Olá Celso. O Zoek não encontrou nada mais de perigoso em seu PC, o relatório dele está limpo.

Como está seu computador?

Boa  noite  Power Max, obrigado  pelo seu suporte  mais  uma  vez.  Segue  o  relatório  do Zoek  abaixo. Apareceram 2 relatórios,  vou  tentar  colar os  2  direto, caso não caiba  faço  novo  envio.  Fico no  aguarde de  novas  instruções,  se  necessárias,  Muito  obrigado  mais uma  vez.

---

Zoek.exe v5.0.0.0 Updated 22-05-2014

Tool run by MARLI on 25/05/2014 at 20:36:30,33.

Microsoft Windows 7 Home Basic  6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\MARLI\Downloads\zoek.exe [Scan all users] [Script inserted] 

==== Older Logs ======================

C:\zoek-results2014-05-25-232257.log 20960 bytes

==== System Restore Info ======================

25/05/2014 20:41:27 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

Copyright (c) 1993-2006 Microsoft Corp. 

# 

This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 

# 

This file contains the mappings of IP addresses to host names. Each 

entry should be kept on an individual line. The IP address should 

be placed in the first column followed by the corresponding host name. 

The IP address and the host name should be separated by at least one 

space. 

# 

Additionally, comments (such as these) may be inserted on individual 

lines or following the machine name denoted by a '#' symbol. 

# 

For example: 

# 

     102.54.94.97     rhino.acme.com          # source server 

      38.25.63.10     x.acme.com              # x client host 

localhost name resolution is handle within DNS itself. 

127.0.0.1       localhost 

::1             localhost 

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFF" [18/05/2014 23:03]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

bejnhdlplbjhffionohbdnpcbobfejcc - C:\Program Files (x86)\Norton Internet Security\Engine\20.5.0.28\Exts\Chrome.crx[29/04/2014 09:31]

Norton Identity Protection - MARLI\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejnhdlplbjhffionohbdnpcbobfejcc

Google Wallet - MARLI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{58DF366D-4ECD-4BC4-B4C6-22415DCEE34A} Google  Url="https://www.google.com/search?q={searchTerms}"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

C:\Users\MARLI\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully

C:\Users\MARLI\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\HP Deskjet 2000 J210 series.lnk - C:\Program Files (x86)\HP\HP Deskjet 2000 J210 series\Bin\HP Deskjet 2000 J210 series.exe 

==== shortcuts in Users Start Menu ======================

C:\Users\MARLI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files\Internet Explorer\iexplore.exe 

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk - C:\Windows\Installer{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\SC_Reader.ico 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\About Java.lnk - C:\Program Files (x86)\Java\jre7\bin\javacpl.exe -tab about

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Check For Updates.lnk - C:\Program Files (x86)\Java\jre7\bin\javacpl.exe -tab update

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Configure Java.lnk - C:\Program Files (x86)\Java\jre7\bin\javacpl.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\LiveUpdate.lnk - C:\Program Files (x86)\Norton Internet Security\Engine64\20.5.0.28\uistub.exe /lu

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\NBRT.lnk -  

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\Norton Internet Security.lnk - C:\Program Files (x86)\Norton Internet Security\Engine64\20.5.0.28\uistub.exe 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\Support.lnk - C:\Program Files (x86)\Norton Internet Security\Engine\20.5.0.28\symerr.exe /support

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security\Uninstall Norton Internet Security.lnk - C:\Program Files (x86)\NortonInstaller{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\20.5.0.28\inststub.exe /X /shortcut

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\FormatFactory.lnk - C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\GameBox Console.lnk - C:\Program Files (x86)\Game Box\GameConsole\GameBox Console.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\LG Media FUNtasia.lnk - C:\Program Files (x86)\LG Software\LG Media FUNtasia\MediaFuntasiaStart.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Office Excel 2007.lnk - C:\Windows\Installer{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Welcome Center.lnk - C:\Windows\system32\rundll32.exe C:\Windows\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk - C:\Windows\system32\calc.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Office Word 2007.lnk - C:\Windows\Installer{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Spybot - Search & Destroy.lnk - C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe 

C:\Users\MARLI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1

C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

==== Reset IE Proxy ======================

Value(s) before fix:

"ProxyEnable"=dword:00000000

Value(s) after fix:

"ProxyEnable"=dword:00000000

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\MARLI\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\MARLI\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\MARLI\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Users\MARLI\AppData\Local\Temp will be emptied at reboot

C:\Users\USURIO~1\AppData\Local\Temp emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Temp emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\MARLI\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:$RECYCLE.BIN successfully emptied

==== EOF on 25/05/2014 at 21:00:34,30 ======================

                                          2ª  Zoek

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\MARLI\AppData\Local\Temp ====

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

2014-05-22 04:20:17 0DC5AF80D059DEC792B665ED598C6567 536576 ----a-w- C:\Windows\SysWOW64\sqlite3.dll

2014-05-19 01:11:12 FBCF3F01177953EBF1E735643621CCF5 69632 ----a-w- C:\Windows\SysWOW64\mshtmled.dll

2014-05-19 01:11:11 EB5347F6149D3FF25F4D609A21A3BD67 17382912 ----a-w- C:\Windows\SysWOW64\mshtml.dll

2014-05-19 01:11:11 10D531ADC7B8FB36C7361D44AF6E8AB6 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb

2014-05-18 21:00:11 E9D88493FBDB36D4B65C6F2F7F122C95 12874240 ----a-w- C:\Windows\SysWOW64\shell32.dll

2014-05-18 20:59:09 9DE19EA21DF99AF15BA5A947E5317F9E 550912 ----a-w- C:\Windows\SysWOW64\kerberos.dll

2014-05-18 20:59:09 4D59F470985D08139E42D15842816C47 3969984 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe

2014-05-18 20:59:09 31FA2485DFC773F1E718A4D19F443FA9 3914176 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe

2014-05-18 20:59:08 ED195AC76E10F17F6DD60C49666F2A83 259584 ----a-w- C:\Windows\SysWOW64\msv1_0.dll

2014-05-18 20:59:06 995B39A08421C7725D1DF8DACEBBFC89 538112 ----a-w- C:\Windows\SysWOW64\objsel.dll

2014-05-18 20:59:06 461B713DE7F353C6447B744F1A049930 274944 ----a-w- C:\Windows\SysWOW64\KernelBase.dll

2014-05-18 20:59:06 3A1ABE045A3E30799576E83A2D012B43 172032 ----a-w- C:\Windows\SysWOW64\wdigest.dll

2014-05-18 20:59:05 541BB9B4C899ADCC5D3DB89208C1F409 65536 ----a-w- C:\Windows\SysWOW64\TSpkg.dll

2014-05-18 20:59:04 FBC78B5D12A4F5A62D9C91E0E0E46D46 49664 ----a-w- C:\Windows\SysWOW64\adprovider.dll

2014-05-18 20:59:04 834A859BB331B0B2CCAE25BB1986F80D 47616 ----a-w- C:\Windows\SysWOW64\dpapiprovider.dll

2014-05-18 20:59:04 828185688FDAAE6C7959B884ABED1766 247808 ----a-w- C:\Windows\SysWOW64\schannel.dll

2014-05-18 20:59:04 62C0798CC68EBF42F29C92E6CD6DC3D6 36864 ----a-w- C:\Windows\SysWOW64\dimsroam.dll

2014-05-18 20:59:04 38A30B8E4216BE24D30F766EF3BAC2C7 48128 ----a-w- C:\Windows\SysWOW64\capiprovider.dll

2014-05-18 20:59:04 335FA669FC952BC4888CEDBDB42607E2 51200 ----a-w- C:\Windows\SysWOW64\cngprovider.dll

2014-05-18 20:59:00 5E11C55CC4D9330E55CCB22B1F20BB33 35328 ----a-w- C:\Windows\SysWOW64\wincredprovider.dll

2014-05-18 20:58:55 2A86C18CE6869C77FCEB62F3B47D4D5B 17408 ----a-w- C:\Windows\SysWOW64\credssp.dll

2014-05-18 20:58:54 C94CE65AE7701E9FDBA889045543E27C 22016 ----a-w- C:\Windows\SysWOW64\secur32.dll

2014-05-18 20:58:54 75878492F2B33405EEF900F8C16C6D08 96768 ----a-w- C:\Windows\SysWOW64\sspicli.dll

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2014-05-19 01:11:12 A920E1336F9FEA95477763E2CC15891B 84992 ----a-w- C:\Windows\Sysnative\mshtmled.dll

2014-05-19 01:11:12 797E2E5C309AFF76990D5B7AF457EACA 23544320 ----a-w- C:\Windows\Sysnative\mshtml.dll

2014-05-19 01:11:11 A45BFDCFD5864F658289A165E6E0227F 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb

2014-05-18 21:00:13 427015D56DF17241F634611557146C57 14175744 ----a-w- C:\Windows\Sysnative\shell32.dll

2014-05-18 21:00:10 4A795989DF0043973711B666D36D2678 477184 ----a-w- C:\Windows\Sysnative\aepdu.dll

2014-05-18 21:00:10 485FB1F3792FF7B5D5EBB99AB870E588 424448 ----a-w- C:\Windows\Sysnative\aeinv.dll

2014-05-18 20:59:10 9358149234A4F3FE00CF5C2096DC1652 1460736 ----a-w- C:\Windows\Sysnative\lsasrv.dll

2014-05-18 20:59:09 B19C8390A1D641B9AC4490D4828A7B5E 728064 ----a-w- C:\Windows\Sysnative\kerberos.dll

2014-05-18 20:59:08 E2A483E796D5FC7E447725FD01D98FA0 314880 ----a-w- C:\Windows\Sysnative\msv1_0.dll

2014-05-18 20:59:08 89EF1CE0CE43AB8F55247D746739A321 722944 ----a-w- C:\Windows\Sysnative\objsel.dll

2014-05-18 20:59:07 6B47CF5C27865DDF6680E4D834FBE34F 5550016 ----a-w- C:\Windows\Sysnative\ntoskrnl.exe

2014-05-18 20:59:06 B6D8C1202DACA028AD94BDA2795CBBE9 86528 ----a-w- C:\Windows\Sysnative\TSpkg.dll

2014-05-18 20:59:06 851BB346CD59D9B3BC8854384C7DD5C3 424960 ----a-w- C:\Windows\Sysnative\KernelBase.dll

2014-05-18 20:59:06 26AF184300C0868D854D5A3092234E24 210944 ----a-w- C:\Windows\Sysnative\wdigest.dll

2014-05-18 20:59:05 CF13522172342AD8196B329C15D68E23 44544 ----a-w- C:\Windows\Sysnative\dimsroam.dll

2014-05-18 20:59:05 481F70241D4EA038BB02590A30F15A23 340992 ----a-w- C:\Windows\Sysnative\schannel.dll

2014-05-18 20:59:04 BDA8B14AFE99A0C52BFEA64C5AC62171 52736 ----a-w- C:\Windows\Sysnative\dpapiprovider.dll

2014-05-18 20:59:04 9D942180B5B6CE1C882B9CC54EA1F275 57344 ----a-w- C:\Windows\Sysnative\cngprovider.dll

2014-05-18 20:59:04 692E9886B2A475684F7E3294BF66E97D 56832 ----a-w- C:\Windows\Sysnative\adprovider.dll

2014-05-18 20:59:04 4959DE74643CBC4B83E5BC99486A4FC9 53760 ----a-w- C:\Windows\Sysnative\capiprovider.dll

2014-05-18 20:59:01 C072064F95579C0D6D86AF5B3DC53192 136192 ----a-w- C:\Windows\Sysnative\sspicli.dll

2014-05-18 20:59:01 9A3C6D8593F29A9F66744A3D4E6309B2 39936 ----a-w- C:\Windows\Sysnative\wincredprovider.dll

2014-05-18 20:59:00 204F3F58212B3E422C90BD9691A2DF28 31232 ----a-w- C:\Windows\Sysnative\lsass.exe

2014-05-18 20:58:56 82A72E99AA1CF0B04D3B9843CBA3AEC1 22016 ----a-w- C:\Windows\Sysnative\credssp.dll

2014-05-18 20:58:55 8098627D0AA1706D69C5AF3F74332ABB 29184 ----a-w- C:\Windows\Sysnative\sspisrv.dll

2014-05-18 20:58:55 39312B37C5FE5138F99680A49ACD3AEA 28160 ----a-w- C:\Windows\Sysnative\secur32.dll

====== C:\Windows\Sysnative\drivers =====

2014-05-19 01:26:35 9D9C047446821A064AE1A5C4AED636FA 854 ----a-w- C:\Windows\Sysnative\drivers\SYMEVENT64x86.INF

2014-05-19 01:26:35 3DA43F1C05B62945A33EC3153327EE77 7631 ----a-w- C:\Windows\Sysnative\drivers\SYMEVENT64x86.CAT

2014-05-19 01:26:34 F19E5E37ED8134B9E5F6287F2D3A75D7 177312 ----a-w- C:\Windows\Sysnative\drivers\SYMEVENT64x86.SYS

2014-05-18 20:59:05 1C2D8E18AA8FD50CD04C15CC27F7F5AB 155072 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys

2014-05-18 20:59:02 353009DEDF918B2A51414F330CF72DEC 95680 ----a-w- C:\Windows\Sysnative\drivers\ksecdd.sys

====== C:\Windows\Tasks ======

2014-05-22 05:35:59 1AC5CCF0C8141F95AB141B18FB471464 1066 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-05-22 05:35:59 17D8746C4FC7B5C656C2F51696BF7FCE 3810 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineCore

2014-05-22 05:35:59 0BC87339C3DC9D04DBC844C0040CF6D0 4062 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineUA

2014-05-22 05:35:58 9498E8151372BB2CCDF6E930EFE72AE3 1062 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-05-05 04:16:25 -------- d-----w- C:\Program Files\PCDApp

======= C:\PROGRA~2 =====

2014-05-22 05:35:42 -------- d-----w- C:\PROGRA~2\Google

2014-05-19 01:10:49 -------- d-----w- C:\PROGRA~2\COMMON~1\DESIGNER

======= C: =====

====== C:\Users\MARLI\AppData\Roaming ======

2014-05-25 00:36:59 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\CrashDumps

2014-05-18 20:34:27 AF7AB1BB278E0DC1850382BF788A5117 15360 ----a-w- C:\Users\MARLI\AppData\Local\lifda.gdb

2014-05-18 20:34:27 0C6F991FB95B46812C14C8573B90CC44 902891 ----a-w- C:\Users\MARLI\AppData\Local\lifda.gss

2014-05-05 04:36:16 -------- d-----w- C:\Users\MARLI\AppData\Local\com

====== C:\Users\MARLI ======

2014-05-25 19:18:22 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Searches

2014-05-22 05:36:17 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-05-11 21:17:42 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

====== C: exe-files ==

2014-05-22 05:46:52 3AF5806AAB54D86CDA7AAA034FD2C35E 38382160 ----a-w- C:\Program Files (x86)\Google\Update\Download{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\35.0.1916.114\35.0.1916.114_chrome_installer.exe

2014-05-22 05:40:39 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateSetup.exe

2014-05-22 05:40:39 6FC454773ABF8DE9A33B35E03525140D 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateOnDemand.exe

2014-05-22 05:40:39 49B70FBEEC01A69CA9AC115C109E9CDD 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateBroker.exe

2014-05-22 05:40:35 D893431503D5112DC3B799DF963D2AC8 114568 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateComRegisterShell64.exe

2014-05-22 05:40:35 D5A444B63637EC0932172C6719A10252 263048 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe

2014-05-22 05:40:35 720546B84ED5229E1584C8F3533A2F12 328072 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe

2014-05-22 05:40:34 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdate.exe

2014-05-22 05:40:33 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Program Files (x86)\Google\Update\Download{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.24.7\GoogleUpdateSetup.exe

2014-05-22 05:35:57 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

2014-05-22 04:17:19 70F851F7A524071E13F17DC401A21906 1326389 ----a-w- C:\Users\MARLI\Pictures\NOVAS FOTOS MARÇO 2013\POMPOM\Desktop\AdwCleaner.exe

=== C: other files ==

2014-05-23 00:53:05 9CDCA70485BD6B9D230365F67C31F132 433752 ----a-w- C:\Windows\System32\drivers\NISx64\1405000.01C\symnets.sys

2014-05-23 00:53:05 599872BAD7CFB45C7CE47CDED4B726D8 1139800 ----a-w- C:\Windows\System32\drivers\NISx64\1405000.01C\symefa64.sys

2014-05-23 00:53:05 52DC0048D667757A8A2E4C87182890AC 493656 ----a-w- C:\Windows\System32\drivers\NISx64\1405000.01C\symds64.sys

2014-05-23 00:53:05 42947647F71E9EF2167B42B372F1DDB7 23448 ----a-r- C:\Windows\System32\drivers\NISx64\1405000.01C\symelam.sys

2014-05-23 00:53:05 0E76CEF892C45734F7AED09FDDF35D4D 36952 ----a-w- C:\Windows\System32\drivers\NISx64\1405000.01C\srtspx64.sys

2014-05-23 00:53:04 ADF37F1A715D6C56C8E065FD8569A9A4 224416 ----a-w- C:\Windows\System32\drivers\NISx64\1405000.01C\ironx64.sys

2014-05-23 00:53:04 56685951208AC81CF923B9B08BEDF3B7 169048 ----a-w- C:\Windows\System32\drivers\NISx64\1405000.01C\ccsetx64.sys

2014-05-23 00:53:04 2FD9346F9D76CB4192D37329CFA47A82 796760 ----a-w- C:\Windows\System32\drivers\NISx64\1405000.01C\srtsp64.sys

2014-05-19 01:26:34 F19E5E37ED8134B9E5F6287F2D3A75D7 177312 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-2357726830-4026716898-2536566515-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Google Update"="C:\Users\MARLI\AppData\Local\Google\Update\GoogleUpdate.exe /c"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"LG Intelligent Update"="C:\Program Files (x86)\lg_swupdate\giljabistart.exe Gilautouc"

"YouCam Mirage"="C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"

"YouCam Tray"="C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe /s"

"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Google Update"="C:\Users\MARLI\AppData\Local\Google\Update\GoogleUpdate.exe /c"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"PowerManager"="C:\Program Files\LG Software\LG Power Manager Suite\PowerManager.exe"

"HotkeyManager"="C:\Program Files\LG Software\LG OSD\HotkeyManager.exe"

"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"

"BTMTrayAgent"="rundll32.exe C:\Program Files\Motorola\Bluetooth\btmshell.dll,TrayApp"

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="  "

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LG Media FUNtasia]

"key"="SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run"

"item"="LG Media FUNtasia"

"hkey"="HKLM"

"command"=""C:\Program Files (x86)\LG Software\LG Media FUNtasia\MediaFuntasiaStart.exe" tray"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LG Smart Page]

"key"="SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run"

"item"="LG Smart Page"

"hkey"="HKLM"

"command"=""C:\Program Files (x86)\LG Software\LG Smart Page\TOStart.exe" tray"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Persistence]

"key"="SOFTWARE\Microsoft\Windows\CurrentVersion\Run"

"item"="Persistence"

"hkey"="HKLM"

"command"="C:\Windows\system32\igfxpers.exe"

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [22/05/2014 02:35]

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2357726830-4026716898-2536566515-1000Core.job --a------ C:\Users\MARLI\AppData\Local\Facebook\Update\FacebookUpdate.exe []

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2357726830-4026716898-2536566515-1000UA.job --a------ C:\Users\MARLI\AppData\Local\Facebook\Update\FacebookUpdate.exe []

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [Undetermined Task]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [22/05/2014 02:35]

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2357726830-4026716898-2536566515-1000Core.job --a------ C:\Users\MARLI\AppData\Local\Google\Update\GoogleUpdate.exe [10/05/2013 01:29]

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2357726830-4026716898-2536566515-1000UA.job --a------ [Undetermined Task]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

"C:\Windows\SysNative\tasks\DelayStart" ["C:\Program Files\LG Software\LG Speed Manager\DelayStart.exe"]

"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2357726830-4026716898-2536566515-1000Core" [C:\Users\MARLI\AppData\Local\Facebook\Update\FacebookUpdate.exe]

"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-2357726830-4026716898-2536566515-1000UA" [C:\Users\MARLI\AppData\Local\Facebook\Update\FacebookUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2357726830-4026716898-2536566515-1000Core" [C:\Users\MARLI\AppData\Local\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2357726830-4026716898-2536566515-1000UA" [C:\Users\MARLI\AppData\Local\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\Norton WSC Integration" ["C:\Program Files (x86)\Norton Internet Security\Engine\20.5.0.28\WSCStub.exe"]

"C:\Windows\SysNative\tasks{99C2ABE8-628C-46E9-A5D1-18D91F012F8D}" ["C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/6.3.0.105/pt/abandoninstall?source=lightinstaller&page=tsProgressBar]

"C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Analyzer" [C:\Program Files (x86)\Norton Internet Security\Engine\20.5.0.28\SymErr.exe]

"C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Processor" [C:\Program Files (x86)\Norton Internet Security\Engine\20.5.0.28\SymErr.exe]

"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\IPSFF" [18/05/2014 23:03]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

bejnhdlplbjhffionohbdnpcbobfejcc - C:\Program Files (x86)\Norton Internet Security\Engine\20.5.0.28\Exts\Chrome.crx[29/04/2014 09:31]

Norton Identity Protection - MARLI\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejnhdlplbjhffionohbdnpcbobfejcc

Google Wallet - MARLI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer

Boa noite Power Max,

Por gentileza, poderia me enviar o site confiável do AVG atual para baixar versão grátis.

Segue o relatório:

~ Relatório do ZHPDiag v2014.5.24.73 - Nicolas Coolman  (24/05/2014)

~ Iniciado por noggerini (25/05/2014 20:58:00)

~ Endereço do Website : http://nicolascoolman.fr

~ Tradução pelo utilizador

~ Estatuto da versão : 

~  Lista Branca : Ativado pelo programa

~ Elevação dos Privilégios : OK

~ Controle de Conta de Utilizador : Deactivate by user

---\ Navegadores Internet

MSIE: Internet Explorer v11.0.9600.17107

MFIE: Mozilla Firefox 29.0.1 (Defaut)

GCIE: Google Chrome v34.0.1847.137

---\ Informações sobre os produtos Windows

~ Langage: Portugais

Windows Vista (TM) Ultimate, 32-bit Service Pack 1 (Build 6000)

Windows Server License Manager Script : OK

Software Protection Service (Protection logicielle) : OK

Windows Automatic Updates : OK

---\ Softwares de proteçao do sistema

AVG 2012 v12.1.2242

Malwarebytes Anti-Malware versão 2.0.2.1012

---\ Softwares d'optimização do sistema

CCleaner v4.14

---\ Softwares de partilha do PeerToPeer (P2P)

---\ Monitoramento dos softwares

Adobe Flash Player 13 Plugin

Adobe Reader X

Java 7 Update 25

---\ Informações sobre o sistema

~ Processor: x86 Family 6 Model 37 Stepping 5, GenuineIntel

~ Operating System: 32 Bits

Boot mode: Normal (Normal boot)

Total RAM: 1908 MB (54% free)

System Restore: Activé (Enable)

System drive C: has 16 GB (14%) free of 113 GB

---\ Modo de conexão ao sistema

~ Computer Name: NOGGERINI-PC

~ User Name: noggerini

~ All Users Names: noggerini, Convidado, Christian, Administrador, 

~ Unselected Option: 045,061,O62,065,066,080,O82,089

Logged in as Administrator

---\ As variáveis de ambiente

~ System Unit : C:\

~ %AppZHP% : C:\Users\noggerini\AppData\Roaming\ZHP\

~ %AppData% : C:\Users\noggerini\AppData\Roaming\

~ %Desktop% : C:\Users\noggerini\Desktop\

~ %Favorites% : C:\Users\noggerini\Favorites\

~ %LocalAppData% : C:\Users\noggerini\AppData\Local\

~ %StartMenu% : C:\Users\noggerini\AppData\Roaming\Microsoft\Windows\Start Menu\

~ %Windir% : C:\Windows\

~ %System% : C:\Windows\System32\

---\ Enumeração das unidades dos discos

C: Hard drive, Flash drive, Thumb drive (Free 16 Go of 113 Go)

D: Hard drive, Flash drive, Thumb drive (Free 83 Go of 167 Go)

E: CD-ROM drive (Not Inserted)

H: Floppy drive, Flash card reader, USB Key (Free 6 Go of 7 Go)

---\ Estado do Centro de Segurança do Windows

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified

~ Security Center: 50 Legitimates Filtered in 00mn 00s

---\ Pesquisa particular de ficheiros genéricos

[MD5.8B88EBBB05A0E56B7DCC708498C02B3E] - (.Microsoft Corporation - Windows Explorer.) (.25/02/2011 - 02:30:54.) -- C:\Windows\Explorer.exe [2616320]

[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) (.13/07/2009 - 22:14:45.) -- C:\Windows\System32\Wininit.exe [96256]

[MD5.E4E829EE073E046B0EB19B5FECB19B8C] - (.Microsoft Corporation - Internet Extensions para Win32.) (.06/03/2014 - 02:41:49.) -- C:\Windows\System32\wininet.dll [1789440]

[MD5.998507B046BA314CE8245364C686FA67] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) (.04/03/2014 - 06:17:02.) -- C:\Windows\System32\Winlogon.exe [304128]

[MD5.E3AE23569749DE12D45BA3B489A036AE] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) (.20/11/2010 - 18:29:24.) -- C:\Windows\System32\sppcomapi.dll [193536]

[MD5.F81BB7E487EDCEAB630A7EE66CF23913] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.13/09/2013 - 21:48:58.) -- C:\Windows\system32\Drivers\AFD.sys [338944]

[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 22:26:15.) -- C:\Windows\system32\Drivers\atapi.sys [21584]

[MD5.77EA11B065E0A8AB902D78145CA51E10] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 20:11:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [70656]

[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 18:29:03.) -- C:\Windows\system32\Drivers\Cdrom.sys [108544]

[MD5.F024449C97EC1E464AAFFDA18593DB88] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 18:29:07.) -- C:\Windows\system32\Drivers\DfsC.sys [78336]

[MD5.9036377B8A6C15DC2EEC53E489D159B5] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 18:29:03.) -- C:\Windows\system32\Drivers\HDAudBus.sys [108544]

[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - (.Microsoft Corporation - Driver de porta i8042.) (.13/07/2009 - 20:11:24.) -- C:\Windows\system32\Drivers\i8042prt.sys [80896]

[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 20:54:29.) -- C:\Windows\system32\Drivers\IpNat.sys [101888]

[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.26/04/2011 - 23:17:22.) -- C:\Windows\system32\Drivers\MRxSmb.sys [123904]

[MD5.280122DDCF04B378EDD1AD54D71C1E54] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 18:29:08.) -- C:\Windows\system32\Drivers\netBT.sys [187904]

[MD5.C8DFF8D07755A66C7A4A738930F0FEAC] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) (.23/01/2014 - 23:18:22.) -- C:\Windows\system32\Drivers\ntfs.sys [1212352]

[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - (.Microsoft Corporation - Driver de porta paralela.) (.13/07/2009 - 20:45:35.) -- C:\Windows\system32\Drivers\Parport.sys [79360]

[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/07/2009 - 20:54:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [78848]

[MD5.3E21C083B8A01CB70BA1F09303010FCE] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 20:53:41.) -- C:\Windows\system32\Drivers\smb.sys [71168]

[MD5.B459575348C20E8121D6039DA063C704] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 18:29:07.) -- C:\Windows\system32\Drivers\tdx.sys [74752]

[MD5.F497F67932C6FA693D7DE2780631CFE7] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) (.20/11/2010 - 18:29:03.) -- C:\Windows\system32\Drivers\volsnap.sys [245632]

~ Generic Processes:  Scanned in 00mn 00s

---\ Estatuto dos ficheiros ocultos (Oculto/Total)

~ Mes images (My Pictures) : 1/291

~ Mes musiques (My Musics) : 11/129

~ Mes Videos (My Videos) : 1/8

~ Mes Favoris (My Favorites) : 1/16

~ Mes Documents (My Documents) : 1/574

~ Mon Bureau (My Desktop) : 12/7756

~ Menu demarrer (Programs) : 1/112

~ Hidden Files:  Scanned in 00mn 00s

---\ Processos lançados

[MD5.4F45ED469906494F9BF754E476390DBD] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe   [860472] [PID.3144]

[MD5.51138BEEA3E2C21EC44D0932C71762A8] - (...) -- ystem32\rundll32.exe   [0] [PID.3476]

[MD5.A63DC5C2EA944E6657203E0C8EDEAF61] - (.Microsoft Corporation - COM Surrogate.) -- C:\windows\system32\DllHost.exe   [7168] [PID.7984]

[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Google Installer.) -- C:\Program Files\Google\Update\GoogleUpdate.exe   [116648] [PID.1744]

[MD5.C98ACDE22458C8F46FD0503CB9E2D01F] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe   [223112] [PID.6604]

[MD5.345B1798395CEA9C178AFF1784FA2A37] - (.Google Inc. - Google Chrome.) -- C:\Users\noggerini\AppData\Local\Google\Chrome\Application\chrome.exe   [841032] [PID.4292]

[MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Google Installer.) -- C:\Users\noggerini\AppData\Local\Google\Update\GoogleUpdate.exe   [136176] [PID.1744]

[MD5.4FDF8F99557B275A3B5BF797761C7504] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [7879168] [PID.5524]

[MD5.CF87A1DE791347E75B98885214CED2B8] - (.Microsoft Corporation - Serviço da Plataforma de Proteção de Softwa.) -- C:\windows\system32\sppsvc.exe   [3179520] [PID.2320]

~ Processes Running:  Scanned in 00mn 00s

---\ Google Chrome, Arranque,Pesquisa,Extensões (G0,G1,G2)

C:\Users\noggerini\AppData\Local\Google\Chrome\User Data\Default\Preferences

G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Loja v.0.2 (Activé)

G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)

G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé)

G2 - GCE: Preference [User Data\Default] [nnjbodopomfddehlalfilheomcahbpei] GBBD Caixa Economica Federal v.3.5.0 (Désactivé)

G2 - GCE: Preference [User Data\Default] [pbcaplhfkihhldmlbjhgajdeghjdbffi] GBBD Caixa Economica Federal v.3.6.2 (Activé)

---\ Pasta de extensão do Google Chrome

~ Google Lines Browser: 35 Legitimates Filtered in 00mn 01s

---\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (P2,M0,M1,M2,M3)

C:\Users\noggerini\AppData\Roaming\Mozilla\Firefox\Profiles\usrxmupo.default-1396200960918\prefs.js

P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (...) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.)

P2 - FPN: [HKLM] [@raidcall.en/RCplugin] - (.Raidcall - Raidcall plugin.) -- C:\Users\noggerini\AppData\Roaming\rcru\plugins\nprcplugin.dll

P2 - FPN: [HKCU] [gastecnologia.com.br/sf/cef] - (.GAS Tecnologia - Internet Banking Helper.) -- C:\Users\noggerini\AppData\Local\GAS Tecnologia\GBBD\npsf_cef.dll

~ Firefox Browser: 24 Legitimates Filtered in 00mn 00s

---\ Internet Explorer, Arranque, Pesquisa, URLSearchHook( gancho de URL), Phishing (R0,R1,R3,R4)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.GAS Tecnologia - Internet Banking Helper.) (No version) -- (.not file.)

~ IE Browser: 12 Legitimates Filtered in 00mn 00s

---\ Internet Explorer, Gestão do Proxy (R5)

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1

R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

~ Proxy management:  Scanned in 00mn 00s

---\ Análise das linhas F0, F1, F2, F3 - Ficheiros ini, Carregamento Automático de programas

F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,

F2 - REG:system.ini: Shell=C:\Windows\explorer.exe

F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe

~ Keys:  Scanned in 00mn 00s

---\ Redireção do ficheiro Hosts (01)

~ Le fichier hosts est sain (The hosts file is clean).

~ Hosts File:  Scanned in 00mn 00s

~ Nombre de lignes (Lines number): 21

---\ Browser Helper Objects do navegador (02)

O2 - BHO: Samsung BHO Helper - {AA609D72-8482-4076-8991-8CDAE5B93BCB} . (...) -- C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll

~ BHO: 28 Legitimates Filtered in 00mn 00s

---\ Outras conexões do utilizador (04)

O4 - GS\QuickLaunch [noggerini]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\noggerini\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent

O4 - GS\Desktop [noggerini]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.)  -- C:\Users\noggerini\AppData\Roaming\uTorrent\uTorrent.exe   =>P2P.BitTorrent

O4 - GS\QuickLaunch [Christian]: µTorrent.lnk . (.BitTorrent, Inc. - µTorrent.)  -- C:\Program Files\uTorrent\uTorrent.exe   =>P2P.BitTorrent

~ Global Startup: 3 Legitimates Filtered in 00mn 01s

---\ Aplicações iniciadas por registo & pastas (04)

O4 - HKLM..\Run: [AVG_TRAY] . (.AVG Technologies CZ, s.r.o. - AVG Tray Monitor.) -- C:\Program Files\AVG\AVG2012\avgtray.exe 

O4 - HKUS.DEFAULT..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 

O4 - HKUS.DEFAULT..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe   =>.Skype Technologies S.A.

O4 - HKUS.DEFAULT..\Run: [Google Update] . (.Google Inc. - Google Installer.) -- C:\windows\system32\config\systemprofile\AppData\Local\Google\Update\GoogleUpdate.exe 

O4 - HKUS\S-1-5-18..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 

O4 - HKUS\S-1-5-18..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe   =>.Skype Technologies S.A.

O4 - HKUS\S-1-5-18..\Run: [Google Update] . (.Google Inc. - Google Installer.) -- C:\windows\system32\config\systemprofile\AppData\Local\Google\Update\GoogleUpdate.exe 

O4 - HKUS\S-1-5-19..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 

O4 - HKUS\S-1-5-20..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 

O4 - HKUS\S-1-5-19..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe   =>.Microsoft Corporation

O4 - HKUS\S-1-5-20..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe   =>.Microsoft Corporation

~ Application:  Scanned in 00mn 00s

---\ Boutões da barra de ferramentas principal do Internet Explorer (09)

O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} . (...) -- C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll

O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} . (.AVG Technologies CZ, s.r.o. - AVG Do Not Track for IE.) -- C:\Program Files\AVG\AVG2012\avgdtiex.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- D:\Program Files\Microsoft Office\Office12\REFBARH.ICO

~ IE Extra Buttons:  Scanned in 00mn 00s

---\ Alteração Dominio/Clientes DNS (017)

O17 - HKLM\System\CCS\Services\Tcpip..{4B15A5D3-F120-4800-9842-366758EE21A4}: DhcpNameServer = 192.168.42.129

O17 - HKLM\System\CCS\Services\Tcpip..{6A5A642B-EF61-405D-BB77-67CAB926AAEA}: DhcpNameServer = 192.168.42.129

O17 - HKLM\System\CCS\Services\Tcpip..{965BCC97-4AB3-47D8-A7BF-B5A19B29A96D}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip..{C715CAFD-29BC-4D3B-B6D2-E2FFEEF46C75}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS1\Services\Tcpip..{4B15A5D3-F120-4800-9842-366758EE21A4}: DhcpNameServer = 192.168.42.129

O17 - HKLM\System\CS1\Services\Tcpip..{6A5A642B-EF61-405D-BB77-67CAB926AAEA}: DhcpNameServer = 192.168.42.129

O17 - HKLM\System\CS1\Services\Tcpip..{965BCC97-4AB3-47D8-A7BF-B5A19B29A96D}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS1\Services\Tcpip..{C715CAFD-29BC-4D3B-B6D2-E2FFEEF46C75}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS2\Services\Tcpip..{4B15A5D3-F120-4800-9842-366758EE21A4}: DhcpNameServer = 192.168.42.129

O17 - HKLM\System\CS2\Services\Tcpip..{6A5A642B-EF61-405D-BB77-67CAB926AAEA}: DhcpNameServer = 192.168.42.129

O17 - HKLM\System\CS2\Services\Tcpip..{965BCC97-4AB3-47D8-A7BF-B5A19B29A96D}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CS2\Services\Tcpip..{C715CAFD-29BC-4D3B-B6D2-E2FFEEF46C75}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

~ Domain:  Scanned in 00mn 00s

---\ Protocolo adicional (018)

O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.dll  =>.Microsoft Corporation

~ Protocole Additionnel:  Scanned in 00mn 00s

---\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)

O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll

~ Winlogon:  Scanned in 00mn 00s

---\ Valor do Registo AppInit_DLLs e sub-chaves Winlogon Notify (autorun) (O20)

O20 - AppInit_DLLs: . (...) - C:\Program Files\SupTab\SEARCH~1.dll (.not file.)  =>PUP.SupTab

~ AppInit DLL:  Scanned in 00mn 00s

---\ Tarefas planificadas automaticamente (039)

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater   [902]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2570333737-3344067203-222050451-1000Core   [922]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2570333737-3344067203-222050451-1000UA   [944]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2570333737-3344067203-222050451-1001Core   [922]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2570333737-3344067203-222050451-1001UA   [944]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore   [1058]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA   [1062]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2570333737-3344067203-222050451-1000Core   [1042]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2570333737-3344067203-222050451-1000UA   [1094]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2570333737-3344067203-222050451-1001Core   [1042]

O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2570333737-3344067203-222050451-1001UA   [1094]

~ Scheduled Task: 38 Legitimates Filtered in 00mn 06s

---\ Componentes instalados (ActiveSetup Installed Components) (040)

O40 - ASIC: (no name) - {Y18RLJXI-4TGW-73W7-N61G-B8TH60387638} . (...) -- C:\windows\system32\WinDir\Svchost.exe

O40 - ASIC: Installed Component - S-1-5-21-2570333737-3344067203-222050451-1000 - {Y18RLJXI-4TGW-73W7-N61G-B8TH60387638} -- Not Hexadécimal CLSID

~ Active Setup: 13 Legitimates Filtered in 00mn 00s

---\ Software instalados (042)

O42 - Logiciel: Gramblr - (.Gramblr.) [HKCU] -- Gramblr

O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM] -- {32603085-C839-4226-A1FD-BF8FAE0185CB}

O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM] -- IncrediMail

O42 - Logiciel: Macro Expert - (.Grass Software.) [HKLM] -- Macro

O42 - Logiciel: PkHonor - (.PkHonor.) [HKLM] -- PkHonor_0

O42 - Logiciel: SPCA1628 PC Driver - (.Icatch.) [HKLM] -- {5F1C7F21-AB33-4362-BCEE-6E0FD1EDC6D8}

O42 - Logiciel: SwiftKit - (...) [HKCU] -- SwiftKit

~ Logic: 23 Legitimates Filtered in 00mn 02s

---\ HKCU & HKLM Software Keys

[HKCU\Software\Bonanza]  =>Adware.BonanzaDeals

[HKCU\Software\DVDAuthor2]

[HKCU\Software\DVDAuthorPro]

[HKCU\Software\GbAs]

[HKCU\Software\GrassSoft]

[HKCU\Software\IncrediMail]

[HKCU\Software\Morten]

[HKCU\Software\RuneScape]

[HKLM\Software\AutoHelpDesk]

[HKLM\Software\FileExtractor]

[HKLM\Software\GameVicio]

[HKLM\Software\GrassSoft]

[HKLM\Software\Icatch CA1628]

[HKLM\Software\Icatch]

[HKLM\Software\RCBR]

~ Key Software: 418 Legitimates Filtered in 00mn 02s

---\ Conteúdo das pastas Programs/ProgramFiles/ProgramData/AppData (O43)

O43 - CFD: 28/05/2013 - 14:18:24 - [] ----D C:\Program Files\Acelerador de Downloads

O43 - CFD: 13/12/2012 - 15:46:09 - [] ----D C:\Program Files\Buscapé

O43 - CFD: 15/03/2014 - 23:58:26 - [] ----D C:\Program Files\DVDlabPro2

O43 - CFD: 10/01/2014 - 23:32:36 - [] ----D C:\Program Files\GameVicio

O43 - CFD: 26/07/2012 - 18:20:15 - [] ----D C:\Program Files\GrassSoft

O43 - CFD: 23/03/2012 - 14:22:20 - [] ----D C:\Program Files\IncrediMail

O43 - CFD: 06/01/2014 - 16:15:52 - [] ----D C:\Program Files\Pando Networks

O43 - CFD: 04/03/2012 - 14:42:01 - [0] ----D C:\Program Files\Recorder

O43 - CFD: 16/12/2012 - 12:36:59 - [] ----D C:\Program Files\SPCA1628

O43 - CFD: 25/05/2012 - 16:40:09 - [] ----D C:\Program Files\VIVO INTERNET

O43 - CFD: 23/05/2014 - 15:19:49 - [0] ----D C:\Program Files\WebBiNg

O43 - CFD: 26/07/2012 - 18:20:20 - [] ----D C:\ProgramData\Grasssoft

O43 - CFD: 23/03/2012 - 14:23:20 - [] ----D C:\ProgramData\IM

O43 - CFD: 23/03/2012 - 14:22:20 - [] ----D C:\ProgramData\IncrediMail

O43 - CFD: 23/05/2014 - 17:10:01 - [0] ----D C:\ProgramData\WebBiNg

O43 - CFD: 26/07/2012 - 18:20:31 - [] ----D C:\Users\noggerini\AppData\Roaming\Grasssoft

O43 - CFD: 09/05/2012 - 14:42:50 - [] ----D C:\Users\noggerini\AppData\Roaming\matrixCache11

O43 - CFD: 26/01/2014 - 14:21:18 - [] ----D C:\Users\noggerini\AppData\Roaming\rcru

O43 - CFD: 17/12/2011 - 23:54:47 - [] ----D C:\Users\noggerini\AppData\Roaming\Recorder

O43 - CFD: 01/10/2013 - 13:02:14 - [] ----D C:\Users\noggerini\AppData\Roaming\RSBot

O43 - CFD: 11/08/2012 - 16:12:46 - [] ----D C:\Users\noggerini\AppData\Roaming\RsPsCoding

O43 - CFD: 08/06/2012 - 23:40:23 - [] ----D C:\Users\noggerini\AppData\Roaming\VIVO INTERNET

O43 - CFD: 23/03/2012 - 19:08:27 - [] ----D C:\Users\noggerini\AppData\Local\IM

O43 - CFD: 10/01/2014 - 23:32:36 - [] ----D C:\Users\noggerini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio

O43 - CFD: 05/11/2013 - 23:16:38 - [] ----D C:\Users\noggerini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gramblr

O43 - CFD: 31/10/2012 - 03:11:35 - [] ----D C:\Users\noggerini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RuneScape

~ Program Folder: 298 Legitimates Filtered in 00mn 05s

---\ Últimos ficheiros alterados ou criados no Windows e Sistema32 (044)

O44 - LFC:[MD5.0DC5AF80D059DEC792B665ED598C6567] - 23/05/2014 - 13:15:15 ---A- . (.SQLite Development Team - SQLite Dynamic Link Library (No TCL).) -- C:\Windows\System32\sqlite3.dll   [536576]

O44 - LFC:[MD5.68A3FD294F7F12479A66559DCB2CC23C] - 23/05/2014 - 17:03:31 ----- . (...) -- C:\folders.txt   [100]

O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 23/05/2014 - 17:04:41 ---A- . (...) -- C:\Windows\zoek-delete.exe   [24064]

O44 - LFC:[MD5.D5B3EF155F827846C37CBAD4F48AC591] - 23/05/2014 - 17:10:18 ----- . (...) -- C:\zoek-results.log   [109817]

O44 - LFC:[MD5.D7A8421CAEFE9876BEBF34D410193D26] - 25/05/2014 - 12:54:28 ---A- . (...) -- C:\Windows\System32\prfc0416.dat   [1370906]

O44 - LFC:[MD5.97CCF23E3C38655151FB1CF4E667EF84] - 25/05/2014 - 12:54:28 ---A- . (...) -- C:\Windows\System32\prfh0416.dat   [1990140]

~ Files: 47 Legitimates Filtered in 00mn 33s

---\ Pesquisa de infeções nos drivers (HKLM)(TDSD) (O52)

O52 - TDSD: \Drivers32"vidc.mjpg"="bdmjpeg.dll" . (...) -- C:\Windows\System32\bdmjpeg.dll

O52 - TDSD: \Drivers32"vidc.mpeg"="bdmpegv.dll" . (...) -- C:\Windows\System32\bdmpegv.dll

O52 - TDSD: \Drivers32"msacm.bdmpeg"="bdmpega.acm" . (...) -- C:\Windows\System32\bdmpega.acm

O52 - TDSD: \drivers.desc"bdmjpeg.dll"="Bandi Motion Jpeg" . (...) -- C:\Windows\System32\bdmjpeg.dll

O52 - TDSD: \drivers.desc"bdmpegv.dll"="Bandi MPEG-1 Video" . (...) -- C:\Windows\System32\bdmpegv.dll

O52 - TDSD: \drivers.desc"bdmpega.acm"="Bandi MPEG-1 Audio" . (...) -- C:\Windows\System32\bdmpega.acm

~ TDSD: 34 Legitimates Filtered in 00mn 01s

---\ Enumeração das chaves do registo StartupReg (SMSR) (O53)

O53 - SMSR:HKLM...\startupreg\Gyazo  [Key] . (.Nota Inc. - Gyazo Station.) -- C:\Program Files\Gyazo\GyStation.exe

O53 - SMSR:HKLM...\startupreg\Macro Manager  [Key] . (.GrassSoftware - Macro Manager.) -- C:\Program Files\GrassSoft\Macro Expert\MacroManager.exe

O53 - SMSR:HKLM...\startupreg\UIExec  [Key] . (...) -- C:\Program Files\Banda Ancha Movil\UIexec.exe

O53 - SMSR:HKLM...\startupreg\uTorrent  [Key] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\noggerini\AppData\Roaming\uTorrent\uTorrent.exe  =>P2P.BitTorrent

~ SMSR Keys: 29 Legitimates Filtered in 00mn 01s

---\ Enumeração das chaves do registo PoliciesSystem (MWPS) (O55)

O55 - MWPS:[HKLM...\Policies\System] - "EnableLUA"=0

O55 - MWPS:[HKLM...\Policies\System] - "EnableUIADesktopToggle"=0

O55 - MWPS:[HKLM...\Policies\System] - "PromptOnSecureDesktop"=0

O55 - MWPS:[HKLM...\Policies\System] - "FilterAdministratorToken"=0

~ MWPS: 19 Legitimates Filtered in 00mn 00s

---\ Lista dos drivers do sistema (SDL) (O58)

O58 - SDL:27/07/2012 - 19:30:06 R--A- . (.360.cn - 360FileOem.) -- C:\Windows\System32\Drivers\360FileOem.sys   [146304]

O58 - SDL:27/07/2012 - 19:30:06 R--A- . (.360安全中心 - 360HookOem.) -- C:\Windows\System32\Drivers\360HookOem.sys   [54912]

O58 - SDL:27/07/2012 - 19:30:06 R--A- . (.360安全中心 - 360RegOem.) -- C:\Windows\System32\Drivers\360RegOem.sys   [23168]

O58 - SDL:11/12/2012 - 12:13:28 R--A- . (.360安全中心 - 360安全卫士 - SelfProtection.) -- C:\Windows\System32\Drivers\360SpOEM.sys   [64048]

O58 - SDL:09/11/2009 - 10:14:50 ---A- . (.Haier Inc. - USB/Serial Device Driver.) -- C:\Windows\System32\Drivers\3GDatausbser.sys   [106112]

O58 - SDL:13/07/2009 - 22:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [453712]

O58 - SDL:08/10/2010 - 16:55:06 ---A- . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\Windows\System32\Drivers\ewdcsc.sys   [25856]

O58 - SDL:13/07/2009 - 19:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [26624]

O58 - SDL:06/08/2010 - 07:42:34 ---A- . (.DiBcom SA - DiBcom AVSTREAM BDA driver.) -- C:\Windows\System32\Drivers\mod7700.sys   [861696]

O58 - SDL:12/09/2011 - 21:55:40 ---A- . (.Windows (R) 2003 DDK 3790 provider - Generic Port I/O for Win32.) -- C:\Windows\System32\Drivers\rtport.sys   [15656]

O58 - SDL:26/07/2009 - 23:43:18 ---A- . (.PowerISO Computing, Inc. - PowerISO Virtual Drive.) -- C:\Windows\System32\Drivers\scdemu.sys   [58908]

O58 - SDL:13/07/2009 - 22:19:04 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [21072]

O58 - SDL:26/12/2008 - 12:56:04 ---A- . (.Avnex - Avnex Ltd. Virtual Audio Device (WDM).) -- C:\Windows\System32\Drivers\vcsvad.sys   [17792]

O58 - SDL:13/07/2009 - 18:40:41 ---A- . (...) -- C:\Windows\System32\ANSI.SYS   [9029]

O58 - SDL:13/07/2009 - 18:40:44 ---A- . (...) -- C:\Windows\System32\country.sys   [27097]

O58 - SDL:13/07/2009 - 18:40:40 ---A- . (...) -- C:\Windows\System32\HIMEM.SYS   [4768]

O58 - SDL:13/07/2009 - 18:40:43 ---A- . (...) -- C:\Windows\System32\KEY01.SYS   [42809]

O58 - SDL:13/07/2009 - 18:40:43 ---A- . (...) -- C:\Windows\System32\KEYBOARD.SYS   [42537]

O58 - SDL:13/07/2009 - 18:40:23 ---A- . (...) -- C:\Windows\System32\NTDOS.SYS   [27866]

O58 - SDL:13/07/2009 - 18:40:31 ---A- . (...) -- C:\Windows\System32\NTDOS404.SYS   [29146]

O58 - SDL:13/07/2009 - 18:40:35 ---A- . (...) -- C:\Windows\System32\NTDOS411.SYS   [29370]

O58 - SDL:13/07/2009 - 18:40:39 ---A- . (...) -- C:\Windows\System32\NTDOS412.SYS   [29274]

O58 - SDL:13/07/2009 - 18:40:27 ---A- . (...) -- C:\Windows\System32\NTDOS804.SYS   [29146]

O58 - SDL:13/07/2009 - 18:40:11 ---A- . (...) -- C:\Windows\System32\NTIO.SYS   [33952]

O58 - SDL:13/07/2009 - 18:40:15 ---A- . (...) -- C:\Windows\System32\NTIO404.SYS   [34672]

O58 - SDL:13/07/2009 - 18:40:17 ---A- . (...) -- C:\Windows\System32\NTIO411.SYS   [35776]

O58 - SDL:13/07/2009 - 18:40:19 ---A- . (...) -- C:\Windows\System32\NTIO412.SYS   [35536]

O58 - SDL:13/07/2009 - 18:40:13 ---A- . (...) -- C:\Windows\System32\NTIO804.SYS   [34672]

~ Drivers: 123 Legitimates Filtered in 00mn 08s

---\ Lista das ferramentas de remoção de vírus (LAT) (063)

O63 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM] -- Usbfix

O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman

~ ADS:  Scanned in 00mn 00s

---\ Associações Shell Spawning (O67)

O67 - Shell Spawning: <.js> <JSFile>[HKLM..\open\Command] (.Not Key.)

~ FASS Keys: 11 Legitimates Filtered in 00mn 00s

---\ Menu de inicialização Internet (068)

O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe

O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\noggerini\AppData\Local\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <Google Chrome.4UE24D3HPUKFX3U5DPVLKCJM6Q> <Google Chrome>[HKLM..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Christian\AppData\Local\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <Google Chrome.DELEPMBAQWAH2GJQGLFZOWJONI> <Google Chrome>[HKLM..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Christian\AppData\Local\Google\Chrome\Application\chrome.exe

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe

~ Keys:  Scanned in 00mn 00s

---\ Pesquisa de infeção nos navegadores da Internet (SBI) (069)

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com

O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com

~ Keys:  Scanned in 00mn 00s

---\ Pesquisa adicional à raiz do sistema (radicular) (SPRF) (O84)

[MD5.FD215EA56282F0A284B604B062FB61BF] [SPRF][29/05/2013] (...) -- C:\Users\noggerini\AppData\Roaming\linetime.dat   [2918400]

[MD5.6347DD42393E7AB03C702866BC4FF1F4] [SPRF][29/05/2013] (...) -- C:\Users\noggerini\AppData\Roaming\lineup.dat   [1433088]

[MD5.FE46AFC96DB279DAB1AB4F17A450C4A5] [SPRF][29/05/2013] (...) -- C:\Users\noggerini\AppData\Roaming\linewab.dat   [603136]

[MD5.F1B1E1871EDA3684BF1093CED450F4A6] [SPRF][11/04/2012] (...) -- C:\Users\noggerini\AppData\Roaming\noggerinilog.dat   [2500797]

[MD5.E5B1FC7AF5380EC0F03C91F379CE8DEA] [SPRF][02/09/2013] (...) -- C:\Users\noggerini\AppData\Roaming\unins000.dat   [11824]

[MD5.F9B2E8A93DD9DDB713FE3693B90314CA] [SPRF][21/01/2014] (.CAIXA - Instalação do Módulo Adicional de Segurança CAIXA.) -- C:\Users\noggerini\Desktop\iGBPCEFsf (1).exe   [2546504]

[MD5.BC718F84DA6C8E3ACB00CCD3603C5DF8] [SPRF][22/04/2014] (...) -- C:\Users\noggerini\Desktop\off.bat   [19]

[MD5.503833FBFBFAE0203C61BB41E33D2886] [SPRF][01/03/2014] (.NOS Games - Ajude Tequimumdo a Pegar as Argolas do Poder para Salvar Tecworl.) -- C:\Users\noggerini\Desktop\Tequimumdo - the Game.exe   [5218347]

[MD5.C4B321E39DC167064A98E6F7670AD8CF] [SPRF][23/05/2014] (...) -- C:\Users\nog

Oi Adriana.  

Abra novamente o  ZHPDiag

|- Clique em "PESQUISAR" e aguarde a conclusão.

|- Clique OK e, ao concluir, poste o relatório ZHPDiag.txt