Usamos cookies para medir audiência e melhorar sua experiência. Você pode aceitar ou recusar a qualquer momento. Veja sobre o iMasters.
Hoje apareceu do nada na minha tela a mensagem de que o Spyware Protection tinha encontrado um virus no meu pc. Ele começou a escanear e de repente eu não conseguia abrir mais nada no meu computador.
Fui atrás de algumas soluções e depois de colocar o pc em Modo de Segurança, desativei o programa, mas nao tenho certeza se está tudo 100% limpo.
Passei o Hijackthis pra alguém possa me ajudar.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:58:49, on 27/02/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Users\Bruna\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files\Last.fm\LastFM.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Bruna\Desktop\HiJackThis(2).exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: G-Buster Browser Defense - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\PROGRAM FILES\GBPLUGIN\gbieh.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: www.bancobrasil.com.br
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: www.bb.com.br
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: GbPluginBb - C:\Program Files\GbPlugin\gbieh.dll
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: Watchdog do AVG (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Gbp Service (GbpSv) - - C:\PROGRA~1\GbPlugin\GbpSv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
--
End of file - 5800 bytes
[codeMalwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Versão da Base de Dados: 5898
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
28/02/2011 21:53:30
mbam-log-2011-02-28 (21-53-30).txt
Tipo de Verificação: Verificação Completa (C:\|)
Objetos escaneados: 272556
Tempo decorrido: 39 minuto(s), 58 segundo(s)
Processos de Memória Infectados: 0
Módulos de Memória Infectados: 0
Chaves de Registro Infectadas: 0
Valores de Registro Infectados: 0
Itens de Dados no Registro Infectados: 0
Pastas Infectadas: 0
Arquivos Infectados: 0
Processos de Memória Infectados:
(Não foram detectados ítens maliciosos)
Módulos de Memória Infectados:
(Não foram detectados ítens maliciosos)
Chaves de Registro Infectadas:
(Não foram detectados ítens maliciosos)
Valores de Registro Infectados:
(Não foram detectados ítens maliciosos)
Itens de Dados no Registro Infectados:
(Não foram detectados ítens maliciosos)
Pastas Infectadas:
(Não foram detectados ítens maliciosos)
Arquivos Infectados:
(Não foram detectados ítens maliciosos)][/code]
*Baixe o OTL e salve-o no desktop
*Clique com o botão direito do mouse nele e selecione "Executar como administrador" e selecione as opções:
>
[X] Verificar All Users
Exame Extra do Registro: [X] Usar SafeList
[X] Ignorar Arquivos Microsoft
[X] Usar WhiteList para Nomes de Companhias
[X] Verificar Purity
*Clique no espaço abaixo de "Exames Personalizados/Correções" e cole o código:
>
%systemdrive%\Users\Bruna\AppData\.
%systemdrive%\Users\Bruna\AppData\Local\Temp\.
*Clique [Verificar]
*Cole os relatórios apresentados
[quoteOTL logfile created on: 01/03/2011 00:31:27 - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\Bruna\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 50,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 69,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 297,99 Gb Total Space | 263,07 Gb Free Space | 88,28% Space Free | Partition Type: NTFS
Computer Name: BRUNA-PC | User Name: Bruna | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/03/01 00:29:06 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Bruna\Desktop\OTL(2).exe
PRC - [2011/02/08 10:38:10 | 000,057,120 | ---- | M] ( ) -- C:\Arquivos de Programas\GbPlugin\gbpsv.exe
PRC - [2011/01/07 01:22:44 | 001,084,256 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Arquivos de Programas\AVG\AVG10\avgnsx.exe
PRC - [2011/01/06 15:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Arquivos de Programas\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
PRC - [2010/12/05 16:26:40 | 000,654,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Arquivos de Programas\AVG\AVG10\avgrsx.exe
PRC - [2010/12/05 16:26:12 | 000,650,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Arquivos de Programas\AVG\AVG10\avgchsvx.exe
PRC - [2010/12/03 16:59:23 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Arquivos de Programas\Mozilla Firefox\firefox.exe
PRC - [2010/11/10 02:54:18 | 004,240,760 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de Programas\Windows Live\Messenger\msnmsgr.exe
PRC - [2010/11/10 01:13:30 | 000,025,456 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de Programas\Windows Live\Contacts\wlcomm.exe
PRC - [2010/10/27 21:21:54 | 001,155,072 | ---- | M] (Last.fm) -- C:\Arquivos de Programas\Last.fm\LastFM.exe
PRC - [2010/10/22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Arquivos de Programas\AVG\AVG10\avgwdsvc.exe
PRC - [2010/10/22 04:56:58 | 000,845,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Arquivos de Programas\AVG\AVG10\avgcsrvx.exe
PRC - [2010/09/21 14:03:14 | 001,710,464 | ---- | M] (Microsoft Corp.) -- C:\Arquivos de Programas\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2010/09/21 14:03:14 | 000,193,408 | ---- | M] (Microsoft Corp.) -- C:\Arquivos de Programas\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2010/09/01 01:26:04 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de Programas\Windows Media Player\wmplayer.exe
PRC - [2009/10/31 02:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/07/24 19:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Arquivos de Programas\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2009/07/13 22:14:47 | 001,121,280 | ---- | M] (Microsoft Corporation) -- C:\Arquivos de Programas\Windows Media Player\wmpnetwk.exe
PRC - [2009/07/13 22:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
========== Modules (SafeList) ==========
MOD - [2011/03/01 00:29:06 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Bruna\Desktop\OTL(2).exe
MOD - [2010/08/21 02:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2011/02/17 14:23:55 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011/02/08 10:38:10 | 000,057,120 | ---- | M] ( ) [unknown | Running] -- C:\Arquivos de Programas\GbPlugin\gbpsv.exe -- (GbpSv)
SRV - [2011/01/11 23:19:01 | 001,343,400 | ---- | M] (Microsoft Corporation) [unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011/01/06 15:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2010/11/25 09:49:46 | 000,517,448 | ---- | M] () [On_Demand | Stopped] -- C:\Arquivos de Programas\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2010/10/22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2009/07/24 19:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2009/07/13 22:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 22:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 22:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Arquivos de Programas\Windows Defender\MpSvc.dll -- (WinDefend)
========== Driver Services (SafeList) ==========
DRV - [2011/02/08 10:37:56 | 000,047,008 | ---- | M] (GAS Tecnologia) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\gbpkm.sys -- (GbpKm)
DRV - [2010/12/08 04:12:38 | 000,251,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2010/11/12 13:19:38 | 000,299,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2010/09/13 15:27:54 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2010/09/07 03:48:56 | 000,034,384 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2010/09/07 03:48:50 | 000,026,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)
DRV - [2010/08/19 20:42:38 | 000,123,472 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2010/08/19 20:42:38 | 000,030,288 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2010/08/19 20:42:36 | 000,021,072 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2010/01/26 23:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (npf)
DRV - [2009/07/13 22:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus)
DRV - [2009/07/13 22:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt)
DRV - [2009/07/13 22:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc)
DRV - [2009/07/13 20:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap)
DRV - [2009/07/13 20:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID)
DRV - [2009/07/13 19:02:53 | 000,347,136 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTL8187B.sys -- (RTL8187B)
DRV - [2008/04/10 14:37:12 | 000,113,152 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel®
DRV - [2006/11/02 16:51:58 | 000,013,560 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Arquivos de Programas\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4c74-92FE-5B863F82066B})
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Arquivos de Programas\AVG\AVG10\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Arquivos de Programas\AVG\AVG10\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://br.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-br
IE - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0E A8 4E F8 D3 D6 CB 01 [binary data]
IE - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Arquivos de Programas\AVG\AVG10\Toolbar\IEToolbar.dll ()
IE - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "http://g1.globo.com/|https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&rm=false&continue=http%3A%2F%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy%3Dl&bsv=1eic6yu9oa4y3&scc=1<mpl=default<mplcache=2|http://twitter.com/"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1178
FF - prefs.js..extensions.enabledItems: {87F8774F-B485-47E2-A755-A40A8A5E886C}:1.0.18.2
FF - prefs.js..extensions.enabledItems: {87F8774F-B485-47E2-A755-A40A8A5E886D}:1.0.16.12
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.2
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2011/01/10 13:13:41 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/02/08 04:40:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/18 00:29:59 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/18 00:29:59 | 000,000,000 | ---D | M]
[2011/01/10 15:06:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bruna\AppData\Roaming\mozilla\Extensions
[2011/02/28 11:00:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bruna\AppData\Roaming\mozilla\Firefox\Profiles\h5iql26e.default\extensions
[2011/01/11 00:27:19 | 000,000,000 | ---D | M] ("Módulo de Segurança - Banco do Brasil") -- C:\Users\Bruna\AppData\Roaming\mozilla\Firefox\Profiles\h5iql26e.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E886C}
[2011/01/11 00:39:06 | 000,000,000 | ---D | M] ("Adicional de Seguranca CAIXA®") -- C:\Users\Bruna\AppData\Roaming\mozilla\Firefox\Profiles\h5iql26e.default\extensions\{87F8774F-B485-47E2-A755-A40A8A5E886D}
[2011/01/10 15:05:48 | 000,000,000 | ---D | M] (No name found) -- C:\Arquivos de Programas\Mozilla Firefox\extensions
[2011/01/10 13:13:41 | 000,000,000 | ---D | M] (AVG Safe Search) -- C:\PROGRAM FILES\AVG\AVG10\FIREFOX
[2011/02/08 04:40:46 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\PROGRAMDATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT
[2010/12/03 14:56:28 | 000,001,027 | ---- | M] () -- C:\Arquivos de Programas\Mozilla Firefox\searchplugins\buscape.xml
[2010/12/03 14:56:28 | 000,001,212 | ---- | M] () -- C:\Arquivos de Programas\Mozilla Firefox\searchplugins\mercadolivre.xml
[2010/12/03 14:56:28 | 000,001,168 | ---- | M] () -- C:\Arquivos de Programas\Mozilla Firefox\searchplugins\wikipedia-br.xml
[2010/12/03 14:56:28 | 000,000,952 | ---- | M] () -- C:\Arquivos de Programas\Mozilla Firefox\searchplugins\yahoo-br.xml
O1 HOSTS File: ([2011/01/11 00:31:50 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Arquivos de Programas\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Arquivos de Programas\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de Programas\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Arquivos de Programas\AVG\AVG10\Toolbar\IEToolbar.dll ()
O2 - BHO: (GbIehObj Class) - {C41A1C0E-EA6C-11D4-B1B8-444553540000} - C:\Arquivos de Programas\GbPlugin\gbieh.dll (Banco do Brasil)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Arquivos de Programas\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Arquivos de Programas\AVG\AVG10\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: E&xportar para o Microsoft Excel - C:\Arquivos de Programas\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Arquivos de Programas\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Arquivos de Programas\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Arquivos de Programas\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Arquivos de Programas\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Arquivos de Programas\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Arquivos de Programas\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\..Trusted Domains: bancobrasil.com.br ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\..Trusted Domains: bancobrasil.com.br ([www14] * in Trusted sites)
O15 - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\..Trusted Domains: bancobrasil.com.br ([www2] * in Trusted sites)
O15 - HKU\S-1-5-21-3331449484-3200966063-500050860-1000\..Trusted Domains: bb.com.br ([www] * in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Arquivos de Programas\AVG\AVG10\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Arquivos de Programas\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Arquivos de Programas\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Arquivos de Programas\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - c:\Arquivos de Programas\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Arquivos de Programas\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Arquivos de Programas\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Arquivos de Programas\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\ GbPluginBb: DllName - C:\Program Files\GbPlugin\gbieh.dll - C:\Arquivos de Programas\GbPlugin\gbieh.dll (Banco do Brasil)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Arquivos de Programas\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {E37CB5F0-51F5-4395-A808-5FA49E399F83} - C:\Arquivos de Programas\GbPlugin\gbieh.dll (Banco do Brasil)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 18:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Arquivos de Programas\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Arquivos de Programas\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/03/01 00:28:53 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Users\Bruna\Desktop\OTL(2).exe
[2011/02/28 21:07:37 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{DBE13918-4B96-491E-9622-4B0CDD7980C4}
[2011/02/28 01:04:22 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{BB9E2144-DB71-4AFE-A092-EDC7B6216C4B}
[2011/02/28 00:28:58 | 000,996,864 | ---- | C] (Security Software) -- C:\Users\Bruna\AppData\Roaming\defender.exe
[2011/02/27 22:57:36 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Bruna\Desktop\HiJackThis(2).exe
[2011/02/27 20:56:57 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Roaming\Malwarebytes
[2011/02/27 20:56:35 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011/02/27 20:56:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/02/27 20:56:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/02/27 20:56:31 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011/02/27 20:56:30 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Malwarebytes' Anti-Malware
[2011/02/27 20:50:04 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2011/02/27 20:39:02 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
[2011/02/27 13:03:56 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{E022E876-62C2-4928-848D-3825E6382DFB}
[2011/02/26 20:22:27 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{A7CF72C7-2769-463B-A7CE-74111DC63593}
[2011/02/26 05:49:19 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{C7BD76FE-E9C0-4D8C-82E9-A78541848F2F}
[2011/02/25 11:39:29 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{755C0D16-1B13-4C62-9DD5-B1947E401B1F}
[2011/02/24 20:55:21 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{6499825C-EEB7-46B3-B26E-165B4FADF7B4}
[2011/02/24 00:22:28 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{9C51754F-4B86-4037-A169-A537EDFC1200}
[2011/02/22 02:21:08 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{2112184A-1DCB-48BB-AFFD-8D818FC568DF}
[2011/02/21 14:20:40 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{5CD563B6-7BCC-41F5-8BEC-F535CDD006C5}
[2011/02/21 01:39:33 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{76884898-B15C-4ECA-AC25-78F4898933D3}
[2011/02/20 13:34:57 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{3958F996-9898-4EC0-9DDA-44BCAD08EBCD}
[2011/02/20 12:51:32 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{BE73EB3E-3BF2-4D3F-B231-4E8366061CF1}
[2011/02/19 11:39:01 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{AECD95AD-C602-4C60-BB21-D2455AE04A51}
[2011/02/18 23:38:34 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{63451918-E280-449A-9D3F-064B719102EA}
[2011/02/18 23:29:04 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{88AE8A32-8E4A-49E7-B8EC-30E0D84A103A}
[2011/02/18 10:53:44 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{BC86E17E-91D8-4918-BC1B-FFCA10E6E113}
[2011/02/18 01:27:28 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{79745E70-4368-40D8-97EC-2D5A9904D007}
[2011/02/17 15:30:26 | 000,000,000 | ---D | C] -- C:\Users\Bruna\Documents\Adobe Scripts
[2011/02/17 15:29:56 | 000,000,000 | ---D | C] -- C:\Users\Bruna\Documents\Adobe
[2011/02/17 15:29:04 | 000,000,000 | ---D | C] -- C:\Users\Bruna\Documents\Version Cue
[2011/02/17 15:29:03 | 000,000,000 | ---D | C] -- C:\Users\Bruna\Documents\AdobeStockPhotos
[2011/02/17 15:28:50 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2011/02/17 14:36:26 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\Control Panels
[2011/02/17 14:34:37 | 000,000,000 | ---D | C] -- C:\ProgramData\ALM
[2011/02/17 14:26:51 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Bonjour
[2011/02/17 14:26:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS3
[2011/02/17 14:23:55 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\Macrovision Shared
[2011/02/17 13:27:00 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{B943D020-CE3B-4AE9-B811-087EB6C58CC4}
[2011/02/16 23:52:50 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Roaming\VDownloader
[2011/02/16 23:52:50 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\VDownloader
[2011/02/16 23:52:43 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\WinPcap
[2011/02/16 23:52:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VDownloader
[2011/02/16 23:52:40 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\VDownloader
[2011/02/16 23:09:49 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{D4C945D3-3B1C-4AD1-9DC6-E802A6B59D51}
[2011/02/15 23:47:02 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{9DE6DD24-065C-48A2-818A-8976A82535B5}
[2011/02/15 11:12:14 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{D7DDB3CA-FA8A-407A-8D87-3617FCCC882F}
[2011/02/14 23:11:44 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{B9718C23-2503-4338-9D95-78CB661A97A3}
[2011/02/14 08:48:23 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{CB13E49F-AA23-4026-A7C7-7EB313E43630}
[2011/02/13 17:19:02 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{E74D1022-67BF-4CE7-9339-BF9338ED8B1D}
[2011/02/13 03:34:21 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{7EEC6CA7-DE41-41F1-80D2-87DC34E2F872}
[2011/02/12 15:33:55 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{364BFE5C-A72D-4F7C-9652-2315B6365B5B}
[2011/02/11 21:57:43 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{83B09CC6-2DB2-4282-BF11-66E892F24101}
[2011/02/10 23:36:44 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{5019096F-D43E-4C34-A846-41B012DDFFF3}
[2011/02/10 11:03:49 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{7111DA0B-9AD9-4C88-A81C-06E14741B8DD}
[2011/02/09 23:03:21 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{2B4E3E9A-E39E-44EE-BD98-B970D069F9CC}
[2011/02/09 09:32:58 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{0F8E08F7-AA21-4780-87D3-DF804192FA1E}
[2011/02/08 21:32:30 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{6BDDC401-E380-4C6B-ACC6-E570ED502103}
[2011/02/08 04:40:50 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Common Files\xing shared
[2011/02/08 04:40:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real
[2011/02/08 04:40:28 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[2011/02/08 04:40:07 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Real
[2011/02/08 04:40:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2011/02/08 04:40:01 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Roaming\Real
[2011/02/08 01:53:30 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{33DE20A7-E7C2-4C69-9879-0EE04C035A88}
[2011/02/07 09:22:52 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{0F82DF79-5E1B-4A62-A2E6-E185227F3B2B}
[2011/02/06 16:33:09 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{61FF23D7-F745-4AC9-8F6B-D5B3D330403C}
[2011/02/06 03:39:28 | 000,000,000 | ---D | C] -- C:\Users\Bruna\Desktop\PLAYLIST
[2011/02/06 01:08:17 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{D42C6F9D-5FD4-45A2-ABA4-955D8B7E6559}
[2011/02/05 13:07:56 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{F5BB7221-2161-40A1-A80A-7CC5AB07D3B2}
[2011/02/05 03:01:27 | 000,000,000 | ---D | C] -- C:\Arquivos de Programas\Intel
[2011/02/05 03:01:26 | 000,000,000 | ---D | C] -- C:\Intel
[2011/02/05 01:07:30 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{B38279A0-883C-44E3-9783-57B78D862B8E}
[2011/02/04 13:06:56 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{3DA65C58-61C7-4E7E-852C-9568ECEC2C95}
[2011/02/04 01:33:51 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{9790749E-591A-4D14-9C22-FF7E62E8CB6D}
[2011/02/03 13:33:26 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{9E0B53B1-52D0-467E-8DE6-86ED22D6C7C9}
[2011/02/03 01:32:57 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{BF8CC5BB-39D2-479E-9E58-A197B9A14908}
[2011/02/02 13:03:54 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{61344AE5-6401-41EA-ADEE-955CDF4DF38E}
[2011/02/01 23:48:22 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{C23D20B3-EA50-44CF-9104-CDA104D9EB32}
[2011/02/01 10:15:06 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{A8B36912-81C5-4AA9-A3C2-C525D45592EF}
[2011/01/31 12:09:52 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{27D4C1C1-3CD4-474A-857A-C49096FA470D}
[2011/01/31 00:06:08 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{13433923-1D82-4BAD-8AAD-DD5686B2E90E}
[2011/01/30 11:34:13 | 000,000,000 | ---D | C] -- C:\Users\Bruna\AppData\Local\{7E883132-C619-4687-84BC-C32EB4BF9B88}
[2010/08/25 18:59:08 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[1 C:\Users\Bruna\Desktop\.tmp files -> C:\Users\Bruna\Desktop\.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/03/01 00:34:23 | 003,932,160 | -HS- | M] () -- C:\Users\Bruna\NTUSER.DAT
[2011/03/01 00:29:06 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Bruna\Desktop\OTL(2).exe
[2011/03/01 00:28:26 | 000,017,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/01 00:28:26 | 000,017,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/01 00:19:22 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2011/03/01 00:19:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/03/01 00:19:12 | 1579,843,584 | -HS- | M] () -- C:\hiberfil.sys
[2011/02/28 21:54:58 | 001,806,144 | -H-- | M] () -- C:\Users\Bruna\AppData\Local\IconCache.db
[2011/02/28 21:53:04 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3331449484-3200966063-500050860-1000UA.job
[2011/02/28 21:53:03 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3331449484-3200966063-500050860-1000Core.job
[2011/02/28 21:09:42 | 107,452,932 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2011/02/28 21:09:07 | 000,091,856 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2011/02/28 00:28:58 | 000,996,864 | ---- | M] (Security Software) -- C:\Users\Bruna\AppData\Roaming\defender.exe
[2011/02/27 22:57:36 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Bruna\Desktop\HiJackThis(2).exe
[2011/02/27 20:56:35 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/17 15:29:05 | 000,117,576 | ---- | M] () -- C:\Users\Bruna\AppData\Local\GDIPFONTCACHEV1.DAT
[2011/02/17 14:45:15 | 001,773,512 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/02/16 23:52:42 | 000,001,821 | ---- | M] () -- C:\Users\Public\Desktop\VDownloader.lnk
[2011/02/10 03:05:17 | 000,524,288 | -HS- | M] () -- C:\Users\Bruna\NTUSER.DAT{6035edf3-34db-11e0-824b-00030df176a0}.TMContainer00000000000000000002.regtrans-ms
[2011/02/10 03:05:17 | 000,524,288 | -HS- | M] () -- C:\Users\Bruna\NTUSER.DAT{6035edf3-34db-11e0-824b-00030df176a0}.TMContainer00000000000000000001.regtrans-ms
[2011/02/10 03:05:17 | 000,065,536 | -HS- | M] () -- C:\Users\Bruna\NTUSER.DAT{6035edf3-34db-11e0-824b-00030df176a0}.TM.blf
[2011/02/08 10:37:56 | 000,047,008 | ---- | M] (GAS Tecnologia) -- C:\Windows\System32\drivers\GbpKm.sys
[2011/02/08 06:25:28 | 001,516,220 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2011/02/08 06:25:28 | 000,658,736 | ---- | M] () -- C:\Windows\System32\prfh0416.dat
[2011/02/08 06:25:28 | 000,611,332 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/02/08 06:25:28 | 000,127,134 | ---- | M] () -- C:\Windows\System32\prfc0416.dat
[2011/02/08 06:25:28 | 000,105,512 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/02/08 04:40:56 | 000,001,266 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2011/02/08 04:40:28 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[1 C:\Users\Bruna\Desktop\.tmp files -> C:\Users\Bruna\Desktop\.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/27 21:51:55 | 001,806,144 | -H-- | C] () -- C:\Users\Bruna\AppData\Local\IconCache.db
[2011/02/27 20:56:35 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/17 14:31:30 | 002,463,976 | ---- | C] () -- C:\Windows\System32\NPSWF32.dll
[2011/02/16 23:52:42 | 000,001,821 | ---- | C] () -- C:\Users\Public\Desktop\VDownloader.lnk
[2011/02/16 23:52:41 | 000,444,283 | ---- | C] () -- C:\Arquivos de Programas\Common Files\WinPcapNmap.exe
[2011/02/10 03:04:01 | 000,524,288 | -HS- | C] () -- C:\Users\Bruna\NTUSER.DAT{6035edf3-34db-11e0-824b-00030df176a0}.TMContainer00000000000000000002.regtrans-ms
[2011/02/10 03:04:01 | 000,524,288 | -HS- | C] () -- C:\Users\Bruna\NTUSER.DAT{6035edf3-34db-11e0-824b-00030df176a0}.TMContainer00000000000000000001.regtrans-ms
[2011/02/10 03:04:01 | 000,065,536 | -HS- | C] () -- C:\Users\Bruna\NTUSER.DAT{6035edf3-34db-11e0-824b-00030df176a0}.TM.blf
[2011/02/08 04:40:56 | 000,001,266 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2011/01/10 12:14:49 | 000,117,576 | ---- | C] () -- C:\Users\Bruna\AppData\Local\GDIPFONTCACHEV1.DAT
[2011/01/10 11:57:13 | 001,516,220 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/12/03 14:53:17 | 000,004,608 | ---- | C] () -- C:\Windows\System32\HdmiCoin.dll
[2010/08/25 19:30:02 | 000,439,308 | ---- | C] () -- C:\Windows\System32\igcompkrng500.bin
[2010/08/25 19:30:00 | 000,982,240 | ---- | C] () -- C:\Windows\System32\igkrng500.bin
[2010/08/25 19:30:00 | 000,092,356 | ---- | C] () -- C:\Windows\System32\igfcg500m.bin
[2010/08/25 18:57:00 | 000,000,151 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2010/08/25 18:52:00 | 000,208,896 | ---- | C] () -- C:\Windows\System32\iglhsip32.dll
[2010/08/25 18:52:00 | 000,143,360 | ---- | C] () -- C:\Windows\System32\iglhcp32.dll
[2010/01/26 23:09:02 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2009/07/14 05:31:12 | 000,658,736 | ---- | C] () -- C:\Windows\System32\prfh0416.dat
[2009/07/14 05:31:12 | 000,323,154 | ---- | C] () -- C:\Windows\System32\prfi0416.dat
[2009/07/14 05:31:12 | 000,127,134 | ---- | C] () -- C:\Windows\System32\prfc0416.dat
[2009/07/14 05:31:12 | 000,038,536 | ---- | C] () -- C:\Windows\System32\prfd0416.dat
[2009/07/14 01:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 01:33:53 | 001,773,512 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/13 23:05:48 | 000,611,332 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009/07/13 23:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009/07/13 23:05:48 | 000,105,512 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009/07/13 23:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009/07/13 23:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009/07/13 23:04:57 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini
[2009/07/13 23:04:23 | 000,000,478 | ---- | C] () -- C:\Windows\win.ini
[2009/07/13 23:04:23 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
[2009/07/13 23:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009/07/13 21:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009/07/13 20:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 20:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 20:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/07/13 19:09:19 | 000,139,824 | ---- | C] () -- C:\Windows\System32\igfcg500.bin
[2009/07/13 18:41:56 | 000,053,552 | ---- | C] () -- C:\Windows\System32\dosx.exe
[2009/07/13 18:41:05 | 000,000,718 | ---- | C] () -- C:\Windows\System32\mscdexnt.exe
[2009/07/13 18:41:04 | 000,002,842 | ---- | C] () -- C:\Windows\System32\redir.exe
[2009/07/13 18:41:02 | 000,000,882 | ---- | C] () -- C:\Windows\System32\share.exe
[2009/07/13 18:41:02 | 000,000,882 | ---- | C] () -- C:\Windows\System32\fastopen.exe
[2009/07/13 18:41:01 | 000,019,694 | ---- | C] () -- C:\Windows\System32\GRAPHICS.COM
[2009/07/13 18:40:59 | 000,014,710 | ---- | C] () -- C:\Windows\System32\KB16.COM
[2009/07/13 18:40:57 | 000,007,052 | ---- | C] () -- C:\Windows\System32\nlsfunc.exe
[2009/07/13 18:40:57 | 000,001,131 | ---- | C] () -- C:\Windows\System32\LOADFIX.COM
[2009/07/13 18:40:56 | 000,039,274 | ---- | C] () -- C:\Windows\System32\mem.exe
[2009/07/13 18:40:54 | 000,011,753 | ---- | C] () -- C:\Windows\System32\setver.exe
[2009/07/13 18:40:52 | 000,020,634 | ---- | C] () -- C:\Windows\System32\debug.exe
[2009/07/13 18:40:51 | 000,008,424 | ---- | C] () -- C:\Windows\System32\exe2bin.exe
[2009/07/13 18:40:50 | 000,012,642 | ---- | C] () -- C:\Windows\System32\edlin.exe
[2009/07/13 18:40:49 | 000,012,498 | ---- | C] () -- C:\Windows\System32\append.exe
[2009/07/13 18:40:48 | 000,050,648 | ---- | C] () -- C:\Windows\System32\COMMAND.COM
[2009/07/13 18:40:44 | 000,027,097 | ---- | C] () -- C:\Windows\System32\country.sys
[2009/07/13 18:40:43 | 000,042,809 | ---- | C] () -- C:\Windows\System32\KEY01.SYS
[2009/07/13 18:40:43 | 000,042,537 | ---- | C] () -- C:\Windows\System32\KEYBOARD.SYS
[2009/07/13 18:40:41 | 000,009,029 | ---- | C] () -- C:\Windows\System32\ANSI.SYS
[2009/07/13 18:40:40 | 000,004,768 | ---- | C] () -- C:\Windows\System32\HIMEM.SYS
[2009/07/13 18:40:39 | 000,029,274 | ---- | C] () -- C:\Windows\System32\NTDOS412.SYS
[2009/07/13 18:40:35 | 000,029,370 | ---- | C] () -- C:\Windows\System32\NTDOS411.SYS
[2009/07/13 18:40:31 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS404.SYS
[2009/07/13 18:40:27 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS804.SYS
[2009/07/13 18:40:23 | 000,027,866 | ---- | C] () -- C:\Windows\System32\NTDOS.SYS
[2009/07/13 18:40:19 | 000,035,536 | ---- | C] () -- C:\Windows\System32\NTIO412.SYS
[2009/07/13 18:40:17 | 000,035,776 | ---- | C] () -- C:\Windows\System32\NTIO411.SYS
[2009/07/13 18:40:15 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO404.SYS
[2009/07/13 18:40:13 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO804.SYS
[2009/07/13 18:40:11 | 000,033,952 | ---- | C] () -- C:\Windows\System32\NTIO.SYS
[2009/07/13 18:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\System32\msjetoledb40.dll
[2009/07/13 17:29:46 | 000,013,312 | ---- | C] () -- C:\Windows\System32\win87em.dll
[2009/06/10 18:42:32 | 000,069,886 | ---- | C] () -- C:\Windows\System32\edit.com
[2009/06/10 18:39:59 | 000,060,124 | ---- | C] () -- C:\Windows\System32\tcpmon.ini
[2009/06/10 18:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
========== Purity Check ==========
========== Custom Scans ==========
< %systemdrive%\Users\Bruna\AppData\. >
[2011/02/07 16:22:59 | 000,000,234 | ---- | M] () -- C:\Users\Bruna\AppData\default.pls
< %systemdrive%\Users\Bruna\AppData\Local\Temp\. >
[2011/01/16 20:23:07 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\11220637.od
[2011/01/16 20:23:20 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\11232883.od
[2011/01/16 22:18:04 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\18116879.od
[2011/01/16 22:18:07 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\18120030.od
[2011/01/17 01:27:20 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\2000900.od
[2011/01/17 01:27:25 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\2006328.od
[2011/01/17 01:27:36 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\2017217.od
[2011/01/16 23:01:25 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\20717868.od
[2011/01/16 23:03:12 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\20825228.od
[2011/01/16 23:19:25 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\21798472.od
[2011/01/16 01:57:47 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\2226368.od
[2011/01/16 23:27:53 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\22306473.od
[2011/01/16 01:59:43 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\2342074.od
[2011/01/16 02:02:00 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\2479152.od
[2011/01/17 15:52:51 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\2784617.od
[2011/02/27 18:41:10 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\2884552.od
[2011/01/16 13:19:39 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\3742838.od
[2011/01/16 02:38:33 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\4672573.od
[2011/01/16 02:38:43 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\4682245.od
[2011/01/16 02:38:53 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\4692525.od
[2011/01/17 23:39:44 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\6819271.od
[2011/01/17 23:40:01 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\6836431.od
[2011/01/16 19:28:06 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\7919640.od
[2011/01/18 00:01:36 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\8131692.od
[2011/01/18 00:01:44 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\8139679.od
[2011/01/18 00:01:54 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\8149788.od
[2011/01/18 00:02:13 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\8167900.od
[2011/01/18 00:02:26 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\8181722.od
[2011/01/18 00:02:37 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\8192798.od
[2011/01/18 00:02:43 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\8198757.od
[2011/01/16 19:49:11 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\9184356.od
[2011/01/16 19:49:17 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\9190221.od
[2011/01/16 19:49:22 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\9195634.od
[2011/01/18 00:23:41 | 000,000,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\9456078.od
[2011/02/22 01:47:57 | 000,196,608 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\9A76776F-0C9C-411F-8217-0D3F12ECA03F.Diagnose.0.etl
[2011/02/27 20:39:13 | 001,007,985 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\AdobeARM.log
[2011/02/16 20:59:10 | 000,000,740 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\AdobeARM_NotLocked.log
[2011/02/17 16:49:29 | 000,024,968 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\alm.log
[2011/02/17 16:49:29 | 000,012,036 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\amt.log
[2011/02/27 20:39:04 | 000,142,194 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\ArmUI.ini
[2011/01/16 12:23:25 | 000,010,594 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\avg-f8116d36-4cae-4549-99e3-a93028d44d5a.tmp.mht
[2011/02/16 00:50:04 | 000,031,832 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\Bruna.bmp
[2011/02/16 00:50:04 | 000,049,208 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\Convidado.bmp
[2011/01/18 00:01:36 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR146C.tmp.cvr
[2011/01/18 00:02:43 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR1A65.tmp.cvr
[2011/01/16 13:19:39 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR1C76.tmp.cvr
[2011/01/16 23:01:25 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR212C.tmp.cvr
[2011/01/16 19:49:11 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR2464.tmp.cvr
[2011/01/18 00:02:37 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR30E.tmp.cvr
[2011/01/18 00:01:44 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR339F.tmp.cvr
[2011/01/16 20:23:07 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR369D.tmp.cvr
[2011/01/16 19:49:17 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR3B3E.tmp.cvr
[2011/02/27 18:41:10 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR3C8.tmp.cvr
[2011/01/18 00:23:41 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR49CE.tmp.cvr
[2011/01/16 02:38:33 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR4C3D.tmp.cvr
[2011/01/16 19:49:22 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR5072.tmp.cvr
[2011/01/17 23:40:01 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR50CF.tmp.cvr
[2011/01/18 00:01:54 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR5B0D.tmp.cvr
[2011/01/16 23:27:53 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR5EA9.tmp.cvr
[2011/01/16 20:23:20 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR6673.tmp.cvr
[2011/01/16 22:18:04 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR7100.tmp.cvr
[2011/01/16 02:38:43 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR71F5.tmp.cvr
[2011/01/16 22:18:07 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR7D5E.tmp.cvr
[2011/01/17 15:52:51 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR7D69.tmp.cvr
[2011/01/17 01:27:20 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR8804.tmp.cvr
[2011/01/16 02:38:53 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR9A2D.tmp.cvr
[2011/01/17 01:27:25 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR9D38.tmp.cvr
[2011/01/16 23:19:25 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVR9E38.tmp.cvr
[2011/01/18 00:02:13 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRA1DC.tmp.cvr
[2011/01/16 01:59:43 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRBCBA.tmp.cvr
[2011/01/16 23:03:12 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRC48C.tmp.cvr
[2011/01/17 01:27:36 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRC7B2.tmp.cvr
[2011/01/16 02:02:00 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRD430.tmp.cvr
[2011/01/18 00:02:26 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRD7DA.tmp.cvr
[2011/01/16 19:28:06 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRD818.tmp.cvr
[2011/01/17 23:39:44 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRDC7.tmp.cvr
[2011/01/16 01:57:47 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\CVRF8C0.tmp.cvr
[2011/03/01 00:21:08 | 000,001,024 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\etilqs_DZ4Gck1r44FTf95
[2011/03/01 00:33:49 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\etilqs_mPpPmdGlNMzDYp6-journal
[2011/02/24 22:44:50 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\etilqs_mYy9MZBDnF7vrwF
[2011/02/09 23:50:03 | 000,001,024 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\etilqs_NtOhKfYDMu3mXdD
[2011/02/24 23:27:43 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\etilqs_o8rBnWY4Oa9EsDX-journal
[2011/02/10 02:37:42 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\etilqs_UPBkhjfaxxSp4IL-journal
[2011/01/10 11:53:21 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\FXSAPIDebugLogFile.txt
[2011/02/08 08:37:40 | 000,129,134 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\Microsoft .NET Framework Client Profile Language Pack Setup_20110208_083730942.html
[2011/02/28 12:04:22 | 000,065,535 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\MsnMsgr_Watson.txt
[2011/01/24 14:42:14 | 000,000,062 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\OneNote_MigrationLog.txt
[2011/01/20 21:35:47 | 000,004,411 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\PCULog0.txt
[2011/02/27 20:13:50 | 000,006,331 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\StructuredQuery.log
[2011/02/16 23:51:46 | 004,141,792 | ---- | M] (Tangysoft Ltd. ) -- C:\Users\Bruna\AppData\Local\Temp\UseNeXT_freetrial_416581w.exe
[2011/02/18 14:14:12 | 000,000,000 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\vGwoP+vO.htm.part
[2011/02/06 18:30:18 | 001,519,763 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\w++BT1Wq.mp3.part
[2011/02/26 15:39:37 | 000,002,436 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\wmsetup.log
[2011/02/17 14:22:01 | 000,074,256 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{00E5C764-9525-44C3-8404-712AD06AE12A}background.png
[2011/02/17 14:22:01 | 000,041,561 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{00E5C764-9525-44C3-8404-712AD06AE12A}Titan.ico
[2011/02/17 14:22:00 | 000,110,809 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{0CB57D21-5E7C-4121-AD75-8ED4AE1B31C8}CS3_ribs_mastercollection.png
[2011/02/17 14:22:00 | 000,066,745 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{0CB57D21-5E7C-4121-AD75-8ED4AE1B31C8}master_install_pkg.ico
[2011/02/17 14:22:01 | 000,057,164 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{11439DFB-0658-42C7-926D-B66985857733}background.png
[2011/02/17 14:22:01 | 000,041,414 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{11439DFB-0658-42C7-926D-B66985857733}ct_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,093,314 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{193F8A7B-1853-48D5-88AC-19446C2C1D13}estk_ribs_bgd.png
[2011/02/17 14:22:01 | 000,084,807 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{24D77A7C-E10B-4057-9974-FAB8BFDAC853}background.png
[2011/02/17 14:22:01 | 000,039,627 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{24D77A7C-E10B-4057-9974-FAB8BFDAC853}installer.ico
[2011/01/24 14:42:13 | 000,009,888 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{2CD99FF5-FFE3-4400-934B-F821135FC04A}
[2011/02/17 14:22:01 | 000,057,708 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{30C4B843-28DA-466F-AFCA-CB0ED153C826}background.png
[2011/02/17 14:22:01 | 000,041,582 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{30C4B843-28DA-466F-AFCA-CB0ED153C826}PS_AppIcon.ico
[2011/02/07 14:50:32 | 000,012,854 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{3B3D53D0-C29C-48BF-B2FF-E988DC0CF54B}
[2011/02/17 14:22:01 | 000,036,942 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{3BC8460B-085E-47F3-9C62-8FFCBAF11D78}background.png
[2011/02/17 14:22:01 | 000,038,030 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{3BC8460B-085E-47F3-9C62-8FFCBAF11D78}Setup.ico
[2011/02/17 14:22:01 | 000,020,376 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{450CDEDE-2E5F-4659-AC0D-BA693424ACAF}background.png
[2011/02/17 14:22:01 | 000,045,630 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{450CDEDE-2E5F-4659-AC0D-BA693424ACAF}Setup.ico
[2011/02/17 14:22:01 | 000,040,581 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{4DAFF26A-62E5-4F2F-9E98-E73B914E6828}pr_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,073,536 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{4DAFF26A-62E5-4F2F-9E98-E73B914E6828}pr_ribs_bgd.png
[2011/02/14 07:15:28 | 000,036,566 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{51A2E686-5B89-4D12-88D4-CB7590E92D29}
[2011/02/17 14:22:01 | 000,039,368 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{5CF8D367-0897-4AE2-B872-8543DAC17F0D}ae_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,049,920 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{5CF8D367-0897-4AE2-B872-8543DAC17F0D}ae_ribs_bgd.png
[2011/02/17 14:22:01 | 000,042,014 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{61D23D99-3398-414E-974E-EBAE498BB298}bridge.ico
[2011/02/17 14:22:01 | 000,037,113 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{7BB7F66A-D798-45A3-A383-0727FB1EBF8E}background.png
[2011/02/17 14:22:01 | 000,041,579 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{7BB7F66A-D798-45A3-A383-0727FB1EBF8E}Setup.ico
[2011/02/17 14:22:01 | 000,009,244 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{7E3A1BF6-0A77-41B0-9CAC-ABD550F6F10D}application.sif
[2011/02/17 14:22:01 | 000,039,061 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{7E3A1BF6-0A77-41B0-9CAC-ABD550F6F10D}en_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,045,350 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{7E3A1BF6-0A77-41B0-9CAC-ABD550F6F10D}en_ribs_bgd.png
[2011/02/17 14:22:01 | 000,040,581 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{81178416-8292-46D1-953F-483DE5A9A68A}pr_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,073,536 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{81178416-8292-46D1-953F-483DE5A9A68A}pr_ribs_bgd.png
[2011/02/08 02:10:55 | 000,012,728 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{95795EA4-ABF1-4C6A-9824-7DD5C21D0D3E}
[2011/02/17 14:22:01 | 000,050,225 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{9787B2D4-5394-4525-A290-47653B3181D9}background.png
[2011/02/17 14:22:01 | 000,040,410 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{9787B2D4-5394-4525-A290-47653B3181D9}fw_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,055,692 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{abd781e6-d5ca-45aa-a5f7-f64799eb1c04}VC_Uninstall_Icon.ico
[2011/02/17 14:22:01 | 000,009,432 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{BB996BAA-72E6-48AF-899A-57B760CC3E21}application.sif
[2011/02/17 14:22:01 | 000,040,581 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{BB996BAA-72E6-48AF-899A-57B760CC3E21}pr_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,073,536 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{BB996BAA-72E6-48AF-899A-57B760CC3E21}pr_ribs_bgd.png
[2011/02/17 14:22:01 | 000,041,354 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{C4519961-AC64-4565-B3AF-9050296B5D5A}ai_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,038,372 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{C4519961-AC64-4565-B3AF-9050296B5D5A}ai_ribs_bgd.png
[2011/02/17 14:22:01 | 000,039,061 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{C540712E-34FC-476B-AB3F-972B5792E37C}en_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,045,350 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{C540712E-34FC-476B-AB3F-972B5792E37C}en_ribs_bgd.png
[2011/02/17 14:22:01 | 000,041,413 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{CBA9F6F8-071E-4587-9852-AC008CE62FB1}sb_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,053,886 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{CBA9F6F8-071E-4587-9852-AC008CE62FB1}sb_ribs_bgd.png
[2011/02/17 14:22:01 | 000,009,056 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{D5058BB1-750B-49A1-B023-1AEBAC0C5636}application.sif
[2011/02/17 14:22:01 | 000,041,413 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{D5058BB1-750B-49A1-B023-1AEBAC0C5636}sb_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,053,886 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{D5058BB1-750B-49A1-B023-1AEBAC0C5636}sb_ribs_bgd.png
[2011/02/17 14:22:01 | 000,039,368 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{FB245ED0-CD60-4B9C-9EB2-CDB63D189087}ae_install_pkg_rev.ico
[2011/02/17 14:22:01 | 000,049,920 | ---- | M] () -- C:\Users\Bruna\AppData\Local\Temp\{FB245ED0-CD60-4B9C-9EB2-CDB63D189087}ae_ribs_bgd.png
[62 C:\Users\Bruna\AppData\Local\Temp\.tmp files -> C:\Users\Bruna\AppData\Local\Temp\.tmp -> ]
========== Alternate Data Streams ==========
@Alternate Data Stream - 204 bytes -> C:\Windows\System32\drivers:GbpKmAp.lst
@Alternate Data Stream - 2 bytes -> C:\Windows\System32:93066733_Bb.gbp
< End of report >
]
Folder [explore] -- Reg Error: Value error.Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{51DD370C-6690-424E-9674-5F14468B323F}" = Corel Graphics - Windows Shell Extension
"_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW® Graphics Suite X5
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{005F78AF-110D-398A-8430-BE98950A1E22}" = Google Talk Plugin
"{0224CACC-994D-45F8-B973-D65056EA9C2F}" = Adobe XMP DVA Panels CS3
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285}" = Adobe After Effects CS3 Presets
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}" = CorelDRAW Graphics Suite X5 - Custom Data
"{260ED378-2B8C-4831-ADAE-D0712D119AC5}" = CorelDRAW Graphics Suite X5 - VSTA
"{26945917-E053-45F6-AF98-309730CFC318}" = Visual Basic for Applications ® Core
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}" = CorelDRAW Graphics Suite X5 - Filters
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials
"{4458C442-7376-4CF9-AF58-E8CEA6722363}" = Adobe Setup
"{485ACF57-F364-440A-8496-E1E81C8FA1AA}" = Adobe Premiere Pro CS3 Third Party Content
"{4908C75E-E5E2-43F7-B1DF-023CBA831046}" = Nero 7 Premium
"{50F102CA-4BE2-41A9-9810-5BB05EB91B9A}" = Adobe Premiere Pro CS3 Functional Content
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{51DD370C-6690-424E-9674-5F14468B323F}" = Corel Graphics - Windows Shell Extension
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{54B2EAD9-A110-43F7-B010-2859A1BD2AFE}" = Adobe Encore CS3
"{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}" = CorelDRAW Graphics Suite X5 - Connect
"{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}" = CorelDRAW Graphics Suite X5 - VBA
"{58DCEEE5-532E-44F4-B1D7-A146EF9E9FDA}" = Adobe Premiere Pro CS3
"{59123CCF-FED2-46FF-9293-D1DC80042219}" = CorelDRAW Graphics Suite X5 - Redist
"{5AB0B30D-4EBF-4897-894A-6B8865954694}" = Bison WebCam Ap
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}" = CorelDRAW Graphics Suite X5 - Draw
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6B708481-748A-4EB4-97C1-CD386244FF77}" = Adobe MotionPicture Color Files
"{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}" = AHV content for Acrobat and Flash
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7ACFB90E-8FD0-4397-AD3A-5195412623A3}" = Adobe Help Viewer CS3
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{845A8DB9-8802-4FD3-9FE3-938A6C46A2EC}" = Adobe Video Profiles
"{8718DC03-D066-4957-94E5-50C3C5042E8E}" = Adobe Creative Suite 3 Master Collection
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{90120000-0015-0416-0000-0000000FF1CE}" = Microsoft Office Access MUI (Portuguese (Brazil)) 2007
"{90120000-0015-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0416-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Portuguese (Brazil)) 2007
"{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0416-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007
"{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0416-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Portuguese (Brazil)) 2007
"{90120000-0019-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0416-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Portuguese (Brazil)) 2007
"{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0416-0000-0000000FF1CE}" = Microsoft Office Word MUI (Portuguese (Brazil)) 2007
"{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007
"{90120000-001F-0416-0000-0000000FF1CE}_ENTERPRISE_{75EBE365-7FC5-4720-A7D3-804BF550D1BC}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0416-0000-0000000FF1CE}" = Microsoft Office Proofing (Portuguese (Brazil)) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0416-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Portuguese (Brazil)) 2007
"{90120000-0044-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0416-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Portuguese (Brazil)) 2007
"{90120000-006E-0416-0000-0000000FF1CE}_ENTERPRISE_{9A141B2B-7C5E-47D2-8E9E-9AC6018F3C42}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0416-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007
"{90120000-00A1-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0416-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Portuguese (Brazil)) 2007
"{90120000-00BA-0416-0000-0000000FF1CE}_ENTERPRISE_{02A880E2-B8B9-4BF5-8822-EA1374734E2E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{9244E956-5939-4B88-930C-0699D4AB2B95}" = CorelDRAW Graphics Suite X5 - WT
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}" = CorelDRAW Graphics Suite X5 - FontNav
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker
"{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}" = CorelDRAW Graphics Suite X5 - PHOTO-PAINT
"{A276502A-8979-44FB-8090-90CF72F22ABC}" = AVG 2011
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1" = VDownloader 3.0.752
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1046-7B44-A93000000001}" = Adobe Reader 9.3 - Português
"{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common
"{B399C91E-96F2-4265-9884-1C9A10E9FCF4}" = CorelDRAW Graphics Suite X5
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B671CBFD-4109-4D35-9252-3062D3CCB7B2}" = Adobe SING CS3
"{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}" = Adobe BridgeTalk Plugin CS3
"{B8B7A4D8-80E1-4DAE-BD33-7FD535BA3931}" = Adobe Encore CS3 Codecs
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{BC4F8E84-5E29-49EC-B4E7-E6F9CB50986C}" = Adobe Flash Player 9 ActiveX
"{BE5F3842-8309-4754-92D5-83E02E6077A3}" = Adobe Extension Manager CS3
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C5BD220A-EFE8-48A5-B70E-9503D535FACE}" = Adobe WAS CS3
"{CA3861BA-1D96-4D66-B577-318E1602C4F3}" = CorelDRAW Graphics Suite X5 - Common
"{CB3F8375-B600-4B9F-83C9-238ED1E583FD}" = Adobe InDesign CS3
"{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW Graphics Suite X5 - Setup Files
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D54A52A8-DF24-4CE8-850B-074CA47DFA74}" = Windows Live Messenger
"{D596EEA2-C6C8-45D3-89DF-FA2DBE99F829}" = Visual Basic for Applications ® Core - English
"{D5A31AB1-345D-47C7-A87B-036A669F6DF1}" = Adobe XMP Panels CS3
"{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}" = CorelDRAW Graphics Suite X5 - Photozoom Plugin
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{DE6CBC04-8673-4DBA-BA81-07F1639CEB5F}" = CorelDRAW Graphics Suite X5 - IPM
"{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E29D8938-2E48-498C-832D-9663DCABD55F}" = Visual Basic for Applications ® Core - Portuguese (Brazil)
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}" = Adobe InDesign CS3 Icon Handler
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}" = CorelDRAW Graphics Suite X5 - Capture
"{F08E8D2E-F132-4742-9C87-D5FF223A016A}" = Adobe Illustrator CS3
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F4C68898-EBA5-46A9-82B3-2D30426086BF}" = AVG 2011
"{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos
"{FD8AE9E2-B61E-4826-9CE7-937E1E9A9EEC}" = CorelDRAW Graphics Suite X5 - BR
"{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}" = CorelDRAW Graphics Suite X5 - VideoBrowser
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_4dcfd9b7e901b57f81f667144603236" = Add or Remove Adobe Creative Suite 3 Master Collection
"AVG" = AVG 2011
"BSPlayerf" = BS.Player FREE
"CCleaner" = CCleaner
"ENTERPRISE" = Microsoft Office Enterprise 2007
"LastFM_is1" = Last.fm 1.5.4.27091
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"RealPlayer 12.0" = RealPlayer
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = Arquivo do WinRAR
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3331449484-3200966063-500050860-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 07/02/2011 15:24:02 | Computer Name = Bruna-PC | Source = Application Error | ID = 1000
Description = Nome de aplicativo com falha: ShowTime.exe, versão: 3.2.3.1, carimbo
de hora: 0x455cad60 Nome do módulo de falhas: ntdll.dll, versão: 6.1.7600.16559,
carimbo de hora: 0x4ba9b21e Código de exceção: 0xc0000005 Deslocamento com falha:
0x0002fc77 Identificação do processo com falha: 0x1414 Hora de início do aplicativo
com falha: 0x01cbc6fc6ff5ab19 Caminho do aplicativo com falha: C:\Program Files\Nero\Nero
7\Nero ShowTime\ShowTime.exe FCaminho do módulo de falhas: C:\Windows\SYSTEM32\ntdll.dll
Identificação
do Relatório: d15ebe97-32ef-11e0-8192-00030df176a0
Error - 09/02/2011 00:32:20 | Computer Name = Bruna-PC | Source = Application Error | ID = 1000
Description = Nome de aplicativo com falha: bsplayer.exe, versão: 2.5.7.1051, carimbo
de hora: 0x2a425e19 Nome do módulo de falhas: ntdll.dll, versão: 6.1.7600.16559,
carimbo de hora: 0x4ba9b21e Código de exceção: 0xc0000374 Deslocamento com falha:
0x000c2913 Identificação do processo com falha: 0x151c Hora de início do aplicativo
com falha: 0x01cbc8124ea04c6c Caminho do aplicativo com falha: C:\Program Files\Webteh\BSplayer\bsplayer.exe
FCaminho
do módulo de falhas: C:\Windows\SYSTEM32\ntdll.dll Identificação do Relatório: 949f26a6-3405-11e0-81c3-00030df176a0
Error - 16/02/2011 23:44:58 | Computer Name = Bruna-PC | Source = Application Hang | ID = 1002
Description = O programa wmplayer.exe versão 12.0.7600.16667 parou de interagir
com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o
problema, verifique o histórico de problemas no painel de controle da Central de
Ações. ID de Processo: e6c Hora de Início: 01cbce479dca6e05 Hora de Término: 34681
Caminho
do Aplicativo: C:\Program Files\Windows Media Player\wmplayer.exe Id do Relatório:
303b20b6-3a48-11e0-b7d0-00030df176a0
Error - 17/02/2011 12:09:35 | Computer Name = Bruna-PC | Source = Application Hang | ID = 1002
Description = O programa iexplore.exe versão 8.0.7600.16722 parou de interagir com
o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema,
verifique o histórico de problemas no painel de controle da Central de Ações. ID
de Processo: 8e0 Hora de Início: 01cbcebbf14c0414 Hora de Término: 19 Caminho do Aplicativo:
C:\Program Files\Internet Explorer\iexplore.exe Id do Relatório: 4b220599-3ab0-11e0-bd9f-00030df176a0
Error - 17/02/2011 12:15:23 | Computer Name = Bruna-PC | Source = Application Error | ID = 1000
Description = Nome de aplicativo com falha: rundll32.exe_inetcpl.cpl, versão: 6.1.7600.16385,
carimbo de hora: 0x4a5bc637 Nome do módulo de falhas: gbieh.dll, versão: 3.8.27.1,
carimbo de hora: 0x4d0f5707 Código de exceção: 0xc0000005 Deslocamento com falha:
0x0007fffb Identificação do processo com falha: 0x100c Hora de início do aplicativo
com falha: 0x01cbcebddbbb2c42 Caminho do aplicativo com falha: C:\Windows\system32\rundll32.exe
FCaminho
do módulo de falhas: C:\Program Files\GbPlugin\gbieh.dll Identificação do Relatório:
1ee2e707-3ab1-11e0-bd9f-00030df176a0
Error - 20/02/2011 15:09:52 | Computer Name = Bruna-PC | Source = Application Hang | ID = 1002
Description = O programa wmplayer.exe versão 12.0.7600.16667 parou de interagir
com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o
problema, verifique o histórico de problemas no painel de controle da Central de
Ações. ID de Processo: 86c Hora de Início: 01cbd1288e67dba0 Hora de Término: 43219
Caminho
do Aplicativo: C:\Program Files\Windows Media Player\wmplayer.exe Id do Relatório:
d7a3b011-3d24-11e0-8199-00030df176a0
Error - 21/02/2011 04:26:40 | Computer Name = Bruna-PC | Source = Application Error | ID = 1000
Description = Nome de aplicativo com falha: realplay.exe, versão: 12.0.1.633, carimbo
de hora: 0x4d3dfd3f Nome do módulo de falhas: MSVCR90.dll, versão: 9.0.30729.4926,
carimbo de hora: 0x4a1743c1 Código de exceção: 0xc0000005 Deslocamento com falha:
0x00025e37 Identificação do processo com falha: 0xf24 Hora de início do aplicativo
com falha: 0x01cbd1a0d17956a8 Caminho do aplicativo com falha: C:\Program Files\Real\RealPlayer\realplay.exe
FCaminho
do módulo de falhas: C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4926_none_508ed732bcbc0e5a\MSVCR90.dll
Identificação
do Relatório: 4e01687f-3d94-11e0-be6c-00030df176a0
Error - 21/02/2011 05:04:19 | Computer Name = Bruna-PC | Source = Application Hang | ID = 1002
Description = O programa RealPlay.exe versão 12.0.1.633 parou de interagir com o
Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema,
verifique o histórico de problemas no painel de controle da Central de Ações. ID
de Processo: 83c Hora de Início: 01cbd1a63acede01 Hora de Término: 18 Caminho do Aplicativo:
C:\Program Files\Real\RealPlayer\RealPlay.exe Id do Relatório: 8aa8244c-3d99-11e0-be6c-00030df176a0
Error - 21/02/2011 05:04:47 | Computer Name = Bruna-PC | Source = Application Hang | ID = 1002
Description = O programa Explorer.EXE versão 6.1.7600.16450 parou de interagir com
o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema,
verifique o histórico de problemas no painel de controle da Central de Ações. ID
de Processo: 7a8 Hora de Início: 01cbd18107d42357 Hora de Término: 202 Caminho do
Aplicativo: C:\Windows\Explorer.EXE Id do Relatório: 9a49aed3-3d99-11e0-be6c-00030df176a0
Error - 21/02/2011 05:06:23 | Computer Name = Bruna-PC | Source = Application Hang | ID = 1002
Description = O programa RealPlay.exe versão 12.0.1.633 parou de interagir com o
Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema,
verifique o histórico de problemas no painel de controle da Central de Ações. ID
de Processo: 39c Hora de Início: 01cbd1a67cb02694 Hora de Término: 10 Caminho do Aplicativo:
C:\Program Files\Real\RealPlayer\RealPlay.exe Id do Relatório: d56be0bc-3d99-11e0-be6c-00030df176a0
[ System Events ]
Error - 27/02/2011 19:45:19 | Computer Name = Bruna-PC | Source = Service Control Manager | ID = 7001
Description = O serviço Serviço da Lista de Redes depende do serviço Reconhecimento
de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro: %%1068
Error - 27/02/2011 19:45:19 | Computer Name = Bruna-PC | Source = Service Control Manager | ID = 7001
Description = O serviço Serviço da Lista de Redes depende do serviço Reconhecimento
de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro: %%1068
Error - 27/02/2011 19:45:19 | Computer Name = Bruna-PC | Source = Service Control Manager | ID = 7001
Description = O serviço Serviço da Lista de Redes depende do serviço Reconhecimento
de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro: %%1068
Error - 27/02/2011 19:45:19 | Computer Name = Bruna-PC | Source = Service Control Manager | ID = 7001
Description = O serviço Serviço da Lista de Redes depende do serviço Reconhecimento
de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro: %%1068
Error - 27/02/2011 19:49:40 | Computer Name = Bruna-PC | Source = Service Control Manager | ID = 7001
Description = O serviço Serviço da Lista de Redes depende do serviço Reconhecimento
de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro: %%1068
Error - 27/02/2011 23:45:24 | Computer Name = Bruna-PC | Source = Disk | ID = 262155
Description = O driver detectou um erro de controlador em \Device\Harddisk2\DR2.
Error - 27/02/2011 23:45:24 | Computer Name = Bruna-PC | Source = Disk | ID = 262155
Description = O driver detectou um erro de controlador em \Device\Harddisk2\DR2.
Error - 27/02/2011 23:45:25 | Computer Name = Bruna-PC | Source = Disk | ID = 262155
Description = O driver detectou um erro de controlador em \Device\Harddisk2\DR2.
Error - 27/02/2011 23:45:25 | Computer Name = Bruna-PC | Source = Disk | ID = 262155
Description = O driver detectou um erro de controlador em \Device\Harddisk2\DR2.
Error - 27/02/2011 23:45:26 | Computer Name = Bruna-PC | Source = Disk | ID = 262155
Description = O driver detectou um erro de controlador em \Device\Harddisk2\DR2.
< End of report >
OK...log limpo.
1.
*Execute o OTL e clique [Limpeza] > [OK]
*O PC será reiniciado
2.
*Baixe e instale o CCleaner
*Clique [Executar Limpeza]
*Feche o CCleaner
Um abraço.
wings, aparentemente está tudo certo com o pc!
Qualquer coisa, eu posto aqui.
Muito obrigada! =)
PROBLEMA RESOLVIDO
Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.
Olá Bruna Garred
*Baixe o MalwareBytes e salve-o no desktop
*Instale o programa e aguarde a atualização
*O programa será aberto automaticamente
*Na aba [Verificação], selecione [Verificação completa]
*Clique [Verificar] e selecione a partição onde o Windows está instalado
*Ao finalizar o scan, clique [sIM] > [OK] > [Ver Resultados] > [Remover Selecionados]
*Cole o relatório apresentado