Possível Adware

Anônima
2014-03-14T19:05:18+00:00

Olá, eu venho procurado a bastante tempo na internet um adware cleaner ou um antivirus capaz de achar esse possível adware, de uma certa versão de um aplicativo meu a seguinte mensagem aparece:

Desculpem se essa é a área errada ou se todo o tópico está errado mas ainda não sou usuário ativo da comunidade. Bom, se alguém puder ajudar

Att. Doom

Windows para casa | Versões anteriores do Windows | Segurança e privacidade

Pergunta bloqueada. Essa pergunta foi migrada da Comunidade de Suporte da Microsoft. É possível votar se é útil, mas não é possível adicionar comentários ou respostas ou seguir a pergunta.

0 comentários

43 respostas

Classificar por: Mais útil
Mais útil Mais Novo Mais Antigo
  1. Anônima
    2014-03-16T21:41:27+00:00

    Desative temporariamente seu antivirus para evitar conflitos.

    *Clique com o botão direito do mouse no Zoek.exe e selecione Executar como administrador

    * Selecione e copie todo este texto destacado em negrito e cole-o no espaço em branco do Zoek

    *Clique em Run Script

    *Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

    *Caso a reinicialização do PC seja solicitada, clique OK

    * Poste o log do Zoek que estará em C:*zoek-results.txt* em sua próxima resposta.

    Esta resposta foi útil?

    0 comentários
  2. Anônima
    2014-03-16T20:36:11+00:00

    Parte 2 (Limite de caracteres daqui da resposta, tive que dividir)

    ==== Registry Search Results for "ygopro" ======================

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\ygopro_vs_RASAPI32]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\ygopro_vs_RASMANCS]

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

    "TCP Query User{F425E063-4403-4E45-AA04-56453318F087}C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe|Name=YGOPRO Automatic Dueling System|Desc=YGOPRO Automatic Dueling System|Defer=User|"

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

    "UDP Query User{0B19E548-2A64-4E59-A4F6-6A36B13100EF}C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe|Name=YGOPRO Automatic Dueling System|Desc=YGOPRO Automatic Dueling System|Defer=User|"

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

    "TCP Query User{F425E063-4403-4E45-AA04-56453318F087}C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe|Name=YGOPRO Automatic Dueling System|Desc=YGOPRO Automatic Dueling System|Defer=User|"

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

    "UDP Query User{0B19E548-2A64-4E59-A4F6-6A36B13100EF}C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe|Name=YGOPRO Automatic Dueling System|Desc=YGOPRO Automatic Dueling System|Defer=User|"

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

    "TCP Query User{F425E063-4403-4E45-AA04-56453318F087}C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe|Name=YGOPRO Automatic Dueling System|Desc=YGOPRO Automatic Dueling System|Defer=User|"

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

    "UDP Query User{0B19E548-2A64-4E59-A4F6-6A36B13100EF}C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\program files (x86)\yu-gi-oh pro\ygopro_vs.exe|Name=YGOPRO Automatic Dueling System|Desc=YGOPRO Automatic Dueling System|Defer=User|"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE519A5CF300499E00]

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE519A5CF300499E00]

    "Name"="YGOPRO_VS.EXE"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51AC92FE004B0600]

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51AC92FE004B0600]

    "Name"="YGOPRO_VS.EXE"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51ACBBC6004ADE00]

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51ACBBC6004ADE00]

    "Name"="YGOPRO_VS.EXE"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51B253DA004C4000]

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51B253DA004C4000]

    "Name"="YGOPRO_VS.EXE"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51C47D77004ADE00]

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51C47D77004ADE00]

    "Name"="YGOPRO_VS.EXE"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51F27151004AFC00]

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE51F27151004AFC00]

    "Name"="YGOPRO_VS.EXE"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE520E7994004E0C00]

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE520E7994004E0C00]

    "Name"="YGOPRO_VS.EXE"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE520F5398004E0C00]

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\DirectInput\YGOPRO_VS.EXE520F5398004E0C00]

    "Name"="YGOPRO_VS.EXE"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1d37059_0]

    @="{0.0.0.00000000}.{c5af25c3-27cf-4d81-bfac-cdb7fe1d6f9e}|\Device\HarddiskVolume1\Program Files (x86)\Yu-Gi-Oh PRO\ygopro_vs.exe%b{00000000-0000-0000-0000-000000000000}"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\Internet Explorer.old\LowRegistry\Audio\PolicyConfig\PropertyStore\1d37059_0]

    @="{0.0.0.00000000}.{c5af25c3-27cf-4d81-bfac-cdb7fe1d6f9e}|\Device\HarddiskVolume1\Program Files (x86)\Yu-Gi-Oh PRO\ygopro_vs.exe%b{00000000-0000-0000-0000-000000000000}"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\Internet Explorer.old\LowRegistry\Audio\PolicyConfig\PropertyStore\5371f027_0]

    @="{0.0.0.00000000}.{8707d699-78dd-4145-aba2-5f0864f73c60}|\Device\HarddiskVolume1\Program Files (x86)\Yu-Gi-Oh PRO\ygopro_vs.exe%b{00000000-0000-0000-0000-000000000000}"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Microsoft\Internet Explorer.old\LowRegistry\Audio\PolicyConfig\PropertyStore\f4c196ea_0]

    @="{0.0.0.00000000}.{8707d699-78dd-4145-aba2-5f0864f73c60}|\Device\HarddiskVolume1\Program Files (x86)\ygopro-1.031.0-V2-Percy-full\ygopro_vs.exe%b{00000000-0000-0000-0000-000000000000}"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "Item_ShortFilename"="ygopro-1.032.1-V5-Percy-full.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "Item_MainURL"="http://server2.ygopro.it/downloads/steeldarkeagel/ygopro-1.032.1-V5-Percy-full.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "Item_HostName"="server2.ygopro.it"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "Item_OutputFilename"="C:\Users\Doom\Downloads\ygopro-1.032.1-V5-Percy-full.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "Item_Referer"="http://www.ygopro.co/Downloadmembers.aspx"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "FDM_OutputFilename"="C:\Users\Doom\Downloads\ygopro-1.032.1-V5-Percy-full.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "FDM_ShortFilename"="ygopro-1.032.1-V5-Percy-full.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "L_LocationURL1"="http://server2.ygopro.it/downloads/steeldarkeagel/ygopro-1.032.1-V5-Percy-full.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "L_LastGoodKnownURL1"="http://server2.ygopro.it/downloads/steeldarkeagel/ygopro-1.032.1-V5-Percy-full.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "L_ServerName1"="server2.ygopro.it"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "L_Referer1"="http://www.ygopro.co/Downloadmembers.aspx"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{EF4A6BA0-2652-4bff-8AC7-9F21F465495A}]

    "FCM_CacheFileName"="C:\Users\Doom\Downloads\ygopro-1.032.1-V5-Percy-full.rar.dap"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{F949E6B4-CAF4-4218-9CD2-0128981A5BEE}]

    "Item_ShortFilename"="YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{F949E6B4-CAF4-4218-9CD2-0128981A5BEE}]

    "Item_MainURL"="http://download1237.mediafire.com/gx41g54u74og/sv933rb3ngjvrb9/YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{F949E6B4-CAF4-4218-9CD2-0128981A5BEE}]

    "Item_OutputFilename"="C:\Users\Doom\Downloads\YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\SpeedBit\Download Accelerator\FileList{F949E6B4-CAF4-4218-9CD2-0128981A5BEE}]

    "Item_Referer"="http://www.mediafire.com/download/sv933rb3ngjvrb9/YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\WinRAR\ArcHistory]

    "0"="C:\Users\Doom\Downloads\ygopro-1.031.0-V2-Percy-full.7z"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\WinRAR\ArcHistory]

    "1"="C:\Users\Doom\Downloads\ygopro-1032.1-v2-percy-update.7z"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]

    "C:\Program Files (x86)\Yu-Gi-Oh PRO\ygopro_vs.exe"="YGOPRO Automatic Dueling System"

    [HKEY_USERS\S-1-5-21-1654926789-2056486712-2598073010-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]

    "C:\Program Files (x86)\Yu-Gi-Oh PRO\ygopro_vs.exe"="YGOPRO Automatic Dueling System"

    ==== Firefox Extensions Registry ======================

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

    "******@speedbit.com"="C:\Program Files (x86)\DAP\daplinkchecker" [17/04/2013 08:53]

    ==== Chrome Look ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

    bodfdknjhecmadheclfjkhhiofeagdbh - C:\Program Files (x86)\DAP\daplinkchecker.crx[12/09/2012 10:24]

    ffdcfjdljhbehggjdkdioajnknjcpbjb - C:\Program Files (x86)\DAP\DAPChrome\DAPChrome6.crx[12/09/2012 10:26]

    gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[26/12/2013 13:13]

    nfengeggddojhakldhlpjdlddgkkjkdd - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx[22/04/2013 19:01]

    Google Docs - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

    Google Drive - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

    YouTube - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

    DAP Link Checker - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodfdknjhecmadheclfjkhhiofeagdbh

    Google Search - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

    Download Accelerator Plus (DAP) - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb

    avast Online Security - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki

    Advanced SystemCare Surfing Protection - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd

    Google Wallet - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

    Gmail - Doom\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://www.google.com.br/"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

    "Default_Page_URL"="http://www.google.com"

    "Start Page"="http://www.google.com"

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

    "Default_Page_URL"="http://www.google.com"

    "Start Page"="http://www.google.com"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

    "Tabs"="http://google.com"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]

    "Tabs"="http://google.com"

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://www.google.com.br/"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

    "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

    "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

    "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

    "Tabs"="res://ieframe.dll/tabswelcome.htm"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]

    "Tabs"="res://ieframe.dll/tabswelcome.htm"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

    ==== Reset Google Chrome ======================

    C:\Users\Doom\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully

    C:\Users\Doom\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

    ==== shortcuts on Users Desktops ======================

    C:\Users\Doom\Desktop\Diablo III.lnk - C:\Program Files (x86)\Diablo III\Diablo III Launcher.exe 

    C:\Users\Doom\Desktop\Doom Builder 2.lnk - C:\Program Files (x86)\Doom Builder 2\Builder.exe 

    C:\Users\Doom\Desktop\Game Booster 3.lnk - C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe 

    C:\Users\Doom\Desktop\Launch Test Drive Unlimited.lnk - C:\Program Files (x86)\Atari\Test Drive Unlimited\TestDriveUnlimited.exe 

    C:\Users\Doom\Desktop\Meu Computador.lnk -  

    C:\Users\Doom\Desktop\Meus documentos.lnk - C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms 

    C:\Users\Doom\Desktop\Minecraft.lnk - C:\Users\Doom\AppData\Roaming.minecraft\minecraft launcher\Minecraft Launcher.exe 

    C:\Users\Doom\Desktop\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe 

    C:\Users\Doom\Desktop\SQLite Database.lnk - C:\Program Files (x86)\SqliteBrowser\SQLite Database Browser 2.0 b1.exe 

    C:\Users\Doom\Desktop\TeknoMW3.lnk - C:\Program Files (x86)\Call of Duty Modern Warfare 3\TeknoMW3.exe 

    ==== shortcuts on All Users Desktop ======================

    C:\Users\Public\Desktop\Blur(TM).lnk - C:\Program Files (x86)\Activision\Blur(TM)\Blur.exe 

    C:\Users\Public\Desktop\foobar2000.lnk - C:\Program Files (x86)\foobar2000\foobar2000.exe 

    C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

    C:\Users\Public\Desktop\The Sims™ 3.lnk -  

    ==== shortcuts in Users Start Menu ======================

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari\Test Drive Unlimited\Start Test Drive Unlimited.lnk - C:\Program Files (x86)\Atari\Test Drive Unlimited\TestDriveUnlimited.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari\Test Drive Unlimited\Uninstall Test Drive Unlimited.lnk - C:\Windows\SysWOW64\msiexec.exe /i {C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari\Test Drive Unlimited\Documentation\Atari - TDU.lnk - C:\Program Files (x86)\Atari\Test Drive Unlimited\Atari - TDU.url 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari\Test Drive Unlimited\Documentation\Atari WebSite.lnk - C:\Program Files (x86)\Atari\Test Drive Unlimited\Extras\Atari UK Web Site.url 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari\Test Drive Unlimited\Documentation\Install Acrobat Reader.lnk - C:\Program Files (x86)\Atari\Test Drive Unlimited\Extras\Acrobat Reader GB.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari\Test Drive Unlimited\Documentation\Manual.lnk - C:\Program Files (x86)\Atari\Test Drive Unlimited\Extras\Manual GB.pdf 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atari\Test Drive Unlimited\Documentation\Readme.lnk - C:\Program Files (x86)\Atari\Test Drive Unlimited\Readme.htm 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\Call of Duty Modern Warfare 3\Atualizador GameVicio.lnk - C:\Program Files (x86)\GameVicio\Call of Duty Modern Warfare 3\Atualizador.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\Call of Duty Modern Warfare 3\Desinstalar a Tradução.lnk -  

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\Call of Duty Modern Warfare 3\Leia-me.lnk - C:\Program Files (x86)\GameVicio\Call of Duty Modern Warfare 3\notas.html 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\Call of Duty Modern Warfare 3\Problemas Técnicos.lnk -  

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameVicio\Call of Duty Modern Warfare 3\Página GameVicio Brasil®.lnk -  

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft\Minecraft.lnk - C:\Users\Doom\AppData\Roaming.minecraft\minecraft launcher\Minecraft Launcher.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft\Uninstall.lnk - C:\Users\Doom\AppData\Roaming.minecraft\minecraft launcher\Uninstall.exe 

    ==== shortcuts in All Users Start Menu ======================

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\LogMeIn Hamachi.lnk - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe 

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\Uninstall.lnk - C:\Windows\SysWOW64\msiexec.exe /i {91BA5476-8B26-49E4-84B2-9EFE10917B33} REMOVE=ALL

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3\Desinstalar Smart Defrag 3.lnk - C:\Program Files (x86)\IObit\Smart Defrag 3\unins000.exe 

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3\Smart Defrag 3.lnk - C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe 

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPDiag.lnk - C:\Program Files (x86)\ZHPDiag\ZHPhep.exe 

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP\ZHPFix.lnk - C:\Program Files (x86)\ZHPDiag\ZHPFix\ZHPhep.exe 

    ==== shortcuts in Quick Launch ======================

    C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

    C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

    C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

    C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Dofus.lnk - C:\Program Files (x86)\Dofus\UpLauncher.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ManyCam.lnk - C:\Program Files (x86)\ManyCam\ManyCam.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoScape.lnk - C:\Program Files (x86)\PhotoScape\PhotoScape.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Sandboxed Web Browser.lnk - C:\Program Files\Sandboxie\Start.exe default_browser

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3\pinned.lnk - C:\Windows\system32\control.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b15f30ab853b7d31\Diablo III.lnk - C:\Program Files (x86)\Diablo III\Diablo III Launcher.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Uninstall Programs.lnk - C:\Program Files (x86)\IObit\Advanced SystemCare 6\Suc10_Uninstal.exe 

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gerenciador de Tarefas do Windows.lnk - C:\Windows\System32\taskmgr.exe 

    C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -  

    C:\Users\USURIO~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -  

    ==== Reset IE Proxy ======================

    Value(s) before fix:

    "ProxyOverride"="*.local;<local>"

    "ProxyEnable"=dword:00000000

    Value(s) after fix:

    "ProxyEnable"=dword:00000000

    ==== Deleting Registry Keys ======================

    HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall{3FF55914-D12B-6C4F-3C90-FEB31DB7B058} deleted successfully

    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Auto ShutDown deleted successfully

    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update deleted successfully

    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoftEther VPN Client UI Helper deleted successfully

    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Unified Remote v2 deleted successfully

    ==== Empty IE Cache ======================

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Doom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

    C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

    C:\Users\Doom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F27RGDC7 will be deleted at reboot

    C:\Users\Doom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    ==== Empty FireFox Cache ======================

    No FireFox Profiles found

    ==== Empty Chrome Cache ======================

    C:\Users\Doom\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    ==== C:\zoek_backup content ======================

    C:\zoek_backup (files=253 folders=33 41633957 bytes)

    ==== Empty Temp Folders ======================

    C:\Users\Default\AppData\Local\temp emptied successfully

    C:\Users\Default User\AppData\Local\temp emptied successfully

    C:\Users\Doom\AppData\Local\Temp will be emptied at reboot

    C:\Users\k\AppData\Local\temp emptied successfully

    C:\Users\Public\AppData\Local\temp emptied successfully

    C:\Users\USURIO~1\AppData\Local\temp emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

    C:\Windows\Temp will be emptied at reboot

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\Windows\Temp successfully emptied

    C:\Users\Doom\AppData\Local\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:$RECYCLE.BIN successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Users\Doom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

    "C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted

    "C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

    "C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

    "C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted

    "C:\Users\Doom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F27RGDC7" not found

    ==== EOF on 16/03/2014 at 17:30:47,77 ======================

    Esta resposta foi útil?

    0 comentários
  3. Anônima
    2014-03-16T20:35:06+00:00

    Zoek.exe v5.0.0.0 Updated 07-March-2014

    Tool run by Doom on 16/03/2014 at 17:13:07,82.

    Microsoft Windows 7 Ultimate  6.1.7600  x64

    Running in: Normal Mode Internet Access Detected

    Launched: C:\Users\Doom\Downloads\zoek.exe [Scan all users] [Script inserted] 

    ==== System Restore Info ======================

    16/03/2014 17:13:47 Zoek.exe System Restore Point Created Succesfully.

    ==== Reset Hosts File ======================

    Copyright (c) 1993-2006 Microsoft Corp. 

    # 

    This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 

    # 

    This file contains the mappings of IP addresses to host names. Each 

    entry should be kept on an individual line. The IP address should 

    be placed in the first column followed by the corresponding host name. 

    The IP address and the host name should be separated by at least one 

    space. 

    # 

    Additionally, comments (such as these) may be inserted on individual 

    lines or following the machine name denoted by a '#' symbol. 

    # 

    For example: 

    # 

         102.54.94.97     rhino.acme.com          # source server 

          38.25.63.10     x.acme.com              # x client host 

    localhost name resolution is handle within DNS itself. 

    127.0.0.1       localhost 

    ::1             localhost 

    ==== Deleting CLSID Registry Keys ======================

    ==== Deleting CLSID Registry Values ======================

    ==== Deleting Services ======================

    ==== Deleting Files \ Folders ======================

    C:\Users\Doom.android deleted

    C:\PROGRA~2\SqliteBrowser deleted

    C:\found.000 deleted

    C:\Users\Doom\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\DriverScanner.lnk deleted

    C:\PROGRA~3\SpeedBit deleted

    C:\PROGRA~3\SummerSoft deleted

    C:\Users\Doom\AppData\Local\CRE deleted

    C:\Users\Doom\Downloads\SoftonicDownloader_para_mcafee-virusscan-plus-aol-edition.exe deleted

    "C:\Users\Doom\AppData\Roaming\D2Info0" deleted

    "C:\Users\Doom\AppData\Roaming\DofusAppId0_1" deleted

    "C:\Users\Doom\AppData\Roaming\DofusAppId0_2" deleted

    "C:\Users\Doom\AppData\Roaming\DofusAppId0_3" deleted

    "C:\Users\Doom\AppData\Roaming\DofusAppId0_4" deleted

    "C:\Users\Doom\AppData\Roaming\DofusAppId0_5" deleted

    "C:\Users\Doom\AppData\Roaming\YYmm" deleted

    ==== Folders Found ======================

    2014-02-26 19:01:17 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_09b33e5a7f021ed80b1cc7c157266d76691f86_10f5ff2a

    2014-02-28 00:42:17 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_157b7a78f531b86c8b6617c85e4957287b1d7e7a_08248ce9

    2014-02-26 19:57:13 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_157b7a78f531b86c8b6617c85e4957287b1d7e7a_0cdd3374

    2014-02-26 19:56:44 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_157b7a78f531b86c8b6617c85e4957287b1d7e7a_109cc151

    2014-02-26 19:31:45 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_157b7a78f531b86c8b6617c85e4957287b1d7e7a_143de3ce

    2014-02-26 19:50:47 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_157b7a78f531b86c8b6617c85e4957287b1d7e7a_16bb51fc

    2014-02-26 19:29:21 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_157b7a78f531b86c8b6617c85e4957287b1d7e7a_16c3b11b

    2013-06-05 15:02:04 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_175fc5be83646d74484781b71103911eb361e9_0889a91a

    2013-06-12 02:56:16 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_175fc5be83646d74484781b71103911eb361e9_10400a2b

    2013-06-12 04:47:35 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_175fc5be83646d74484781b71103911eb361e9_109df279

    2014-02-26 19:10:56 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_1e3cc0442c9ffb84166ba0ada2517561ab16_0f1ed656

    2013-12-26 00:18:03 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_2c6eef58a4e2231c773ebbe66fc0f02a44e66e78_0edd45f6

    2014-02-26 19:02:09 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_2d7d5da5bec4ef2506336baf2f7755ec7400e9_0a72ca07

    2014-02-26 19:12:32 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_2ea2dfd7db23fb3285985671b7ca8f215ed24_101c4bb4

    2014-02-26 19:08:47 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_0570dc6e

    2014-02-28 22:49:33 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_07f3b20f

    2014-03-01 19:23:56 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_0895ed1c

    2014-02-26 19:59:56 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_0ca7b012

    2013-12-26 00:17:42 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_0cb0f345

    2014-02-26 19:26:52 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_0dc16ac8

    2014-02-26 19:07:44 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_111fe6ca

    2014-02-26 19:10:17 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_116e3dcf

    2014-02-26 19:11:32 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_11cf5fff

    2014-02-26 20:12:01 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_12b2c0f4

    2014-02-26 22:10:01 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_1566cad5

    2014-02-26 19:53:56 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_161a31cf

    2014-02-26 19:59:14 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_16670ed4

    2014-02-26 20:00:16 2014-03-10 23:19:45 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_16f3fdf3

    2014-03-03 03:50:45 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_18bc88c4

    2013-12-25 17:50:58 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3377af39bff9bdb21bea7b7563dcb916b7ecfbe3_227854d9

    2014-03-01 19:24:21 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_3e35cbf9cc1803f9b47ed5c5f424ebf4a8d586_16224da3

    2013-06-18 22:35:08 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_487b49244603265469a81cdda18e0708fab3192_0d950b76

    2013-06-15 22:01:11 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_4dca4cb1277be8e8bfd3a61ad82ab796435b86ba_0edb62f8

    2014-02-26 19:01:29 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_50a7d5764771807607b91dc3bec1de041334412_03322d4b

    2013-06-04 15:36:20 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_589b874edb2af85548b4ef3cdb2dc8325fb1b4a_0d8ee253

    2013-06-13 03:12:54 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_5d799b2474a92b7ef79c4a3ca36412270adb72f_0d9fe09d

    2013-06-13 02:31:46 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_5d799b2474a92b7ef79c4a3ca36412270adb72f_11623955

    2014-02-26 20:50:38 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_611e621c1e90e5ac1f106cc316ddbc7c50fe2e_10461dd3

    2014-02-26 19:18:29 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_666737c58bb5dd5b77efdf7a15ba8531555f6cc_0fbdbda8

    2014-02-28 23:57:10 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_67f07cba441487d15ace6d483d2fa375ec82d4_0ac999b0

    2014-02-27 17:07:48 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_67f07cba441487d15ace6d483d2fa375ec82d4_0cd075b9

    2014-03-05 20:09:57 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_67f07cba441487d15ace6d483d2fa375ec82d4_1160f2c7

    2014-03-06 23:22:41 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_67f07cba441487d15ace6d483d2fa375ec82d4_1323c234

    2014-02-28 19:57:47 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_67f07cba441487d15ace6d483d2fa375ec82d4_1492703b

    2014-03-01 19:44:44 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_67f07cba441487d15ace6d483d2fa375ec82d4_1700f6be

    2014-02-28 20:41:19 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_67f07cba441487d15ace6d483d2fa375ec82d4_17624a74

    2014-02-26 19:01:44 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_68327c6c6c8b1eba0633497dfc3b170fb7b705e_0c5666e2

    2014-02-28 22:20:27 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_68327c6c6c8b1eba0633497dfc3b170fb7b705e_1b491063

    2014-02-26 20:05:21 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_68b1f8ffa6e7bacc84b0326d5cb7a89a23c76a_0d10a681

    2014-02-26 20:07:57 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_68b1f8ffa6e7bacc84b0326d5cb7a89a23c76a_150b088e

    2014-02-26 19:30:49 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_68b1f8ffa6e7bacc84b0326d5cb7a89a23c76a_16850784

    2014-02-26 20:13:37 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_76fc5c8b9def90f54e35489e191a1795ee666_12283835

    2013-12-26 00:17:11 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_77e4b928a01783d624e81c8799225f4994f0e82_04fc7a01

    2013-12-26 00:16:53 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_77e4b928a01783d624e81c8799225f4994f0e82_065431fa

    2014-02-28 22:48:36 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_792098594b95a9dfeb15577167a04b55c5c78059_1d4ed538

    2014-02-26 19:27:23 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_7c32e17972667e5389887d85727567e915d27_1575e516

    2014-02-24 01:19:38 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_7c5726f785a107e81a95312ee2b57f0fd53af3_10aea5f6

    2013-12-25 17:57:55 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_7ef89354fe617b3fcde283c6b596adcf593410_1aceb2a2

    2014-02-26 19:53:40 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_8d788fd3393358ac2f5779346fa995575f9d5fd9_14e1f57b

    2014-02-28 01:12:23 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_94e653c0a981ea2e505ecba11f7b83b41ff3e676_171c1a89

    2014-02-28 00:42:25 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_0884ac0d

    2014-02-28 00:42:43 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_0974f166

    2014-02-26 20:01:12 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_099cd80c

    2014-02-26 20:01:40 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_0c71481d

    2014-02-26 19:31:09 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_0f0d5536

    2014-02-26 20:04:48 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_136425fd

    2014-02-26 19:29:59 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_142045fa

    2014-02-26 19:29:56 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_1594396c

    2014-02-26 20:10:05 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_16c8fc4e

    2014-02-26 20:01:30 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_17811f68

    2014-02-26 19:30:23 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_95edf71ac4c610de3e1b867968f1b8ac6fa7498_17c8a28b

    2013-12-24 21:12:13 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_9de4386ba2d3924447f79f384265c2c1a5e22fa1_1672175c

    2014-02-26 19:26:32 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_be7c3ffdea5cd37bee28f225359f631df56d5_09391d26

    2013-06-20 14:47:00 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_c4b0492535fb4173d5f13cd495ebe36ff88cdbaa_101a2339

    2014-02-26 19:52:11 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_c99e31c7fe50171cdda4286262fef1333df4837e_09e89793

    2013-12-25 17:58:59 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_cea3e480e71e0402bd5514689be74acda7fa46_1507af77

    2014-02-26 19:09:58 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_d4c85a98b47d07cfe5472c9f06a52e0d164169_0e89f174

    2013-06-07 18:22:56 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_d8b74bad896dcf5348f722543324fe9e75b8488_0e967551

    2014-02-26 19:33:36 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_e8e2f6a269f694d1959671397399f7d8b823971b_0fab93eb

    2014-02-26 19:59:34 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_eb9c67ed5df0351c9060d0ec25eed4cec9444f2_123b5b6e

    2014-02-26 19:17:57 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_ebf457e641d8f0c880492eb2463c1a86a092bd27_11fd42af

    2014-02-26 19:54:40 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_0712dfd9

    2014-02-26 20:04:29 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_077bdb28

    2013-12-26 00:19:26 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_080a8b21

    2013-12-25 17:51:38 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_0e14f2bd

    2014-02-26 19:09:02 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_10891865

    2014-02-28 22:48:37 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_108ad99b

    2014-02-26 19:18:13 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_12d97deb

    2014-02-26 20:03:45 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_15933104

    2014-03-03 03:50:46 2014-03-10 23:19:46 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_1dac8cc9

    2013-12-25 17:50:09 2014-03-10 23:19:47 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_1fd39810

    2013-12-25 17:50:31 2014-03-10 23:19:47 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f5faf7c4e5d16398f294faaaad6eb56d77f9b_2493eeb7

    2014-02-28 22:49:32 2014-03-10 23:19:47 -------- dc----w- C:\Users\Doom\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_ygopro_vs.exe_f8d57eb1b9bd4930d1ede9abdc843dd927f730_14e3ae47

    ==== Files Found ======================

    --- C:\FRST\Quarantine\C\Users\Doom\Downloads\YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar.xBAD ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 572346

    Created time: 2014-02-26 19:26:13

    Modified time: 2014-02-26 19:27:06

    MD5: C2C95F5B379A09B3C46CE32F0B664AB3

    SHA1: 7BBA1F63973E849AD113616D11F9A20D6FBBA1FA

    --- C:\FRST\Quarantine\C\Users\Doom\Downloads\ygopro-1.031.0-V2-Percy-full.7z.xBAD ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 323495357

    Created time: 2014-02-26 22:04:52

    Modified time: 2013-06-03 16:07:52

    MD5: 28340EA28770A40FDFB0DDE100243993

    SHA1: 374FFC08FD8C7C119952FB2087F1A2BA9E5D0234

    --- C:\FRST\Quarantine\C\Users\Doom\Downloads\ygopro-1.032.1-V5-Percy-full.rar.xBAD ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 507688000

    Created time: 2014-03-02 04:07:07

    Modified time: 2014-03-02 17:04:54

    MD5: 74D696966C4BA7540EB087C0FB9E6E05

    SHA1: 41EB6D6EE76D3EEDB0310C25B8D0CB19856FC2D9

    --- C:\Program Files (x86)\Yu-Gi-Oh PRO\ygopro_vs.exe ---

    Company: YGOPRO

    File Description: YGOPRO Automatic Dueling System

    File Version: 

    Product Name: YGOPRO Percy

    Copyright: YGOPRO

    Original Filename: 

    File type: ----a-w-

    File size: 4700160

    Created time: 2014-03-11 23:38:54

    Modified time: 2013-11-24 20:10:10

    MD5: F4A2CB7AC7E181E676EE9DFC1B747184

    SHA1: EAA809E6BBB7C24C8F0534248707D9263D108E44

    --- C:\Program Files (x86)\Yu-Gi-Oh PRO\ygopro_vs_ai_debug.exe ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 4918784

    Created time: 2014-03-11 23:38:57

    Modified time: 2013-05-20 17:39:43

    MD5: 757B3383556E495AB96479308AE019F7

    SHA1: EFAAA58B54229D1EEEC3BE6CB811D1F8BE4D1BA9

    --- C:\Program Files (x86)\Yu-Gi-Oh PRO\updates\ygopro_vs.exe ---

    Company: YGOPRO

    File Description: YGOPRO Automatic Dueling System

    File Version: 

    Product Name: YGOPRO Percy

    Copyright: YGOPRO

    Original Filename: 

    File type: ----a-w-

    File size: 4700160

    Created time: 2014-03-16 04:13:47

    Modified time: 2013-11-24 20:10:10

    MD5: F4A2CB7AC7E181E676EE9DFC1B747184

    SHA1: EAA809E6BBB7C24C8F0534248707D9263D108E44

    --- C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Recent\YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar.lnk ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 1020

    Created time: 2014-02-26 19:26:16

    Modified time: 2014-02-26 20:04:56

    MD5: B3000FF79EA33F8BE4CAC06CF12B68AD

    SHA1: A923BB487D65AC8E1E2A636773645C1FDD18B840

    --- C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Recent\ygopro-1.031.0-V2-Percy-full.7z.lnk ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 707

    Created time: 2014-02-26 19:37:23

    Modified time: 2014-03-15 02:45:21

    MD5: 95E281CC2734DF7396F76B61C6D4C8F6

    SHA1: CF79058CE4C8833F9DDB0F5A579111E1D159F9EA

    --- C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Recent\ygopro-1.032.1-V5-Percy-full.rar.lnk ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 714

    Created time: 2014-03-02 17:27:39

    Modified time: 2014-03-11 23:33:46

    MD5: B641A4E91B5BF5C8FA561432E18A9992

    SHA1: 3E770213FE6F10A9C502A28B1777A67DB6C41A24

    --- C:\Users\Doom\AppData\Roaming\Microsoft\Windows\Recent\ygopro-1032.1-v2-percy-update.7z.lnk ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 712

    Created time: 2014-02-25 18:36:07

    Modified time: 2014-03-15 02:45:16

    MD5: 800FE06E376CB71B2666360522E90DF3

    SHA1: CB1A1E7D90DA90F608F2ACE516428ECCD4866068

    --- C:\Users\Doom\Documents\Doom 3\data\Ygopro Card Packer.exe ---

    Company: Jurijus Belousas

    File Description: Ygopro Card Packer

    File Version: 1.0.0.0

    Product Name: Ygopro Card Packer

    Copyright: © 2013 Jurijus Belousas

    Original Filename: Ygopro Card Packer.exe

    File type: ----a-w-

    File size: 314880

    Created time: 2014-02-26 22:34:20

    Modified time: 2013-07-15 10:38:33

    MD5: 5641207D2F4F6724208D86733BECA309

    SHA1: 90EBFADA9E2E635881ACDB7ECE0A4FFABD37057F

    --- C:\Users\Doom\Documents\Doom 3\data\ygopro.config ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 42

    Created time: 2014-02-26 22:34:20

    Modified time: 2013-12-14 00:08:29

    MD5: 6A14B7FB31A5CE0D5A435E94A864DC9A

    SHA1: 4B821F1CA50AE1A9780356208E4A0256627AF46A

    --- C:\Users\Doom\Downloads\ygopro-1032.1-v2-percy-update.7z ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 4807362

    Created time: 2013-12-24 15:30:34

    Modified time: 2013-12-24 15:30:36

    MD5: 4CF3898E68CB8228E107E7361AEA3A74

    SHA1: 1719458B6D1072C727DFFF0A86633098B4AB26CE

    --- C:\Windows\Prefetch\YGOPRO_VS.EXE-1D5B647C.pf ---

    Company: ------

    File Description: ------

    File Version: ------

    Product Name: ------

    Copyright: ------

    Original Filename: ------

    File type: ----a-w-

    File size: 135900

    Created time: 2014-03-15 02:00:22

    Modified time: 2014-03-16 06:22:15

    MD5: CF7F222A99659CC613EA4E0DFD91EC04

    SHA1: 08504BE60DA1D1E2FF3508E2FEF74126CCCD4439

    Esta resposta foi útil?

    0 comentários
  4. Anônima
    2014-03-16T19:17:01+00:00

    Desative temporariamente seu antivirus para evitar conflitos.

    Acesse este link abaixo e clique no primeiro botão da esquerda que é o botão Download Zoek.exe:

    http://www.hijackthis.nl/smeenk/

    *Clique com o botão direito do mouse no Zoek.exe e selecione Executar como administrador

    * Selecione e copie todo este texto destacado em negrito abaixo e cole-o no espaço em branco do Zoek:

    createsrpoint;

    autoclean;

    emptyalltemp;

    iedefaults;

    resetieproxy;

    resethosts;

    shortcutfix;

    reset chrome;

    chrdefaults;

    chromelook;

    ygopro;z

    ygopro;a

    *Clique em Run Script

    *Durante o scan uma mensagem parecida com esta abaixo mostrando o progresso do escaneamento será apresentada. Aguarde o término...pode demorar!

    *Caso a reinicialização do PC seja solicitada, clique OK

    * Poste o log do Zoek que estará em C:*zoek-results.txt* em sua próxima resposta.

    Esta resposta foi útil?

    0 comentários
  5. Anônima
    2014-03-16T19:01:47+00:00

    Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014

    Ran by Doom at 2014-03-16 16:01:29 Run:1

    Running from C:\Users\Doom\Downloads

    Boot Mode: Normal

    ==============================================

    Content of fixlist:

    *****************

    start

    URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.

    S3 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [76096 2013-08-08] (Baidu, Inc.)

    Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File

    2014-03-02 01:07 - 2014-03-02 14:04 - 507688000 _____ () C:\Users\Doom\Downloads\ygopro-1.032.1-V5-Percy-full.rar

    2014-03-15 23:23 - 2013-04-11 14:28 - 00000000 ____D () C:\Program Files (x86)\Bonjour

    2014-02-26 19:04 - 2013-06-03 13:07 - 323495357 _____ () C:\Users\Doom\Downloads\ygopro-1.031.0-V2-Percy-full.7z

    2014-02-26 16:26 - 2014-02-26 16:27 - 00572346 _____ () C:\Users\Doom\Downloads\YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar

    2014-03-02 14:04 - 2014-03-02 01:07 - 507688000 _____ () C:\Users\Doom\Downloads\ygopro-1.032.1-V5-Percy-full.rar

    2014-02-26 16:27 - 2014-02-26 16:26 - 00572346 _____ () C:\Users\Doom\Downloads\YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar

    C:\Users\Doom\AppData\Local\Temp\Quarantine.exe

    Task: {21BDE499-125C-4B02-97B5-310FA539232E} - \dsmonitor No Task File

    AlternateDataStreams: C:\ProgramData\TEMP:05E9FFE5

    AlternateDataStreams: C:\ProgramData\TEMP:2B11E0DF

    AlternateDataStreams: C:\ProgramData\TEMP:56E2E879

    AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:05E9FFE5

    AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:2B11E0DF

    AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:56E2E879

    end

    *****************

    Default URLSearchHook was restored successfully .

    BprotectEx => Service deleted successfully.

    HKCR\PROTOCOLS\Handler\gopher => Key deleted successfully.

    HKCR\CLSID{79eac9e4-baf9-11ce-8c82-00aa004ba90b} => Key not found.

    C:\Users\Doom\Downloads\ygopro-1.032.1-V5-Percy-full.rar => Moved successfully.

    C:\Program Files (x86)\Bonjour => Moved successfully.

    C:\Users\Doom\Downloads\ygopro-1.031.0-V2-Percy-full.7z => Moved successfully.

    C:\Users\Doom\Downloads\YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar => Moved successfully.

    "C:\Users\Doom\Downloads\ygopro-1.032.1-V5-Percy-full.rar" => File/Directory not found.

    "C:\Users\Doom\Downloads\YGOPRO-1-032-1-V5-Primal-Origin-OCG.rar" => File/Directory not found.

    C:\Users\Doom\AppData\Local\Temp\Quarantine.exe => Moved successfully.

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon{21BDE499-125C-4B02-97B5-310FA539232E} => Key deleted successfully.

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks{21BDE499-125C-4B02-97B5-310FA539232E} => Key deleted successfully.

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\dsmonitor => Key deleted successfully.

    C:\ProgramData\TEMP => ":05E9FFE5" ADS removed successfully.

    C:\ProgramData\TEMP => ":2B11E0DF" ADS removed successfully.

    C:\ProgramData\TEMP => ":56E2E879" ADS removed successfully.

    "C:\Users\Todos os Usuários\TEMP" => ":05E9FFE5" ADS not found.

    "C:\Users\Todos os Usuários\TEMP" => ":2B11E0DF" ADS not found.

    "C:\Users\Todos os Usuários\TEMP" => ":56E2E879" ADS not found.

    ==== End of Fixlog ====

    Esta resposta foi útil?

    0 comentários