start
CreateRestorePoint:
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:373E1720
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\avastui.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\avastsvc.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\ashUpd.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\ashQuick.exe <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVAST Software\Avast\sched.exe <====== ATTENTION
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig] <===== ATTENTION
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oquefazernainternet.com/
HKU.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.oquefazernainternet.com/
URLSearchHook: [S-1-5-21-3504019602-3750793420-2798553429-500] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3504019602-3750793420-2798553429-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL =
http://isearch.omiga-plus.com/web/?utm_source=b&utm_medium=key7&utm_campaign=install_ie&utm_content=ds&from=key7&uid=WDCXWD1600BEVS-00VAT0_WD-WXE308E2188021880&ts=1422740558&type=default&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe
www.jogostempo.com?oem=brsoftv3&uid=WD-WXE308E21880_WDCWD1600BEVS-00VAT0&tm=1422627361
CHR HKU\S-1-5-21-3504019602-3750793420-2798553429-1000\SOFTWARE\Google\Chrome\Extensions...\Chrome\Extension: [oilkkkefbalmbfppgjmgjoefbclebkce] -
https://clients2.google.com/service/update2/crx
OPR Extension: (I - Cinema) - C:\Users\CARLOS\AppData\Roaming\Opera Software\Opera Stable\Extensions\dimfohdigjaffdaanhmbocfkpolglnjk [2015-01-31]
S3 BdApiUtil; ??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdApiUtil64.sys [X]
S3 BdCameraProtect; ??\C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BdCameraProtect64.sys [X]
S3 BprotectEx; ??\C:\Windows\System32\drivers\BprotectEx.sys [X]
S3 cpuz134; ??\C:\Users\CARLOS\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 PCFApiUtil; ??\C:\Program Files (x86)\PC Faster\PCFApiUtil64.sys [X]
C:\Program Files (x86)\Baidu Security
C:\Windows\System32\drivers\BprotectEx.sys
C:\Program Files (x86)\PC Faster
2015-01-25 13:12 - 2015-01-25 13:12 - 0001248 _____ () C:\Users\CARLOS\AppData\Roaming\YHSKM
2015-01-30 11:36 - 2015-01-30 11:36 - 0613057 _____ (CMI Limited) C:\Users\CARLOS\AppData\Local\nsnBC48.tmp
2014-01-15 02:15 - 2014-01-15 02:15 - 0167784 _____ (Baidu, Inc.) C:\ProgramData\FileSplitUpLoad.dll
C:\ProgramData\FileSplitUpLoad.dll
C:\Users\Todos os Usuários\FileSplitUpLoad.dll
C:\Users\CARLOS\AppData\Local\Temp\1.tmp.exe
C:\Users\CARLOS\AppData\Local\Temp\Baidu_Secure_SystemUp_5.1.3.109697.exe
C:\Users\CARLOS\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
C:\Users\CARLOS\AppData\Local\Temp\eFixProPackage.exe
EmptyTemp:
end