Ir para conteúdo

POWERED BY:

Arquivado

Este tópico foi arquivado e está fechado para novas respostas.

DanielPadilha

[Resolvido] &nbspPC Lento Net Lenta.

Por , em Tópicos Resolvidos (Seguranca & Malwares)

Recommended Posts

wings    22

wings
Postado

Olá DanielPadilha

 

 

:seta: Baixe o OTL (...de Old_Timer) e salve-o no Desktop (Área de Trabalho)

*Execute-o. Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador

*Selecione:

Verificar All Users
Ignorar Arquivos Microsoft
Verificar Lop
Verificar Purity


http://imgbox.com/abwkZJpf

*Clique [Verificar]

acf9AU2g.jpg

*Ao término, os relatórios OTL.txt e Extras.txt serão criados no Desktop (Área de Trabalho)


:seta: Acesse este link

*Clique [selecionar arquivo...]

*Localize o relatório OTL.txt, no Desktop, e clique [Abrir]

*Selecione 4 jours

*Clique [Créer le lien Cjoint]

http://imgbox.com/adr5y4SE

*Cole o link criado ao lado de Le lien a été créé:

http://imgbox.com/acud4LmC

*Repita o procedimento para o relatório Extras.txt e cole o link

Compartilhar este post

Link para o post
Compartilhar em outros sites

DanielPadilha    0

DanielPadilha
Postado

http://cjoint.com/13fe/CBhsAacsxSa.htm Está ai amigo :D

 

Ou Se prefirir

 

 

OTL logfile created on: 07/02/2013 15:18:08 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Cliente\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy
2,00 Gb Total Physical Memory | 0,81 Gb Available Physical Memory | 40,68% Memory free
4,00 Gb Paging File | 2,02 Gb Available in Paging File | 50,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,66 Gb Total Space | 372,87 Gb Free Space | 80,07% Space Free | Partition Type: NTFS
Drive E: | 6,04 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: CLIENTE-PC | User Name: Cliente | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013/02/07 15:13:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Cliente\Desktop\OTL.exe
PRC - [2013/02/06 09:36:56 | 000,213,384 | ---- | M] (Google Inc.) -- C:\Users\Cliente\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe
PRC - [2013/01/31 09:11:06 | 002,561,488 | ---- | M] () -- C:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
PRC - [2013/01/26 00:35:08 | 001,248,208 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2012/12/18 12:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/12/10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2012/12/09 23:33:14 | 000,046,080 | ---- | M] (TechSmith Corporation) -- C:\Program Files\TechSmith\Camtasia Studio 8\TscHelp.exe
PRC - [2012/11/29 12:28:06 | 000,166,600 | ---- | M] (APN LLC.) -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
PRC - [2012/08/25 16:33:32 | 000,210,944 | ---- | M] () -- C:\ProgramData\OptimizerPro1\OptimizerPro1.exe
PRC - [2012/08/08 19:15:24 | 001,644,744 | ---- | M] (Ask) -- C:\Program Files\Ask.com\Updater\Updater.exe
PRC - [2012/07/02 16:41:11 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2012/07/02 16:41:09 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2012/07/02 16:41:00 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012/07/02 16:41:00 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2011/10/07 13:30:18 | 000,077,824 | ---- | M] () -- C:\Windows\KMService.exe
PRC - [2011/10/07 13:30:18 | 000,008,192 | ---- | M] () -- C:\Windows\System32\srvany.exe
PRC - [2011/05/19 01:00:48 | 000,234,792 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe
PRC - [2011/05/19 01:00:20 | 000,083,240 | ---- | M] () -- C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
PRC - [2011/05/12 06:09:36 | 000,312,616 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe
PRC - [2011/05/12 06:09:34 | 000,070,952 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
PRC - [2010/11/20 19:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 19:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/11/20 19:29:10 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2010/11/09 09:22:20 | 000,017,752 | ---- | M] (Sony Creative Software Inc.) -- C:\Program Files\Sony\Sound Forge Pro 10.0\ErrorReportLauncher.exe
PRC - [2010/09/17 11:14:50 | 000,098,304 | ---- | M] (Firebird Project) -- C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
PRC - [2010/09/17 11:14:42 | 003,735,552 | ---- | M] (Firebird Project) -- C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
PRC - [2010/03/16 03:58:36 | 000,718,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
PRC - [2009/07/13 23:14:41 | 000,354,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe
PRC - [2009/07/13 23:14:35 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sc.exe
PRC - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [1999/12/31 22:00:00 | 004,045,432 | ---- | M] (VIA) -- C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
PRC - [1999/12/31 22:00:00 | 000,027,768 | ---- | M] (VIA Technologies, Inc.) -- C:\Windows\System32\ViakaraokeSrv.exe
========== Modules (No Company Name) ==========
MOD - [2013/02/06 09:33:59 | 012,459,888 | ---- | M] () -- C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.139\pepflashplayer.dll
MOD - [2013/01/31 09:11:06 | 002,561,488 | ---- | M] () -- C:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
MOD - [2013/01/31 09:10:04 | 002,231,248 | ---- | M] () -- c:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll
MOD - [2013/01/26 00:35:06 | 000,460,240 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll
MOD - [2013/01/26 00:35:04 | 004,012,496 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\pdf.dll
MOD - [2013/01/26 00:34:19 | 000,597,968 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\libglesv2.dll
MOD - [2013/01/26 00:34:18 | 000,124,368 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\libegl.dll
MOD - [2013/01/26 00:34:16 | 001,552,848 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
MOD - [2012/01/08 11:41:12 | 000,093,696 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2011/02/08 22:56:38 | 000,296,448 | ---- | M] () -- C:\Program Files\Notepad++\NppShell_04.dll
MOD - [2010/03/15 12:28:24 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2010/01/30 03:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [1999/12/31 22:00:00 | 000,113,272 | ---- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
MOD - [1999/12/31 22:00:00 | 000,080,504 | ---- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
========== Services (SafeList) ==========
SRV - [2013/01/31 09:11:06 | 002,561,488 | ---- | M] () [Auto | Running] -- C:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe -- (Browser Manager)
SRV - [2013/01/09 13:15:39 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/01/08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/12/18 12:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/12/10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012/11/29 12:28:06 | 000,166,600 | ---- | M] (APN LLC.) [Auto | Running] -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
SRV - [2012/11/04 13:22:37 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012/07/02 16:41:09 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012/07/02 16:41:00 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/10/07 13:30:18 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\Windows\System32\srvany.exe -- (KMService)
SRV - [2011/05/19 01:00:20 | 000,083,240 | ---- | M] () [Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe -- (CLHNServiceForPowerDVD)
SRV - [2011/05/12 06:09:36 | 000,312,616 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe -- (CyberLink PowerDVD 11.0 Service)
SRV - [2011/05/12 06:09:34 | 000,070,952 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe -- (CyberLink PowerDVD 11.0 Monitor Service)
SRV - [2011/03/16 11:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010/09/17 11:14:50 | 000,098,304 | ---- | M] (Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2010/09/17 11:14:42 | 003,735,552 | ---- | M] (Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2010/03/25 11:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/07/13 23:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 23:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 23:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [1999/12/31 22:00:00 | 000,027,768 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\System32\ViakaraokeSrv.exe -- (VIAKaraokeService)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - [2013/01/03 14:32:06 | 000,050,728 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm)
DRV - [2012/12/31 10:34:42 | 000,013,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SWDUMon.sys -- (SWDUMon)
DRV - [2012/09/15 17:40:30 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012/06/06 01:42:59 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012/06/06 01:42:59 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012/06/06 01:42:59 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2012/03/19 15:22:32 | 001,451,312 | ---- | M] (ShiningMorning Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vasdDev.sys -- (VASDeviceDrm)
DRV - [2011/05/20 16:31:06 | 000,077,296 | ---- | M] (CyberLink Corp.) [2011/10/07 12:22:19] [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl -- ({329F96B6-DF1E-4328-BFDA-39EA953C1312})
DRV - [2011/05/19 01:00:21 | 000,071,664 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys -- (ntk_PowerDVD)
DRV - [2010/11/20 19:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 19:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 19:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 19:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010/11/20 19:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010/11/20 19:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 19:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 19:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 19:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 19:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 19:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010/11/20 19:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 19:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/06/17 16:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/12/01 16:49:54 | 000,034,384 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/07/22 12:19:20 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009/07/13 21:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009/03/18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/12/25 14:08:00 | 007,740,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008/03/26 17:31:26 | 000,034,128 | ---- | M] (DemoForge, LLC) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dfmirage.sys -- (dfmirage)
DRV - [1999/12/31 22:00:00 | 001,841,272 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\..\URLSearchHook: {0a452a47-c5a8-4854-a237-4b9b06b376f0} - C:\Program Files\Gossiper\prxtbGos0.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {E627DC4B-8C04-4234-A2D4-1D634EE01C41}
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{04BDCC7D-922B-506D-E8D7-0BF2CBEB5886}: "URL" = http://www.bigseekpro.com/search/toolbar/hao123/{5326CD18-33AB-9D1D-8CF0-90FB3994F7B9}?q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{0F17E656-11E8-4B54-CC0C-62C536B4F76D}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2849856
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1547340
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://search.babylon.com/?affID=110808&tt=3412_2&babsrc=HP_ss&mntrId=90f9bc6c000000000000c89cdc4032ff
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://search.babylon.com/?affID=44444&tt=270912_7a_3912_2&babsrc=HP_ss&mntrId=90f9bc6c000000000000c89cdc4032ff
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://search.babylon.com/?affID=44444&tt=270912_7a_3912_2&babsrc=HP_ss&mntrId=90f9bc6c000000000000c89cdc4032ff
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1547340
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://br.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-br
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = AF 1B D9 5B 06 86 CC 01 [binary data]
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\URLSearchHook: {0a452a47-c5a8-4854-a237-4b9b06b376f0} - C:\Program Files\Gossiper\prxtbGos0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\URLSearchHook: {29acf17c-1713-4286-8f40-bfd05f1e70c8} - No CLSID value found
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\URLSearchHook: {90b49673-5506-483e-b92b-ca0265bd9ca8} - No CLSID value found
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\URLSearchHook: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes,Backup.Old.DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{04BDCC7D-922B-506D-E8D7-0BF2CBEB5886}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=113480&tt=120812_bandext_3312_7&babsrc=SP_ss&mntrId=90f9bc6c000000000000c89cdc4032ff
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=44444&tt=270912_7a_3912_2&babsrc=SP_ss&mntrId=90f9bc6c000000000000c89cdc4032ff
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{0F17E656-11E8-4B54-CC0C-62C536B4F76D}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2849856
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SKPT_pt-BRBR452
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{AC129BF9-68BF-4bc4-A1DC-ECB62712FF99}: "URL" = http://search.kikin.com/search/?q={searchTerms}
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1547340
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredimail.com/mb68/?search={searchTerms}&loc=search_box&u=92260171840430878
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\SearchScopes\{E627DC4B-8C04-4234-A2D4-1D634EE01C41}: "URL" = http://www.bigseekpro.com/search/toolbar/hao123/{5326CD18-33AB-9D1D-8CF0-90FB3994F7B9}?q={searchTerms}
IE - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.13.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@raidcall.en/RCplugin: C:\Users\Cliente\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF - HKLM\Software\MozillaPlugins\@raidcall.kr/RCplugin: C:\Users\Cliente\AppData\Roaming\RCKR\plugins\nprcplugin.dll (Raidcall)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Cliente\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Cliente\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Cliente\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Cliente\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Cliente\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Cliente\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{58bd07eb-0ee0-4df0-8121-dc9b693373df}: C:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2013/01/31 18:29:30 | 000,000,000 | ---D | M]
[2012/09/15 17:24:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Cliente\AppData\Roaming\mozilla\Firefox\extensions
[2012/09/15 17:24:23 | 000,000,000 | ---D | M] (BittorrentBar_PT) -- C:\Users\Cliente\AppData\Roaming\mozilla\Firefox\extensions\{29acf17c-1713-4286-8f40-bfd05f1e70c8}
[2012/08/13 19:18:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Cliente\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Cliente\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL
CHR - plugin: AdobeExManDetect (Enabled) = C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll
CHR - plugin: AdobeAAMDetect (Enabled) = C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java Platform SE 7 U11 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Cliente\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Cliente\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Raidcall plugin (Enabled) = C:\Users\Cliente\AppData\Roaming\RCKR\plugins\nprcplugin.dll
CHR - plugin: Raidcall plugin (Enabled) = C:\Users\Cliente\AppData\Roaming\raidcall\plugins\nprcplugin.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Google Drive = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Pesquisa do Google = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Windows Media Player Extension for HTML5 = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0\
CHR - Extension: Gmail = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013/01/11 21:21:37 | 000,000,917 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 108.162.206.133 thewarz.com
O1 - Hosts: 66.180.197.58 api.thewarz.com
O1 - Hosts: 108.162.203.133 www.thewarz.com
O2 - BHO: (Gossiper Toolbar) - {0a452a47-c5a8-4854-a237-4b9b06b376f0} - C:\Program Files\Gossiper\prxtbGos0.dll (Conduit Ltd.)
O2 - BHO: (Complitly) - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Cliente\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)
O2 - BHO: (no name) - {2EECD738-5844-4a99-B4B6-146BF802613B} - No CLSID value found.
O2 - BHO: (Ask Shopping Toolbar) - {4D503352-2D53-4154-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\MP3R-SAT\Passport.dll (APN LLC.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll (kikin)
O3 - HKLM\..\Toolbar: (Gossiper Toolbar) - {0a452a47-c5a8-4854-a237-4b9b06b376f0} - C:\Program Files\Gossiper\prxtbGos0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Ask Shopping Toolbar) - {4D503352-2D53-4154-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\MP3R-SAT\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (IncrediMail MediaBar 2 Toolbar) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (IncrediMail MediaBar 2 Toolbar) - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (IncrediMail MediaBar 2 Toolbar) - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\Toolbar\WebBrowser: (no name) - {29ACF17C-1713-4286-8F40-BFD05F1E70C8} - No CLSID value found.
O3 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\Toolbar\WebBrowser: (no name) - {90B49673-5506-483E-B92B-CA0265BD9CA8} - No CLSID value found.
O3 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..\Toolbar\WebBrowser: (IncrediMail MediaBar 2 Toolbar) - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - C:\Program Files\IncrediMail_MediaBar_2\prxtbInc2.dll (Conduit Ltd.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ApnTBMon] C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [bCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RemoteControl11] C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [switchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000..\Run: [Clownfish] File not found
O4 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000..\Run: [Facebook Update] C:\Users\Cliente\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: &Enviar para o OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xportar para o Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll (kikin)
O9 - Extra Button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk File not found
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-2380708717-1076342045-1108222354-1000\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 10.13.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A89CDE76-F47E-4470-84BD-9F12D1E45529}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\261123~1.78\{16cdf~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.6.1123.78\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 19:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{07f5ba29-e57b-11e1-be44-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{07f5ba29-e57b-11e1-be44-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{07f5ba2c-e57b-11e1-be44-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{07f5ba2c-e57b-11e1-be44-c89cdc4032ff}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{0ac23ec3-364d-11e2-9db3-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{0ac23ec3-364d-11e2-9db3-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{0ac23f9c-364d-11e2-9db3-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{0ac23f9c-364d-11e2-9db3-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{0ac23fa0-364d-11e2-9db3-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{0ac23fa0-364d-11e2-9db3-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{1aabef25-fc0c-11e1-bad1-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{1aabef25-fc0c-11e1-bad1-c89cdc4032ff}\Shell\AutoRun\command - "" = autorun.exe
O33 - MountPoints2\{2752a1ad-4761-11e1-8192-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{2752a1ad-4761-11e1-8192-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2df96d1d-04de-11e2-b9dd-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{2df96d1d-04de-11e2-b9dd-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{2df96d29-04de-11e2-b9dd-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{2df96d29-04de-11e2-b9dd-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3cb07d18-3f6a-11e1-82d5-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{3cb07d18-3f6a-11e1-82d5-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3cb07d2a-3f6a-11e1-82d5-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{3cb07d2a-3f6a-11e1-82d5-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3cb07d38-3f6a-11e1-82d5-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{3cb07d38-3f6a-11e1-82d5-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3cb07d49-3f6a-11e1-82d5-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{3cb07d49-3f6a-11e1-82d5-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{4b688a71-6876-11e2-ba22-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{4b688a71-6876-11e2-ba22-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{a360ee93-4822-11e1-84c7-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{a360ee93-4822-11e1-84c7-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a360ee97-4822-11e1-84c7-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{a360ee97-4822-11e1-84c7-c89cdc4032ff}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{c2601a6e-07d3-11e2-8048-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{c2601a6e-07d3-11e2-8048-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f472d2a8-478d-11e1-bb23-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{f472d2a8-478d-11e1-bb23-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013/02/07 15:13:57 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Cliente\Desktop\OTL.exe
[2013/02/07 11:59:59 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013/02/07 11:58:24 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013/02/07 11:58:24 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013/02/07 11:58:24 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013/02/07 10:45:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{4AEA4091-D8B4-42FF-BB78-D2DBE3F584C5}
[2013/02/06 22:14:58 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{5319D372-5092-4891-BF7B-93A7B12B7638}
[2013/02/06 12:10:10 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\logs
[2013/02/06 12:09:54 | 000,059,392 | ---- | C] (Technic) -- C:\Users\Cliente\Desktop\TechnicLauncher.exe
[2013/02/06 09:26:33 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B2DAAB28-47B7-4101-82D6-1F3707723AC2}
[2013/02/05 22:18:11 | 000,000,000 | ---D | C] -- C:\Users\Cliente\Downloads\Documents\DriverEasy
[2013/02/05 10:38:35 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FASoft
[2013/02/05 10:38:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FASoft
[2013/02/05 10:38:35 | 000,000,000 | ---D | C] -- C:\Program Files\Compressor
[2013/02/05 09:20:32 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{F768943F-030D-4B81-87A1-0819073B80CB}
[2013/02/04 21:19:55 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B99548DF-5A68-43E1-9A81-23D2ADB78717}
[2013/02/04 11:29:30 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ohm Force
[2013/02/04 11:29:26 | 000,000,000 | ---D | C] -- C:\Audio
[2013/02/04 08:45:19 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{18138643-49C5-40FB-9235-B5C53EEF581F}
[2013/02/03 22:46:23 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{CD5021D0-217C-4DDE-BE7B-10D70D186EAB}
[2013/02/03 10:51:03 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Waves
[2013/02/03 10:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves
[2013/02/03 09:31:42 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{42416511-9B31-46DA-A890-432F3DE2D5B5}
[2013/02/02 13:08:51 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{564BCBD7-CD58-4180-97DF-58A9DE689B12}
[2013/02/02 09:22:16 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B4B5FD97-6550-4288-A2DE-6204705FE1E6}
[2013/02/01 14:11:27 | 000,000,000 | ---D | C] -- C:\Users\Cliente\Downloads\Documents\Custom Production Presets 8.0
[2013/02/01 08:29:42 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{6A8BD573-FE55-488B-B7DE-8049473798E2}
[2013/01/31 09:29:43 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{C1EA45AB-65E5-4000-99FB-B91C9B0A0E54}
[2013/01/30 12:55:22 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{2FADCD7D-D78B-42B2-8C65-EED7D8D9D9D0}
[2013/01/30 12:53:22 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{960353B1-70A8-4AEB-8FC8-D88E93079C68}
[2013/01/30 09:57:55 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{4565F15C-62D5-4FE6-8465-1FB89A06CA3B}
[2013/01/29 08:54:27 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{DAD0D113-CEBF-4B81-A678-A6C00A690FD9}
[2013/01/28 12:06:35 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{63F20B84-9D62-42DB-8690-3F3027A9681E}
[2013/01/28 09:07:57 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{41096D66-165D-4E3E-9AA9-C68932388CC1}
[2013/01/27 11:37:13 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{D12D914A-FBA8-4616-9271-28831F4FE322}
[2013/01/27 09:41:23 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{0DD8AA7A-1A04-44ED-A8E0-6531EDFB0C45}
[2013/01/26 18:51:58 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B43C5C3B-BFB6-4FFB-A3FE-7C0398D3720F}
[2013/01/26 10:32:05 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{9EB602D0-A989-459A-B6CC-317383D9FCA0}
[2013/01/25 12:40:39 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{AD638C0F-3EF4-4E43-8F51-6B1FA407B0EE}
[2013/01/24 16:42:34 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{9C680E2C-3EF0-4C02-A0F3-D29B13653922}
[2013/01/24 15:14:52 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{02502EF6-AC46-48F6-B365-CE406DE9E5BE}
[2013/01/24 14:57:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\Downloads\Documents\Skype Voice Records
[2013/01/24 14:57:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\Downloads\Documents\Clownfish Avatars
[2013/01/24 13:21:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013/01/24 13:21:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013/01/24 08:54:36 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{9DFA0A28-E482-4DC8-AF26-A981CF52B800}
[2013/01/23 13:10:03 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{388ADA9F-678F-4A13-AFA5-CF15DCBB8032}
[2013/01/23 13:02:36 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{C090E7AA-8728-4EB5-A126-0E3AE838FF85}
[2013/01/23 10:37:01 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{42215466-6CC6-4FF2-B80A-EDB20460ECCB}
[2013/01/22 19:00:23 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{FBD278FB-68FB-4F6A-B973-1300E8ADDF75}
[2013/01/22 16:36:31 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{165F8F57-6CC3-4F67-B940-93C6ABFDB238}
[2013/01/21 23:35:01 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Sony Creative Software
[2013/01/21 23:22:03 | 000,000,000 | ---D | C] -- C:\Program Files\Vstplugins
[2013/01/21 23:21:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Melodyne 3.1
[2013/01/21 22:39:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Temporary
[2013/01/21 22:38:27 | 000,368,640 | ---- | C] (Propellerhead Software AB) -- C:\Windows\System32\ReWire.dll
[2013/01/21 22:37:58 | 000,000,000 | ---D | C] -- C:\Program Files\u-he
[2013/01/21 22:37:48 | 000,000,000 | ---D | C] -- C:\Program Files\Celemony
[2013/01/21 21:57:36 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{4B80780B-D65B-4284-8588-099D6E2A3C1D}
[2013/01/21 09:57:07 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{A25CB66D-F782-4D41-9589-D8CA863C97D6}
[2013/01/20 22:36:37 | 000,000,000 | ---D | C] -- C:\Program Files\Call of Duty- Modern Warfare 3
[2013/01/20 10:49:47 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{59C65201-867A-43DF-AC7A-1F6F82A3E058}
[2013/01/20 00:55:35 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\TeknoGods
[2013/01/19 22:44:26 | 000,000,000 | ---D | C] -- C:\Program Files\RocketDock
[2013/01/19 18:14:02 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2013/01/19 18:13:20 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\uTorrent
[2013/01/19 17:12:06 | 000,000,000 | ---D | C] -- C:\Program Files\Gossiper
[2013/01/19 17:11:22 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Complitly
[2013/01/19 17:11:22 | 000,000,000 | ---D | C] -- C:\Program Files\Complitly
[2013/01/19 09:40:01 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B44D2605-8BD8-4E1C-9A6B-33F17C90AD90}
[2013/01/18 15:17:01 | 000,000,000 | ---D | C] -- C:\Program Files\DsNET Corp
[2013/01/18 12:04:12 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{AAF0AD83-2F43-4214-861C-1976ABFD5CAA}
[2013/01/17 22:14:49 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{43E2D5FB-9FFB-4D1E-8EF9-36FBA78FBE06}
[2013/01/17 20:02:21 | 000,000,000 | ---D | C] -- C:\Users\Cliente\jagexcache
[2013/01/17 10:14:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{72BD7EA1-AA8E-4547-B452-347B0BAEA2F6}
[2013/01/16 22:13:32 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{1D4DFD39-7551-4FA5-A3FD-722DB78F6537}
[2013/01/16 09:52:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{E708A3E7-A670-4E8B-900A-E4D0F7B55071}
[2013/01/15 21:51:34 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{F6394365-F533-4FD7-97D7-E376D6219601}
[2013/01/15 09:51:05 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{3F30AEF2-21E6-44AA-840F-09D9747F5C67}
[2013/01/14 08:27:20 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{28C4B7D7-491B-4535-81A1-058F2C41735F}
[2013/01/13 23:17:46 | 000,000,000 | ---D | C] -- C:\Program Files\Paint.NET
[2013/01/13 23:17:11 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\Paint.NET
[2013/01/13 10:45:08 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{7EC485D8-5F36-4FDA-BD89-1BC567CA43D0}
[2013/01/12 12:13:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The War Z
[2013/01/12 09:02:25 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{E246C4DA-8A15-49A1-A45A-D9D13098370B}
[2013/01/11 20:40:01 | 000,000,000 | ---D | C] -- C:\Windows\System32\directx
[2013/01/11 15:30:37 | 000,086,016 | ---- | C] (MindVision Software) -- C:\Windows\unvise32.exe
[2013/01/11 15:30:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ohm Force
[2013/01/11 11:45:04 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{81BD452E-53F8-46B3-8C25-DB30CEA1EFC6}
[2013/01/10 14:12:29 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{9266589C-7C77-4F7A-9F84-B46EA5074991}
[2013/01/09 18:49:06 | 000,000,000 | ---D | C] -- C:\ProgramData\WoW Worldwide Software LTD
[2013/01/09 14:32:06 | 000,720,896 | ---- | C] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe
[2013/01/09 14:32:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prosoniq OrangeVocoder VST 2.02
[2013/01/09 14:14:31 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUninst.exe
[2013/01/09 08:48:50 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{3F89673C-CAA7-4511-9057-C016AFF96B85}
[2013/01/08 19:43:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antares Audio Technologies
[2013/01/08 19:43:01 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Antares
[2013/01/08 19:43:00 | 000,000,000 | ---D | C] -- C:\Program Files\Antares Audio Technologies
[2013/01/08 19:20:52 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\PACE Anti-Piracy
[2013/01/08 19:20:52 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\PACE Anti-Piracy
[2013/01/08 19:20:52 | 000,000,000 | ---D | C] -- C:\ProgramData\PACE Anti-Piracy
[2013/01/08 19:20:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PACE Anti-Piracy
[2013/01/08 16:42:47 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{C47D7957-0431-4BE1-BD8A-15E38AC4E853}
[2013/01/08 16:28:28 | 000,000,000 | ---D | C] -- C:\Program Files\Audacity
[2007/08/13 18:14:19 | 000,915,200 | ---- | C] (Sony Creative Software Inc.) -- C:\Program Files\Setup.exe
[2007/03/19 16:58:29 | 003,161,088 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcredist_x64.exe
[2007/03/19 16:58:29 | 002,682,880 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcredist_x86.exe
[2007/03/19 16:58:02 | 000,471,840 | ---- | C] (Microsoft Corporation) -- C:\Program Files\hhupd.exe
[2007/03/19 16:57:46 | 000,509,984 | ---- | C] (Microsoft Corporation) -- C:\Program Files\50comupd.exe
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/02/07 15:16:00 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/02/07 15:13:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Cliente\Desktop\OTL.exe
[2013/02/07 15:12:16 | 000,000,413 | ---- | M] () -- C:\Users\Cliente\Desktop\AutoClick.ini
[2013/02/07 14:42:31 | 000,001,086 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2380708717-1076342045-1108222354-1000UA.job
[2013/02/07 14:22:30 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/02/07 13:56:34 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2380708717-1076342045-1108222354-1000UA.job
[2013/02/07 11:58:14 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013/02/07 11:58:09 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npdeployJava1.dll
[2013/02/07 11:58:09 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2013/02/07 11:58:09 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013/02/07 11:58:09 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013/02/07 11:58:09 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013/02/07 10:11:49 | 000,021,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/02/07 10:11:49 | 000,021,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/02/07 10:04:17 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/02/07 10:04:16 | 000,000,384 | -H-- | M] () -- C:\Windows\tasks\OptimizerPro1UpdaterTask{26ADBA2A-AE9E-445E-A94E-4D351773E73D}.job
[2013/02/07 10:04:12 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/02/07 10:04:06 | 1610,014,720 | -HS- | M] () -- C:\hiberfil.sys
[2013/02/06 16:56:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2380708717-1076342045-1108222354-1000Core.job
[2013/02/06 12:10:20 | 000,703,117 | ---- | M] () -- C:\Users\Cliente\AppData\Roaming\technic-launcher.jar
[2013/02/06 12:09:50 | 000,059,392 | ---- | M] (Technic) -- C:\Users\Cliente\Desktop\TechnicLauncher.exe
[2013/02/06 09:42:03 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2380708717-1076342045-1108222354-1000Core.job
[2013/02/03 18:05:02 | 000,370,872 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013/02/01 15:16:23 | 015,831,040 | ---- | M] () -- C:\Users\Cliente\Robei.camrec
[2013/02/01 15:11:58 | 000,018,944 | ---- | M] () -- C:\Users\Cliente\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/01/29 13:37:07 | 000,000,132 | ---- | M] () -- C:\Users\Cliente\AppData\Roaming\Preferências do Formato PNG do Adobe CS6
[2013/01/29 12:32:14 | 000,702,882 | ---- | M] () -- C:\Windows\System32\prfh0416.dat
[2013/01/29 12:32:14 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/01/29 12:32:14 | 000,145,668 | ---- | M] () -- C:\Windows\System32\prfc0416.dat
[2013/01/29 12:32:14 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/01/21 23:21:37 | 000,001,812 | ---- | M] () -- C:\Users\Cliente\Desktop\Melodyne.lnk
[2013/01/21 14:47:32 | 000,000,038 | ---- | M] () -- C:\Windows\avisplitter.ini
[2013/01/20 10:47:53 | 000,001,150 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk
[2013/01/20 10:47:53 | 000,000,981 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SkinPackMenu.lnk
[2013/01/19 18:34:12 | 000,000,009 | ---- | M] () -- C:\END
[2013/01/19 18:14:02 | 000,000,877 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2013/01/17 20:04:13 | 000,000,001 | ---- | M] () -- C:\Users\Cliente\random.dat
[2013/01/17 20:02:21 | 000,000,046 | ---- | M] () -- C:\Users\Cliente\jagex_cl_runescape_LIVE.dat
[2013/01/14 08:26:52 | 000,002,165 | ---- | M] () -- C:\Users\Cliente\Desktop\Google Chrome.lnk
[2013/01/13 23:19:07 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\Paint.NET.lnk
[2013/01/11 21:21:37 | 000,000,917 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.msn
[2013/01/11 21:21:37 | 000,000,917 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013/01/09 14:31:59 | 000,720,896 | ---- | M] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe
[2013/01/09 13:15:39 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013/01/09 13:15:39 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/01/08 19:42:49 | 001,181,022 | ---- | M] () -- C:\Windows\System32\TmpA2387049
[2013/01/08 19:38:20 | 001,181,022 | ---- | M] () -- C:\Windows\System32\TmpA2118275
[2013/01/08 16:28:34 | 000,000,929 | ---- | M] () -- C:\Users\Cliente\Desktop\Audacity.lnk
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/02/06 12:10:17 | 000,703,117 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\technic-launcher.jar
[2013/02/05 16:41:47 | 000,001,091 | ---- | C] () -- C:\Users\Cliente\Desktop\Audio Repeater (MME).lnk
[2013/02/01 15:16:22 | 015,831,040 | ---- | C] () -- C:\Users\Cliente\Robei.camrec
[2013/01/21 23:21:37 | 000,001,812 | ---- | C] () -- C:\Users\Cliente\Desktop\Melodyne.lnk
[2013/01/20 10:47:53 | 000,001,150 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk
[2013/01/20 10:47:53 | 000,000,981 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SkinPackMenu.lnk
[2013/01/19 18:14:02 | 000,000,877 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2013/01/19 17:12:10 | 000,000,009 | ---- | C] () -- C:\END
[2013/01/17 20:02:21 | 000,000,046 | ---- | C] () -- C:\Users\Cliente\jagex_cl_runescape_LIVE.dat
[2013/01/17 20:02:21 | 000,000,001 | ---- | C] () -- C:\Users\Cliente\random.dat
[2013/01/15 10:10:02 | 000,001,464 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
[2013/01/13 23:19:07 | 000,001,132 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
[2013/01/13 23:19:07 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\Paint.NET.lnk
[2013/01/08 19:42:49 | 001,181,022 | ---- | C] () -- C:\Windows\System32\TmpA2387049
[2013/01/08 19:38:20 | 001,181,022 | ---- | C] () -- C:\Windows\System32\TmpA2118275
[2013/01/08 16:28:34 | 000,000,941 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
[2013/01/08 16:28:34 | 000,000,929 | ---- | C] () -- C:\Users\Cliente\Desktop\Audacity.lnk
[2012/12/28 22:34:07 | 000,013,024 | ---- | C] () -- C:\Windows\System32\drivers\SWDUMon.sys
[2012/12/01 16:19:05 | 000,000,434 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012/11/11 13:30:28 | 000,001,456 | ---- | C] () -- C:\Users\Cliente\AppData\Local\Adobe Salvar para Web 13.0 Prefs
[2012/11/10 18:42:11 | 000,139,424 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012/11/10 18:42:11 | 000,138,056 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\PnkBstrK.sys
[2012/11/10 18:41:41 | 000,282,104 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2012/11/10 18:41:37 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2012/10/03 10:55:32 | 000,290,500 | ---- | C] () -- C:\Users\Cliente\AppData\Local\funmoods-speeddial_sf.crx
[2012/09/20 22:26:58 | 000,000,132 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\Preferências do Formato PNG do Adobe CS6
[2012/09/15 19:10:06 | 000,045,270 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\room_v3.dat
[2012/08/25 16:22:54 | 000,384,844 | ---- | C] () -- C:\Users\Cliente\AppData\Local\funmoods-speeddial.crx
[2012/08/25 16:22:44 | 000,031,465 | ---- | C] () -- C:\Users\Cliente\AppData\Local\funmoods.crx
[2012/08/11 15:36:46 | 000,002,516 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2012/08/11 15:36:46 | 000,000,088 | RHS- | C] () -- C:\ProgramData\6E836B08B1.sys
[2012/07/05 20:22:07 | 000,000,132 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012/06/23 15:32:19 | 000,001,009 | ---- | C] () -- C:\Program Files\Notepad++.lnk
[2012/04/20 15:16:48 | 001,893,200 | ---- | C] () -- C:\Users\Cliente\ts3_recording_12_04_20_14_16_46.wav
[2012/04/12 21:50:43 | 000,001,456 | ---- | C] () -- C:\Users\Cliente\AppData\Local\Adobe Save for Web 12.0 Prefs
[2012/01/23 00:10:00 | 000,053,248 | ---- | C] () -- C:\Windows\System32\mgxasio2.dll
[2012/01/23 00:09:23 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2012/01/23 00:09:03 | 000,006,211 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2011/12/30 12:11:26 | 000,155,088 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011/11/05 11:20:03 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2011/11/02 15:02:35 | 000,001,282 | ---- | C] () -- C:\Program Files\Default Programs.lnk
[2011/10/21 21:06:35 | 000,018,944 | ---- | C] () -- C:\Users\Cliente\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/10/07 13:30:28 | 000,077,824 | ---- | C] () -- C:\Windows\KMService.exe
[2011/10/07 13:30:28 | 000,008,192 | ---- | C] () -- C:\Windows\System32\srvany.exe
[2011/10/07 12:58:18 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011/10/07 12:58:18 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011/10/07 12:58:17 | 000,790,528 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011/10/07 12:58:17 | 000,134,144 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011/10/07 12:58:17 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011/10/07 12:53:02 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011/09/28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2007/08/13 18:14:25 | 000,000,454 | ---- | C] () -- C:\Program Files\sfxctrl.ach
[2007/08/13 18:14:23 | 002,632,701 | ---- | C] () -- C:\Program Files\nrpack.cab
[2007/08/13 18:14:23 | 000,000,575 | ---- | C] () -- C:\Program Files\sfmsi.dat
[2007/08/13 18:14:17 | 001,091,072 | ---- | C] () -- C:\Program Files\nrpack_enu.msi
[2007/08/13 18:13:37 | 000,459,874 | ---- | C] () -- C:\Program Files\htmlhelp.cab
[2007/08/13 18:13:37 | 000,309,992 | ---- | C] () -- C:\Program Files\msvcrt71.cab
[2007/08/13 18:13:37 | 000,179,627 | ---- | C] () -- C:\Program Files\msvcrt.cab
[2007/08/13 18:13:36 | 000,061,804 | ---- | C] () -- C:\Program Files\atl.cab
========== ZeroAccess Check ==========
[2009/07/14 02:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010/11/20 19:29:11 | 012,872,192 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 19:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 23:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013/02/07 14:36:32 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\.minecraft
[2013/02/06 12:10:49 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\.techniclauncher
[2013/01/10 08:38:01 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Antares
[2012/04/16 20:05:16 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\ArcticLine
[2013/02/01 15:38:45 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Audacity
[2013/01/19 18:06:10 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\BitTorrent
[2012/04/07 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/04/07 15:16:54 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2013/01/19 18:33:46 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Complitly
[2012/12/22 12:44:28 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\DAEMON Tools Lite
[2012/04/13 11:58:18 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Easeware
[2012/09/10 21:30:14 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Fighters
[2012/12/28 12:52:49 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\FileZilla
[2012/09/15 18:36:32 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\GarenaPlus
[2012/03/22 14:00:56 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\kikin
[2011/10/30 22:30:35 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\LibreOffice
[2013/02/06 12:10:10 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\logs
[2012/12/04 18:29:32 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\LolClient
[2012/08/11 18:48:12 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\MAGIX
[2012/10/24 19:55:20 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\MAXON
[2012/12/22 13:02:02 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Mount&Blade Warband
[2013/02/05 11:32:33 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\MP3Rocket
[2012/06/23 00:15:55 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Notepad++
[2011/11/07 19:40:08 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Opera
[2013/01/08 19:21:03 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\PACE Anti-Piracy
[2012/12/16 11:16:06 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\PDAppFlex
[2011/12/04 14:18:33 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\PhotoFiltre
[2012/09/11 13:20:45 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\PhotoFiltre Studio X
[2012/09/27 21:02:38 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\PhotoScape
[2012/05/01 13:32:13 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Publish Providers
[2012/10/15 13:58:03 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\raidcall
[2012/11/10 14:04:29 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\RCKR
[2012/05/11 21:19:03 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\RotMG.Production
[2012/05/14 12:31:41 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Screaming Bee
[2012/12/17 21:39:20 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Sony
[2013/01/21 23:35:01 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Sony Creative Software
[2012/05/01 20:30:03 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Sony Creative Software Inc
[2012/03/27 00:45:08 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012/11/07 10:20:49 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\TechSmith
[2012/12/27 20:44:20 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\TS3Client
[2011/10/21 19:29:42 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Unity
[2013/02/07 10:05:50 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\uTorrent
[2011/10/17 18:53:07 | 000,000,000 | ---D | M] -- C:\Users\Cliente\AppData\Roaming\Windows Live Writer
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 1243 bytes -> C:\Users\Cliente\AppData\Local\bztaT88eBO:g3bg5XWmL6wL2QC40CJW
@Alternate Data Stream - 1105 bytes -> C:\ProgramData\Microsoft:p8RwFMgSNudrO9bKr2jARyYEf
@Alternate Data Stream - 1102 bytes -> C:\Program Files\Common Files\microsoft shared:fCSUD8yshuWCZQEEsy4VUD
@Alternate Data Stream - 1000 bytes -> C:\ProgramData\Microsoft:WVgS0jFQKAu06JSGmUt23X
< End of report >

 

 

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

:seta: Baixe o AdwCleaner (...de Xplode) e salve-o no Desktop (Área de Trabalho)

*Execute-o. Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador

*Clique no botão Help e selecione Options

acoBmFPj.jpg

*Selecione a opção DisableAskDetection e clique [OK]

advwrSoB.jpg

 

*Clique [Delete]. Em alguns casos, o PC será reiniciado para a completa remoção. Clique [OK] para reiniciar.

abwYi5kV.jpg

*Cole o relatório apresentado

Compartilhar este post

Link para o post
Compartilhar em outros sites

DanielPadilha    0

DanielPadilha
Postado

Olá amigo está ai .

 

 

# AdwCleaner v2.111 - Logfile created 02/07/2013 at 15:48:49

# Updated 05/02/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (32 bits)
# User : Cliente - CLIENTE-PC
# Boot Mode : Normal
# Running from : C:\Users\Cliente\Desktop\AdwCleaner.exe
# Option [Delete]
# Switch Used : /DisableAskDetection
***** [services] *****
Stopped & Deleted : Browser Manager
***** [Files / Folders] *****
Deleted on reboot : C:\ProgramData\Browser Manager
File Deleted : C:\END
File Deleted : C:\Users\Cliente\AppData\Local\funmoods.crx
File Deleted : C:\Users\Cliente\AppData\Local\funmoods-speeddial.crx
File Deleted : C:\Users\Cliente\AppData\Local\funmoods-speeddial_sf.crx
File Deleted : C:\Windows\system32\conduitEngine.tmp
Folder Deleted : C:\Program Files\Complitly
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\Gossiper
Folder Deleted : C:\Program Files\IncrediMail_MediaBar_2
Folder Deleted : C:\Program Files\kikin
Folder Deleted : C:\Program Files\SweetIM
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\Premium
Folder Deleted : C:\Users\Cliente\AppData\Local\Conduit
Folder Deleted : C:\Users\Cliente\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\Cliente\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Cliente\AppData\LocalLow\Gossiper
Folder Deleted : C:\Users\Cliente\AppData\LocalLow\IncrediMail_MediaBar_2
Folder Deleted : C:\Users\Cliente\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Cliente\AppData\Roaming\Complitly
Folder Deleted : C:\Users\Cliente\AppData\Roaming\kikin
***** [Registry] *****
Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\261123~1.78\{16cdf~1\browse~1.dll
Key Deleted : HKCU\Software\52688d0e66fea12
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Gossiper
Key Deleted : HKCU\Software\AppDataLow\Software\IncrediMail_MediaBar_2
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\BrowserMngr
Key Deleted : HKCU\Software\Complitly
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKCU\Software\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E601996F-E400-41CA-804B-CD6373A7EEE2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0A452A47-C5A8-4854-A237-4B9B06B376F0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D8A3EC66-E4AF-48A7-A62A-121C09A2CB1C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E601996F-E400-41CA-804B-CD6373A7EEE2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\52688d0e66fea12
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\Software\BrowserMngr
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0A452A47-C5A8-4854-A237-4B9B06B376F0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AFC17B18-F04F-4BE6-8146-ED9B57E6F24C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D8A3EC66-E4AF-48A7-A62A-121C09A2CB1C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E601996F-E400-41CA-804B-CD6373A7EEE2}
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc.1
Key Deleted : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1547340
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2612669
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2724386
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2849856
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lpkbfdhlbdkjohbhnhabfecpmcdlcmff
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Key Deleted : HKLM\Software\Gossiper
Key Deleted : HKLM\Software\ImInstaller
Key Deleted : HKLM\Software\IncrediMail_MediaBar_2
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0200438C-B34A-416A-A0ED-5D08AC6CB7C8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0306EDAE-1539-4C53-9600-0A32806DDDEF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32E54DAB-EAB0-405D-88BF-08B02D30D0A2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C42B9690-927F-40DD-9AE9-5CF025176308}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsLatest_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsLatest_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0A452A47-C5A8-4854-A237-4B9B06B376F0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E601996F-E400-41CA-804B-CD6373A7EEE2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AFC17B18-F04F-4BE6-8146-ED9B57E6F24C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D8A3EC66-E4AF-48A7-A62A-121C09A2CB1C}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E4A71A41-BCC8-480a-9E69-0DA29CBA7ECA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Gossiper Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IncrediMail_MediaBar_2 Toolbar
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\SimplyGen
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [browserMngr Start Page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [browserMngrDefaultScope]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{0A452A47-C5A8-4854-A237-4B9B06B376F0}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}]
Value Deleted : HKCU\Software\Mozilla\Firefox\extensions [{58BD07EB-0EE0-4DF0-8121-DC9B693373DF}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0A452A47-C5A8-4854-A237-4B9B06B376F0}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{0A452A47-C5A8-4854-A237-4B9B06B376F0}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0}]
***** [internet Browsers] *****
-\\ Internet Explorer v8.0.7601.17514
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT1547340 --> hxxp://www.google.com
Deleted : [HKCU\Software\Microsoft\Internet Explorer\Main - Backup.Old.Start Page]
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://searchfunmoods.com/?f=2&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0Czzzy0C0D0CyEtDtAtB0F0F0B0CyC0CtN0D0Tzu0StByByCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=652799453 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - oldTabs] = hxxp://search.babylon.com/?affID=114278&tt=010712_1&babsrc=NT_ss&mntrId=90f9bc6c000000000000c89cdc4032ff --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://searchfunmoods.com/?f=1&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0Czzzy0C0D0CyEtDtAtB0F0F0B0CyC0CtN0D0Tzu0StByByCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=652799453 --> hxxp://www.google.com
-\\ Google Chrome v24.0.1312.57
File : C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Preferences
Deleted [l.8] : homepage = "hxxp://search.conduit.com/?SearchSource=10&ctid=CT2849856",
Deleted [l.2047] : homepage = "hxxp://search.conduit.com/?SearchSource=10&ctid=CT2849856",
-\\ Opera v12.12.1707.0
File : C:\Users\Cliente\AppData\Roaming\Opera\Opera\operaprefs.ini
Deleted : Home URL=hxxp://searchfunmoods.com/?f=1&a=ironpub&chnl=ironpub&cd=2XzuyEtN2Y1L1Qzu0Czzzy0C0D0CyEtDtA[...]
*************************
AdwCleaner[s1].txt - [17004 octets] - [07/02/2013 15:48:49]
########## EOF - C:\AdwCleaner[s1].txt - [17065 octets] ##########

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

:seta: Execute o OTL. Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador

*Cole as linhas em azul no espaço abaixo de Exames Personalizados/Correções


:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
O4 - HKLM..\Run: [] File not found

:Reg
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2]

:Commands
[emptytemp]


*Clique [Consertar]

http://imgbox.com/acf9AU2g'>acf9AU2g.jpg

*Clique [OK] para reiniciar o PC

http://imgbox.com/aalOzPIh'>aalOzPIh.jpg

*Ao reiniciar, surgirá uma janela de Aviso de Segurança do Windows, perguntando se deseja executar o OTL. Clique [Executar]

*Cole o relatório apresentado

Compartilhar este post

Link para o post
Compartilhar em outros sites

DanielPadilha    0

DanielPadilha
Postado

All processes killed


Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)> in the current context!

Error: Unable to interpret <DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)> in the current context!

Error: Unable to interpret <O4 - HKLM..\Run: [] File not found> in the current context!

========== REGISTRY ==========

Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\ deleted successfully.

========== COMMANDS ==========


[EMPTYTEMP]


User: All Users


User: Cliente

->Temp folder emptied: 5333773381 bytes

->Temporary Internet Files folder emptied: 123743617 bytes

->Java cache emptied: 8501984 bytes

->Google Chrome cache emptied: 377919479 bytes

->Opera cache emptied: 52719638 bytes

->Flash cache emptied: 59734 bytes


User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 56475 bytes


User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes


User: Public


User: Todos os Usuários


User: Usuário Padrão

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes


%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 4869207 bytes

%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 980915 bytes

%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 743 bytes

RecycleBin emptied: 63547429 bytes


Total Files Cleaned = 5.690,00 mb



OTL by OldTimer - Version 3.2.69.0 log created on 02072013_161145


Files\Folders moved on Reboot...

File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot.


PendingFileRenameOperations files...


Registry entries deleted on Reboot...


Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

Você copiou os comandos errado.

 

Esqueceu de acrescentar :OTL

 

Refaça o procedimento com os comandos abaixo:

 

:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
O4 - HKLM..\Run: [] File not found

:Commands
[Reboot]

Compartilhar este post

Link para o post
Compartilhar em outros sites

DanielPadilha    0

DanielPadilha
Postado

 

OTL logfile created on: 07/02/2013 16:04:01 - Run 2

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Cliente\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy
2,00 Gb Total Physical Memory | 0,77 Gb Available Physical Memory | 38,33% Memory free
4,00 Gb Paging File | 2,34 Gb Available in Paging File | 58,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,66 Gb Total Space | 372,93 Gb Free Space | 80,09% Space Free | Partition Type: NTFS
Drive E: | 6,04 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: CLIENTE-PC | User Name: Cliente | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013/02/07 15:13:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Cliente\Desktop\OTL.exe
PRC - [2013/02/06 09:36:56 | 000,213,384 | ---- | M] (Google Inc.) -- C:\Users\Cliente\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe
PRC - [2013/01/26 00:35:08 | 001,248,208 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2012/12/18 12:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/12/10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2012/12/04 16:41:55 | 003,093,624 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
PRC - [2012/11/29 12:28:06 | 000,166,600 | ---- | M] (APN LLC.) -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
PRC - [2012/09/16 22:17:29 | 000,212,432 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.21.123\GoogleCrashHandler.exe
PRC - [2012/08/25 16:33:32 | 000,210,944 | ---- | M] () -- C:\ProgramData\OptimizerPro1\OptimizerPro1.exe
PRC - [2012/08/08 19:15:24 | 001,644,744 | ---- | M] (Ask) -- C:\Program Files\Ask.com\Updater\Updater.exe
PRC - [2012/07/02 16:41:11 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2012/07/02 16:41:09 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2012/07/02 16:41:00 | 000,348,664 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012/07/02 16:41:00 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2011/10/07 13:30:18 | 000,077,824 | ---- | M] () -- C:\Windows\KMService.exe
PRC - [2011/10/07 13:30:18 | 000,008,192 | ---- | M] () -- C:\Windows\System32\srvany.exe
PRC - [2011/05/19 01:00:48 | 000,234,792 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe
PRC - [2011/05/19 01:00:20 | 000,083,240 | ---- | M] () -- C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
PRC - [2011/05/12 06:09:36 | 000,312,616 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe
PRC - [2011/05/12 06:09:34 | 000,070,952 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
PRC - [2010/11/20 19:29:20 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 19:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/11/20 19:29:10 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2010/09/17 11:14:50 | 000,098,304 | ---- | M] (Firebird Project) -- C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
PRC - [2010/09/17 11:14:42 | 003,735,552 | ---- | M] (Firebird Project) -- C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
PRC - [2010/03/16 03:58:36 | 000,718,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
PRC - [2009/07/13 23:14:41 | 000,354,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe
PRC - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [1999/12/31 22:00:00 | 004,045,432 | ---- | M] (VIA) -- C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
PRC - [1999/12/31 22:00:00 | 000,027,768 | ---- | M] (VIA Technologies, Inc.) -- C:\Windows\System32\ViakaraokeSrv.exe
========== Modules (No Company Name) ==========
MOD - [2013/02/06 09:33:59 | 012,459,888 | ---- | M] () -- C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.139\pepflashplayer.dll
MOD - [2013/01/26 00:35:06 | 000,460,240 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll
MOD - [2013/01/26 00:35:04 | 004,012,496 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\pdf.dll
MOD - [2013/01/26 00:34:19 | 000,597,968 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\libglesv2.dll
MOD - [2013/01/26 00:34:18 | 000,124,368 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\libegl.dll
MOD - [2013/01/26 00:34:16 | 001,552,848 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
MOD - [2012/12/04 16:41:55 | 003,093,624 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
MOD - [2012/01/08 11:41:12 | 000,093,696 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2011/02/08 22:56:38 | 000,296,448 | ---- | M] () -- C:\Program Files\Notepad++\NppShell_04.dll
MOD - [2010/03/15 12:28:24 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2010/01/30 03:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [1999/12/31 22:00:00 | 000,113,272 | ---- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
MOD - [1999/12/31 22:00:00 | 000,080,504 | ---- | M] () -- C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
========== Services (SafeList) ==========
SRV - [2013/01/09 13:15:39 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/01/08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/12/18 12:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/12/10 17:29:44 | 001,435,568 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012/11/29 12:28:06 | 000,166,600 | ---- | M] (APN LLC.) [Auto | Running] -- C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
SRV - [2012/11/04 13:22:37 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012/07/02 16:41:09 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012/07/02 16:41:00 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/10/07 13:30:18 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\Windows\System32\srvany.exe -- (KMService)
SRV - [2011/05/19 01:00:20 | 000,083,240 | ---- | M] () [Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe -- (CLHNServiceForPowerDVD)
SRV - [2011/05/12 06:09:36 | 000,312,616 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe -- (CyberLink PowerDVD 11.0 Service)
SRV - [2011/05/12 06:09:34 | 000,070,952 | ---- | M] (CyberLink) [Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe -- (CyberLink PowerDVD 11.0 Monitor Service)
SRV - [2011/03/16 11:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010/09/17 11:14:50 | 000,098,304 | ---- | M] (Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2010/09/17 11:14:42 | 003,735,552 | ---- | M] (Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2010/03/25 11:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/07/13 23:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 23:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 23:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [1999/12/31 22:00:00 | 000,027,768 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\System32\ViakaraokeSrv.exe -- (VIAKaraokeService)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - [2013/01/03 14:32:06 | 000,050,728 | ---- | M] (Eugene V. Muzychenko) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm)
DRV - [2012/12/31 10:34:42 | 000,013,024 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SWDUMon.sys -- (SWDUMon)
DRV - [2012/09/15 17:40:30 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012/06/06 01:42:59 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012/06/06 01:42:59 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012/06/06 01:42:59 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2012/03/19 15:22:32 | 001,451,312 | ---- | M] (ShiningMorning Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vasdDev.sys -- (VASDeviceDrm)
DRV - [2011/05/20 16:31:06 | 000,077,296 | ---- | M] (CyberLink Corp.) [2011/10/07 12:22:19] [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl -- ({329F96B6-DF1E-4328-BFDA-39EA953C1312})
DRV - [2011/05/19 01:00:21 | 000,071,664 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys -- (ntk_PowerDVD)
DRV - [2010/11/20 19:29:34 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 19:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 19:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 19:29:03 | 000,112,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - [2010/11/20 19:29:03 | 000,077,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV - [2010/11/20 19:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010/11/20 19:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 19:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 19:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 19:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010/11/20 19:29:03 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\terminpt.sys -- (terminpt)
DRV - [2010/11/20 19:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 19:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/06/17 16:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/12/01 16:49:54 | 000,034,384 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/07/22 12:19:20 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009/07/13 21:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009/03/18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/12/25 14:08:00 | 007,740,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008/03/26 17:31:26 | 000,034,128 | ---- | M] (DemoForge, LLC) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dfmirage.sys -- (dfmirage)
DRV - [1999/12/31 22:00:00 | 001,841,272 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {E627DC4B-8C04-4234-A2D4-1D634EE01C41}
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{04BDCC7D-922B-506D-E8D7-0BF2CBEB5886}: "URL" = http://www.bigseekpro.com/search/toolbar/hao123/{5326CD18-33AB-9D1D-8CF0-90FB3994F7B9}?q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{0F17E656-11E8-4B54-CC0C-62C536B4F76D}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2849856
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://br.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-br
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = AF 1B D9 5B 06 86 CC 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {29acf17c-1713-4286-8f40-bfd05f1e70c8} - No CLSID value found
IE - HKCU\..\URLSearchHook: {90b49673-5506-483e-b92b-ca0265bd9ca8} - No CLSID value found
IE - HKCU\..\SearchScopes,Backup.Old.DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0F17E656-11E8-4B54-CC0C-62C536B4F76D}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2849856
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{AC129BF9-68BF-4bc4-A1DC-ECB62712FF99}: "URL" = http://search.kikin.com/search/?q={searchTerms}
IE - HKCU\..\SearchScopes\{E627DC4B-8C04-4234-A2D4-1D634EE01C41}: "URL" = http://www.bigseekpro.com/search/toolbar/hao123/{5326CD18-33AB-9D1D-8CF0-90FB3994F7B9}?q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.13.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@raidcall.en/RCplugin: C:\Users\Cliente\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF - HKLM\Software\MozillaPlugins\@raidcall.kr/RCplugin: C:\Users\Cliente\AppData\Roaming\RCKR\plugins\nprcplugin.dll (Raidcall)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Cliente\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Cliente\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Cliente\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Cliente\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Cliente\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Cliente\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
[2012/09/15 17:24:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Cliente\AppData\Roaming\mozilla\Firefox\extensions
[2012/09/15 17:24:23 | 000,000,000 | ---D | M] (BittorrentBar_PT) -- C:\Users\Cliente\AppData\Roaming\mozilla\Firefox\extensions\{29acf17c-1713-4286-8f40-bfd05f1e70c8}
[2012/08/13 19:18:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
========== Chrome ==========
CHR - homepage: http://www.google.com/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Cliente\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Cliente\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL
CHR - plugin: AdobeExManDetect (Enabled) = C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll
CHR - plugin: AdobeAAMDetect (Enabled) = C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java Platform SE 7 U11 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Cliente\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Cliente\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Raidcall plugin (Enabled) = C:\Users\Cliente\AppData\Roaming\RCKR\plugins\nprcplugin.dll
CHR - plugin: Raidcall plugin (Enabled) = C:\Users\Cliente\AppData\Roaming\raidcall\plugins\nprcplugin.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Google Drive = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Pesquisa do Google = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Windows Media Player Extension for HTML5 = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0\
CHR - Extension: Gmail = C:\Users\Cliente\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2013/01/11 21:21:37 | 000,000,917 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 108.162.206.133 thewarz.com
O1 - Hosts: 66.180.197.58 api.thewarz.com
O1 - Hosts: 108.162.203.133 www.thewarz.com
O2 - BHO: (Ask Shopping Toolbar) - {4D503352-2D53-4154-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\MP3R-SAT\Passport.dll (APN LLC.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Ask Shopping Toolbar) - {4D503352-2D53-4154-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\MP3R-SAT\Passport.dll (APN LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {29ACF17C-1713-4286-8F40-BFD05F1E70C8} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {90B49673-5506-483E-B92B-CA0265BD9CA8} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ApnTBMon] C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [bCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RemoteControl11] C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [switchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [Clownfish] File not found
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Facebook Update] C:\Users\Cliente\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: &Enviar para o OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xportar para o Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - Reg Error: Key error. File not found
O9 - Extra Button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk File not found
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab (Java Plug-in 10.13.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A89CDE76-F47E-4470-84BD-9F12D1E45529}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\261123~1.78\{16cdf~1\browse~1.dll) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 19:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{07f5ba29-e57b-11e1-be44-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{07f5ba29-e57b-11e1-be44-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{07f5ba2c-e57b-11e1-be44-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{07f5ba2c-e57b-11e1-be44-c89cdc4032ff}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{0ac23ec3-364d-11e2-9db3-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{0ac23ec3-364d-11e2-9db3-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{0ac23f9c-364d-11e2-9db3-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{0ac23f9c-364d-11e2-9db3-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{0ac23fa0-364d-11e2-9db3-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{0ac23fa0-364d-11e2-9db3-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{1aabef25-fc0c-11e1-bad1-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{1aabef25-fc0c-11e1-bad1-c89cdc4032ff}\Shell\AutoRun\command - "" = autorun.exe
O33 - MountPoints2\{2752a1ad-4761-11e1-8192-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{2752a1ad-4761-11e1-8192-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2df96d1d-04de-11e2-b9dd-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{2df96d1d-04de-11e2-b9dd-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{2df96d29-04de-11e2-b9dd-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{2df96d29-04de-11e2-b9dd-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3cb07d18-3f6a-11e1-82d5-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{3cb07d18-3f6a-11e1-82d5-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3cb07d2a-3f6a-11e1-82d5-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{3cb07d2a-3f6a-11e1-82d5-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3cb07d38-3f6a-11e1-82d5-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{3cb07d38-3f6a-11e1-82d5-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{3cb07d49-3f6a-11e1-82d5-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{3cb07d49-3f6a-11e1-82d5-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{4b688a71-6876-11e2-ba22-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{4b688a71-6876-11e2-ba22-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{a360ee93-4822-11e1-84c7-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{a360ee93-4822-11e1-84c7-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a360ee97-4822-11e1-84c7-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{a360ee97-4822-11e1-84c7-c89cdc4032ff}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{c2601a6e-07d3-11e2-8048-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{c2601a6e-07d3-11e2-8048-c89cdc4032ff}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{f472d2a8-478d-11e1-bb23-c89cdc4032ff}\Shell - "" = AutoRun
O33 - MountPoints2\{f472d2a8-478d-11e1-bb23-c89cdc4032ff}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013/02/07 15:54:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2013/02/07 15:13:57 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Cliente\Desktop\OTL.exe
[2013/02/07 11:59:59 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013/02/07 11:58:24 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013/02/07 11:58:24 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013/02/07 11:58:24 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013/02/07 10:45:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{4AEA4091-D8B4-42FF-BB78-D2DBE3F584C5}
[2013/02/06 22:14:58 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{5319D372-5092-4891-BF7B-93A7B12B7638}
[2013/02/06 12:10:10 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\logs
[2013/02/06 12:09:54 | 000,059,392 | ---- | C] (Technic) -- C:\Users\Cliente\Desktop\TechnicLauncher.exe
[2013/02/06 09:26:33 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B2DAAB28-47B7-4101-82D6-1F3707723AC2}
[2013/02/05 22:18:11 | 000,000,000 | ---D | C] -- C:\Users\Cliente\Downloads\Documents\DriverEasy
[2013/02/05 10:38:35 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FASoft
[2013/02/05 10:38:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FASoft
[2013/02/05 10:38:35 | 000,000,000 | ---D | C] -- C:\Program Files\Compressor
[2013/02/05 09:20:32 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{F768943F-030D-4B81-87A1-0819073B80CB}
[2013/02/04 21:19:55 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B99548DF-5A68-43E1-9A81-23D2ADB78717}
[2013/02/04 11:29:30 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ohm Force
[2013/02/04 11:29:26 | 000,000,000 | ---D | C] -- C:\Audio
[2013/02/04 08:45:19 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{18138643-49C5-40FB-9235-B5C53EEF581F}
[2013/02/03 22:46:23 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{CD5021D0-217C-4DDE-BE7B-10D70D186EAB}
[2013/02/03 10:51:03 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Waves
[2013/02/03 10:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves
[2013/02/03 09:31:42 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{42416511-9B31-46DA-A890-432F3DE2D5B5}
[2013/02/02 13:08:51 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{564BCBD7-CD58-4180-97DF-58A9DE689B12}
[2013/02/02 09:22:16 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B4B5FD97-6550-4288-A2DE-6204705FE1E6}
[2013/02/01 14:11:27 | 000,000,000 | ---D | C] -- C:\Users\Cliente\Downloads\Documents\Custom Production Presets 8.0
[2013/02/01 08:29:42 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{6A8BD573-FE55-488B-B7DE-8049473798E2}
[2013/01/31 09:29:43 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{C1EA45AB-65E5-4000-99FB-B91C9B0A0E54}
[2013/01/30 12:55:22 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{2FADCD7D-D78B-42B2-8C65-EED7D8D9D9D0}
[2013/01/30 12:53:22 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{960353B1-70A8-4AEB-8FC8-D88E93079C68}
[2013/01/30 09:57:55 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{4565F15C-62D5-4FE6-8465-1FB89A06CA3B}
[2013/01/29 08:54:27 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{DAD0D113-CEBF-4B81-A678-A6C00A690FD9}
[2013/01/28 12:06:35 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{63F20B84-9D62-42DB-8690-3F3027A9681E}
[2013/01/28 09:07:57 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{41096D66-165D-4E3E-9AA9-C68932388CC1}
[2013/01/27 11:37:13 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{D12D914A-FBA8-4616-9271-28831F4FE322}
[2013/01/27 09:41:23 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{0DD8AA7A-1A04-44ED-A8E0-6531EDFB0C45}
[2013/01/26 18:51:58 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B43C5C3B-BFB6-4FFB-A3FE-7C0398D3720F}
[2013/01/26 10:32:05 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{9EB602D0-A989-459A-B6CC-317383D9FCA0}
[2013/01/25 12:40:39 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{AD638C0F-3EF4-4E43-8F51-6B1FA407B0EE}
[2013/01/24 16:42:34 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{9C680E2C-3EF0-4C02-A0F3-D29B13653922}
[2013/01/24 15:14:52 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{02502EF6-AC46-48F6-B365-CE406DE9E5BE}
[2013/01/24 14:57:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\Downloads\Documents\Skype Voice Records
[2013/01/24 14:57:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\Downloads\Documents\Clownfish Avatars
[2013/01/24 13:21:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013/01/24 13:21:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013/01/24 08:54:36 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{9DFA0A28-E482-4DC8-AF26-A981CF52B800}
[2013/01/23 13:10:03 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{388ADA9F-678F-4A13-AFA5-CF15DCBB8032}
[2013/01/23 13:02:36 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{C090E7AA-8728-4EB5-A126-0E3AE838FF85}
[2013/01/23 10:37:01 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{42215466-6CC6-4FF2-B80A-EDB20460ECCB}
[2013/01/22 19:00:23 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{FBD278FB-68FB-4F6A-B973-1300E8ADDF75}
[2013/01/22 16:36:31 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{165F8F57-6CC3-4F67-B940-93C6ABFDB238}
[2013/01/21 23:35:01 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Sony Creative Software
[2013/01/21 23:22:03 | 000,000,000 | ---D | C] -- C:\Program Files\Vstplugins
[2013/01/21 23:21:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Melodyne 3.1
[2013/01/21 22:39:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Temporary
[2013/01/21 22:38:27 | 000,368,640 | ---- | C] (Propellerhead Software AB) -- C:\Windows\System32\ReWire.dll
[2013/01/21 22:37:58 | 000,000,000 | ---D | C] -- C:\Program Files\u-he
[2013/01/21 22:37:48 | 000,000,000 | ---D | C] -- C:\Program Files\Celemony
[2013/01/21 21:57:36 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{4B80780B-D65B-4284-8588-099D6E2A3C1D}
[2013/01/21 09:57:07 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{A25CB66D-F782-4D41-9589-D8CA863C97D6}
[2013/01/20 22:36:37 | 000,000,000 | ---D | C] -- C:\Program Files\Call of Duty- Modern Warfare 3
[2013/01/20 10:49:47 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{59C65201-867A-43DF-AC7A-1F6F82A3E058}
[2013/01/20 10:47:40 | 006,376,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspaint.exe
[2013/01/20 10:47:39 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2013/01/20 10:47:39 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
[2013/01/20 10:47:37 | 001,792,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2013/01/20 10:47:37 | 000,705,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imagesp1.dll
[2013/01/20 10:47:28 | 020,268,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imageres.dll
[2013/01/20 10:47:27 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2013/01/20 10:47:27 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
[2013/01/20 10:47:26 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
[2013/01/20 10:47:25 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
[2013/01/20 00:55:35 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\TeknoGods
[2013/01/19 22:44:26 | 000,000,000 | ---D | C] -- C:\Program Files\RocketDock
[2013/01/19 18:14:02 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2013/01/19 18:13:20 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\uTorrent
[2013/01/19 09:40:01 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{B44D2605-8BD8-4E1C-9A6B-33F17C90AD90}
[2013/01/18 15:17:01 | 000,000,000 | ---D | C] -- C:\Program Files\DsNET Corp
[2013/01/18 12:04:12 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{AAF0AD83-2F43-4214-861C-1976ABFD5CAA}
[2013/01/17 22:14:49 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{43E2D5FB-9FFB-4D1E-8EF9-36FBA78FBE06}
[2013/01/17 20:02:21 | 000,000,000 | ---D | C] -- C:\Users\Cliente\jagexcache
[2013/01/17 10:14:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{72BD7EA1-AA8E-4547-B452-347B0BAEA2F6}
[2013/01/16 22:13:32 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{1D4DFD39-7551-4FA5-A3FD-722DB78F6537}
[2013/01/16 09:52:14 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{E708A3E7-A670-4E8B-900A-E4D0F7B55071}
[2013/01/15 21:51:34 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{F6394365-F533-4FD7-97D7-E376D6219601}
[2013/01/15 09:51:05 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{3F30AEF2-21E6-44AA-840F-09D9747F5C67}
[2013/01/14 08:27:20 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{28C4B7D7-491B-4535-81A1-058F2C41735F}
[2013/01/13 23:17:46 | 000,000,000 | ---D | C] -- C:\Program Files\Paint.NET
[2013/01/13 23:17:11 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\Paint.NET
[2013/01/13 10:45:08 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{7EC485D8-5F36-4FDA-BD89-1BC567CA43D0}
[2013/01/12 12:13:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The War Z
[2013/01/12 09:02:25 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{E246C4DA-8A15-49A1-A45A-D9D13098370B}
[2013/01/11 20:40:01 | 000,000,000 | ---D | C] -- C:\Windows\System32\directx
[2013/01/11 15:30:37 | 000,086,016 | ---- | C] (MindVision Software) -- C:\Windows\unvise32.exe
[2013/01/11 15:30:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ohm Force
[2013/01/11 11:45:04 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{81BD452E-53F8-46B3-8C25-DB30CEA1EFC6}
[2013/01/10 14:12:29 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{9266589C-7C77-4F7A-9F84-B46EA5074991}
[2013/01/09 18:49:06 | 000,000,000 | ---D | C] -- C:\ProgramData\WoW Worldwide Software LTD
[2013/01/09 14:32:06 | 000,720,896 | ---- | C] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe
[2013/01/09 14:32:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prosoniq OrangeVocoder VST 2.02
[2013/01/09 14:14:31 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUninst.exe
[2013/01/09 08:48:50 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{3F89673C-CAA7-4511-9057-C016AFF96B85}
[2013/01/08 19:43:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antares Audio Technologies
[2013/01/08 19:43:01 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\Antares
[2013/01/08 19:43:00 | 000,000,000 | ---D | C] -- C:\Program Files\Antares Audio Technologies
[2013/01/08 19:20:52 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Roaming\PACE Anti-Piracy
[2013/01/08 19:20:52 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\PACE Anti-Piracy
[2013/01/08 19:20:52 | 000,000,000 | ---D | C] -- C:\ProgramData\PACE Anti-Piracy
[2013/01/08 19:20:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PACE Anti-Piracy
[2013/01/08 16:42:47 | 000,000,000 | ---D | C] -- C:\Users\Cliente\AppData\Local\{C47D7957-0431-4BE1-BD8A-15E38AC4E853}
[2013/01/08 16:28:28 | 000,000,000 | ---D | C] -- C:\Program Files\Audacity
[2007/08/13 18:14:19 | 000,915,200 | ---- | C] (Sony Creative Software Inc.) -- C:\Program Files\Setup.exe
[2007/03/19 16:58:29 | 003,161,088 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcredist_x64.exe
[2007/03/19 16:58:29 | 002,682,880 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcredist_x86.exe
[2007/03/19 16:58:02 | 000,471,840 | ---- | C] (Microsoft Corporation) -- C:\Program Files\hhupd.exe
[2007/03/19 16:57:46 | 000,509,984 | ---- | C] (Microsoft Corporation) -- C:\Program Files\50comupd.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013/02/07 16:00:29 | 000,021,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/02/07 16:00:29 | 000,021,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/02/07 15:54:20 | 000,001,976 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2013/02/07 15:52:19 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/02/07 15:52:19 | 000,000,384 | -H-- | M] () -- C:\Windows\tasks\OptimizerPro1UpdaterTask{26ADBA2A-AE9E-445E-A94E-4D351773E73D}.job
[2013/02/07 15:52:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/02/07 15:52:08 | 1610,014,720 | -HS- | M] () -- C:\hiberfil.sys
[2013/02/07 15:45:19 | 000,582,209 | ---- | M] () -- C:\Users\Cliente\Desktop\AdwCleaner.exe
[2013/02/07 15:42:47 | 000,001,086 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2380708717-1076342045-1108222354-1000UA.job
[2013/02/07 15:22:49 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/02/07 15:16:00 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/02/07 15:13:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Cliente\Desktop\OTL.exe
[2013/02/07 15:12:16 | 000,000,413 | ---- | M] () -- C:\Users\Cliente\Desktop\AutoClick.ini
[2013/02/07 13:56:34 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2380708717-1076342045-1108222354-1000UA.job
[2013/02/07 11:58:14 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013/02/07 11:58:09 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npdeployJava1.dll
[2013/02/07 11:58:09 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2013/02/07 11:58:09 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013/02/07 11:58:09 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013/02/07 11:58:09 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013/02/06 16:56:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2380708717-1076342045-1108222354-1000Core.job
[2013/02/06 12:10:20 | 000,703,117 | ---- | M] () -- C:\Users\Cliente\AppData\Roaming\technic-launcher.jar
[2013/02/06 12:09:50 | 000,059,392 | ---- | M] (Technic) -- C:\Users\Cliente\Desktop\TechnicLauncher.exe
[2013/02/06 09:42:03 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2380708717-1076342045-1108222354-1000Core.job
[2013/02/03 18:05:02 | 000,370,872 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013/02/01 15:16:23 | 015,831,040 | ---- | M] () -- C:\Users\Cliente\Robei.camrec
[2013/02/01 15:11:58 | 000,018,944 | ---- | M] () -- C:\Users\Cliente\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/01/29 13:37:07 | 000,000,132 | ---- | M] () -- C:\Users\Cliente\AppData\Roaming\Preferências do Formato PNG do Adobe CS6
[2013/01/29 12:32:14 | 000,702,882 | ---- | M] () -- C:\Windows\System32\prfh0416.dat
[2013/01/29 12:32:14 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/01/29 12:32:14 | 000,145,668 | ---- | M] () -- C:\Windows\System32\prfc0416.dat
[2013/01/29 12:32:14 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/01/21 23:21:37 | 000,001,812 | ---- | M] () -- C:\Users\Cliente\Desktop\Melodyne.lnk
[2013/01/21 14:47:32 | 000,000,038 | ---- | M] () -- C:\Windows\avisplitter.ini
[2013/01/20 10:47:53 | 000,001,150 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk
[2013/01/20 10:47:53 | 000,000,981 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SkinPackMenu.lnk
[2013/01/19 18:14:02 | 000,000,877 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2013/01/17 20:04:13 | 000,000,001 | ---- | M] () -- C:\Users\Cliente\random.dat
[2013/01/17 20:02:21 | 000,000,046 | ---- | M] () -- C:\Users\Cliente\jagex_cl_runescape_LIVE.dat
[2013/01/14 08:26:52 | 000,002,165 | ---- | M] () -- C:\Users\Cliente\Desktop\Google Chrome.lnk
[2013/01/13 23:19:07 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\Paint.NET.lnk
[2013/01/11 21:21:37 | 000,000,917 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.msn
[2013/01/11 21:21:37 | 000,000,917 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013/01/09 14:31:59 | 000,720,896 | ---- | M] (Indigo Rose Corporation) -- C:\Windows\iun6002.exe
[2013/01/09 13:15:39 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013/01/09 13:15:39 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/01/08 19:42:49 | 001,181,022 | ---- | M] () -- C:\Windows\System32\TmpA2387049
[2013/01/08 19:38:20 | 001,181,022 | ---- | M] () -- C:\Windows\System32\TmpA2118275
[2013/01/08 16:28:34 | 000,000,929 | ---- | M] () -- C:\Users\Cliente\Desktop\Audacity.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013/02/07 15:45:26 | 000,582,209 | ---- | C] () -- C:\Users\Cliente\Desktop\AdwCleaner.exe
[2013/02/06 12:10:17 | 000,703,117 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\technic-launcher.jar
[2013/02/05 16:41:47 | 000,001,091 | ---- | C] () -- C:\Users\Cliente\Desktop\Audio Repeater (MME).lnk
[2013/02/01 15:16:22 | 015,831,040 | ---- | C] () -- C:\Users\Cliente\Robei.camrec
[2013/01/21 23:21:37 | 000,001,812 | ---- | C] () -- C:\Users\Cliente\Desktop\Melodyne.lnk
[2013/01/20 10:47:53 | 000,001,150 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk
[2013/01/20 10:47:53 | 000,000,981 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SkinPackMenu.lnk
[2013/01/19 18:14:02 | 000,000,877 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2013/01/17 20:02:21 | 000,000,046 | ---- | C] () -- C:\Users\Cliente\jagex_cl_runescape_LIVE.dat
[2013/01/17 20:02:21 | 000,000,001 | ---- | C] () -- C:\Users\Cliente\random.dat
[2013/01/15 10:10:02 | 000,001,464 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
[2013/01/13 23:19:07 | 000,001,132 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
[2013/01/13 23:19:07 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\Paint.NET.lnk
[2013/01/08 19:42:49 | 001,181,022 | ---- | C] () -- C:\Windows\System32\TmpA2387049
[2013/01/08 19:38:20 | 001,181,022 | ---- | C] () -- C:\Windows\System32\TmpA2118275
[2013/01/08 16:28:34 | 000,000,941 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
[2013/01/08 16:28:34 | 000,000,929 | ---- | C] () -- C:\Users\Cliente\Desktop\Audacity.lnk
[2012/12/28 22:34:07 | 000,013,024 | ---- | C] () -- C:\Windows\System32\drivers\SWDUMon.sys
[2012/12/01 16:19:05 | 000,000,434 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012/11/11 13:30:28 | 000,001,456 | ---- | C] () -- C:\Users\Cliente\AppData\Local\Adobe Salvar para Web 13.0 Prefs
[2012/11/10 18:42:11 | 000,139,424 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012/11/10 18:42:11 | 000,138,056 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\PnkBstrK.sys
[2012/11/10 18:41:41 | 000,282,104 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2012/11/10 18:41:37 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2012/09/20 22:26:58 | 000,000,132 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\Preferências do Formato PNG do Adobe CS6
[2012/09/15 19:10:06 | 000,045,270 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\room_v3.dat
[2012/08/11 15:36:46 | 000,002,516 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2012/08/11 15:36:46 | 000,000,088 | RHS- | C] () -- C:\ProgramData\6E836B08B1.sys
[2012/07/05 20:22:07 | 000,000,132 | ---- | C] () -- C:\Users\Cliente\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012/06/23 15:32:19 | 000,001,009 | ---- | C] () -- C:\Program Files\Notepad++.lnk
[2012/04/20 15:16:48 | 001,893,200 | ---- | C] () -- C:\Users\Cliente\ts3_recording_12_04_20_14_16_46.wav
[2012/04/12 21:50:43 | 000,001,456 | ---- | C] () -- C:\Users\Cliente\AppData\Local\Adobe Save for Web 12.0 Prefs
[2012/01/23 00:10:00 | 000,053,248 | ---- | C] () -- C:\Windows\System32\mgxasio2.dll
[2012/01/23 00:09:23 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2012/01/23 00:09:03 | 000,006,211 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2011/12/30 12:11:26 | 000,155,088 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011/11/05 11:20:03 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2011/11/02 15:02:35 | 000,001,282 | ---- | C] () -- C:\Program Files\Default Programs.lnk
[2011/10/21 21:06:35 | 000,018,944 | ---- | C] () -- C:\Users\Cliente\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/10/07 13:30:28 | 000,077,824 | ---- | C] () -- C:\Windows\KMService.exe
[2011/10/07 13:30:28 | 000,008,192 | ---- | C] () -- C:\Windows\System32\srvany.exe
[2011/10/07 12:58:18 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011/10/07 12:58:18 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011/10/07 12:58:17 | 000,790,528 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011/10/07 12:58:17 | 000,134,144 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011/10/07 12:58:17 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011/10/07 12:53:02 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011/09/28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2007/08/13 18:14:25 | 000,000,454 | ---- | C] () -- C:\Program Files\sfxctrl.ach
[2007/08/13 18:14:23 | 002,632,701 | ---- | C] () -- C:\Program Files\nrpack.cab
[2007/08/13 18:14:23 | 000,000,575 | ---- | C] () -- C:\Program Files\sfmsi.dat
[2007/08/13 18:14:17 | 001,091,072 | ---- | C] () -- C:\Program Files\nrpack_enu.msi
[2007/08/13 18:13:37 | 000,459,874 | ---- | C] () -- C:\Program Files\htmlhelp.cab
[2007/08/13 18:13:37 | 000,309,992 | ---- | C] () -- C:\Program Files\msvcrt71.cab
[2007/08/13 18:13:37 | 000,179,627 | ---- | C] () -- C:\Program Files\msvcrt.cab
[2007/08/13 18:13:36 | 000,061,804 | ---- | C] () -- C:\Program Files\atl.cab
========== ZeroAccess Check ==========
[2009/07/14 02:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010/11/20 19:29:11 | 012,872,192 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 19:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 23:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== Custom Scans ==========
< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev) >
< DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt) >
< O4 - HKLM..\Run: [] File not found >
< >
< :Reg >
< [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2] >
< >
< :Commands >
< [emptytemp] >
========== Alternate Data Streams ==========
@Alternate Data Stream - 1243 bytes -> C:\Users\Cliente\AppData\Local\bztaT88eBO:g3bg5XWmL6wL2QC40CJW
@Alternate Data Stream - 1105 bytes -> C:\ProgramData\Microsoft:p8RwFMgSNudrO9bKr2jARyYEf
@Alternate Data Stream - 1102 bytes -> C:\Program Files\Common Files\microsoft shared:fCSUD8yshuWCZQEEsy4VUD
@Alternate Data Stream - 1000 bytes -> C:\ProgramData\Microsoft:WVgS0jFQKAu06JSGmUt23X
< End of report >

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

Não amigo!!...preste atenção!!

 

Você fez um scan com os comandos.

 

Faça o seguinte:

 

Execute o OTL. Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador

*Cole as linhas em azul no espaço abaixo de Exames Personalizados/Correções


:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
O4 - HKLM..\Run: [] File not found

:Commands
[Reboot]


*Clique [Consertar]

http://imgbox.com/acf9AU2g'>acf9AU2g.jpg

*Clique [OK] para reiniciar o PC

http://imgbox.com/aalOzPIh'>aalOzPIh.jpg

*Ao reiniciar, surgirá uma janela de Aviso de Segurança do Windows, perguntando se deseja executar o OTL. Clique [Executar]

*Cole o relatório apresentado

Compartilhar este post

Link para o post
Compartilhar em outros sites

DanielPadilha    0

DanielPadilha
Postado

é pra colar tudo de uma vez?

:OTL

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)

O4 - HKLM..\Run: [] File not found

 

:Commands

[Reboot]

 

Tudo isso? se for ja fiz isso ;(

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

Sim...isso mesmo.

 

Porém, vc clicou em [Verificar], eu quero que clique em [Consertar]

Compartilhar este post

Link para o post
Compartilhar em outros sites

DigRam    144

DigRam
Postado

Olá wings

snapback.png : wings, em 07/02/2013, disse:
Você copiou os comandos errado.


Esqueceu de acrescentar :OTL


acknCBeb.jpg

|- Ou os dois 2 pontos em destaque!

Abs!

 

Compartilhar este post

Link para o post
Compartilhar em outros sites

DanielPadilha    0

DanielPadilha
Postado

:OTL

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva401.sys -- (XDva401)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva400.sys -- (XDva400)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva399.sys -- (XDva399)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva398.sys -- (XDva398)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva397.sys -- (XDva397)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\XDva394.sys -- (XDva394)

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)

O4 - HKLM..\Run: [] File not found

 

:Commands

[Reboot]

 

Tudo isso? se for ja fiz isso ;(

fiz , só que não apareceu nenhum relatório .

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

OK...tudo bem.

 

 

:seta: Execute o AdwCleaner, clique [uninstall] > [sim]


:seta: Abra o Windows Explorer

*Clique Área de Trabalho > Organizar > Opções de pasta e pesquisa > [Modo de Exibição]

http://imgbox.com/acuT7HRL

http://imgbox.com/acx840n0

*Selecione Não mostrar arquivos, pastas ou unidades ocultas

http://imgbox.com/accBRqfD

*Clique [Aplicar] > [OK]


:seta: Execute o OTL. Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador

*Clique [Limpeza] > [OK]

*O PC será reiniciado


:seta: Instale o http://www.malwarebytes.org/mbam-download-exe.php'>MalwareBytes

*Antes de concluir a instalação, desmarque a opção Ativar trial gratuito do Malwarebytes Anti-Malware PRO

URL=http://imgbox.com/addBuhYq

*Aguarde a atualização e o programa será aberto automaticamente

*Selecione [Verificação Rápida] e clique[Verificar]

*Ao término, clique [OK] > [Ver Resultados] > [Remover Selecionados]

*Cole o relatório apresentado

Compartilhar este post

Link para o post
Compartilhar em outros sites

DanielPadilha    0

DanielPadilha
Postado

OK...tudo bem.

 

 

:seta: Execute o AdwCleaner, clique [uninstall] > [sim]

 

 

:seta: Abra o Windows Explorer

 

*Clique Área de Trabalho > Organizar > Opções de pasta e pesquisa > [Modo de Exibição]

 

http://imgbox.com/acuT7HRL

 

http://imgbox.com/acx840n0

 

*Selecione Não mostrar arquivos, pastas ou unidades ocultas

 

http://imgbox.com/accBRqfD

 

*Clique [Aplicar] > [OK]

 

 

:seta: Execute o OTL. Usuários do Windows Vista ou do Windows 7 devem clicar com o botão direito do mouse no arquivo e selecionar Executar como administrador

 

*Clique [Limpeza] > [OK]

 

*O PC será reiniciado

 

 

:seta: Instale o MalwareBytes

 

*Antes de concluir a instalação, desmarque a opção Ativar trial gratuito do Malwarebytes Anti-Malware PRO

 

URL=http://imgbox.com/addBuhYq

 

*Aguarde a atualização e o programa será aberto automaticamente

 

*Selecione [Verificação Rápida] e clique[Verificar]

 

*Ao término, clique [OK] > [Ver Resultados] > [Remover Selecionados]

 

*Cole o relatório apresentado

 

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org
Versão da Base de Dados: v2013.02.07.09
Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
Cliente :: CLIENTE-PC [administrador]
07/02/2013 18:27:53
mbam-log-2013-02-07 (18-27-53).txt
Tipo de Verificação: Verificação Rápida
Opções de verificações ativadas: Memória | Inicialização | Registro | Sistema de arquivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
Opções de verificação desativadas: P2P
Objetos escaneados: 220488
Tempo decorrido: 7 minuto(s), 12 segundo(s)
Processos de Memória Detectados: 2
C:\ProgramData\OptimizerPro1\OptimizerPro1.exe (Trojan.Dropper) -> 376 -> Será deletado na próxima inicialização.
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> 1504 -> Será deletado na próxima inicialização.
Módulos de Memória Detectados: 0
(Não foram detectados ítens maliciosos)
Chaves de Registro Detectadas: 3
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111181125} (PUP.CrossRider.BCA) -> Nenhuma ação foi feita.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111181125} (PUP.CrossRider.BCA) -> Nenhuma ação foi feita.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OptimizerPro1 (Trojan.Dropper) -> Enviado para a Quarentena e deletado com sucesso.
Valores de Registro Detectadas: 0
(Não foram detectados ítens maliciosos)
Itens de Dados no Registro Detectadas: 0
(Não foram detectados ítens maliciosos)
Pastas Detectadas: 0
(Não foram detectados ítens maliciosos)
Arquivos Detectados: 2
C:\ProgramData\OptimizerPro1\OptimizerPro1.exe (Trojan.Dropper) -> Será deletado na próxima inicialização.
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> Será deletado na próxima inicialização.
(fim)

Compartilhar este post

Link para o post
Compartilhar em outros sites

wings    22

wings
Postado

Boa noite DanielPadilha

 

 

O Avira ainda acusa algo?

 

Pelos relatórios, seu PC está limpo.

Compartilhar este post

Link para o post
Compartilhar em outros sites
Ir para a lista de tópicos Tópicos Resolvidos (Seguranca & Malwares)
×

Informação importante

Ao usar o fórum, você concorda com nossos Termos e condições.

  Aceito