Rapport de ZHPDiag v1.33.

21 par Nicolas Coolman, Update du 27/12/2012 Run by Paulo at 28/12/2012 18:26:16 State : Your version is update. UAC : Not Found ---\\ MSIE: MFIE: GCIE: Web Browser Internet Explorer v8.0.6001.18702 Mozilla Firefox 17.0.1 v17.0.1 Google Chrome v23.0.1271.97 (Defaut)

---\\ Windows Product Information ~ Langage: Anglais Windows XP Professional Service Pack 3 (Build 2600) Windows Automatic Updates : OK Windows Genuine Advantage : OK ---\\ System Information ~ Processor: x86 Family 15 Model 67 Stepping 3, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 2047 MB (29% free) System Restore: Activ (Enable) System drive C: has 88 GB (68%) free of 128 GB ---\\ Logged in mode ~ Computer Name: PAULO ~ User Name: Paulo ~ All Users Names: UpdatusUser, SvcNagwin, SUPPORT_388945a0, Paulo, nagiosadmin, HelpAssistant, Convidado, ASPNET, Administrador, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Documents and Settings\Paulo\Dados de aplicativos\ ~ %Desktop% : C:\Documents and Settings\Paulo\Desktop\ ~ %Favorites% : C:\Documents and Settings\Paulo\Favoritos\ ~ %LocalAppData% : C:\Documents and Settings\Paulo\Configuraes locais\Dados de apl icativos\ ~ %StartMenu% : C:\Documents and Settings\Paulo\Menu Iniciar\ ~ %Windir% : C:\WINDOWS\ ~ %System% : C:\WINDOWS\system32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 88 Go of 128 Go) D:\ CD-ROM drive (Free 0 Go of 1 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 338 Go of 338 Go) F:\ Hard drive, Flash drive, Thumb drive (Free 410 Go of 466 Go)

---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Applicati on: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup : OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Result

s\Install] LastSuccessTime : OK ~ Scan Security Center in 00mn 00s

---\\ Search Generic System Files [MD5.064EC7FF5F58B928C3E119402977FA6D] - (.Microsoft Corporation - Windows Explo rer.) (.13/4/2008 - 18:21:00.) -- C:\WINDOWS\Explorer.exe [1035776] [MD5.73D2FD4E7C8E3FD553F988D54F616271] - (.Microsoft Corporation - Internet Exte nsions for Win32.) (.1/11/2012 - 09:12:29.) -- C:\WINDOWS\system32\wininet.dll [ 916992] [MD5.71D440F79B711627B12B567FB2EADB42] - (.Microsoft Corporation - Aplicativo de logon do Windows NT.) (.13/4/2008 - 18:21:24.) -- C:\WINDOWS\system32\Winlogon. exe [509952] [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Fun ction Driver for WinSock.) (.17/8/2011 - 10:49:54.) -- C:\WINDOWS\system32\Drive rs\AFD.sys [138496] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Por t Driver.) (.13/4/2008 - 10:40:32.) -- C:\WINDOWS\system32\Drivers\atapi.sys [96 512] [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File S ystem Driver.) (.13/4/2008 - 11:14:22.) -- C:\WINDOWS\system32\Drivers\Cdfs.sys [63744] [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM D river.) (.13/4/2008 - 10:40:48.) -- C:\WINDOWS\system32\Drivers\Cdrom.sys [62976 ] [MD5.A8D31E836CCF2F51009CE7DFFECF6D51] - (.Microsoft Corporation - FIPS Crypto D river.) (.13/4/2008 - 17:52:44.) -- C:\WINDOWS\system32\Drivers\Fips.sys [44672] [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/4/2008 - 08:36:06.) -- C:\WINDOW S\system32\Drivers\HDAudBus.sys [144384] [MD5.485BC6BEB778B5E9702E6AA3D384C0CB] - (.Microsoft Corporation - Driver de por ta i8042.) (.13/4/2008 - 17:55:20.) -- C:\WINDOWS\system32\Drivers\i8042prt.sys [53504] [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/4/2008 - 10:41:00.) -- C:\WINDOWS\system32\Drivers\Imapi.sys [4211 2] [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Ad dress Translator.) (.13/4/2008 - 10:57:16.) -- C:\WINDOWS\system32\Drivers\IpNat .sys [152832] [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver. ) (.13/4/2008 - 11:19:44.) -- C:\WINDOWS\system32\Drivers\IPSec.sys [75264] [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SM B Minirdr.) (.15/7/2011 - 10:29:31.) -- C:\WINDOWS\system32\Drivers\MRxSmb.sys [ 456320] [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/4/2008 - 11:21:02.) -- C:\WINDOWS\system32\Drivers\netBT.sys [162 816] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File Syste m Driver.) (.13/4/2008 - 11:15:54.) -- C:\WINDOWS\system32\Drivers\ntfs.sys [574 976] [MD5.9BADEE6B698BF1AF36E25A1A64A89EAB] - (.Microsoft Corporation - Driver de por ta paralela.) (.13/4/2008 - 18:02:26.) -- C:\WINDOWS\system32\Drivers\Parport.sy s [80384] [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini -port/call-manager driver.) (.13/4/2008 - 11:19:44.) -- C:\WINDOWS\system32\Driv ers\Rasl2tp.sys [51328] [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/4/2008 - 10:32:52.) -- C:\WINDOWS\system32\Drivers\rdp dr.sys [196224]

[MD5.68D749B04BFBBD4D4D15CC5185AFA4DD] - (.Microsoft Corporation - Redbook Audio Filter Driver.) (.13/4/2008 - 17:53:18.) -- C:\WINDOWS\system32\Drivers\redbook .sys [58240] [MD5.EB6B1E2C984D84470FF4FE7EF98CD44A] - (.Microsoft Corporation - Driver de cpia de sombra de volume.) (.13/4/2008 - 17:53:02.) -- C:\WINDOWS\system32\Drivers\v olsnap.sys [53248] ~ Scan Generic Processes in 00mn 02s

---\\ Hidden files state (Hidden/Total) ~ Mes images (My Pictures) : 1/2 ~ Mes musiques (My Musics) : 1/2 ~ Mes Videos (My Videos) : 1/2 ~ Mes Favoris (My Favorites) : 1/11 ~ Mes Documents (My Documents) : 1/48 ~ Mon Bureau (My Desktop) : 0/20 ~ Menu demarrer (Programs) : 1/165 ~ Scan Hidden Files in 00mn 00s

---\\ Running Processes [MD5.765433A4035C7FB8D0E21EE00DFC26B0] - (.Microsoft Corporation - Comunicao DDE DDE na rede.) -- C:\WINDOWS\system32\netdde.exe [113664] [PID.1840] [MD5.DCADAD156815B8D6F935377806A2CF95] - (...) -- C:\Arquivos de programas\AMD\O verDrive\AODAssist.exe [136648] [PID.1884] [MD5.EB4E26AD3A0E681C2FAABBACB0691A34] - (.Apache Software Foundation - Apache H TTP Server.) -- C:\Apache\bin\httpd.exe [20549] [PID.1904] [MD5.A2BDE0ED6BC0742722E5650B04A1E95C] - (...) -- c:\FrontBase\bin\FBexec.exe [158208] [PID.332] [MD5.85B16A92B117A5A800032ECD904B86DB] - (.Malwarebytes Corporation - Malwarebyt es Anti-Malware.) -- C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbamsch eduler.exe [399432] [PID.676] [MD5.20E2469DB709FC675E655CEAA11BE312] - (.Malwarebytes Corporation - Malwarebyt es Anti-Malware.) -- C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbamser vice.exe [676936] [PID.408] [MD5.EA942884F177DC4506403D23E4F148AA] - (...) -- C:\MySQL\MySQL Server 5.5\bin\ mysqld.exe [8197120] [PID.476] [MD5.79FC9C8139A0B30B838A2A737DF82CCC] - (.MySolutions Nordic (Michael Medin) Monitoring Agent.) -- C:\Arquivos de programas\NSClient++\nscp.exe [2355200] [ PID.1992] [MD5.BCE943896289A91AD75CC5652620B1C6] - (.GFI Software - GFI Software Anti Malw are Service.) -- C:\Arquivos de programas\Ad-Aware Antivirus\SBAMSvc.exe [3289 032] [PID.2260] [MD5.C950D0381B42A54541CD55ADCCF3D75B] - (.Seagate - Seagate Scheduler 2.) -- C: \Arquivos de programas\Arquivos comuns\Seagate\Schedule2\schedul2.exe [845808] [PID.2568] [MD5.637A0F23F9012358E92E6F99835494D1] - (.Microsoft Corporation - SQL Server VS S Writer.) -- C:\Arquivos de programas\Microsoft SQL Server\90\Shared\sqlwriter. exe [98840] [PID.2608] [MD5.12E33DD823D74680DE6F33BFA359EFB3] - (.Malwarebytes Corporation - Malwarebyt es Anti-Malware.) -- C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbamgui .exe [766536] [PID.2520] [MD5.47933A3D46DBAF3877B8052333FDB1FE] - (.IObit - Smart Defrag v2.) -- C:\Arqui vos de programas\IObit\Smart Defrag 2\SmartDefrag.exe [1610624] [PID.2396] [MD5.52BFDB243AF9F903ECAD7E7DFF6502C5] - (.Avira Operations GmbH & Co. KG - Avir a System Tray Tool.) -- C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe [348664] [PID.2580] [MD5.F421B0D869BEF54B8E96850896F1BBC8] - (.Lavasoft - Ad-Aware Browsing Protecti

on and Anti-Phish.) -- C:\Documents and Settings\All Users\Dados de aplicativos\ Ad-Aware Browsing Protection\adawarebp.exe [540056] [PID.2288] [MD5.751184DF487A1B3C95CB29B0D0069C28] - (.SUPERAntiSpyware.com - SUPERAntiSpywa re Application.) -- C:\Arquivos de programas\SUPERAntiSpyware\SUPERAntiSpyware.e xe [4763008] [PID.1244] [MD5.70779CF073EEA2097F2478DF591B0736] - (.Apache Software Foundation - Apache H TTP Server Monitor.) -- C:\Apache\bin\ApacheMonitor.exe [41051] [PID.3128] [MD5.0364491F2F72C58EB6EAFEA464251D6F] - (.Micro-Star Int'l Co., Ltd. - MSI Vide oGenie Application.) -- C:\Arquivos de programas\MSI\VideoGenie\VideoGenie.exe [1058616] [PID.2352] [MD5.E69FE1CEEE067BB19788A9E13A329A76] - (.Dachshund Software - No comment.) -C:\WINDOWS\Integrator.exe [151552] [PID.1048] [MD5.19CEE4F2BBD53A3DF83788C611ED9C0E] - (.Avira Operations GmbH & Co. KG - Avir a Scheduler.) -- C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe [862 24] [PID.3196] [MD5.2DBE44149C48487AFB8A3D54932752D1] - (.Avira Operations GmbH & Co. KG - Avir a On-Access Service.) -- C:\Arquivos de programas\Avira\AntiVir Desktop\avguard. exe [110032] [PID.3752] [MD5.059FDEE4565E4EFB169B5A225132C157] - (.Avira Operations GmbH & Co. KG - Avir a Shadow Copy Service.) -- C:\Arquivos de programas\Avira\AntiVir Desktop\avshad ow.exe [80336] [PID.4080] [MD5.2D08AC1443FFA7FBED9A5EA5FD49AEB3] - (.Google Inc. - Google Chrome.) -- C:\A rquivos de programas\Google\Chrome\Application\chrome.exe [1242728] [PID.3596] [MD5.480D0300879CB4C2F6B99C33DAA3CD33] - (.ZabKat - xplorer - explorer replacemen t.) -- C:\Arquivos de programas\zabkat\xplorer2_lite\xplorer2_lite.exe [784768 ] [PID.1036] [MD5.E47122BA6141DCF9F440218837693B74] - (.Nicolas Coolman - ZHPDiag.) -- C:\Arq uivos de programas\ZHPDiag\ZHPDiag.exe [3806208] [PID.1588] ~ Scan Processes Running in 00mn 07s

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3) M3 - MFPP: Plugins - [Paulo] -- C:\Arquivos de programas\Mozilla FireFox\searchp lugins\buscape.xml M3 - MFPP: Plugins - [Paulo] -- C:\Arquivos de programas\Mozilla FireFox\searchp lugins\google.xml M3 - MFPP: Plugins - [Paulo] -- C:\Arquivos de programas\Mozilla FireFox\searchp lugins\mercadolivre.xml M3 - MFPP: Plugins - [Paulo] -- C:\Arquivos de programas\Mozilla FireFox\searchp lugins\twitter.xml M3 - MFPP: Plugins - [Paulo] -- C:\Arquivos de programas\Mozilla FireFox\searchp lugins\wikipedia-br.xml M3 - MFPP: Plugins - [Paulo] -- C:\Arquivos de programas\Mozilla FireFox\searchp lugins\yahoo-br.xml M3 - MFPP: Plugins - [Paulo] -- C:\Arquivos de programas\Mozilla FireFox\searchp lugins\yahoo.xml P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macrome d\Flash\NPSWF32_11_5_502_135.dll P2 - FPN: [HKLM] [@garmin.com/GpsControl] - (.GARMIN Corp. - Garmin Communicator Plug-In 4.0.4.0.) -- C:\Arquivos de programas\Garmin GPS Plugin\npGarmin.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.9.2] - (.Oracle Corporation - NP Runtime Script Plug-in Library for Java(TM) Deploy.) -- C:\WINDOWS\system32\npDe ployJava1.dll P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.9.2] - (.Oracle Corporation Next Generation Java Plug-in 10.9.2 for Mozilla browsers.) -- C:\Arquivos de pro gramas\Java\jre7\bin\plugin2\npjp2.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.10411.0.) -- C:\Arquivos de programas\Microsoft Silverlight\5.1.10411.0\np ctrl.dll

P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Wi ndows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS \Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - G oogle Update.) -- C:\Arquivos de programas\Google\Update\1.3.21.124\npGoogleUpda te3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - G oogle Update.) -- C:\Arquivos de programas\Google\Update\1.3.21.124\npGoogleUpda te3.dll P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For F irefox and Netscape 11.0.0.) -- C:\Arquivos de programas\Adobe\Reader 11.0\Reade r\AIR\nppdf32.dll ~ Scan Firefox Browser in 00mn 02s

---\\ Internet Explorer Extensions, Start, Search (R4,R3,R0,R1) R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.micro soft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.mic rosoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about: noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:s ecurityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dl l/tabswelcome.htm R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://i e.search.msn.com R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.0.) (No version) -- (.not file.) R3 - URLSearchHook: (no name) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.0.) (No version) -- (.not file.) R3 - URLSearchHook: (no name) - {e0301295-ab3e-4af3-979f-3d453c5f9f48} . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 11.0.0.) (No version) -- (.not file.) R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2 ~ Scan IE Browser in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet r = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet e = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet xy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet 1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Proxy = wininet.dll ~ Scan Proxy management in 00mn 00s

Settings,ProxyServe Settings,ProxyEnabl Settings,MigratePro Settings,EnableHttp Settings,AutoConfig

---\\ F2 - REG:system.ini: USERINIT=C:\WINDOWS\system32\userinit.exe,

F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Scan Keys in 00mn 00s

---\\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Scan Hosts File in 00mn 00s ~ Nombre de lignes (Lines number): 1

---\\ Browser Helper Objects (O2) O2 - BHO: (no name) - Disabled:{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} Orphean Ke y O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} . (.Spigot , Inc. - Widgi Toolbar for Internet Explorer.) -- C:\Arquivos de programas\IObit Apps Toolbar\IE\6.6\iobitappsToolbarIE.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Sy stems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} . (. Unknown owner - Ad-Aware Security Add-on Link Library.) -- C:\Arquivos de progra mas\adawaretb\adawareDx.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Arquivos de programa s\Java\jre7\bin\ssv.dll O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} . (.Trend Media G roup - FlashGet Browser Helper Object.) -- C:\Documents and Settings\Paulo\Dados de aplicativos\FlashGetBHO\FlashGetBHO.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Arquivos de progra mas\Java\jre7\bin\jp2ssv.dll ~ Scan BHO in 00mn 01s

---\\ Internet Explorer toolbars (O3) O3 - Toolbar: Ad-Aware Security Add-on - [HKLM]{6c97a91e-4524-4019-86af-2aa2d567 bf5c} . (.Unknown owner - Ad-Aware Security Add-on Link Library.) -- C:\Arquivos de programas\adawaretb\adawareDx.dll O3 - Toolbar: IObit Apps Toolbar - [HKLM]{03EB0E9C-7A91-4381-A220-9B52B641CDB1} . (.Spigot, Inc. - Widgi Toolbar for Internet Explorer.) -- C:\Arquivos de progr amas\IObit Apps Toolbar\IE\6.6\iobitappsToolbarIE.dll ~ Scan Toolbar in 00mn 00s

---\\ Auto loading programs from Registry and folders (O4) O4 - HKLM\..\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Arquivos de programas\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Run: [Ad-Aware Browsing Protection] . (.Lavasoft - Ad-Aware Browsin g Protection and Anti-Phish.) -- C:\Documents and Settings\All Users\Dados de ap licativos\Ad-Aware Browsing Protection\adawarebp.exe O4 - HKLM\..\Run: [amd_dc_opt] . (.AMD - AMD Dual-Core Optimizer.) -- C:\Arquivo s de programas\AMD\Dual-Core Optimizer\amd_dc_opt.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] . (.SUPERAntiSpyware.com - SUPERAntiSpyware Application.) -- C:\Arquivos de programas\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe O4 - HKUS\S-1-5-21-1606980848-1547161642-839522115-1003\..\Run: [SUPERAntiSpywar e] . (.SUPERAntiSpyware.com - SUPERAntiSpyware Application.) -- C:\Arquivos de p rogramas\SUPERAntiSpyware\SUPERAntiSpyware.exe ~ Scan Application in 00mn 00s

---\\ Other User Links (O4) O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Adobe Reader XI .lnk . (.Adobe Systems Incorporated.) -- C:\Arquivos de programas\Adobe\Reader 11.0\Reader\AcroRd32.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Amaya.lnk . (.W 3C INRIA.) -- C:\Arquivos de programas\Amaya\WindowsWX\bin\amaya.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Ashampoo Burnin g Studio 2012.lnk . (.Ashampoo.) -- C:\Arquivos de programas\Ashampoo\Ashampoo Burning Studio 2012\burningstudio2012.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Ashampoo WinOpt imizer 2012.lnk . (.Ashampoo Development GmbH & Co. KG.) -- C:\Arquivos de prog ramas\Ashampoo\Ashampoo WinOptimizer 2012\WO2012.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Astah Community .lnk . (.Change Vision, Inc..) -- C:\Arquivos de programas\astah-community\asta h-com.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\aTube Catcher.l nk . (.DsNET.) -- C:\Arquivos de programas\DsNET Corp\aTube Catcher 2.0\yct.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Avira Control C enter.lnk . (.Avira Operations GmbH & Co. KG.) -- C:\Arquivos de programas\Avir a\AntiVir Desktop\avcenter.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\DOSBox 0.74.lnk . (.DOSBox Team.) -- C:\Arquivos de programas\DOSBox-0.74\DOSBox.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\FastStone Photo Resizer.lnk . (...) -- C:\Arquivos de programas\FastStone Photo Resizer\FSResi zer.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\GOM Player.lnk . (.Gretech Corp..) -- C:\Arquivos de programas\GRETECH\GomPlayer\GOM.EXE O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Hex Editor Neo. lnk . (.HHD Software Ltd..) -- C:\Arquivos de programas\HHD Software\Hex Editor Neo\HexFrame.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\MoreMotion Web Express.lnk . (.MOR YAZILIM.) -- C:\Arquivos de programas\Mor\MoreMotion Web Ex press 3.3\mmwe.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\MoreMotion XML Editor.lnk . (.MOR YAZILIM.) -- C:\Arquivos de programas\Mor\MoreMotion Web Exp ress 3.3\mmEd.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Mozilla Firefox .lnk . (.Mozilla Corporation.) -- C:\Arquivos de programas\Mozilla Firefox\fire fox.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Noiseware Commu nity Edition.lnk . (.Imagenomic LLC.) -- C:\Arquivos de programas\Imagenomic\No iseware Community Edition\Noiseware.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\O&O Defrag.lnk . (.Acresso Software Inc..) -- C:\WINDOWS\Installer\{E29CFB36-F070-4612-8DB5-70 38161B6294}\NewShortcut11_D840A6EA92214470BCE0FD7EF9D6C0CF.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\One-Click-Optim izer (WO2012).lnk . (.Ashampoo Development GmbH & Co. KG.) -- C:\Arquivos de pr ogramas\Ashampoo\Ashampoo WinOptimizer 2012\WO2012.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\PageBreeze HTML

Editor.lnk . (.Solutionsoft.) -- C:\Arquivos de programas\PageBreeze\pagebreez e.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Process Hacker 2.lnk . (.wj32.) -- C:\Arquivos de programas\Process Hacker 2\ProcessHacker.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Seagate DiscWiz ard.lnk . (.Seagate.) -- C:\Arquivos de programas\Seagate\DiscWizard\DiscWizard Launcher.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\SlimCleaner.lnk . (...) -- C:\WINDOWS\Installer\{0B70A31D-F094-4B36-A28E-1162AB1BABDF}\Icon.ex e O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\SUPERAntiSpywar e Free Edition.lnk . (.SUPERAntiSpyware.com.) -- C:\Arquivos de programas\SUPER AntiSpyware\SUPERAntiSpyware.exe O4 - Global Startup: C:\Documents And Settings\All Users\Desktop\Video Search.ln k . (.DsNET.) -- C:\Arquivos de programas\DsNET Corp\aTube Catcher 2.0\yct.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Abexo Free Registry Cleaner.lnk . (.Abexo.) -- C:\Arquivos de programas\Abexo\afrc\afrc.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\App Upgrade 2012.03 .lnk . (.Sygic.) -- C:\Arquivos de programas\Sygic Multilaser\AppUpgrade.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\ArgoUML.lnk . (.Ora cle Corporation.) -- C:\Arquivos de programas\Java\jre7\bin\javaw.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\CodeBlocks.lnk . (. ..) -- C:\Arquivos de programas\CodeBlocks\codeblocks.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Eclipse Juno.lnk . (...) -- F:\eclipse\eclipse.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Eusing Free Registr y Cleaner.lnk . (...) -- C:\Arquivos de programas\Eusing Free Registry Cleaner\ Regcleaner.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Eusing Free Registr y Defrag.lnk . (...) -- C:\Arquivos de programas\Eusing Free Registry Defrag\Re gDefrag.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\FlashGet downloads. lnk . (...) -- F:\Downloads O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Free Window Registr y Repair.lnk . (...) -- C:\Arquivos de programas\Free Window Registry Repair\Re gpair.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Google Chrome.lnk . (.Google Inc..) -- C:\Arquivos de programas\Google\Chrome\Application\chrome.e xe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\HTTrack Website Cop ier.lnk . (.HTTrack.) -- C:\Arquivos de programas\WinHTTrack\WinHTTrack.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\KMPlayer.lnk . (.KM P Media co.,Ltd.) -- C:\Arquivos de programas\The KMPlayer\KMPlayer.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Lazarus.lnk . (...) -- C:\lazarus\lazarus.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Notepad++.lnk . (.D on HO [email protected].) -- C:\Arquivos de programas\Notepad++\notepad++.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\RegCompact.NET.lnk . (.ExperimentalScene.) -- C:\Arquivos de programas\RegCompact.NET\RegCompact.N ET.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\RegMagik.lnk . (.Bo ris Guzner Consulting.) -- C:\Arquivos de programas\RegMagik\RegMagik.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Revo Uninstaller.ln k . (.VS Revo Group.) -- C:\Arquivos de programas\VS Revo Group\Revo Uninstalle r\Revouninstaller.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\SIW.lnk . (.Topala Software Solutions.) -- C:\Arquivos de programas\SIW 2011 Home Edition\siw.exe O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\VideoGenie.lnk . (. Micro-Star Int'l Co., Ltd..) -- C:\Arquivos de programas\MSI\VideoGenie\VideoGe nie.exe

O4 - Global Startup: C:\Documents And Settings\Paulo\Desktop\Vit Registry Fix 9. 5.lnk . (.VITSOFT .) -- C:\Arquivos de programas\VITSOFT\Vit Registry Fix\Vit Re gistry Fix 9.5.exe ~ Scan Global Startup in 00mn 26s

---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9) O9 - Extra button: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} . (.Unknown owner - WinHTTrackIEBar Module.) -- C:\Arquivos de programas\WinHTTrac k\WinHTTrackIEBar.dll O9 - Extra button: Launch WinHTTrack - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\Arquivos de programas\Microsoft Office\Office12\REFBARH.ICO O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\Arquivos de programas\Microsoft Office\Office12\REFBARH.ICO ~ Scan IE Extra Buttons in 00mn 00s

---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fornecedor de servios do Microsoft Windows Sockets 2.0.) -- C:\WINDOWS\system32\mswsock.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR P rovider DLL.) -- C:\WINDOWS\system32\winrnr.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fornecedor de servios do Microsoft Windows Sockets 2.0.) -- C:\WINDOWS\system32\mswsock.dll ~ Scan Winsock in 00mn 00s

---\\ Extra group in IE 'Advanced Options'window (O11) O11 - Options group: [java_sun] Java (Oracle). (.Oracle Corporation - Java(TM) D eployment Library .) - C:\Arquivos de programas\Java\jre7\bin\deploy.dll O11 - Options group: [java_vm] Java (Oracle). (.Oracle Corporation - Java(TM) De ployment Library .) - C:\Arquivos de programas\Java\jre7\bin\deploy.dll ~ Scan IE Plugins in 00mn 00s

---\\ 'Reset Web Settings' hijack (O14) O14 - IERESET.INF: SEARCH_PAGE_URL=SEARCH_PAGE_URL="&http://home.microsoft.com/i ntl/br/access/allinone.asp" O14 - IERESET.INF: SAFESITE_VALUE=SAFESITE_VALUE="search.msn.com.br" ~ Scan IE Paramtres WEB in 00mn 00s

---\\ ActiveX Objects (Downloaded Program Files) (O16) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Val idation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http:// windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site .cab?1352222943203 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http:// update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab? 1352223130750 ~ Scan Objets ActiveX in 00mn 00s

---\\ Lop.com/Domain Hijackers (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{AA61C750-357A-4746-8798-A5CE9C4F4373}: NameServer = 8.26.56.26,156.154.70.22 O17 - HKLM\System\CCS\Services\Tcpip\..\{AA61C750-357A-4746-8798-A5CE9C4F4373}: DhcpNameServer = 201.17.0.118 201.17.0.78 O17 - HKLM\System\CS1\Services\Tcpip\..\{AA61C750-357A-4746-8798-A5CE9C4F4373}: DhcpNameServer = 201.17.0.118 201.17.0.78 O17 - HKLM\System\CS3\Services\Tcpip\..\{AA61C750-357A-4746-8798-A5CE9C4F4373}: NameServer = 8.26.56.26,156.154.70.22 O17 - HKLM\System\CS3\Services\Tcpip\..\{AA61C750-357A-4746-8798-A5CE9C4F4373}: DhcpNameServer = 201.17.0.118 201.17.0.78 ~ Scan Domain in 00mn 00s

---\\ Extra protocols (O18) O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corp oration - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corpor ation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corpor ation - Controle ActiveX para fluxo de vdeo.) -- C:\WINDOWS\system32\msvidctl.dll O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corpo ration - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corpor ation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Cor poration - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corpo ration - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corp oration - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corpor ation - Microsoft InfoTech Storage System Library.) -- C:\WINDOWS\System32\itss.d ll O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} . (.Microsoft Corpor ation - Controle ActiveX para fluxo de vdeo.) -- C:\WINDOWS\System32\msvidctl.dll O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corp oration - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Cor poration - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corp oration - Microsoft Internet Messaging API.) -- C:\WINDOWS\System32\inetcomm.dll O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corpora tion - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Co rporation - Microsoft Help Data Services Module.) -- C:\Arquivos de programas\Arq uivos comuns\Microsoft Shared\Help\hxds.dll O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Cor poration - Microsoft InfoTech Storage System Library.) -- C:\WINDOWS\System32\its s.dll O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corpor ation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft C orporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\System32\mshtml.dll O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corpora tion - Controle ActiveX para fluxo de vdeo.) -- C:\WINDOWS\system32\msvidctl.dll

O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft C orporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corpor ation - WIA Scripting Layer.) -- C:\WINDOWS\System32\wiascr.dll O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WIND OWS\system32\mscoree.dll O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . ( .Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS \system32\mscoree.dll O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WIND OWS\system32\mscoree.dll O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . ( .Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\url mon.dll O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Cor poration - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corpor ation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Cor poration - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Micr osoft Corporation - DLL comum do Shell do Windows.) -- C:\WINDOWS\system32\SHELL 32.dll O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Co rporation - Microsoft Office XML MIME Filter.) -- C:\Arquivos de programas\Arqui vos comuns\Microsoft Shared\OFFICE12\MSOXMLMF.dll ~ Scan Protocole Additionnel in 00mn 01s

---\\ AppInit_DLLs Registry value Autorun (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) - C:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Relat ed API.) -- C:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agente de rede off-lin e.) -- C:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Ha ndler.) -- C:\WINDOWS\system32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL comum para rec eber notificaes do Winl.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL comum para receb er notificaes do Winl.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL de notificao do se rvio de logon secu.) -- C:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL comum para receb er notificaes do Winl.) -- C:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL comum para recebe r notificaes do Winl.) -- C:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL comum para rece ber notificaes do Winl.) -- C:\WINDOWS\system32\wlnotify.dll ~ Scan Winlogon in 00mn 00s

---\\ ShellServiceObjectDelayLoad (O21) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (.Micro soft Corporation - DLL comum do Shell do Windows.) -- C:\WINDOWS\system32\shell3

2.dll O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (.Microsoft Corpo ration - DLL comum do Shell do Windows.) -- C:\WINDOWS\system32\SHELL32.dll O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Cor poration - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corp oration - Objeto de servio do shell de Systray.) -- C:\WINDOWS\system32\stobject. dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Micros oft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\sy stem32\WPDShServiceObj.dll ~ Scan SSODL in 00mn 00s

---\\ SharedTaskScheduler (O22) O22 - SharedTaskScheduler: Daemon de cache de categorias de componente - {8C7461 EF-2B13-11d2-BE35-3078302C2030} - (.not file.) ~ Scan STS/SSO in 00mn 00s

---\\ non Microsoft non disabled Windows XP/NT/2000 Services (O23) O23 - Service: Ad-Aware Service (Ad-Aware Service) . (.Lavasoft Limited - Ad-Awa re Antivirus Service.) - C:\Arquivos de programas\Ad-Aware Antivirus\AdAwareServ ice.exe O23 - Service: Avira Realtime Protection (AntiVirService) . (.Avira Operations G mbH & Co. KG - Avira On-Access Service.) - C:\Arquivos de programas\Avira\AntiVi r Desktop\avguard.exe O23 - Service: AODService (AODService) . (...) - C:\Arquivos de programas\AMD\Ov erDrive\AODAssist.exe O23 - Service: Apache2.2 (Apache2.2) . (.Apache Software Foundation - Apache HTT P Server.) - C:\Apache\bin\httpd.exe O23 - Service: FBExec Service (FBExecService) . (...) - c:\FrontBase\bin\FBexec. exe O23 - Service: Servio do Google Update (gupdate) (gupdate) . (.Google Inc. - Goog le Installer.) - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe O23 - Service: MBAMScheduler (MBAMScheduler) . (.Malwarebytes Corporation - Malw arebytes Anti-Malware.) - C:\Arquivos de programas\Malwarebytes' Anti-Malware\mb amscheduler.exe O23 - Service: MBAMService (MBAMService) . (.Malwarebytes Corporation - Malwareb ytes Anti-Malware.) - C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbamse rvice.exe O23 - Service: MySQL55 (MySQL55) . (...) - C:\MySQL Server 5.5\my.ini O23 - Service: NSClient++ (Win32) (nscp) . (.MySolutions Nordic (Michael Medin) - Monitoring Agent.) - C:\Arquivos de programas\NSClient++\nscp.exe O23 - Service: postgresql-9.2 - PostgreSQL Server 9.2 (postgresql-9.2) . (.Postg reSQL Global Development Group - pg_ctl - starts/stops/restarts the PostgreS.) C:\PostgreSQL\9.2\bin\pg_ctl.exe O23 - Service: Ad-Aware (SBAMSvc) . (.GFI Software - GFI Software Anti Malware S ervice.) - C:\Arquivos de programas\Ad-Aware Antivirus\SBAMSvc.exe O23 - Service: Seagate Scheduler2 Service (SgtSch2Svc) . (.Seagate - Seagate Sch eduler 2.) - C:\Arquivos de programas\Arquivos comuns\Seagate\Schedule2\schedul2 .exe ~ Scan Services in 00mn 01s

---\\ Windows Active Desktop & MHTML Editor (O24) O24 - Desktop Component 0: Minha pgina inicial atual - file:About:Home

O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Scan Desktop Component in 00mn 00s

---\\ O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (SmartDefragBootTime.exe) - File not found ~ Scan Keys in 00mn 00s

---\\ Task Planned Automatically(039) O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Ad-Aware Antivirus Schedu led Scan.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\Adobe Flash Player Update r.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GlaryInitialize.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCo re.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA .job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\MemOptimizer-02BB2F56CB96 4deb8996194DE7EB5275.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SmartDefragUpdate.job O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\SmartDefrag_Startup.job [MD5.82839FE5AD93B7AC4955120E4EC25FBD] [APT] [Ad-Aware Antivirus Scheduled Scan] (.Lavasoft Limited.) -- C:\ARQUIV~1\AD-AWA~1\AdAwareLauncher.exe [MD5.95CE557D16A75606CCC2D7F3B0B0BCCB] [APT] [Adobe Flash Player Updater] (.Adob e Systems Incorporated.) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdate Service.exe [MD5.BD2A0C622D587300392FD50599C7EAF3] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Arquivos de programas\Glary Utilities\initialize.exe [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Goo gle Inc..) -- C:\Arquivos de programas\Google\Update\GoogleUpdate.exe [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Googl e Inc..) -- C:\Arquivos de programas\Google\Update\GoogleUpdate.exe [MD5.D410EA1548263BE96685F98BFD0323BE] [APT] [MemOptimizer-02BB2F56CB964deb89961 94DE7EB5275] (.YL Software.) -- C:\Arquivos de programas\WinUtilities\ToolMemory Optimizer.exe [MD5.F3D270CDBC78E388F4C3C3F1B7EE6063] [APT] [SmartDefragUpdate] (.IObit.) -- C: \Arquivos de programas\IObit\Smart Defrag 2\AutoUpdate.exe [MD5.47933A3D46DBAF3877B8052333FDB1FE] [APT] [SmartDefrag_Startup] (.IObit.) -C:\Arquivos de programas\IObit\Smart Defrag 2\SmartDefrag.exe ~ Scan Scheduled Task in 00mn 00s

---\\ ActiveSetup Installed Components (O40) O40 - ASIC: Atualizao de Verso do Internet Explorer - <{12d0ed0d-0ee0-4f90-8827-78c efb8f4988} . (.Microsoft Corporation - IE Per User Active Setup Uninstall Utilit y.) -- C:\WINDOWS\system32\ieudinit.exe O40 - ASIC: Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.M icrosoft Corporation - Utilitrio de Instalao do Microsoft Windows Media Player.) -C:\WINDOWS\inf\unregmp2.exe O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} . (.Micr osoft Corporation - Utilitrio de Inicializao por Usurio do Internet Explorer.) -- C: \WINDOWS\system32\ie4uinit.exe.mui O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} . ( .Microsoft Corporation - IEAK branding.) -- C:\WINDOWS\system32\iedkcs32.dll

O40 - ASIC: Outlook Express - >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} . (.Micros oft Corporation - Windows NT User Data Migration Tool.) -- C:\WINDOWS\system32\s hmgrate.exe O40 - ASIC: Microsoft NetShow Player - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDOWS\system3 2\wmpdxm.dll O40 - ASIC: Microsoft Windows Media Player 6.4 - {22d6f312-b0f6-11d0-94ab-0080c7 4c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\WINDO WS\system32\wmpdxm.dll O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API de tema do Windows.) -- C:\WINDOWS\system32\themeui.dll O40 - ASIC: Microsoft Outlook Express 6 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Biblioteca de instalao do Outlook Express.) -- C:\Arq uivos de programas\Outlook Express\setup50.exe O40 - ASIC: NetMeeting 3.01 - {44BBA842-CC51-11CF-AAFA-00AA00B6015B} . (...) -C:\WINDOWS\INF\msnetmtg.inf O40 - ASIC: Windows Messenger 4.7 - {5945c046-1e7d-11d1-bc44-00c04fd912be} . (.. .) -- C:\WINDOWS\INF\msmsgs.inf O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.M icrosoft Corporation - Extenso shell da pasta FTP do Microsoft Internet Explorer. ) -- C:\WINDOWS\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FA A6} . (...) -- C:\WINDOWS\INF\wmp11.inf O40 - ASIC: Catlogo de endereos 6 - {7790769C-0471-11d2-AF11-00C04FA35D02} . (.Mic rosoft Corporation - Biblioteca de instalao do Outlook Express.) -- C:\Arquivos de programas\Outlook Express\setup50.exe O40 - ASIC: Atualizao da rea de trabalho do Windows - {89820200-ECBD-11cf-8B85-00AA 005B4340} . (.Microsoft Corporation - DLL comum do Shell do Windows.) -- C:\WIND OWS\system32\shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Micro soft Corporation - Utilitrio de Inicializao por Usurio do Internet Explorer.) -- C:\ WINDOWS\system32\ie4uinit.exe.mui O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Cor poration - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\WINDOWS\system32\msco ries.dll O40 - ASIC: Installed Component - S-1-5-21-1606980848-1547161642-839522115-1003 - <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} -- Not Hexadcimal CLSID O40 - ASIC: Installed Component - S-1-5-21-1606980848-1547161642-839522115-1003 - >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS -- Not Hexadcimal CLSID ~ Scan Active Setup in 00mn 01s

---\\ Drivers launched at startup (O41) O41 - Driver: (6bd6aafb-ce29-4dbb-ad25-c59a3e0c7415) . (.Systems Internals - Wi ndows NT File System Monitor.) - C:\WINDOWS\iprot\6bd6aafb-ce29-4dbb-ad25-c59a3e 0c7415\PhysMem.sys O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for W inSock.) - C:\WINDOWS\system32\drivers\afd.sys O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\WINDOWS\system32\DRIVERS\avipbb.sys O41 - Driver: (avkmgr) . (.Avira GmbH - Avira Manager Driver.) - C:\WINDOWS\sys tem32\DRIVERS\avkmgr.sys O41 - Driver: (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WIN DOWS\system32\DRIVERS\cdrom.sys O41 - Driver: (HWiNFO32) . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) - C:\WINDO WS\system32\drivers\HWiNFO32.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Driver de porta i8042.) C:\WINDOWS\system32\DRIVERS\i8042prt.sys O41 - Driver: (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WI

NDOWS\system32\DRIVERS\imapi.sys O41 - Driver: (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS\s ystem32\DRIVERS\ipsec.sys O41 - Driver: (Kbdclass) . (.Microsoft Corporation - Driver de classe teclado.) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys O41 - Driver: (Mouclass) . (.Microsoft Corporation - Driver de classe modem.) C:\WINDOWS\system32\DRIVERS\mouclass.sys O41 - Driver: (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C :\WINDOWS\system32\DRIVERS\mrxsmb.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS\system32\DRIVERS\netbios.sys O41 - Driver: (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\W INDOWS\system32\DRIVERS\netbt.sys O41 - Driver: (Processor) . (.Microsoft Corporation - Driver de dispositivo de processador.) - C:\WINDOWS\system32\DRIVERS\processr.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Dri ver.) - C:\WINDOWS\system32\DRIVERS\rasacd.sys O41 - Driver: (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering Su bSystem Driver.) - C:\WINDOWS\system32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS\s ystem32\DRIVERS\RDPCDD.sys O41 - Driver: (redbook) . (.Microsoft Corporation - Redbook Audio Filter Driver .) - C:\WINDOWS\system32\DRIVERS\redbook.sys O41 - Driver: (SASDIFSV) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASD IFSV.SYS.) - C:\Arquivos de programas\SUPERAntiSpyware\SASDIFSV.sys O41 - Driver: (SASKUTIL) . (.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASK UTIL.SYS.) - C:\Arquivos de programas\SUPERAntiSpyware\SASKUTIL.sys O41 - Driver: (sbaphd) . (.GFI Software - GFI ActiveProtection hook driver.) C:\WINDOWS\system32\drivers\sbaphd.sys O41 - Driver: (SBRE) . (.GFI Software - GFI Anti-Rootkit Driver.) - C:\WINDOWS\s ystem32\drivers\SBREdrv.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Driver de dispositivo serial .) - C:\WINDOWS\system32\DRIVERS\serial.sys O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS\sy stem32\DRIVERS\ssmdrv.sys O41 - Driver: (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C: \WINDOWS\system32\DRIVERS\tcpip.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C :\WINDOWS\system32\DRIVERS\termdd.sys O41 - Driver: Controlador de vdeo VGA. (VgaSave) . (.Microsoft Corporation - VGA/ Super VGA Video Driver.) - C:\WINDOWS\system32\drivers\vga.sys O41 - Driver: Windows Socket 2.0 Non-IFS Service Provider Support Environment (W S2IFSL) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\WINDOWS\system32\d rivers\ws2ifsl.sys ~ Scan Drivers in 00mn 02s

---\\ Software installed (O42) O42 - Logiciel: 7-Zip 9.20 - (.Unknown owner.) [HKLM] -- 7-Zip O42 - Logiciel: AC3Filter 2.5b - (.Alexander Vigovsky.) [HKLM] -- AC3Filter_is1 O42 - Logiciel: AM-DeadLink 4.4 - (.www.aignes.com.) [HKLM] -- aignesamdeadlink_ is1 O42 - Logiciel: AMD OverDrive - (.Nome de sua empresa:.) [HKLM] -- {887B05EA-3AC 6-4A47-BBEF-BAAE351D1EFF} O42 - Logiciel: Abexo Free Registry Cleaner - (.Abexo.) [HKLM] -- Abexo Free Reg istry Cleaner O42 - Logiciel: ActivePerl 5.16.1 Build 1601 - (.ActiveState.) [HKLM] -- {9441AF 70-8CCC-41EE-B2C1-398F5FE7E387} O42 - Logiciel: Ad-Aware Security Add-on - (.Lavasoft.) [HKLM] -- adawaretb

O42 - Logiciel: Administrative Templates for Windows PowerShell - (.Microsoft Co rporation.) [HKLM] -- {8F4EF07D-F20F-48AC-9145-13431C32942E} O42 - Logiciel: Adobe Flash Player 11 Plugin - (.Adobe Systems Incorporated.) [H KLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader XI - Portugus - (.Adobe Systems Incorporated.) [HKLM ] -- {AC76BA86-7AD7-1046-7B44-AB0000000001} O42 - Logiciel: Advanced Image Resizer 2007 v5.1.9 - (.Urban Twilight Studios.) [HKLM] -- Advanced Image Resizer 2007_is1 O42 - Logiciel: Amaya - (.Unknown owner.) [HKLM] -- Amaya O42 - Logiciel: Apache HTTP Server 2.2.22 - (.Apache Software Foundation.) [HKLM ] -- {85262A06-2D8C-4BC1-B6ED-5A705D09CFFC} O42 - Logiciel: ArgoUML 0.34 - (.Unknown owner.) [HKLM] -- ArgoUML O42 - Logiciel: Ashampoo Burning Studio 2012 v10.0.15 - (.Ashampoo GmbH & Co. KG .) [HKLM] -- Ashampoo Burning Studio 2012_is1 O42 - Logiciel: Ashampoo WinOptimizer 2012 v.8.1.4 - (.Ashampoo GmbH & Co. KG.) [HKLM] -- Ashampoo WinOptimizer 2012_is1 O42 - Logiciel: Astah Community 6.6 - (.Change Vision, Inc..) [HKLM] -- astah* c ommunity_is1 O42 - Logiciel: Atualizao de Segurana para Microsoft Windows (KB2564958) - (.Micros oft Corporation.) [HKLM] -- KB2564958 O42 - Logiciel: Atualizao de Segurana para Windows Internet Explorer 8 (KB2510531) - (.Microsoft Corporation.) [HKLM] -- KB2510531-IE8 O42 - Logiciel: Atualizao de Segurana para Windows Internet Explorer 8 (KB2544521) - (.Microsoft Corporation.) [HKLM] -- KB2544521-IE8 O42 - Logiciel: Atualizao de Segurana para Windows Internet Explorer 8 (KB2618444) - (.Microsoft Corporation.) [HKLM] -- KB2618444-IE8 O42 - Logiciel: Atualizao de Segurana para Windows Internet Explorer 8 (KB2744842) - (.Microsoft Corporation.) [HKLM] -- KB2744842-IE8 O42 - Logiciel: Atualizao de Segurana para Windows Internet Explorer 8 (KB2761465) - (.Microsoft Corporation.) [HKLM] -- KB2761465-IE8 O42 - Logiciel: Atualizao de Segurana para Windows Internet Explorer 8 (KB982381) (.Microsoft Corporation.) [HKLM] -- KB982381-IE8 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2115168) - (.Microsoft Cor poration.) [HKLM] -- KB2115168 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2229593) - (.Microsoft Cor poration.) [HKLM] -- KB2229593 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2296011) - (.Microsoft Cor poration.) [HKLM] -- KB2296011 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2347290) - (.Microsoft Cor poration.) [HKLM] -- KB2347290 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2360937) - (.Microsoft Cor poration.) [HKLM] -- KB2360937 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2387149) - (.Microsoft Cor poration.) [HKLM] -- KB2387149 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2393802) - (.Microsoft Cor poration.) [HKLM] -- KB2393802 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2419632) - (.Microsoft Cor poration.) [HKLM] -- KB2419632 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2423089) - (.Microsoft Cor poration.) [HKLM] -- KB2423089 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2440591) - (.Microsoft Cor poration.) [HKLM] -- KB2440591 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2443105) - (.Microsoft Cor poration.) [HKLM] -- KB2443105 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2476490) - (.Microsoft Cor poration.) [HKLM] -- KB2476490 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2478960) - (.Microsoft Cor poration.) [HKLM] -- KB2478960 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB2478971) - (.Microsoft Cor poration.) [HKLM] -- KB2478971

O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2479943 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2481109 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2483185 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2485663 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2506212 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2507618 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2507938 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2508429 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2509553 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2510581 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2535512 O42 - Logiciel: Atualizao de Segurana Corporation.) [HKLM] -- KB2536276-v2 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2544521 O42 - Logiciel: Atualizao de Segurana Corporation.) [HKLM] -- KB2544893-v2 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2566454 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2570947 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2584146 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2585542 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2592799 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2598479 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2603381 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2618451 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2619339 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2620712 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2624667 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2631813 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2646524 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2653956 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2655992 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2659262

para Windows XP (KB2479943) - (.Microsoft Cor para Windows XP (KB2481109) - (.Microsoft Cor para Windows XP (KB2483185) - (.Microsoft Cor para Windows XP (KB2485663) - (.Microsoft Cor para Windows XP (KB2506212) - (.Microsoft Cor para Windows XP (KB2507618) - (.Microsoft Cor para Windows XP (KB2507938) - (.Microsoft Cor para Windows XP (KB2508429) - (.Microsoft Cor para Windows XP (KB2509553) - (.Microsoft Cor para Windows XP (KB2510581) - (.Microsoft Cor para Windows XP (KB2535512) - (.Microsoft Cor para Windows XP (KB2536276-v2) - (.Microsoft para Windows XP (KB2544521) - (.Microsoft Cor para Windows XP (KB2544893-v2) - (.Microsoft para Windows XP (KB2566454) - (.Microsoft Cor para Windows XP (KB2570947) - (.Microsoft Cor para Windows XP (KB2584146) - (.Microsoft Cor para Windows XP (KB2585542) - (.Microsoft Cor para Windows XP (KB2592799) - (.Microsoft Cor para Windows XP (KB2598479) - (.Microsoft Cor para Windows XP (KB2603381) - (.Microsoft Cor para Windows XP (KB2618451) - (.Microsoft Cor para Windows XP (KB2619339) - (.Microsoft Cor para Windows XP (KB2620712) - (.Microsoft Cor para Windows XP (KB2624667) - (.Microsoft Cor para Windows XP (KB2631813) - (.Microsoft Cor para Windows XP (KB2646524) - (.Microsoft Cor para Windows XP (KB2653956) - (.Microsoft Cor para Windows XP (KB2655992) - (.Microsoft Cor para Windows XP (KB2659262) - (.Microsoft Cor

O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2661637 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2676562 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2686509 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2691442 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2698365 O42 - Logiciel: Atualizao de Segurana Corporation.) [HKLM] -- KB2705219-v2 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2712808 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2719985 O42 - Logiciel: Atualizao de Segurana Corporation.) [HKLM] -- KB2723135-v2 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2724197 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2727528 O42 - Logiciel: Atualizao de Segurana Corporation.) [HKLM] -- KB2731847-v2 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2744842 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2753842 O42 - Logiciel: Atualizao de Segurana Corporation.) [HKLM] -- KB2753842-v2 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2758857 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2761226 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2770660 O42 - Logiciel: Atualizao de Segurana poration.) [HKLM] -- KB2779030 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB923561 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB923789 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB941569 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB946648 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB950762 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB950974 O42 - Logiciel: Atualizao de Segurana orporation.) [HKLM] -- KB951376-v2 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB952004 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB952954 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB956572 O42 - Logiciel: Atualizao de Segurana oration.) [HKLM] -- KB956744

para Windows XP (KB2661637) - (.Microsoft Cor para Windows XP (KB2676562) - (.Microsoft Cor para Windows XP (KB2686509) - (.Microsoft Cor para Windows XP (KB2691442) - (.Microsoft Cor para Windows XP (KB2698365) - (.Microsoft Cor para Windows XP (KB2705219-v2) - (.Microsoft para Windows XP (KB2712808) - (.Microsoft Cor para Windows XP (KB2719985) - (.Microsoft Cor para Windows XP (KB2723135-v2) - (.Microsoft para Windows XP (KB2724197) - (.Microsoft Cor para Windows XP (KB2727528) - (.Microsoft Cor para Windows XP (KB2731847-v2) - (.Microsoft para Windows XP (KB2744842) - (.Microsoft Cor para Windows XP (KB2753842) - (.Microsoft Cor para Windows XP (KB2753842-v2) - (.Microsoft para Windows XP (KB2758857) - (.Microsoft Cor para Windows XP (KB2761226) - (.Microsoft Cor para Windows XP (KB2770660) - (.Microsoft Cor para Windows XP (KB2779030) - (.Microsoft Cor para Windows XP (KB923561) - (.Microsoft Corp para Windows XP (KB923789) - (.Microsoft Corp para Windows XP (KB941569) - (.Microsoft Corp para Windows XP (KB946648) - (.Microsoft Corp para Windows XP (KB950762) - (.Microsoft Corp para Windows XP (KB950974) - (.Microsoft Corp para Windows XP (KB951376-v2) - (.Microsoft C para Windows XP (KB952004) - (.Microsoft Corp para Windows XP (KB952954) - (.Microsoft Corp para Windows XP (KB956572) - (.Microsoft Corp para Windows XP (KB956744) - (.Microsoft Corp

O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB956802 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB956844 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB959426 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB960803 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB960859 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB969059 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB970430 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB971657 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB972270 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB973507 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB973869 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB973904 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB974112 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB974318 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB974392 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB974571 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB975025 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB975467 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB975560 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB975713 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB977816 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB977914 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB978338 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB978542 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB978706 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB979309 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB979482 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB979687 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB981322 O42 - Logiciel: Atualizao de oration.) [HKLM] -- KB981997

Segurana para Windows XP (KB956802) - (.Microsoft Corp Segurana para Windows XP (KB956844) - (.Microsoft Corp Segurana para Windows XP (KB959426) - (.Microsoft Corp Segurana para Windows XP (KB960803) - (.Microsoft Corp Segurana para Windows XP (KB960859) - (.Microsoft Corp Segurana para Windows XP (KB969059) - (.Microsoft Corp Segurana para Windows XP (KB970430) - (.Microsoft Corp Segurana para Windows XP (KB971657) - (.Microsoft Corp Segurana para Windows XP (KB972270) - (.Microsoft Corp Segurana para Windows XP (KB973507) - (.Microsoft Corp Segurana para Windows XP (KB973869) - (.Microsoft Corp Segurana para Windows XP (KB973904) - (.Microsoft Corp Segurana para Windows XP (KB974112) - (.Microsoft Corp Segurana para Windows XP (KB974318) - (.Microsoft Corp Segurana para Windows XP (KB974392) - (.Microsoft Corp Segurana para Windows XP (KB974571) - (.Microsoft Corp Segurana para Windows XP (KB975025) - (.Microsoft Corp Segurana para Windows XP (KB975467) - (.Microsoft Corp Segurana para Windows XP (KB975560) - (.Microsoft Corp Segurana para Windows XP (KB975713) - (.Microsoft Corp Segurana para Windows XP (KB977816) - (.Microsoft Corp Segurana para Windows XP (KB977914) - (.Microsoft Corp Segurana para Windows XP (KB978338) - (.Microsoft Corp Segurana para Windows XP (KB978542) - (.Microsoft Corp Segurana para Windows XP (KB978706) - (.Microsoft Corp Segurana para Windows XP (KB979309) - (.Microsoft Corp Segurana para Windows XP (KB979482) - (.Microsoft Corp Segurana para Windows XP (KB979687) - (.Microsoft Corp Segurana para Windows XP (KB981322) - (.Microsoft Corp Segurana para Windows XP (KB981997) - (.Microsoft Corp

O42 - Logiciel: Atualizao de Segurana para Windows XP (KB982132) - (.Microsoft Corp oration.) [HKLM] -- KB982132 O42 - Logiciel: Atualizao de Segurana para Windows XP (KB982665) - (.Microsoft Corp oration.) [HKLM] -- KB982665 O42 - Logiciel: Atualizao de Segurana para o Windows Media Player (KB2378111) - (.M icrosoft Corporation.) [HKLM] -- KB2378111_WM9 O42 - Logiciel: Atualizao de Segurana para o Windows Media Player (KB952069) - (.Mi crosoft Corporation.) [HKLM] -- KB952069_WM9 O42 - Logiciel: Atualizao de Segurana para o Windows Media Player (KB954155) - (.Mi crosoft Corporation.) [HKLM] -- KB954155_WM9 O42 - Logiciel: Atualizao de Segurana para o Windows Media Player (KB973540) - (.Mi crosoft Corporation.) [HKLM] -- KB973540_WM9 O42 - Logiciel: Atualizao de Segurana para o Windows Media Player (KB975558) - (.Mi crosoft Corporation.) [HKLM] -- KB975558_WM8 O42 - Logiciel: Atualizao de Segurana para o Windows Media Player (KB978695) - (.Mi crosoft Corporation.) [HKLM] -- KB978695_WM9 O42 - Logiciel: Atualizao de Segurana para o Windows Media Player 11 (KB954154) - ( .Microsoft Corporation.) [HKLM] -- KB954154_WM11 O42 - Logiciel: Atualizao para Windows Internet Explorer 8 (KB2598845) - (.Microso ft Corporation.) [HKLM] -- KB2598845-IE8 O42 - Logiciel: Atualizao para Windows Internet Explorer 8 (KB2632503) - (.Microso ft Corporation.) [HKLM] -- KB2632503-IE8 O42 - Logiciel: Atualizao para Windows XP (KB2345886) - (.Microsoft Corporation.) [HKLM] -- KB2345886 O42 - Logiciel: Atualizao para Windows XP (KB2467659) - (.Microsoft Corporation.) [HKLM] -- KB2467659 O42 - Logiciel: Atualizao para Windows XP (KB2492386) - (.Microsoft Corporation.) [HKLM] -- KB2492386 O42 - Logiciel: Atualizao para Windows XP (KB2661254-v2) - (.Microsoft Corporation .) [HKLM] -- KB2661254-v2 O42 - Logiciel: Atualizao para Windows XP (KB2736233) - (.Microsoft Corporation.) [HKLM] -- KB2736233 O42 - Logiciel: Atualizao para Windows XP (KB2749655) - (.Microsoft Corporation.) [HKLM] -- KB2749655 O42 - Logiciel: Atualizao para Windows XP (KB898461) - (.Microsoft Corporation.) [ HKLM] -- KB898461 O42 - Logiciel: Atualizao para Windows XP (KB951978) - (.Microsoft Corporation.) [ HKLM] -- KB951978 O42 - Logiciel: Atualizao para Windows XP (KB955759) - (.Microsoft Corporation.) [ HKLM] -- KB955759 O42 - Logiciel: Atualizao para Windows XP (KB968389) - (.Microsoft Corporation.) [ HKLM] -- KB968389 O42 - Logiciel: Atualizao para Windows XP (KB971029) - (.Microsoft Corporation.) [ HKLM] -- KB971029 O42 - Logiciel: Atualizao para Windows XP (KB973815) - (.Microsoft Corporation.) [ HKLM] -- KB973815 O42 - Logiciel: Atualizaes da NVIDIA 1.10.8 - (.NVIDIA Corporation.) [HKLM] -- {B2 FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update O42 - Logiciel: Auslogics Disk Defrag - (.Auslogics Software Pty Ltd.) [HKLM] -{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1 O42 - Logiciel: Auslogics Registry Cleaner - (.Auslogics Software Pty Ltd.) [HKL M] -- {8D8024F1-2945-49A5-9B78-5AB7B11D7942}_is1 O42 - Logiciel: Auslogics Registry Defrag - (.Auslogics Software Pty Ltd.) [HKLM ] -- {D627784F-B3EE-44E8-96B1-9509B991EA34}_is1 O42 - Logiciel: AutoIt v3.3.6.1 - (.AutoIt Team.) [HKLM] -- AutoItv3 O42 - Logiciel: Avira Free Antivirus - (.Avira.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner O42 - Logiciel: CPUID CPU-Z 1.60.1 - (.Unknown owner.) [HKLM] -- CPUID CPU-Z_is1 O42 - Logiciel: CPUID HWMonitor 1.19 - (.Unknown owner.) [HKLM] -- CPUID HWMonit or_is1

O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU] -- CodeBlocks O42 - Logiciel: DBManager 3.2.4 - (.DBTools Software.) [HKLM] -- DBManager Stand ard_is1 O42 - Logiciel: DbVisualizer 8.0.8 - (.DbVis Software AB.) [HKLM] -- 8973-4025-0 853-7287 O42 - Logiciel: Defraggler (remove only) - (.Piriform.) [HKLM] -- Defraggler O42 - Logiciel: Dev-C++ 5 beta 9 release (4.9.9.2) - (.Unknown owner.) [HKLM] -Dev-C++ O42 - Logiciel: Device Remover - (.Kerem Gmrkc.) [HKLM] -- {EFA597E4-73D3-4142-90DB -BE28E5589F99}_is1 O42 - Logiciel: Dual-Core Optimizer - (.AMD.) [HKLM] -- {9FD6F1A8-5550-46AF-8509 -271DF0E768B5} O42 - Logiciel: Eusing Free Registry Cleaner - (.Unknown owner.) [HKLM] -- Eusin g Free Registry Cleaner O42 - Logiciel: Eusing Free Registry Defrag - (.Unknown owner.) [HKLM] -- Eusing Free Registry Defrag O42 - Logiciel: FBServer - (.Unknown owner.) [HKLM] -- FBServer O42 - Logiciel: FastStone Photo Resizer 3.1 - (.FastStone Soft..) [HKLM] -- Fast Stone Photo Resizer O42 - Logiciel: FlashGet3.7 - (.http://www.FlashGet.com.) [HKLM] -- FlashGet3.7 O42 - Logiciel: Flickr AutoDownloadr 1.14 - (.Unknown owner.) [HKLM] -- Flickr A utoDownloadr 1.14 O42 - Logiciel: FolderMatch v3.5.6 - (.Unknown owner.) [HKLM] -- FolderMatch_is1 O42 - Logiciel: Fotosizer 1.36 - (.Fotosizer.com.) [HKLM] -- Fotosizer O42 - Logiciel: Free Registry Defrag - (.iExpert Software.) [HKLM] -- Free Regis try Defrag_is1 O42 - Logiciel: Free Window Registry Repair - (.Unknown owner.) [HKLM] -- Free W indow Registry Repair O42 - Logiciel: G'MIC for GIMP verso 1.3.9.0 - (.Unknown owner.) [HKLM] -- G'MIC for GIMP_is1 O42 - Logiciel: GIMP 2.8.0 - (.The GIMP Team.) [HKLM] -- GIMP-2_is1 O42 - Logiciel: GOM Player - (.Gretech Corporation.) [HKLM] -- GOM Player O42 - Logiciel: GPL Ghostscript - (.Artifex Software Inc..) [HKLM] -- GPL Ghosts cript 9.02 O42 - Logiciel: GSview 5.0 - (.Ghostgum Software Pty Ltd.) [HKLM] -- GSview 5.0 O42 - Logiciel: Garmin BaseCamp - (.Garmin Ltd or its subsidiaries.) [HKLM] -- { 18E928DE-ABBA-4CEB-A9E4-205769B03FE8} O42 - Logiciel: Garmin City Navigator Brazil NT 2013.30 Update - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {3B3883A2-AB24-46C1-99A4-E067627998D4} O42 - Logiciel: Garmin Communicator Plugin - (.Garmin Ltd or its subsidiaries.) [HKLM] -- {647BB978-2876-487B-9B0E-FDB73F0EA4A2} O42 - Logiciel: Garmin MapInstall - (.Garmin Ltd or its subsidiaries.) [HKLM] -{5ED7CD44-1A33-4B36-BA09-0B55FE82AF95} O42 - Logiciel: Garmin MapSource - (.Garmin Ltd or its subsidiaries.) [HKLM] -{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B} O42 - Logiciel: Garmin POI Loader - (.Garmin Ltd or its subsidiaries.) [HKLM] -{5CA74EDC-CFC3-4FA0-AED7-1415CA19F250} O42 - Logiciel: Garmin USB Drivers - (.Garmin Ltd or its subsidiaries.) [HKLM] - {ABA5E381-EC46-425C-86C5-5CD15BBFB4BF} O42 - Logiciel: Garmin WebUpdater - (.Garmin Ltd or its subsidiaries.) [HKLM] -{AE1EC58E-B2AC-4959-A4C2-C38202A25239} O42 - Logiciel: Glary Utilities 2.51.0.1666 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome O42 - Logiciel: Google Chrome Backup 1.8.0.141 - (.Unknown owner.) [HKLM] -- {52 291FC0-33D3-4A18-9587-5115225545D8}_is1 O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C4304-9AB6-BC44E68B55E2} O42 - Logiciel: HHD Software Free Hex Editor Neo 4.97 - (.HHD Software, Ltd..) [ HKLM] -- {8EB85C0E-DE7D-4A53-BD66-708B8F2C80B0}

O42 - Logiciel: HWiNFO32 Version 4.08 - (.Martin Malk - REALiX.) [HKLM] -- HWiNFO 32_is1 O42 - Logiciel: Hare 1.5.1 - (.Unknown owner.) [HKLM] -- {D0EFA98B-03A8-4F7C-B1C 9-247994711331} O42 - Logiciel: HeidiSQL 7.0.0.4098 - (.Ansgar Becker.) [HKLM] -- HeidiSQL_is1 O42 - Logiciel: Hotfix for Windows Media Format 11 SDK (KB929399) - (.Microsoft Corporation.) [HKLM] -- KB929399 O42 - Logiciel: Hotfix for Windows XP (KB958655-v2) - (.Microsoft Corporation.) [HKLM] -- KB958655-v2 O42 - Logiciel: Hotfix para Windows XP (KB2756822) - (.Microsoft Corporation.) [ HKLM] -- KB2756822 O42 - Logiciel: Hotfix para Windows XP (KB2779562) - (.Microsoft Corporation.) [ HKLM] -- KB2779562 O42 - Logiciel: Hotfix para Windows XP (KB942288-v3) - (.Microsoft Corporation.) [HKLM] -- KB942288-v3 O42 - Logiciel: Hotfix para Windows XP (KB952287) - (.Microsoft Corporation.) [H KLM] -- KB952287 O42 - Logiciel: Hotfix para Windows XP (KB961118) - (.Microsoft Corporation.) [H KLM] -- KB961118 O42 - Logiciel: Hotfix para o Windows Media Player 11 (KB939683) - (.Microsoft C orporation.) [HKLM] -- KB939683 O42 - Logiciel: ICW Base(remove only) - (.Unknown owner.) [HKLM] -- ICW Base O42 - Logiciel: ICW NagiosServer (remove only) - (.Unknown owner.) [HKLM] -- ICW NagiosServer O42 - Logiciel: INF-Tool - (.Unknown owner.) [HKLM] -- INF-Tool O42 - Logiciel: IObit Apps Toolbar v6.6 - (.Spigot, Inc..) [HKLM] -- {60D42995-D A80-414D-89C9-CEFC66DC8E13} O42 - Logiciel: Image Resizer Powertoy Clone for Windows - (.Brice Lambson.) [HK LM] -- {1E5F3CC6-D390-4393-A2AA-6CEC04F1705A} O42 - Logiciel: Inno Setup verso 5.5.2 - (.jrsoftware.org.) [HKLM] -- Inno Setup 5_is1 O42 - Logiciel: IrfanView (remove only) - (.Irfan Skiljan.) [HKLM] -- IrfanView O42 - Logiciel: Java 7 Update 9 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B42F83217009FF} O42 - Logiciel: Java SE Development Kit 7 Update 9 - (.Oracle.) [HKLM] -- {32A3A 4F4-B792-11D6-A78A-00B0D0170090} O42 - Logiciel: K-Lite Mega Codec Pack 9.4.6 - (.Unknown owner.) [HKLM] -- KLite CodecPack_is1 O42 - Logiciel: Lazarus 1.0.2 - (.Unknown owner.) [HKLM] -- Lazarus_is1 O42 - Logiciel: Live Update 5 - (.MSI.) [HKLM] -- {009E5DF2-3F97-480B-89DA-F2D5E 672E14A}_is1 O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- { 86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- { F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC} O42 - Logiciel: MV RegClean 6.9 - (.Unknown owner.) [HKLM] -- MV RegClean 6.9_is 1 O42 - Logiciel: MV RegCompact 1.3 - (.Unknown owner.) [HKLM] -- MV RegCompact 1. 3_is1 O42 - Logiciel: Malwarebytes Anti-Malware verso 1.65.1.1000 - (.Malwarebytes Corp oration.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Microsoft ASP.NET MVC 2 - (.Microsoft Corporation.) [HKLM] -- {1 803A630-3C38-4D2B-9B9A-0CB37243539C} O42 - Logiciel: Microsoft ASP.NET MVC 2 - VWD Express 2010 Tools - (.Microsoft C orporation.) [HKLM] -- {5BDFAB82-060E-438B-AB4F-A2331B2294C0} O42 - Logiciel: Microsoft Compression Client Pack 1.0 for Windows XP - (.Microso ft Corporation.) [HKLM] -- MSCompPackV1 O42 - Logiciel: Microsoft F# Runtime for Silverlight 4 - (.Microsoft Corporation

.) [HKLM] -- {27B6D024-FD7E-4A88-BC17-5AFBE33EC072} O42 - Logiciel: Microsoft Help Viewer 1.0 - (.Microsoft Corporation.) [HKLM] -Microsoft Help Viewer 1.0 O42 - Logiciel: Microsoft Help Viewer 1.0 - (.Microsoft Corporation.) [HKLM] -{47C39E4A-28F2-33B1-B9B7-97F24E52D917} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F 4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft Silverlight 3 SDK - (.Microsoft Corporation.) [HKLM] - {2012098D-EEE9-4769-8DD3-B038050854D4} O42 - Logiciel: Microsoft Silverlight 4 SDK - (.Microsoft Corporation.) [HKLM] - {05855322-BE43-41FE-B583-D3AE0C326D58} O42 - Logiciel: Microsoft Silverlight Tools for Visual Studio 2010 - (.Microsoft Corporation.) [HKLM] -- {558358E5-E4F3-4374-BA1D-26FF39EF87D9} O42 - Logiciel: Microsoft User-Mode Driver Framework Feature Pack 1.0 - (.Micros oft Corporation.) [HKLM] -- Wudf01000 O42 - Logiciel: MoreMotion Web Express 3.3 - (.MOR YAZILIM.) [HKLM] -- {60C7325D -EAA5-4680-B6FC-2422B8476AF5} O42 - Logiciel: Mozilla Firefox 17.0.1 (x86 pt-BR) - (.Mozilla.) [HKLM] -- Mozil la Firefox 17.0.1 (x86 pt-BR) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaint enanceService O42 - Logiciel: Multilaser PND Upgrade 2012.03 - (.Sygic.) [HKLM] -- {249621E8-7 GC1-320F-2111-93A7477F0001}_is1 O42 - Logiciel: MySQL Connector C 6.0.2 - (.Sun Microsystems.) [HKLM] -- {66F930 2D-E145-4375-8C84-54DA2339C483} O42 - Logiciel: MySQL Connector C++ 1.1.0 - (.Oracle and/or its affiliates.) [HK LM] -- {FD753E57-1F44-41E6-B962-E01D76676206} O42 - Logiciel: MySQL Connector J - (.Oracle Corporation.) [HKLM] -- {0505C47B-6 CBC-4DF5-9628-769566240F88} O42 - Logiciel: MySQL Connector Net 6.5.4 - (.Oracle.) [HKLM] -- {92E19B5A-198549BF-9022-9CF4AD652C72} O42 - Logiciel: MySQL Connector/ODBC 5.1 - (.Oracle Corporation.) [HKLM] -- {697 33CDD-2AB0-44B7-979E-4753D810B103} O42 - Logiciel: MySQL Documents 5.5 - (.Oracle Corporation.) [HKLM] -- {0293D4CF -0EDF-41E1-805C-C298460000AE} O42 - Logiciel: MySQL Examples and Samples 5.5 - (.Oracle Corporation.) [HKLM] - {962A23F0-3466-492F-AC73-CCB86A1767ED} O42 - Logiciel: MySQL Installer - (.Oracle Corporation.) [HKLM] -- {4C646DF7-1E7 F-44D0-ADF0-CCCE44C92CF4} O42 - Logiciel: MySQL Notifier 1.0.3 - (.Oracle.) [HKLM] -- {5681C7AB-E29D-4EE9B0F0-809A28ECECFC} O42 - Logiciel: MySQL Server 5.5 - (.Oracle Corporation.) [HKLM] -- {FFD35D1F-F7 C8-47AE-AF3E-E569F025CD7D} O42 - Logiciel: MySQL Workbench 5.2 CE - (.Oracle Corporation.) [HKLM] -- {23C3E F87-AD08-4F76-982D-1AE137485F08} O42 - Logiciel: MySQL-Front - (.Unknown owner.) [HKLM] -- MySQL-Front_is1 O42 - Logiciel: NSClient++ (Win32) - (.MySolutions NORDIC.) [HKLM] -- {BD72D88DF102-439E-AE57-2B82BB37C3A7} O42 - Logiciel: NVIDIA Driver de grficos 306.23 - (.NVIDIA Corporation.) [HKLM] - {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver O42 - Logiciel: NVIDIA Driver de udio HD 1.3.18.0 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {2FDD750F-49B7-4 0C1-9D5E-D2955BC0E2D8} O42 - Logiciel: NVIDIA Software do sistema PhysX 9.12.0604 - (.NVIDIA Corporatio n.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX O42 - Logiciel: NVIDIA nView 136.28 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952 -0186-46C3-BAEC-A80AA35AC5B8}_Display.NView O42 - Logiciel: Nagwin (remove only) - (.Unknown owner.) [HKLM] -- Nagwin

O42 - Logiciel: Neat Image v7.0 Demo Standalone - (.Neat Image team, ABSoft.) [H KLM] -- Neat Image Standalone_is1 O42 - Logiciel: No Execute - (.Me, myself & I.) [HKLM] -- eSKamation.NoExecute O42 - Logiciel: Noiseware Community Edition - (.Imagenomic.) [HKLM] -- {CB3B7C24 -30A1-4961-8039-94919F5ED2EE} O42 - Logiciel: Notepad++ - (.Unknown owner.) [HKLM] -- Notepad++ O42 - Logiciel: NvMixer - (.Unknown owner.) [HKLM] -- {D7A6C517-11F2-419F-B5BB-2 7772B939698} O42 - Logiciel: O&O Defrag Free Edition - (.O&O Software GmbH.) [HKLM] -- {E29CF B36-F070-4612-8DB5-7038161B6294} O42 - Logiciel: PC Wizard 2012.2.11 - (.CPUID.) [HKLM] -- PC Wizard 2012_is1 O42 - Logiciel: Pacote de Compatibilidade para o sistema Office 2007 - (.Microso ft Corporation.) [HKLM] -- {90120000-0020-0416-0000-0000000FF1CE} O42 - Logiciel: Pacote de Provedor de Servios de Criptografia para o Microsoft Ba se Smart - (.Microsoft Corporation.) [HKLM] -- KB909520 O42 - Logiciel: PageBreeze Free HTML Editor - (.Unknown owner.) [HKLM] -- PageBr eeze Free HTML Editor O42 - Logiciel: Pandora Service - (.Pandora.TV.) [HKLM] -- 4F6D5E84-5826-4394-9F 40-3A9A19165651_is1 O42 - Logiciel: Picture Resize 5.8.1 - (.Bidgood Svcs.) [HKLM] -- Picture Resize _is1 O42 - Logiciel: Pimaco - (.Prime.) [HKLM] -- {2610CDBE-07FB-4A4F-932D-5B012469A7 6A} O42 - Logiciel: Poseidon For UML CE 6.0.2 - (.Gentleware AG.) [HKLM] -- Poseidon For UML CE 6.0.2 O42 - Logiciel: PostgreSQL 9.2 - (.PostgreSQL Global Development Group.) [HKLM] -- PostgreSQL 9.2 O42 - Logiciel: PostgreSQL OLE DB Provider - (.PostgreSQL Application Installer Team.) [HKLM] -- {8BB235BF-8740-48CF-9843-F502F5F07EC1} O42 - Logiciel: Process Hacker 2.29 (r5220) - (.wj32.) [HKLM] -- Process_Hacker2 _is1 O42 - Logiciel: Qt Creator - (.Qt Project.) [HKCU] -- Qt Creator O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor C orp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: RegAlyzer - (.Safer-Networking Ltd..) [HKLM] -- {296B2D8E-CE82-9 2AF-B2E8-A646E7CB78A2}_is1 O42 - Logiciel: RegCompact.NET 1.8 - (.ExperimentalScene.) [HKLM] -- RegCompact. NET O42 - Logiciel: RegMagik - (.Guzner Consulting.) [HKLM] -- RegMagik O42 - Logiciel: Registry Compactor 1.1 - (.Elrise Software.) [HKLM] -- Registry Compactor 1.1_is1 O42 - Logiciel: Registry Toolkit - (.Funduc Software Inc..) [HKLM] -- Registry T oolkit (Shareware)_is1 O42 - Logiciel: Revo Uninstaller 1.94 - (.VS Revo Group.) [HKLM] -- Revo Uninsta ller O42 - Logiciel: SIW 2011 Home Edition - (.Topala Software Solutions.) [HKLM] -{AB67580-257C-45FF-B8F4-C8C30682091A}_is1 O42 - Logiciel: SQLite Expert Personal 3.4.4 - (.Bogdan Ureche.) [HKLM] -- SQLit e Expert Personal 3_is1 O42 - Logiciel: SUPERAntiSpyware - (.SUPERAntiSpyware.com.) [HKLM] -- {CDDCBBF12703-46BC-938B-BCC81A1EEAAA} O42 - Logiciel: Seagate DiscWizard - (.Seagate.) [HKLM] -- {8FB2A014-A0B0-42D8-8 E18-9AFC6A6E2814} O42 - Logiciel: Search and Replace - (.Funduc Software Inc..) [HKLM] -- Search a nd Replace (shareware)_is1 O42 - Logiciel: Service Pack 1 for SQL Server 2008 (KB968369) - (.Microsoft Corp oration.) [HKLM] -- KB968369 O42 - Logiciel: SlimCleaner - (.SlimWare Utilities, Inc..) [HKLM] -- {0B70A31D-F 094-4B36-A28E-1162AB1BABDF} O42 - Logiciel: Smart Defrag 2 - (.IObit.) [HKLM] -- Smart Defrag 2_is1

O42 - Logiciel: Sound Solution 1.31b - (.Alessandro Tomassini.) [HKLM] -- Sound Solution O42 - Logiciel: Sql Server Customer Experience Improvement Program - (.Microsoft Corporation.) [HKLM] -- {C965F01C-76EA-4BD7-973E-46236AE312D7} O42 - Logiciel: TDM-GCC - (.TDM.) [HKLM] -- TDM-GCC O42 - Logiciel: TechPowerUp GPU-Z - (.TechPowerUp.) [HKLM] -- TechPowerUp GPU-Z O42 - Logiciel: The KMPlayer (remove only) - (.KMP Media co., Ltd.) [HKLM] -- Th e KMPlayer O42 - Logiciel: TweakNow RegCleaner 2012 - (.TweakNow.com.) [HKLM] -- TweakNow R egCleaner 2012_is1 O42 - Logiciel: Unlocker 1.9.1 - (.Cedrick Collomb.) [HKLM] -- Unlocker O42 - Logiciel: VideoGenie - (.MSI.) [HKLM] -- {FC54FD8D-789C-406D-BB88-F7C4421B 7E83}_is1 O42 - Logiciel: Visual SQLite 1.4.5 - (.Visual SQLite.) [HKLM] -- Visual SQLite_ is1 O42 - Logiciel: Vit Registry Fix 9.5.8 (remove only) - (.VITSOFT.) [HKLM] -- Vit Registry Fix O42 - Logiciel: WCF RIA Services V1.0 for Visual Studio 2010 - (.Microsoft Corpo ration.) [HKLM] -- {8FFC6175-D2C5-4FA7-91E8-E2A9431A5CDA} O42 - Logiciel: Wavelet Denoise Gimp Plugin verso 0.3.1 - (.Unknown owner.) [HKLM ] -- Wavelet Denoise Gimp Plugin_is1 O42 - Logiciel: Web Deployment Tool - (.Microsoft Corporation.) [HKLM] -- {0F37D 969-1260-419E-B308-EF7D29ABDE20} O42 - Logiciel: WinASO RegDefrag 2.6 - (.X.M.Y International LLC.) [HKLM] -- Win ASO RegDefrag_is1 O42 - Logiciel: WinASO Registry Optimizer 4.8.0 - (.X.M.Y International LLC.) [H KLM] -- WinASO Registry Optimizer_is1 O42 - Logiciel: WinHTTrack Website Copier 3.44-1 - (.HTTrack.) [HKLM] -- WinHTTr ack Website Copier_is1 O42 - Logiciel: WinMend Registry Defrag 1.4.6 - (.WinMend.com.) [HKLM] -- WinMen d Registry Defrag_is1 O42 - Logiciel: WinPcap 4.1.2-Spiceworks - (.CACE Technologies.) [HKLM] -- WinPc apInst O42 - Logiciel: WinUtilities 10.54 Free Edition - (.YL Computing, Inc.) [HKLM] - {FC274982-5AAD-4C20-848D-4424A5043010}_is1 O42 - Logiciel: Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19 /2012 2.3.1 - (.Garmin.) [HKLM] -- 98157A226B40B173301B0F53C8E98C47805D5152 O42 - Logiciel: Windows Internet Explorer 8 - (.Microsoft Corporation.) [HKLM] - ie8 O42 - Logiciel: Windows Media Format 11 runtime - (.Microsoft Corporation.) [HKL M] -- WMFDist11 O42 - Logiciel: Windows Media Format 11 runtime - (.Unknown owner.) [HKLM] -- Wi ndows Media Format Runtime O42 - Logiciel: Windows Media Player 11 - (.Microsoft Corporation.) [HKLM] -- wm p11 O42 - Logiciel: Windows Media Player 11 - (.Unknown owner.) [HKLM] -- Windows Me dia Player O42 - Logiciel: Windows XP Service Pack 3 - (.Microsoft Corporation.) [HKLM] -Windows XP Service Pack O42 - Logiciel: Wireshark 1.8.3 (32-bit) - (.The Wireshark developer community, http://www.wireshark.org.) [HKLM] -- Wireshark O42 - Logiciel: Wise Registry Cleaner 7.53 - (.WiseCleaner.com, Inc..) [HKLM] -Wise Registry Cleaner_is1 O42 - Logiciel: aTube Catcher - (.DsNET Corp.) [HKLM] -- aTube Catcher O42 - Logiciel: eMule - (.Unknown owner.) [HKLM] -- eMule O42 - Logiciel: ffdshow v1.2.4422 [2012-04-09] - (.Unknown owner.) [HKLM] -- ffd show_is1 O42 - Logiciel: pgJDBC 9.1-901 - (.EnterpriseDB.) [HKLM] -- pgJDBC 9.1-901-1 O42 - Logiciel: psqlODBC 09.01.0100 - (.EnterpriseDB.) [HKLM] -- psqlODBC 09.01. 0100-1

O42 - Logiciel: O42 - Logiciel: r_PT Toolbar O42 - Logiciel: O42 - Logiciel:

smartmontools - (.Unknown owner.) [HKLM] -- smartmontools uTorrentBar_PT Toolbar - (.uTorrentBar_PT.) [HKLM] -- uTorrentBa xplorer lite 32 bit - (.Zabkat.) [HKLM] -- xplorer2l Torrent - (.BitTorrent Inc..) [HKLM] -- uTorrent

---\\ HKCU & HKLM Software Keys [HKCU\Software\7-Zip] [HKCU\Software\ABSoft] [HKCU\Software\AC3Filter] [HKCU\Software\AMD] [HKCU\Software\APN PIP] [HKCU\Software\Adobe] [HKCU\Software\Amaya] [HKCU\Software\AntiCrash] [HKCU\Software\AppDataLow\Software\IObit Apps] [HKCU\Software\AppDataLow\Software\adawarebp] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Ashampoo] [HKCU\Software\Auslogics] [HKCU\Software\AutoIt v3] [HKCU\Software\Avira] [HKCU\Software\BitTorrent] [HKCU\Software\Brice Lambson] [HKCU\Software\CPUID] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\DVDVideoSoft] [HKCU\Software\Device Remover] [HKCU\Software\FlashGet Network] [HKCU\Software\FlashPeak] [HKCU\Software\Fotosizer] [HKCU\Software\Funduc Software Inc.] [HKCU\Software\GNU] [HKCU\Software\GRETECH] [HKCU\Software\Gabest] [HKCU\Software\Garmin] [HKCU\Software\GbPlugin] [HKCU\Software\GlarySoft] [HKCU\Software\Google] [HKCU\Software\HHD Software] [HKCU\Software\HWiNFO32] [HKCU\Software\Haali] [HKCU\Software\HeidiSQL] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IObit Apps] [HKCU\Software\Icaros] [HKCU\Software\Inner-Smile] [HKCU\Software\Integrator] [HKCU\Software\Intel] [HKCU\Software\JavaSoft] [HKCU\Software\Jordan Russell] [HKCU\Software\KMPlayer] [HKCU\Software\Licenses] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MediaInfo] [HKCU\Software\MiTeC] [HKCU\Software\Mozilla Backup]

[HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\MySQL AB] [HKCU\Software\MySQL-Front] [HKCU\Software\MySQL] [HKCU\Software\NSClient++] [HKCU\Software\NVIDIA Corporation] [HKCU\Software\Netscape] [HKCU\Software\ODBC] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\PostgreSQL] [HKCU\Software\Realtek] [HKCU\Software\Registry Toolkit] [HKCU\Software\SALTYBRINE] [HKCU\Software\SR32] [HKCU\Software\SUPERAntiSpyware.com] [HKCU\Software\Safer Networking Limited] [HKCU\Software\Seagate] [HKCU\Software\SlimWare Utilities Inc] [HKCU\Software\Sysinternals] [HKCU\Software\Systweak] [HKCU\Software\ToolbarCleaner] [HKCU\Software\ToolbarCleaneroptions] [HKCU\Software\Trolltech] [HKCU\Software\TuneUp] [HKCU\Software\TweakNow RegCleaner 2012] [HKCU\Software\UrbanTwilightStudios] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\VITSOFT] [HKCU\Software\VSRevoGroup] [HKCU\Software\WinHTTrack Website Copier] [HKCU\Software\Wow6432Node] [HKCU\Software\ZabaraKatranemia Plc] [HKCU\Software\adawaretb] [HKCU\Software\eMule] [HKCU\Software\ej-technologies] [HKCU\Software\madFlac] [HKCU\Software\madshi] [HKCU\Software\nHancer] [HKCU\Software\techPowerUp] [HKCU\Software\uTorrentBar_PT] [HKCU\Software\xplorer2l] [HKLM\Software\ABSoft] [HKLM\Software\AGEIA Technologies] [HKLM\Software\AMD] [HKLM\Software\ActiveState] [HKLM\Software\Adobe] [HKLM\Software\Apache Software Foundation] [HKLM\Software\Artifex] [HKLM\Software\Ashampoo] [HKLM\Software\AutoIt v3] [HKLM\Software\Avira] [HKLM\Software\Bunndle] [HKLM\Software\C07ft5Y] [HKLM\Software\CPUID] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Creative Tech] [HKLM\Software\Cygwin]

[HKLM\Software\DBTools Software] [HKLM\Software\DelFix] [HKLM\Software\EnterpriseDB] [HKLM\Software\FlashGet Network] [HKLM\Software\FlashPeak] [HKLM\Software\GNU] [HKLM\Software\GPL Ghostscript] [HKLM\Software\GRETECH] [HKLM\Software\Garmin] [HKLM\Software\Gemplus] [HKLM\Software\Ghostgum] [HKLM\Software\GlarySoft] [HKLM\Software\Google] [HKLM\Software\HaaliMkx] [HKLM\Software\Hewlett-Packard] [HKLM\Software\IObit Apps] [HKLM\Software\IObit] [HKLM\Software\Intel] [HKLM\Software\InterVideo] [HKLM\Software\Itefix] [HKLM\Software\JavaSoft] [HKLM\Software\KLCodecPack] [HKLM\Software\KMPlayer] [HKLM\Software\Khronos] [HKLM\Software\LAV] [HKLM\Software\Lazarus] [HKLM\Software\Licenses] [HKLM\Software\MSI] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware (Trial)] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\MySQL AB] [HKLM\Software\NVIDIA Corporation] [HKLM\Software\Nektra] [HKLM\Software\O&O] [HKLM\Software\ODBC] [HKLM\Software\PIP] [HKLM\Software\Pandora.TV] [HKLM\Software\Perl] [HKLM\Software\PgOleDB] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\PostgreSQL Global Development Group] [HKLM\Software\PostgreSQL] [HKLM\Software\Program Groups] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SBAMSvc] [HKLM\Software\SUPERAntiSpyware.com] [HKLM\Software\Safer Networking Limited] [HKLM\Software\Schlumberger] [HKLM\Software\Seagate] [HKLM\Software\SlimWare Utilities, Inc.] [HKLM\Software\Systweak] [HKLM\Software\TuneUp] [HKLM\Software\TweakNow RegCleaner 2012] [HKLM\Software\VITSOFT] [HKLM\Software\WinHTTrack Website Copier]

[HKLM\Software\WinPcap] [HKLM\Software\Windows 3.1 Migration Status] [HKLM\Software\WiseCleaner] [HKLM\Software\Wow6432Node] [HKLM\Software\X-AVCSD] [HKLM\Software\ej-technologies] [HKLM\Software\intellidownload] [HKLM\Software\mozilla.org] [HKLM\Software\uTorrentBar_PT] ~ Scan Softwares in 00mn 00s

---\\ Contents of the Common Files folders (O43) O43 - CFD: 6/11/2012 - 06:31:49 - [3,348] ----D C:\Arquivos de programas\7-Zip O43 - CFD: 16/12/2012 - 20:47:01 - [1,616] ----D C:\Arquivos de programas\Abexo O43 - CFD: 13/11/2012 - 21:33:08 - [7,270] ----D C:\Arquivos de programas\AC3Fil ter O43 - CFD: 28/12/2012 - 17:19:43 - [199,647] ----D C:\Arquivos de programas\Ad-A ware Antivirus O43 - CFD: 8/11/2012 - 10:38:42 - [3,434] ----D C:\Arquivos de programas\adaware tb O43 - CFD: 6/11/2012 - 23:38:27 - [114,226] ----D C:\Arquivos de programas\Adobe O43 - CFD: 6/11/2012 - 18:17:56 - [2,311] ----D C:\Arquivos de programas\AM-Dead Link O43 - CFD: 16/11/2012 - 12:45:19 - [41,635] ----D C:\Arquivos de programas\Amaya O43 - CFD: 28/11/2012 - 15:21:32 - [22,168] ----D C:\Arquivos de programas\AMD O43 - CFD: 6/11/2012 - 18:04:02 - [18,822] ----D C:\Arquivos de programas\ArgoUM L O43 - CFD: 28/12/2012 - 00:03:07 - [336,436] ----D C:\Arquivos de programas\Arqu ivos comuns O43 - CFD: 6/11/2012 - 18:07:06 - [178,609] ----D C:\Arquivos de programas\Asham poo O43 - CFD: 28/11/2012 - 08:47:17 - [46,543] ----D C:\Arquivos de programas\astah -community O43 - CFD: 15/11/2012 - 10:48:15 - [48,109] ----D C:\Arquivos de programas\Auslo gics O43 - CFD: 16/12/2012 - 20:49:35 - [22,404] ----D C:\Arquivos de programas\AutoI t3 O43 - CFD: 7/11/2012 - 21:20:40 - [191,969] ----D C:\Arquivos de programas\Avira O43 - CFD: 24/12/2012 - 18:32:46 - [5,342] ----D C:\Arquivos de programas\CClean er O43 - CFD: 10/12/2012 - 12:13:55 - [284,787] ----D C:\Arquivos de programas\Code Blocks O43 - CFD: 5/11/2012 - 21:21:58 - [0] ----D C:\Arquivos de programas\ComPlus App lications O43 - CFD: 6/11/2012 - 21:45:39 - [12,219] ----D C:\Arquivos de programas\CPUID O43 - CFD: 24/12/2012 - 21:41:14 - [2,124] ----D C:\Arquivos de programas\Dachsh und Software O43 - CFD: 6/11/2012 - 18:13:41 - [14,010] ----D C:\Arquivos de programas\DBTool s Software O43 - CFD: 6/11/2012 - 18:14:29 - [45,788] ----D C:\Arquivos de programas\DbVisu alizer-8.0.8 O43 - CFD: 6/11/2012 - 18:17:06 - [2,490] ----D C:\Arquivos de programas\Defragg ler O43 - CFD: 9/12/2012 - 11:58:27 - [0] ----D C:\Arquivos de programas\Dev-Cpp O43 - CFD: 9/12/2012 - 19:37:10 - [47,809] ----D C:\Arquivos de programas\Device Remover O43 - CFD: 23/12/2012 - 16:15:26 - [0,290] ----D C:\Arquivos de programas\DIFX O43 - CFD: 12/12/2012 - 22:46:12 - [4,299] ----D C:\Arquivos de programas\DOSBox

-0.74 O43 - CFD: 17/12/2012 - 23:08:16 - [38,179] ----D C:\Arquivos de programas\DsNET Corp O43 - CFD: 18/11/2012 - 22:12:42 - [2,789] ----D C:\Arquivos de programas\Elrise O43 - CFD: 17/12/2012 - 10:21:00 - [12,186] ----D C:\Arquivos de programas\eMule O43 - CFD: 15/11/2012 - 10:15:21 - [1,974] ----D C:\Arquivos de programas\Eusing Free Registry Cleaner O43 - CFD: 15/11/2012 - 11:12:52 - [1,483] ----D C:\Arquivos de programas\Eusing Free Registry Defrag O43 - CFD: 6/11/2012 - 18:13:12 - [14,369] ----D C:\Arquivos de programas\fabFOR CE O43 - CFD: 10/11/2012 - 23:53:19 - [1,464] ----D C:\Arquivos de programas\FastSt one Photo Resizer O43 - CFD: 6/11/2012 - 18:19:51 - [21,105] ----D C:\Arquivos de programas\FlashG et Network O43 - CFD: 6/11/2012 - 18:20:54 - [0,995] ----D C:\Arquivos de programas\Flickr AutoDownloadr O43 - CFD: 7/11/2012 - 16:19:28 - [4,692] ----D C:\Arquivos de programas\FolderM atch O43 - CFD: 6/11/2012 - 18:21:19 - [4,589] ----D C:\Arquivos de programas\Fotosiz er O43 - CFD: 15/11/2012 - 10:18:03 - [1,812] ----D C:\Arquivos de programas\Free W indow Registry Repair O43 - CFD: 26/12/2012 - 12:57:54 - [175,302] ----D C:\Arquivos de programas\Garm in O43 - CFD: 23/12/2012 - 16:39:19 - [14,693] ----D C:\Arquivos de programas\Garmi n GPS Plugin O43 - CFD: 16/12/2012 - 21:48:54 - [3,002] ----D C:\Arquivos de programas\Ghostg um O43 - CFD: 6/11/2012 - 18:26:07 - [215,587] ----D C:\Arquivos de programas\GIMP 2 O43 - CFD: 6/11/2012 - 22:19:26 - [0,031] ----D C:\Arquivos de programas\GIMP-2. 0 O43 - CFD: 9/12/2012 - 11:13:51 - [21,254] ----D C:\Arquivos de programas\Glary Utilities O43 - CFD: 11/11/2012 - 20:13:17 - [540,761] ----D C:\Arquivos de programas\Goog le O43 - CFD: 6/11/2012 - 18:23:58 - [1,589] ----D C:\Arquivos de programas\Google Chrome Backup O43 - CFD: 6/11/2012 - 18:27:14 - [1,071] ----D C:\Arquivos de programas\GPU-Z O43 - CFD: 6/11/2012 - 18:26:51 - [22,987] ----D C:\Arquivos de programas\GRETEC H O43 - CFD: 16/12/2012 - 21:47:50 - [30,307] ----D C:\Arquivos de programas\gs O43 - CFD: 6/11/2012 - 18:28:16 - [8,078] ----D C:\Arquivos de programas\HeidiSQ L O43 - CFD: 16/12/2012 - 20:43:30 - [19,852] ----D C:\Arquivos de programas\HHD S oftware O43 - CFD: 29/11/2012 - 00:11:58 - [4,328] ----D C:\Arquivos de programas\HWiNFO 32 O43 - CFD: 16/12/2012 - 22:09:08 - [35,588] ----D C:\Arquivos de programas\ICW O43 - CFD: 6/11/2012 - 22:58:28 - [2,362] ----D C:\Arquivos de programas\IIS O43 - CFD: 10/11/2012 - 23:54:14 - [0,151] ----D C:\Arquivos de programas\Image Resizer O43 - CFD: 16/12/2012 - 22:13:00 - [1,607] ----D C:\Arquivos de programas\Imagen omic O43 - CFD: 24/12/2012 - 00:48:12 - [4,671] ----D C:\Arquivos de programas\Inno S etup 5 O43 - CFD: 15/11/2012 - 19:49:29 - [6,275] --H-D C:\Arquivos de programas\Instal lShield Installation Information O43 - CFD: 12/12/2012 - 22:51:34 - [4,662] ----D C:\Arquivos de programas\Intern

et Explorer O43 - CFD: 12/11/2012 - 19:18:15 - [72,635] ----D C:\Arquivos de programas\IObit O43 - CFD: 18/12/2012 - 09:35:54 - [1,345] ----D C:\Arquivos de programas\IObit Apps Toolbar O43 - CFD: 6/11/2012 - 18:35:27 - [12,292] ----D C:\Arquivos de programas\IrfanV iew O43 - CFD: 6/11/2012 - 17:56:13 - [349,188] ----D C:\Arquivos de programas\Java O43 - CFD: 6/11/2012 - 18:40:10 - [95,501] ----D C:\Arquivos de programas\K-Lite Codec Pack O43 - CFD: 12/11/2012 - 19:37:24 - [12,631] ----D C:\Arquivos de programas\Malwa rebytes' Anti-Malware O43 - CFD: 16/12/2012 - 22:02:01 - [13,874] ----D C:\Arquivos de programas\Marco s Velasco Security O43 - CFD: 6/11/2012 - 17:42:41 - [2,070] ----D C:\Arquivos de programas\Messeng er O43 - CFD: 6/11/2012 - 22:58:33 - [1,297] ----D C:\Arquivos de programas\Microso ft ASP.NET O43 - CFD: 16/12/2012 - 22:27:24 - [2,352] ----D C:\Arquivos de programas\Micros oft F# O43 - CFD: 5/11/2012 - 21:24:59 - [0] ----D C:\Arquivos de programas\microsoft f rontpage O43 - CFD: 17/12/2012 - 00:30:56 - [0,005] ----D C:\Arquivos de programas\Micros oft Group Policy O43 - CFD: 8/11/2012 - 09:15:06 - [4,575] ----D C:\Arquivos de programas\Microso ft Help Viewer O43 - CFD: 9/11/2012 - 09:39:03 - [337,268] ----D C:\Arquivos de programas\Micro soft Office O43 - CFD: 16/12/2012 - 22:24:28 - [48,472] ----D C:\Arquivos de programas\Micro soft SDKs O43 - CFD: 7/11/2012 - 21:16:52 - [40,838] ----D C:\Arquivos de programas\Micros oft Silverlight O43 - CFD: 6/11/2012 - 23:05:31 - [499,335] ----D C:\Arquivos de programas\Micro soft SQL Server O43 - CFD: 7/11/2012 - 15:27:55 - [0,014] ----D C:\Arquivos de programas\Microso ft Visual Studio O43 - CFD: 8/11/2012 - 11:29:26 - [387,183] ----D C:\Arquivos de programas\Micro soft Visual Studio 10.0 O43 - CFD: 6/11/2012 - 23:04:46 - [0,208] ----D C:\Arquivos de programas\Microso ft Visual Studio 9.0 O43 - CFD: 8/11/2012 - 08:46:10 - [3,554] ----D C:\Arquivos de programas\Microso ft Works O43 - CFD: 8/11/2012 - 08:45:59 - [0,765] ----D C:\Arquivos de programas\Microso ft.NET O43 - CFD: 6/11/2012 - 18:38:34 - [19,747] ----D C:\Arquivos de programas\Mor O43 - CFD: 6/11/2012 - 17:36:12 - [10,790] ----D C:\Arquivos de programas\Movie Maker O43 - CFD: 6/12/2012 - 00:56:44 - [41,151] ----D C:\Arquivos de programas\Mozill a Firefox O43 - CFD: 6/12/2012 - 09:27:51 - [0,212] ----D C:\Arquivos de programas\Mozilla Maintenance Service O43 - CFD: 6/11/2012 - 22:56:26 - [1,526] ----D C:\Arquivos de programas\MSBuild O43 - CFD: 7/11/2012 - 16:17:19 - [38,070] ----D C:\Arquivos de programas\MSECac he O43 - CFD: 8/11/2012 - 10:47:40 - [37,413] ----D C:\Arquivos de programas\MSI O43 - CFD: 5/11/2012 - 21:21:52 - [11,818] ----D C:\Arquivos de programas\MSN O43 - CFD: 5/11/2012 - 21:21:38 - [8,340] ----D C:\Arquivos de programas\MSN Gam ing Zone O43 - CFD: 15/12/2012 - 22:58:14 - [4,309] ----D C:\Arquivos de programas\MSXML 4.0 O43 - CFD: 6/11/2012 - 18:55:52 - [1,931] ----D C:\Arquivos de programas\MySQL

O43 - CFD: 7/11/2012 - 18:28:41 - [12,277] ----D C:\Arquivos de programas\MySQLFront O43 - CFD: 16/12/2012 - 22:09:47 - [9,902] ----D C:\Arquivos de programas\Neat I mage Standalone O43 - CFD: 6/11/2012 - 08:04:35 - [3,131] ----D C:\Arquivos de programas\NetMeet ing O43 - CFD: 26/11/2012 - 02:24:33 - [11,872] ----D C:\Arquivos de programas\Notep ad++ O43 - CFD: 20/12/2012 - 12:06:42 - [53,799] ----D C:\Arquivos de programas\NSCli ent++ O43 - CFD: 13/11/2012 - 23:29:54 - [682,044] ----D C:\Arquivos de programas\NVID IA Corporation O43 - CFD: 6/11/2012 - 21:44:31 - [31,868] ----D C:\Arquivos de programas\OO Sof tware O43 - CFD: 6/11/2012 - 17:36:25 - [4,155] ----D C:\Arquivos de programas\Outlook Express O43 - CFD: 28/11/2012 - 00:03:10 - [6,643] ----D C:\Arquivos de programas\PageBr eeze O43 - CFD: 6/11/2012 - 18:36:55 - [9,175] ----D C:\Arquivos de programas\PANDORA .TV O43 - CFD: 6/11/2012 - 22:12:42 - [3,067] ----D C:\Arquivos de programas\PgOleDB O43 - CFD: 27/11/2012 - 23:42:45 - [11,482] ----D C:\Arquivos de programas\Pictu re Resize O43 - CFD: 16/12/2012 - 22:18:36 - [45,590] ----D C:\Arquivos de programas\Posei don For UML CE 6.0.2 O43 - CFD: 6/11/2012 - 22:18:24 - [16,618] ----D C:\Arquivos de programas\Postgr eSQL O43 - CFD: 17/12/2012 - 09:19:24 - [2,960] ----D C:\Arquivos de programas\Proces s Hacker 2 O43 - CFD: 6/11/2012 - 11:17:18 - [69,733] ----D C:\Arquivos de programas\Realte k O43 - CFD: 6/11/2012 - 22:54:56 - [101,342] ----D C:\Arquivos de programas\Refer ence Assemblies O43 - CFD: 7/11/2012 - 17:49:06 - [0,179] ----D C:\Arquivos de programas\RegComp act.NET O43 - CFD: 18/11/2012 - 11:31:31 - [1,256] ----D C:\Arquivos de programas\Regist ry Clean Expert O43 - CFD: 16/11/2012 - 13:05:50 - [0,594] ----D C:\Arquivos de programas\RegMag ik O43 - CFD: 18/11/2012 - 10:31:57 - [2,502] ----D C:\Arquivos de programas\RegTkt O43 - CFD: 16/12/2012 - 22:20:08 - [4,519] ----D C:\Arquivos de programas\Safer Networking O43 - CFD: 6/11/2012 - 18:20:44 - [1,366] ----D C:\Arquivos de programas\Saleen Software O43 - CFD: 6/11/2012 - 13:47:50 - [58,631] ----D C:\Arquivos de programas\Seagat e O43 - CFD: 5/11/2012 - 21:21:52 - [0,003] ----D C:\Arquivos de programas\Servios on-line O43 - CFD: 6/11/2012 - 22:10:24 - [3,902] ----D C:\Arquivos de programas\SIW 201 1 Home Edition O43 - CFD: 12/11/2012 - 21:01:20 - [37,345] ----D C:\Arquivos de programas\SlimC leaner O43 - CFD: 16/12/2012 - 22:29:07 - [2,179] ----D C:\Arquivos de programas\smartm ontools O43 - CFD: 6/11/2012 - 22:14:10 - [71,662] ----D C:\Arquivos de programas\SQLite Expert O43 - CFD: 13/11/2012 - 23:35:33 - [41,003] ----D C:\Arquivos de programas\squir rel-sql-3.4.0 O43 - CFD: 18/11/2012 - 10:30:32 - [3,774] ----D C:\Arquivos de programas\SR O43 - CFD: 6/11/2012 - 22:17:46 - [156,245] ----D C:\Arquivos de programas\SUPER

AntiSpyware O43 - CFD: 28/12/2012 - 15:28:10 - [555,928] ----D C:\Arquivos de programas\Sygi c Multilaser O43 - CFD: 27/12/2012 - 22:26:55 - [75,622] ----D C:\Arquivos de programas\The K MPlayer O43 - CFD: 8/11/2012 - 10:38:37 - [0,722] ----D C:\Arquivos de programas\Toolbar Cleaner O43 - CFD: 28/12/2012 - 18:19:12 - [0] ----D C:\Arquivos de programas\Trend Micr o O43 - CFD: 15/11/2012 - 10:22:02 - [23,869] ----D C:\Arquivos de programas\Tweak Now RegCleaner 2012 O43 - CFD: 5/11/2012 - 21:28:15 - [0] ----D C:\Arquivos de programas\Uninstall I nformation O43 - CFD: 23/12/2012 - 15:22:17 - [0,222] ----D C:\Arquivos de programas\Unlock er O43 - CFD: 13/11/2012 - 23:14:05 - [3,674] ----D C:\Arquivos de programas\Urban Twilight Studios O43 - CFD: 23/12/2012 - 22:54:59 - [0,924] ----D C:\Arquivos de programas\uTorre nt O43 - CFD: 6/11/2012 - 22:27:47 - [4,849] ----D C:\Arquivos de programas\uTorren tBar_PT O43 - CFD: 7/11/2012 - 18:20:15 - [1,519] ----D C:\Arquivos de programas\Visual SQLite O43 - CFD: 6/11/2012 - 22:17:51 - [2,860] ----D C:\Arquivos de programas\VITSOFT O43 - CFD: 6/11/2012 - 22:33:43 - [6,503] ----D C:\Arquivos de programas\VS Revo Group O43 - CFD: 16/12/2012 - 23:05:10 - [0,204] ----D C:\Arquivos de programas\Winamp O43 - CFD: 6/11/2012 - 22:19:56 - [33,957] ----D C:\Arquivos de programas\WinASO O43 - CFD: 7/11/2012 - 16:57:26 - [3,415] ----D C:\Arquivos de programas\Windows Media Connect 2 O43 - CFD: 7/11/2012 - 16:57:23 - [11,056] ----D C:\Arquivos de programas\Window s Media Player O43 - CFD: 6/11/2012 - 08:04:31 - [3,752] ----D C:\Arquivos de programas\Windows NT O43 - CFD: 6/11/2012 - 11:03:35 - [0] ----D C:\Arquivos de programas\WindowsUpda te O43 - CFD: 16/12/2012 - 21:50:40 - [10,882] ----D C:\Arquivos de programas\WinHT Track O43 - CFD: 18/11/2012 - 22:36:14 - [11,797] ----D C:\Arquivos de programas\WinMe nd O43 - CFD: 20/12/2012 - 21:02:30 - [0,180] ----D C:\Arquivos de programas\WinPca p O43 - CFD: 29/11/2012 - 09:24:58 - [20,804] ----D C:\Arquivos de programas\WinUt ilities O43 - CFD: 6/11/2012 - 22:20:53 - [83,733] ----D C:\Arquivos de programas\Wiresh ark O43 - CFD: 15/11/2012 - 10:34:48 - [5,285] ----D C:\Arquivos de programas\Wise O43 - CFD: 5/11/2012 - 21:24:59 - [0] ----D C:\Arquivos de programas\xerox O43 - CFD: 27/11/2012 - 17:17:32 - [2,179] ----D C:\Arquivos de programas\zabkat O43 - CFD: 16/12/2012 - 22:18:00 - [0,002] --H-D C:\Arquivos de programas\Zero G Registry O43 - CFD: 28/12/2012 - 18:26:29 - [10,032] ----D C:\Arquivos de programas\ZHPDi ag O43 - CFD: 6/11/2012 - 13:47:55 - [0,350] ----D C:\Arquivos de programas\Arquivo s comuns\Acronis O43 - CFD: 6/11/2012 - 23:38:30 - [11,703] ----D C:\Arquivos de programas\Arquiv os comuns\Adobe O43 - CFD: 7/11/2012 - 15:27:54 - [0,089] ----D C:\Arquivos de programas\Arquivo s comuns\DESIGNER O43 - CFD: 6/11/2012 - 18:13:13 - [0,050] ----D C:\Arquivos de programas\Arquivo

s comuns\fabFORCE O43 - CFD: 13/11/2012 - 23:29:49 - [3,076] ----D C:\Arquivos de programas\Arquiv os comuns\InstallShield O43 - CFD: 6/11/2012 - 17:57:22 - [1,184] ----D C:\Arquivos de programas\Arquivo s comuns\Java O43 - CFD: 15/12/2012 - 22:58:14 - [163,911] ----D C:\Arquivos de programas\Arqu ivos comuns\Microsoft Shared O43 - CFD: 5/11/2012 - 21:22:27 - [0,271] ----D C:\Arquivos de programas\Arquivo s comuns\MSSoap O43 - CFD: 13/11/2012 - 23:30:02 - [1,106] ----D C:\Arquivos de programas\Arquiv os comuns\NVIDIA Shared O43 - CFD: 5/11/2012 - 22:17:53 - [0] ----D C:\Arquivos de programas\Arquivos co muns\ODBC O43 - CFD: 6/11/2012 - 13:47:54 - [111,772] ----D C:\Arquivos de programas\Arqui vos comuns\Seagate O43 - CFD: 5/11/2012 - 21:22:37 - [0,008] ----D C:\Arquivos de programas\Arquivo s comuns\Servios O43 - CFD: 5/11/2012 - 22:17:51 - [3,612] ----D C:\Arquivos de programas\Arquivo s comuns\SpeechEngines O43 - CFD: 6/11/2012 - 08:04:27 - [39,305] ----D C:\Arquivos de programas\Arquiv os comuns\System O43 - CFD: 28/12/2012 - 00:06:14 - [1692,778] R---D C:\Documents and Settings\Al l Users\Dados de aplicativos O43 - CFD: 17/12/2012 - 23:08:36 - [0,031] ----D C:\Documents and Settings\All U sers\Desktop O43 - CFD: 6/11/2012 - 22:10:57 - [37,522] R---D C:\Documents and Settings\All U sers\Documentos O43 - CFD: 7/11/2012 - 16:56:54 - [0,177] -SH-D C:\Documents and Settings\All Us ers\DRM O43 - CFD: 5/11/2012 - 22:17:30 - [0] ----D C:\Documents and Settings\All Users\ Favoritos O43 - CFD: 17/12/2012 - 09:25:38 - [0,441] R---D C:\Documents and Settings\All U sers\Menu Iniciar O43 - CFD: 5/11/2012 - 22:17:30 - [0] ----D C:\Documents and Settings\All Users\ Modelos O43 - CFD: 23/12/2012 - 20:06:06 - [0,071] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Ad-Aware Antivirus O43 - CFD: 8/11/2012 - 16:22:12 - [0,002] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\adawaretb O43 - CFD: 7/11/2012 - 22:01:51 - [0,246] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\Adobe O43 - CFD: 12/11/2012 - 15:49:20 - [0] ----D C:\Documents and Settings\Paulo\Dad os de aplicativos\Apple Computer O43 - CFD: 8/11/2012 - 15:34:12 - [0,000] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\Ashampoo O43 - CFD: 15/11/2012 - 10:11:37 - [0] ----D C:\Documents and Settings\Paulo\Dad os de aplicativos\Auslogics O43 - CFD: 7/11/2012 - 21:26:11 - [0] ----D C:\Documents and Settings\Paulo\Dado s de aplicativos\Avira O43 - CFD: 27/11/2012 - 23:42:37 - [0,095] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Bidgood Svcs O43 - CFD: 6/11/2012 - 23:53:56 - [0,002] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\BITS O43 - CFD: 27/12/2012 - 22:56:59 - [0,043] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\codeblocks O43 - CFD: 10/12/2012 - 10:27:33 - [0,004] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Dev-Cpp O43 - CFD: 11/11/2012 - 21:40:08 - [0,004] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\FastStone O43 - CFD: 6/11/2012 - 18:19:51 - [0,270] ----D C:\Documents and Settings\Paulo\

Dados de aplicativos\FlashGet O43 - CFD: 6/11/2012 - 18:19:55 - [0,538] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\FlashGetBHO O43 - CFD: 6/11/2012 - 18:19:58 - [0,237] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\FlashgetSetup O43 - CFD: 23/12/2012 - 21:37:01 - [0,674] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Garmin O43 - CFD: 9/12/2012 - 11:13:38 - [0,024] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\GlarySoft O43 - CFD: 11/11/2012 - 20:29:29 - [0,000] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Google Chrome Backup O43 - CFD: 11/11/2012 - 14:10:19 - [0,122] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\GRETECH O43 - CFD: 5/11/2012 - 21:28:20 - [0] ----D C:\Documents and Settings\Paulo\Dado s de aplicativos\Identities O43 - CFD: 8/11/2012 - 10:22:41 - [0,319] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\IObit O43 - CFD: 19/12/2012 - 12:21:36 - [0,009] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\IObit Apps O43 - CFD: 8/11/2012 - 10:49:15 - [0,001] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\LavasoftStatistics O43 - CFD: 7/11/2012 - 17:48:47 - [0,002] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\Macromedia O43 - CFD: 12/11/2012 - 19:37:34 - [0] ----D C:\Documents and Settings\Paulo\Dad os de aplicativos\Malwarebytes O43 - CFD: 12/12/2012 - 15:47:20 - [4,916] -S--D C:\Documents and Settings\Paulo \Dados de aplicativos\Microsoft O43 - CFD: 7/11/2012 - 21:18:41 - [0,057] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\mmDesigner O43 - CFD: 28/11/2012 - 00:05:43 - [0,000] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\mmEditor O43 - CFD: 6/11/2012 - 22:26:18 - [116,606] ----D C:\Documents and Settings\Paul o\Dados de aplicativos\Mozilla O43 - CFD: 8/11/2012 - 10:47:55 - [0] ----D C:\Documents and Settings\Paulo\Dado s de aplicativos\MSI O43 - CFD: 7/11/2012 - 18:28:40 - [0] ----D C:\Documents and Settings\Paulo\Dado s de aplicativos\MySQL-Front O43 - CFD: 17/12/2012 - 09:21:07 - [0] ----D C:\Documents and Settings\Paulo\Dad os de aplicativos\NeatImage SL 32 O43 - CFD: 26/11/2012 - 02:28:46 - [0,418] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Notepad++ O43 - CFD: 23/12/2012 - 21:37:04 - [0,001] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\NVIDIA O43 - CFD: 15/11/2012 - 22:36:12 - [0,008] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Process Hacker 2 O43 - CFD: 9/12/2012 - 21:53:39 - [0,019] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\QtProject O43 - CFD: 16/12/2012 - 22:20:25 - [0,003] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Safer Networking O43 - CFD: 6/11/2012 - 14:07:25 - [0] ----D C:\Documents and Settings\Paulo\Dado s de aplicativos\Seagate O43 - CFD: 6/11/2012 - 22:14:49 - [0,016] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\sqlitestudio O43 - CFD: 6/11/2012 - 17:54:55 - [88,189] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Sun O43 - CFD: 6/11/2012 - 22:15:23 - [5,259] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\SUPERAntiSpyware.com O43 - CFD: 12/11/2012 - 20:24:42 - [0] ----D C:\Documents and Settings\Paulo\Dad os de aplicativos\Systweak O43 - CFD: 15/11/2012 - 14:17:39 - [0,009] ----D C:\Documents and Settings\Paulo

\Dados de aplicativos\TuneUp Software O43 - CFD: 6/11/2012 - 22:00:03 - [0,007] ----D C:\Documents and Settings\Paulo\ Dados de aplicativos\TweakNow RegCleaner 2012 O43 - CFD: 23/12/2012 - 23:00:09 - [2,333] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\uTorrent O43 - CFD: 13/11/2012 - 23:15:12 - [0,000] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Wieldraaijer O43 - CFD: 15/11/2012 - 10:38:28 - [0,157] ----D C:\Documents and Settings\Paulo \Dados de aplicativos\Wise Registry Cleaner O43 - CFD: 8/11/2012 - 10:40:35 - [71,158] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\adawarebp O43 - CFD: 7/11/2012 - 22:01:51 - [18,114] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\Adobe O43 - CFD: 8/11/2012 - 15:34:19 - [0,344] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\ashampoo O43 - CFD: 6/11/2012 - 22:27:49 - [0,063] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\Conduit O43 - CFD: 6/11/2012 - 22:27:57 - [1,614] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\CRE O43 - CFD: 16/11/2012 - 22:53:06 - [0,010] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\DOSBox O43 - CFD: 28/11/2012 - 15:21:13 - [1,009] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\Downloaded Installations O43 - CFD: 25/11/2012 - 00:42:04 - [0,791] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\fontconfig O43 - CFD: 23/12/2012 - 21:40:15 - [2,479] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\Garmin O43 - CFD: 23/12/2012 - 21:36:48 - [0,026] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\GARMIN_Corp O43 - CFD: 25/11/2012 - 00:41:55 - [0,001] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\gegl-0.2 O43 - CFD: 11/11/2012 - 20:12:10 - [836,079] ----D C:\Documents and Settings\Pau lo\Configuraes locais\Dados de aplicativos\Google O43 - CFD: 29/11/2012 - 00:36:18 - [0,144] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\lazarus O43 - CFD: 8/11/2012 - 12:31:48 - [3,891] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\Microsoft O43 - CFD: 7/11/2012 - 15:26:06 - [0] ----D C:\Documents and Settings\Paulo\Conf iguraes locais\Dados de aplicativos\Microsoft Help O43 - CFD: 6/11/2012 - 22:26:18 - [66,300] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\Mozilla O43 - CFD: 6/11/2012 - 21:44:37 - [0,061] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\O&O O43 - CFD: 6/11/2012 - 23:08:15 - [0] ----D C:\Documents and Settings\Paulo\Conf iguraes locais\Dados de aplicativos\PCHealth O43 - CFD: 18/11/2012 - 10:27:15 - [0] ----D C:\Documents and Settings\Paulo\Con figuraes locais\Dados de aplicativos\Registry Toolkit O43 - CFD: 6/11/2012 - 18:20:44 - [0,000] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\Saleen Software O43 - CFD: 2/12/2012 - 19:19:32 - [0,000] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\Search and Replace O43 - CFD: 12/11/2012 - 20:59:04 - [1,669] ----D C:\Documents and Settings\Paulo \Configuraes locais\Dados de aplicativos\SlimWare Utilities Inc O43 - CFD: 6/11/2012 - 18:58:25 - [0,473] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\Sun O43 - CFD: 6/11/2012 - 22:27:42 - [0] ----D C:\Documents and Settings\Paulo\Conf iguraes locais\Dados de aplicativos\Temp O43 - CFD: 8/11/2012 - 16:22:15 - [4,554] ----D C:\Documents and Settings\Paulo\ Configuraes locais\Dados de aplicativos\uTorrentBar_PT O43 - CFD: 16/12/2012 - 20:47:01 - [0,002] ----D C:\Documents and Settings\Paulo

\Menu Iniciar\Programas\Abexo O43 - CFD: 6/11/2012 - 17:47:28 - [0,013] R---D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\Acessrios O43 - CFD: 12/12/2012 - 15:44:40 - [0,013] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\AP2007 O43 - CFD: 6/11/2012 - 18:04:02 - [0,003] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\ArgoUML O43 - CFD: 10/12/2012 - 12:13:55 - [0,003] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\CodeBlocks O43 - CFD: 24/12/2012 - 21:41:17 - [0,002] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\Dachshund Software O43 - CFD: 6/11/2012 - 18:17:06 - [0,003] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\Defraggler O43 - CFD: 6/11/2012 - 18:13:13 - [0,002] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\fabFORCE O43 - CFD: 27/12/2012 - 23:44:21 - [0,000] R---D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\Ferramentas administrativas O43 - CFD: 6/11/2012 - 18:20:00 - [0,004] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\FlashGet3.7 O43 - CFD: 6/11/2012 - 18:20:54 - [0,002] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\Flickr AutoDownloadr O43 - CFD: 6/11/2012 - 18:18:36 - [0,003] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\Free Registry Cleaner O43 - CFD: 15/11/2012 - 11:12:43 - [0,002] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\Free Registry Defrag O43 - CFD: 6/11/2012 - 22:08:57 - [0,002] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\Free Window Registry Repair O43 - CFD: 23/12/2012 - 21:35:28 - [0,004] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\Garmin O43 - CFD: 7/11/2012 - 16:21:07 - [0,002] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\HiJackThis O43 - CFD: 24/12/2012 - 00:25:22 - [0,004] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\INF-Tool O43 - CFD: 24/12/2012 - 21:41:17 - [0,001] R---D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\Inicializar O43 - CFD: 6/11/2012 - 18:55:54 - [0,002] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\MySQL O43 - CFD: 16/12/2012 - 22:09:18 - [0,005] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\Nagwin O43 - CFD: 26/11/2012 - 02:24:24 - [0] ----D C:\Documents and Settings\Paulo\Men u Iniciar\Programas\Notepad++ O43 - CFD: 15/11/2012 - 21:59:07 - [0,001] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\PageBreeze O43 - CFD: 16/12/2012 - 22:18:00 - [0,004] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\Poseidon For UML CE 6.0.2 O43 - CFD: 9/12/2012 - 21:46:35 - [0,001] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\Qt Creator O43 - CFD: 7/11/2012 - 17:49:06 - [0,003] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\RegCompact.NET O43 - CFD: 6/11/2012 - 22:33:44 - [0,004] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\Revo Uninstaller O43 - CFD: 16/12/2012 - 22:29:08 - [0,038] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\smartmontools O43 - CFD: 16/12/2012 - 23:05:10 - [0,001] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\Sound Solution 1.31b O43 - CFD: 6/11/2012 - 18:27:14 - [0,003] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\TechPowerUp GPU-Z O43 - CFD: 11/11/2012 - 18:06:44 - [0,002] ----D C:\Documents and Settings\Paulo \Menu Iniciar\Programas\The KMPlayer O43 - CFD: 7/11/2012 - 16:53:34 - [0,003] ----D C:\Documents and Settings\Paulo\

Menu Iniciar\Programas\Unlocker O43 - CFD: 7/11/2012 - 09:48:47 - [0,006] ----D C:\Documents and Settings\Paulo\ Menu Iniciar\Programas\VITSOFT ~ Scan Program Folder in 00mn 46s

---\\ Last modified or created files under Windows and System32 (O44) O44 - LFC:[MD5.F241C4CE642BCA73C0E64AC61B2223C8] - 2/12/2012 - 10:50:02 ---A- . (...) -- C:\Novo.html [4600] O44 - LFC:[MD5.42E757E926FCB77925EAB29E72E8ECD7] - 2/12/2012 - 11:04:06 ---A- . (...) -- C:\cartilha-licitacoes.pdf [2957426] O44 - LFC:[MD5.DD115307E075B38C2BF0D680872F7047] - 2/12/2012 - 16:52:40 ---A- . (...) -- C:\052 Licitao aula 4.flv [140617948] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2/12/2012 - 22:14:43 ---A- . (...) -- C:\WINDOWS\MEMORY.DMP [2145386496] O44 - LFC:[MD5.CA231657D33AD7457E489F689DD53B02] - 24/8/2011 - 13:56:38 ---A- . (...) -- C:\DNSDataView.chm [14476] O44 - LFC:[MD5.A4CFBA7241C56E4F4FB76FC29686D20A] - 3/12/2012 - 20:55:40 ---A- . (...) -- C:\gps_atualizacao_sygic.zip [246157] O44 - LFC:[MD5.E05B5D5D683D2D8EB5F0E7704DC5EA7A] - 3/12/2012 - 21:03:58 ---A- . (...) -- C:\atualizacao_gps_032012.zip [582517269] O44 - LFC:[MD5.E76775A7F3D9D63E84F39CD7C6210570] - 3/12/2012 - 21:26:20 ---A- . (...) -- C:\mlt_GP015 (1).zip [397561] O44 - LFC:[MD5.C51A881398F29071239741AE16D07C1C] - 3/8/2004 - 22:00:16 RSHA- . ( ...) -- C:\cmldr [261856] O44 - LFC:[MD5.DE985BE7BB1DFE9EB157FC38959D8A66] - 4/2/2011 - 20:24:28 ---A- . ( ...) -- C:\RegScanner.chm [16680] O44 - LFC:[MD5.71863E8CED8896A8D1BD64FA0F2AF289] - 5/12/2012 - 18:23:06 ---A- . (...) -- C:\foto.jpg [15068] O44 - LFC:[MD5.A9A702DDD80BB67967915EBAAB573E70] - 6/12/2012 - 11:15:28 ---A- . (...) -- C:\Tabela de modalidade - licitaes..docx [11395] O44 - LFC:[MD5.B08FF9D5510967D1FAD4A5DB954D3F41] - 6/12/2012 - 11:30:57 ---A- . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\WINDOWS\system32\Drivers\HWiNFO3 2.SYS [20712] O44 - LFC:[MD5.90EED1037333C40EE3F515D8E860B45A] - 8/12/2012 - 22:50:35 ---A- . (...) -- C:\opentyrian-3526dadb1894 (1).zip [1364194] O44 - LFC:[MD5.EBFE618351D86BE21C67704D25F652DA] - 8/12/2012 - 23:41:12 ---A- . (...) -- C:\device remover.xml [2142] O44 - LFC:[MD5.193A1017E8E00CEC7ABE48E070A1365D] - 9/12/2012 - 00:14:35 ---A- . (...) -- C:\deviceremover.bat [105] O44 - LFC:[MD5.ADD4E1777BE92EB4739E845852517615] - 9/12/2012 - 10:34:52 ---A- . (...) -- C:\devcpp-4.9.9.2_nomingw_setup.exe [2465979] O44 - LFC:[MD5.A0FA0A34A842DBFD9D3B0CA834311926] - 9/12/2012 - 10:53:13 ---A- . (...) -- C:\devcpp-4.9.9.2_setup.exe [9326468] O44 - LFC:[MD5.FEA3846D0C6D0296A002781755F062C3] - 9/12/2012 - 18:26:34 ---A- . (...) -- C:\gmapsupp.img [405839872] O44 - LFC:[MD5.B8351F62181E6DAF5468DF9E8A20858D] - 28/12/2012 - 17:26:48 ---A- . (...) -- C:\WINDOWS\WindowsUpdate.log [1898065] O44 - LFC:[MD5.019A75C98DF889909C67AAE077CB9D29] - 28/12/2012 - 17:19:12 ---A- . (...) -- C:\DelFix[S1].txt [1727] O44 - LFC:[MD5.A9EF9198A069688EEA4A66D815992CE0] - 28/12/2012 - 17:18:46 ---A- . (...) -- C:\DelFix[R1].txt [1582] O44 - LFC:[MD5.84E4BAA8A47E19B45D194832A391D9F4] - 28/12/2012 - 16:52:09 ---A- . (...) -- C:\WINDOWS\hare.dat [69] O44 - LFC:[MD5.A1D916857130B20DF66B51CBF3C75FCC] - 28/12/2012 - 16:51:16 ---A- . (...) -- C:\WINDOWS\system32\_WKERNEL.SYL [46] O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 28/12/2012 - 16:20:05 ---A- . (...) -- C:\WINDOWS\0.log [0] O44 - LFC:[MD5.1254E8F75C17359E8677D11F1ACC09D1] - 28/12/2012 - 16:19:39 ---A- .

(...) -- C:\WINDOWS\wiadebug.log [159] O44 - LFC:[MD5.169CAA134D650DBAB740FE73E9FB4BD5] - 28/12/2012 - 16:19:39 ---A- . (...) -- C:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 28/12/2012 - 16:19:05 -S-A- . (...) -- C:\WINDOWS\bootstat.dat [2048] O44 - LFC:[MD5.25DBC14B6D05C87888F35B37BEBCBE63] - 28/12/2012 - 16:18:29 ---A- . (...) -- C:\WINDOWS\SchedLgU.Txt [32536] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 28/12/2012 - 15:10:28 ---A- . (...) -- C:\WINDOWS\system.ini [227] O44 - LFC:[MD5.1CD06E007DF9D2DF3B41D9B5C53FA8FF] - 28/12/2012 - 15:09:57 ---A- . (.Sygic a.s. - Sygic RUPI Convertor.) -- C:\RUPI Convertor.exe [122880] O44 - LFC:[MD5.BCF344684A3054321B7B2A8887AB93CD] - 28/12/2012 - 15:04:37 ---A- . (...) -- C:\maparadar.txt [880460] O44 - LFC:[MD5.DAAB81C001532E724A2E99688C9C1D32] - 28/12/2012 - 14:41:28 ---A- . (...) -- C:\WINDOWS\win.ini [554] O44 - LFC:[MD5.9CDD115F7E9B94CC65C706E6A0EF4485] - 28/12/2012 - 14:41:28 RSHA- . (...) -- C:\boot.ini [350] O44 - LFC:[MD5.72E50E1F87FC12FE60FC72BBD06001C9] - 28/12/2012 - 14:09:02 ---A- . (...) -- C:\InfoSat.txt [1962] O44 - LFC:[MD5.1A70805D727FC7FA72349F244F366CA9] - 28/12/2012 - 13:44:57 ---A- . (...) -- C:\elibagla.zip [103446] O44 - LFC:[MD5.C9D465843E1ACF393D7429D57887FF98] - 27/12/2012 - 23:35:28 ---A- . (...) -- C:\startuplist.zip [162728] O44 - LFC:[MD5.C7F25C083D39BFA92A95F888560F42B3] - 27/12/2012 - 22:49:00 ---A- . (...) -- C:\Boot.bak [234] O44 - LFC:[MD5.C053EA981291CBAECB2B3DD35969855C] - 27/12/2012 - 16:41:42 ---A- . (...) -- C:\WINDOWS\pagebreeze.ini [1057] O44 - LFC:[MD5.56136581EF38ACD4C3D700694DE4BDE6] - 27/12/2012 - 15:31:28 ---A- . (...) -- C:\WINDOWS\.prj [25] O44 - LFC:[MD5.A222A915A7FF6ABBC9251E7A7A783A41] - 27/12/2012 - 13:33:48 --HA- . (...) -- C:\WINDOWS\wininf.dat [427] O44 - LFC:[MD5.F650E03206E640EED81FB64097A7EE03] - 26/12/2012 - 09:52:22 ---A- . (...) -- C:\Resciso do Contrato Administrativo.docx [10149] O44 - LFC:[MD5.6A00014101E858093BA31C991051E61C] - 26/12/2012 - 07:17:08 ---A- . (...) -- C:\WINDOWS\system32\wpa.dbl [2228] O44 - LFC:[MD5.E19176BB1E3F38CD316DCA05CF5F6500] - 25/12/2012 - 00:09:30 ---A- . (...) -- C:\Dachshund.Software.(Hare.1.5.1-AntiCrash.3.6+3.6.1-Zoom.1.3.1).seri al.G4ZP4RZ1NH0.pootz.txt [150] O44 - LFC:[MD5.8F07471265C73A25140DA2E6AE68C310] - 25/12/2012 - 00:07:20 ---A- . (...) -- C:\Dachshund Software (Hare 1.5.1-Anticrash 3.6 3.6.1-Zoom 1.3.1) Seri als.txt [148] O44 - LFC:[MD5.767508A4B932F52716594B40A83FBA4D] - 24/12/2012 - 17:32:48 ---A- . (...) -- C:\cc_config.ini [39] O44 - LFC:[MD5.CAEB1FC321BCC621D61725451A6094E2] - 24/12/2012 - 16:52:40 ---A- . (...) -- C:\WINDOWS\system32\oeminfo.ini [34] O44 - LFC:[MD5.5F3D2EB5C6CB581C892734BA197BD8D3] - 24/12/2012 - 14:30:29 ---A- . (.Piriform Ltd - CCleaner Installer.) -- C:\ccsetup326.exe [4178040] O44 - LFC:[MD5.AB082D1C1AC273D6AE9E45B037CBBBAA] - 24/12/2012 - 11:39:06 ---A- . (...) -- C:\a.htm [18359] O44 - LFC:[MD5.F98B9194D3AA39AADB6644EB1667C91B] - 23/12/2012 - 23:52:01 ---A- . (...) -- C:\~EXECUTE (1).INF [22037] O44 - LFC:[MD5.E09641988174926B2607E4E1ECCAF55A] - 23/12/2012 - 23:47:39 ---A- . (.jrsoftware.org - Inno Setup Setup.) -- C:\isetup-5.5.2.exe [1905424] O44 - LFC:[MD5.79B543045AAFED5992ACB911BF20334B] - 23/12/2012 - 23:25:01 ---A- . (...) -- C:\INFTool.EXE [1622156] O44 - LFC:[MD5.3271031ED43DDE7C9049F3139E50D5CA] - 23/12/2012 - 23:21:54 ---A- . (...) -- C:\XP_FIXIT.INF [315735] O44 - LFC:[MD5.8AA2443438D160D46686B2858B2C779F] - 23/12/2012 - 23:00:46 ---A- . (...) -- C:\regscanner.cfg [793] O44 - LFC:[MD5.98E6DC95E563F0147AC6269EA4D81F56] - 23/12/2012 - 18:51:11 ---A- .

(...) -- C:\[isoHunt] 7F7723F3CAD13AEB3B4F3B2990AAF7F809896288.torrent ] O44 - LFC:[MD5.397EE17EEB8B0FC0575B69B7963025D8] - 23/12/2012 - 16:28:08 (...) -- C:\nuvi1200_PTmanualdoutilizador.pdf [1391287] O44 - LFC:[MD5.7B20C648B6A2F01B9B8BBBC2947E4161] - 23/12/2012 - 16:22:20 (.Igor Pavlov - 7z Setup SFX.) -- C:\MapSource_6163.exe [57051280] O44 - LFC:[MD5.CABBEF70CC20B7D799C95A4340234DC9] - 23/12/2012 - 16:12:39 (...) -- C:\garmin.txt [68] O44 - LFC:[MD5.E8C18A05170C82591E08C8B72E121FD8] - 23/12/2012 - 15:58:43 (...) -- C:\nuvi_1100_1200_1300_1400_OM.pdf [939823] O44 - LFC:[MD5.C3EDCCA1FD54009D7C56EEC837148DC8] - 23/12/2012 - 15:37:52 (...) -- C:\CommunicatorPlugin_404.exe [18854112] O44 - LFC:[MD5.E5642259C77449F6ECF8CA4BF05F01A6] - 23/12/2012 - 15:14:47 (...) -- C:\WebUpdater_WindowsXPSP3andnewer__256.exe [11390192] O44 - LFC:[MD5.5D10076FBE972489424646DEEC0F461C] - 23/12/2012 - 14:50:08 (.Garmin International - Garmin Map Update.) -- C:\GarminMapUpdater.exe 512] O44 - LFC:[MD5.03E8A6185571B3CF4730DF1AE6BCD99B] - 22/12/2012 - 19:19:31 (...) -- C:\WINDOWS\system32\FNTCACHE.DAT [195368] O44 - LFC:[MD5.A19AFD48D6B93059EE6F3FDE099F408A] - 21/12/2012 - 15:47:56 (...) -- C:\revis_o_dos_pre_os_e_o_reajuste_contratual.htm [18378] O44 - LFC:[MD5.7436AE11F0E1E1CAA719B127F4D4C6D8] - 21/12/2012 - 15:44:57 (...) -- C:\HBJavaHelp.log [86] O44 - LFC:[MD5.303A8D21C455554457B0EED5E04AB3BF] - 19/12/2012 - 15:03:05 (...) -- C:\novo.htm [5208] O44 - LFC:[MD5.10595A22468296D317F9A23BADF7D601] - 19/12/2012 - 13:04:44 (...) -- C:\CPUCOOL9.EXE [4200348] O44 - LFC:[MD5.53B3DB5CEE1D8778D1BA4D9C59B64DDF] - 19/12/2012 - 12:56:12 (...) -- C:\cbid836b.zip [281464] O44 - LFC:[MD5.B8EC0AC1FD98A45D896C61EE75E9ACD0] - 19/12/2012 - 12:51:10 (...) -- C:\CrystalCPUID415.zip [616447] O44 - LFC:[MD5.813D45AF7B94AE5E2A733B1509748716] - 19/12/2012 - 12:49:59 (...) -- C:\CrystalDMI.zip [181405] O44 - LFC:[MD5.E3BF93BE5A4D5F0C525014699205F8D1] - 19/12/2012 - 10:09:31 (...) -- C:\bndes0112_edital.zip [608623] O44 - LFC:[MD5.BF4C1A01C03F7451FC87869C36022AC8] - 18/12/2012 - 23:48:08 (...) -- C:\Documento1.rtf [1404] O44 - LFC:[MD5.3AEEC083A1767A2BC7DEF2B026AB5645] - 18/12/2012 - 22:17:04 (...) -- C:\WinASO.Registry.Optimizer.v3.1. SERIALE.txt [166] O44 - LFC:[MD5.F48EE2B9ED53F17F71F1AC4D2055C3A9] - 18/12/2012 - 19:00:09 (...) -- C:\nodes.dat [12216] O44 - LFC:[MD5.E761953AD5668BA56B3B1F78C3A2F51B] - 18/12/2012 - 18:52:37 (...) -- C:\nodes1.dat [6812] O44 - LFC:[MD5.3639F7AD335B521F5ADDD0A6A1EDD977] - 18/12/2012 - 09:10:25 (...) -- C:\PFPortChecker.exe [534792] O44 - LFC:[MD5.0D247DD272FBA1C5C84B5078429C3B79] - 18/12/2012 - 08:36:20 (.IObit - SmartDefrag.) -- C:\WINDOWS\system32\SmartDefragBootTime.exe ] O44 - LFC:[MD5.671C8A85477F4C78150E5D1ECE344821] - 17/12/2012 - 13:53:00 (...) -- C:\Olivia Wilde's Boots in Tron Legacy.flv [4350392] O44 - LFC:[MD5.8938CC1BAA589CAA976A445451F3DFAB] - 17/12/2012 - 01:28:46 (...) -- C:\Etiquetas Claudia..docx [12598] O44 - LFC:[MD5.C6D6D7DBF05D81C3C618C7C4487AF270] - 16/12/2012 - 23:09:13 (...) -- C:\Thumbs.db [81408] O44 - LFC:[MD5.AFBB88E9DB6A4BFA777632B1245701BC] - 16/12/2012 - 23:08:37 (...) -- C:\WINDOWS\Thumbs.db [7168] O44 - LFC:[MD5.9605335B778F4B4A81AFCDFA7DBD8701] - 16/12/2012 - 21:21:08 (.NirSoft - Registry Scanner.) -- C:\RegScanner.exe [44544] O44 - LFC:[MD5.D74BB1A9F083234653D5D5801F1963FC] - 16/12/2012 - 20:36:41 (.COMODO - COMODO Internet Security.) -- C:\WINDOWS\system32\cmdcsr.dll

[15854 ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . [4617 ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . ---A- . [29528 ---A- . ---A- . -SHA- . -SHA- . ---A- . ---A- . [3402

4] O44 - LFC:[MD5.C8F5C0B30CE4C9ACE2376AD85D3F251A] - 16/12/2012 - 20:34:25 ---A- . (...) -- C:\Etiquetas Claudia.rtf [30837] O44 - LFC:[MD5.076339E541082FD69A3E808EB16EB139] - 16/12/2012 - 20:07:01 ---A- . (.Indigo Rose Corporation - Setup Factory 5.0 Uninstall Runtime.) -- C:\WINDOWS \iun507.exe [286720] O44 - LFC:[MD5.6729DD5F1D1EC5271279B594B72BA249] - 16/12/2012 - 20:03:32 ---A- . (.NirSoft - DNSDataView.) -- C:\DNSDataView.exe [35840] O44 - LFC:[MD5.0513AE0A5DCF08798308F9090F14BD0B] - 16/12/2012 - 19:47:16 ---A- . (...) -- C:\ActivePerl-5.16.1.1601-MSWin32-x86-296175.msi [26347196] O44 - LFC:[MD5.C11D10A3C164AC222BC9AAB3650A88B3] - 16/12/2012 - 09:23:59 ---A- . (.Adobe Systems Incorporated - Windows NT OpenType/Type 1 Font Driver.) -- C:\W INDOWS\system32\atmfd.dll [290560] O44 - LFC:[MD5.C8ACEE8635D21048852181422B2680A6] - 15/12/2012 - 21:57:39 ---A- . (...) -- C:\msxml.msi [5289984] O44 - LFC:[MD5.BD9C82FE1D3D5F0E28C3CD0FF293C998] - 15/12/2012 - 21:21:25 ---A- . (...) -- C:\limpamemoria.vbe [20] O44 - LFC:[MD5.06E35FABBBD7AB330A095FE70F516B59] - 13/12/2012 - 16:47:33 ---A- . (...) -- C:\Porcentagem5.pdf [759732] O44 - LFC:[MD5.54B4C4A4D9DCF6A49C96351F66B29E77] - 12/12/2012 - 21:53:30 ---A- . (...) -- C:\WINDOWS\imsins.BAK [1393] O44 - LFC:[MD5.E5B86A4DB50014F5A75A2935150DA5D9] - 12/12/2012 - 21:53:11 ---A- . (...) -- C:\WINDOWS\system32\TZLog.log [12552] O44 - LFC:[MD5.470FA8E678EB7690A39FC9E09534A147] - 12/12/2012 - 16:26:51 ---A- . (...) -- C:\CodFax_07-003_Parametros_de_Impressao_InkJet_Laser_Microsoft_Word20 07.doc [129024] O44 - LFC:[MD5.2DB9DABA9A6D73C77D551D4A57E1B0B6] - 12/12/2012 - 14:41:51 ---A- . (...) -- C:\Ajuda AP+ 2.0.pdf [565330] O44 - LFC:[MD5.04E455C4A5B5C017E04599C4BDB6740A] - 12/12/2012 - 06:42:37 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\ WINDOWS\system32\FlashPlayerApp.exe [697272] O44 - LFC:[MD5.6E6FF1275216A0C31BBB792B53F47083] - 12/12/2012 - 06:42:37 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\ WINDOWS\system32\FlashPlayerCPLApp.cpl [73656] O44 - LFC:[MD5.7AF619A5F70528EBF1FB4B0A39D0C414] - 10/12/2012 - 20:20:58 ---A- . (...) -- C:\LUIZ KUTWAK_0258543201LAUDO.jpg [72098] O44 - LFC:[MD5.1A9B0394204446C8B089F54B5B28D762] - 10/12/2012 - 08:31:32 ---A- . (...) -- C:\Apostila C.pdf [627699] O44 - LFC:[MD5.14BB60A4F1C5291217A05D5728C403E6] - 26/11/2010 - 17:02:52 ---A- . (...) -- C:\WINDOWS\system32\Drivers\SmartDefragDriver.sys [14776] ~ Scan Files in 06mn 21s

---\\ Operations and functions at Windows Explorer startup (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91 972} - shell32.dll O46 - SEH:ShellExecuteHooks - SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-85 3A-EBB7F4A000DA} - C:\Arquivos de programas\SUPERAntiSpyware\SASSEH.DLL ~ Scan ShellExecuteHooks in 00mn 00s

---\\ Export authorized application key (O47) O47 - AAKE:Key Export SP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsof t Corporation - Gerenciador de sesso de ajuda de rea de trabalho remota da Microso ft.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export SP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Ne twork Diagnostic\xpnetdiag.exe

O47 - AAKE:Key Export SP - "C:\Arquivos de programas\NVIDIA Corporation\NVIDIA U pdate Core\daemonu.exe" [Enabled] .(.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Arquivos de programas\NVIDIA Corporation\NVIDIA Update Core\dae monu.exe O47 - AAKE:Key Export SP - "C:\Arquivos de programas\FlashGet Network\FlashGet 3 \FlashGet3.exe" [Enabled] .(.Trend Media Corporation Limited - FlashGet3.) -- C: \Arquivos de programas\FlashGet Network\FlashGet 3\FlashGet3.exe O47 - AAKE:Key Export SP - "C:\Arquivos de programas\uTorrent\uTorrent.exe" [Ena bled] .(.BitTorrent, Inc. - Torrent.) -- C:\Arquivos de programas\uTorrent\uTorre nt.exe O47 - AAKE:Key Export SP - "C:\Arquivos de programas\adawaretb\dtUser.exe" [Enab led] .(.Visicom Media Inc. - DtUser.) -- C:\Arquivos de programas\adawaretb\dtUs er.exe O47 - AAKE:Key Export SP - "C:\eclipse\eclipse.exe" [Enabled] .(...) -- C:\eclip se\eclipse.exe O47 - AAKE:Key Export SP - "C:\Arquivos de programas\PANDORA.TV\PanService\Pando raService.exe" [Enabled] .(.Pandora.TV - Pandora.TV service file.) -- C:\Arquivo s de programas\PANDORA.TV\PanService\PandoraService.exe O47 - AAKE:Key Export SP - "C:\WINDOWS\system32\dllhost.exe" [Enabled] .(.Micros oft Corporation - COM Surrogate.) -- C:\WINDOWS\system32\dllhost.exe O47 - AAKE:Key Export SP - "F:\eclipse\eclipse.exe" [Enabled] .(...) -- F:\eclip se\eclipse.exe O47 - AAKE:Key Export SP - "C:\Arquivos de programas\eMule\emule.exe" [Enabled] .(.http://www.emule-project.net - eMule.) -- C:\Arquivos de programas\eMule\emul e.exe O47 - AAKE:Key Export SP - "C:\Arquivos de programas\NSClient++\nscp.exe" [Enabl ed] .(.MySolutions Nordic (Michael Medin) - Monitoring Agent.) -- C:\Arquivos de programas\NSClient++\nscp.exe O47 - AAKE:Key Export DP - "%windir%\system32\sessmgr.exe" [Enabled] .(.Microsof t Corporation - Gerenciador de sesso de ajuda de rea de trabalho remota da Microso ft.) -- C:\WINDOWS\system32\sessmgr.exe O47 - AAKE:Key Export DP - "%windir%\Network Diagnostic\xpnetdiag.exe" [Enabled] .(.Microsoft Corporation - Network Diagnostic for Windows XP.) -- C:\WINDOWS\Ne twork Diagnostic\xpnetdiag.exe ~ Scan Keys in 00mn 02s

---\\ Local Security Authority-LSA Deny (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corpora tion - Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporati on - Mecanismo cliente do 'Editor de configurao de segurana Windows'.) -- C:\WINDOW S\system32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation Kerberos Security Package.) -- C:\WINDOWS\system32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation Microsoft Authentication Package v1.0.) -- C:\WINDOWS\system32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation Microsoft Digest Access.) -- C:\WINDOWS\system32\wdigest.dll ~ Scan Keys in 00mn 00s

---\\ Safe Boot Control (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Driv ers\dmboot.sys

O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmio.sys . (.Microsoft Corp., V eritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dm io.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Dri vers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (...) -- C:\WIND OWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sr.sys . (.Microsoft Corporatio n - Driver de filtro do sistema de arquivos da restaurao do sistema.) -- C:\WINDOW S\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporati on - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\WINDO WS\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmboot.sys . (.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Driv ers\dmboot.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmio.sys . (.Microsoft Corp., V eritas Software - NT Disk Manager I/O Driver.) -- C:\WINDOWS\system32\Drivers\dm io.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\dmload.sys . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\system32\Dri vers\dmload.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ip6fw.sys . (.Microsoft Corpora tion - IPv6 Windows Firewall Driver.) -- C:\WINDOWS\system32\Drivers\ip6fw.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corpora tion - IP Network Address Translator.) -- C:\WINDOWS\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpcdd.sys . (.Microsoft Corpor ation - RDP Miniport.) -- C:\WINDOWS\system32\Drivers\rdpcdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpdd.sys . (...) -- C:\WINDOWS \system32\Drivers\rdpdd.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpwd.sys . (.Microsoft Corpora tion - RDP Terminal Stack Driver (US/Canada Only, Not for Export).) -- C:\WINDOW S\system32\Drivers\rdpwd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (...) -- C:\WIND OWS\system32\Drivers\sermouse.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sr.sys . (.Microsoft Corporatio n - Driver de filtro do sistema de arquivos da restaurao do sistema.) -- C:\WINDOW S\system32\Drivers\sr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdpipe.sys . (.Microsoft Corpor ation - Named Pipe Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdpipe.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\tdtcp.sys . (.Microsoft Corpora tion - TCP Transport Driver.) -- C:\WINDOWS\system32\Drivers\tdtcp.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporati on - VGA/Super VGA Video Driver.) -- C:\WINDOWS\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\WINDO WS\system32\Drivers\vgasave.sys (.not file.) ~ Scan CSB in 00mn 00s

---\\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a pa th - ntsd -d ~ Scan IFEO in 00mn 00s

---\\ MountPoints2 Shell Key (MPKS) (O51) (None)

---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.trspch"="tssoft32.acm" . (.DSP GROUP, INC. - Codec de udio DSP Group TrueSpeech(TM) para MSACM V3.50.) -- C:\WINDOWS\system32\tssof t32.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Cinepak Codec.) -- C:\WINDOWS\system32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.iv31"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv32"="ir32_32.dll" . (...) -- C:\WINDOWS\system32\ ir32_32.dll O52 - TDSD: \Drivers32\"vidc.iv41"="ir41_32.ax" . (.Intel Corporation - Intel In deo Video 4.5.) -- C:\WINDOWS\system32\ir41_32.ax O52 - TDSD: \Drivers32\"msacm.sl_anet"="sl_anet.acm" . (.Sipro Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \Drivers32\"msacm.iac2"="C:\WINDOWS\System32\iac25_32.ax" . (.Intel Corporation - Indeo audio software.) -- C:\WINDOWS\System32\iac25_32.ax O52 - TDSD: \Drivers32\"vidc.iv50"="ir50_32.dll" . (.Intel Corporation - Intel I ndeo video 5.10.) -- C:\WINDOWS\system32\ir50_32.dll O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\WINDOWS\System32\l3codeca.acm" . (.Frau nhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) - C:\WINDOWS\System32\l3codeca.acm O52 - TDSD: \Drivers32\"VIDC.FMVC"="fmcodec.dll" . (.Fox Magic Software - FM Scr een Capture Codec (VFW).) -- C:\WINDOWS\system32\fmcodec.dll O52 - TDSD: \Drivers32\"VIDC.XVID"="xvidvfw.dll" . (...) -- C:\WINDOWS\system32\ xvidvfw.dll O52 - TDSD: \Drivers32\"VIDC.LAGS"="lagarith.dll" . (.Unknown owner - Lagarith.) -- C:\WINDOWS\system32\lagarith.dll O52 - TDSD: \Drivers32\"VIDC.FFDS"="ff_vfw.dll" . (.Unknown owner - ffdshow VFW. ) -- C:\WINDOWS\system32\ff_vfw.dll O52 - TDSD: \Drivers32\"msacm.ac3acm"="ac3acm.acm" . (.fccHandler - AC-3 ACM Cod ec.) -- C:\WINDOWS\system32\ac3acm.acm O52 - TDSD: \Drivers32\"msacm.lameacm"="lameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\WINDOWS\system32\lameACM.acm O52 - TDSD: \Drivers32\"msacm.avis"="ff_acm.acm" . (.Unknown owner - ffdshow ACM codec.) -- C:\WINDOWS\system32\ff_acm.acm O52 - TDSD: \Drivers32\"msacm.ac3filter"="ac3filter.acm" . (.Unknown owner - ac3 filter.) -- C:\WINDOWS\system32\ac3filter.acm O52 - TDSD: \drivers.desc\"sl_anet.acm"="Sipro Lab Telecom Audio Codec" . (.Sipr o Lab Telecom Inc. - Audio codec for MS ACM.) -- C:\WINDOWS\system32\sl_anet.acm O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\iac25_32.ax"="Indeo audio software " . (.Intel Corporation - Indeo audio software.) -- C:\WINDOWS\System32\iac25_32. ax O52 - TDSD: \drivers.desc\"C:\WINDOWS\System32\l3codeca.acm"="Fraunhofer IIS MPE G Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\WINDOWS\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"lagarith.dll"="Lagarith lossless codec" . (.Unknown o wner - Lagarith.) -- C:\WINDOWS\system32\lagarith.dll O52 - TDSD: \drivers.desc\"ff_vfw.dll"="ffdshow video encoder" . (.Unknown owner - ffdshow VFW.) -- C:\WINDOWS\system32\ff_vfw.dll O52 - TDSD: \drivers.desc\"ac3acm.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 AC M Codec.) -- C:\WINDOWS\system32\ac3acm.acm O52 - TDSD: \drivers.desc\"ff_acm.acm"="ffdshow ACM codec" . (.Unknown owner - f fdshow ACM codec.) -- C:\WINDOWS\system32\ff_acm.acm O52 - TDSD: \drivers.desc\"ac3filter.acm"="AC3Filter ACM codec" . (.Unknown owne r - ac3filter.) -- C:\WINDOWS\system32\ac3filter.acm ~ Scan Keys in 00mn 02s

---\\ ShareTools MSconfig StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated Adobe Reader and Acrobat Manager.) -- C:\Arquivos de programas\Arquivos comuns\ Adobe\ARM\1.0\AdobeARM.exe O53 - SMSR:HKLM\...\startupreg\DiscWizardMonitor.exe [Key] . (.Seagate - Seagat e DiscWizard Monitor.) -- C:\Arquivos de programas\Seagate\DiscWizard\DiscWizard Monitor.exe O53 - SMSR:HKLM\...\startupreg\FlashGet 3 [Key] . (.Trend Media Corporation Lim ited - FlashGet3.) -- c:\arquivos de programas\flashget network\flashget 3\flash get3.exe O53 - SMSR:HKLM\...\startupreg\Live Update 5 [Key] . (...) -- C:\Arquivos de pr ogramas\MSI\Live Update 5\BootStartLiveupdate.exe O53 - SMSR:HKLM\...\startupreg\MSMSGS [Key] . (.Microsoft Corporation - Windows Messenger.) -- C:\Arquivos de programas\Messenger\msmsgs.exe O53 - SMSR:HKLM\...\startupreg\NvCplDaemon [Key] . (.NVIDIA Corporation - NVIDI A Display Properties Extension.) -- C:\WINDOWS\system32\NvCpl.dll O53 - SMSR:HKLM\...\startupreg\NvMixerTray [Key] . (.NVIDIA Corporation - NVIDI A nForce Mixer Tray Application.) -- C:\Arquivos de programas\NVIDIA Corporation \NvMixer\NvMixerTray.exe O53 - SMSR:HKLM\...\startupreg\nwiz [Key] . (...) -- C:\Arquivos de programas\N VIDIA Corporation\nview\nwiz.exe O53 - SMSR:HKLM\...\startupreg\OODefragTray [Key] . (.O&O Software GmbH - O&O D efrag Free Edition TrayIcon (Win32).) -- C:\Arquivos de programas\OO Software\De frag\oodtray.exe O53 - SMSR:HKLM\...\startupreg\Seagate Scheduler2 Service [Key] . (.Seagate - S eagate Scheduler Helper.) -- C:\Arquivos de programas\Arquivos comuns\Seagate\Sc hedule2\schedhlp.exe O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Sun Microsystems, I nc. - Java(TM) Update Scheduler.) -- C:\Arquivos de programas\Arquivos comuns\Ja va\Java Update\jusched.exe O53 - SMSR:HKLM\...\startupreg\UnlockerAssistant [Key] . (...) -- C:\Arquivos d e programas\Unlocker\UnlockerAssistant.exe O53 - SMSR:HKLM\...\startupreg\uTorrent [Key] . (.BitTorrent, Inc. - Torrent.) - C:\Arquivos de programas\uTorrent\uTorrent.exe ~ Scan SMSR Keys in 00mn 03s

---\\ Microsoft Control Security Providers (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Micros oft Corporation - Cliente DPA para plataformas de 32 bits.) -- C:\WINDOWS\system 32\msapsspc.dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Micros oft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel. dll O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Micros oft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\di gest.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Cliente DPA para plataformas de 32 bits.) -- C:\WINDOWS\system32\m sapsspc.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\WINDOWS\system32\schannel.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Digest SSPI Authentication Package.) -- C:\WINDOWS\system32\digest .dll ~ Scan Keys in 00mn 00s

---\\ Microsoft Windows Policies System O55 - MWPS:[HKLM\...\Policies\System] O55 - MWPS:[HKLM\...\Policies\System] O55 - MWPS:[HKLM\...\Policies\System] O55 - MWPS:[HKLM\...\Policies\System] O55 - MWPS:[HKLM\...\Policies\System] O55 - MWPS:[HKLM\...\Policies\System] O55 - MWPS:[HKLM\...\Policies\System] ~ Scan Keys in 00mn 00s

(MWPS) (O55) "dontdisplaylastusername"=0 "legalnoticecaption"=0 "legalnoticetext"=0 "undockwithoutlogon"=1 "VerboseStatus"=1 "ShutdownWithoutLogon"=1 "DisableRegistryTools"=0

---\\ Microsoft Windows Policies Explorer O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKCU\...\policies\Explorer] O56 - MWPE:[HKLM\...\policies\Explorer] O56 - MWPE:[HKLM\...\policies\Explorer] O56 - MWPE:[HKLM\...\policies\Explorer] O56 - MWPE:[HKLM\...\policies\Explorer] O56 - MWPE:[HKLM\...\policies\Explorer] O56 - MWPE:[HKLM\...\policies\Explorer] O56 - MWPE:[HKLM\...\policies\Explorer] O56 - MWPE:[HKLM\...\policies\Explorer] ~ Scan Keys in 00mn 00s

(MWPE) (O56) "NoDriveTypeAutoRun"=323 "NoSimpleStartMenu"=0 "NoStartBanner"= "Intellimenus"=0 "LinkResolveIgnoreLinkInfo"=1 "NoWelcomeScreen"=1 "NoRecentDocsNetHood"=1 "NoDesktopCleanupWizard"=1 "NoSharedDocuments"=1 "NoStartMenuNetworkPlaces"=1 "NoSMMyDocs"=1 "NoFavoritesMenu"=1 "NoSMMyPictures"=1 "NoStartMenuMyMusic"=1 "MaxRecentDocs"=10 "ConfirmFileDelete"=1 "ForceStartMenuLogOff"=1 "MemCheckBoxInRunDlg"=1 "NoAddPrinter"=0 "NoCDBurning"=0 "NoRecentDocsHistory"=0 "ClearRecentDocsOnExit"=0 "NoDriveAutoRun"=67108863 "NoDrives"=0 "ForceClassicControlPanel"=1 "NoDriveTypeAutoRun"=323 "NoResolveTrack"=0 "NoPropertiesMyComputer"=0 "NoFileAssociate"=0 "NoSMHelp"=0 "NoDriveAutoRun"=67108863 "NoDrives"=0

---\\ System Drivers List (SDL) (O58) O58 - SDL:[MD5.267FC636801EDC5AB28E14036349E3BE] - 18/11/2009 - 06:16:00 ---A- . (.Creative - Creative WDM 3D Audio Driver.) -- C:\WINDOWS\system32\Drivers\Ambf ilt.sys [1691480] O58 - SDL:[MD5.C1E76718BAB6BCA0D18E5670F074F821] - 28/10/2001 - 15:06:08 ---A- . (...) -- C:\WINDOWS\system32\ansi.sys [9032] ~ Scan Drivers in 00mn 00s

---\\ List all tools cleaner (LATC) (O63)

O63 - Logiciel: ZHPDiag 1.32 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A412FCBA4883D7} ~ Scan ADS in 00mn 00s

---\\ List all legacy services(LALS) (O64) O64 - Services: CurCS - 11/7/2012 - C:\Arquivos de programas\SUPERAntiSpyware\SA SCORE.exe (!SASCORE) .(.SUPERAntiSpyware.com - Core Service.) - LEGACY_!SASCORE O64 - Services: CurCS - 27/11/2012 - C:\WINDOWS\iprot\6bd6aafb-ce29-4dbb-ad25-c5 9a3e0c7415\PhysMem.sys (6bd6aafb-ce29-4dbb-ad25-c59a3e0c7415) .(.Systems Intern als - Windows NT File System Monitor.) - LEGACY_6BD6AAFB-CE29-4DBB-AD25-C59A3E0C 7415 O64 - Services: CurCS - 20/9/2012 - C:\Arquivos de programas\Ad-Aware Antivirus\ AdAwareService.exe (Ad-Aware Service) .(.Lavasoft Limited - Ad-Aware Antivirus Service.) - LEGACY_AD-AWARE_SERVICE O64 - Services: CurCS - 12/12/2012 - C:\WINDOWS\system32\Macromed\Flash\FlashPla yerUpdateService.exe (AdobeFlashPlayerUpdateSvc) .(.Adobe Systems Incorporated - Adobe Flash Player Update Service 11.5 r5.) - LEGACY_ADOBEFLASHPLAYERUPDATESVC O64 - Services: CurCS - 2/7/2012 - C:\Arquivos de programas\Avira\AntiVir Deskto p\sched.exe (AntiVirSchedulerService) .(.Avira Operations GmbH & Co. KG - Avira Scheduler.) - LEGACY_ANTIVIRSCHEDULERSERVICE O64 - Services: CurCS - 2/7/2012 - C:\Arquivos de programas\Avira\AntiVir Deskto p\avguard.exe (AntiVirService) .(.Avira Operations GmbH & Co. KG - Avira On-Acc ess Service.) - LEGACY_ANTIVIRSERVICE O64 - Services: CurCS - 25/6/2012 - C:\Arquivos de programas\AMD\OverDrive\i386\ AODDriver2.sys (AODDriver4.2.0) .(.Advanced Micro Devices - AMD OverDrive Servi ce Driver.) - LEGACY_AODDRIVER4.2.0 O64 - Services: CurCS - 25/6/2012 - C:\Arquivos de programas\AMD\OverDrive\AODAs sist.exe - AODService (AODService) .(...) - LEGACY_AODSERVICE O64 - Services: CurCS - 28/1/2012 - C:\Apache\bin\httpd.exe (Apache2.2) .(.Apac he Software Foundation - Apache HTTP Server.) - LEGACY_APACHE2.2 O64 - Services: CurCS - 5/6/2012 - C:\WINDOWS\system32\DRIVERS\avgntflt.sys (avg ntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - 5/6/2012 - C:\WINDOWS\system32\DRIVERS\avipbb.sys (avipb b) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - 5/6/2012 - C:\WINDOWS\system32\DRIVERS\avkmgr.sys (avkmg r) .(.Avira GmbH - Avira Manager Driver.) - LEGACY_AVKMGR O64 - Services: CurCS - 9/3/2012 - C:\WINDOWS\system32\drivers\cpuz135_x32.sys ( cpuz135) .(.CPUID - CPUID Driver.) - LEGACY_CPUZ135 O64 - Services: CurCS - 13/4/2008 - C:\WINDOWS\system32\dmadmin.exe (dmadmin) . (.Microsoft Corp., Veritas Software - Processo do servio do gerenciador de disco. ) - LEGACY_DMADMIN O64 - Services: CurCS - 13/4/2008 - C:\WINDOWS\system32\drivers\dmboot.sys (dmbo ot) .(.Microsoft Corp., Veritas Software - NT Disk Manager Startup Driver.) - L EGACY_DMBOOT O64 - Services: CurCS - 21/12/2010 - c:\FrontBase\bin\FBexec.exe - FBExec Servic e (FBExecService) .(...) - LEGACY_FBEXECSERVICE O64 - Services: CurCS - 11/11/2012 - C:\Arquivos de programas\Google\Update\Goog leUpdate.exe (gupdate) .(.Google Inc. - Google Installer.) - LEGACY_GUPDATE O64 - Services: CurCS - 11/11/2012 - C:\Arquivos de programas\Google\Update\Goog leUpdate.exe (gupdatem) .(.Google Inc. - Google Installer.) - LEGACY_GUPDATEM O64 - Services: CurCS - 6/12/2012 - C:\WINDOWS\system32\drivers\HWiNFO32.sys (HW iNFO32) .(.REALiX(tm) - HWiNFO x86 Kernel Driver.) - LEGACY_HWINFO32 O64 - Services: CurCS - 6/11/2012 - C:\Arquivos de programas\Java\jre7\bin\jqs.e xe (JavaQuickStarterService) .(.Oracle Corporation - Java(TM) Quick Starter Ser vice.) - LEGACY_JAVAQUICKSTARTERSERVICE O64 - Services: CurCS - 16/12/2012 - C:\Arquivos de programas\Process Hacker 2\k processhacker.sys (KProcessHacker2) .(.wj32 - KProcessHacker.) - LEGACY_KPROCES

SHACKER2 O64 - Services: CurCS - 29/9/2012 - C:\WINDOWS\system32\drivers\mbam.sys (MBAMPr otector) .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBA MPROTECTOR O64 - Services: CurCS - 29/9/2012 - C:\Arquivos de programas\Malwarebytes' AntiMalware\mbamscheduler.exe (MBAMScheduler) .(.Malwarebytes Corporation - Malware bytes Anti-Malware.) - LEGACY_MBAMSCHEDULER O64 - Services: CurCS - 29/9/2012 - C:\Arquivos de programas\Malwarebytes' AntiMalware\mbamservice.exe (MBAMService) .(.Malwarebytes Corporation - Malwarebyte s Anti-Malware.) - LEGACY_MBAMSERVICE O64 - Services: CurCS - 10/5/2010 - C:\Arquivos de programas\MSI\Live Update 5\m sibios32_100507.sys (MSI_MSIBIOS_010507) .(.Your Corporation - Description stri ng for Msibios driver.) - LEGACY_MSI_MSIBIOS_010507 O64 - Services: CurCS - 6/11/2012 - C:\MySQL Server 5.5\my.ini - MySQL55 (MySQL5 5) .(...) - LEGACY_MYSQL55 O64 - Services: CurCS - 13/5/2009 - C:\Arquivos de programas\ICW\bin\cygrunsrv.e xe - Nagwin_Nagios (Nagwin_Nagios) .(...) - LEGACY_NAGWIN_NAGIOS O64 - Services: CurCS - 3/5/2012 - C:\WINDOWS\system32\drivers\npf.sys (npf) .( .CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) - LEGACY_NPF O64 - Services: CurCS - 17/12/2012 - C:\Arquivos de programas\NSClient++\nscp.ex e (nscp) .(.MySolutions Nordic (Michael Medin) - Monitoring Agent.) - LEGACY_NS CP O64 - Services: CurCS - 20/10/2010 - C:\Arquivos de programas\MSI\Live Update 5\ NTIOLib.sys (NTIOLib_1_0_4) .(.MSI - NTIOLib.) - LEGACY_NTIOLIB_1_0_4 O64 - Services: CurCS - 30/8/2012 - C:\WINDOWS\system32\nvsvc32.exe (NVSvc) .(. NVIDIA Corporation - NVIDIA Driver Helper Service, Version 306.2.) - LEGACY_NVSV C O64 - Services: CurCS - 30/8/2012 - C:\Arquivos de programas\NVIDIA Corporation\ NVIDIA Update Core\daemonu.exe (nvUpdatusService) .(.NVIDIA Corporation - NVIDI A Settings Update Manager.) - LEGACY_NVUPDATUSSERVICE O64 - Services: CurCS - 25/1/2011 - C:\Arquivos de programas\OO Software\Defrag\ oodag.exe (OODefragAgent) .(.O&O Software GmbH - O&O Defrag Free Edition Agent (Win32).) - LEGACY_OODEFRAGAGENT O64 - Services: CurCS - 7/12/2011 - C:\Arquivos de programas\PANDORA.TV\PanServi ce\PandoraService.exe (PanService) .(.Pandora.TV - Pandora.TV service file.) LEGACY_PANSERVICE O64 - Services: CurCS - 20/9/2012 - C:\PostgreSQL\9.2\bin\pg_ctl.exe (postgresql -9.2) .(.PostgreSQL Global Development Group - pg_ctl - starts/stops/restarts t he PostgreS.) - LEGACY_POSTGRESQL-9.2 O64 - Services: CurCS - 22/7/2011 - C:\Arquivos de programas\SUPERAntiSpyware\SA SDIFSV.sys (SASDIFSV) .(.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASDIFSV .SYS.) - LEGACY_SASDIFSV O64 - Services: CurCS - 12/7/2011 - C:\Arquivos de programas\SUPERAntiSpyware\SA SKUTIL.sys (SASKUTIL) .(.SUPERAdBlocker.com and SUPERAntiSpyware.com - SASKUTIL .SYS.) - LEGACY_SASKUTIL O64 - Services: CurCS - 19/12/2011 - C:\Arquivos de programas\Ad-Aware Antivirus \SBAMSvc.exe (SBAMSvc) .(.GFI Software - GFI Software Anti Malware Service.) LEGACY_SBAMSVC O64 - Services: CurCS - 29/11/2011 - C:\WINDOWS\system32\drivers\sbaphd.sys (sba phd) .(.GFI Software - GFI ActiveProtection hook driver.) - LEGACY_SBAPHD O64 - Services: CurCS - 29/11/2011 - C:\WINDOWS\system32\drivers\sbapifs.sys (sb apifs) .(.GFI Software - GFI ActiveProtection Filter.) - LEGACY_SBAPIFS O64 - Services: CurCS - 26/10/2011 - C:\WINDOWS\system32\drivers\SBREdrv.sys (SB RE) .(.GFI Software - GFI Anti-Rootkit Driver.) - LEGACY_SBRE O64 - Services: CurCS - 13/4/2008 - C:\WINDOWS\system32\svchost.exe (SENS) .(.M icrosoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_SENS O64 - Services: CurCS - 30/6/2011 - C:\Arquivos de programas\Arquivos comuns\Sea gate\Schedule2\schedul2.exe (SgtSch2Svc) .(.Seagate - Seagate Scheduler 2.) - L EGACY_SGTSCH2SVC O64 - Services: CurCS - 26/11/2010 - C:\WINDOWS\system32\Drivers\SmartDefragDriv

er.sys - SmartDefragDriver (SmartDefragDriver) .(...) - LEGACY_SMARTDEFRAGDRIVE R O64 - Services: CurCS - 17/6/2010 - C:\WINDOWS\system32\DRIVERS\ssmdrv.sys (ssmd rv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - 6/11/2012 - C:\WINDOWS\system32\DRIVERS\timntr.sys (timo unter) .(.Acronis - Acronis Backup Archive Explorer.) - LEGACY_TIMOUNTER O64 - Services: CurCS - 13/4/2008 - C:\WINDOWS\system32\svchost.exe (TrkWks) .( .Microsoft Corporation - Generic Host Process for Win32 Services.) - LEGACY_TRKW KS O64 - Services: CurCS - 6/11/2012 - C:\WINDOWS\system32\DRIVERS\vididr.sys (vidi dr) .(.Acronis - Acronis Virtual Disk Driver.) - LEGACY_VIDIDR ~ Scan Services in 00mn 04s

---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corp oration - DLL comum do Shell do Windows.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <ComFile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corpo ration - Internet Explorer.) -- C:\Arquivos de programas\Internet Explorer\iexpl ore.exe O67 - Shell Spawning: <.js> <Notepad++_file>[HKLM\..\open\Command] (.Don HO don. [email protected] - Notepad++ : a free (GNU) source code editor.) -- C:\Arquivos de prog ramas\Notepad++\notepad++.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corpora tion - Editor do Registro.) -- C:\WINDOWS\regedit.exe O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corp oration - DLL comum do Shell do Windows.) -- C:\WINDOWS\system32\shell32.dll O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <ComFile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. Google Chrome.) -- C:\Arquivos de programas\Google\Chrome\Application\chrome.ex e O67 - Shell Spawning: <.js> <Notepad++_file>[HKCR\..\open\Command] (.Don HO don. [email protected] - Notepad++ : a free (GNU) source code editor.) -- C:\Arquivos de prog ramas\Notepad++\notepad++.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corpora tion - Editor do Registro.) -- C:\WINDOWS\regedit.exe ~ Scan Keys in 00mn 00s

---\\ Start Menu Internet (SMI) (O68) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Comm and] (.Mozilla Corporation - Firefox.) -- C:\Arquivos de programas\Mozilla Firef ox\firefox.exe O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Comm and] (.Google Inc. - Google Chrome.) -- C:\Arquivos de programas\Google\Chrome\A pplication\chrome.exe O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\C ommand] (.Microsoft Corporation - Internet Explorer.) -- C:\Arquivos de programa

s\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <MSN Explorer> <>[HKLM\..\Shell\open\Command] (.Microso ft Corporation - msn.) -- C:\Arquivos de programas\MSN\MSNCoreFiles\MSN6.exe O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\Sho wIconsCommand] (...) -- C:\Arquivos de programas\Mozilla Firefox\uninstall\helpe r.exe (.not file.) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Sho wIconsCommand] (...) -- C:\Arquivos de programas\Google\Chrome\Application\chrom e.exe (.not file.) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Sho wIconsCommand] (...) -- C:\Arquivos de programas\Google\Chrome\Application\chrom e.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ ShowIconsCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ ShowIconsCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\Rei nstallCommand] (...) -- C:\Arquivos de programas\Mozilla Firefox\uninstall\helpe r.exe (.not file.) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Rei nstallCommand] (...) -- C:\Arquivos de programas\Google\Chrome\Application\chrom e.exe (.not file.) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Rei nstallCommand] (...) -- C:\Arquivos de programas\Google\Chrome\Application\chrom e.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ ReinstallCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ ReinstallCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\Hid eIconsCommand] (...) -- C:\Arquivos de programas\Mozilla Firefox\uninstall\helpe r.exe (.not file.) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Hid eIconsCommand] (...) -- C:\Arquivos de programas\Google\Chrome\Application\chrom e.exe (.not file.) O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Hid eIconsCommand] (...) -- C:\Arquivos de programas\Google\Chrome\Application\chrom e.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ HideIconsCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ HideIconsCommand] (...) -- C:\WINDOWS\system32\ie4uinit.exe (.not file.) ~ Scan Keys in 00mn 00s

---\\ Search Browser Infection (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) http://www.bing.com O69 - SBI: SearchScopes [HKCU] {A5C8756E-6652-4F90-922C-A6E391A1C431} [DefaultSc ope] - (Yahoo! Search) - http://br.search.yahoo.com ~ Scan Keys in 00mn 00s

---\\ Search Svchost Services (SSS) (O83) O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Ser vio de instalao do software.) -- C:\WINDOWS\system32\appmgmts.dll [172032] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - W indows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496]

O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Com puter Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - C ryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - Dll do servio do Gerenciador de discos lgicos.) -- C:\WINDOWS\system32\dmserver.dll [23 552] O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Servio do Cliente DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [126976] O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporati on - No comment.) -- C:\WINDOWS\System32\es.dll [253952] O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitching Compatibility) . (.Microsoft Corporation - DLL de servios do Shell do Windows.) - C:\WINDOWS\system32\shsvcs.dll [135168] O83 - Search Svchost Services: HidServ (HidServ) . (...) -- C:\WINDOWS\system32\ hidserv.dll [0] O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corpora tion - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microso ft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [ 132096] O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Geren ciador de conexes de rede.) -- C:\WINDOWS\system32\netman.dll [198144] O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fornecedor de servios do Microsoft Windows Sockets 2.0.) -- C:\WINDOWS\system32\mswsock.dll [247808] O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Ger enciador de armazenamento removvel.) -- C:\WINDOWS\system32\ntmssvc.dll [437248 ] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Rem ote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remot e Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corpora tion - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - M ecanismo do 'Agendador de tarefas'.) -- C:\WINDOWS\system32\schedsvc.dll [1935 36] O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - D LL de servio de logon secundrio.) -- C:\WINDOWS\system32\seclogon.dll [18944] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Ev ent Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corpora tion - Componentes do Microsoft NAT Helper.) -- C:\WINDOWS\system32\ipnathlp.dll [331264] O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation Servio de restaurao do sistema.) -- C:\WINDOWS\system32\srsvc.dll [171520] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Ser vidor de telefonia do Microsoft(R) Windows(TM).) -- C:\WINDOWS\system32\tapisrv. dll [249856] O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distr ibuted Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Win dows Time Service.) -- C:\WINDOWS\system32\w32time.dll [176128] O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Servio de configurao zero sem fio.) -- C:\WINDOWS\system32\wzcsvc.dll [483840]

O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API de base do Windows 32 avanada.) -- C:\WINDOWS\system32\advapi32.dll [683520] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI .) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [145408] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporati on - Servio do servidor de terminal.) -- C:\WINDOWS\system32\termsrv.dll [29696 0] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - W indows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Servio de transferncia inteligente de plano de fundo.) -- C:\WINDOWS\system32\qmgr.dll [4 09088] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de servios do Shell do Windows.) -- C:\WINDOWS\system32\shsvcs .dll [135168] O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Mic rosoft PCHealth Service Holder.) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc. dll [38400] O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Net work Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windo ws Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - M icrosoft Media Device Service Provider.) -- C:\WINDOWS\system32\MsPMSNSv.dll [ 27136] O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - T empo de Execuo de Servio de Agente de Quarentena.) -- C:\WINDOWS\system32\qagentrt. dll [292864] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Servio de Gerenciamento de Chaves.) -- C:\WINDOWS\system32\kmsvc.dll [61440] ~ Scan Services in 00mn 01s

---\\ Additionnal Scan (O88) Database Version : 10194 - (27/12/2012) Cls trouves (Keys found) : 4 Valeurs trouves (Values found) : 0 Dossiers trouvs (Folders found) : 3 Fichiers trouvs (Files found) : 0 [HKLM\Software\Classes\BHO.IFlashGetNetscapeEx] =>Adware.BDSearch [HKLM\Software\Classes\BHO.IFlashGetNetscapeEx.1] =>Adware.BDSearch [HKCU\Software\APN PIP] =>Toolbar.Agent [HKLM\Software\PIP] =>Toolbar.Agent C:\Arquivos de programas\adawaretb =>Toolbar.Agent C:\Documents and Settings\Paulo\Dados de aplicativos\adawaretb =>Toolbar.Agent C:\Documents and Settings\Paulo\Configuraes locais\Dados de aplicativos\Conduit =>Toolbar.Conduit ~ Scan Additionnel in 00mn 53s

---\\ Product Upgrade Codes (O90) O90 - PUC: "00002109020061400000000000F01FEC" . (.Pacote de Compatibilidade para o sistema Office 2007.) -- C:\WINDOWS\Installer\{90120000-0020-0416-0000-000000 0FF1CE}\O12ConvIcon.exe O90 - PUC: "183E5ABA64CEC524685CC51DB5FB4BFB" . (.Garmin USB Drivers.) -- C:\WIN DOWS\Installer\{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}\GarminSetup.ico O90 - PUC: "2235585034EBEF145B383DEAC023D685" . (.Microsoft Silverlight 4 SDK.)

-- C:\WINDOWS\Installer\{05855322-BE43-41FE-B583-D3AE0C326D58}\ARPICON O90 - PUC: "2A3883B342BA1C64994A0E762697894D" . (.Garmin City Navigator Brazil N T 2013.30 Update.) -- C:\WINDOWS\Installer\{3B3883A2-AB24-46C1-99A4-E067627998D4 }\GarminSetup.ico O90 - PUC: "36282ECA4A675FB46B4FB87D91959596" . (.Microsoft SQL Server Database Publishing Wizard 1.4.) -- c:\WINDOWS\Installer\{ACE28263-76A4-4BF5-B6F4-8BD7195 95969}\ARPIco O90 - PUC: "40DB144D845EE8F4794AB16631B5AA8A" . (.Microsoft SQL Server 2008 Setu p Support Files .) -- C:\WINDOWS\Installer\{D441BD04-E548-4F8E-97A4-1B66135BAAA8 }\ARPIco O90 - PUC: "410A2BF80B0A8D24E881A9CFA6E68241" . (.Seagate DiscWizard.) -- C:\WIN DOWS\Installer\{8FB2A014-A0B0-42D8-8E18-9AFC6A6E2814}\product.ico O90 - PUC: "44DC7DE533A163B4AB90B055EF28FA59" . (.Garmin MapInstall.) -- C:\WIND OWS\Installer\{5ED7CD44-1A33-4B36-BA09-0B55FE82AF95}\GarminSetup.ico O90 - PUC: "5716CFF85C2D7AF4198E2E9A34A1C5AD" . (.WCF RIA Services V1.0 for Visu al Studio 2010.) -- C:\WINDOWS\Installer\{8FFC6175-D2C5-4FA7-91E8-E2A9431A5CDA}\ icon.ico O90 - PUC: "59924D0608ADD414989CECCF66CDE831" . (.IObit Apps Toolbar v6.6.) -- C :\WINDOWS\Installer\{60D42995-DA80-414D-89C9-CEFC66DC8E13}\ARPPRODUCTICON.exe O90 - PUC: "60A26258C8D21CB46BDEA507D590FCCF" . (.Apache HTTP Server 2.2.22.) -C:\WINDOWS\Installer\{85262A06-2D8C-4BC1-B6ED-5A705D09CFFC}\ARPPRODUCTICON.exe O90 - PUC: "63BFC92E070F2164D85B078361B12649" . (.O&O Defrag Free Edition.) -- C :\WINDOWS\Installer\{E29CFB36-F070-4612-8DB5-7038161B6294}\ARPPRODUCTICON.exe O90 - PUC: "68AB67CA7DA76401B744BA0000000010" . (.Adobe Reader XI - Portugus.) -C:\WINDOWS\Installer\{AC76BA86-7AD7-1046-7B44-AB0000000001}\SC_Reader.ico O90 - PUC: "75E357DF44F16E149B260ED167762660" . (.MySQL Connector C++ 1.1.0.) -C:\WINDOWS\Installer\{FD753E57-1F44-41E6-B962-E01D76676206}\MySQLConnector.ico O90 - PUC: "78FE3C3280DA67F489D2A11E7384F580" . (.MySQL Workbench 5.2 CE.) -- C: \WINDOWS\Installer\{23C3EF87-AD08-4F76-982D-1AE137485F08}\WBIcon.exe O90 - PUC: "868D758B0B8FEE34CBB29D5EDE122F73" . (.Microsoft SQL Server VSS Write r.) -- C:\WINDOWS\Installer\{B857D868-F8B0-43EE-BC2B-D9E5ED21F237}\ARPIco O90 - PUC: "879BB7466782B784B9E0DF7BF3E04A2A" . (.Garmin Communicator Plugin.) - C:\WINDOWS\Installer\{647BB978-2876-487B-9B0E-FDB73F0EA4A2}\GarminSetup.ico O90 - PUC: "8A1F6DF90555FA64589072D10F7E865B" . (.Dual-Core Optimizer.) -- C:\WI NDOWS\Installer\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}\ARPPRODUCTICON.exe O90 - PUC: "8EA3F2A2A6422524BB62B1BE54260747" . (.Microsoft SQL Server System CL R Types.) -- c:\WINDOWS\Installer\{2A2F3AE8-246A-4252-BB26-1BEB45627074}\ARPIco O90 - PUC: "969D73F00621E9143B80FED792BAED02" . (.Web Deployment Tool.) -- c:\WI NDOWS\Installer\{0F37D969-1260-419E-B308-EF7D29ABDE20}\MSDeployIcon.exe O90 - PUC: "98E9EA339C74D0A4E9D9DB6D69A68340" . (.Microsoft SQL Server 2008 RsFx Driver.) -- C:\WINDOWS\Installer\{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}\ARPIco O90 - PUC: "AE50B7886CA374A4BBFEABEA53D1E1FF" . (.AMD OverDrive.) -- C:\WINDOWS\ Installer\{887B05EA-3AC6-4A47-BBEF-BAAE351D1EFF}\ARPPRODUCTICON.exe O90 - PUC: "BA7C1865D92E9EE40B0F08A982CECECF" . (.MySQL Notifier 1.0.3.) -- C:\W INDOWS\Installer\{5681C7AB-E29D-4EE9-B0F0-809A28ECECFC}\Notifier.ico O90 - PUC: "C10F569CAE677DB479E36432A63E217D" . (.Sql Server Customer Experience Improvement Program.) -- C:\WINDOWS\Installer\{C965F01C-76EA-4BD7-973E-46236AE3 12D7}\ARPIco O90 - PUC: "C9D869E47A1251946B897FEA9B3145D1" . (.Microsoft SQL Server 2008 R2 M anagement Objects.) -- c:\WINDOWS\Installer\{4E968D9C-21A7-4915-B698-F7AEB913541 D}\ARPIco O90 - PUC: "CDE47AC53CFC0AF4EA7D4151AC912F05" . (.Garmin POI Loader.) -- C:\WIND OWS\Installer\{5CA74EDC-CFC3-4FA0-AED7-1415CA19F250}\GarminSetup.ico O90 - PUC: "D13A07B0490F63B42AE81126BAB1BAFD" . (.SlimCleaner.) -- C:\WINDOWS\In staller\{0B70A31D-F094-4B36-A28E-1162AB1BABDF}\Icon.exe O90 - PUC: "D5237C065AAE08646BCF42228B74A65F" . (.MoreMotion Web Express 3.3.) - C:\WINDOWS\Installer\{60C7325D-EAA5-4680-B6FC-2422B8476AF5}\ARPPRODUCTICON.exe O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" . (.Microsoft Silverlight.) -- C:\ WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon O90 - PUC: "D88D27DB201FE934EA75B228BB733C7A" . (.NSClient++ (Win32).) -- C:\WIN

DOWS\Installer\{BD72D88D-F102-439E-AE57-2B82BB37C3A7}\nscp.exe O90 - PUC: "D89021029EEE9674D83D0B835080454D" . (.Microsoft Silverlight 3 SDK.) -- c:\WINDOWS\Installer\{2012098D-EEE9-4769-8DD3-B038050854D4}\ARPICON O90 - PUC: "DDC337960BA27B4479E974358D011B30" . (.MySQL Connector/ODBC 5.1.) -C:\WINDOWS\Installer\{69733CDD-2AB0-44B7-979E-4753D810B103}\MySQLConnector.ico O90 - PUC: "E754886CDF30149429B32AF7D4247ADD" . (.Microsoft SQL Server 2008 Brow ser.) -- C:\WINDOWS\Installer\{C688457E-03FD-4941-923B-A27F4D42A7DD}\ARPIco O90 - PUC: "E85CE1EACA2B95944A2C3C28202A2593" . (.Garmin WebUpdater.) -- C:\WIND OWS\Installer\{AE1EC58E-B2AC-4959-A4C2-C38202A25239}\GarminSetup.ico O90 - PUC: "EA5B44F46A28A8A43A3E2ED48479823E" . (.Microsoft SQL Server 2008 Nati ve Client.) -- C:\WINDOWS\Installer\{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}\ARPIc o O90 - PUC: "ED829E81ABBABEC49A4E0275960BF38E" . (.Garmin BaseCamp.) -- C:\WINDOW S\Installer\{18E928DE-ABBA-4CEB-A9E4-205769B03FE8}\GarminSetup.ico O90 - PUC: "F1D53DFF8C7FEA74FAE35E960F52DCD7" . (.MySQL Server 5.5.) -- C:\WINDO WS\Installer\{FFD35D1F-F7C8-47AE-AF3E-E569F025CD7D}\icon.ico O90 - PUC: "f4a0b4a60d85c034ebccaa0537c37d16" . (.Ad-Aware Antivirus.) -- C:\WIN DOWS\Installer\{6a4b0a4f-58d0-430c-becc-aa50733cd761}\ARPPRODUCTICON.exe ~ Scan Files in 00mn 00s

---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Disabled 11/7/2012 116608 | (!SASCORE) . (.SUPERAntiSpyware.com.) - C:\A rquivos de programas\SUPERAntiSpyware\SASCORE.exe SS - | Auto 20/9/2012 1236368 | (Ad-Aware Service) . (.Lavasoft Limited.) - C:\ Arquivos de programas\Ad-Aware Antivirus\AdAwareService.exe SS - | Demand 12/12/2012 250808 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.ex e SR - | Demand 2/7/2012 86224 | (AntiVirSchedulerService) . (.Avira Operations G mbH & Co. KG.) - C:\Arquivos de programas\Avira\AntiVir Desktop\sched.exe SR - | Auto 2/7/2012 110032 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Arquivos de programas\Avira\AntiVir Desktop\avguard.exe SR - | Auto 136648 | (AODService) . (...) - C:\Arquivos de programas\AMD\OverD rive\AODAssist.exe SR - | Auto 28/1/2012 20549 | (Apache2.2) . (.Apache Software Foundation.) - C: \Apache\bin\httpd.exe SS - | Demand 13/4/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Softwar e.) - C:\WINDOWS\system32\dmadmin.exe SR - | Auto 158208 | (FBExecService) . (...) - c:\FrontBase\bin\FBexec.exe SS - | Auto 11/11/2012 116648 | (gupdate) . (.Google Inc..) - C:\Arquivos de pr ogramas\Google\Update\GoogleUpdate.exe SS - | Demand 11/11/2012 116648 | (gupdatem) . (.Google Inc..) - C:\Arquivos de programas\Google\Update\GoogleUpdate.exe SS - | Demand 6/11/2012 161768 | (JavaQuickStarterService) . (.Oracle Corporati on.) - C:\Arquivos de programas\Java\jre7\bin\jqs.exe SR - | Auto 29/9/2012 399432 | (MBAMScheduler) . (.Malwarebytes Corporation.) C:\Arquivos de programas\Malwarebytes' Anti-Malware\mbamscheduler.exe SR - | Auto 29/9/2012 676936 | (MBAMService) . (.Malwarebytes Corporation.) - C :\Arquivos de programas\Malwarebytes' Anti-Malware\mbamservice.exe SS - | Demand 5/12/2012 115168 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Arquivos de programas\Mozilla Maintenance Service\maintenanceservice.exe SR - | Auto 9470 | (MySQL55) . (...) - C:\MySQL Server 5.5\my.ini SS - | Demand 68096 | (Nagwin_Nagios) . (...) - C:\Arquivos de programas\ICW\b in\cygrunsrv.exe SS - | Demand 68096 | (Nagwin_Nagiosfcgi) . (...) - C:\Arquivos de programas\I CW\bin\cygrunsrv.exe SS - | Demand 68096 | (Nagwin_Nginx) . (...) - C:\Arquivos de programas\ICW\bi n\cygrunsrv.exe

SS - | Demand 68096 | (Nagwin_Phpfcgi) . (...) - C:\Arquivos de programas\ICW\ bin\cygrunsrv.exe SR - | Auto 18/12/2012 2355200 | (nscp) . (.MySolutions Nordic (Michael Medin). ) - C:\Arquivos de programas\NSClient++\nscp.exe SS - | Demand 30/8/2012 164200 | (NVSvc) . (.NVIDIA Corporation.) - C:\WINDOWS\ system32\nvsvc32.exe SS - | Demand 30/8/2012 1258856 | (nvUpdatusService) . (.NVIDIA Corporation.) C:\Arquivos de programas\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe SS - | Demand 25/1/2011 2336072 | (OODefragAgent) . (.O&O Software GmbH.) - C:\ Arquivos de programas\OO Software\Defrag\oodag.exe SS - | Disabled 7/12/2011 577752 | (PanService) . (.Pandora.TV.) - C:\Arquivos de programas\PANDORA.TV\PanService\PandoraService.exe SR - | Auto 20/9/2012 79872 | (postgresql-9.2) . (.PostgreSQL Global Developmen t Group.) - C:\PostgreSQL\9.2\bin\pg_ctl.exe SR - | Auto 19/12/2011 3289032 | (SBAMSvc) . (.GFI Software.) - C:\Arquivos de programas\Ad-Aware Antivirus\SBAMSvc.exe SR - | Auto 30/6/2011 845808 | (SgtSch2Svc) . (.Seagate.) - C:\Arquivos de prog ramas\Arquivos comuns\Seagate\Schedule2\schedul2.exe ~ Scan Services in 00mn 02s

End of the scan (1842 lines in 09mn 14s)(0)