Virus?!

Anônima
2014-03-01T22:37:52+00:00

Esta tarde ao ligar o computador notei que este estava muito lento e decidi ver os processos no gestor de tarefas.

Notei em varios processos que nao fazem parte (ou pelo menos eu penso que nao) das funçoes pincipais do computador.

O nome destes programas sao:

-Adlock (localizado na pasta Appdata\Roaming)

-IntelDev (localizado na pasta Appdata\Local\Temp)

-2026459690(parece algo conectado com o inteldev, localiza-se na mesma pasta)

Todos eles sao executaveis(exe), notei que o Adlock tem como descriçao 'notepad' e abre automaticamente o cmd e conhost ambos exe.

Eles estao a "consumir" muito Cpu principalmente o adlock, mas o computador esta estranhamente estavel.

A ajuda é agradecida.

Windows para casa | Versões anteriores do Windows | Segurança e privacidade

Pergunta bloqueada. Essa pergunta foi migrada da Comunidade de Suporte da Microsoft. É possível votar se é útil, mas não é possível adicionar comentários ou respostas ou seguir a pergunta.

0 comentários Sem comentários

37 respostas

Classificar por: Mais útil
  1. Anônima
    2014-03-05T03:57:19+00:00

    Copie todo o texto em negrito que te passei.

    Abra o Bloco de notas e cole o texto copiado dentro dele.  Salve-o com o nome de fixlist no mesmo lugar onde você deixou o FRST que é este abaixo:

    C:\Users\Nanda\Desktop\Downloads

    Execute o FRST. Clique no botão Fix.

    Aguarde e ao final, o log Fixlog.txt será salvo no seu desktop.

    Selecione, copie e cole o conteúdo deste log em sua próxima resposta.

    Esta resposta foi útil?

    0 comentários Sem comentários
  2. Anônima
    2014-03-04T22:25:37+00:00

    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 02

    Ran by Nanda (administrator) on NANDA-PC on 04-03-2014 22:16:27

    Running from C:\Users\Nanda\Desktop\Downloads

    Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Portuguese Standard

    Internet Explorer Version 11

    Boot Mode: Normal

    The only official download link for FRST:

    Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

    Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

    Download link from any site other than Bleeping Computer is unpermitted or outdated.

    See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

    (AMD) C:\Windows\system32\atiesrxx.exe

    (AMD) C:\Windows\system32\atieclxx.exe

    (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

    () C:\Windows\system32\PnkBstrA.exe

    (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

    (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe

    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    (Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe

    (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe

    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    (Oracle Corporation) C:\Program Files\Java\jre7\bin\javaw.exe

    (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

    (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

    (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    () C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe

    (Ballistics Networking Pty Ltd.) C:\Users\Nanda\AppData\Local\Temp\1505850852.exe

    (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\Integrator.exe

    (Microsoft Corporation) C:\Windows\system32\taskmgr.exe

    ==================== Registry (Whitelisted) ==================

    HKLM...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)

    HKLM...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.)

    HKLM...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()

    HKLM...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1821576 2011-08-01] (Microsoft Corporation)

    HKLM...\Policies\Explorer: [HideSCAHealth] 1

    HKU.DEFAULT...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2012-01-11] (Microsoft Corporation)

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [Steam] - C:\Program Files\Steam\steam.exe [1823424 2014-03-04] (Valve Corporation)

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [Microsoft Interface Controller] - C:\GPU_UPDATE\MSController.exe [8704 2013-10-13] ()

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [jawaw] - "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Nanda\AppData\Roaming\jawaw.jar"

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\RunOnce: [jawawv] - C:\Users\Nanda\AppData\Local\Temp\1505850852.exe [386048 2014-03-04] (Ballistics Networking Pty Ltd.)

    IFEO\cfosspeed.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

    IFEO\hamachi-2-ui.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

    Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1636746858.exe ()

    Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2026459690.exe ()

    ==================== Internet (Whitelisted) ====================

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pt.msn.com/?ocid=iehp

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4830BF7449A8CC01

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt

    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    URLSearchHook: HKLM - (No Name) - {e7cb019e-bf3b-4c48-9673-48c323b18e31} -  No File

    URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

    SearchScopes: HKLM - DefaultScope value is missing.

    SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}

    SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

    BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

    BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

    BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

    Tcpip..\Interfaces{DE0EF1BE-2845-405A-A52A-BF53F04EA5B1}: [NameServer]192.168.1.254,192.168.1.254

    FireFox:

    ========

    FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

    FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

    FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

    FF Plugin: @microsoft.com/GENUINE - disabled No File

    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

    FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

    FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

    FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

    FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

    FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

    FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )

    FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

    FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

    Chrome: 

    =======

    CHR HomePage: hxxp://home.sweetim.com/?crg=3.26010003&st=12&barid={5EBD3937-061E-4EFA-B3D9-57140C357286}

    CHR Extension: (Google Docs) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-02]

    CHR Extension: (Google Drive) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-02]

    CHR Extension: (YouTube) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-13]

    CHR Extension: (Pesquisa do Google) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-02]

    CHR Extension: (Desprotetor de Links) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2014-03-04]

    CHR Extension: (9GAG Mini) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmkmihphgjhmeabggdcokmkjhbnmdml [2014-03-04]

    CHR Extension: (Grepolis) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkgkognjknhcgbgbeijjondlikfkgnog [2014-03-04]

    CHR Extension: (Google Wallet) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]

    CHR Extension: (Gmail) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-02]

    ========================== Services (Whitelisted) =================

    S4 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [380328 2012-07-02] (cFos Software GmbH)

    S4 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)

    R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

    S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)

    S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)

    R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-10-12] ()

    R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1699680 2012-09-17] (TuneUp Software)

    ==================== Drivers (Whitelisted) ====================

    R1 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed6.sys [975272 2012-07-02] (cFos Software GmbH)

    R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-11-03] (Disc Soft Ltd)

    S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)

    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)

    R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324096 2013-11-03] (Duplex Secure Ltd.)

    R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-08-29] (TuneUp Software)

    U3 agmng3wt; C:\Windows\system32\Drivers\agmng3wt.sys [0 ] (Advanced Micro Devices)

    S3 EagleXNt; ??\C:\Windows\system32\drivers\EagleXNt.sys [X]

    U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()

    S3 WinRing0_1_2_0; ??\C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [X]

    S3 XDva401; ??\C:\Windows\system32\XDva401.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    ==================== One Month Created Files and Folders ========

    2014-03-04 22:14 - 2014-03-04 22:16 - 00000000 ____D () C:\FRST

    2014-03-04 10:48 - 2014-03-04 21:53 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

    2014-03-04 10:48 - 2014-03-04 10:53 - 00000990 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

    2014-03-04 10:21 - 2014-03-04 14:01 - 02435072 _____ (Microsoft Corporation) C:\Users\Nanda\AppData\Roaming\Adlock.exe

    2014-03-02 21:51 - 2014-03-02 21:51 - 00000000 ____D () C:\Windows\ERUNT

    2014-03-02 19:47 - 2014-03-02 19:16 - 00024064 _____ () C:\Windows\zoek-delete.exe

    2014-03-02 19:21 - 2014-03-02 19:49 - 00030470 _____ () C:\zoek-results.log

    2014-03-02 19:16 - 2014-03-02 19:43 - 00000000 ____D () C:\zoek_backup

    2014-03-02 18:24 - 2014-03-02 18:34 - 00000000 ____D () C:\AdwCleaner

    2014-03-02 14:51 - 2014-03-03 20:28 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\ZHP

    2014-03-02 14:51 - 2014-03-03 17:44 - 00000000 ____D () C:\Program Files\ZHPDiag

    2014-02-25 18:41 - 2014-01-09 02:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

    2014-02-23 13:41 - 2014-02-23 13:42 - 404484926 _____ () C:\Users\Nanda\Documents\Nightcore - Rock Mix #4.mp4

    2014-02-23 13:30 - 2014-02-23 13:31 - 253753316 _____ () C:\Users\Nanda\Documents~Nightcore~ Rock Compilation #5 SPECIAL EDITION (HD).mp4

    2014-02-23 13:14 - 2014-02-23 13:14 - 26250033 _____ () C:\Users\Nanda\Documents\Nightcore- End of all Hope.mp4

    2014-02-23 13:12 - 2014-02-23 13:12 - 23919946 _____ () C:\Users\Nanda\Documents\Nightcore - In the Middle of the Night.mp4

    2014-02-23 13:08 - 2014-02-23 13:08 - 28941711 _____ () C:\Users\Nanda\Documents\Nightcore- Amaranth.mp4

    2014-02-23 13:01 - 2014-02-23 13:01 - 20532539 _____ () C:\Users\Nanda\Documents\Nightcore- Whispers in the Dark.mp4

    2014-02-20 19:34 - 2014-02-20 19:34 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint

    2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logitech

    2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logishrd

    2014-02-19 19:20 - 2013-10-02 00:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

    2014-02-19 19:20 - 2013-10-02 00:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

    2014-02-19 19:20 - 2013-10-02 00:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

    2014-02-19 19:20 - 2013-10-02 00:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

    2014-02-19 19:20 - 2013-10-02 00:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

    2014-02-19 19:20 - 2013-10-01 23:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

    2014-02-19 19:20 - 2013-10-01 23:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

    2014-02-19 19:20 - 2013-10-01 23:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

    2014-02-19 19:20 - 2013-10-01 23:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

    2014-02-19 19:20 - 2013-10-01 22:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

    2014-02-19 19:20 - 2013-10-01 22:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

    2014-02-19 19:17 - 2013-09-25 01:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

    2014-02-19 17:18 - 2014-02-21 09:39 - 00110056 _____ () C:\Users\Nanda\AppData\Local\GDIPFONTCACHEV1.DAT

    2014-02-19 17:16 - 2014-03-04 10:19 - 00005836 _____ () C:\Windows\PFRO.log

    2014-02-19 17:16 - 2014-03-04 10:19 - 00002310 _____ () C:\Windows\setupact.log

    2014-02-19 17:16 - 2014-02-21 09:39 - 00413680 _____ () C:\Windows\system32\FNTCACHE.DAT

    2014-02-19 17:16 - 2014-02-19 17:16 - 00000000 _____ () C:\Windows\setuperr.log

    2014-02-16 02:30 - 2014-02-16 02:30 - 31885137 _____ () C:\Users\Nanda\Documents\_Onward_ - Pantheon's Theme.mp4

    2014-02-16 02:30 - 2014-02-16 02:30 - 18256547 _____ () C:\Users\Nanda\Documents\LoL - Music for playing as ... Annie.mp4

    2014-02-12 23:27 - 2014-02-06 10:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

    2014-02-12 23:27 - 2014-02-06 10:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

    2014-02-12 23:27 - 2014-02-06 10:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

    2014-02-12 23:27 - 2014-02-06 10:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

    2014-02-12 23:27 - 2014-02-06 09:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

    2014-02-12 23:27 - 2014-02-06 09:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

    2014-02-12 23:27 - 2014-02-06 09:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

    2014-02-12 23:27 - 2014-02-06 09:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

    2014-02-12 23:27 - 2014-02-06 09:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

    2014-02-12 23:27 - 2014-02-06 09:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

    2014-02-12 23:27 - 2014-02-06 09:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

    2014-02-12 23:27 - 2014-02-06 09:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

    2014-02-12 23:27 - 2014-02-06 09:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

    2014-02-12 23:27 - 2014-02-06 09:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

    2014-02-12 23:27 - 2014-02-06 09:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

    2014-02-12 23:27 - 2014-02-06 09:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

    2014-02-12 23:27 - 2014-02-06 08:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

    2014-02-12 23:27 - 2014-02-06 08:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

    2014-02-12 23:27 - 2014-02-06 08:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

    2014-02-12 23:26 - 2014-02-06 10:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

    2014-02-12 23:26 - 2014-02-06 09:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

    2014-02-12 23:24 - 2013-12-21 08:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

    2014-02-12 21:18 - 2013-12-31 23:05 - 00420008 _____ () C:\Windows\system32\locale.nls

    2014-02-12 21:18 - 2013-12-06 02:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

    2014-02-12 21:18 - 2013-12-06 02:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

    2014-02-12 21:17 - 2013-12-24 23:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

    2014-02-12 21:17 - 2013-12-04 02:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

    2014-02-12 21:17 - 2013-12-04 02:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

    2014-02-12 21:17 - 2013-12-04 02:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

    2014-02-12 21:17 - 2013-12-04 02:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

    2014-02-12 21:17 - 2013-12-04 02:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

    2014-02-12 21:17 - 2013-12-04 01:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

    2014-02-12 21:17 - 2013-12-04 01:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

    2014-02-12 21:17 - 2013-12-04 01:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

    2014-02-12 21:17 - 2013-12-04 01:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

    2014-02-12 21:17 - 2013-11-26 08:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

    2014-02-09 18:15 - 2014-02-09 20:45 - 00000000 ____D () C:\Program Files\Battle for Wesnoth 1.10.7

    2014-02-07 19:08 - 2014-02-07 19:08 - 00000000 ____D () C:\Users\Nanda\Desktop\PokeMMO-Client

    2014-02-03 18:15 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

    2014-02-03 18:15 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

    2014-02-03 18:15 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

    2014-02-03 18:15 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe

    2014-02-03 18:14 - 2014-02-03 18:15 - 00005163 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log

    ==================== One Month Modified Files and Folders =======

    2014-03-04 22:16 - 2014-03-04 22:14 - 00000000 ____D () C:\FRST

    2014-03-04 21:53 - 2014-03-04 10:48 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

    2014-03-04 20:50 - 2014-02-01 19:41 - 00000000 __SHD () C:\Users\Nanda\AppData\Roaming\f4061

    2014-03-04 20:14 - 2012-06-08 22:08 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Skype

    2014-03-04 20:10 - 2013-11-06 18:51 - 00000000 ____D () C:\Users\Nanda\AppData\Local\PMB Files

    2014-03-04 20:10 - 2013-11-06 18:51 - 00000000 ____D () C:\ProgramData\PMB Files

    2014-03-04 19:18 - 2011-11-21 11:06 - 01822761 _____ () C:\Windows\WindowsUpdate.log

    2014-03-04 14:02 - 2011-12-08 17:49 - 00000000 ____D () C:\Program Files\Steam

    2014-03-04 14:01 - 2014-03-04 10:21 - 02435072 _____ (Microsoft Corporation) C:\Users\Nanda\AppData\Roaming\Adlock.exe

    2014-03-04 10:53 - 2014-03-04 10:48 - 00000990 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

    2014-03-04 10:49 - 2012-04-01 16:49 - 00000000 ____D () C:\Program Files\Google

    2014-03-04 10:47 - 2011-11-21 20:22 - 00000000 ____D () C:\Users\Nanda\AppData\Local\Deployment

    2014-03-04 10:46 - 2011-11-21 20:23 - 00000000 ____D () C:\Users\Nanda\AppData\Local\Google

    2014-03-04 10:35 - 2013-10-08 18:54 - 00000000 ____D () C:\Users\Nanda\Desktop\Cracks

    2014-03-04 10:32 - 2009-07-14 04:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

    2014-03-04 10:32 - 2009-07-14 04:34 - 00025424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

    2014-03-04 10:24 - 2011-12-08 17:49 - 00000000 ____D () C:\Program Files\Common Files\Steam

    2014-03-04 10:19 - 2014-02-19 17:16 - 00005836 _____ () C:\Windows\PFRO.log

    2014-03-04 10:19 - 2014-02-19 17:16 - 00002310 _____ () C:\Windows\setupact.log

    2014-03-04 10:19 - 2009-07-14 04:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

    2014-03-03 20:28 - 2014-03-02 14:51 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\ZHP

    2014-03-03 20:28 - 2012-05-05 23:26 - 00000000 ____D () C:\Program Files\YTD YouTube Downloader & Converter

    2014-03-03 17:44 - 2014-03-02 14:51 - 00000000 ____D () C:\Program Files\ZHPDiag

    2014-03-03 17:15 - 2013-05-25 16:07 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\PC-Gizmos

    2014-03-02 21:51 - 2014-03-02 21:51 - 00000000 ____D () C:\Windows\ERUNT

    2014-03-02 19:49 - 2014-03-02 19:21 - 00030470 _____ () C:\zoek-results.log

    2014-03-02 19:43 - 2014-03-02 19:16 - 00000000 ____D () C:\zoek_backup

    2014-03-02 19:41 - 2011-11-21 12:39 - 00000000 ____D () C:\ProgramData\Adobe

    2014-03-02 19:16 - 2014-03-02 19:47 - 00024064 _____ () C:\Windows\zoek-delete.exe

    2014-03-02 18:34 - 2014-03-02 18:24 - 00000000 ____D () C:\AdwCleaner

    2014-03-02 18:34 - 2012-09-25 19:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox

    2014-03-02 18:34 - 2011-11-21 11:37 - 00000000 ____D () C:\Users\Nanda

    2014-03-02 04:12 - 2012-09-27 19:14 - 00003500 _____ () C:\Users\Nanda\Desktop\vba1.ini

    2014-02-26 23:21 - 2011-11-21 11:44 - 01686276 _____ () C:\Windows\system32\PerfStringBackup.INI

    2014-02-26 23:21 - 2009-07-14 08:31 - 00731052 _____ () C:\Windows\system32\prfh0816.dat

    2014-02-26 23:21 - 2009-07-14 08:31 - 00158542 _____ () C:\Windows\system32\prfc0816.dat

    2014-02-26 15:43 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\rescache

    2014-02-25 23:07 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\system32\pt-PT

    2014-02-25 19:07 - 2012-07-08 22:54 - 00000000 ____D () C:\Users\Nanda\Desktop\SLOT

    2014-02-23 18:51 - 2013-06-25 22:42 - 00000000 ____D () C:\Users\Nanda\Desktop\games quiet fluffy

    2014-02-23 18:35 - 2014-01-19 03:39 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming.minecraft

    2014-02-23 14:21 - 2013-06-03 22:46 - 00723456 ___SH () C:\Users\Nanda\Documents\Thumbs.db

    2014-02-23 13:42 - 2014-02-23 13:41 - 404484926 _____ () C:\Users\Nanda\Documents\Nightcore - Rock Mix #4.mp4

    2014-02-23 13:31 - 2014-02-23 13:30 - 253753316 _____ () C:\Users\Nanda\Documents~Nightcore~ Rock Compilation #5 SPECIAL EDITION (HD).mp4

    2014-02-23 13:14 - 2014-02-23 13:14 - 26250033 _____ () C:\Users\Nanda\Documents\Nightcore- End of all Hope.mp4

    2014-02-23 13:12 - 2014-02-23 13:12 - 23919946 _____ () C:\Users\Nanda\Documents\Nightcore - In the Middle of the Night.mp4

    2014-02-23 13:08 - 2014-02-23 13:08 - 28941711 _____ () C:\Users\Nanda\Documents\Nightcore- Amaranth.mp4

    2014-02-23 13:01 - 2014-02-23 13:01 - 20532539 _____ () C:\Users\Nanda\Documents\Nightcore- Whispers in the Dark.mp4

    2014-02-21 09:39 - 2014-02-19 17:18 - 00110056 _____ () C:\Users\Nanda\AppData\Local\GDIPFONTCACHEV1.DAT

    2014-02-21 09:39 - 2014-02-19 17:16 - 00413680 _____ () C:\Windows\system32\FNTCACHE.DAT

    2014-02-20 19:34 - 2014-02-20 19:34 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint

    2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logitech

    2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logishrd

    2014-02-20 19:02 - 2012-09-28 19:03 - 00003002 _____ () C:\Users\Nanda\Desktop\vba2.ini

    2014-02-19 17:16 - 2014-02-19 17:16 - 00000000 _____ () C:\Windows\setuperr.log

    2014-02-18 18:46 - 2013-11-23 14:23 - 00000000 ____D () C:\Users\Nanda\Desktop\gyyfc

    2014-02-17 18:50 - 2013-07-19 18:10 - 00000000 ____D () C:\Windows\system32\MRT

    2014-02-17 18:42 - 2011-11-21 13:20 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

    2014-02-16 02:30 - 2014-02-16 02:30 - 31885137 _____ () C:\Users\Nanda\Documents\_Onward_ - Pantheon's Theme.mp4

    2014-02-16 02:30 - 2014-02-16 02:30 - 18256547 _____ () C:\Users\Nanda\Documents\LoL - Music for playing as ... Annie.mp4

    2014-02-13 19:44 - 2009-07-14 02:37 - 00000000 ____D () C:\Windows\Microsoft.NET

    2014-02-09 20:45 - 2014-02-09 18:15 - 00000000 ____D () C:\Program Files\Battle for Wesnoth 1.10.7

    2014-02-07 19:08 - 2014-02-07 19:08 - 00000000 ____D () C:\Users\Nanda\Desktop\PokeMMO-Client

    2014-02-06 10:38 - 2014-02-12 23:26 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

    2014-02-06 10:20 - 2014-02-12 23:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

    2014-02-06 10:19 - 2014-02-12 23:27 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

    2014-02-06 10:01 - 2014-02-12 23:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

    2014-02-06 10:00 - 2014-02-12 23:27 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

    2014-02-06 09:57 - 2014-02-12 23:27 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

    2014-02-06 09:52 - 2014-02-12 23:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

    2014-02-06 09:52 - 2014-02-12 23:27 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

    2014-02-06 09:49 - 2014-02-12 23:27 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

    2014-02-06 09:47 - 2014-02-12 23:27 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

    2014-02-06 09:47 - 2014-02-12 23:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

    2014-02-06 09:46 - 2014-02-12 23:27 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

    2014-02-06 09:34 - 2014-02-12 23:27 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

    2014-02-06 09:25 - 2014-02-12 23:27 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

    2014-02-06 09:25 - 2014-02-12 23:26 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

    2014-02-06 09:13 - 2014-02-12 23:27 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

    2014-02-06 09:09 - 2014-02-12 23:27 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

    2014-02-06 09:03 - 2014-02-12 23:27 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

    2014-02-06 08:41 - 2014-02-12 23:27 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

    2014-02-06 08:36 - 2014-02-12 23:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

    2014-02-06 08:34 - 2014-02-12 23:27 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

    2014-02-05 17:43 - 2012-12-14 19:51 - 00000000 ____D () C:\Users\Nanda\Desktop\minecraft

    2014-02-03 18:15 - 2014-02-03 18:14 - 00005163 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log

    2014-02-03 18:15 - 2013-11-05 00:21 - 00000000 ____D () C:\ProgramData\Oracle

    2014-02-03 18:15 - 2013-07-01 14:30 - 00000000 ____D () C:\Program Files\Java

    Files to move or delete:

    ====================

    C:\Users\Nanda\1.dat

    Some content of TEMP:

    ====================

    C:\Users\Nanda\AppData\Local\Temp\IntelDev.exe

    C:\Users\Nanda\AppData\Local\Temp\SkypeSetup.exe

    ===========

    Esta resposta foi útil?

    0 comentários Sem comentários
  3. Anônima
    2014-03-04T22:25:06+00:00

    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-03-2014 02

    Ran by Nanda (administrator) on NANDA-PC on 04-03-2014 22:16:27

    Running from C:\Users\Nanda\Desktop\Downloads

    Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Portuguese Standard

    Internet Explorer Version 11

    Boot Mode: Normal

    The only official download link for FRST:

    Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

    Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

    Download link from any site other than Bleeping Computer is unpermitted or outdated.

    See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe

    (AMD) C:\Windows\system32\atiesrxx.exe

    (AMD) C:\Windows\system32\atieclxx.exe

    (Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

    () C:\Windows\system32\PnkBstrA.exe

    (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

    (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe

    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    (Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe

    (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe

    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    (Oracle Corporation) C:\Program Files\Java\jre7\bin\javaw.exe

    (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

    (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

    (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

    () C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe

    (Ballistics Networking Pty Ltd.) C:\Users\Nanda\AppData\Local\Temp\1505850852.exe

    (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\Integrator.exe

    (Microsoft Corporation) C:\Windows\system32\taskmgr.exe

    ==================== Registry (Whitelisted) ==================

    HKLM...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)

    HKLM...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.)

    HKLM...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()

    HKLM...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1821576 2011-08-01] (Microsoft Corporation)

    HKLM...\Policies\Explorer: [HideSCAHealth] 1

    HKU.DEFAULT...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2012-01-11] (Microsoft Corporation)

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [Steam] - C:\Program Files\Steam\steam.exe [1823424 2014-03-04] (Valve Corporation)

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [Microsoft Interface Controller] - C:\GPU_UPDATE\MSController.exe [8704 2013-10-13] ()

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\Run: [jawaw] - "C:\Program Files\Java\jre7\bin\javaw.exe" -jar "C:\Users\Nanda\AppData\Roaming\jawaw.jar"

    HKU\S-1-5-21-3983158026-637607574-1965650666-1001...\RunOnce: [jawawv] - C:\Users\Nanda\AppData\Local\Temp\1505850852.exe [386048 2014-03-04] (Ballistics Networking Pty Ltd.)

    IFEO\cfosspeed.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

    IFEO\hamachi-2-ui.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

    Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1636746858.exe ()

    Startup: C:\Users\Nanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2026459690.exe ()

    ==================== Internet (Whitelisted) ====================

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://pt.msn.com/?ocid=iehp

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4830BF7449A8CC01

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt

    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    URLSearchHook: HKLM - (No Name) - {e7cb019e-bf3b-4c48-9673-48c323b18e31} -  No File

    URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

    SearchScopes: HKLM - DefaultScope value is missing.

    SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}

    SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

    BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

    BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

    BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

    Tcpip..\Interfaces{DE0EF1BE-2845-405A-A52A-BF53F04EA5B1}: [NameServer]192.168.1.254,192.168.1.254

    FireFox:

    ========

    FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

    FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

    FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

    FF Plugin: @microsoft.com/GENUINE - disabled No File

    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

    FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

    FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

    FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

    FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

    FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

    FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll ( )

    FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Nanda\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

    FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

    Chrome: 

    =======

    CHR HomePage: hxxp://home.sweetim.com/?crg=3.26010003&st=12&barid={5EBD3937-061E-4EFA-B3D9-57140C357286}

    CHR Extension: (Google Docs) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-02]

    CHR Extension: (Google Drive) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-02]

    CHR Extension: (YouTube) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-13]

    CHR Extension: (Pesquisa do Google) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-02]

    CHR Extension: (Desprotetor de Links) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\imcbnnnoghiihopefblgehihofbfbmei [2014-03-04]

    CHR Extension: (9GAG Mini) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmkmihphgjhmeabggdcokmkjhbnmdml [2014-03-04]

    CHR Extension: (Grepolis) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkgkognjknhcgbgbeijjondlikfkgnog [2014-03-04]

    CHR Extension: (Google Wallet) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]

    CHR Extension: (Gmail) - C:\Users\Nanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-02]

    ========================== Services (Whitelisted) =================

    S4 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [380328 2012-07-02] (cFos Software GmbH)

    S4 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1440080 2013-06-28] (LogMeIn Inc.)

    R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

    S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)

    S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)

    R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2013-10-12] ()

    R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1699680 2012-09-17] (TuneUp Software)

    ==================== Drivers (Whitelisted) ====================

    R1 cFosSpeed; C:\Windows\System32\DRIVERS\cfosspeed6.sys [975272 2012-07-02] (cFos Software GmbH)

    R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-11-03] (Disc Soft Ltd)

    S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)

    R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)

    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)

    R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324096 2013-11-03] (Duplex Secure Ltd.)

    R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-08-29] (TuneUp Software)

    U3 agmng3wt; C:\Windows\system32\Drivers\agmng3wt.sys [0 ] (Advanced Micro Devices)

    S3 EagleXNt; ??\C:\Windows\system32\drivers\EagleXNt.sys [X]

    U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()

    S3 WinRing0_1_2_0; ??\C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [X]

    S3 XDva401; ??\C:\Windows\system32\XDva401.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    ==================== One Month Created Files and Folders ========

    2014-03-04 22:14 - 2014-03-04 22:16 - 00000000 ____D () C:\FRST

    2014-03-04 10:48 - 2014-03-04 21:53 - 00000994 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

    2014-03-04 10:48 - 2014-03-04 10:53 - 00000990 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

    2014-03-04 10:21 - 2014-03-04 14:01 - 02435072 _____ (Microsoft Corporation) C:\Users\Nanda\AppData\Roaming\Adlock.exe

    2014-03-02 21:51 - 2014-03-02 21:51 - 00000000 ____D () C:\Windows\ERUNT

    2014-03-02 19:47 - 2014-03-02 19:16 - 00024064 _____ () C:\Windows\zoek-delete.exe

    2014-03-02 19:21 - 2014-03-02 19:49 - 00030470 _____ () C:\zoek-results.log

    2014-03-02 19:16 - 2014-03-02 19:43 - 00000000 ____D () C:\zoek_backup

    2014-03-02 18:24 - 2014-03-02 18:34 - 00000000 ____D () C:\AdwCleaner

    2014-03-02 14:51 - 2014-03-03 20:28 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\ZHP

    2014-03-02 14:51 - 2014-03-03 17:44 - 00000000 ____D () C:\Program Files\ZHPDiag

    2014-02-25 18:41 - 2014-01-09 02:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

    2014-02-23 13:41 - 2014-02-23 13:42 - 404484926 _____ () C:\Users\Nanda\Documents\Nightcore - Rock Mix #4.mp4

    2014-02-23 13:30 - 2014-02-23 13:31 - 253753316 _____ () C:\Users\Nanda\Documents~Nightcore~ Rock Compilation #5 SPECIAL EDITION (HD).mp4

    2014-02-23 13:14 - 2014-02-23 13:14 - 26250033 _____ () C:\Users\Nanda\Documents\Nightcore- End of all Hope.mp4

    2014-02-23 13:12 - 2014-02-23 13:12 - 23919946 _____ () C:\Users\Nanda\Documents\Nightcore - In the Middle of the Night.mp4

    2014-02-23 13:08 - 2014-02-23 13:08 - 28941711 _____ () C:\Users\Nanda\Documents\Nightcore- Amaranth.mp4

    2014-02-23 13:01 - 2014-02-23 13:01 - 20532539 _____ () C:\Users\Nanda\Documents\Nightcore- Whispers in the Dark.mp4

    2014-02-20 19:34 - 2014-02-20 19:34 - 00000000 ____D () C:\Program Files\Microsoft IntelliPoint

    2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logitech

    2014-02-20 19:29 - 2014-02-20 19:29 - 00000000 ____D () C:\Users\Nanda\AppData\Roaming\Logishrd

    2014-02-19 19:20 - 2013-10-02 00:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

    2014-02-19 19:20 - 2013-10-02 00:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

    2014-02-19 19:20 - 2013-10-02 00:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

    2014-02-19 19:20 - 2013-10-02 00:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

    2014-02-19 19:20 - 2013-10-02 00:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

    2014-02-19 19:20 - 2013-10-01 23:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

    2014-02-19 19:20 - 2013-10-01 23:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

    2014-02-19 19:20 - 2013-10-01 23:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

    2014-02-19 19:20 - 2013-10-01 23:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

    2014-02-19 19:20 - 2013-10-01 22:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

    2014-02-19 19:20 - 2013-10-01 22:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

    2014-02-19 19:17 - 2013-09-25 01:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

    2014-02-19 17:18 - 2014-02-21 09:39 - 00110056 _____ () C:\Users\Nanda\AppData\Local\GDIPFONTCACHEV1.DAT

    2014-02-19 17:16 - 2014-03-04 10:19 - 00005836 _____ () C:\Windows\PFRO.log

    2014-02-19 17:16 - 2014-03-04 10:19 - 00002310 _____ () C:\Windows\setupact.log

    2014-02-19 17:16 - 2014-02-21 09:39 - 00413680 _____ () C:\Windows\system32\FNTCACHE.DAT

    2014-02-19 17:16 - 2014-02-19 17:16 - 00000000 _____ () C:\Windows\setuperr.log

    2014-02-16 02:30 - 2014-02-16 02:30 - 31885137 _____ () C:\Users\Nanda\Documents\_Onward_ - Pantheon's Theme.mp4

    2014-02-16 02:30 - 2014-02-16 02:30 - 18256547 _____ () C:\Users\Nanda\Documents\LoL - Music for playing as ... Annie.mp4

    2014-02-12 23:27 - 2014-02-06 10:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

    2014-02-12 23:27 - 2014-02-06 10:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

    2014-02-12 23:27 - 2014-02-06 10:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

    2014-02-12 23:27 - 2014-02-06 10:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

    2014-02-12 23:27 - 2014-02-06 09:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

    2014-02-12 23:27 - 2014-02-06 09:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

    2014-02-12 23:27 - 2014-02-06 09:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

    2014-02-12 23:27 - 2014-02-06 09:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

    2014-02-12 23:27 - 2014-02-06 09:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

    2014-02-12 23:27 - 2014-02-06 09:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

    2014-02-12 23:27 - 2014-02-06 09:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

    2014-02-12 23:27 - 2014-02-06 09:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

    2014-02-12 23:27 - 2014-02-06 09:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

    2014-02-12 23:27 - 2014-02-06 09:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

    2014-02-12 23:27 - 2014-02-06 09:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

    2014-02-12 23:27 - 2014-02-06 09:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

    2014-02-12 23:27 - 2014-02-06 08:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

    2014-02-12 23:27 - 2014-02-06 08:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

    2014-02-12 23:27 - 2014-02-06 08:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

    2014-02-12 23:26 - 2014-02-06 10:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

    2014-02-12 23:26 - 2014-02-06 09:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

    2014-02-12 23:24 - 2013-12-21 08:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

    2014-02-12 21:18 - 2013-12-31 23:05 - 00420008 _____ () C:\Windows\system32\locale.nls

    2014-02-12 21:18 - 2013-12-06 02:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

    2014-02-12 21:18 - 2013-12-06 02:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

    2014-02-12 21:17 - 2013-12-24 23:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

    2014-02-12 21:17 - 2013-12-04 02:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

    2014-02-12 21:17 - 2013-12-04 02:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

    2014-02-12 21:17 - 2013-12-04 02:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

    2014-02-12 21:17 - 2013-12-04 02:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

    2014-02-12 21:17 - 2013-12-04 02:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

    2014-02-12 21:17 - 2013-12-04 01:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

    2014-02-12 21:17 - 2013-12-04 01:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

    2014-02-12 21:17 - 2013-12-04 01:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

    2014-02-12 21:17 - 2013-12-04 01:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

    2014-02-12 21:17 - 2013-11-26 08:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

    2014-02-09 18:15 - 2014-02-09 20:45 - 00000000 ____D () C:\Program Files\Battle for Wesnoth 1.10.7

    2014-02-07 19:08 - 2014-02-07 19:08 - 00000000 ____D () C:\Users\Nanda\Desktop\PokeMMO-Client

    2014-02-03 18:15 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

    2014-02-03 18:15 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

    2014-02-03 18:15 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

    2014-02-03 18:15 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe

    2014-02-03 18:14 - 2014-02-03 18:15 - 00005163 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log

    Esta resposta foi útil?

    0 comentários Sem comentários
  4. Anônima
    2014-03-04T22:22:04+00:00

    Ficheiro texto Addition como pedido.

    Additional scan result of Farbar Recovery Scan Tool (x86) Version: 04-03-2014 02

    Ran by Nanda at 2014-03-04 22:18:10

    Running from C:\Users\Nanda\Desktop\Downloads

    Boot Mode: Normal

    ==========================================================

    ==================== Security Center ========================

    AV: Microsoft Security Essentials (Enabled - Up to date) {108DAC43-C256-20B7-BB05-914135DA5160}

    AS: Microsoft Security Essentials (Enabled - Up to date) {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}

    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

     Update for Microsoft Office 2007 (KB2508958) (HKLM...{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)

    µTorrent (HKLM...\uTorrent) (Version: 3.1.3 - )

    7-Zip 4.20 (HKLM...\7-Zip) (Version:  - )

    Actualização do Microsoft Office Excel 2007 Help (KB963678) (HKLM...{90120000-0016-0816-0000-0000000FF1CE}_PROPLUS_{CCDE3C71-5F35-477F-BA90-1A399C91C10C}) (Version:  - Microsoft)

    Actualização do Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM...{90120000-0018-0816-0000-0000000FF1CE}_PROPLUS_{CF0BC77F-1B63-44BF-BCFE-3A8CBB9077D1}) (Version:  - Microsoft)

    Actualização do Microsoft Office Word 2007 Help (KB963665) (HKLM...{90120000-001B-0816-0000-0000000FF1CE}_PROPLUS_{A1A8C49E-BB40-4852-853E-B5A1F6BB2A3C}) (Version:  - Microsoft)

    Adobe AIR (HKLM...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)

    Adobe AIR (Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden

    Adobe Download Assistant (HKLM...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.0.6 - Adobe Systems Incorporated)

    Adobe Download Assistant (Version: 1.0.6 - Adobe Systems Incorporated) Hidden

    Adobe Flash Player 11 ActiveX (HKLM...\Adobe Flash Player ActiveX) (Version: 11.7.700.224 - Adobe Systems Incorporated)

    Adobe Flash Player 11 Plugin (HKLM...\Adobe Flash Player Plugin) (Version: 11.7.700.224 - Adobe Systems Incorporated)

    Adobe Reader X (10.1.9) - Português (HKLM...{AC76BA86-7AD7-1046-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)

    AMD Accelerated Video Transcoding (Version: 12.5.100.21116 - Advanced Micro Devices, Inc.) Hidden

    AMD APP SDK Runtime (Version: 10.0.1016.4 - Advanced Micro Devices Inc.) Hidden

    AMD Catalyst Install Manager (HKLM...{62A6A9B3-0CA2-6A17-A78B-918346A10C8B}) (Version: 8.0.891.0 - Advanced Micro Devices, Inc.)

    AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden

    AMD Media Foundation Decoders (Version: 1.0.71116.1554 - Advanced Micro Devices, Inc.) Hidden

    Angry Birds (HKLM...{370CA4B0-A1D8-4863-A3C5-6879AEE1663A}) (Version: 3.0.0 - Rovio)

    AS3 Class Diagram Viewer (HKLM...\com.jplprod.AS3viewer.A55F0C2D4E87165FB572446EEEB127111F48E3DA.1) (Version: 0.2 - JPL Productions)

    AS3 Class Diagram Viewer (Version: 0.2 - JPL Productions) Hidden

    Battle for Wesnoth 1.10.6 (HKLM...\Battle for Wesnoth 1.10.6) (Version: 1.10.6 - )

    Battle for Wesnoth 1.10.7 (HKLM...\Battle for Wesnoth 1.10.7) (Version: 1.10.7 - )

    Battlefield 1942: The Road To Rome (HKLM...{D057AA08-8CBF-42E3-9EAB-23B8FED1C279}) (Version:  - )

    Battleships Forever v0.89b (HKLM...\Battleships Forever_is1) (Version:  - )

    BitTorrent (HKLM...\BitTorrent) (Version: 7.7.0.27987 - BitTorrent Inc.)

    Call of Duty (HKLM...\Call of Duty) (Version:  - )

    Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (Version:  - ) Hidden

    Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (Version: 1.6 - Activision) Hidden

    Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (Version:  - ) Hidden

    Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (Version: 1.7 - Activision) Hidden

    Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

    Catalyst Control Center (Version: 2012.1116.1515.27190 - Nome de sua empresa:) Hidden

    Catalyst Control Center Graphics Previews Common (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.) Hidden

    Catalyst Control Center Localization All (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Chinese Standard (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Chinese Traditional (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Czech (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Danish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Dutch (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help English (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Finnish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help French (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help German (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Greek (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Hungarian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Italian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Japanese (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Korean (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Norwegian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Polish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Portuguese (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Russian (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Spanish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Swedish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Thai (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    CCC Help Turkish (Version: 2012.1116.1514.27190 - Advanced Micro Devices, Inc.) Hidden

    ccc-utility (Version: 2012.1116.1515.27190 - Advanced Micro Devices, Inc.) Hidden

    cFosSpeed v8.02 (HKLM...\cFosSpeed) (Version: 8.02 - cFos Software GmbH, Bonn)

    Counter-Strike (HKCU...\Counter-Strike) (Version:  - )

    Counter-Strike (HKLM...\Steam App 10) (Version:  - Valve)

    Counter-Strike: Condition Zero (HKLM...\Steam App 80) (Version:  - Valve)

    Counter-Strike: Condition Zero Deleted Scenes (HKLM...\Steam App 100) (Version:  - Valve)

    Cubby (HKCU...\Cubby) (Version: 1.0.0.12237 - LogMeIn, Inc.)

    D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden

    DAEMON Tools Lite (HKLM...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)

    Dark Souls Prepare to Die Edition (HKLM...\GFWL_{4E4D0FA1-F880-4CCB-999A-501000008200}) (Version: 1.0.0000.130 - NAMCO BANDAI Games Europe S.A.S.)

    Dark Souls Prepare to Die Edition (Version: 1.0.0000.130 - NAMCO BANDAI Games Europe S.A.S.) Hidden

    Dawn of War - Tyranid Mod v0.45DC (HKLM...\Tyranid_Mod_v04) (Version: "0.45DC" - "Team Super Ninja")

    Diablo II (HKLM...\Diablo II) (Version:  - )

    DoWpro 3.40 Full Installer (HKLM...\DoWpro) (Version: 3.40 Full Installer - )

    Earth 2160 (HKLM...\Earth 2160) (Version: 1.37 En - Zuxxez Entertainment AG)

    EAX4 Unified Redist (HKLM...{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)

    Façade (HKLM...{24E34264-D483-477C-A9A0-4E53F69834CF}) (Version: 1.1.2 - Procedural Arts)

    Fallout 3 (HKLM...{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)

    ffdshow [rev 3154] [2009-12-09] (HKLM...\ffdshow_is1) (Version: 1.0 - )

    FireWarrior (HKLM...\FireWarriorA00) (Version:  - )

    FormatFactory 2.90 (HKLM...\FormatFactory) (Version: 2.90 - Free Time)

    FXAA Post Process Injector (HKLM...\FXAA Post Process Injector) (Version:  - )

    Galeria de Fotografias (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Galeria de Fotos (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    GameSpy Arcade (HKLM...\GameSpy Arcade) (Version:  - )

    Google Chrome (HKLM...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.)

    Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden

    Hamster Free Video Converter (HKLM...{7E350663-86D3-466A-AB79-28156A9ABF6E}_is1) (Version: 2.5.2.33 - Hamster Soft)

    HDAUDIO Soft Data Fax Modem with SmartCP (HKLM...\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118) (Version:  - )

    Heroes of Might and Magic V (HKLM...{BD0EB672-2417-437E-81EA-231F419C68BD}) (Version:  - )

    Inquisition Daemonhunt (HKLM...\Inquisition Daemonhunt) (Version:  - )

    Japanese Fonts Support For Adobe Reader X (HKLM...{AC76BA86-7AD7-5760-0000-A00000000003}) (Version: 10.0.0 - Adobe Systems Incorporated)

    Java 7 Update 51 (HKLM...{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)

    Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

    Katawa Shoujo (HKLM...\Katawa Shoujo) (Version:  - )

    Kit Extras SPORE™ – Medonho e Giro (HKLM...{C07F8D75-7A8D-400E-A8F9-A3F396B49BB1}) (Version: 1.00.0000 - Electronic Arts)

    League of Legends (HKLM...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)

    League of Legends (Version: 3.0.1 - Riot Games) Hidden

    Left 4 Dead 2 (HKLM...\Steam App 550) (Version:  - Valve)

    Lightspark 0.5.3-git (HKLM...\Lightspark) (Version: 0.5.3-git - Lightspark Team)

    LogMeIn Hamachi (HKLM...\LogMeIn Hamachi) (Version: 2.1.0.374 - LogMeIn, Inc.)

    LogMeIn Hamachi (Version: 2.1.0.374 - LogMeIn, Inc.) Hidden

    Malwarebytes Anti-Malware versão 1.75.0.1300 (HKLM...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)

    Media Player Classic - Home Cinema v1.5.2.3456 (HKLM...{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.5.2.3456 - MPC-HC Team)

    Medieval II Total War (HKLM...{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.00.0000 - SEGA)

    Microsoft .NET Framework 1.1 (HKLM...{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)

    Microsoft .NET Framework 4.5.1 (Português) (HKLM...{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 2070) (Version: 4.5.50938 - Microsoft Corporation)

    Microsoft .NET Framework 4.5.1 (PTG) (Version: 4.5.50938 - Microsoft Corporation) Hidden

    Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden

    Microsoft Antimalware Service PT-BR Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden

    Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden

    Microsoft AppLocale (HKLM...{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)

    Microsoft DirectX SDK (August 2009) (HKLM...\Microsoft DirectX SDK (August 2009)) (Version: 9.27.1734.0 - Microsoft Corporation)

    Microsoft Games for Windows - LIVE (HKLM...{F112F66E-25CA-42DD-983C-6118EB38F606}) (Version: 3.0.89.0 - Microsoft Corporation)

    Microsoft Games for Windows - LIVE Redistributable (HKLM...{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)

    Microsoft IntelliPoint 8.2 (HKLM...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)

    Microsoft IntelliPoint 8.2 (Version: 8.20.468.0 - Microsoft Corporation) Hidden

    Microsoft Office 2007 Service Pack 3 (SP3) (HKLM...{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

    Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

    Microsoft Office Access MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Excel MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office File Validation Add-In (HKLM...{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

    Microsoft Office InfoPath MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Professional Plus 2007 (HKLM...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)

    Microsoft Office Professional Plus 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Proof (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Proofing (Portuguese (Portugal)) 2007 (Version: 12.0.4518.1029 - Microsoft Corporation) Hidden

    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden

    Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Shared MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Office Word MUI (Portuguese (Portugal)) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

    Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden

    Microsoft Security Client PT-BR Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden

    Microsoft Security Essentials (HKLM...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)

    Microsoft Silverlight (HKLM...{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)

    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM...{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

    Microsoft Visual C++ 2005 Redistributable (HKLM...{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

    Microsoft Visual C++ 2005 Redistributable (HKLM...{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

    Microsoft Visual C++ 2005 Redistributable (HKLM...{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM...{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM...{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM...{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM...{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

    Microsoft Visual C++ Run Time  Lib Setup (HKLM...{AAF4238F-7C29-451D-9925-C753271A5728}) (Version: 1.0.0 - Microsoft)

    Microsoft Windows Application Compatibility Database (HKLM...{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version:  - )

    Microsoft XNA Framework Redistributable 4.0 (HKLM...{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

    Mount & Blade: Warband (HKLM...\Steam App 48700) (Version:  - Tale Worlds)

    Movie Maker (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden

    MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden

    MSXML 4.0 SP2 (KB954430) (HKLM...{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

    MSXML 4.0 SP2 (KB973688) (HKLM...{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

    MSXML4 Parser (HKLM...{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)

    Nexus Mod Manager (HKLM...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.45.4 - Black Tree Gaming)

    Nokia Connectivity Cable Driver (HKLM...{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )

    NVIDIA PhysX (HKLM...{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation)

    OpenAL (HKLM...\OpenAL) (Version:  - )

    Pando Media Booster (HKLM...{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)

    Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Photo Gallery (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    POD-Bot 2.5 (HKLM...\POD-Bot 2.5) (Version:  - )

    Prince of Persia (HKLM...{7C11154F-3539-4CB5-979D-EF7913473E53}) (Version: 1.0 - Ubisoft)

    Project64 1.6 (HKLM...{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)

    PunkBuster for Battlefield 1942 (HKLM...{127B684B-A002-44C8-99A7-6CF8F1E26873}) (Version:  - )

    PunkBuster Services (HKLM...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

    RAR Password Unlocker 4.2.0.0 (HKLM...{B789FA51-6A71-408F-92DE-EDE4A517B8F9}_is1) (Version:  - Password Unlocker Studio)

    RPG Maker 2000 1.07b (HKLM...\RPG Maker 2000 1.07b) (Version:  - )

    RPG MAKER VX Ace RTP (HKLM...\RPGVXAce_RTP_is1) (Version: 1.00 - Enterbrain)

    RPG Maker VX RTP (HKLM...\RPG Maker VX RTP_is1) (Version: 1.02 - Enterbrain)

    Simple Port Forwarding (HKLM...\Simple Port Forwarding) (Version: 3.4.0 - PcWinTech.com)

    Skype™ 6.11 (HKLM...{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

    Spelling Dictionaries Support For Adobe Reader 9 (HKLM...{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)

    SPORE™ (HKLM...{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.04.0000 - Electronic Arts)

    SPORE™ Aventuras Galácticas (HKLM...{63CEA2E4-4FE7-4F2C-B388-C1313D24157C}) (Version: 1.00.0000 - Electronic Arts)

    Starcraft (HKLM...\Starcraft) (Version:  - )

    Steam (HKLM...{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

    Steel Legion DC 1.0.0 (HKLM...\Steel Legion DC_is1) (Version:  - Steel Legion Team)

    System Requirements Lab for Intel (HKLM...{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC)

    TeamSpeak 3 Client (HKLM...\TeamSpeak 3 Client) (Version: 3.0.10 - TeamSpeak Systems GmbH)

    Texas Instruments PCIxx21/x515/xx12 drivers. (HKLM...\InstallShield_{BE1826A9-7EEE-492A-B3BC-DEF3DFAE37EE}) (Version: 2.00.0002 - Texas Instruments Inc.)

    the white chamber 1.0 (HKLM...\the white chamber) (Version: 1.0 - Studio Trophis)

    TIPCI (Version: 2.00.0002 - Texas Instruments Inc.) Hidden

    To the Moon (HKLM...\To the Moon1.0) (Version: 1.0 - Foxy Games)

    TuneUp Utilities 2013 (HKLM...\TuneUp Utilities 2013) (Version: 13.0.2013.194 - TuneUp Software)

    TuneUp Utilities Language Pack (en-US) (Version: 12.0.2040.9 - TuneUp Software) Hidden

    TuneUp Utilities Language Pack (en-US) (Version: 13.0.2013.194 - TuneUp Software) Hidden

    Turning Point - Fall of Liberty (HKLM...\InstallShield_{D4FEA244-A9BC-4727-8EA9-B369579F43CF}) (Version: 1.00.0000 - Codemasters)

    Turning Point - Fall of Liberty (Version: 1.00.0000 - Codemasters) Hidden

    UA Grand Release (HKLM...\UA Grand Release) (Version:  - )

    Ubisoft Game Launcher (HKLM...{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)

    Unity Web Player (HKCU...\UnityWebPlayer) (Version:  - Unity Technologies ApS)

    Unlocker 1.9.1 (HKLM...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)

    Update for 2007 Microsoft Office System (KB967642) (HKLM...{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

    Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM...{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)

    Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM...{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)

    Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM...{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)

    Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM...{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)

    Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM...{90120000-001A-0816-0000-0000000FF1CE}_PROPLUS_{6A112399-633E-4C18-B796-0F175DC2F2F2}) (Version:  - Microsoft)

    Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (HKLM...{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{128A5449-CF71-4DA4-A746-F49E3B5DB584}) (Version:  - Microsoft)

    Warhammer 40,000: Dawn of War – Dark Crusade (HKLM...\Steam App 4580) (Version:  - Relic Entertainment)

    Warhammer Mark of Chaos (HKLM...{5F374D5D-DB43-4263-9C29-BAB2C93FEFE6}) (Version: 1.000.000 - NAMCO BANDAI Games)

    Warhammer® 40,000™: Dawn of War® II - Chaos Rising™ (HKLM...\Steam App 20570) (Version:  - Relic)

    Windows Frotz (HKLM...\WindowsFrotz) (Version:  - )

    Windows Live Communications Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live Essentials (HKLM...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)

    Windows Live Essentials (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

    Windows Live Installer (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live Messenger (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live Photo Common (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live PIMT Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live SOXE (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live SOXE Definitions (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live UX Platform (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    Windows Live UX Platform Language Pack (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

    WinRAR 4.01 (32-bit) (HKLM...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

    Xilisoft PDF to PowerPoint Converter (HKLM...\Xilisoft PDF to PowerPoint Converter) (Version: 1.0.2.20120229 - Xilisoft)

    YTD Video Downloader 4.7.2 (HKLM...{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.7.2 - GreenTree Applications SRL)

    Yume Nikki 0.10 English v3 (HKCU...\Yume Nikki 0.10 English v3) (Version:  - )

    ZHPDiag 2014 (HKLM...\ZHPDiag_is1) (Version: 2014 - Nicolas Coolman)

    ==================== Restore Points  =========================

    17-02-2014 18:40:39 Windows Update

    19-02-2014 19:17:26 Windows Update

    20-02-2014 23:36:37 Windows Update

    24-02-2014 18:09:00 Windows Update

    25-02-2014 23:05:56 Windows Update

    02-03-2014 03:40:23 Windows Update

    02-03-2014 19:21:33 zoek.exe restore point

    03-03-2014 20:26:48 Removed YTD Toolbar v6.2.

    03-03-2014 20:28:34 ZHPFix Restore System Point

    ==================== Hosts content: ==========================

    2009-07-14 02:04 - 2014-03-03 17:14 - 00000918 ____A C:\Windows\system32\Drivers\etc\hosts

    127.0.0.1       localhost 

    127.0.0.1 pc-gizmos-ssl.com www.pc-gizmos-ssl.com # added by PC-Gizmos.com

    ==================== Scheduled Tasks (whitelisted) =============

    Task: {03B38FD6-B26C-4AC1-9B50-F7B630DA45EC} - System32\Tasks{DFC12D97-E84B-4309-8BD3-A7149C738A20} => C:\Program Files\Bethesda Softworks\Doom 3 BFG Edition\Doom3BFG.exe

    Task: {050759C3-4779-4FC7-AEE7-2A31B6D5D4C9} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3983158026-637607574-1965650666-1001UA => C:\Users\Nanda\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-04-24] (Facebook Inc.)

    Task: {0560A5FF-35CF-4971-A460-DF92F397467C} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files\IObit\Game Booster 3\AutoUpdate.exe

    Task: {198028E2-3213-40F6-AA9C-CAD0742EEF09} - System32\Tasks\Google Updater and Installer => C:\Users\Nanda\AppData\Local\Google\Update\GoogleUpdate.exe

    Task: {2BB7C7C1-7A38-49F0-B3FE-504F17CEA8E9} - System32\Tasks{93C40F79-691A-4B5B-B4D8-63DE39DA4330} => Chrome.exe http://ui.skype.com/ui/0/6.6.0.106/pp/abandoninstall?page=tsProgressBar

    Task: {323C12B6-C7D5-42D7-B721-7ECA325F9B4B} - \YourFile DownloaderUpdate No Task File

    Task: {3E1BF82D-9B49-473D-ABA8-228183891E64} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-03-04] (Google Inc.)

    Task: {4B4AA3E1-DBDB-48A0-8013-43406ABE5463} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-03-04] (Google Inc.)

    Task: {774BA31C-842C-41A4-A5A4-9726E4261484} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2012-09-17] (TuneUp Software)

    Task: {78DB354A-2F3C-4B53-8139-627FC4DC6AD9} - System32\Tasks\Adobe online update program => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)

    Task: {A9A3CFAF-6927-4BA7-94E8-325318CDF285} - \AdobeFlashPlayerUpdate 2 No Task File

    Task: {B4A89B41-5679-42C4-8237-F91531EC2B55} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3983158026-637607574-1965650666-1001Core => C:\Users\Nanda\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-04-24] (Facebook Inc.)

    Task: {C54D63CB-2594-408A-956B-0DF33909A95F} - System32\Tasks{23258119-3730-4B75-A92B-F9E9FE9B4FB8} => Iexplore.exe http://ui.skype.com/ui/0/6.11.0.102/pp/abandoninstall?page=tsProgressBar

    Task: {D72A2B70-084C-4358-A26A-A64B670FAD6B} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)

    Task: {EE5A8FC9-41F8-4028-98AC-EBE5F1631CE7} - \AdobeFlashPlayerUpdate No Task File

    Task: {F3CE498B-58F7-4F93-A8FC-3A4C96807C1C} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-08-01] (Microsoft Corporation)

    Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3983158026-637607574-1965650666-1001Core.job => C:\Users\Nanda\AppData\Local\Facebook\Update\FacebookUpdate.exe

    Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3983158026-637607574-1965650666-1001UA.job => C:\Users\Nanda\AppData\Local\Facebook\Update\FacebookUpdate.exe

    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

    ==================== Loaded Modules (whitelisted) =============

    2011-11-24 22:16 - 2011-05-28 22:04 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll

    2013-10-12 22:10 - 2013-10-12 22:10 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe

    2012-11-16 14:09 - 2012-11-16 14:09 - 00369152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

    2014-03-04 10:49 - 2014-03-02 02:35 - 00051016 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll

    2014-03-04 10:49 - 2014-03-02 02:35 - 00716616 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\libglesv2.dll

    2014-03-04 10:49 - 2014-03-02 02:35 - 00100168 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\libegl.dll

    2014-03-04 10:49 - 2014-03-02 02:35 - 04061000 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\pdf.dll

    2014-03-04 10:49 - 2014-03-02 02:35 - 00394568 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll

    2014-03-04 10:49 - 2014-03-02 02:35 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll

    2014-03-04 10:49 - 2014-03-02 02:35 - 13632840 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll

    2014-03-04 20:50 - 2014-03-04 20:50 - 00004608 _____ () C:\Users\Nanda\AppData\Roaming\f4061\e83a1.exe

    2012-08-29 15:42 - 2012-08-29 15:42 - 13416256 _____ () C:\Program Files\TuneUp Utilities 2013\libcef.dll

    ==================== Alternate Data Streams (whitelisted) =========

    AlternateDataStreams: C:\ProgramData\TEMP:373E1720

    ==================== Safe Mode (whitelisted) ===================

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

    ==================== Disabled items from MSCONFIG ==============

    ==================== Faulty Device Manager Devices =============

    Name: Hamachi Network Interface

    Description: Hamachi Network Interface

    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

    Manufacturer: LogMeIn, Inc.

    Service: hamachi

    Problem: : This device is disabled. (Code 22)

    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

    Name: Broadcom NetLink (TM) Gigabit Ethernet

    Description: Broadcom NetLink (TM) Gigabit Ethernet

    Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

    Manufacturer: Broadcom

    Service: b57nd60x

    Problem: : This device is disabled. (Code 22)

    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

    ==================== Event log errors: =========================

    Application errors:

    ==================

    Error: (03/04/2014 04:28:09 PM) (Source: Application Error) (User: )

    Description: Nome da aplicação com falha: League of Legends.exe, versão: 4.3.0.487, carimbo de data/hora: 0x530c09d0

    Nome do módulo com falha: League of Legends.exe, versão: 4.3.0.487, carimbo de data/hora: 0x530c09d0

    Código de excepção: 0xc0000005

    Desvio de falha: 0x00436e5f

    ID do processo com falha: 0x136c

    Data/hora de início da aplicação com falha: 0xLeague of Legends.exe0

    Caminho da aplicação com falha: League of Legends.exe1

    Caminho do módulo com falha: League of Legends.exe2

    ID do Relatório: League of Legends.exe3

    Error: (03/04/2014 03:47:47 PM) (Source: Application Error) (User: )

    Description: Nome da aplicação com falha: League of Legends.exe, versão: 4.3.0.487, carimbo de data/hora: 0x530c09d0

    Nome do módulo com falha: League of Legends.exe, versão: 4.3.0.487, carimbo de data/hora: 0x530c09d0

    Código de excepção: 0xc0000005

    Desvio de falha: 0x005c7fd0

    ID do processo com falha: 0xc70

    Data/hora de início da aplicação com falha: 0xLeague of Legends.exe0

    Caminho da aplicação com falha: League of Legends.exe1

    Caminho do módulo com falha: League of Legends.exe2

    ID do Relatório: League of Legends.exe3

    Error: (03/04/2014 10:24:54 AM) (Source: Steam Client Service) (User: )

    Description: Error: Failed to poke open firewall

    Error: (03/04/2014 10:20:47 AM) (Source: Application Error) (User: )

    Description: Nome da aplicação com falha: kdbsync.exe, versão: 0.0.0.0, carimbo de data/hora: 0x4f67a718

    Nome do módulo com fal

    Esta resposta foi útil?

    0 comentários Sem comentários
  5. Anônima
    2014-03-04T14:25:31+00:00

    Baixe o Farbar Recovery Scan Tool e salve-o no Desktop (Área de Trabalho)

    Obs: Ao acessar o link acima, clique no botão Download Now 32-Bit Version

    *Execute o FRST e aceite o contrato.

    *Clique [Scan]

    *Ao término clique [OK] > [OK]

    *Serão criados dois relatórios no Desktop: FRST.txt e Addition.txt

    Poste estes dois relatórios em sua próxima resposta.

    Esta resposta foi útil?

    0 comentários Sem comentários