\v9Soft

ELIMINÉ: C:\ProgramData\boost_interprocess

ELIMINÉ: C:\ProgramData\PSafe

ELIMINÉ: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PSafe

ELIMINÉ: C:\Users\Michelly Boone\AppData\Roaming\PSafe

ELIMINÉ: C:\Users\Michelly Boone\AppData\Roaming\SmileysWeLove

ELIMINÉ: C:\Users\Michelly Boone\AppData\Local\PSafe



========== Ficheiros ==========

ELIMINÉ Temporários windows (129) (31.540.405 octets)

ELIMINÉ Flash Cookies (0) (0 octets)

ELIMINA REINICIAR: c:\program files (x86)\lavasoft\web companion\application\lavasoft.searchprotect.winservice.exe

ELIMINA REINICIAR: c:\windows\system32\drivers\bprotectex.sys

ELIMINÉ: c:\windows\syswow64\drivers\efimon.sys

ELIMINÉ: c:\program files (x86)\lavasoft\web companion\application\lavasoft.searchprotect.winservice.exe



========== Tarefa planificada ==========

ELIMINÉ: {63486721-98D3-4A5F-9195-B827AFB4203A}



========== Pastas/Ficheiros ocultos restaurados ==========

Mes images (My Pictures) : 33  restaurados com sucesso

Ma musique (My Music) : 4  restaurados com sucesso

Ma Video (My Video) : 6  restaurados com sucesso

Mes Favoris (My Favorites) : 3  restaurados com sucesso

Mes Documents (My Documents) : 72  restaurados com sucesso

Mon Bureau (My Desktop) : 2  restaurados com sucesso

Menu demarrer (Programs) : 9  restaurados com sucesso

Dossier utilisateur (AppData) : 48  restaurados com sucesso

Programmes (Program Files) : 18  restaurados com sucesso



========== Restauração Sistema ==========

Ponto de restauro do sistema criado com sucesso





========== Recapitulativo ==========

7 : Chaves do Registo

3 : Valores do Registo

9 : Pastas

6 : Ficheiros

1 : Estado dos serviços

1 : Tarefa planificada

195 : Pastas/Ficheiros ocultos restaurados

1 : Restauração Sistema





End of clean in 01mn 22s



========== Caminho do ficheiro do relatório ==========

C:\Users\Michelly Boone\AppData\Roaming\ZHP\ZHPFix[R1].txt - 04/12/2014 12:29:25 [2995]