[Resolvido] PC infectado por propagandas

MasterFuxi · Outubro 18, 2014

Olá. Recentemente minha máquina foi infectada por propagandas maliciosas (GoSave, NextCoup e outros). Gostaria de uma análise, por gentileza.

HiJackThis

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 16:26:53, on 18/10/2014

Platform: Unknown Windows (WinNT 6.02.1008)

MSIE: Internet Explorer v11.0 (11.00.9600.17344)

Boot mode: Normal

Running processes:

C:\Users\Fuxi\AppData\Local\Viber\Viber.exe

C:\Program Files (x86)\Sound Volume Hotkeys\SoundVolumeHotkeys.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Steam\steam.exe

C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\HiJackThis\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?type=ds&ts=1413461788&from=wpc&uid=MAXTORXSTM3160215AS_9RA5RFEYXXXX9RA5RFEY&q={searchTerms}

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [soundVolumeHotkeys.{9547D1C7-4F18-4104-8674-046DCD12BDF9}] C:\Program Files (x86)\Sound Volume Hotkeys\SoundVolumeHotkeys.exe -a

O4 - HKCU\..\Run: [Viber] "C:\Users\Fuxi\AppData\Local\Viber\Viber.exe" StartMinimized

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000

O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra button: Clique para Telefonar do Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra 'Tools' menuitem: Clique para Telefonar do Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL

O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

O23 - Service: ACP User Service (amdacpusrsvc) - Unknown owner - C:\AMD\amdacpusrsvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)

O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 9713 bytes

DigRam · Outubro 19, 2014

Boa Noite! MasterFuxi

> Baixe: < > ( ... by Oleg N. Scherbakov )

> Salve-o no desktop!
> Desabilite seu antivírus!
> Para Windows 7,clique direito em JRT.exe e execute-o como:

> Aguarde a conclusão e poste o relatório. ( JRT.txt )

> Baixe: < > ( ... par Xplode )

> Ou daqui: < AdwCleaner >
> Ao acessar,clique em "Download Now".

> Salve-o no desktop!

< >

> Clique direito em adwcleaner.exe,e escolha sua execução como administrador.

> Ps: Dê início ao scan,clicando em "Examinar".

< >

> Ao concluir,clique "Limpar" >> Ok >> Ok >> Ok.
> Copie o log ou clique "Relatório".
> Poste: < C:\AdwCleaner\AdwCleaner[s0].txt >

A+

MasterFuxi · Outubro 19, 2014

Olá. Segue abaixo os relatórios:

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.3.3 (10.14.2014:1)

OS: Windows 8.1 Pro with Media Center x64

Ran by Fuxi on 19/10/2014 at 2:35:12,89

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealKeeper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealKeeper_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateDealKeeper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateDealKeeper_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilDealKeeper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilDealKeeper_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\DealKeeper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\DealKeeper_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\updateDealKeeper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\updateDealKeeper_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\utilDealKeeper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\utilDealKeeper_RASMANCS

~~~ Files

Successfully disinfected: [shortcut] C:\Users\Fuxi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

Successfully disinfected: [shortcut] C:\Users\Fuxi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\baidu"

Successfully deleted: [Folder] "C:\Users\Fuxi\AppData\Roaming\baidu"

Successfully deleted: [Folder] "C:\Users\Fuxi\appdata\local\chromatic browser"

Successfully deleted: [Folder] "C:\Users\Fuxi\appdata\local\torch"

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"

~~~ FireFox

Successfully deleted the following from C:\Users\Fuxi\AppData\Roaming\mozilla\firefox\profiles\0r6uoxo7.default\prefs.js

user_pref("browser.search.defaultenginename", "webssearches");

user_pref("browser.search.selectedEngine", "webssearches");

user_pref("extensions.FVCzi7ZicD0k9PRu.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11

user_pref("extensions.JJ7NdqlU4wrLlU17.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11

user_pref("extensions.j2TY4C2vsprvNpT0.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11

user_pref("extensions.j2TY4C2vsprvNpT0.url", "hxxp://toolkitjob.in/sync2/?q=hfZ9ofV9CShEAen0rHnHqchTB6lKDzt4oktitNtVh7n0rjnFrdw7rjsFqdr5tMFHhd9FqdwErjCGrdsErjrMDMlGojUMAe4Uojk

Emptied folder: C:\Users\Fuxi\AppData\Roaming\mozilla\firefox\profiles\0r6uoxo7.default\minidumps [2 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 19/10/2014 at 2:37:33,27

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

AdwCleaner

# AdwCleaner v4.000 - Report created 19/10/2014 at 02:40:08

# DB v2014-10-17.9

# Updated 12/10/2014 by Xplode

# Operating System : Windows 8.1 Pro with Media Center (64 bits)

# Username : Fuxi - GASPAR

# Running from : C:\Users\Fuxi\Downloads\adwcleaner_4.000.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Public\Documents\baidu

Folder Deleted : C:\Users\Administrator\AppData\Local\Chromatic Browser

Folder Deleted : C:\Users\Guest\AppData\Local\Chromatic Browser

Folder Deleted : C:\Users\Fuxi\AppData\Roaming\EZDownloader

Folder Deleted : C:\Users\Fuxi\AppData\Roaming\SkypEmoticons

Folder Deleted : C:\Users\Administrator\AppData\Local\torch

Folder Deleted : C:\Users\Guest\AppData\Local\torch

Folder Deleted : C:\ProgramData\Trusted Publisher

Folder Deleted : C:\ProgramData\GoSaavee

Folder Deleted : C:\ProgramData\YouutuBeAAddBLocke

Folder Deleted : C:\Users\Fuxi\AppData\Roaming\Mozilla\Firefox\Profiles\0r6uoxo7.default\Extensions\d@S0FA.edu

Folder Deleted : C:\Users\Fuxi\AppData\Roaming\Mozilla\Firefox\Profiles\0r6uoxo7.default\Extensions\EfZ1M@m.org

Folder Deleted : C:\Users\Fuxi\AppData\Roaming\Mozilla\Firefox\Profiles\0r6uoxo7.default\Extensions\rGi@M.edu

Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

Folder Deleted : C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

Folder Deleted : C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

[!] Folder Deleted : C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

[!] Folder Deleted : C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

[!] Folder Deleted : C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdmnmlljhphlpopnlhogdoeokcoiholi

[!] Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

[!] Folder Deleted : C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

[!] Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nobdaacoacehloipdbmfedgncaiopmon

File Deleted : C:\Users\Fuxi\AppData\Roaming\LiveSupport.exe_log.txt

File Deleted : C:\Users\Fuxi\AppData\Roaming\regsvr32.exe_log.txt

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk

Shortcut Disinfected : C:\Users\Fuxi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\.

Key Deleted : HKLM\SOFTWARE\Classes\..9

Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-792098896

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{15e307a3-1336-4ef9-b2cc-fabf9a1b329d}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{c5039ca1-ff96-41ac-9a4f-7a20677b95e1}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{15e307a3-1336-4ef9-b2cc-fabf9a1b329d}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{c5039ca1-ff96-41ac-9a4f-7a20677b95e1}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{15e307a3-1336-4ef9-b2cc-fabf9a1b329d}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{c5039ca1-ff96-41ac-9a4f-7a20677b95e1}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Key Deleted : HKCU\Software\Optimizer Pro

Key Deleted : HKCU\Software\RegisteredApplication---

Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Key Deleted : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Key Deleted : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [search Page]

Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [search Page]

-\\ Mozilla Firefox v32.0.2 (x86 pt-BR)

[0r6uoxo7.default] - Line Deleted : user_pref("extensions.FVCzi7ZicD0k9PRu.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\[...]

[0r6uoxo7.default] - Line Deleted : user_pref("extensions.JJ7NdqlU4wrLlU17.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\[...]

[0r6uoxo7.default] - Line Deleted : user_pref("extensions.j2TY4C2vsprvNpT0.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\[...]

-\\ Google Chrome v37.0.2062.124

Deleted [search Provider] : hxxp://search.certified-toolbar.com?si=66810&st=bs&tid=6761&ver=5.7&ts=1381633200000.000009&tguid=66810-6761-1381657531086-252E86E5513C4CEBC4F135819D2377DF&q={searchTerms}

*************************

AdwCleaner[R0].txt - [7020 octets] - [19/10/2014 02:38:15]

AdwCleaner[s0].txt - [6988 octets] - [19/10/2014 02:40:08]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [7048 octets] ##########

DigRam · Outubro 19, 2014

Bom Dia! MasterFuxi

> Baixe: < Adware Removal Tool > ( ... by techsupportall.com )
> Salve-a no desktop!

> Execute o arquivo Adware-Removal-Tool-v3.9.1.exe <<

> Dê início a verificação,clicando em Scan.

> Ao concluir seu prescan,clique OK.
> Ps: Cada guia irá mostrar o que será removido!

AdwareRemovalTool_Results_zps5b21f2d7.jp

> Clique "Next" >> Aguarde!

< Computador >> Windows (C:) >> Program Files >> Adware-Removal-Tool >> Reports >> Repair_Logs_2014_10_dia_h_min_seg.txt <<

> Poste o relatório!

Abs!

MasterFuxi · Outubro 19, 2014

Boa tarde. Segue abaixo o relatório:

Adware Removal Tool

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

Adware Removal Tool v3.9

Time: 2014_10_19_11_28_31

OS: Windows 8 - 64 Bit

Account Name: Fuxi

U0L0S11

\\\\\\\\\\\\\\\\\\\\\\\ Repair Logs \\\\\\\\\\\\\\\\\\\\\\

Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}:dllname

Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}:masterclsid

Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}:dllname

Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825}:dllname

Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}:dllname

Deleted - RegistryValueData - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}:dllname

Deleted - RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility:{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}

Deleted - RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility:{2EECD738-5844-4A99-B4B6-146BF802613B}

Deleted - RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility:{472734EA-242A-422B-ADF8-83D1E48CC825}

Deleted - RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility:{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Deleted - RegistryKey - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility:{98889811-442D-49DD-99D7-DC866BE87DBC}

\\ Finished

DigRam · Outubro 19, 2014

Boa Tarde! MasterFuxi

> Baixe: < > ( ... by Farbar )

> Para sistemas 32 bit!

> Baixe: < Farbar Recovery Scan Tool 64-Bit> (64 bit)

> Ou aqui,para sistemas 64bit!
> Salve-o no desktop! (Área de trabalho ...)
> Execute a ferramenta! Clique "Yes" >> "Scan".

> Antes de clicar "Scan",verifique se as caixinhas em "Whitelist" estão assinaladas.
> Em "Optional Scan",deixe marcada a checkbox "Addition.txt".
> Poste o relatório! (FRST.txt+Addition.txt)

>
> Ps: O relatório "Addition.txt" estará disponibilizado na 1ª execução da ferramenta.

A+

MasterFuxi · Outubro 19, 2014

Boa tarde.

FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-10-2014 01

Ran by Fuxi (administrator) on GASPAR on 19-10-2014 14:20:25

Running from C:\Users\Fuxi\Downloads

Loaded Profile: Fuxi (Available profiles: Fuxi)

Platform: Windows 8.1 Pro with Media Center (X64) OS Language: Inglês (Estados Unidos)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

() C:\AMD\amdacpusrsvc.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(AMD) C:\Windows\System32\atieclxx.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

() C:\Users\Fuxi\AppData\Local\Viber\Viber.exe

(Softarium.com) C:\Program Files (x86)\Sound Volume Hotkeys\SoundVolumeHotkeys.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\System32\WWAHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Users\Fuxi\Downloads\Rotmg cookie\Rotmg cookie.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Adobe Systems, Inc.) C:\Users\Fuxi\Downloads\flashplayer_14_sa.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [startCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [sunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)

HKLM-x32\...\Run: [soundVolumeHotkeys.{9547D1C7-4F18-4104-8674-046DCD12BDF9}] => C:\Program Files (x86)\Sound Volume Hotkeys\SoundVolumeHotkeys.exe [126976 2010-09-19] (Softarium.com)

HKU\S-1-5-21-4083787117-2184581036-2932984990-1001\...\Run: [Viber] => C:\Users\Fuxi\AppData\Local\Viber\Viber.exe [936656 2014-07-24] ()

HKU\S-1-5-21-4083787117-2184581036-2932984990-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)

HKU\S-1-5-21-4083787117-2184581036-2932984990-1001\...\Run: [skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)

HKU\S-1-5-21-4083787117-2184581036-2932984990-1001\...\MountPoints2: {578c37be-3ed9-11e4-827b-bc5ff4977ab9} - "E:\setup.exe"

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x95DF482935A6CF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-BR,pt;q=0.5

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

StartMenuInternet: IEXPLORE.EXE - C:\program files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - {86c83f9e-48a4-4cd2-a763-64fea5df35f7} URL = http://br.yhs4.search.yahoo.com/yhs/search?hspart=baixaki&hsimp=yhs-baixaki_br_installcore_01&type=p&p={searchTerms}

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)

Hosts: Hosts file not detected in the default directory

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:

========

FF ProfilePath: C:\Users\Fuxi\AppData\Roaming\Mozilla\Firefox\Profiles\0r6uoxo7.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()

FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll (LastPass)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Fuxi\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: gastecnologia.com.br/sf/cef -> C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll (GAS Tecnologia)

FF Plugin HKCU: gastecnologia.com.br/sf/uni -> C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\npsf_uni.dll (GAS Tecnologia)

FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Fuxi\AppData\Roaming\Mozilla\Firefox\Profiles\0r6uoxo7.default\searchplugins\Baixaki.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\buscape.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mercadolivre.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-br.xml

FF HKCU\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E886D}] - C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\cef\xpi

FF Extension: GBBD Caixa Economica Federal - C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\cef\xpi [2014-09-14]

FF HKCU\...\Firefox\Extensions: [{87F8774F-B485-47E2-A755-A40A8A5E8873}] - C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\uni\xpi

FF Extension: Guardião - Itaú 30 horas - C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\uni\xpi [2014-09-02]

Chrome:

=======

CHR dev: Chrome dev build detected! <======= ATTENTION

CHR DefaultSearchKeyword: Default -> F2F210B3F8EEBE75A81014F8C5C5D2ED67E4FBF175DC8CB878F3DC0DF44095CD

CHR DefaultSearchURL: Default -> BDC911EE1A86DB598F43FB377DB534D7EFFABDA11971D742A27CAE8CC6938438

CHR Profile: C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Apresentações) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-19]

CHR Extension: (Xmarks Bookmark Sync) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajpgkpeckebdhofmmjfgcjjiiejpodla [2014-10-19]

CHR Extension: (Google Drive) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-19]

CHR Extension: (YouTube) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-15]

CHR Extension: (Pesquisa do Google) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-15]

CHR Extension: (Planilhas do Google) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-19]

CHR Extension: (AdBlock) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-10-19]

CHR Extension: (LastPass: Free Password Manager) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-10-19]

CHR Extension: (Google Wallet) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-15]

CHR Extension: (GBBD Caixa Economica Federal) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbcaplhfkihhldmlbjhgajdeghjdbffi [2014-10-19]

CHR Extension: (Gmail) - C:\Users\Fuxi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-15]

CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx []

CHR HKCU\...\Chrome\Extension: [nnjbodopomfddehlalfilheomcahbpei] - C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\cef\sf.crx [2014-07-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-04-17] (Advanced Micro Devices, Inc.) [File not signed]

R2 amdacpusrsvc; C:\AMD\amdacpusrsvc.exe [82432 2014-04-17] () [File not signed]

S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)

S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)

S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)

S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)

S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]

S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 amdacpksd; C:\Windows\system32\drivers\amdacpksd.sys [274656 2014-04-18] (Advanced Micro Devices)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-22] (Advanced Micro Devices, Inc.)

R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)

S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)

R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-09-19] (Disc Soft Ltd)

R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)

R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)

S1 Bfilter; \??\C:\Windows\System32\drivers\Bfilter.sys [X]

S1 Bfmon; \??\C:\Windows\System32\drivers\Bfmon.sys [X]

S1 Bnbase; System32\drivers\bnbasex64.sys [X]

S1 Bndef; \??\C:\Windows\System32\drivers\bndef64.sys [X]

S1 Bprotect; \??\C:\Windows\System32\drivers\Bprotect.sys [X]

S3 X6va017; \??\C:\Windows\SysWOW64\Drivers\X6va017 [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-19 14:20 - 2014-10-19 14:21 - 00015269 _____ () C:\Users\Fuxi\Downloads\FRST.txt

2014-10-19 14:19 - 2014-10-19 14:20 - 00000000 ____D () C:\FRST

2014-10-19 14:19 - 2014-10-19 14:19 - 02112000 _____ (Farbar) C:\Users\Fuxi\Downloads\FRST64.exe

2014-10-19 14:18 - 2014-10-19 14:19 - 01103360 _____ (Farbar) C:\Users\Fuxi\Downloads\FRST.exe

2014-10-19 12:48 - 2014-10-19 12:50 - 69530381 _____ () C:\Users\Fuxi\Downloads\nerdcast_436_to_velho_demais.zip

2014-10-19 11:28 - 2014-10-19 11:28 - 00290304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\subinacl.exe

2014-10-19 11:28 - 2014-10-19 11:28 - 00000000 ____D () C:\Program Files\Adware-Removal-Tool

2014-10-19 11:27 - 2014-10-19 11:27 - 00753184 _____ () C:\Users\Fuxi\Downloads\Adware-Removal-Tool-v3.9.1.exe

2014-10-19 03:10 - 2014-10-17 00:35 - 05391484 _____ () C:\Users\Fuxi\Desktop\[sWF]OrapeClient for 25.0.swf

2014-10-19 02:38 - 2014-10-19 02:40 - 00000000 ____D () C:\AdwCleaner

2014-10-19 02:38 - 2014-10-19 02:38 - 01976320 _____ () C:\Users\Fuxi\Downloads\adwcleaner_4.000 (1).exe

2014-10-19 02:37 - 2014-10-19 02:37 - 00003702 _____ () C:\Users\Fuxi\Desktop\JRT.txt

2014-10-19 02:35 - 2014-10-19 02:35 - 00000000 ____D () C:\Windows\ERUNT

2014-10-19 02:33 - 2014-10-19 02:33 - 01976320 _____ () C:\Users\Fuxi\Downloads\adwcleaner_4.000.exe

2014-10-19 02:32 - 2014-10-19 02:33 - 01705698 _____ (Thisisu) C:\Users\Fuxi\Downloads\JRT.exe

2014-10-18 19:56 - 2014-10-18 19:58 - 00000000 ____D () C:\Users\Fuxi\AppData\Local\PAYDAY 2

2014-10-18 19:56 - 2014-10-18 19:56 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-10-18 19:56 - 2014-10-18 19:56 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-10-18 17:25 - 2014-10-18 17:25 - 00002985 _____ () C:\Users\Fuxi\Desktop\HiJackThis.lnk

2014-10-18 17:25 - 2014-10-18 17:25 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis

2014-10-18 17:25 - 2014-10-18 17:25 - 00000000 ____D () C:\HiJackThis

2014-10-18 17:18 - 2014-10-18 17:18 - 01402880 _____ () C:\Users\Fuxi\Downloads\HijackThis.msi

2014-10-18 17:13 - 2014-10-18 17:16 - 00000000 ____D () C:\Program Files\GridinSoft Trojan Killer

2014-10-18 17:06 - 2014-10-18 17:09 - 65362961 _____ () C:\Users\Fuxi\Downloads\GridinSoft.Trojan.Killer.2.2.1.2.baixedetudo.net.rar

2014-10-18 17:02 - 2014-10-18 17:02 - 00929136 _____ () C:\Users\Fuxi\Downloads\GS.T.K.2.2.5.3.rar.exe

2014-10-18 16:51 - 2014-10-18 16:52 - 05924085 _____ () C:\Users\Fuxi\Downloads\trk.rar

2014-10-18 16:11 - 2014-10-18 16:11 - 00000000 ____D () C:\ProgramData\GridinSoft

2014-10-18 16:07 - 2014-10-18 16:07 - 03026176 _____ (GridinSoft) C:\Users\Fuxi\Downloads\TrojanKillerInstallerST.exe

2014-10-18 16:03 - 2014-10-18 16:03 - 05393063 _____ () C:\Users\Fuxi\Downloads\[sWF]OrapeClient for 25.0_mpgh.net.zip

2014-10-18 16:00 - 2014-10-18 16:02 - 02226656 _____ () C:\Users\Fuxi\Downloads\OryxRape2.2b_mpgh.net.zip

2014-10-17 23:10 - 2014-10-17 23:10 - 00001532 _____ () C:\Users\Fuxi\Desktop\firefox - Atalho.lnk

2014-10-17 22:10 - 2014-10-17 22:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-10-16 23:35 - 2014-10-16 23:35 - 00000220 _____ () C:\Users\Fuxi\Desktop\Killing Floor.url

2014-10-16 23:06 - 2014-10-16 23:06 - 00000222 _____ () C:\Users\Fuxi\Desktop\PAYDAY 2.url

2014-10-16 22:28 - 2014-10-08 09:15 - 05374510 _____ () C:\Users\Fuxi\Desktop\client-mod.swf

2014-10-16 22:26 - 2014-10-16 22:26 - 05375096 _____ () C:\Users\Fuxi\Downloads\client-mod_mpgh.net.zip

2014-10-16 21:08 - 2014-09-27 20:25 - 04183040 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-10-16 21:08 - 2014-09-03 22:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-10-16 21:08 - 2014-09-03 21:57 - 00921600 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-10-16 21:08 - 2014-09-03 21:49 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-10-16 21:07 - 2014-09-08 01:15 - 00054752 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-10-16 21:07 - 2014-09-07 23:46 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2014-10-16 21:07 - 2014-09-07 23:46 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2014-10-16 21:07 - 2014-09-07 22:08 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2014-10-16 21:07 - 2014-09-07 22:07 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2014-10-16 21:07 - 2014-09-07 22:05 - 03448320 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-10-16 21:07 - 2014-09-07 22:04 - 00388608 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-10-16 21:07 - 2014-09-07 22:04 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2014-10-16 21:07 - 2014-09-07 22:03 - 01702400 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-10-16 21:07 - 2014-09-07 22:03 - 00839680 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2014-10-16 21:07 - 2014-09-07 21:59 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2014-10-16 21:07 - 2014-09-07 21:59 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2014-10-16 21:07 - 2014-09-07 21:56 - 00672256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2014-10-16 21:07 - 2014-09-07 21:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2014-10-16 21:06 - 2014-09-25 20:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-10-16 21:06 - 2014-09-25 20:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2014-10-16 21:06 - 2014-09-25 20:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2014-10-16 21:06 - 2014-09-25 20:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-10-16 21:06 - 2014-09-25 20:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-10-16 21:06 - 2014-09-25 20:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-10-16 21:06 - 2014-09-19 00:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-10-16 21:06 - 2014-09-18 23:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-10-16 21:06 - 2014-09-18 23:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-10-16 21:06 - 2014-09-18 23:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-10-16 21:06 - 2014-09-18 23:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2014-10-16 21:06 - 2014-09-18 23:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-10-16 21:06 - 2014-09-18 23:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-10-16 21:06 - 2014-09-18 23:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-10-16 21:06 - 2014-09-18 23:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-10-16 21:06 - 2014-09-18 23:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2014-10-16 21:06 - 2014-09-18 22:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2014-10-16 21:06 - 2014-09-18 22:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2014-10-16 21:06 - 2014-09-18 22:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-10-16 21:06 - 2014-09-18 22:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-10-16 21:06 - 2014-09-18 22:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-10-16 21:06 - 2014-09-18 22:42 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2014-10-16 21:06 - 2014-09-18 22:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-10-16 21:06 - 2014-09-18 22:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-10-16 21:06 - 2014-09-18 22:20 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2014-10-16 21:06 - 2014-09-18 22:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-10-16 21:06 - 2014-09-18 21:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-10-16 21:06 - 2014-09-18 21:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-10-16 21:06 - 2014-09-18 21:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-10-16 21:06 - 2014-09-18 21:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-10-16 21:06 - 2014-09-13 04:29 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2014-10-16 21:06 - 2014-09-13 03:49 - 00068608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2014-10-16 21:06 - 2014-09-03 22:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-10-16 21:06 - 2014-09-03 22:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-10-16 21:06 - 2014-08-16 02:08 - 21195616 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-10-16 21:06 - 2014-08-16 02:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-10-16 21:06 - 2014-08-16 02:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-10-16 21:06 - 2014-08-16 01:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-10-16 21:06 - 2014-08-16 01:57 - 02498880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-10-16 21:06 - 2014-08-16 01:57 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2014-10-16 21:06 - 2014-08-16 01:16 - 18722600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-10-16 21:06 - 2014-08-16 01:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-10-16 21:06 - 2014-08-16 01:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-10-16 21:06 - 2014-08-15 23:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-10-16 21:06 - 2014-08-15 23:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll

2014-10-16 21:06 - 2014-08-15 22:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-10-16 21:06 - 2014-08-15 22:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll

2014-10-16 21:06 - 2014-08-15 22:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2014-10-16 21:06 - 2014-08-15 22:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-10-16 21:06 - 2014-08-15 22:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll

2014-10-16 21:06 - 2014-08-15 22:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll

2014-10-16 21:06 - 2014-08-15 22:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-10-16 21:06 - 2014-08-15 22:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-10-16 21:06 - 2014-08-15 22:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-10-16 21:06 - 2014-08-15 22:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-10-16 21:06 - 2014-08-15 22:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-10-16 21:06 - 2014-08-15 22:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-10-16 21:06 - 2014-08-15 22:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-10-16 21:06 - 2014-08-15 22:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-10-16 21:06 - 2014-08-15 22:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-10-16 21:06 - 2014-08-15 22:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-10-16 21:06 - 2014-08-15 22:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-10-16 21:06 - 2014-08-15 22:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-10-16 21:06 - 2014-08-15 22:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-10-16 21:06 - 2014-08-15 22:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-10-16 21:06 - 2014-08-15 22:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-10-16 21:06 - 2014-08-15 22:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-10-16 21:06 - 2014-08-15 22:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-10-16 21:06 - 2014-07-31 21:22 - 00388729 _____ () C:\Windows\system32\ApnDatabase.xml

2014-10-16 21:05 - 2014-09-13 04:02 - 02779648 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2014-10-16 21:05 - 2014-09-13 03:30 - 03117568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2014-10-16 21:05 - 2014-08-28 23:58 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2014-10-16 21:05 - 2014-08-28 21:56 - 02646016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-10-16 21:05 - 2014-08-28 21:47 - 02321920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-10-16 19:53 - 2014-10-16 19:53 - 00000852 _____ () C:\Users\Fuxi\Desktop\client-mod - Atalho.lnk

2014-10-16 19:11 - 2014-10-16 19:11 - 00001898 _____ () C:\Users\Fuxi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome.lnk

2014-10-16 19:10 - 2014-10-16 19:11 - 00001834 _____ () C:\Users\Fuxi\Desktop\Chrome.lnk

2014-10-16 10:14 - 2014-10-16 19:04 - 00000000 ____D () C:\ProgramData\f7cdc9b8b5369f87

2014-10-16 10:14 - 2014-10-16 10:36 - 00000394 __RSH () C:\ProgramData\ntuser.pol

2014-10-16 10:14 - 2014-10-16 10:14 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google

2014-10-16 10:14 - 2014-10-16 10:14 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo

2014-10-16 10:14 - 2014-10-16 10:14 - 00000000 ____D () C:\Users\Guest

2014-10-16 10:14 - 2014-10-16 10:14 - 00000000 ____D () C:\Users\Fuxi\AppData\Local\Comodo

2014-10-16 10:14 - 2014-10-16 10:14 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google

2014-10-16 10:14 - 2014-10-16 10:14 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo

2014-10-16 10:14 - 2014-10-16 10:14 - 00000000 ____D () C:\Users\Administrator

2014-10-13 23:31 - 2014-10-14 00:13 - 00000000 ____D () C:\Users\Fuxi\Documents\Euro Truck Simulator 2

2014-10-13 23:31 - 2014-10-13 23:31 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run

2014-10-13 23:28 - 2014-10-13 23:28 - 00000000 ____D () C:\2-click run

2014-10-13 21:58 - 2014-10-13 21:59 - 37178177 _____ () C:\Users\Fuxi\Downloads\salário mínimo - simplesmente rock.rar

2014-10-13 21:57 - 2014-10-13 22:00 - 60724902 _____ () C:\Users\Fuxi\Downloads\Salario Minimo - Beijo Fatal - 1987.rar

2014-10-13 21:39 - 2014-10-13 21:39 - 00036634 _____ () C:\Users\Fuxi\Downloads\8D3900EF15429E94B1E21597C0E01CCEF5393BF7.torrent

2014-10-12 18:47 - 2014-10-12 18:59 - 00000000 ____D () C:\Users\Fuxi\Downloads\Euro Truck Simulator 2 v1.12.1 (15 DLC)(2-click run)

2014-10-12 18:46 - 2014-10-12 18:47 - 00081014 _____ () C:\Users\Fuxi\Downloads\[kickass.to]euro.truck.simulator.2.v1.12.1.15.dlc.2.click.run.torrent

2014-10-12 11:28 - 2014-10-12 11:28 - 00000000 ____D () C:\ProgramData\Synetic

2014-10-12 11:00 - 2014-10-12 11:00 - 00000221 _____ () C:\Users\Fuxi\Desktop\Crash Time II.url

2014-10-10 20:08 - 2014-10-10 20:08 - 00001871 _____ () C:\Users\Fuxi\Desktop\Play Batman Arkham Asylum.lnk

2014-10-09 20:07 - 2014-10-09 20:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sound Volume Hotkeys

2014-10-09 20:07 - 2014-10-09 20:07 - 00000000 ____D () C:\Program Files (x86)\Sound Volume Hotkeys

2014-10-09 20:01 - 2014-10-09 20:01 - 00407377 _____ (Softarium.com ) C:\Users\Fuxi\Downloads\SoundVolumeHotkeys (1).exe

2014-10-08 21:35 - 2014-10-09 22:58 - 00000000 ____D () C:\Users\Fuxi\Downloads\Batman Arkham Asylum PC full game + DLC ^^nosTEAM^^

2014-10-06 22:38 - 2014-10-06 22:39 - 41569231 _____ () C:\Users\Fuxi\Downloads\C_mera_Escondida_Annabelle_In_dita_05_10_14_Annabelle_Prank.mp4

2014-10-05 19:31 - 2014-10-05 19:33 - 00000000 ____D () C:\Users\Fuxi\Desktop\Emulador

2014-10-05 19:31 - 2014-10-05 19:31 - 04195328 _____ () C:\Users\Fuxi\Downloads\scph39001.zip

2014-10-05 19:30 - 2014-10-05 19:30 - 03373601 _____ () C:\Users\Fuxi\Downloads\pcsx2-1.0.0-r5350-binaries.7z

2014-10-05 15:51 - 2014-10-05 15:51 - 08149073 _____ () C:\Users\Fuxi\Downloads\10_COISAS_International_Superstar_soccer_Narra_es_Futebol_Brasileiro_96_BONUS_.mp4

2014-10-05 03:51 - 2014-10-05 03:51 - 00000137 _____ () C:\Users\Fuxi\Desktop\eleição.txt

2014-10-04 14:55 - 2014-10-04 14:55 - 05471529 _____ () C:\Users\Fuxi\Downloads\NASASpacescapes.themepack

2014-10-04 14:54 - 2014-10-04 14:55 - 06107164 _____ () C:\Users\Fuxi\Downloads\Lightning.themepack

2014-10-04 14:54 - 2014-10-04 14:54 - 08050514 _____ () C:\Users\Fuxi\Downloads\TheMilkyWay.themepack

2014-10-04 14:54 - 2014-10-04 14:54 - 07304166 _____ () C:\Users\Fuxi\Downloads\NASAHiddenUniverse.themepack

2014-10-03 20:09 - 2014-10-03 20:11 - 60370622 _____ () C:\Users\Fuxi\Downloads\nerdcast_434_cerveja.zip

2014-10-01 19:47 - 2014-10-01 19:47 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\Need for Speed World

2014-10-01 19:20 - 2014-10-01 19:20 - 00002237 _____ () C:\Users\Public\Desktop\Need For Speed World.lnk

2014-10-01 19:20 - 2014-10-01 19:20 - 00000000 ____D () C:\Users\Fuxi\AppData\Local\Electronic_Arts_Inc

2014-10-01 19:20 - 2014-10-01 19:20 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts

2014-10-01 19:19 - 2014-10-01 19:20 - 06400680 _____ (Electronic Arts ) C:\Users\Fuxi\Downloads\setup_nfsw.exe

2014-09-29 20:19 - 2014-09-29 20:20 - 79303908 _____ () C:\Users\Fuxi\Downloads\nerdcast_433_formula_1.zip

2014-09-29 15:24 - 2014-09-29 15:29 - 00003231 _____ () C:\Users\Fuxi\Desktop\codex.ini

2014-09-29 01:20 - 2014-09-29 01:20 - 00000998 _____ () C:\Users\Fuxi\Desktop\Ideias para o Hot Dog Dudu.txt

2014-09-26 13:49 - 2014-10-12 10:39 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\Skype

2014-09-26 13:49 - 2014-09-26 13:49 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-09-26 13:49 - 2014-09-26 13:49 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-09-26 13:49 - 2014-09-26 13:49 - 00000000 ____D () C:\Users\Fuxi\AppData\Local\Skype

2014-09-26 13:49 - 2014-09-26 13:49 - 00000000 ____D () C:\ProgramData\Skype

2014-09-26 13:49 - 2014-09-26 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-09-26 13:48 - 2014-09-26 13:48 - 01678440 _____ (Skype Technologies S.A.) C:\Users\Fuxi\Downloads\SkypeSetup.exe

2014-09-25 22:24 - 2014-09-25 22:24 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\Steam

2014-09-25 22:19 - 2014-09-25 22:19 - 00001291 _____ () C:\Users\Fuxi\Desktop\Naruto Shippuden Ultimate Ninja Storm Revolution.lnk

2014-09-25 22:19 - 2014-09-25 22:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Naruto Shippuden Ultimate Ninja Storm Revolution

2014-09-25 22:12 - 2014-09-25 22:23 - 00000000 ____D () C:\Program Files (x86)\Naruto Shippuden Ultimate Ninja Storm Revolution

2014-09-25 19:50 - 2014-09-25 19:50 - 00000000 ____D () C:\Users\Fuxi\Documents\My Games

2014-09-25 19:40 - 2014-09-25 19:40 - 00001499 _____ () C:\Users\Public\Desktop\DmC - Devil May Cry.lnk

2014-09-25 19:40 - 2014-09-25 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Capcom

2014-09-25 19:21 - 2014-09-25 19:59 - 00000000 ____D () C:\Users\Fuxi\Downloads\Naruto Shippuden Ultimate Ninja Storm Revolution-CODEX

2014-09-25 19:19 - 2014-09-25 19:19 - 00316411 _____ () C:\Users\Fuxi\Downloads\Naruto REV save.rar

2014-09-25 19:12 - 2014-09-25 19:12 - 00000000 ____D () C:\Program Files (x86)\Capcom

2014-09-24 19:47 - 2014-09-24 22:01 - 00000000 ____D () C:\Users\Fuxi\Downloads\DMC Devil May Cry - Complete Edition + Crack [PC] (2014)

2014-09-24 01:15 - 2014-09-24 01:16 - 136298613 _____ () C:\Users\Fuxi\Downloads\[2008] - Festa.rar

2014-09-24 01:05 - 2014-09-24 01:06 - 69015215 _____ () C:\Users\Fuxi\Downloads\[2010] - Supercombo.rar

2014-09-22 21:49 - 2014-09-23 01:26 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\Quivi

2014-09-22 21:48 - 2014-09-22 21:49 - 08443079 _____ () C:\Users\Fuxi\Downloads\quivi-1.2.1.zip

2014-09-22 20:10 - 2014-10-18 19:56 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-09-22 20:10 - 2014-09-22 20:10 - 01142392 _____ () C:\Users\Fuxi\Downloads\SteamSetup.exe

2014-09-22 20:10 - 2014-09-22 20:10 - 00000979 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-09-22 20:10 - 2014-09-22 20:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-09-21 18:30 - 2014-09-21 18:32 - 39812373 _____ () C:\Users\Fuxi\Downloads\supercombo - sal grosso.rar

2014-09-21 18:23 - 2014-09-21 18:25 - 105956340 _____ () C:\Users\Fuxi\Downloads\supercombo - amianto (2014).rar

2014-09-21 11:04 - 2014-09-21 11:04 - 57439020 _____ () C:\Users\Fuxi\Downloads\nerdcast_432_tecnologias_do_futuro_2.zip

2014-09-21 09:48 - 2014-10-19 02:41 - 00021228 _____ () C:\Windows\PFRO.log

2014-09-19 22:26 - 2014-09-19 22:26 - 00002066 _____ () C:\Users\Fuxi\Desktop\Castlevania LoS - UE.lnk

2014-09-19 21:31 - 2014-10-16 19:03 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner

2014-09-19 21:27 - 2014-09-19 21:28 - 34323316 _____ () C:\Users\Fuxi\Downloads\MSIAfterburnerSetup400.zip

2014-09-19 20:51 - 2014-09-19 20:51 - 00000000 ____D () C:\Users\Fuxi\AppData\Local\MercurySteam

2014-09-19 20:51 - 2014-09-19 20:51 - 00000000 ____D () C:\Users\Fuxi\AppData\Local\EMU

2014-09-19 20:26 - 2014-09-19 20:39 - 00000000 ____D () C:\Program Files (x86)\Castlevania Lords of Shadow - Ultimate Edition

2014-09-19 20:14 - 2014-09-19 20:14 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images

2014-09-19 20:13 - 2014-09-19 20:13 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys

2014-09-19 20:13 - 2014-09-19 20:13 - 00001966 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk

2014-09-19 20:13 - 2014-09-19 20:13 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\DAEMON Tools Lite

2014-09-19 20:13 - 2014-09-19 20:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite

2014-09-19 20:12 - 2014-09-19 20:13 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite

2014-09-19 20:11 - 2014-09-19 20:14 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-19 14:05 - 2014-06-15 00:54 - 00001078 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-10-19 14:00 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\system32\sru

2014-10-19 13:58 - 2014-09-07 14:46 - 01611000 _____ () C:\Windows\WindowsUpdate.log

2014-10-19 10:05 - 2014-06-15 00:54 - 00001074 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-10-19 09:54 - 2014-06-15 00:54 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{1CE46813-AB72-4FD1-9A9F-B990A025D9C1}

2014-10-19 09:22 - 2014-06-15 00:57 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4083787117-2184581036-2932984990-1001

2014-10-19 08:28 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\rescache

2014-10-19 08:15 - 2014-06-22 15:08 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013

2014-10-19 08:15 - 2014-06-22 15:04 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-10-19 06:45 - 2014-06-28 08:41 - 00003758 _____ () C:\Windows\System32\Tasks\AutoKMS

2014-10-19 06:43 - 2014-09-09 00:38 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\ViberPC

2014-10-19 06:42 - 2014-09-09 00:37 - 00000000 ____D () C:\Users\Fuxi\AppData\Local\Viber

2014-10-19 02:47 - 2014-06-15 01:29 - 00774702 _____ () C:\Windows\system32\prfh0416.dat

2014-10-19 02:47 - 2014-06-15 01:29 - 00158296 _____ () C:\Windows\system32\prfc0416.dat

2014-10-19 02:47 - 2014-06-15 00:56 - 01797166 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-10-19 02:41 - 2014-06-15 01:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-10-19 02:41 - 2013-08-22 12:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-10-19 02:40 - 2014-06-15 00:58 - 00065536 _____ () C:\Windows\system32\spu_storage.bin

2014-10-19 02:40 - 2014-06-15 00:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-10-19 02:40 - 2014-06-15 00:52 - 00000975 _____ () C:\Users\Fuxi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-10-18 19:55 - 2014-09-16 21:42 - 00296310 _____ () C:\Windows\DirectX.log

2014-10-18 18:30 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-10-17 18:21 - 2014-07-19 02:31 - 00000000 ____D () C:\ProgramData\GAS Tecnologia

2014-10-17 12:20 - 2013-08-22 12:44 - 00482392 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-10-17 01:44 - 2013-08-22 13:36 - 00000000 ___RD () C:\Windows\ToastData

2014-10-17 01:44 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\WinStore

2014-10-17 01:44 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-10-17 01:44 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\FileManager

2014-10-17 01:44 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\Camera

2014-10-17 00:26 - 2013-08-22 13:20 - 00000000 ____D () C:\Windows\CbsTemp

2014-10-17 00:26 - 2013-08-22 11:25 - 00000269 _____ () C:\Windows\win.ini

2014-10-17 00:19 - 2014-07-20 20:30 - 00000000 ____D () C:\Windows\system32\MRT

2014-10-17 00:09 - 2014-07-20 20:30 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-10-16 21:00 - 2014-06-18 17:52 - 00000000 ____D () C:\Users\Fuxi\Downloads\Orape

2014-10-16 19:35 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\Speech

2014-10-16 19:10 - 2014-09-07 14:32 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-10-16 19:10 - 2014-09-03 21:24 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-10-16 19:10 - 2014-09-03 21:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-10-16 19:10 - 2014-09-03 21:23 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-10-16 10:14 - 2014-06-15 00:54 - 00000000 ____D () C:\Users\Fuxi\AppData\Local\Google

2014-10-16 10:14 - 2014-06-15 00:54 - 00000000 ____D () C:\Program Files (x86)\Google

2014-10-16 10:14 - 2013-08-22 13:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2014-10-15 01:34 - 2014-06-15 00:51 - 00000000 ____D () C:\Users\Fuxi

2014-10-14 01:12 - 2014-06-22 00:59 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\uTorrent

2014-10-11 20:53 - 2014-09-07 14:46 - 00002485 _____ () C:\Windows\setupact.log

2014-10-10 20:08 - 2014-09-16 22:36 - 00000000 ____D () C:\Games

2014-10-08 15:36 - 2014-07-07 00:50 - 00000000 ____D () C:\ProgramData\Origin

2014-10-08 15:35 - 2014-07-07 00:50 - 00000000 ____D () C:\Program Files (x86)\Origin

2014-10-05 19:37 - 2014-06-15 00:58 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-10-05 17:01 - 2013-08-22 11:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-10-04 10:41 - 2014-08-17 14:00 - 00000000 ____D () C:\Users\Fuxi\AppData\Roaming\vlc

2014-10-01 19:20 - 2014-07-07 00:50 - 00000000 ____D () C:\ProgramData\Electronic Arts

2014-10-01 12:11 - 2014-09-03 21:23 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-10-01 12:11 - 2014-09-03 21:23 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-10-01 12:11 - 2014-09-03 21:23 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-09-29 20:45 - 2014-09-10 00:32 - 00706016 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-09-29 20:45 - 2014-09-10 00:32 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-09-28 08:17 - 2014-06-15 01:00 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2014-09-22 04:42 - 2014-06-20 07:36 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-09-20 18:28 - 2013-08-22 13:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-09-20 18:28 - 2013-08-22 13:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-09-20 18:27 - 2013-08-22 17:11 - 00000000 ____D () C:\Program Files\Windows Journal

2014-09-20 18:27 - 2013-08-22 13:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-09-20 18:27 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\SysWOW64\setup

2014-09-20 18:27 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod

2014-09-20 18:27 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\system32\setup

2014-09-20 18:27 - 2013-08-22 13:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-09-20 18:27 - 2013-08-22 11:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-09-19 00:02 - 2014-09-17 21:04 - 00000000 ____D () C:\Users\Fuxi\Downloads\Castlevania_Lords_of_Shadow_Ultimate_Edition-FLT

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-10-12 09:01

==================== End Of Log ============================

Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-10-2014 01

Ran by Fuxi at 2014-10-19 14:22:22

Running from C:\Users\Fuxi\Downloads

Boot Mode: Normal

==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.34309 - BitTorrent Inc.)

ACP Application (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.09) - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)

AMD Accelerated Video Transcoding (Version: 13.30.100.40417 - Advanced Micro Devices, Inc.) Hidden

AMD Catalyst Control Center (x32 Version: 2014.0417.2226.38446 - Nome de sua empresa:) Hidden

AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

AMD Fuel (Version: 2014.0417.2226.38446 - Nome de sua empresa:) Hidden

Astah Community 6.8 (HKLM\...\astah* community_is1) (Version: - Change Vision, Inc.)

Castlevania: Lords of Shadow - Ultimate Edition (HKLM-x32\...\Castlevania: Lords of Shadow - Ultimate Edition_is1) (Version: - Konami Digital Entertainment)

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2014.0423.449.6734 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2014.0417.2225.38446 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2014.0417.2226.38446 - Advanced Micro Devices, Inc.) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)

Crash Time II (HKLM-x32\...\Steam App 11390) (Version: - RTL interactive)

DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)

Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{B6FBF358-6B5E-4DE4-8BC5-892C87BBD3B4}) (Version: - Microsoft)

DmC - Devil May Cry (HKLM-x32\...\DmC - Devil May Cry_is1) (Version: - )

Euro Truck Simulator 2 v1.12.1 (15 DLC) (HKLM-x32\...\Euro Truck Simulator 2 v1.12.1 (15 DLC)1.12.1) (Version: 1.12.1 - Friends in War)

FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.7 - Electronic Arts)

GBBD Caixa Economica Federal (HKLM-x32\...\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1) (Version: 3.9.0.1 - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)

Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden

Guardião - Itaú 30 horas (HKLM-x32\...\{70e5f739-1d2a-40ae-bbc9-4b3e6af4c831}_is1) (Version: 3.10.0.1 - )

HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)

Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)

Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden

Killing Floor (HKLM-x32\...\Steam App 1250) (Version: - Tripwire Interactive)

LastPass (apenas desinstalar) (HKLM-x32\...\LastPass) (Version: - LastPass)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)

League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden

Malwarebytes Anti-Malware versão 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Access MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

Microsoft DCF MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Excel MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Groove MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)

Microsoft Help Viewer 1.0 (Version: 1.0.30319 - Microsoft Corporation) Hidden

Microsoft InfoPath MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Lync MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office OSM MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office OSM UX MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Shared 32-bit MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft OneNote MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Outlook MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft PowerPoint MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Publisher MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{4E968D9C-21A7-4915-B698-F7AEB913541D}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2F3AE8-246A-4252-BB26-1BEB45627074}) (Version: 10.50.1447.4 - Microsoft Corporation)

Microsoft Visual C# 2010 Express - ENU (HKLM-x32\...\Microsoft Visual C# 2010 Express - ENU) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C# 2010 Express - ENU (x32 Version: 10.0.30319 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Word MUI (Portuguese (Brazil)) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{070C55FA-FB9D-46DD-B30B-4B520A83A66A}) (Version: 1.20.146.0 - Microsoft)

Mozilla Firefox 32.0.2 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 32.0.2 (x86 pt-BR)) (Version: 32.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)

Naruto Shippuden Ultimate Ninja Storm Revolution (HKLM-x32\...\Naruto Shippuden Ultimate Ninja Storm Revolution_is1) (Version: - )

Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1599 - Electronic Arts)

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)

Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)

PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)

RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.1.12971.140 - raidcall.com.br)

Raptr (HKLM-x32\...\Raptr) (Version: - )

Revisores de Texto do Microsoft Office 2013 – Português do Brasil (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)

Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden

Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)

Sound Volume Hotkeys 1.3 (HKLM-x32\...\SoundVolumeHotkeys.{9547D1C7-4F18-4104-8674-046DCD12BDF9}_is1) (Version: 1.3 - Softarium.com)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)

Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)

Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{90150000-0016-0416-1000-0000000FF1CE}_Office15.PROPLUS_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)

Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{90150000-0018-0416-1000-0000000FF1CE}_Office15.PROPLUS_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)

Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{90150000-001B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)

Update for Microsoft Excel 2013 (KB2889941) 64-Bit Edition (HKLM\...\{90150000-00C1-0416-1000-0000000FF1CE}_Office15.PROPLUS_{EFD6026A-1531-4678-B51B-1A10C3F51CEE}) (Version: - Microsoft)

Update for Microsoft Lync 2013 (KB2881083) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{19AF3A31-38BC-41F1-A419-4E9C185C6517}) (Version: - Microsoft)

Update for Microsoft Lync 2013 (KB2889929) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FC4C557E-7664-453D-8A55-5D414069E0F5}) (Version: - Microsoft)

Update for Microsoft Lync 2013 (KB2889929) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FC4C557E-7664-453D-8A55-5D414069E0F5}) (Version: - Microsoft)

Update for Microsoft Lync 2013 (KB2889929) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{FC4C557E-7664-453D-8A55-5D414069E0F5}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2760249) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7A4AB8E1-C091-4BD3-B308-844BA6EE752A}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2760371) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{25DEA344-FF6F-41BD-B88F-5242BB8E80E1}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0416-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881001) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{DF1B7B95-4A86-4605-A628-556394B5580A}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881004) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{AC8BEB81-5B5E-4503-B1F4-7781F4642E46}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881004) 64-Bit Edition (HKLM\...\{90150000-0016-0416-1000-0000000FF1CE}_Office15.PROPLUS_{AC8BEB81-5B5E-4503-B1F4-7781F4642E46}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881012) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0DC71935-8DEE-4621-A223-23FD1552E567}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0416-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0416-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2881039) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C675FC43-E413-49A7-B3DC-44967B4FE22D}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUS_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0416-1000-0000000FF1CE}_Office15.PROPLUS_{49B25930-F28E-4693-B6B9-F94885693F16}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.PROPLUS_{6E2862B8-C10A-4FD0-9B82-8D9761301AAA}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2883095) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EADBF225-163E-406B-B11A-26ECCCAB5A0E}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2889927) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0A84CF05-F164-471D-8AFB-AC4C7FF7CA71}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2889927) 64-Bit Edition (HKLM\...\{90150000-006E-0416-1000-0000000FF1CE}_Office15.PROPLUS_{0A84CF05-F164-471D-8AFB-AC4C7FF7CA71}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2889927) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0A84CF05-F164-471D-8AFB-AC4C7FF7CA71}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2889940) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{36772E16-D3FA-440E-B001-0BEB2B1FCE47}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2889942) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C22AE0C4-590E-46FF-9E21-37F45B84ADDD}) (Version: - Microsoft)

Update for Microsoft Office 2013 (KB2889942) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C22AE0C4-590E-46FF-9E21-37F45B84ADDD}) (Version: - Microsoft)

Update for Microsoft OneDrive for Business (KB3000731) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2245C7DD-6984-40C8-AD2C-C1CC6F049C91}) (Version: - Microsoft)

Update for Microsoft OneDrive for Business (KB3000731) 64-Bit Edition (HKLM\...\{90150000-00BA-0416-1000-0000000FF1CE}_Office15.PROPLUS_{2245C7DD-6984-40C8-AD2C-C1CC6F049C91}) (Version: - Microsoft)

Update for Microsoft OneDrive for Business (KB3000731) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2245C7DD-6984-40C8-AD2C-C1CC6F049C91}) (Version: - Microsoft)

Update for Microsoft OneDrive for Business (KB3000731) 64-Bit Edition (HKLM\...\{90150000-00C1-0416-1000-0000000FF1CE}_Office15.PROPLUS_{2245C7DD-6984-40C8-AD2C-C1CC6F049C91}) (Version: - Microsoft)

Update for Microsoft OneNote 2013 (KB2883059) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BA62716F-904B-4668-A792-A41C1D806416}) (Version: - Microsoft)

Update for Microsoft OneNote 2013 (KB2883059) 64-Bit Edition (HKLM\...\{90150000-00A1-0416-1000-0000000FF1CE}_Office15.PROPLUS_{BA62716F-904B-4668-A792-A41C1D806416}) (Version: - Microsoft)

Update for Microsoft OneNote 2013 (KB2883059) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BA62716F-904B-4668-A792-A41C1D806416}) (Version: - Microsoft)

Update for Microsoft Outlook 2013 (KB2986204) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2CB96A7D-CBFE-4028-ACE8-31C3925D3D46}) (Version: - Microsoft)

Update for Microsoft Outlook 2013 (KB2986204) 64-Bit Edition (HKLM\...\{90150000-001A-0416-1000-0000000FF1CE}_Office15.PROPLUS_{2CB96A7D-CBFE-4028-ACE8-31C3925D3D46}) (Version: - Microsoft)

Update for Microsoft PowerPoint 2013 (KB2889847) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7F1008C2-8C87-497F-B6D8-56B53DA0FAB3}) (Version: - Microsoft)

Update for Microsoft PowerPoint 2013 (KB2889847) 64-Bit Edition (HKLM\...\{90150000-0018-0416-1000-0000000FF1CE}_Office15.PROPLUS_{7F1008C2-8C87-497F-B6D8-56B53DA0FAB3}) (Version: - Microsoft)

Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version: - Microsoft)

Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0416-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version: - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version: - Microsoft)

Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0416-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version: - Microsoft)

Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version: - Microsoft)

Update for Microsoft Word 2013 (KB2889939) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{9FB1FB2E-AF3B-435F-BEBD-E6B0E89753F2}) (Version: - Microsoft)

Update for Microsoft Word 2013 (KB2889939) 64-Bit Edition (HKLM\...\{90150000-001A-0416-1000-0000000FF1CE}_Office15.PROPLUS_{9FB1FB2E-AF3B-435F-BEBD-E6B0E89753F2}) (Version: - Microsoft)

Update for Microsoft Word 2013 (KB2889939) 64-Bit Edition (HKLM\...\{90150000-001B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{9FB1FB2E-AF3B-435F-BEBD-E6B0E89753F2}) (Version: - Microsoft)

Update for Microsoft Word 2013 (KB2889939) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{9FB1FB2E-AF3B-435F-BEBD-E6B0E89753F2}) (Version: - Microsoft)

Viber (HKCU\...\Viber) (Version: 3.0.0.134193 - Viber Media Inc)

Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)

VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)

WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4083787117-2184581036-2932984990-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0007}\InprocServer32 -> C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)

CustomCLSID: HKU\S-1-5-21-4083787117-2184581036-2932984990-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0013}\InprocServer32 -> C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\npsf_uni_64.dll (GAS Tecnologia)

CustomCLSID: HKU\S-1-5-21-4083787117-2184581036-2932984990-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0007}\InprocServer32 -> C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)

CustomCLSID: HKU\S-1-5-21-4083787117-2184581036-2932984990-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0013}\InprocServer32 -> C:\Users\Fuxi\AppData\Local\GAS Tecnologia\GBBD\npsf_uni_64.dll (GAS Tecnologia)

==================== Restore Points =========================

02-10-2014 16:12:44 Scheduled Checkpoint

05-10-2014 21:36:14 Removed I Am Alive

12-10-2014 13:27:27 DirectX instalado

17-10-2014 01:51:15 Windows Update

18-10-2014 19:19:29 Installed HiJackThis

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {042C0C9C-E300-429A-9EBB-AF4B2EEFE72E} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {1EC92208-224D-4FA4-9B10-F7FF7C14A166} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-10-17] (Microsoft Corporation)

Task: {1FE0DDCA-6FAB-4F77-9B1D-8E5426D8BC58} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {304F533B-C2BA-4873-9FAF-A589C5C3CDD4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {341E5FFC-55DB-4694-9BA6-3928D6460861} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {44EEDB2C-F7C8-4819-BA9C-554AB35C5176} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {662FAE98-5B2A-4263-BA34-DA6949288671} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2014-02-24] ()

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {75F3D0E9-4840-4F8F-B701-B89D1B802DB0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9115856A-E1E7-4995-972B-6F3E28828132} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {A5E20984-1706-46C9-BFA9-F7828719BE66} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-03-07] (Microsoft Corporation)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D007C8CB-066E-4287-9837-3AE4064BF156} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

Task: {D4783B66-A4F3-49CD-A45D-B7078BE389CD} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E022BEF3-EA7A-48BD-9C74-7CC12E3AAE65} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)

Task: {E5A4F190-50EC-41A3-8FD8-DCA6F6AC70D6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-04-17 22:55 - 2014-04-17 22:55 - 00082432 _____ () C:\AMD\amdacpusrsvc.exe

2014-09-09 00:38 - 2014-07-24 15:40 - 00936656 _____ () C:\Users\Fuxi\AppData\Local\Viber\Viber.exe

2014-04-17 23:29 - 2014-04-17 23:29 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

2014-06-18 23:50 - 2014-05-08 23:40 - 00340032 _____ () C:\Users\Fuxi\Downloads\Rotmg cookie\Rotmg cookie.exe

2014-09-24 00:08 - 2014-09-24 00:08 - 43532288 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\libViber.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00770048 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\libGLESv2.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00098304 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\qfacebook.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00172032 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\libexif.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00049152 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\libEGL.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00876544 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\platforms\qwindows.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00024576 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\imageformats\qgif.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00024576 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\imageformats\qico.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00204800 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\imageformats\qjpeg.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00221184 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\imageformats\qmng.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00016384 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\imageformats\qsvg.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00016384 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\imageformats\qtga.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00311296 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\imageformats\qtiff.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00016384 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\imageformats\qwbmp.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00638976 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\sqldrivers\qsqlite.dll

2014-09-24 00:08 - 2014-09-24 00:08 - 00032768 _____ () C:\Users\Fuxi\AppData\Local\Viber\4.3.0.1453\iconengines\qsvgicon.dll

2014-09-24 20:14 - 2014-09-23 02:06 - 01098056 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libglesv2.dll

2014-09-24 20:14 - 2014-09-23 02:06 - 00174408 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\libegl.dll

2014-09-24 20:14 - 2014-09-23 02:07 - 08577864 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll

2014-09-24 20:14 - 2014-09-23 02:07 - 00331592 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll

2014-09-24 20:14 - 2014-09-23 02:06 - 01660232 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ffmpegsumo.dll

2014-09-24 20:14 - 2014-09-23 02:07 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Fuxi\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKCU\...\StartupApproved\Run: => "DAEMON Tools Lite"

HKCU\...\StartupApproved\Run: => "Skype"

========================= Accounts: ==========================

Administrator (S-1-5-21-4083787117-2184581036-2932984990-500 - Administrator - Disabled)

Fuxi (S-1-5-21-4083787117-2184581036-2932984990-1001 - Administrator - Enabled) => C:\Users\Fuxi

Guest (S-1-5-21-4083787117-2184581036-2932984990-501 - Limited - Disabled)

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

System errors:

=============

Error: (10/19/2014 11:34:34 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)

Description: Ocorreu um erro ao tentar ler o arquivo de hosts locais.

Error: (10/19/2014 11:34:01 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: O serviço Windows Search foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 30000 milissegundos: Restart the service.

Error: (10/19/2014 09:39:51 AM) (Source: DCOM) (EventID: 10010) (User: Gaspar)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (10/19/2014 09:39:21 AM) (Source: DCOM) (EventID: 10010) (User: Gaspar)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (10/19/2014 09:23:56 AM) (Source: DCOM) (EventID: 10010) (User: Gaspar)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (10/19/2014 09:23:26 AM) (Source: DCOM) (EventID: 10010) (User: Gaspar)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (10/19/2014 08:18:41 AM) (Source: DCOM) (EventID: 10010) (User: Gaspar)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (10/19/2014 08:18:11 AM) (Source: DCOM) (EventID: 10010) (User: Gaspar)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (10/19/2014 08:14:01 AM) (Source: DCOM) (EventID: 10010) (User: Gaspar)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (10/19/2014 08:13:30 AM) (Source: DCOM) (EventID: 10010) (User: Gaspar)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Microsoft Office Sessions:

=========================

CodeIntegrity Errors:

===================================

Date: 2014-10-19 08:21:01.320

Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-10-17 16:42:17.008

Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-10-16 14:13:50.476

Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2014-10-16 09:19:22.667