[Resolvido] &nbspPC Lento, travamentos, problemas com atalhos, etc...

Luca Albuquerque · Novembro 16, 2013

Sim, ainda continua com o problema =(

DigRam · Novembro 16, 2013

Bom Dia! Luca Albuquerque

Redefina as configurações do Internet Explorer

|- Feche todas as janelas do Internet Explorer e do Windows Explorer atualmente abertas.
|- Abra o Internet Explorer >> Clique "Iniciar". < 4f6cbd09-148c-4dd8-b1f2-48f232a2fd33_818 >
|- Na caixa de pesquisa,digite: Internet Explorer
|- E na lista de resultados,clique em "Internet Explorer".
|- Clique no botão "Ferramentas". < 448ef968-d58a-43a2-b0cc-f396f4024f2c_14. >
|- Clique "Opções da Internet".
|- Clique na guia "Avançado" e em "Redefinir".
|- Marque a caixa de seleção "Excluir configurações pessoais"
|- Serão removidos: Dados de histórico de navegação;Provedores de Pesquisa;Aceleradores;Home Pages;Proteção contra Rastreamento e Filtragem ActiveX.
|- Na caixa de diálogo "Redefinir Configurações do Internet Explorer",clique em "Redefinir".
|- Ps: Quando o Internet Explorer concluir a aplicação das configurações padrão,clique em Fechar e em OK.
|- Feche o Internet Explorer e reinicie para que entre em vigor as configurações.
|- Caso não ocorra a redefinição,faça logon usando uma conta de administrador e tente fazer a redefinição novamente.

-/-

< sumiu as janelas de atalho do favoritos >

Nao consigo abrir a pagina que tem as janelinhas de atalho para os meus favoritos no navegador,elas sumiram e eu nao consigo acessar.como eu faço me ajudem

"muito obrigada Felipe,mas só consegui fazer voltar as janelinhas desinstalando e instalando denovo o navegador,mas valeu as dicas"

|- Se o seu problema bate com o deste,a solução encontrada,foi desinstalar o Chrome e reinstalar novamente.

-/-

|- O seu caso é complicado e parece não estar ligado a malwares.

|- Vejamos o que 'diz' o ComboFix,que é ferramenta poderosa e que não gosto muito de utilizar,pois pode bugar o PC.

-/-

|- Baixe: < > ( ... by Swearware )
|- Salve-o no desktop! ( Área de trabalho! )
|- Ps: Desabilite seu antivírus,antispywares e/ou firewall. ( Menos o do Windows! )
|- Feche algum programa/arquivo que esteja aberto.
|- Feche,também,seu navegador! ( IE,Firefox,Opera ou Google Chrome )
|- Ps: Esteja conectado(a) à Internet. <- Importante!
|- É preciso estar logado no sistema com privilégios de administrador.
|- Execute ComboFix.exe,com um duplo clique.
|- Ps: Instale o "Console de Recuperação",caso seja solicitado! <- Somente XP!
|- Ps: Ficará,portanto,à seu critério optar por sua instalação.

|- Surgindo alguma mensagem de erro,execute ComboFix.exe em Modo de Segurança com rede.
|- Ps: Para completar as remoções,talvez haja necessidade da ferramenta reiniciar o computador.
|- Abrir-se-á a janela Auto Scan.

|- Aguarde a finalização de todas as Etapas.
|- Durante o scan,evite utilizar o mouse ou teclado!
|- Concluindo,poste: C:\ComboFix.txt

"Tentativa de operaçao ilegal em uma chave do Registro marcada para exclusão."

|- Ao ocorrer este erro,basta reiniciar o computador!
|- "ComboFix é uma ferramenta que pode danificar o sistema. Utilize-o,somente,sob supervisão de analistas de segurança."

Abs!

Luca Albuquerque · Novembro 18, 2013

Re-instalei o navegador e NADA! isso está dando no Mozila, internet explorer, after effects, notpad, premiere, photoshop, etc....

Log:

ComboFix 13-11-16.01 - Luca 17/11/2013 22:57:11.1.4 - x64

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.55.1033.18.4044.2457 [GMT -2:00]

Executando de: c:\users\Luca\Desktop\ComboFix.exe

FW: COMODO Firewall *Enabled* {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}

SP: COMODO Antivirus *Disabled/Outdated* {0C2D2636-923D-EE52-2A83-E643204A8275}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((( Outras Exclusões )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\sXe Injected

c:\program files (x86)\sXe Injected\sXe Injected.exe

c:\program files (x86)\sXe Injected\sXe Injected.txt

c:\programdata\1371770934.bdinstall.bin

c:\users\Luca\AppData\Roaming\KW

c:\users\Luca\AppData\Roaming\KW\bl0001.dat

c:\users\Luca\AppData\Roaming\KW\bl0002.dat

c:\users\Luca\AppData\Roaming\KW\bl0003.dat

c:\users\Luca\AppData\Roaming\KW\bl0004.dat

c:\users\Luca\AppData\Roaming\KW\bl0005.dat

c:\users\Luca\AppData\Roaming\KW\bl0006.dat

c:\users\Luca\AppData\Roaming\KW\bl0007.dat

c:\users\Luca\AppData\Roaming\KW\bl0008.dat

c:\users\Luca\AppData\Roaming\KW\bl0009.dat

c:\users\Luca\AppData\Roaming\KW\bl0010.dat

c:\users\Luca\AppData\Roaming\KW\bl0011.dat

c:\users\Luca\AppData\Roaming\KW\bl0012.dat

c:\users\Luca\AppData\Roaming\KW\bl0013.dat

c:\users\Luca\AppData\Roaming\KW\bl0014.dat

c:\users\Luca\AppData\Roaming\KW\bl0015.dat

c:\users\Luca\AppData\Roaming\KW\bl0016.dat

c:\users\Luca\AppData\Roaming\KW\bl0017.dat

c:\users\Luca\AppData\Roaming\KW\bl0018.dat

c:\users\Luca\AppData\Roaming\KW\bl0019.dat

c:\users\Luca\AppData\Roaming\KW\bl0020.dat

c:\users\Luca\AppData\Roaming\KW\bl0021.dat

c:\users\Luca\AppData\Roaming\KW\bl0022.dat

c:\users\Luca\AppData\Roaming\KW\bl0023.dat

c:\users\Luca\AppData\Roaming\KW\bl0024.dat

c:\users\Luca\AppData\Roaming\KW\bl0025.dat

c:\users\Luca\AppData\Roaming\KW\bl0026.dat

c:\users\Luca\AppData\Roaming\KW\bl0027.dat

c:\users\Luca\AppData\Roaming\KW\bl0028.dat

c:\users\Luca\AppData\Roaming\KW\bl0029.dat

c:\users\Luca\AppData\Roaming\KW\bl0030.dat

c:\users\Luca\AppData\Roaming\KW\bl0031.dat

c:\users\Luca\AppData\Roaming\KW\bl0032.dat

c:\users\Luca\AppData\Roaming\KW\bl0033.dat

c:\windows\security\Database\tmp.edb

.

.

(((((((((((((((( Arquivos/Ficheiros criados de 2013-10-18 to 2013-11-18 ))))))))))))))))))))))))))))

.

.

2013-11-18 01:13 . 2013-11-18 01:13 -------- d-----w- c:\users\Default\AppData\Local\temp

2013-11-16 01:16 . 2013-11-16 03:45 -------- d-----w- C:\Pre_Scan

2013-11-15 21:42 . 2013-11-15 21:42 -------- d-----w- C:\_OTL

2013-11-15 19:47 . 2013-11-15 19:47 -------- d-----w- c:\users\Luca\AppData\Local\Apps

2013-11-15 10:12 . 2013-11-15 10:12 -------- d-----w- c:\program files (x86)\Common Files\COMODO

2013-11-15 04:46 . 2013-11-15 04:46 -------- d-----w- c:\program files (x86)\ASIO4ALL v2

2013-11-15 04:46 . 2013-11-15 04:46 -------- d-----w- c:\program files (x86)\VstPlugins

2013-11-15 04:46 . 2013-11-15 04:46 -------- d-----w- c:\users\Luca\AppData\Roaming\Image-Line

2013-11-15 04:46 . 2013-11-15 04:46 -------- d-----w- c:\program files\Image-Line

2013-11-15 04:45 . 2013-11-15 04:45 -------- d-----w- c:\users\Luca\AppData\Roaming\FlowStone

2013-11-15 04:45 . 2013-11-15 04:45 -------- d-----w- c:\program files (x86)\DSPRobotics

2013-11-15 04:38 . 2013-11-15 04:46 -------- d-----w- c:\program files (x86)\Image-Line

2013-11-13 04:42 . 2013-11-16 07:15 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1A5351E6-5469-442E-9DB4-FFAE7C1CB479}\offreg.dll

2013-11-13 02:54 . 2013-11-16 03:47 -------- d-----w- c:\windows\system32\wbem\repository

2013-11-13 02:52 . 2013-11-13 02:52 -------- d-----w- c:\windows\SysWow64\wbem\Performance

2013-11-13 02:25 . 2013-11-13 03:02 181064 ----a-w- c:\windows\PSEXESVC.EXE

2013-11-13 02:19 . 2013-11-13 02:19 -------- d-----w- C:\RegBackup

2013-11-13 02:18 . 2013-11-13 02:18 -------- d-----w- c:\program files (x86)\Tweaking.com

2013-11-13 00:49 . 2013-10-16 02:20 10280728 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1A5351E6-5469-442E-9DB4-FFAE7C1CB479}\mpengine.dll

2013-11-12 21:05 . 2013-11-12 21:05 -------- d-----w- c:\users\Luca\AppData\Local\Evernote

2013-11-12 21:04 . 2013-11-12 21:04 -------- d-----w- c:\program files (x86)\Evernote

2013-11-12 02:24 . 2013-11-12 02:24 -------- d-----w- c:\programdata\BlueSprig

2013-11-12 02:17 . 2013-11-12 02:17 -------- d-----w- c:\users\Luca\AppData\Roaming\BlueSprig

2013-11-12 02:17 . 2013-11-12 02:24 -------- d-----w- c:\program files (x86)\BlueSprig

2013-11-11 23:21 . 2013-11-17 23:41 -------- d-----w- c:\users\Luca\AppData\Local\CrashDumps

2013-11-11 23:05 . 2013-11-11 23:05 -------- d-----w- C:\first_launch

2013-11-11 12:47 . 2013-11-16 11:03 -------- d-----w- c:\programdata\boost_interprocess

2013-11-11 12:41 . 2013-11-11 12:41 -------- d-----w- C:\zoek

2013-11-09 22:18 . 2013-11-09 22:18 -------- d-----w- c:\users\Luca\AppData\Roaming\Sublime Text 3

2013-11-09 22:18 . 2013-11-09 22:18 -------- d-----w- c:\users\Luca\AppData\Local\Sublime Text 3

2013-11-09 14:18 . 2013-11-09 14:18 388096 ----a-r- c:\users\Luca\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2013-11-09 14:18 . 2013-11-12 02:13 -------- d-----w- c:\program files (x86)\Trend Micro

2013-11-08 01:38 . 2013-11-08 01:38 -------- d-----w- c:\users\Luca\AppData\Local\TechSmith

2013-11-08 01:14 . 2013-11-08 01:14 -------- d-----w- c:\users\Luca\AppData\Roaming\TechSmith

2013-11-08 01:10 . 2013-11-08 01:10 -------- d-----w- c:\programdata\regid.1995-08.com.techsmith

2013-11-08 01:10 . 2013-11-08 01:10 -------- d-----w- c:\program files (x86)\Common Files\TechSmith Shared

2013-11-08 01:10 . 2013-11-08 01:10 -------- d-----w- c:\programdata\TechSmith

2013-11-08 01:10 . 2013-11-08 01:10 -------- d-----w- c:\program files (x86)\TechSmith

2013-11-06 18:25 . 2013-11-06 20:15 -------- d-----w- c:\users\Luca\AppData\Roaming\Solveig Multimedia

2013-11-04 03:16 . 2013-11-04 03:16 -------- d-----w- c:\program files\Neat Video for Premiere

2013-10-30 23:19 . 2013-11-05 00:15 -------- d-----w- c:\users\Luca\AppData\Roaming\Audacity

2013-10-30 23:18 . 2013-10-30 23:18 -------- d-----w- c:\program files (x86)\Audacity

2013-10-30 13:26 . 2013-10-30 13:26 800768 ----a-w- c:\windows\system32\usp10.dll

2013-10-30 13:26 . 2013-10-30 13:26 626688 ----a-w- c:\windows\SysWow64\usp10.dll

2013-10-30 13:21 . 2013-10-30 13:21 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys

2013-10-30 13:21 . 2013-10-30 13:21 84992 ----a-w- c:\windows\system32\WUDFSvc.dll

2013-10-30 13:21 . 2013-10-30 13:21 744448 ----a-w- c:\windows\system32\WUDFx.dll

2013-10-30 13:21 . 2013-10-30 13:21 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll

2013-10-30 13:21 . 2013-10-30 13:21 229888 ----a-w- c:\windows\system32\WUDFHost.exe

2013-10-30 13:21 . 2013-10-30 13:21 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys

2013-10-30 13:21 . 2013-10-30 13:21 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll

2013-10-30 13:19 . 2013-10-30 13:19 9728 ----a-w- c:\windows\system32\Wdfres.dll

2013-10-30 13:19 . 2013-10-30 13:19 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys

2013-10-30 13:19 . 2013-10-30 13:19 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys

2013-10-30 13:19 . 2013-10-30 13:19 2560 ----a-w- c:\windows\system32\drivers\pt-BR\wdf01000.sys.mui

2013-10-30 13:19 . 2013-10-30 13:19 2560 ----a-w- c:\windows\system32\drivers\en-US\wdf01000.sys.mui

2013-10-30 13:18 . 2013-10-30 13:18 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll

2013-10-30 13:18 . 2013-10-30 13:18 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll

2013-10-30 13:18 . 2013-10-30 13:18 226816 ----a-w- c:\windows\system32\dhcpcore6.dll

2013-10-30 13:18 . 2013-10-30 13:18 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll

2013-10-30 13:17 . 2013-10-30 13:17 70656 ----a-w- c:\windows\system32\nlaapi.dll

2013-10-30 13:17 . 2013-10-30 13:17 569344 ----a-w- c:\windows\system32\iphlpsvc.dll

2013-10-30 13:17 . 2013-10-30 13:17 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll

2013-10-30 13:17 . 2013-10-30 13:17 45568 ----a-w- c:\windows\system32\drivers\tcpipreg.sys

2013-10-30 13:17 . 2013-10-30 13:17 303104 ----a-w- c:\windows\system32\nlasvc.dll

2013-10-30 13:17 . 2013-10-30 13:17 246272 ----a-w- c:\windows\system32\netcorehc.dll

2013-10-30 13:17 . 2013-10-30 13:17 216576 ----a-w- c:\windows\system32\ncsi.dll

2013-10-30 13:17 . 2013-10-30 13:17 18944 ----a-w- c:\windows\SysWow64\netevent.dll

2013-10-30 13:17 . 2013-10-30 13:17 18944 ----a-w- c:\windows\system32\netevent.dll

2013-10-30 13:17 . 2013-10-30 13:17 175104 ----a-w- c:\windows\SysWow64\netcorehc.dll

2013-10-30 13:17 . 2013-10-30 13:17 156672 ----a-w- c:\windows\SysWow64\ncsi.dll

2013-10-30 13:16 . 2013-10-30 13:16 503808 ----a-w- c:\windows\system32\srcore.dll

2013-10-30 13:16 . 2013-10-30 13:16 43008 ----a-w- c:\windows\SysWow64\srclient.dll

2013-10-30 13:16 . 2013-10-30 13:16 67072 ----a-w- c:\windows\splwow64.exe

2013-10-30 13:16 . 2013-10-30 13:16 559104 ----a-w- c:\windows\system32\spoolsv.exe

2013-10-30 13:15 . 2013-10-30 13:15 552960 ----a-w- c:\windows\system32\drivers\bthport.sys

2013-10-30 13:15 . 2013-10-30 13:15 245760 ----a-w- c:\windows\system32\OxpsConverter.exe

2013-10-30 13:15 . 2013-10-30 13:15 950128 ----a-w- c:\windows\system32\drivers\ndis.sys

2013-10-30 13:15 . 2013-10-30 13:15 41472 ----a-w- c:\windows\system32\drivers\RNDISMP.sys

2013-10-30 13:14 . 2013-10-30 13:14 514560 ----a-w- c:\windows\SysWow64\qdvd.dll

2013-10-30 13:14 . 2013-10-30 13:14 366592 ----a-w- c:\windows\system32\qdvd.dll

2013-10-30 13:14 . 2013-10-30 13:14 209920 ----a-w- c:\windows\system32\profsvc.dll

2013-10-30 13:14 . 2013-10-30 13:14 3216384 ----a-w- c:\windows\system32\msi.dll

2013-10-30 13:14 . 2013-10-30 13:14 2342400 ----a-w- c:\windows\SysWow64\msi.dll

2013-10-30 13:06 . 2013-10-30 13:06 509952 ----a-w- c:\windows\system32\ntshrui.dll

2013-10-30 13:06 . 2013-10-30 13:06 442880 ----a-w- c:\windows\SysWow64\ntshrui.dll

2013-10-30 13:06 . 2013-10-30 13:06 515584 ----a-w- c:\windows\system32\timedate.cpl

2013-10-30 13:06 . 2013-10-30 13:06 478720 ----a-w- c:\windows\SysWow64\timedate.cpl

2013-10-30 12:50 . 2013-10-30 12:50 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys

2013-10-30 12:49 . 2013-10-30 12:49 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys

2013-10-30 12:49 . 2013-10-30 12:49 31232 ----a-w- c:\windows\SysWow64\prevhost.exe

2013-10-30 12:49 . 2013-10-30 12:49 31232 ----a-w- c:\windows\system32\prevhost.exe

2013-10-30 12:49 . 2013-10-30 12:49 2871808 ----a-w- c:\windows\explorer.exe

2013-10-30 12:49 . 2013-10-30 12:49 2616320 ----a-w- c:\windows\SysWow64\explorer.exe

2013-10-30 12:47 . 2013-06-27 20:05 27456 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe

2013-10-30 12:34 . 2013-11-11 00:30 -------- d-----w- c:\programdata\ProductData

2013-10-30 12:33 . 2013-11-03 21:37 -------- d-----w- c:\users\Luca\AppData\Roaming\IObit

2013-10-29 13:28 . 2013-10-29 13:28 -------- d-----w- c:\programdata\Free Download Manager

2013-10-26 21:40 . 2013-10-26 21:58 -------- d-----w- c:\program files (x86)\SecurityXploded

2013-10-25 01:49 . 2013-11-03 21:34 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine

2013-10-25 01:49 . 2013-11-03 21:35 -------- d-----w- c:\program files (x86)\Winamp

2013-10-23 22:37 . 2013-10-23 22:37 -------- d-----w- c:\users\Luca\AppData\Local\ESN

2013-10-23 22:37 . 2013-11-03 21:17 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins

2013-10-23 22:34 . 2013-10-23 22:34 -------- d-----w- c:\programdata\EA Core

2013-10-23 22:34 . 2013-10-24 13:14 -------- d-----w- c:\programdata\EA Logs

2013-10-23 12:16 . 2013-10-23 12:16 -------- d--h--w- c:\program files (x86)\Common Files\EAInstaller

2013-10-22 22:22 . 2013-10-22 22:23 -------- d-----w- c:\program files (x86)\Origin Games

2013-10-22 22:20 . 2013-10-23 23:58 -------- d-----w- c:\users\Luca\AppData\Roaming\Origin

2013-10-22 22:19 . 2013-10-23 22:34 -------- d-----w- c:\users\Luca\AppData\Local\Origin

2013-10-22 22:18 . 2013-10-22 22:22 -------- d-----w- c:\programdata\Origin

2013-10-22 22:18 . 2013-10-23 22:34 -------- d-----w- c:\programdata\Electronic Arts

2013-10-22 22:17 . 2013-11-03 15:55 -------- d-----w- c:\program files (x86)\Origin

2013-10-19 15:58 . 2013-10-19 15:58 -------- d-----w- c:\users\Luca\AppData\Local\TeknoGods_TotalKillaz.eu

.

.

.

((((((((((((((((((((((((((((((((((((( Relatório Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-11-14 11:38 . 2013-06-18 19:16 709144 ----a-w- c:\windows\system32\drivers\cmdguard.sys

2013-11-14 11:38 . 2013-06-18 19:15 43216 ----a-w- c:\windows\system32\cmdcsr.dll

2013-11-11 23:05 . 2013-09-28 00:13 57096 ----a-w- c:\windows\system32\certsentry.dll

2013-11-11 23:05 . 2013-09-28 00:13 48392 ----a-w- c:\windows\SysWow64\certsentry.dll

2013-11-06 17:35 . 2013-06-25 22:28 281848 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr

2013-11-06 17:35 . 2013-06-25 22:27 281848 ----a-w- c:\windows\SysWow64\PnkBstrB.exe

2013-10-24 13:15 . 2013-06-25 22:27 290184 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0

2013-10-18 23:45 . 2013-10-18 23:45 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-10-09 19:06 . 2013-06-20 22:53 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-10-09 19:06 . 2013-06-20 22:53 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2013-10-09 18:45 . 2013-06-21 06:54 626272 ----a-w- c:\windows\system32\drivers\klif.sys

2013-10-09 18:45 . 2012-07-25 17:53 29280 ----a-w- c:\windows\system32\drivers\klmouflt.sys

2013-10-09 18:45 . 2012-05-25 22:38 29280 ----a-w- c:\windows\system32\drivers\klkbdflt.sys

2013-10-09 18:45 . 2012-06-19 20:28 7717984 ----a-w- c:\windows\system32\drivers\kl1.sys

2013-09-24 10:54 . 2013-06-18 19:16 96800 ----a-w- c:\windows\system32\drivers\inspect.sys

2013-09-24 10:54 . 2013-06-18 19:16 48872 ----a-w- c:\windows\system32\drivers\cmdhlp.sys

2013-09-24 10:54 . 2013-06-18 19:16 23168 ----a-w- c:\windows\system32\drivers\cmderd.sys

2013-09-24 10:53 . 2013-06-18 19:15 354240 ----a-w- c:\windows\SysWow64\guard32.dll

2013-09-24 10:53 . 2013-06-18 19:15 444392 ----a-w- c:\windows\system32\guard64.dll

2013-09-24 10:53 . 2013-06-18 19:15 347864 ----a-w- c:\windows\system32\cmdvrt64.dll

2013-09-24 10:53 . 2013-06-18 19:15 45784 ----a-w- c:\windows\system32\cmdkbd64.dll

2013-09-24 10:53 . 2013-06-18 19:15 280792 ----a-w- c:\windows\SysWow64\cmdvrt32.dll

2013-09-24 10:53 . 2013-06-18 19:15 40664 ----a-w- c:\windows\SysWow64\cmdkbd32.dll

2013-09-07 21:29 . 2013-09-07 21:29 53248 ----a-r- c:\users\Luca\AppData\Roaming\Microsoft\Installer\{06904B2B-5000-4C58-9471-256BA1A303BE}\ARPPRODUCTICON.exe

2013-09-05 09:35 . 2013-09-05 09:35 55504 ----a-w- c:\windows\SysWow64\offreg.dll

2013-09-03 15:35 . 2013-06-20 22:37 278800 ------w- c:\windows\system32\MpSigStub.exe

2013-09-03 14:19 . 2013-06-20 22:12 95544 ----a-w- c:\windows\system32\bcmwlcoi.dll

2013-09-03 14:19 . 2013-06-20 22:12 6656 ----a-w- c:\windows\system32\bcmwlrc.dll

2013-09-03 14:19 . 2013-06-20 22:12 4747328 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS

2013-09-03 14:19 . 2013-06-20 22:12 3952640 ----a-w- c:\windows\system32\bcmihvsrv64.dll

2013-09-03 14:19 . 2013-06-20 22:12 3617792 ----a-w- c:\windows\system32\bcmihvui64.dll

.

.

(((((((((((((((((((((((((( Pontos de Carregamento do Registro )))))))))))))))))))))))))))))))))))))))

.

.

*Nota* entradas vazias e legítimas por padrão não são apresentadas.

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2012-10-01 23:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2012-10-01 23:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2012-10-01 23:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17 130736 ----a-w- c:\users\Luca\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17 130736 ----a-w- c:\users\Luca\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17 130736 ----a-w- c:\users\Luca\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"uTorrent"="c:\users\Luca\AppData\Roaming\uTorrent\uTorrent.exe" [2013-06-20 1045072]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2011-04-30 284440]

"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe" [2013-10-09 356128]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]

"tvncontrol"="c:\program files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" [2013-11-14 2327248]

.

c:\users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\Luca\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-6-5 27370808]

EvernoteClipper.lnk - c:\program files (x86)\Evernote\Evernote\EvernoteClipper.exe [2013-10-22 1103712]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2011-3-25 1137952]

HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]

Start GeekBuddy.lnk - c:\program files (x86)\Comodo\GeekBuddy\launcher.exe "unit_manager.exe" [2013-11-14 49360]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux3"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 andnetadb;ADB Interface DriverNet;c:\windows\system32\Drivers\lgandnetadb.sys;c:\windows\SYSNATIVE\Drivers\lgandnetadb.sys [x]

R3 AndNetDiag;LGE AndroidNet USB Serial Port;c:\windows\system32\DRIVERS\lgandnetdiag64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandnetdiag64.sys [x]

R3 ANDNetModem;LGE AndroidNet USB Modem;c:\windows\system32\DRIVERS\lgandnetmodem64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandnetmodem64.sys [x]

R3 andnetndis;LGE AndroidNet NDIS Ethernet Adapter;c:\windows\system32\DRIVERS\lgandnetndis64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandnetndis64.sys [x]

R3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys;c:\windows\SYSNATIVE\DRIVERS\athurx.sys [x]

R3 cmdvirth;COMODO Virtual Service Manager;c:\program files\COMODO\COMODO Internet Security\cmdvirth.exe;c:\program files\COMODO\COMODO Internet Security\cmdvirth.exe [x]

R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsPStor.sys [x]

R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x]

R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 tsusbhub;tsusbhub;tsusbhub [x]

S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys;c:\windows\SYSNATIVE\DRIVERS\cmderd.sys [x]

S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys;c:\windows\SYSNATIVE\DRIVERS\cmdguard.sys [x]

S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdhlp.sys [x]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]

S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]

S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]

S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]

S2 CLPSLauncher;COMODO LPS Launcher;c:\program files (x86)\Common Files\COMODO\launcher_service.exe;c:\program files (x86)\Common Files\COMODO\launcher_service.exe [x]

S2 DragonUpdater;COMODO Dragon Update Service;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe;c:\program files (x86)\Comodo\Dragon\dragon_updater.exe [x]

S2 GeekBuddyRSP;GeekBuddyRSP Server;c:\program files (x86)\Common Files\COMODO\GeekBuddyRSP.exe;c:\program files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [x]

S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x]

S2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]

S2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [x]

S2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]

S2 NoIPDUCService4;NO-IP DUC v4;c:\program files (x86)\No-IP\ducservice.exe;c:\program files (x86)\No-IP\ducservice.exe [x]

S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]

S3 BTWAMPFL;btwampfl;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]

S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]

S3 ICCS;Intel® Integrated Clock Controller Service - Intel® ICCS;c:\program files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [x]

S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]

S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-11-14 21:03 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe

.

Conteúdo da pasta 'Tarefas Agendadas'

.

2013-11-18 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-20 19:06]

.

2013-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-04 00:45]

.

2013-11-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-07-04 00:45]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]

2013-11-03 21:36 2486592 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2012-10-01 23:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2012-10-01 23:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2012-10-01 23:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17 164016 ----a-w- c:\users\Luca\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17 164016 ----a-w- c:\users\Luca\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17 164016 ----a-w- c:\users\Luca\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-06-05 17:17 164016 ----a-w- c:\users\Luca\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2000-01-01 1664000]

"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cistray.exe" [2013-11-11 1612504]

"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-08-09 172016]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-08-09 399856]

"Persistence"="c:\windows\system32\igfxpers.exe" [2013-08-09 442352]

.

------- Scan Suplementar -------

.

uLocal Page = c:\windows\system32\blank.htm

IE: {{a9eaf767-5ae6-4b79-a213-5963c37cbae6} - {da2e16d5-254c-4e11-8fed-2a1b201de379} -

TCP: Interfaces\{5F760EAA-91AA-42E2-B362-A573FDF94F4B}: NameServer = 192.168.25.1

TCP: Interfaces\{5F760EAA-91AA-42E2-B362-A573FDF94F4B}\34F6E6563647560237560266F6270236160716A7: DhcpNameServer = 192.168.25.1

TCP: Interfaces\{5F760EAA-91AA-42E2-B362-A573FDF94F4B}\C6579637027766: DhcpNameServer = 192.168.43.1

Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL

FF - ProfilePath - c:\users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\9grtisnz.default\

FF - prefs.js: browser.startup.homepage - about:home

FF - ExtSQL: 2013-10-29 11:28; fdm_ffext@freedownloadmanager.org; c:\programdata\Free Download Manager\Firefox\Extensions\1.6.0

FF - ExtSQL: 2013-10-30 08:34; ascsurfingprotection@iobit.com; c:\users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\9grtisnz.default\extensions\ascsurfingprotection@iobit.com

FF - ExtSQL: !HIDDEN! 2013-07-03 23:24; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

.

- - - - ORFÃOS REMOVIDOS - - - -

.

Toolbar-Locked - (no file)

Wow6432Node-HKU-Default-Run-MP3 Skype Recorder - c:\program files (x86)\MP3 Skype Recorder\MP3 Skype Recorder.exe

Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

Toolbar-Locked - (no file)

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

AddRemove-@@__UNKNOWN__@@SanDiskSecureAccess_Manager.exe - c:\users\Luca\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe

.

.

.

--------------------- CHAVES DO REGISTRO BLOQUEADAS ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]

@Denied: (2) (LocalSystem)

"{0347C33E-8762-4905-BF09-768834316C61}"=hex:51,66,7a,6c,4c,1d,38,12,50,c0,54,

07,50,c9,6b,0c,c0,1f,35,c8,31,6f,28,75

"{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}"=hex:51,66,7a,6c,4c,1d,38,12,ce,98,c3,

35,c7,5c,a0,09,c1,9c,6a,63,e2,38,41,ce

"{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}"=hex:51,66,7a,6c,4c,1d,38,12,1d,cf,77,

51,95,a1,d1,09,ee,9c,1f,b7,fe,e1,bb,5b

"{73455575-E40C-433C-9784-C78DC7761455}"=hex:51,66,7a,6c,4c,1d,38,12,1b,56,56,

77,3e,aa,52,06,e8,92,84,cd,c2,28,50,41

"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,

72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57

"{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}"=hex:51,66,7a,6c,4c,1d,38,12,07,5b,93,

aa,6e,60,ba,0b,f0,6d,b2,b7,80,44,00,83

"{B4F3A835-0E21-4959-BA22-42B3008E02FF}"=hex:51,66,7a,6c,4c,1d,38,12,5b,ab,e0,

b0,13,40,37,0c,c5,34,01,f3,05,d0,46,eb

"{CC59E0F9-7E43-44FA-9FAA-8377850BF205}"=hex:51,66,7a,6c,4c,1d,38,12,97,e3,4a,

c8,71,30,94,01,e0,bc,c0,37,80,55,b6,11

"{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}"=hex:51,66,7a,6c,4c,1d,38,12,64,8d,5a,

d4,85,0b,c0,07,d6,bc,e8,e4,66,85,97,ab

"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,

df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd

"{E33CF602-D945-461A-83F0-819F76A199F8}"=hex:51,66,7a,6c,4c,1d,38,12,6c,f5,2f,

e7,77,97,74,03,fc,e6,c2,df,73,ff,dd,ec

"{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}"=hex:51,66,7a,6c,4c,1d,38,12,91,fc,ec,

fb,7c,81,45,0a,c2,d4,4d,32,e4,48,ec,42

"{555D4D79-4BD2-4094-A395-CFC534424A05}"=hex:51,66,7a,6c,4c,1d,38,12,17,4e,4e,

51,e0,05,fa,05,dc,83,8c,85,31,1c,0e,11

.

[HKEY_USERS\S-1-5-21-1497592914-3536481116-1766862959-1000\Software\SecuROM\License information*]

@Allowed: (Read) (RestrictedCode)

"datasecu"=hex:7a,00,58,27,ca,21,c1,f9,f8,d4,57,6d,91,68,1f,73,14,e5,49,30,c6,

a1,96,0d,f1,dd,72,2c,dc,bc,db,fc,52,2b,3f,22,d5,16,8b,1d,f8,61,6e,77,80,2e,\

"rkeysecu"=hex:09,16,5c,b4,de,bd,3d,d6,71,57,b1,f5,e4,d5,f5,2b

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\VMware, Inc.\VMnetLibSaved\VMnetBridge\Adapters]

@DACL=(02 0000)

"Test"=dword:00000000

.

Tempo para conclusão: 2013-11-17 23:22:04

ComboFix-quarantined-files.txt 2013-11-18 01:22

.

Pré-execução: 240.666.288.128 bytes disponíveis

Pós execução: 243.431.305.216 bytes disponíveis

.

- - End Of File - - 9EE654CF4C93102677BB2B6743CA2327

DigRam · Novembro 18, 2013

Bom Dia! Luca Albuquerque

< Como ativar o a abrir ou salvar como vinculada de recursos ao abrir documentos >

Quando você baixa um arquivo da Internet, por exemplo, um zip ou .doc arquivo, você não pode ser solicitado com um abrir ou salvar como caixa de diálogo. Para ativar os recursos abrir ou salvar como, você deve definir as propriedades na guia Tipos de arquivo e clique para selecionar a caixa de seleção Confirmar abrir após baixar.

|- Creio que este tutorial possa lhe ser útil,desde que o direcione para o seu Windows7.

-/-

|- Verifique se já pode executar a ferramenta Zoek.
|- Tente com a extensão zoek.com ou zoek.scr.

-/-

|- Baixe: < zoek > ( ... by Smeenk )

|- Ou aqui! < zoek.exe >

|- Salve-o e descompacte-o para o desktop!
|- Estarão disponíveis: zoek.com, zoek.scr, zoek.pif e zoek.exe
|- Desabilite seu antivírus!
|- Para Windows 7,execute zoek.com ou zoek.scr como administrador.

hijackthis;
shortcutfix;
chromelook;
autoclean;
emptyalltemp;

|- Copie e cole estas informações,em vermelho,no campo da ferramenta.
|- Clique "Run Script".

Zoek.exe is running now.
Do not start any browser windows, they will be closed automatically.
Please wait! This window will close when finished.
A logfile will open afterwards and can also be found on your systemdrive as zoek-results.log

|- Surgirão estas informações,pedindo-lhe que aguarde o relatório.

|- Aceite e/ou confirme o reboot!

zoek.hta failed by unknown error.
Restart computer, and try again.

|- Ps: Ao obter algum erro,reinicie o PC e execute,novamente,a ferramenta.
|- Poste o relatório,que estará em C:\zoek-results.txt <<

A+

Luca Albuquerque · Novembro 18, 2013

Não dá pra executar os arquivos .com e .src como administrador!

DigRam · Novembro 18, 2013

Bom Dia! Luca Albuquerque

< Como ativar o a abrir ou salvar como vinculada de recursos ao abrir documentos >

|- Tentou esta ativação ao seu Windows7?

.... editando!

< http://answers.microsoft.com/pt-br/windows/forum/windows_7-windows_install/como-ativar-a-fun%C3%A7%C3%A3o-deseja-abrir-ou/139dd349-bf62-e011-8dfc-68b599b31bf5?msgId=3fa97fc0-2f6c-e011-8dfc-68b599b31bf5&tab=question&status=AllReplies#tabs'>como ativar a função: "deseja abrir ou salvar este arquivo?" no Windows 7 ??? >

"Dica: Se possuir gerenciador de downloads,como: Download Acelerator,Orbit,Puxa rápido dentre outros, é possível que a opção no navegador fique desabilitada.
Se estiver utilizando o Intenet Explorer 9, a janela de download não aparece mais como uma espécie de popup no meio da tela. Ao invés disso ela aparecerá como uma barra na parte de baixo do navegador."

|- Devido a isso,recomendo desinstalar seu Gerenciador de Download.

A+

Luca Albuquerque · Novembro 19, 2013

A questão em si não é no navegador, e sim nos programas de edição como DW, AF etc... que quando eu for salvar um projeto, eu sempre salvo no desktop, só que não aparece nos favoritos como mostra na quela imagem que eu te mandei.

Segue o log:

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\ProgramData\boost_interprocess deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [04/07/2013 00:24]

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

"{87F8774F-B485-47E2-A755-A40A8A5E886D}"="C:\Users\Luca\AppData\Local\GAS Tecnologia\GBBD\cef\sf.xpi" [19/08/2013 11:22]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\9grtisnz.default

- Undetermined - C:\Program Files (x86)\IObit Apps Toolbar\FF

- Free Download Manager plugin - %ProfilePath%\extensions\fdm_ffext@freedownloadmanager.org

- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com

- FlashGot - %ProfilePath%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi

- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox

- Skype Click to Call - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Luca\AppData\Roaming\Mozilla\Firefox\Profiles\9grtisnz.default

8485DA8E2483FCE6D132ABA71ED05ACE - C:\Users\Luca\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll - Módulo de Proteção - Caixa Economica Federal

4BF70B35B943BD73BD6E13EB7C1BA4B3 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll - Shockwave Flash

341B3AE026B143DBC17BA1E1E0BAE3D6 - C:\Users\Luca\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player

C899B98999270821EDFFA56044DE2377 - C:\Users\Luca\AppData\Roaming\raidcall\plugins\nprcplugin.dll - Raidcall plugin

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

cpcimcpneglaogklgcfniikmjipcgheg - No path found[]

dchlnpcodkpfdpacogkljefecpegganj - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\urladvisor.crx[18/08/2012 16:06]

hghkgaeecgjhjkannahfamoehjmkjail - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\content_blocker_chrome.crx[18/08/2012 16:06]

jagncdcchgajhfhijbbhecadmaiegcmh - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\ChromeExt\virtkbd.crx[21/06/2013 05:22]

lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[09/10/2013 11:59]

nfengeggddojhakldhlpjdlddgkkjkdd - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx[12/10/2013 13:04]

odpccdgkmiicgocepijnaeihjnjnomca - No path found[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

nnjbodopomfddehlalfilheomcahbpei - C:\Users\Luca\AppData\Local\GAS Tecnologia\GBBD\cef\sf.crx[19/08/2013 19:27]

Google Docs - Luca - Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Luca - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube Center - Luca - Default\Extensions\bcegdpionpopahcglnfiiioapcclamdj

YouTube - Luca - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Luca - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

retroLink - Luca - Default\Extensions\fialekndleeclflilkpdcgdbboiibdab

AdBlock - Luca - Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom

Dimensions - Luca - Default\Extensions\hdmihohhdcbejdkidbfijmfehjbnmifk

Virtual Keyboard - Luca - Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh

MEGA - Luca - Default\Extensions\kpgogfgfingilcbkpahnggpfdabapnol

Advanced SystemCare Surfing Protection - Luca - Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd

Google Wallet - Luca - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

GBBD Caixa Economica Federal - Luca - Default\Extensions\nnjbodopomfddehlalfilheomcahbpei

Checker Plus for Gmail™ - Luca - Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj

LogMeIn - Luca - Default\Extensions\omkjapkpkiciphacnalicgmmcelfolon

Avatar - Luca - Default\Extensions\oogmkbpkoblajkomflhkkdmbfggdmefd

Gmail - Luca - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

DefaultTab - C:\Windows\sysWoW64\config\systemprofile - Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc

==== Chrome Fix ======================

C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_flashget.en.softonic.com_0.localstorage deleted successfully

C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_flashget.en.softonic.com_0.localstorage-journal deleted successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] not found

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== shortcuts on Users Desktops ======================

C:\Users\Luca\Desktop\Adobe After Effects CS6.lnk - C:\Program Files (x86)\Adobe\Adobe After Effects CS6\Support Files\AfterFX.exe

C:\Users\Luca\Desktop\Adobe Bridge CS6.lnk - C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe

C:\Users\Luca\Desktop\Adobe Dreamweaver CS6.lnk - C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe

C:\Users\Luca\Desktop\Adobe Fireworks CS6.lnk - C:\Program Files (x86)\Adobe\Adobe Fireworks CS6\Fireworks.exe

C:\Users\Luca\Desktop\Adobe Photoshop CS6.lnk - C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\Photoshop.exe

C:\Users\Luca\Desktop\Adobe Premiere Pro CS6.lnk - C:\Program Files (x86)\Adobe\Adobe Premiere Pro CS6\Adobe Premiere Pro.exe

C:\Users\Luca\Desktop\APB Reloaded.lnk - C:\Program Files (x86)\Hoplon\APB Reloaded\Launcher\APBLauncher.exe

C:\Users\Luca\Desktop\Donate.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=S3AQ8V3XRWWYN

C:\Users\Luca\Desktop\Dropbox.lnk - C:\Users\Luca\Dropbox\Arquivos

C:\Users\Luca\Desktop\Evernote.lnk - C:\Program Files (x86)\Evernote\Evernote\Evernote.exe

C:\Users\Luca\Desktop\Free Disinfection.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.sosvirus.net/viewforum.php?f=6

C:\Users\Luca\Desktop\g3n-h@ckm@n's tools.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://security-helpzone.com/gen-hackman/

C:\Users\Luca\Desktop\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\Luca\Desktop\Play withSIX.lnk - C:\Windows\Installer\{D7F3EEAD-183C-47DE-BDC5-593539573F97}\NewShortcut2_C1092D11915B4AC3A2829A0DFBAD2066.exe

C:\Users\Luca\Desktop\RaidCall.lnk - C:\Program Files (x86)\RaidCall\raidcall.exe

C:\Users\Luca\Desktop\Smite.lnk - C:\Program Files (x86)\Hi-Rez Studios\HiRezLauncherUI.exe game=300 product=17

C:\Users\Luca\Desktop\Tweaking.com - Windows Repair (All in One).lnk - C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\Repair_Windows.exe

C:\Users\Luca\Desktop\WampServer.lnk - C:\wamp\wampmanager.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Audacity.lnk - C:\Program Files (x86)\Audacity\audacity.exe

C:\Users\Public\Desktop\Camtasia Studio 8.lnk - C:\Program Files (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe

C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner64.exe

C:\Users\Public\Desktop\DAEMON Tools Lite.lnk - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

C:\Users\Public\Desktop\FL Studio 11.lnk - C:\Program Files (x86)\Image-Line\FL Studio 11\FL.exe

C:\Users\Public\Desktop\Game Booster 3.lnk - C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe

C:\Users\Public\Desktop\JetBoost.lnk - C:\Program Files (x86)\BlueSprig\JetBoost\JetBoost.exe

C:\Users\Public\Desktop\JetClean.lnk - C:\Program Files (x86)\BlueSprig\JetClean\JetClean.exe

C:\Users\Public\Desktop\Origin.lnk - C:\Program Files (x86)\Origin\Origin.exe

C:\Users\Public\Desktop\Skype.lnk - C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe

C:\Users\Public\Desktop\SlimDrivers.lnk - C:\Windows\Installer\{AA5009F6-E65C-4DBD-92B8-988F0ADD1E99}\Icon.exe

C:\Users\Public\Desktop\VMware Player.lnk - C:\Program Files (x86)\VMware\VMware Player\vmplayer.exe

C:\Users\Public\Desktop\Wise Registry Cleaner.lnk - C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2\ASIO4ALL v2 Instruction Manual.lnk - C:\Program Files (x86)\ASIO4ALL v2\ASIO4ALL v2 Instruction Manual.pdf

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2\ASIO4ALL Web Site.lnk - C:\Program Files (x86)\ASIO4ALL v2\ASIO4ALL Web Site.url

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2\Uninstall.lnk - C:\Program Files (x86)\ASIO4ALL v2\uninstall.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis\HiJackThis.lnk - C:\Users\Luca\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\IL Download Manager.lnk - C:\Program Files (x86)\Image-Line\Downloader\ILDownloadManager.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\More....lnk - C:\Program Files (x86)\Image-Line\Shared\Start

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SanDisk SecureAccess Manager\Desinstalar.lnk - C:\Users\Luca\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe --uninstall

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SanDisk SecureAccess Manager\SanDisk SecureAccess Manager.lnk - C:\Users\Luca\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk - C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk - C:\Program Files (x86)\Audacity\audacity.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk - C:\Program Files (x86)\Image-Line\FL Studio 11\FL.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo\COMODO Firewall\COMODO Firewall.lnk - C:\Program Files (x86)\COMODO\COMODO Internet Security\cistray.exe --shortcut

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo\GeekBuddy\GeekBuddy.lnk - C:\Program Files (x86)\Comodo\GeekBuddy\launcher.exe "unit_manager.exe" "lps-ca"

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote\Evernote.lnk - C:\Windows\Installer\{32D39568-3B77-11E3-88CE-00163E98E7D0}\Evernote.ico

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Battlefield 3™.lnk -

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line\More....lnk - C:\Program Files (x86)\Image-Line\Shared\Start

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\Help.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\help.html

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller\Uninstall IObit Uninstaller.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallDisplay.exe uninstall_start

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBoost\Desinstalar JetBoost.lnk - C:\Program Files (x86)\BlueSprig\JetBoost\unins000.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBoost\JetBoost.lnk - C:\Program Files (x86)\BlueSprig\JetBoost\JetBoost.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetClean\Desinstalar JetClean.lnk - C:\Program Files (x86)\BlueSprig\JetClean\unins000.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetClean\JetClean.lnk - C:\Program Files (x86)\BlueSprig\JetClean\JetClean.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\Legal Information.lnk - C:\Program Files\Neat Video for Premiere\Legal.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\Read Me.lnk - C:\Program Files\Neat Video for Premiere\ReadMe.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\Uninstall.lnk - C:\Program Files\Neat Video for Premiere\unins000.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\User Guide.lnk - C:\Program Files\Neat Video for Premiere\NeatVideo.pdf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\What's New.lnk - C:\Program Files\Neat Video for Premiere\WhatsNew.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\Web Links\Bug report form.lnk - C:\Program Files\Neat Video for Premiere\LINKS\Bug report form.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\Web Links\Download.lnk - C:\Program Files\Neat Video for Premiere\LINKS\Download.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\Web Links\Neat Video forum.lnk - C:\Program Files\Neat Video for Premiere\LINKS\Neat Video forum.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\Web Links\Neat Video web page.lnk - C:\Program Files\Neat Video for Premiere\LINKS\Neat Video web page.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere\Web Links\Support by e-mail.lnk - C:\Program Files\Neat Video for Premiere\LINKS\Support by e-mail.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Desinstalar Origin.lnk - C:\Program Files (x86)\Origin\OriginUninstall.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin\Origin.lnk - C:\Program Files (x86)\Origin\Origin.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk - C:\Program Files (x86)\Comodo\GeekBuddy\launcher.exe "unit_manager.exe"

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\Camtasia Recorder 8.lnk - C:\Windows\Installer\{BFA04EE0-8240-4667-8D53-45496A901C33}\CamtasiaIcons.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\Camtasia Studio 8.lnk - C:\Windows\Installer\{BFA04EE0-8240-4667-8D53-45496A901C33}\CamtasiaIcons.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com\Windows Repair (All in One)\Tweaking.com - Registry Backup.lnk - C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\files\registry_backup_tool\TweakingRegistryBackup.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com\Windows Repair (All in One)\Tweaking.com - Windows Repair (All in One).lnk - C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\Repair_Windows.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com\Windows Repair (All in One)\Uninstall Tweaking.com - Windows Repair (All in One).lnk - C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\uninstall.exe "/U:C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\Uninstall\uninstall.xml"

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk - C:\Program Files (x86)\VideoLAN\VLC\Documentation.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk - C:\Program Files (x86)\VideoLAN\VLC\NEWS.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe --reset-config --reset-plugins-cache vlc://quit

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk - C:\Program Files (x86)\VideoLAN\VLC\VideoLAN Website.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe -Iskins

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Registry Cleaner\Wise Registry Cleaner.lnk - C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VMware Player.lnk - C:\Program Files (x86)\VMware\VMware Player\vmplayer.exe

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VMware Player.lnk - C:\Program Files (x86)\VMware\VMware Player\vmplayer.exe

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Nokia Care Suite.lnk - C:\Program Files (x86)\Nokia\Nokia Care Suite\Application Launcher\bin\ApplicationLauncher.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\VMware Player.lnk - C:\Program Files (x86)\VMware\VMware Player\vmplayer.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk -

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9d91276b0be3e46b\pinned.lnk -

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Skype.lnk - C:\Windows\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Uninstall Programs.lnk - C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\FileZilla.lnk - C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gerenciador de Tarefas do Windows.lnk - C:\Windows\System32\taskmgr.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Luca\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe

==== shortcuts After Repair ======================

C:\Users\Luca\Desktop\Donate.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Users\Luca\Desktop\Free Disinfection.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Users\Luca\Desktop\g3n-h@ckm@n's tools.lnk - C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\cpcimcpneglaogklgcfniikmjipcgheg deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\odpccdgkmiicgocepijnaeihjnjnomca deleted successfully

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnTBMon deleted successfully

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish deleted successfully

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui deleted successfully

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\oneID Updater deleted successfully

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware deleted successfully

==== HijackThis Entries ======================

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll

O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL

O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL

O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave

O4 - HKCU\..\Run: [uTorrent] "C:\Users\Luca\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED

O4 - Startup: Dropbox.lnk = Luca\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

O4 - Global Startup: Bluetooth.lnk = ?

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Start GeekBuddy.lnk = C:\Program Files (x86)\Comodo\GeekBuddy\launcher.exe

O9 - Extra button: Teclado Virtual - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll

O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra button: Clique para Telefonar do Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra 'Tools' menuitem: Clique para Telefonar do Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html

O9 - Extra button: (no name) - {a9eaf767-5ae6-4b79-a213-5963c37cbae6} - (no file)

O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: Verificação de URLs - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll

O9 - Extra button: Exibir ou ocultar HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O17 - HKLM\System\CCS\Services\Tcpip\..\{5F760EAA-91AA-42E2-B362-A573FDF94F4B}: NameServer = 192.168.25.1

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Serviço do Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe

O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe

O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Unknown owner - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: GeekBuddyRSP Server (GeekBuddyRSP) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe

O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: Intel® Integrated Clock Controller Service - Intel® ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe

O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe

O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NO-IP DUC v4 (NoIPDUCService4) - Unknown owner - C:\Program Files (x86)\No-IP\ducservice.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe

O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.22\bin\httpd.exe

O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Luca\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Luca\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

C:\Users\Luca\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\Luca\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on 19/11/2013 at 11:46:01,59 ======================

DigRam · Novembro 20, 2013

Bom Dia! Luca Albuquerque

< 11 dicas para você ficar craque no Explorer do Windows 7 >

#####
7. Adicione links e programas aos favoritos

Talvez você nem tenha percebido, mas, assim como nos navegadores, o Windows Explorer possui uma área destinada à criação de atalhos para os conteúdos mais acessados. Para adicionar uma pasta a essa seção, basta você arrastar o diretório desejado para o item “Favoritos” com o ícone de uma estrela, localizado na parte superior esquerda da janela.
Contudo, você também pode acrescentar programas a tal função:

01. Abra o Menu Iniciar, digite “C:\Users\(Seu Usuário)\Links” no campo “Pesquisar programas e arquivos” e pressione Enter;

02. Cole os atalhos dos softwares que você deseja na pasta apresentada.

Feito isso, instantaneamente, esses atalhos são reproduzidos nos Favoritos do Windows Explorer.
#####

#####
11. “Modo Deus”

Deixamos como última dica o recurso popularmente conhecido como “GodMod”, ou “Modo Deus” em português. Antes que você se anime demais com o título dessa função, é importante deixar claro que ela não promove melhorias de desempenho na máquina. Esse mecanismo serve apenas como uma central de atalhos para as principais tarefas do Windows.
Para cessá-lo, crie uma nova pasta e a nomeie como “GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}” (sem aspas). O diretório é automaticamente transformado em um arquivo do tipo “Pasta de arquivos”, pelo qual você pode acessar mais de 270 tarefas do sistema operacional.

Na verdade, você pode substituir o texto antes do ponto, que no exemplo citado acima foi “GodMod”, pelo que quiser. O importante é manter o comando entre colchetes.
#####

|- Estas dicas podem lhe ajudar,a ter seus atalhos ou softwares,nos Favoritos.

Abs!

Luca Albuquerque · Novembro 20, 2013

Emtão, na pasta tem tudo, o desktop e tals... mas na hora, não aparece!

DigRam · Novembro 20, 2013

Boa Tarde! Luca Albuquerque

|- Por aqui,nada mais a realizar!

|- Caso queira,posso mover o seu Tópico a outro setor,onde receberás novas orientações de Membros de outras Salas que queiram lhe ajudar e lhe orientar na solução deste problema,que não esta associado a vírus.

Ps: Em relação aos procedimentos de limpeza e desinfecção,seu caso está concluido.

Abs!

DigRam · Novembro 25, 2013

PROBLEMA RESOLVIDO

Caso o autor necessite que o tópico seja reaberto basta enviar uma Mensagem Privada para um Moderador com um link para o tópico.

Arquivado

[Resolvido] &nbspPC Lento, travamentos, problemas com atalhos, etc...

Recommended Posts

Luca Albuquerque 1

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

Luca Albuquerque 1

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

Luca Albuquerque 1

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

Luca Albuquerque 1

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

Luca Albuquerque 1

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

DigRam 144

Compartilhar este post

Link para o post

Compartilhar em outros sites

PHP+Codeigniter - Adicionar Registro Plano de Contas

Javascript - Passar Parâmetros para uma Função.

PHP - Consulta MySql para prazo de dias

Fóruns

Tempo Real

Informação importante