Analise Windows 7 - Virus

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2015 01

Ran by Isuara (administrator) on ISAURA-PC on 27-04-2015 23:37:56

Running from D:\Downloads

Loaded Profiles: Isuara (Available profiles: Isuara & Convidado)

Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Português (Brasil)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: <a href="http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/" target="_blank">http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/</a>



==================== Processes (Whitelisted) =================



(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)



(AMD) C:\Windows\System32\atiesrxx.exe

(Elex do Brasil Participações Ltda) C:\Program Files\Elex-tech\YAC\iSafeSvc.exe

(Elex do Brasil Participações Ltda) C:\Program Files\Elex-tech\YAC\iSafeSvc2.exe

(AMD) C:\Windows\System32\atieclxx.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

(Ellora Assets Corp.) C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe

(                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                ) C:\Program Files\Locaweb\Locaweb Softphone\Locaweb Softphone Manager.exe

( ) C:\Windows\System32\lxbkcoms.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe

(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe

(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe

(Elex do Brasil Participações Ltda) C:\Program Files\Elex-tech\YAC\iSafeTray.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\tv_w32.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe

(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

() C:\Program Files\Elex-tech\YAC\iDesk.exe

(Badoo) C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files\Evernote\Evernote\EvernoteClipper.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

(Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe

(Microsoft Corporation) C:\Program Files\Zune\ZuneNss.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Corporation) C:\Windows\System32\WerFault.exe

Failed to access process -> chrome.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe

Failed to access process -> chrome.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe

Failed to access process -> chrome.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe

Failed to access process -> chrome.exe

(Microsoft Corporation) C:\Windows\System32\taskmgr.exe





==================== Registry (Whitelisted) ==================



(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)



HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227648 2015-03-19] (AVAST Software)

HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)

HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-04-07] (Apple Inc.)

Winlogon\Notify\ GbPluginBb: C:\Program Files\GbPlugin\gbieh.dll [2012-11-22] (Banco do Brasil)

Winlogon\Notify\ GbPluginCef: C:\Program Files\GbPlugin\gbiehCef.dll [2014-08-12] (Caixa Economica Federal)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [26232152 2015-02-19] (Google)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-11-21] (Apple Inc.)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\...\Run: [Google Update] => C:\Users\Isuara\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-05-31] (Google Inc.)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\...\Run: [Badoo Desktop] => C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe [1067232 2012-12-24] (Badoo)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\...\Run: [GoogleChromeAutoLaunch_B31499B1F393489D87D07E8BDA2204C4] => C:\Users\Isuara\AppData\Local\Google\Chrome\Application\chrome.exe [812872 2015-04-13] (Google Inc.)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\...\Run: [Google+ Auto Backup] => C:\Users\Isuara\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3754312 2015-02-13] (Google Inc.)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\...\Run: [OneDrive] => C:\Users\Isuara\AppData\Local\Microsoft\OneDrive\OneDrive.exe [281248 2015-03-19] (Microsoft Corporation)

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> D:\DOWNLO~1\zoek.scr

HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-05-01] (Microsoft Corporation)

Startup: C:\Users\Isuara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-04-01]

ShortcutTarget: Dropbox.lnk -> C:\Users\Isuara\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Isuara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2014-09-03]

ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

Startup: C:\Users\Isuara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\googledrivesync.lnk [2014-09-03]

ShortcutTarget: googledrivesync.lnk -> C:\Program Files\Google\Drive\googledrivesync.exe (Google)

Startup: C:\Users\Isuara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Jimbo.lnk [2015-02-26]

ShortcutTarget: Jimbo.lnk -> C:\Program Files\Meu Bolso em Dia\Jimbo\Jimbo.exe ()

Startup: C:\Users\Isuara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2015-03-01]

ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Isuara\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll [2015-03-19] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Isuara\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll [2015-03-19] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Isuara\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\FileSyncShell.dll [2015-03-19] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2014-12-22] (AVAST Software)

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Isuara\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-30] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Isuara\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-30] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Isuara\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-01-30] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-02-19] (Google)

ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-02-19] (Google)

ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-02-19] (Google)

ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-02-19] (Google)

ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-02-19] (Google)

ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2015-02-19] (Google)

CHR HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION



==================== Internet (Whitelisted) ====================



(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)



HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = <a href="http://www.bing.com" target="_blank">http://www.bing.com</a>

SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-19 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-20 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> 10677B069AE940B9A632C31C4CDFCDD2 URL = <a href="http://br.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}" target="_blank">http://br.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> {F992E376-027D-4C35-A2CB-5AB83B06F73C} URL = <a href="http://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=062413&q={searchTerms}&src=IE-SearchBox" target="_blank">http://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=062413&q={searchTerms}&src=IE-SearchBox</a>

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-22] (AVAST Software)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: No Name -> {C41A1C0E-EA6C-11D4-B1B8-444553540000} ->  No File

BHO: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540003} -> C:\Program Files\GbPlugin\gbiehCef.dll [2014-08-12] (Caixa Economica Federal)

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} <a href="http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab" target="_blank">http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab</a>

DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} <a href="http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab" target="_blank">http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab</a>

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <a href="http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab" target="_blank">http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab</a>

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File

ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Program Files\GbPlugin\gbieh.dll [1585768 2012-11-22] (Banco do Brasil)

ShellExecuteHooks: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399003} - C:\Program Files\GbPlugin\gbiehcef.dll [1736008 2014-08-12] (Caixa Economica Federal)

Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1



FireFox:

========

FF ProfilePath: C:\Users\Isuara\AppData\Roaming\Mozilla\Firefox\Profiles\f9v5k0er.default

FF DefaultSearchUrl: <a href="https://www.google.com/search/?trackid=sp-006" target="_blank">https://www.google.com/search/?trackid=sp-006</a>

FF SearchEngineOrder.3: Bing

FF Homepage: <a href="https://www.google.com/?trackid=sp-006" target="_blank">https://www.google.com/?trackid=sp-006</a>

FF Keyword.URL: <a href="https://www.google.com/search/?trackid=sp-006" target="_blank">https://www.google.com/search/?trackid=sp-006</a>

FF DefaultSearchEngine: Google (avast)

FF SearchEngineOrder.1: Google (avast)

FF SelectedSearchEngine: Google (avast)

FF NewTab: about:newtab

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-20] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll No File

FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()

FF Plugin: <a href="/comunidade/members/user.636732">@google.com</a>/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll No File

FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-06-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-06-25] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL No File

FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll No File

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll No File

FF Plugin: <a href="/comunidade/members/user.419029">@skype</a> Technologies S.A..com/Skype Web Plugin -> C:\Program Files\SkypeWebPlugin\3.1.15602.22612\npSkypeWebPlugin.dll [2014-07-24] (Skype)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-09] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-09] (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-450319107-1443454657-1460410450-1000: <a href="/comunidade/members/user.419029">@skype</a> Limited.com/Facebook Video Calling Plugin -> C:\Users\Isuara\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)

FF Plugin HKU\S-1-5-21-450319107-1443454657-1460410450-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Isuara\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)

FF Plugin HKU\S-1-5-21-450319107-1443454657-1460410450-1000: @talk.google.com/O1DPlugin -> C:\Users\Isuara\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)

FF Plugin HKU\S-1-5-21-450319107-1443454657-1460410450-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Isuara\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)

FF Plugin HKU\S-1-5-21-450319107-1443454657-1460410450-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Isuara\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-04-23] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-04-23] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-04-23] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-04-23] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-04-23] (Apple Inc.)

FF Plugin ProgramFiles/Appdata: C:\Users\Isuara\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)

FF Plugin ProgramFiles/Appdata: C:\Users\Isuara\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)

FF SearchPlugin: C:\Users\Isuara\AppData\Roaming\Mozilla\Firefox\Profiles\f9v5k0er.default\searchplugins\badoo.xml [2012-12-17]

FF SearchPlugin: C:\Users\Isuara\AppData\Roaming\Mozilla\Firefox\Profiles\f9v5k0er.default\searchplugins\Baixaki.xml [2013-12-10]

FF SearchPlugin: C:\Users\Isuara\AppData\Roaming\Mozilla\Firefox\Profiles\f9v5k0er.default\searchplugins\google-avast.xml [2015-04-20]

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\buscape.xml [2015-01-22]

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mercadolivre.xml [2015-01-22]

FF Extension: No Name - C:\Users\Isuara\AppData\Roaming\Mozilla\Firefox\Profiles\f9v5k0er.default\Extensions\{607b689f-7600-45e4-b8e5-887f72dab15c} [2015-01-24]

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-01-22]

FF HKLM\...\Firefox\Extensions: [[EMAIL]wrc@avast.com[/EMAIL]] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-03-12]

FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-04-03]



Chrome:

=======

CHR HomePage: Profile 6 -> hxxp://<a href="'http://www.google.com.br/'" target="_blank">www.google.com.br/</a>

CHR StartupUrls: Profile 6 -> "<a href="https://www.facebook.com/" target="_blank">https://www.facebook.com/</a>", "hxxp://<a href="'http://www.outlook.com/'" target="_blank">www.outlook.com/</a>", "<a href="https://www.google.com.br/" target="_blank">https://www.google.com.br/</a>", "<a href="https://zeropaper.com.br/users/sign_in" target="_blank">https://zeropaper.com.br/users/sign_in</a>", "<a href="https://web.whatsapp.com/" target="_blank">https://web.whatsapp.com/</a>"

CHR DefaultSuggestURL: Profile 6 -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{googleageClassification}{google:searchVersion}{google:sessionToken}{googlerefetchQuery}sugkey={google:suggestAPIKeyParameter}

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (No Name) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-24]

CHR Extension: (No Name) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-24]

CHR Extension: (No Name) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-24]

CHR Extension: (Avast Online Security) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-24]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 1

CHR Extension: (No Name) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2012-04-22]

CHR Extension: (Skype Click to Call) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-04-22]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10

CHR Extension: (Google Slides) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-19]

CHR Extension: (Google Docs) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-19]

CHR Extension: (Google Drive) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-19]

CHR Extension: (No Name) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-19]

CHR Extension: (Google Search) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-19]

CHR Extension: (Yahoo!) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\dogdoihocdkadpalbghcpfafbojcfofa [2015-02-20]

CHR Extension: (Google Sheets) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-19]

CHR Extension: (Avast Online Security) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-19]

CHR Extension: (Google Wallet) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-19]

CHR Extension: (Gmail) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-19]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 11

CHR Extension: (Docs) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-10]

CHR Extension: (Google Drive) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-10]

CHR Extension: (YouTube) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-10]

CHR Extension: (Google Search) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-10]

CHR Extension: (Gmail) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-10]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 2

CHR Extension: (avast! WebRep) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2012-05-27]

CHR Extension: (Skype Click to Call) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-05-27]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3

CHR Extension: (Google Slides) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-22]

CHR Extension: (Google Docs) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-22]

CHR Extension: (Google Drive) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-10]

CHR Extension: (YouTube) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-10]

CHR Extension: (Adblock Plus) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-22]

CHR Extension: (Google Search) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-29]

CHR Extension: (Google Sheets) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-22]

CHR Extension: (AdBlock) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-22]

CHR Extension: (Avast Online Security) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-22]

CHR Extension: (Adblock Super) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\knebimhcckndhiglamoabbnifdkijidd [2014-12-22]

CHR Extension: (Video download helper) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\mnkioblodjcgkdailhejgcocjkkoochj [2014-12-22]

CHR Extension: (Google Wallet) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-10]

CHR Extension: (Gmail) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-10]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6

CHR Extension: (Duolingo on the Web) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2015-01-10]

CHR Extension: (Angry Birds) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-12-12]

CHR Extension: (Google Docs) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-12]

CHR Extension: (Lucidchart Diagrams - Online) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\apboafhkiegglekeafbckfjldecefkhn [2015-03-19]

CHR Extension: (Google Drive) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-04]

CHR Extension: (YouTube) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-03]

CHR Extension: (Adblock Plus) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-04-22]

CHR Extension: (Raindrops(Non-Aero)) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\dpagcfbbmlebfnkeogkigellbgmfkjfg [2014-09-18]

CHR Extension: (Treasure Sprint) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efdenlkkjdodjbkbbmlnijiljofpadoi [2014-12-11]

CHR Extension: (Off Road Rally) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\gbhibmbedajbmoojnalcbnjjhfgkgnec [2014-12-11]

CHR Extension: (No Name) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb [2014-12-12]

CHR Extension: (EXAME.com para Chrome) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\gjeomhheecfjcmhkncjhoedhchbahmpg [2014-09-18]

CHR Extension: (Bookmark Manager) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]

CHR Extension: (Avast Online Security) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-20]

CHR Extension: (Desprotetor de Links) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2014-10-04]

CHR Extension: (Clearly) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj [2014-09-23]

CHR Extension: (Vagalume) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ipgcdnbeeiajinajlafjcdfhckglcopd [2014-12-11]

CHR Extension: (Adblock Super) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\knebimhcckndhiglamoabbnifdkijidd [2015-04-20]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-20]

CHR Extension: (GBBD Banco do Brasil) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\mkeabchhfifpaaoefpockjhaphjmoapp [2014-10-13]

CHR Extension: (Google Wallet) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-27]

CHR Extension: (Bridge the Gap) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nnabcmimfeppcngbeaffbdibagokamji [2014-12-11]

CHR Extension: (No Name) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\oolmcecgdmgibngcbeedeljjadklplag [2014-08-18]

CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2014-10-06]

CHR Extension: (Tarifa de Táxi) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pbldopcdkcepddcophogapjebhfjbpfp [2014-08-18]

CHR Extension: (No BBB) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pffipagakjgfndljjpkbdpoimojmgjca [2015-01-21]

CHR Extension: (Evernote Web Clipper) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-08-18]

CHR Extension: (Gmail) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-17]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7

CHR Extension: (Google Slides) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-25]

CHR Extension: (Google Docs) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-25]

CHR Extension: (Google Drive) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-25]

CHR Extension: (YouTube) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-25]

CHR Extension: (Google Search) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-25]

CHR Extension: (Google Sheets) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-25]

CHR Extension: (Avast Online Security) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-20]

CHR Extension: (Google Wallet) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-25]

CHR Extension: (Gmail) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-25]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8

CHR Extension: (Google Slides) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-02]

CHR Extension: (Google Docs) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-02]

CHR Extension: (Google Drive) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-02]

CHR Extension: (YouTube) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-02]

CHR Extension: (Google Search) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-02]

CHR Extension: (Google Sheets) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-02]

CHR Extension: (Avast Online Security) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-24]

CHR Extension: (Google Wallet) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-02]

CHR Extension: (Gmail) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-02]

CHR Profile: C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9

CHR Extension: (Google Slides) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-19]

CHR Extension: (Google Docs) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-19]

CHR Extension: (Google Drive) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-19]

CHR Extension: (YouTube) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-19]

CHR Extension: (Google Search) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-19]

CHR Extension: (Google Sheets) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-19]

CHR Extension: (Bookmark Manager) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]

CHR Extension: (Avast Online Security) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-19]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-20]

CHR Extension: (Google Wallet) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-19]

CHR Extension: (Adblock Plus) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\ogkamflngncafnakobfendjelfmmdppf [2015-03-19]

CHR Extension: (Gmail) - C:\Users\Isuara\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-19]

CHR HKLM\...\Chrome\Extension: [dogdoihocdkadpalbghcpfafbojcfofa] - <a href="https://clients2.google.com/service/update2/crx" target="_blank">https://clients2.google.com/service/update2/crx</a>

CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-22]

CHR HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Isuara\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-11]

StartMenuInternet: Google Chrome - c:\users\isuara\appdata\local\google\chrome\application\chrome.exe



========================== Services (Whitelisted) =================



(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)



R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-22] (AVAST Software)

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-12-03] (Freemake) [File not signed]

R2 FreemakeVideoCapture; C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-12-03] (Ellora Assets Corp.) [File not signed]

R2 iSafeService; C:\Program Files\Elex-tech\YAC\iSafeSvc.exe [118048 2015-03-20] (Elex do Brasil Participações Ltda)

R2 Locaweb_Softphone_Manager; C:\Program Files\Locaweb\Locaweb Softphone\Locaweb Softphone Manager.exe [102400 2015-01-12] (                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                ) [File not signed]

R2 lxbk_device; C:\Windows\system32\lxbkcoms.exe [537256 2008-02-19] ( )

R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]

R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)

R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)

S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

S2 GbpSv; C:\PROGRA~1\GbPlugin\GbpSv.exe [X]

S2 Update Mgr RollAround; "C:\Program Files\Common Files\2a617352-d396-46a3-a71b-5d89535356cf\updater.exe" [X]



==================== Drivers (Whitelisted) ====================



(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)



R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-12-22] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-12-22] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-12-22] (AVAST Software)

R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-12-22] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-12-22] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-12-22] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-12-22] (AVAST Software)

R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-12-22] ()

R0 GbpKm; C:\Windows\System32\drivers\gbpkm.sys [46552 2014-11-03] (GAS Tecnologia)

R1 iSafeKrnl; C:\Program Files\Elex-tech\YAC\iSafeKrnl.sys [215336 2015-03-20] (Elex do Brasil Participações Ltda)

S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [40744 2015-03-20] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlKit; C:\Program Files\Elex-tech\YAC\iSafeKrnlKit.sys [83752 2015-03-20] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlMon; C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys [34856 2015-03-20] (Elex do Brasil Participações Ltda)

R1 iSafeKrnlR3; C:\Program Files\Elex-tech\YAC\iSafeKrnlR3.sys [63400 2015-03-20] (Elex do Brasil Participações Ltda)

R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [44712 2015-02-17] (Elex do Brasil Participações Ltda)

R3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [48280 2014-12-15] (Visicom Media Inc.)

R3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv.sys [30488 2014-12-15] (Visicom Media Inc.)

R1 ndisrd; C:\Windows\System32\DRIVERS\gbpndisrdn.sys [29400 2014-10-10] (GAS Tecnologia)

R2 npf; C:\Windows\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.)

S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [629760 2010-08-10] (Realtek Semiconductor Corporation                           )

S3 rtl819xp; C:\Windows\System32\DRIVERS\rtl819xp.sys [557600 2010-07-18] (Realtek Semiconductor Corporation                           )

S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2012-12-13] (Apple, Inc.) [File not signed]

S3 MsgPlusDriver; system32\DRIVERS\MsgPlusDriver.sys [X]

S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]



==================== NetSvcs (Whitelisted) ===================



(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)





==================== One Month Created Files and Folders ========



(If an entry is included in the fixlist, the file\folder will be moved.)



2015-04-27 23:30 - 2015-04-27 23:38 - 00000000 ____D () C:\FRST

2015-04-27 17:48 - 2015-04-27 20:22 - 00000112 _____ () C:\Windows\setupact.log

2015-04-27 17:48 - 2015-04-27 20:21 - 00002708 _____ () C:\Windows\PFRO.log

2015-04-27 17:48 - 2015-04-27 17:48 - 00000000 _____ () C:\Windows\setuperr.log

2015-04-27 16:53 - 2015-04-27 16:53 - 00000000 ____D () C:\Users\Todos os Usuários\GbPlugin

2015-04-27 16:53 - 2015-04-27 16:53 - 00000000 ____D () C:\ProgramData\GbPlugin

2015-04-27 15:42 - 2015-04-27 23:19 - 00000000 ___RD () C:\Users\Isuara\OneDrive

2015-04-26 12:39 - 2015-04-26 12:39 - 00000000 ____D () C:\Users\Isuara\AppData\Local\FreemakeVideoDownloader

2015-04-23 14:22 - 2015-04-23 14:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-04-23 14:21 - 2015-04-23 14:21 - 00000000 ____D () C:\Program Files\iPod

2015-04-23 14:20 - 2015-04-23 14:22 - 00000000 ____D () C:\Users\Todos os Usuários\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB

2015-04-23 14:20 - 2015-04-23 14:22 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB

2015-04-23 14:09 - 2015-04-23 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-04-23 14:08 - 2015-04-23 14:09 - 00000000 ____D () C:\Program Files\QuickTime

2015-04-23 10:51 - 2015-04-23 10:51 - 00000000 ___HD () C:\OneDriveTemp

2015-04-22 10:40 - 2015-03-20 00:49 - 00040744 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys

2015-04-22 10:40 - 2015-02-17 00:51 - 00044712 _____ (Elex do Brasil Participações Ltda) C:\Windows\system32\Drivers\iSafeNetFilter.sys

2015-04-22 10:39 - 2015-04-22 10:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC

2015-04-20 17:52 - 2015-04-20 17:52 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-20 17:52 - 2015-04-20 17:52 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-17 19:03 - 2015-04-01 20:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-17 19:03 - 2015-03-23 00:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-17 19:03 - 2015-03-23 00:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-17 19:03 - 2015-03-23 00:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-17 19:03 - 2015-03-23 00:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-17 19:03 - 2015-03-23 00:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-17 19:03 - 2015-03-23 00:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-17 19:03 - 2015-03-23 00:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-17 19:03 - 2015-03-22 23:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-17 19:03 - 2015-03-17 02:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2015-04-17 19:03 - 2015-03-17 02:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-17 19:03 - 2015-03-17 02:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-17 19:03 - 2015-03-17 02:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-17 19:03 - 2015-03-17 01:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-17 19:03 - 2015-03-17 01:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-17 19:03 - 2015-03-17 01:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-17 19:03 - 2015-03-17 01:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-17 19:03 - 2015-03-17 01:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-17 19:03 - 2015-03-17 01:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-17 19:03 - 2015-03-17 01:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-17 19:03 - 2015-03-17 01:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-17 19:03 - 2015-03-17 01:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-17 19:03 - 2015-03-17 01:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-17 19:03 - 2015-03-17 01:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-17 19:03 - 2015-03-17 01:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-17 19:03 - 2015-03-13 00:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-17 19:03 - 2015-03-13 00:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-17 19:03 - 2015-03-13 00:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-17 19:03 - 2015-03-13 00:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-17 19:03 - 2015-03-13 00:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-17 19:03 - 2015-03-13 00:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-17 19:03 - 2015-03-13 00:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-17 19:03 - 2015-03-13 00:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-17 19:03 - 2015-03-13 00:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-17 19:03 - 2015-03-13 00:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-17 19:03 - 2015-03-13 00:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-17 19:03 - 2015-03-13 00:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-17 19:03 - 2015-03-13 00:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-17 19:03 - 2015-03-13 00:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-17 19:03 - 2015-03-13 00:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-17 19:03 - 2015-03-13 00:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-04-17 19:03 - 2015-03-13 00:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-17 19:03 - 2015-03-13 00:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-17 19:03 - 2015-03-12 23:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-17 19:03 - 2015-03-12 23:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-17 19:03 - 2015-03-12 23:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-17 19:03 - 2015-03-12 23:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-17 19:03 - 2015-03-12 23:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-17 19:03 - 2015-03-12 23:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-17 19:03 - 2015-03-12 23:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-17 19:03 - 2015-03-12 23:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-04-17 19:03 - 2015-03-12 23:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-17 19:03 - 2015-03-12 23:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-17 19:03 - 2015-03-12 23:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-17 19:03 - 2015-03-12 23:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-17 19:03 - 2015-03-05 01:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-17 19:03 - 2015-03-04 01:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-17 19:03 - 2015-03-04 01:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-17 19:03 - 2015-01-27 20:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-04-17 19:02 - 2015-03-25 00:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-17 19:02 - 2015-03-25 00:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-17 19:02 - 2015-03-25 00:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-17 19:02 - 2015-03-25 00:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-17 19:02 - 2015-03-25 00:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-17 19:02 - 2015-03-25 00:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-17 19:02 - 2015-03-25 00:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-17 19:02 - 2015-03-25 00:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-17 19:02 - 2015-03-25 00:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-17 19:02 - 2015-03-25 00:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-17 19:02 - 2015-03-25 00:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-17 19:02 - 2015-03-10 00:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-17 19:02 - 2015-03-10 00:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-17 19:02 - 2015-02-25 00:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys



==================== One Month Modified Files and Folders =======



(If an entry is included in the fixlist, the file\folder will be moved.)



2015-04-27 23:29 - 2012-05-03 17:28 - 00001058 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-04-27 22:54 - 2014-06-17 18:48 - 00000902 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-27 22:49 - 2012-03-11 15:11 - 00001082 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-450319107-1443454657-1460410450-1000UA.job

2015-04-27 22:09 - 2013-12-10 08:41 - 01288613 _____ () C:\Windows\WindowsUpdate.log

2015-04-27 21:55 - 2012-04-14 20:24 - 00000932 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-450319107-1443454657-1460410450-1000UA.job

2015-04-27 21:35 - 2012-03-13 12:43 - 00000000 ____D () C:\Users\Isuara\AppData\Roaming\Skype

2015-04-27 20:37 - 2009-07-14 01:34 - 00025616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-27 20:37 - 2009-07-14 01:34 - 00025616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-27 20:28 - 2013-12-10 09:34 - 00000000 ___RD () C:\Users\Isuara\Dropbox

2015-04-27 20:27 - 2013-12-10 09:21 - 00000000 ____D () C:\Users\Isuara\AppData\Roaming\Dropbox

2015-04-27 20:24 - 2012-05-03 17:28 - 00001054 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-04-27 20:22 - 2009-07-14 01:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-27 17:57 - 2009-07-13 23:37 - 00000000 ____D () C:\Windows\system32\LogFiles

2015-04-27 15:42 - 2012-03-11 10:53 - 00000000 ____D () C:\Users\Isuara

2015-04-27 15:33 - 2015-02-24 14:46 - 00000000 ____D () C:\Program Files\Common Files\Adobe AIR

2015-04-26 16:23 - 2012-08-01 19:25 - 00000000 ___RD () C:\Users\Isuara\SkyDrive

2015-04-26 16:05 - 2012-03-11 10:57 - 01643654 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-26 16:05 - 2009-07-14 05:31 - 00708702 _____ () C:\Windows\system32\prfh0416.dat

2015-04-26 16:05 - 2009-07-14 05:31 - 00148482 _____ () C:\Windows\system32\prfc0416.dat

2015-04-26 13:49 - 2012-03-11 15:11 - 00001030 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-450319107-1443454657-1460410450-1000Core.job

2015-04-26 11:54 - 2012-04-14 20:24 - 00000910 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-450319107-1443454657-1460410450-1000Core.job

2015-04-23 18:12 - 2012-03-11 10:57 - 00000000 ____D () C:\Users\Isuara\AppData\Local\Microsoft Help

2015-04-23 18:12 - 2009-07-13 23:37 - 00000000 __RHD () C:\Users\Default

2015-04-23 14:22 - 2013-09-18 15:50 - 00000000 ____D () C:\Program Files\iTunes

2015-04-23 14:20 - 2013-07-18 18:45 - 00000000 ____D () C:\Program Files\Common Files\Apple

2015-04-23 10:37 - 2009-07-14 01:53 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-04-22 21:06 - 2013-01-09 19:33 - 00000000 ____D () C:\Program Files\GbPlugin

2015-04-22 21:04 - 2014-12-31 15:30 - 00031088 _____ (GbPlugin NDIS Device Driver) C:\Windows\system32\Drivers\gbpndisrd.sys

2015-04-22 21:00 - 2009-07-13 23:37 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-22 14:48 - 2015-03-19 13:54 - 00002520 _____ () C:\Users\Isuara\Desktop\Inicializador de aplicativos do Google Chrome.lnk

2015-04-22 14:48 - 2015-01-26 10:24 - 00002446 _____ () C:\Users\Isuara\Desktop\Cigana Lola - Chrome.lnk

2015-04-22 11:39 - 2013-12-20 20:22 - 00000000 ____D () C:\Windows\Minidump

2015-04-22 09:54 - 2012-03-19 14:06 - 00000000 ____D () C:\Users\Isuara\AppData\Roaming\Mozilla

2015-04-20 21:03 - 2009-07-13 23:37 - 00000000 ____D () C:\Windows\Microsoft.NET

2015-04-20 18:21 - 2015-01-27 13:20 - 00000000 ____D () C:\Users\Isuara\AppData\Local\Codelines

2015-04-20 18:20 - 2014-09-04 19:22 - 00000000 ____D () C:\Users\Isuara\AppData\Local\Massive Media

2015-04-20 18:08 - 2012-03-13 12:42 - 00000000 ____D () C:\Users\Todos os Usuários\Skype

2015-04-20 18:08 - 2012-03-13 12:42 - 00000000 ____D () C:\ProgramData\Skype

2015-04-20 18:07 - 2012-03-13 12:42 - 00000000 ___RD () C:\Program Files\Skype

2015-04-20 17:52 - 2014-05-06 22:27 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-20 17:52 - 2009-07-13 23:37 - 00000000 ____D () C:\Windows\system32\pt-BR

2015-04-20 17:52 - 2009-07-13 23:37 - 00000000 ____D () C:\Windows\AppCompat

2015-04-20 17:48 - 2012-03-11 10:57 - 00000000 ____D () C:\Users\Todos os Usuários\Microsoft Help

2015-04-20 17:48 - 2012-03-11 10:57 - 00000000 ____D () C:\ProgramData\Microsoft Help

2015-04-20 17:39 - 2014-01-15 16:11 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-20 17:28 - 2012-05-23 21:18 - 00000000 ___RD () C:\Users\Isuara\Google Drive

2015-04-20 16:31 - 2012-08-07 12:54 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-20 16:12 - 2015-02-18 19:38 - 00001020 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk

2015-04-20 16:09 - 2009-07-13 23:04 - 00000478 _____ () C:\Windows\win.ini

2015-04-20 15:07 - 2012-03-19 14:06 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-04-20 14:54 - 2014-06-17 18:48 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-04-20 14:54 - 2014-06-17 18:48 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-04-17 15:34 - 2013-12-10 09:23 - 00000000 ____D () C:\Users\Isuara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox



==================== Files in the root of some directories =======



2013-08-17 17:14 - 2013-08-17 17:14 - 0000288 _____ () C:\Users\Isuara\AppData\Roaming\.backup.dm

2015-03-11 15:30 - 2015-03-11 15:58 - 0038480 _____ () C:\Users\Isuara\AppData\Roaming\Microsoft Excel 97-2003.ADR

2012-08-26 20:26 - 2013-12-10 09:42 - 11491478 _____ () C:\Users\Isuara\AppData\Roaming\UserTile.png

2015-03-11 16:05 - 2015-03-11 16:05 - 0038467 _____ () C:\Users\Isuara\AppData\Roaming\Valores Separados por Tabulações (DOS).ADR

2012-04-23 10:49 - 2015-03-11 16:12 - 0022477 _____ () C:\Users\Isuara\AppData\Roaming\Valores Separados por Tabulações (Windows).ADR

2012-04-25 16:02 - 2013-11-19 19:41 - 0007596 _____ () C:\Users\Isuara\AppData\Local\Resmon.ResmonCfg



Some content of TEMP:

====================

C:\Users\Isuara\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfe6tew.dll





==================== Bamital & volsnap Check =================



(There is no automatic fix for files that do not pass verification.)



C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed





LastRegBack: 2014-07-28 19:14



==================== End Of Log ============================

• Copie estas informações que estão em vermelho,para o Bloco de Notas.
  
• Salve-a com o nome fixlist.txt
  
• Salve-a no mesmo local em que se encontra a FRST
  
  

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 27-04-2015 01

Ran by Isuara at 2015-04-30 17:05:54 Run:1

Running from D:\Downloads

Loaded Profiles: Isuara (Available profiles: Isuara & Convidado)

Boot Mode: Normal



==============================================



Content of fixlist:

*****************

start

CreateRestorePoint:

CloseProcesses:

CHR HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

SearchScopes: HKLM -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKLM -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\.DEFAULT -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\.DEFAULT -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-19 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-20 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> 10677B069AE940B9A632C31C4CDFCDD2 URL = <a href="http://br.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}" target="_blank">http://br.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = <a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>

SearchScopes: HKU\S-1-5-21-450319107-1443454657-1460410450-1000 -> {F992E376-027D-4C35-A2CB-5AB83B06F73C} URL = <a href="http://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=062413&q={searchTerms}&src=IE-SearchBox" target="_blank">http://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=062413&q={searchTerms}&src=IE-SearchBox</a>

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} <a href="http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab" target="_blank">http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab</a>

DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} <a href="http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab" target="_blank">http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab</a>

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <a href="http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab" target="_blank">http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab</a>

FF DefaultSearchUrl: <a href="https://www.google.com/search/?trackid=sp-006" target="_blank">https://www.google.com/search/?trackid=sp-006</a>

FF Homepage: <a href="https://www.google.com/?trackid=sp-006" target="_blank">https://www.google.com/?trackid=sp-006</a>

FF Keyword.URL: <a href="https://www.google.com/search/?trackid=sp-006" target="_blank">https://www.google.com/search/?trackid=sp-006</a>

S2 GbpSv; C:\PROGRA~1\GbPlugin\GbpSv.exe [X]

S2 Update Mgr RollAround; "C:\Program Files\Common Files\2a617352-d396-46a3-a71b-5d89535356cf\updater.exe" [X]

S3 MsgPlusDriver; system32\DRIVERS\MsgPlusDriver.sys [X]

S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X]

C:\Users\Isuara\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfe6tew.dll

Task: {9847F595-799F-4A22-8876-0BFD8391213D} - \FacebookUpdateTaskUserS-1-5-21-450319107-1443454657-1460410450-1000UA No Task File <==== ATTENTION

Task: {CA6254E6-FAF8-4204-8CEF-EB5FA3ED9E8C} - \FacebookUpdateTaskUserS-1-5-21-450319107-1443454657-1460410450-1000Core No Task File <==== ATTENTION

AlternateDataStreams: C:\ProgramData\TEMP:7311BB85

AlternateDataStreams: C:\ProgramData\TEMP:F1DEA771

AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:7311BB85

AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:F1DEA771

HOSTS:

CMD: bitsadmin /reset /allusers 

CMD: ipconfig /flushdns

emptytemp:

end

*****************



Restore point was successfully created.

Processes closed successfully.

"HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Policies\Google" => Key deleted successfully.

"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.

"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}" => Key deleted successfully.

HKCR\CLSID\{0191A6B0-1154-4C22-9182-23A95BBE92D9} => Key not found. 

HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}" => Key deleted successfully.

HKCR\CLSID\{0191A6B0-1154-4C22-9182-23A95BBE92D9} => Key not found. 

HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

"HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}" => Key deleted successfully.

HKCR\CLSID\{0191A6B0-1154-4C22-9182-23A95BBE92D9} => Key not found. 

HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

"HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}" => Key deleted successfully.

HKCR\CLSID\{0191A6B0-1154-4C22-9182-23A95BBE92D9} => Key not found. 

HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.

"HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\10677B069AE940B9A632C31C4CDFCDD2" => Key deleted successfully.

HKCR\CLSID\10677B069AE940B9A632C31C4CDFCDD2 => Key not found. 

"HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}" => Key deleted successfully.

HKCR\CLSID\{012E1000-F331-11DB-8314-0800200C9A66} => Key not found. 

"HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0191A6B0-1154-4C22-9182-23A95BBE92D9}" => Key deleted successfully.

HKCR\CLSID\{0191A6B0-1154-4C22-9182-23A95BBE92D9} => Key not found. 

"HKU\S-1-5-21-450319107-1443454657-1460410450-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F992E376-027D-4C35-A2CB-5AB83B06F73C}" => Key deleted successfully.

HKCR\CLSID\{F992E376-027D-4C35-A2CB-5AB83B06F73C} => Key not found. 

"HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}" => Key deleted successfully.

"HKCR\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}" => Key deleted successfully.

"HKCR\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}" => Key deleted successfully.

"HKCR\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}" => Key deleted successfully.

Firefox DefaultSearchUrl deleted successfully.

Firefox homepage deleted successfully.

Firefox Keyword.URL deleted successfully.

GbpSv => Service deleted successfully.

Update Mgr RollAround => Service deleted successfully.

MsgPlusDriver => Service deleted successfully.

pccsmcfd => Service deleted successfully.

"C:\Users\Isuara\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfe6tew.dll" => File/Directory not found.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9847F595-799F-4A22-8876-0BFD8391213D}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9847F595-799F-4A22-8876-0BFD8391213D}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-450319107-1443454657-1460410450-1000UA" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CA6254E6-FAF8-4204-8CEF-EB5FA3ED9E8C}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CA6254E6-FAF8-4204-8CEF-EB5FA3ED9E8C}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FacebookUpdateTaskUserS-1-5-21-450319107-1443454657-1460410450-1000Core" => Key deleted successfully.

C:\ProgramData\TEMP => ":7311BB85" ADS removed successfully.

C:\ProgramData\TEMP => ":F1DEA771" ADS removed successfully.

"C:\Users\Todos os Usuários\TEMP" => ":7311BB85" ADS not found.

"C:\Users\Todos os Usuários\TEMP" => ":F1DEA771" ADS not found.

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.

Hosts was reset successfully.



=========  bitsadmin /reset /allusers =========





BITSADMIN version 3.0 [ 7.5.7601 ]

BITS administration utility.

(C) Copyright 2000-2006 Microsoft Corp.



BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.

Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.



Unable to cancel {527EC57C-C88C-4171-90FB-50CD44CBAFB9}.

{E9A406CB-6689-4B4A-93CA-5AC013B704A0} canceled.

{1250CE9E-5931-4AD7-9F68-FA705BE5A80B} canceled.

{92E74561-59A9-4B37-9437-0584A94D7B81} canceled.

{9B263096-6A5A-4E70-B0C5-12FE448AA1C6} canceled.

4 out of 5 jobs canceled.



========= End of CMD: =========





=========  ipconfig /flushdns =========





Configura��o de IP do Windows



N�o foi poss�vel liberar o Cache do DNS Resolver: A fun��o falhou durante a execu��o.





========= End of CMD: =========



EmptyTemp: => Removed 1.2 GB temporary data.





The system needed a reboot. 



==== End of Fixlog 17:11:30 ====

• Baixe: <> (...par Xplode)
  
• Ou aqui >>AdwCleaner<<
  
• Salve-a na sua Desktop (área de trabalho).
  
• Feche todos os programas e navegadores de internet abertos.
  
• Usuários do Windows Vista ou Windows 7,clique com o direito do mouse sobre o arquivo AdwCleaner.exe,depois clique em:
  
  
  
  
  
• Clique em Examinar, para iniciar o escaneamento!
  
  
  
• Ao término, clique em limpar
  
• Copie o log ou clique "Relatório".
  
• Poste: >>C:\AdwCleaner\AdwCleaner [S0].txt<<
  

• Baixe:<> <(...by Oleg N. Scherbakov)>
  
• Salve-o no desktop!
  
• Desabilite seu antivírus!
  
• Para Windows 7, clique direito em JRT.exe e execute-o como
  

Tmfeijo disse:

Boa noite ! IsaGeorge

Com licença . Se me permitem !

Onde obteve atualização do adobe ? Pois Buzzdock ads outra infecção !

Veio automático pelo próprio software ? Através desta versão ( DC 2015.007.20033 inclusive esta é pesada ; melhor a 11.010 for windows ) atual ?

http://get.adobe.com/br/reader/otherversions/
http://s1062.photobucket.com/user/Edson_Melo/media/Screen Shot 04-30-15 at 07.02 PM.png.html?sort=3&o=0

Se sim . Já aconteceu comigo . Lógico que em uma atualização/versão antiga até então e em meu post/tópico teve a discussão de que não seria possível sendo diretamente no site da adobe .


Abraços

# AdwCleaner v4.203 - Relatório criado 04/05/2015 às 15:08:43

# Atualizado 30/04/2015 por Xplode

# Base de dados : 2015-05-02.1 [Servidor]

# Sistema operacional : Windows 7 Professional Service Pack 1 (x86)

# Usuário : Isuara - ISAURA-PC

# Executando de : C:\Users\Isuara\Desktop\adwcleaner_4.203.exe

# Opção : Limpar



***** [ Serviços ] *****



Serviço Excluído : iSafeKrnl

[#] Serviço Excluído : iSafeKrnlBoot

Serviço Excluído : iSafeKrnlKit

Serviço Excluído : iSafeKrnlMon

Serviço Excluído : iSafeKrnlR3

Serviço Excluído : iSafeNetFilter

[#] Serviço Excluído : iSafeService



***** [ Arquivos / Pastas ] *****



Pasta Excluído : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC

Pasta Excluído : C:\Program Files\Elex-tech

Pasta Excluído : C:\Users\Convidado\AppData\Roaming\Elex-tech

Pasta Excluído : C:\Users\Isuara\AppData\Roaming\eCyber

Pasta Excluído : C:\Users\Isuara\AppData\Roaming\Elex-tech

Pasta Excluído : C:\Users\Isuara\AppData\Roaming\Mozilla\Firefox\Profiles\f9v5k0er.default\Extensions\{607b689f-7600-45e4-b8e5-887f72dab15c}

Arquivo Excluído : C:\Windows\system32\drivers\iSafeKrnlBoot.sys

Arquivo Excluído : C:\Windows\system32\drivers\iSafeNetFilter.sys

Arquivo Excluído : C:\Users\Isuara\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\YAC.lnk

Arquivo Excluído : C:\Program Files\Mozilla Firefox\defaults\pref\itms.js



***** [ Tarefas agendadas ] *****





***** [ Atalhos ] *****





***** [ Registro ] *****



Chave Apagado : HKLM\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\iSafeSvc2.exe

Chave Apagado : HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\iSafeRKScan

Chave Apagado : HKLM\SOFTWARE\Classes\CLSID\{5411D116-5A37-47D4-B154-5F7FCD9062F0}

Chave Apagado : HKLM\SOFTWARE\Elex-tech

Chave Apagado : HKU\.DEFAULT\Software\Elex-tech

Chave Apagado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe



***** [ Navegadores ] *****



-\\ Internet Explorer v11.0.9600.17728





-\\ Mozilla Firefox v36.0 (x86 pt-BR)





-\\ Google Chrome v





*************************



AdwCleaner[R0].txt - [2319 bytes] - [04/05/2015 15:03:46]

AdwCleaner[S0].txt - [2193 bytes] - [04/05/2015 15:08:43]



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2252  bytes] ##########



<strong><em><span style="color:#ff0000">JTR</span></em></strong>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.6.7 (04.30.2015:1)

OS: Windows 7 Professional x86

Ran by Isuara on 04/05/2015 at 15:18:35,00

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~









~~~ Services







~~~ Tasks







~~~ Registry Values







~~~ Registry Keys







~~~ Files







~~~ Folders











~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 04/05/2015 at 15:21:44,93

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

• Baixe:<zoek.exe> (...by Smeenk)
  
• Salve na sua Desktop (Área de trabalho) !
  
• Execute o arquivo Zoek.exe.
  
• Usuários do Windows Vista ou Windows 7 clique com o direito sobre o arquivo Zoek.exe, depois clique em
  
  
• Selecione as linhas em vermelho, clique com o direito sobre a seleção e escolha a opção copiar!
  
  

• Baixe: <ZHPDiag ><> ( ...Nicolas Coolman)
  
• Salve-o no Disco local (C ou D).
  
• Desabilite seu antivírus, e execute ZHPDiag.exe para instalar.
  
  
• Execute o ícone do pergaminho!
  
  
• Clique na opção "COMPLETA" e aguarde a conclusão.
  
• Clique OK e,ao concluir, poste o relatório! ( ZHPDiag.txt )
  
• Obs: O relatório por ser extenso deve ser postado em um desses sites:
  
• Acesse: <>
  
• Ou acesse:<>
  
• Maiores informações:<Link> << Hospedagem !