~ ZHPDiag v2015.12.29.199 Por Nicolas Coolman (2015/12/29)
~ iniciado por MA084140 (Administrator) (2015/12/29 19:00:14)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Status da versão: Version OK
~ Modo: Scanner
~ Relatório: D:\Users\ma084140\Desktop\ZHPDiag.txt
~ Relatório: D:\Users\ma084140\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Inicialização do sistema: Normal (Normal boot)
Windows 7 Professional, 32-bit Service Pack 1 (Build 7601)

---\\ Navegadores Internet (2) - 0s
GCIE: Google Chrome v47.0.2526.106
MSIE: Internet Explorer v11.0.9600.17728

---\\ Informações sobre os produtos Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Softwares de proteçao do sistema (2) - 96s
Symantec Endpoint Protection v12.1.4112.4156
Windows Defender W7 (Deactivate)

---\\ HKCU & HKLM Software Keys (1) - 96s
Spybot - Search & Destroy v2.4.40

---\\ Monitoramento dos softwares (2) - 96s
Adobe Flash Player 19 ActiveX
Adobe Reader XI

---\\ Informações sobre o sistema (6) - 0s
~ Operating System: x86 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3056.88 MB (34% free)
System Restore: Activé (Enable)
System drive D: has 1 GB () free of 177 GB =>Alerte espace disque inférieur à 20 Go

---\\ Modo de conexão ao sistema (3) - 0s
~ Computer Name: AJ0223911
~ User Name: MA084140
~ Logged in as Administrator

---\\ Enumeração das unidades dos discos (2) - 0s
~ Drive C: has 0 GB free of 127 GB
~ Drive D: has 1 GB free of 177 GB (System)

---\\ Estado do Centro de Segurança do Windows (13) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Pesquisa particular de ficheiros genéricos (24) - 8s
[MD5.40D777B7A95E00593EB1568C68514493] - 20/11/2010 - (.Microsoft Corporation - Windows Explorer.) -- C:\Windows\Explorer.exe [2616320] ©
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - 13/07/2009 - (.Microsoft Corporation - Processo de host do Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] ©
[MD5.B5C5DCAD3899512020D135600129D665] - 13/07/2009 - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) -- C:\Windows\System32\Wininit.exe [96256] ©
[MD5.C46904F2E9E121A91DDDABB48D7648C3] - 29/04/2015 - (.Microsoft Corporation - Internet Extensions para Win32.) -- C:\Windows\System32\wininet.dll [1888256] ©
[MD5.6D13E1406F50C66E2A95D97F22C47560] - 20/11/2010 - (.Microsoft Corporation - Aplicativo de Logon do Windows.) -- C:\Windows\System32\Winlogon.exe [286720] ©
[MD5.E3AE23569749DE12D45BA3B489A036AE] - 20/11/2010 - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) -- C:\Windows\System32\sppcomapi.dll [193536] ©
[MD5.59DF156711A76BCB993253EC6C9BBF41] - 20/11/2010 - (.Microsoft Corporation - DLL da API de cliente DNS.) -- C:\Windows\System32\dnsapi.dll [270336] ©
[MD5.F81BB7E487EDCEAB630A7EE66CF23913] - 29/04/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [338944] ©
[MD5.338C86357871C167A96AB976519BF59E] - 13/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [21584] =>.Microsoft Windows®
[MD5.77EA11B065E0A8AB902D78145CA51E10] - 13/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70656] ©
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - 20/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [108544] ©
[MD5.F024449C97EC1E464AAFFDA18593DB88] - 20/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [78336] ©
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - 20/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [108544] ©
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 13/07/2009 - (.Microsoft Corporation - Driver de porta i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [80896] ©
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 13/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [101888] ©
[MD5.B272B4C3E085EA860C12F2E4FAF2FFA2] - 20/11/2010 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [123904] ©
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - 20/11/2010 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [187904] ©
[MD5.33C3093D09017CFE2E219F2472BFF6EB] - 20/11/2010 - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) -- C:\Windows\System32\drivers\ntfs.sys [1211264] =>.Microsoft Windows®
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 13/07/2009 - (.Microsoft Corporation - Driver de porta paralela.) -- C:\Windows\System32\drivers\Parport.sys [79360] ©
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 13/07/2009 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] ©
[MD5.B973FCFC50DC1434E1970A146F7E3885] - 20/11/2010 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [133632] ©
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - 13/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [71168] ©
[MD5.B459575348C20E8121D6039DA063C704] - 20/11/2010 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [74752] ©
[MD5.F497F67932C6FA693D7DE2780631CFE7] - 20/11/2010 - (.Microsoft Corporation - Driver de cópia de sombra de volume.) -- C:\Windows\System32\drivers\volsnap.sys [245632] =>.Microsoft Windows®

---\\ Serviços NT não Microsoft e não desativados (28) - 21s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: BES Client (BESClient) . (.IBM Corp. - IBM Endpoint Manager Agent.) - C:\Program Files\BigFix Enterprise\BES Client\BESClient.exe {04FF9F7B8D388B6D5F7366B7399AF0C3} ©
O23 - Service: BESClientHelper (BESClientHelper) . (.BigFix Inc. - Service for monitoring the status of the BE.) - C:\Program Files\BigFix Enterprise\BES Client\BESClientHelper.exe
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe =>.Broadcom Corporation®
O23 - Service: @C:\Windows\system32\CxAudMsg32.exe,-100 (CxAudMsg) . (.Conexant Systems Inc. - Conexant Audio Message Service.) - C:\Windows\System32\CxAudMsg32.exe =>.Conexant Systems, Inc.®
O23 - Service: DameWare Mini Remote Control (DWMRCS) . (.DameWare Development LLC - DameWare Mini Remote Client Agent.) - C:\Windows\System32\DWRCS.EXE
O23 - Service: ETOKSRV (eTSrv) . (.Aladdin Knowledge Systems, Ltd. - eToken service application.) - C:\Program Files\Aladdin\eToken\PKIClient\x32\eTSrv.exe {6BEA1E66D2B4A57E74CE91893FACE0D8}
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe =>.Intel Corporation - Mobile Wireless Group®
O23 - Service: Gbp Service (GbpSv) . (.GAS Tecnologia - G-Buster Browser Defense - Service.) - C:\Program Files\GbPlugin\gbpsv.exe {12D257F7955AC6D6A4365FB70A3DC10A}
O23 - Service: Serviço do Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Lenovo PM Service (IBMPMSVC) . (.Lenovo. - Lenovo Power Management Service.) - C:\Windows\System32\ibmpmsvc.exe {1CA08E795C58A609AE46FE0B7FDBC08B}
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) . (.Lenovo Group Limited - Microphone Mute Controll Service for ThinkP.) - C:\Program Files\Lenovo\HOTKEY\micmute.exe {6433A25DB5498D25B5D53720AD2374B6} ©
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) . (.Lenovo Group Limited - Auto Scroll Start Service.) - C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe {3AE1F834FA867FF5102FBE94ADF86384} ©
O23 - Service: lxeaCATSCustConnectService (lxeaCATSCustConnectService) . (.Lexmark International, Inc. - Lexmark Connect Service Executable.) - C:\Windows\System32\spool\drivers\w32x86\3\lxeaserv.exe {379E69DA6C2693E3297B6FE45D78EBE1} ©
O23 - Service: OracleMTSRecoveryService (OracleMTSRecoveryService) . (.Oracle Corporation - Oracle MTS Recovery Service.) - C:\oracle\ORA1020\BIN\omtsreco.exe ©
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe =>.Intel Corporation - Mobile Wireless Group®
O23 - Service: Conexant SmartAudio service (SAService) . (.Conexant Systems, Inc. - SmartAudio Service Application.) - C:\Windows\System32\SASrv.exe =>.Conexant Systems, Inc.®
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe =>.Safer Networking Ltd.®
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe =>.Safer Networking Ltd.®
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe =>.Safer Networking Ltd.®
O23 - Service: Symantec Endpoint Protection (SepMasterService) . (.Symantec Corporation - Symantec Service Framework.) - C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4112.4156.105\Bin\ccSvcHst.exe =>.Symantec Corporation®
O23 - Service: Check Point VPN-1 Securemote service (SR_Service) . (.Check Point Software Technologies - .) - C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe ©
O23 - Service: Check Point VPN-1 Securemote watchdog (SR_Watchdog) . (.Check Point Software Technologies - .) - C:\Program Files\CheckPoint\SecuRemote\bin\SR_Watchdog.exe ©
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe =>.DEVGURU CO LTD®
O23 - Service: TeamViewer 9 (TeamViewer9) . (.TeamViewer GmbH - TeamViewer 9.) - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe =>.TeamViewer®
O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) . (.Lenovo Group Limited - ThinkPad Message Client Loader.) - C:\Program Files\Lenovo\HOTKEY\tphkload.exe {6433A25DB5498D25B5D53720AD2374B6} ©
O23 - Service: On Screen Display (TPHKSVC) . (.Lenovo Group Limited - On screen display Fn+Fx handler.) - C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe {6433A25DB5498D25B5D53720AD2374B6} ©
O23 - Service: IBM Endpoint Manager for Remote Control - Target (TRCTARGET) . (.IBM Corporation - Remote Control Target - Base Process.) - C:\Program Files\ibm\tivoli\Remote Control\Target\trc_base.exe {63CD26DF48BB82DF3837F2E3A0DDCBBC} ©

---\\ Processos lançados (28) - 11s
[MD5.C9D46BEA56C89778AFF1494F9CCF66AC] - (.Lenovo. - Lenovo Power Management Service.) -- C:\Windows\System32\ibmpmsvc.exe [56664] [PID.780] {1CA08E795C58A609AE46FE0B7FDBC08B}
[MD5.3701779057885787AF031936EF56538E] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) -- C:\Program Files\GbPlugin\gbpsv.exe [527928] [PID.820] {12D257F7955AC6D6A4365FB70A3DC10A}
[MD5.365B12083CD5BC1F8B1BE28E3F1939A4] - (.Check Point Software Technologies - .) -- C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe [106613] [PID.1460] ©
[MD5.06A60A690C8436B36B782C91BA5773C7] - (.Check Point Software Technologies - .) -- C:\Program Files\CheckPoint\SecuRemote\bin\SR_Watchdog.exe [36982] [PID.1496] ©
[MD5.5B62F45C87CC0FB176C5358EEA6CFB4C] - (.Lenovo Group Limited - On screen display Fn+Fx handler.) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe [125504] [PID.1936] {6433A25DB5498D25B5D53720AD2374B6} ©
[MD5.5E07D87201CDF23F877AD4F16EADB9F5] - (.Lenovo Group Limited - ThinkPad Message Client Loader.) -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe [115704] [PID.1996] {6433A25DB5498D25B5D53720AD2374B6} ©
[MD5.08FAEF3865401071E4D197C7A2A76EBE] - (.BigFix Inc. - Service for monitoring the status of the BE.) -- C:\Program Files\BigFix Enterprise\BES Client\BESClientHelper.exe [737367] [PID.440]
[MD5.24C2B7CA2A758B6FB8E7D8482F732A75] - (.DameWare Development LLC - DameWare Mini Remote Client Agent.) -- C:\Windows\System32\DWRCS.EXE [256000] [PID.1360]
[MD5.5E53607DA9E59BA7B3606416697A8200] - (.Aladdin Knowledge Systems, Ltd. - eToken service application.) -- C:\Program Files\Aladdin\eToken\PKIClient\x32\eTSrv.exe [12640] [PID.1800] {6BEA1E66D2B4A57E74CE91893FACE0D8}
[MD5.F43BD5D437A3F8EA438A23FB04ABBB73] - (.Lenovo Group Limited - Microphone Mute Controll Service for ThinkP.) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe [110072] [PID.1792] {6433A25DB5498D25B5D53720AD2374B6} ©
[MD5.158B67696EC8602CE71F9AA4F14AA96F] - (.Lenovo Group Limited - Auto Scroll Start Service.) -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe [127336] [PID.2136] {3AE1F834FA867FF5102FBE94ADF86384} ©
[MD5.B5757E4A31EA5193EDA54AE4A5D7491A] - (.Oracle Corporation - Oracle MTS Recovery Service.) -- C:\oracle\ORA1020\BIN\omtsreco.exe [53248] [PID.2516] ©
[MD5.8CC5423C8B936B7F5EBC6C08BB06609F] - (.IBM Corporation - Remote Control Target - Base Process.) -- C:\Program Files\ibm\tivoli\Remote Control\Target\trc_base.exe [923960] [PID.3348] {63CD26DF48BB82DF3837F2E3A0DDCBBC} ©
[MD5.54C5206D2752062849E1E6EAD31DFA2A] - (.IBM Corp. - IBM Endpoint Manager Agent.) -- C:\Program Files\BigFix Enterprise\BES Client\BESClient.exe [6611216] [PID.2592] {04FF9F7B8D388B6D5F7366B7399AF0C3} ©
[MD5.DDA10D9F1D2892AC5E8AB2A580C3846E] - (.Lenovo Group Limited - Lenovo Auto Scroll Utility.) -- C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe [101440] [PID.4776] {61688A0972055C59318508B71D046940} ©
[MD5.80CCC5A1EAAFD279AB2B00CAEE68052B] - (.IBM Corporation - Remote Control Target - GUI Process.) -- C:\Program Files\ibm\tivoli\Remote Control\Target\trc_gui.exe [903480] [PID.5032] {63CD26DF48BB82DF3837F2E3A0DDCBBC} ©
[MD5.C2D96E627E90C8F2A334A5191DB28312] - (.Check Point Software Technologies - .) -- C:\Program Files\CheckPoint\SecuRemote\bin\SR_GUI.exe [2691185] [PID.5060] ©
[MD5.328689D90CB241661691D4F838EEC031] - (.Lenovo Group Limited - On screen display drawer.) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe [567800] [PID.5072] {6433A25DB5498D25B5D53720AD2374B6} ©
[MD5.6F1A7D0DF9504D8CE807C30611638161] - (.Lenovo Group Limited - ThinkPad Message Receiver for Shortcut Hot.) -- C:\Program Files\Lenovo\HOTKEY\shtctky.exe [78328] [PID.5088] {6433A25DB5498D25B5D53720AD2374B6} ©
[MD5.1765C22E1C77FE5AC591B8719FA3AB13] - (.Lenovo Group Limited - NumLock on screen display for ThinkPad.) -- C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe [186928] [PID.5112] {1CA08E795C58A609AE46FE0B7FDBC08B} ©
[MD5.DC9C9C409D096F8280546F010A8392A5] - (.Ricoh co.,Ltd. - RCIMGDIR.) -- C:\Program Files\Integrated Camera Driver\RCIMGDIR.exe [31744] [PID.5508]
[MD5.20FFD9CA4AF20000665B73F4E56235B4] - (.Citrix Systems, Inc. - Citrix online plug-in Connection Center.) -- C:\Program Files\Citrix\ICA Client\concentr.exe [304568] [PID.5736] {5DAF72BBAD5E016FB920A5769DC04601} ©
[MD5.95BABB8DC7325D4AC34EE0DFE00FB1D8] - (.Aladdin Knowledge Systems, Ltd. - PKIMonitor Application.) -- C:\Program Files\Aladdin\eToken\PKIClient\x32\PKIMonitor.exe [230752] [PID.5772] {6BEA1E66D2B4A57E74CE91893FACE0D8}
[MD5.BDBD361050F436856AAD571F981819BA] - (. - Printer Device Monitor.) -- C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe [772712] [PID.5804] {2DB3E1BE80A3B095FD2C799AE03019EA}
[MD5.D8B7100473A6A3DDAFC1235BCC8E60C3] - (.IBM Corp. - IBM Endpoint Manager Client User Interface.) -- C:\Program Files\BigFix Enterprise\BES Client\BESClientUI.exe [3389200] [PID.5832] {04FF9F7B8D388B6D5F7366B7399AF0C3} ©
[MD5.1676C663914864973703A8D6E26DA96E] - (.Citrix Systems, Inc. - Citrix.) -- C:\Program Files\Citrix\ICA Client\wfcrun32.exe [726456] [PID.5848] {5DAF72BBAD5E016FB920A5769DC04601} ©
[MD5.05B0DBBA5FCF346FA78A601176A51F26] - (.Trend Consulting - ORION_CONNECT_MONITOR.) -- C:\ORION\ORION_CONNECT_MONITOR.EXE [184320] [PID.7152]
[MD5.5A1F89FA66AA5581EBF82EF45D4E2A98] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- D:\Users\ma084140\Downloads\ZHPDiag3.exe [2048000] [PID.7668] ©

---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (1) - 1s
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (.Microsoft.) -- C:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll ©

---\\ Internet Explorer, Arranque, Pesquisa, Phishing (10) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2

---\\ Internet Explorer, Gestão do Proxy (7) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

---\\ Análise das linhas, Carregamento Automático de programas (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ©

---\\ Redireção do ficheiro Hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (1)

---\\ Browser Helper Objects do navegador (7) - 1s
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll =>.Adobe Systems, Incorporated®
O2 - BHO: Symantec Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} . (.Symantec Corporation - IPS Browser Helper DLL.) -- C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4112.4156.105\Bin\IPS\IPSBHO.dll =>.Symantec Corporation®
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\MSOffice\Office14\URLREDIR.DLL =>.Microsoft Corporation®
O2 - BHO: G-Buster Browser Defense Banco Real - {C41A1C0E-EA6C-11D4-B1B8-444553540007} . (.Banco Real - Gbieh Module.) -- C:\Program Files\GbPlugin\gbiehabn.dll {12D257F7955AC6D6A4365FB70A3DC10A}
O2 - BHO: G-Buster Browser Defense Itaú Unibanco - {C41A1C0E-EA6C-11D4-B1B8-444553540008} . (.Banco Itaú Unibanco - Gbieh Module.) -- C:\Program Files\GbPlugin\gbiehuni.dll {4B18AEC7FDBB4EBDA6D39194D559C959}
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre7\bin\jp2ssv.dll =>.Oracle America, Inc.®

---\\ Aplicações iniciadas por registo & pastas (14) - 1s
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems, Incorporated®
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Run: [RotateImage] . (.Ricoh co.,Ltd. - RCIMGDIR.) -- C:\Program Files\Integrated Camera Driver\RCIMGDIR.exe
O4 - HKLM\..\Run: [SmartAudio] . (.Conexant Systems, Inc. - SmartAudio Control Panel application.) -- C:\Program Files\CONEXANT\SAII\SAIICpl.exe =>.Conexant Systems, Inc.®
O4 - HKLM\..\Run: [ForteConfig] . (.Copyright (C) 2010 - FMAPP Application.) -- C:\Program Files\CONEXANT\ForteConfig\fmapp.exe =>.Fortemedia Inc®
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [ConnectionCenter] . (.Citrix Systems, Inc. - Citrix online plug-in Connection Center.) -- C:\Program Files\Citrix\ICA Client\concentr.exe {5DAF72BBAD5E016FB920A5769DC04601} ©
O4 - HKLM\..\Run: [eTMonitor] . (.Aladdin Knowledge Systems, Ltd. - PKIMonitor Application.) -- C:\Program Files\Aladdin\eToken\PKIClient\x32\PKIMonitor.exe {6BEA1E66D2B4A57E74CE91893FACE0D8}
O4 - HKLM\..\Run: [lxeamon.exe] . (. - Printer Device Monitor.) -- C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe {2DB3E1BE80A3B095FD2C799AE03019EA}
O4 - HKLM\..\Run: [EzPrint] . (.Copyright (c) 2008 - .) -- C:\Program Files\Lexmark S300-S400 Series\ezprint.exe {2DB3E1BE80A3B095FD2C799AE03019EA}
O4 - HKLM\..\Run: [DameWare MRC Agent] . (.DameWare Development - DameWare Mini Remote Control User Interface.) -- C:\Windows\System32\DWRCST.EXE
O4 - HKLM\..\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe =>.Safer Networking Ltd.®
O4 - HKLM\..\RunOnce: [InstallSpybotUpdate_LASSHes.sbs] C:\Program Files\Spybot - Search & Destroy 2\Includes\LASSHes.sbs (.not file.)

---\\ Alteração Dominio/Clientes DNS (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = Sulamerica.br
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = sulamerica.br
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 187.2.72.42 187.2.72.47
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D0DD74D-CBFE-4F36-A1E4-CC51975C3B0C}: DhcpNameServer = 187.2.72.42 187.2.72.47

---\\ Protocolo adicional (38) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation®
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} . (.Citrix Systems, Inc. - Citrix online plug-in ICAMimeFilter DLL.) -- C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll {5DAF72BBAD5E016FB920A5769DC04601} ©
O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Listagem dos dados do BootExecute (1) - 0s
O34 - HKLM BootExecute: (sdnclean.exe) (.Safer Networking Limited - .) -- sdnclean.exe

---\\ Software instalados (82) - 21s
O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {60FFB3E0-6D5B-4D73-AE5B-07E58B83AF0C} ©
O42 - Logiciel: 7-Zip 9.34 alpha - (...) [HKLM] -- 7-Zip
O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Reader XI (11.0.06) MUI - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-FFFF-7B44-AB0000000001} ©
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824161310} ©
O42 - Logiciel: Adobe SVG Viewer 3.0 - (...) [HKLM] -- Adobe SVG Viewer
O42 - Logiciel: Atualização Audatex - (.Atualização Audatex.) [HKLM] -- {1145556A-45C9-49BF-929C-B219483DD9AA}
O42 - Logiciel: AudaDirect 24.00 (Remove Only) - (...) [HKLM] -- {474107E0-32BE-48C6-87AF-E83EA64AC08F}
O42 - Logiciel: AudaPen/AudaStation v.25.00 (Remove Only) - (.Audatex.) [HKLM] -- {FE58DBD8-129B-11D7-8D51-005056CAD6CB}
O42 - Logiciel: AudatexV2sulamerica - (.Audatex.) [HKLM] -- {BED1255B-C91E-4A4D-93F3-F5C62B78454A}
O42 - Logiciel: AudaUpdate Client 2.2 (Remove Only) - (...) [HKLM] -- {AFC6827A-7D8E-4569-9F53-43FACA98F384}
O42 - Logiciel: Automatos User Attributes Form - (...) [HKLM] -- {C7367A17-D0EF-4EA1-BF96-D39364A59B54}
O42 - Logiciel: BisonCam Twain Pro - (.Bison WebCam Ap.) [HKLM] -- {F2672232-FF17-4DC9-8F24-A1E1829FE086} =>.Macrovision Corporation®
O42 - Logiciel: BufferChm - (.Hewlett-Packard.) [HKLM] -- {FA0FF682-CC70-4C57-93CD-E276F3E7537E} ©
O42 - Logiciel: Check Point VPN-1 SecuRemote/SecureClient NGX R60 HFA2 - (.Check Point.) [HKLM] -- {c080d4ef-802c-403a-9f98-c86871edfb7c} ©
O42 - Logiciel: Citrix online plug-in - web - (.Citrix Systems, Inc..) [HKLM] -- CitrixOnlinePluginPackWeb {5DAF72BBAD5E016FB920A5769DC04601} ©
O42 - Logiciel: Citrix online plug-in (DV) - (.Citrix Systems, Inc..) [HKLM] -- {678094A1-6250-476B-9AFF-4376E48F135C} ©
O42 - Logiciel: Citrix online plug-in (HDX) - (.Citrix Systems, Inc..) [HKLM] -- {FA365307-1963-4D16-BD44-113C8F037AAD} ©
O42 - Logiciel: Citrix online plug-in (USB) - (.Citrix Systems, Inc..) [HKLM] -- {3ECCB578-504E-4F7A-A8B4-CF4F3B939B44} ©
O42 - Logiciel: Citrix online plug-in (Web) - (.Citrix Systems, Inc..) [HKLM] -- {199C20D6-10D3-4210-B361-4760209F56AE} ©
O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM] -- CNXT_AUDIO_HDA =>.Conexant Systems, Inc.®
O42 - Logiciel: DeviceDiscovery - (.Hewlett-Packard.) [HKLM] -- {1458BB78-1DC5-4BC0-B9A3-2B644F5A8105} ©
O42 - Logiciel: Doro 1.42 - (.CompSoft.) [HKLM] -- Doro_is1 ©
O42 - Logiciel: eToken PKI Client 5.1 SP1 - (.Aladdin Knowledge Systems Ltd..) [HKLM] -- {3909BE71-2D8F-42D2-BA46-3831B60CFD0F}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} ©
O42 - Logiciel: HP Imaging Device Functions 14.0 - (.HP.) [HKLM] -- HP Imaging Device Functions =>.Hewlett Packard®
O42 - Logiciel: HP Officejet 100 Mobile L411 - (.HP.) [HKLM] -- {CEBA70B0-686D-421B-B6B3-7ADF273B5037} =>.Hewlett Packard®
O42 - Logiciel: IBM Endpoint Manager Client - (.IBM Corp..) [HKLM] -- {70F67CB3-7EA1-40A8-8329-289DDB98FEE2} ©
O42 - Logiciel: IBM Endpoint Manager for Remote Control - Target - (.IBM United Kingdom Ltd..) [HKLM] -- {A6211EF8-24C0-468F-9673-204E52890CEF}
O42 - Logiciel: ImgBurn - (.LIGHTNING UK!.) [HKLM] -- ImgBurn
O42 - Logiciel: Integrated Camera Driver Installer Package Ver.1.1.0.1147 - (.RICOH.) [HKLM] -- {B2CA6F37-1602-4823-81B5-0384B6888AA6} ©
O42 - Logiciel: Intel PROSet Wireless - (...) [HKLM] -- ProInst
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation®
O42 - Logiciel: Java 7 Update 51 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83217051FF} ©
O42 - Logiciel: Java Auto Updater - (.Sun Microsystems, Inc..) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} ©
O42 - Logiciel: K-Lite Mega Codec Pack 10.9.5 - (...) [HKLM] -- KLiteCodecPack_is1
O42 - Logiciel: L411 - (.Hewlett-Packard.) [HKLM] -- {32A4CF00-9FAC-47c8-9B37-91CC23815D64} ©
O42 - Logiciel: L411_Help - (.Hewlett-Packard.) [HKLM] -- {629F38D9-30E4-4B8B-83B2-9CF7CB5BEF9E} ©
O42 - Logiciel: L411_Software_Min - (.Hewlett-Packard.) [HKLM] -- {58793BC5-EBCE-4e86-9ED2-2410A738AEEB} ©
O42 - Logiciel: Lenovo Auto Scroll Utility - (...) [HKLM] -- LenovoAutoScrollUtility
O42 - Logiciel: Lenovo Patch Utility - (.Lenovo Group Limited.) [HKLM] -- {24E92E7A-6848-4747-A3EA-3AAC0576BE52} ©
O42 - Logiciel: Lenovo Patch Utility - (.Lenovo Group Limited.) [HKLM] -- {C6FB6B4A-1378-4CD3-9CD3-42BA69FCBD43} ©
O42 - Logiciel: Lenovo Power Management Driver - (...) [HKLM] -- Power Management Driver
O42 - Logiciel: Lenovo System Interface Driver - (...) [HKLM] -- LENOVO.SMIIF
O42 - Logiciel: Lenovo System Update - (.Lenovo.) [HKLM] -- {25C64847-B900-48AD-A164-1B4F9B774650} ©
O42 - Logiciel: Lexmark S300-S400 Series - (.Lexmark International, Inc..) [HKLM] -- Lexmark S300-S400 Series {2DB3E1BE80A3B095FD2C799AE03019EA} ©
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft SOAP Toolkit 3.0 - (.Microsoft Corporation.) [HKLM] -- {BCB4C18A-ACA6-4383-8688-E19933A705DD} ©
O42 - Logiciel: MSXML 4.0 SP2 Parser and SDK - (.Microsoft Corporation.) [HKLM] -- {716E0306-8318-4364-8B8F-0CC4E9376BAC} ©
O42 - Logiciel: MV RegClean 5.9 - (...) [HKLM] -- MV RegClean 5.9_is1
O42 - Logiciel: On Screen Display - (...) [HKLM] -- OnScreenDisplay
O42 - Logiciel: ORACLE 10G - (.ORACLE 10G.) [HKLM] -- {6D1796BD-7AF6-48C4-8FC6-C20ED515C2D4}
O42 - Logiciel: Orion Orcamentos - (...) [HKLM] -- {7CC68A3C-8FD5-4B1D-8A4B-F2CF31E962D4}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller ©
O42 - Logiciel: RICOH_Media_Driver_v2.14.18.01 - (.RICOH.) [HKLM] -- {FE041B02-234C-4AAA-9511-80DF6482A458} ©
O42 - Logiciel: Samsung Kies3 - (.Samsung Electronics Co., Ltd..) [HKLM] -- {88547073-C566-4895-9005-EBE98EA3F7C7} ©
O42 - Logiciel: Samsung Kies3 - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7} ©
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} =>.DEVGURU CO LTD®
O42 - Logiciel: Service Pack 2 para o SQL Server 2008 R2 (KB2630458) - (.Microsoft Corporation.) [HKLM] -- KB2630458 =>.Microsoft Corporation®
O42 - Logiciel: Sistema Audatex - (...) [HKLM] -- Sistema Audatex
O42 - Logiciel: Software Intel(R) PROSet/Wireless WiFi - (.Intel Corporation.) [HKLM] -- {25FBDA9A-E868-4B3B-B9FF-D923818511A1} ©
O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1 =>.Safer Networking Ltd.®
O42 - Logiciel: SQL Server 2008 R2 SP2 Common Files - (.Microsoft Corporation.) [HKLM] -- {0F09CF56-E66B-413C-8983-0AA5F1D225F2} ©
O42 - Logiciel: SQL Server 2008 R2 SP2 Common Files - (.Microsoft Corporation.) [HKLM] -- {CACEA8C8-3D38-4F51-953D-1E6FC3346FEF} ©
O42 - Logiciel: SQL Server 2008 R2 SP2 Database Engine Services - (.Microsoft Corporation.) [HKLM] -- {4EA95F3E-3216-403D-89AC-E3FEEB158931} ©
O42 - Logiciel: SQL Server 2008 R2 SP2 Database Engine Services - (.Microsoft Corporation.) [HKLM] -- {B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2} ©
O42 - Logiciel: SQL Server 2008 R2 SP2 Database Engine Shared - (.Microsoft Corporation.) [HKLM] -- {4C9D82EB-9001-4E59-8F64-0BEEE5F4A30A} ©
O42 - Logiciel: SQL Server 2008 R2 SP2 Database Engine Shared - (.Microsoft Corporation.) [HKLM] -- {EE58A6D8-7723-4A91-804C-48CD4B36AB67} ©
O42 - Logiciel: Sql Server Customer Experience Improvement Program - (.Microsoft Corporation.) [HKLM] -- {93998800-1608-403F-9A51-420A77D23C25} ©
O42 - Logiciel: Status - (.Hewlett-Packard.) [HKLM] -- {5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D} ©
O42 - Logiciel: Symantec Endpoint Protection - (.Symantec Corporation.) [HKLM] -- {78BC019C-656D-4458-A860-6977AA85049A} ©
O42 - Logiciel: TeamViewer 9 - (.TeamViewer.) [HKLM] -- TeamViewer 9 =>.TeamViewer®
O42 - Logiciel: Telnet - (.Telnet.) [HKLM] -- {169FD122-CE2B-4EAE-80C3-86F06DBBA890}
O42 - Logiciel: ThinkPad Bluetooth with Enhanced Data Rate Software - (.Broadcom Corporation.) [HKLM] -- {A1439D4F-FD46-47F2-A1D3-FEE097C29A09} ©
O42 - Logiciel: Toolbox - (.Hewlett-Packard.) [HKLM] -- {292F0F52-B62D-4E71-921B-89A682402201} ©
O42 - Logiciel: TrayApp - (.Hewlett-Packard.) [HKLM] -- {CD31E63D-47FD-491C-8117-CF201D0AFAB5} ©
O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer ©
O42 - Logiciel: Visual Studio C++ 10.0 Runtime - (.TomTom International B.V..) [HKLM] -- {4412F224-3849-4461-A3E9-DEEF8D252790} ©
O42 - Logiciel: WebReg - (.Hewlett-Packard.) [HKLM] -- {8EE94FD8-5F52-4463-A340-185D16328158} ©

---\\ Ponto de restauro do sistema (129) - 21s
HKLM\SOFTWARE\7-Zip
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\Aladdin
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\Audatex
HKLM\SOFTWARE\Auslogics
HKLM\SOFTWARE\Automatos
HKLM\SOFTWARE\Baidu
HKLM\SOFTWARE\BigFix
HKLM\SOFTWARE\BisonCam
HKLM\SOFTWARE\CBSTEST
HKLM\SOFTWARE\CheckPoint
HKLM\SOFTWARE\Citrix
HKLM\SOFTWARE\CloudOPTInfo
HKLM\SOFTWARE\Cnxt_Uiu_Parms
HKLM\SOFTWARE\CompSoft
HKLM\SOFTWARE\Conexant
HKLM\SOFTWARE\Cygwin
HKLM\SOFTWARE\DameWare Development
HKLM\SOFTWARE\GNU
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\GPL Ghostscript
HKLM\SOFTWARE\HaaliMkx
HKLM\SOFTWARE\Hewlett-Packard
HKLM\SOFTWARE\IBM
HKLM\SOFTWARE\Icaros
HKLM\SOFTWARE\ICE
HKLM\SOFTWARE\ImgBurn
HKLM\SOFTWARE\InstalledOptions
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\InterVideo
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\KLCodecPack
HKLM\SOFTWARE\LAV
HKLM\SOFTWARE\Lavasoft
HKLM\SOFTWARE\LENOVO
HKLM\SOFTWARE\Lexmark
HKLM\SOFTWARE\LexmarkInkjet
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Molicar3
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\Opera Software
HKLM\SOFTWARE\ORACLE
HKLM\SOFTWARE\pss
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Receptor
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RTLSetup
HKLM\SOFTWARE\Safer Networking Limited
HKLM\SOFTWARE\Samsung
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\Swearware
HKLM\SOFTWARE\Symantec
HKLM\SOFTWARE\TeamViewer
HKLM\SOFTWARE\TrendMicro
HKLM\SOFTWARE\UIU
HKLM\SOFTWARE\VB and VBA Program Settings
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\Widcomm
HKLM\SOFTWARE\WOW6432Node
HKLM\SOFTWARE\Description
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AIDeX
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Audatex
HKCU\SOFTWARE\Avira
HKCU\SOFTWARE\Baidu
HKCU\SOFTWARE\Baixaki
HKCU\SOFTWARE\BigFix
HKCU\SOFTWARE\CheckPoint
HKCU\SOFTWARE\CompSoft
HKCU\SOFTWARE\Convar
HKCU\SOFTWARE\eM Client
HKCU\SOFTWARE\GbPlugin
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\IBM
HKCU\SOFTWARE\Icaros
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Lenovo
HKCU\SOFTWARE\LexmarkInkjet
HKCU\SOFTWARE\LexmarkPhoto
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\madshi
HKCU\SOFTWARE\MediaInfo
HKCU\SOFTWARE\Mooii
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\MPC-HC
HKCU\SOFTWARE\Naviextras
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\PTP
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Safer Networking Limited
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\SourceForge
HKCU\SOFTWARE\SqlDbx
HKCU\SOFTWARE\Symantec
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\TomTom
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\VSRevoGroup
HKCU\SOFTWARE\Wget
HKCU\SOFTWARE\Widcomm
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Toolkit
HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner
HKCU\SOFTWARE\AppDataLow\Software\Barksdale
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft
HKCU\SOFTWARE\AppDataLow\Software\Unity

---\\ Conteúdo das pastas Programs (218) - 31s
O43 - CFD: 27/04/2015 - [] D -- C:\Program Files\7-Zip
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 27/03/2014 - [] D -- C:\Program Files\Aladdin {6BEA1E66D2B4A57E74CE91893FACE0D8}
O43 - CFD: 24/03/2014 - [] SHD -- C:\Program Files\Arquivos Comuns =>.Symantec Corporation®
O43 - CFD: 08/05/2015 - [0] D -- C:\Program Files\Avira
O43 - CFD: 29/12/2015 - [0] D -- C:\Program Files\baidu
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\BigFix Enterprise {04FF9F7B8D388B6D5F7366B7399AF0C3}
O43 - CFD: 27/03/2014 - [] D -- C:\Program Files\CheckPoint
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Cisco
O43 - CFD: 25/03/2014 - [] D -- C:\Program Files\Citrix {6796277C4947E65B9CA85346EB80DE17}
O43 - CFD: 17/12/2015 - [] D -- C:\Program Files\Common Files
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\CONEXANT =>.Conexant Systems, Inc.®
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\DoroPDFWriter
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\DVD Maker
O43 - CFD: 22/04/2015 - [] D -- C:\Program Files\GbPlugin {12D257F7955AC6D6A4365FB70A3DC10A}
O43 - CFD: 21/04/2015 - [] D -- C:\Program Files\Google =>.Google Inc®
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files\HP =>.Hewlett Packard®
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\ibm {63CD26DF48BB82DF3837F2E3A0DDCBBC}
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\ImgBurn
O43 - CFD: 20/04/2015 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Integrated Camera Driver
O43 - CFD: 25/03/2014 - [] D -- C:\Program Files\Intel =>.Microsoft Windows®
O43 - CFD: 29/04/2015 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Java =>.Oracle America, Inc.®
O43 - CFD: 02/02/2015 - [] D -- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Lenovo {3AE1F834FA867FF5102FBE94ADF86384}
O43 - CFD: 07/11/2014 - [] D -- C:\Program Files\Lexmark {2DB3E1BE80A3B095FD2C799AE03019EA}
O43 - CFD: 07/11/2014 - [] D -- C:\Program Files\Lexmark S300-S400 Series {2DB3E1BE80A3B095FD2C799AE03019EA}
O43 - CFD: 07/11/2014 - [] D -- C:\Program Files\Lexmark Toolbar
O43 - CFD: 18/07/2014 - [] D -- C:\Program Files\Marcos Velasco Security
O43 - CFD: 16/12/2015 - [0] D -- C:\Program Files\Microsoft
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Microsoft Analysis Services
O43 - CFD: 17/12/2015 - [0] D -- C:\Program Files\Microsoft Silverlight
O43 - CFD: 18/07/2014 - [] D -- C:\Program Files\Microsoft SQL Server =>.Microsoft Corporation®
O43 - CFD: 18/07/2014 - [] D -- C:\Program Files\Microsoft Visual Studio 9.0
O43 - CFD: 18/07/2014 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\MSSOAP
O43 - CFD: 24/03/2014 - [0] D -- C:\Program Files\MSXML 4.0
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files\OI
O43 - CFD: 11/08/2015 - [] D -- C:\Program Files\Opera
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Oracle
O43 - CFD: 13/10/2015 - [] D -- C:\Program Files\PhotoScape =>.Mooii Tech®
O43 - CFD: 27/03/2014 - [] D -- C:\Program Files\Realtek =>.Realtek Semiconductor Corp®
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Ricoh
O43 - CFD: 02/04/2015 - [] D -- C:\Program Files\Samsung =>.DEVGURU CO LTD®
O43 - CFD: 29/12/2015 - [] D -- C:\Program Files\Spybot - Search & Destroy 2 =>.Safer Networking Ltd.®
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Symantec =>.Symantec Corporation®
O43 - CFD: 15/07/2014 - [] D -- C:\Program Files\TeamViewer =>.TeamViewer®
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\ThinkPad =>.Broadcom Corporation®
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\tivoli {63ACB2CBE8CF97D66478469F5CE0D445}
O43 - CFD: 11/09/2014 - [] D -- C:\Program Files\TomTom International B.V
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 22/04/2015 - [] D -- C:\Program Files\VS Revo Group =>.VS Revo Group®
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation®
O43 - CFD: 20/11/2010 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 27/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
O43 - CFD: 24/03/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 24/03/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audatex
O43 - CFD: 27/03/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point VPN-1 SecureClient
O43 - CFD: 27/03/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eToken
O43 - CFD: 12/04/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 21/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 20/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hewlett-Packard Company
O43 - CFD: 16/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 02/02/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
O43 - CFD: 24/03/2014 - [] HD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
O43 - CFD: 07/11/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexmark
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 18/07/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Marcos Velasco Security
O43 - CFD: 17/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 17/07/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SOAP Toolkit Version 3
O43 - CFD: 18/07/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
O43 - CFD: 18/07/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 R2
O43 - CFD: 16/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oi
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle - ORA1020
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle Installation Products
O43 - CFD: 13/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
O43 - CFD: 02/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sistema Audatex
O43 - CFD: 29/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
O43 - CFD: 11/09/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 19/09/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Symantec Endpoint Protection
O43 - CFD: 12/04/2011 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Audatex
O43 - CFD: 08/05/2015 - [] D -- C:\ProgramData\Avira
O43 - CFD: 08/05/2015 - [] D -- C:\ProgramData\Baidu
O43 - CFD: 06/03/2015 - [] D -- C:\ProgramData\BigFix
O43 - CFD: 29/04/2015 - [0] D -- C:\ProgramData\bufelwnivvbae
O43 - CFD: 29/04/2015 - [0] D -- C:\ProgramData\cficuxczswmzm
O43 - CFD: 25/03/2014 - [] D -- C:\ProgramData\Citrix
O43 - CFD: 24/03/2014 - [0] SHD -- C:\ProgramData\Dados de aplicativos
O43 - CFD: 14/07/2009 - [] SHD -- C:\ProgramData\Desktop
O43 - CFD: 29/04/2015 - [0] D -- C:\ProgramData\dhpnmbgidnuib
O43 - CFD: 07/05/2015 - [] D -- C:\ProgramData\Doctor Web
O43 - CFD: 24/03/2014 - [] SHD -- C:\ProgramData\Documentos
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 07/11/2014 - [] D -- C:\ProgramData\Ezprint
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 24/03/2014 - [0] SHD -- C:\ProgramData\Favoritos
O43 - CFD: 27/03/2014 - [] D -- C:\ProgramData\GAS Tecnologia
O43 - CFD: 23/12/2015 - [] D -- C:\ProgramData\GbPlugin
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\GroupPolicy
O43 - CFD: 11/09/2015 - [] D -- C:\ProgramData\HP
O43 - CFD: 31/10/2014 - [] D -- C:\ProgramData\IBM
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\Intel
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\lenovo
O43 - CFD: 26/12/2014 - [] D -- C:\ProgramData\Lexmark S300-S400 Series
O43 - CFD: 02/02/2015 - [] D -- C:\ProgramData\Lx_cats
O43 - CFD: 23/04/2015 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 24/03/2014 - [] SHD -- C:\ProgramData\Menu Iniciar
O43 - CFD: 29/12/2015 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 17/12/2015 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 24/03/2014 - [0] SHD -- C:\ProgramData\Modelos
O43 - CFD: 08/05/2015 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 29/04/2015 - [0] D -- C:\ProgramData\mwcqhaojcjszl
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\OI
O43 - CFD: 24/03/2014 - [0] D -- C:\ProgramData\Oracle
O43 - CFD: 08/05/2015 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 15/07/2014 - [] D -- C:\ProgramData\regid.1992-12.com.symantec
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\regid.1992_12.com.symantec
O43 - CFD: 07/05/2015 - [] D -- C:\ProgramData\RogueKiller
O43 - CFD: 02/04/2015 - [] D -- C:\ProgramData\Samsung
O43 - CFD: 29/12/2015 - [] D -- C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 14/07/2009 - [] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 24/03/2014 - [] D -- C:\ProgramData\Sun
O43 - CFD: 22/12/2015 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 29/04/2015 - [0] D -- C:\ProgramData\unmeblgrodxqu
O43 - CFD: 11/09/2015 - [] D -- C:\ProgramData\WEBREG
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Common Files\Dao
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 25/03/2014 - [] D -- C:\Program Files\Common Files\Intel
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 25/03/2014 - [] D -- C:\Program Files\Common Files\Lenovo
O43 - CFD: 16/12/2015 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Common Files\MSSoap
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Common Files\ODBC
O43 - CFD: 24/03/2014 - [] D -- C:\Program Files\Common Files\Real
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 24/03/2014 - [] SHD -- C:\Program Files\Common Files\Sistema
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 19/09/2014 - [] D -- C:\Program Files\Common Files\Symantec Shared
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 27/03/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\Adobe
O43 - CFD: 08/05/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\Baidu
O43 - CFD: 08/04/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\DivX
O43 - CFD: 28/04/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\eM Client
O43 - CFD: 11/09/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\HP
O43 - CFD: 27/03/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\ICAClient
O43 - CFD: 27/03/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\Identities
O43 - CFD: 27/03/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\Intel
O43 - CFD: 07/05/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\LavasoftStatistics
O43 - CFD: 14/05/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\LibreOffice
O43 - CFD: 04/12/2014 - [0] D -- D:\Users\ma084140\AppData\Roaming\Lightcomm
O43 - CFD: 27/03/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\Macromedia
O43 - CFD: 12/04/2011 - [0] D -- D:\Users\ma084140\AppData\Roaming\Media Center Programs
O43 - CFD: 08/04/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\Media Player Classic
O43 - CFD: 29/04/2015 - [] SD -- D:\Users\ma084140\AppData\Roaming\Microsoft
O43 - CFD: 08/05/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\Mozilla
O43 - CFD: 04/02/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\MPC-HC
O43 - CFD: 11/08/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\Opera Software
O43 - CFD: 04/11/2015 - [0] D -- D:\Users\ma084140\AppData\Roaming\PhotoScape
O43 - CFD: 02/04/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\Samsung
O43 - CFD: 01/04/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\TeamViewer
O43 - CFD: 17/07/2014 - [] D -- D:\Users\ma084140\AppData\Roaming\Trend Consulting
O43 - CFD: 29/12/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\ZHP
O43 - CFD: 15/06/2015 - [] D -- D:\Users\ma084140\AppData\Local\Adobe
O43 - CFD: 02/06/2015 - [] D -- D:\Users\ma084140\AppData\Local\Apps
O43 - CFD: 17/12/2015 - [] D -- D:\Users\ma084140\AppData\Local\BigFix
O43 - CFD: 27/03/2014 - [] D -- D:\Users\ma084140\AppData\Local\Broadcom
O43 - CFD: 27/03/2014 - [] D -- D:\Users\ma084140\AppData\Local\Citrix
O43 - CFD: 28/12/2015 - [] D -- D:\Users\ma084140\AppData\Local\CrashDumps
O43 - CFD: 27/03/2014 - [0] SHD -- D:\Users\ma084140\AppData\Local\Dados de aplicativos
O43 - CFD: 21/04/2015 - [0] D -- D:\Users\ma084140\AppData\Local\Deployment
O43 - CFD: 28/09/2015 - [] D -- D:\Users\ma084140\AppData\Local\Diagnostics
O43 - CFD: 15/09/2015 - [] D -- D:\Users\ma084140\AppData\Local\ElevatedDiagnostics
O43 - CFD: 29/04/2015 - [] SHD -- D:\Users\ma084140\AppData\Local\EmieBrowserModeList
O43 - CFD: 29/04/2015 - [] SHD -- D:\Users\ma084140\AppData\Local\EmieSiteList
O43 - CFD: 29/04/2015 - [] SHD -- D:\Users\ma084140\AppData\Local\EmieUserList
O43 - CFD: 16/01/2015 - [] D -- D:\Users\ma084140\AppData\Local\fontconfig
O43 - CFD: 15/09/2015 - [] D -- D:\Users\ma084140\AppData\Local\Google
O43 - CFD: 27/03/2014 - [0] SHD -- D:\Users\ma084140\AppData\Local\Histórico
O43 - CFD: 26/06/2014 - [] D -- D:\Users\ma084140\AppData\Local\Lenovo
O43 - CFD: 16/12/2015 - [] D -- D:\Users\ma084140\AppData\Local\Microsoft
O43 - CFD: 19/08/2014 - [0] D -- D:\Users\ma084140\AppData\Local\Microsoft Help
O43 - CFD: 16/01/2015 - [] D -- D:\Users\ma084140\AppData\Local\MiniService
O43 - CFD: 08/05/2015 - [] D -- D:\Users\ma084140\AppData\Local\Mozilla
O43 - CFD: 11/08/2015 - [] D -- D:\Users\ma084140\AppData\Local\Opera Software
O43 - CFD: 02/02/2015 - [] D -- D:\Users\ma084140\AppData\Local\Programs
O43 - CFD: 15/07/2014 - [] D -- D:\Users\ma084140\AppData\Local\SqlDbx
O43 - CFD: 27/03/2014 - [] D -- D:\Users\ma084140\AppData\Local\Symantec
O43 - CFD: 29/12/2015 - [] D -- D:\Users\ma084140\AppData\Local\Temp
O43 - CFD: 27/03/2014 - [0] SHD -- D:\Users\ma084140\AppData\Local\Temporary Internet Files
O43 - CFD: 11/09/2014 - [0] D -- D:\Users\ma084140\AppData\Local\TomTom
O43 - CFD: 12/05/2014 - [] D -- D:\Users\ma084140\AppData\Local\Unity
O43 - CFD: 24/03/2014 - [] RD -- D:\Users\ma084140\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 27/03/2014 - [] RD -- D:\Users\ma084140\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 27/03/2014 - [0] D -- D:\Users\ma084140\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ambiente do Usuário ma084140
O43 - CFD: 11/08/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar
O43 - CFD: 16/11/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dispositivos Bluetooth
O43 - CFD: 24/03/2014 - [] RD -- D:\Users\ma084140\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 22/04/2015 - [] D -- D:\Users\ma084140\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
O43 - CFD: 27/03/2014 - [] RD -- D:\Users\ma084140\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ Softwares de proteçao do sistema (Supérfluo) (3) - 0s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL de Extensão do Shell do Armazenamento A.) -- C:\Windows\System32\EhStorShell.dll ©
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - Interface de usuário de cache do cliente.) -- C:\Windows\System32\cscui.dll ©
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensões do Shell para compartilhamento.) -- C:\Windows\System32\ntshrui.dll ©

---\\ Lista dos drivers do sistema (104) - 69s
O58 - SDL:2011/03/04 19:14:34 A . (.Ricoh co.,Ltd. - Ricoh USB Camera driver.) -- C:\Windows\System32\drivers\5U877.sys [132096]
O58 - SDL:2009/07/13 23:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] =>.Microsoft Windows®
O58 - SDL:2008/07/29 17:40:04 A . (.Aladdin Knowledge Systems, Ltd. - PCSC IFD handler for eToken.) -- C:\Windows\System32\drivers\aksifdh.sys [48296] {7BD92765A3195DD9F2D53F0CDEB5D062}
O58 - SDL:2008/07/29 17:40:04 A . (.Aladdin Knowledge Systems, Ltd. - USB pipe driver for eToken.) -- C:\Windows\System32\drivers\aksup.sys [34472] {7BD92765A3195DD9F2D53F0CDEB5D062}
O58 - SDL:2009/07/13 23:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] =>.Microsoft Windows®
O58 - SDL:2010/11/20 19:29:03 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] =>.Microsoft Windows®
O58 - SDL:2010/11/20 19:29:03 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] =>.Microsoft Windows®
O58 - SDL:2009/07/13 20:02:49 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] ©
O58 - SDL:2009/07/13 20:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] ©
O58 - SDL:2009/07/13 20:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] ©
O58 - SDL:2009/07/13 22:57:25 A . (.Brother Industries Ltd. - Brother Serial I/F Driver (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] ©
O58 - SDL:2009/07/13 20:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] ©
O58 - SDL:2009/07/13 20:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] ©
O58 - SDL:2009/07/13 20:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] ©
O58 - SDL:2012/12/04 05:38:12 A . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter for Windo.) -- C:\Windows\System32\drivers\btwampfl.sys [508184] =>.Broadcom Corporation®
O58 - SDL:2012/05/02 08:18:16 A . (.Broadcom Corporation. - Bluetooth Audio Device.) -- C:\Windows\System32\drivers\btwaudio.sys [152400] =>.Broadcom Corporation®
O58 - SDL:2012/03/06 13:29:16 A . (.Broadcom Corporation. - Broadcom Bluetooth AVDT Service.) -- C:\Windows\System32\drivers\btwavdt.sys [175144] =>.Broadcom Corporation®
O58 - SDL:2011/09/18 02:36:56 A . (.Broadcom Corporation. - Broadcom Bluetooth L2CAP Service.) -- C:\Windows\System32\drivers\btwl2cap.sys [33832] =>.Broadcom Corporation®
O58 - SDL:2012/03/06 13:28:58 A . (.Broadcom Corporation. - Bluetooth Remote Control HID Minidriver.) -- C:\Windows\System32\drivers\btwrchid.sys [18728] =>.Broadcom Corporation®
O58 - SDL:2009/07/13 20:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] ©
O58 - SDL:2011/03/24 16:37:22 A . (.Conexant Systems Inc. - High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\CHDRT32.sys [1280128] =>.Conexant Systems, Inc.®
O58 - SDL:2009/07/13 23:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] =>.Microsoft Windows®
O58 - SDL:2010/07/14 13:51:56 A . (.Citrix Systems, Inc. - Citrix USB Filter Driver.) -- C:\Windows\System32\drivers\ctxusbm.sys [65584] {39C70944F2C31AB974E85B3388A34F39} ©
O58 - SDL:2007/02/07 11:00:00 A . (.DameWare Development, LLC - DameWare Development Mirror Miniport Driver.) -- C:\Windows\System32\drivers\DamewareMini.sys [3712]
O58 - SDL:2009/07/13 23:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] =>.Microsoft Windows®
O58 - SDL:2007/02/15 11:00:00 A . (.DameWare - DameWare Virtual Keyboard Driver.) -- C:\Windows\System32\drivers\dwvkbd.sys [26624] ©
O58 - SDL:2009/07/13 23:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] =>.Microsoft Windows®
O58 - SDL:2009/07/13 20:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] ©
O58 - SDL:2008/06/18 14:46:56 A . (.Check Point Software Technologies - .) -- C:\Windows\System32\drivers\fw.sys [2235760] ©
O58 - SDL:2014/05/06 16:04:04 A . (.GAS Tecnologia - GbPlugin Device Driver.) -- C:\Windows\System32\drivers\gbpkm.sys [46392] {12D257F7955AC6D6A4365FB70A3DC10A}
O58 - SDL:2014/04/04 06:32:29 A . (.GAS Tecnologia - GAS Tecnologia - LWF Helper Driver.) -- C:\Windows\System32\drivers\gbpndisrdn.sys [29400] {58C005F9811C3FD333668072A04E0D1B}
O58 - SDL:2009/07/13 20:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] ©
O58 - SDL:2010/10/19 17:33:40 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECI.sys [41088] ©
O58 - SDL:2009/07/13 23:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] =>.Microsoft Windows®
O58 - SDL:2010/11/20 19:29:03 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160] =>.Microsoft Windows®
O58 - SDL:2013/12/17 18:59:58 A . (.Lenovo. - Lenovo Power Management Driver.) -- C:\Windows\System32\drivers\ibmpmdrv.sys [45880] {1CA08E795C58A609AE46FE0B7FDBC08B}
O58 - SDL:2011/08/19 15:20:18 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [10843136] ©
O58 - SDL:2009/07/13 23:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040] =>.Microsoft Windows®
O58 - SDL:2011/08/19 15:20:38 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [269824] ©
O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848] =>.Microsoft Windows®
O58 - SDL:2009/06/29 13:16:40 A . (.ZTE Incorporated - ZTE CDROM Filter.) -- C:\Windows\System32\drivers\massfilter.sys [7680] ©
O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584] =>.Microsoft Windows®
O58 - SDL:2009/07/13 21:25:59 A . (...) -- C:\Windows\System32\drivers\monitor.sys [23552]
O58 - SDL:2011/08/03 18:27:18 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETwNs32.sys [7517696] ©
O58 - SDL:2009/07/13 23:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624] =>.Microsoft Windows®
O58 - SDL:2010/11/20 19:29:03 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120] =>.Microsoft Windows®
O58 - SDL:2010/11/20 19:29:03 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744] =>.Microsoft Windows®
O58 - SDL:2008/06/18 14:46:58 A . (.Check Point Software Technologies - .) -- C:\Windows\System32\drivers\omdrv.sys [47504] ©
O58 - SDL:2009/07/13 23:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064] =>.Microsoft Windows®
O58 - SDL:2011/05/25 18:22:00 A . (.REDC - RICOH PCIe SDXC/MMC Controller Driver.) -- C:\Windows\System32\drivers\risdxc86.sys [76288] ©
O58 - SDL:2012/05/24 14:21:40 A . (...) -- C:\Windows\System32\drivers\RsFx0150.sys [240608]
O58 - SDL:2012/06/13 19:22:22 A . (...) -- C:\Windows\System32\drivers\RsFx0151.sys [240736]
O58 - SDL:2012/06/13 19:22:22 A . (...) -- C:\Windows\System32\drivers\RsFx0152.sys [239968]
O58 - SDL:2012/06/29 02:24:02 A . (...) -- C:\Windows\System32\drivers\RsFx0153.sys [249288]
O58 - SDL:2010/12/29 04:45:54 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Dr.) -- C:\Windows\System32\drivers\Rt86win7.sys [327784] =>.Realtek Semiconductor Corp®
O58 - SDL:2008/06/18 14:46:54 A . (.Check Point Software Technologies - .) -- C:\Windows\System32\drivers\scap.sys [17456] ©
O58 - SDL:2009/07/13 18:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] ©
O58 - SDL:2009/07/13 23:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888] =>.Microsoft Windows®
O58 - SDL:2010/09/07 15:09:06 A . (.Lenovo Group Limited - SMI Driver for Lenovo system.) -- C:\Windows\System32\drivers\smiif32.sys [13680] {5765B91CC62D05615FBB43273CEF015B} ©
O58 - SDL:2011/02/08 05:00:59 N . (.Samsung Electronics - 32bit Port Contention Driver.) -- C:\Windows\System32\drivers\SSPORT.SYS [5120] ©
O58 - SDL:2014/10/13 03:57:48 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [89856] =>.DEVGURU CO LTD®
O58 - SDL:2014/10/13 03:57:48 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [184192] =>.DEVGURU CO LTD®
O58 - SDL:2009/07/13 23:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072] =>.Microsoft Windows®
O58 - SDL:2014/09/18 21:39:12 A . (.Symantec Corporation - Symantec Event Library.) -- C:\Windows\System32\drivers\SYMEVENT.SYS [142936] =>.Symantec Corporation®
O58 - SDL:2014/09/19 07:12:10 A . (.Symantec Corporation - Symantec CMC Firewall SysPlant.) -- C:\Windows\System32\drivers\SysPlant.sys [128096] =>.Symantec Corporation®
O58 - SDL:2015/12/17 09:02:02 A . (...) -- C:\Windows\System32\drivers\tcpv6srv.sys [0]
O58 - SDL:2014/07/15 21:42:57 A . (.Symantec Corporation - Symantec CMC Firewall Teefer3.) -- C:\Windows\System32\drivers\Teefer.sys [81824] {2BBAF83D7BEDD958309D62B93EE41074} ©
O58 - SDL:2015/05/07 19:26:10 A . (...) -- C:\Windows\System32\drivers\TrueSight.sys [35064] =>.Adlice®
O58 - SDL:2009/07/13 23:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976] =>.Microsoft Windows®
O58 - SDL:2008/06/18 14:46:54 A . (.Check Point Software Technologies - .) -- C:\Windows\System32\drivers\vnasc.sys [121136] ©
O58 - SDL:2008/06/18 14:46:52 A . (.Check Point Software Technologies - .) -- C:\Windows\System32\drivers\vpn.sys [673872] ©
O58 - SDL:2009/07/13 23:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904] =>.Microsoft Windows®
O58 - SDL:2014/09/19 07:12:11 A . (.Symantec Corporation - Symantec Network Access Control Protocol Dr.) -- C:\Windows\System32\drivers\WGX.SYS [33744] =>.Symantec Corporation®
O58 - SDL:2009/06/29 13:16:40 A . (.ZTE - USB SmartCard Reader Driver.) -- C:\Windows\System32\drivers\ZTEusbccid.sys [13824] ©
O58 - SDL:2009/06/29 13:16:40 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbmdm6k.sys [104960] ©
O58 - SDL:2009/06/29 13:16:40 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbnmea.sys [104960] ©
O58 - SDL:2009/06/29 13:16:40 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ZTEusbser6k.sys [104960] ©
O58 - SDL:2009/07/13 19:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2009/07/13 19:40:44 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2009/07/13 19:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2009/07/13 19:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2009/07/13 19:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2009/07/13 19:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2009/07/13 19:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2009/07/13 19:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2009/07/13 19:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2009/07/13 19:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2009/07/13 19:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2009/07/13 19:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2009/07/13 19:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2009/07/13 19:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2009/07/13 19:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]
O58 - SDL:2014/11/28 17:12:08 A . (...) -- C:\Windows\System32\tgrab.sys [8288]

---\\ Últimos ficheiros alterados ou criados (Utilizador) (1) - 90s
O61 - LFC: 2015/12/28 11:51:10 A . (..) -- D:\Users\ma084140\AppData\Local\Adobe\Acrobat\11.0\UserCache.bin [95412]

---\\ Associações Shell Spawning (9) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de inicialização Internet (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Pesquisa de infeção nos navegadores da Internet (2) - 1s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/

---\\ Listagem dos serviços iniciados pelo Svchost (33) - 2s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Serviço de Experiência com Aplicativo.) -- C:\Windows\System32\aelupsvc.dll [62464] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\Windows\System32\certprop.dll [67584] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\Windows\System32\certprop.dll [67584] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\Windows\System32\srvsvc.dll [168960] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Diretiva de Grupo.) -- C:\Windows\System32\gpsvc.dll [593408] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\Windows\System32\IKEEXT.DLL [674304] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Serviço de Áudio do Windows.) -- C:\Windows\System32\audiosrv.dll [473600] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acess.) -- C:\Windows\System32\rasauto.dll [90624] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\Windows\System32\rasmans.dll [286208] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll [75264] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistem.) -- C:\Windows\System32\Sens.dll [49664] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\Windows\System32\ipnathlp.dll [300544] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft(R) Windo.) -- C:\Windows\System32\tapisrv.dll [242176] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gerenciador de Conexões Remotas do Servidor.) -- C:\Windows\System32\termsrv.dll [521216] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [1914368] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de pla.) -- C:\Windows\System32\qmgr.dll [585728] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll [328192] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em u.) -- C:\Windows\System32\iphlpsvc.dll [499712] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\Windows\System32\seclogon.dll [21504] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\Windows\System32\appinfo.dll [47104] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Serviço Agendador de Classes de Multimídia.) -- C:\Windows\System32\mmcss.dll [49664] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\Windows\System32\wercplsupport.dll [61440] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\Windows\System32\eapsvc.dll [98304] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [164352] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\Windows\System32\schedsvc.dll [750592] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Serviço de Gerenciamento de Chaves.) -- C:\Windows\System32\KMSVC.DLL [71168] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho.) -- C:\Windows\System32\SessEnv.dll [113664] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\Windows\System32\browser.dll [102400] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\Windows\System32\themeservice.dll [37376] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\Windows\System32\bdesvc.dll [76800] ©
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Serviço de instalação do software.) -- C:\Windows\System32\appmgmts.dll [149504] ©

---\\ Lista das exceções do FireWall (FirewallRules) (5) - 3s
O87 - FAEL: "TCP Query User{04FF4E77-1DB8-4954-AE3D-D71925250536}C:\audatex\axcom.exe" [In-None-P6-TRUE] .(...) -- C:\audatex\axcom.exe
O87 - FAEL: "UDP Query User{6B454316-38A7-4024-AD6F-025CA27AE8EA}C:\audatex\axcom.exe" [In-None-P17-TRUE] .(...) -- C:\audatex\axcom.exe
O87 - FAEL: "{3983D583-E07A-4331-8BB1-EAE3FB3B2605}" [In-None-P17-TRUE] .(...) -- C:\Windows\system32\lxeacoms.exe {379E69DA6C2693E3297B6FE45D78EBE1}
O87 - FAEL: "{47FDDED7-A63D-40E5-90D4-836B281EE56A}" [In-None-P17-TRUE] .(...) -- C:\Windows\system32\LXEAcoms.exe {379E69DA6C2693E3297B6FE45D78EBE1}
O87 - FAEL: "{F3C52D59-9EEB-4154-AA40-D3B25DF4DD31}" [In-None-P17-TRUE] .(...) -- C:\Windows\system32\LXEAcoms.exe {379E69DA6C2693E3297B6FE45D78EBE1}

---\\ Serviços não Microsoft (SR=Executados, SS=Parados) (35) - 21s

SR - Auto [28/10/2015] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SS - Demand [18/11/2015] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [03/12/2014] [ 6611216] BES Client (BESClient) . (.IBM Corp..) - C:\Program Files\BigFix Enterprise\BES Client\BESClient.exe {04FF9F7B8D388B6D5F7366B7399AF0C3} ©
SR - Auto [24/03/2014] [ 737367] BESClientHelper (BESClientHelper) . (.BigFix Inc..) - C:\Program Files\BigFix Enterprise\BES Client\BESClientHelper.exe
SR - Auto [14/05/2013] [ 829656] Bluetooth Service (btwdins) . (.Broadcom Corporation..) - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe =>.Broadcom Corporation®
SR - Auto [17/12/2010] [ 190592] @C:\Windows\system32\CxAudMsg32.exe,-100 (CxAudMsg) . (.Conexant Systems Inc..) - C:\Windows\System32\CxAudMsg32.exe =>.Conexant Systems, Inc.®
SR - Auto [04/02/2009] [ 256000] DameWare Mini Remote Control (DWMRCS) . (.DameWare Development LLC.) - C:\Windows\System32\DWRCS.EXE
SR - Auto [15/11/2009] [ 12640] ETOKSRV (eTSrv) . (.Aladdin Knowledge Systems, Ltd..) - C:\Program Files\Aladdin\eToken\PKIClient\x32\eTSrv.exe {6BEA1E66D2B4A57E74CE91893FACE0D8}
SR - Auto [27/07/2011] [ 936208] Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe =>.Intel Corporation - Mobile Wireless Group®
SR - Auto [06/05/2014] [ 527928] Gbp Service (GbpSv) . (.GAS Tecnologia.) - C:\Program Files\GbPlugin\gbpsv.exe {12D257F7955AC6D6A4365FB70A3DC10A}
SS - Auto [21/04/2015] [ 107848] Serviço do Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [21/04/2015] [ 107848] Serviço do Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Auto [17/12/2013] [ 56664] Lenovo PM Service (IBMPMSVC) . (.Lenovo..) - C:\Windows\System32\ibmpmsvc.exe {1CA08E795C58A609AE46FE0B7FDBC08B}
SR - Auto [24/06/2013] [ 110072] Lenovo Microphone Mute (LENOVO.MICMUTE) . (.Lenovo Group Limited.) - C:\Program Files\Lenovo\HOTKEY\micmute.exe {6433A25DB5498D25B5D53720AD2374B6} ©
SR - Auto [12/07/2011] [ 127336] Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) . (.Lenovo Group Limited.) - C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe {3AE1F834FA867FF5102FBE94ADF86384} ©
SS - Auto [14/04/2010] [ 193192] lxeaCATSCustConnectService (lxeaCATSCustConnectService) . (.Lexmark International, Inc..) - C:\Windows\System32\spool\drivers\w32x86\3\lxeaserv.exe {379E69DA6C2693E3297B6FE45D78EBE1} ©
SS - Disabl [14/04/2010] [ 598696] lxea_device (lxea_device) . (...) - C:\Windows\System32\lxeacoms.exe {379E69DA6C2693E3297B6FE45D78EBE1}
SR - Auto [11/10/2006] [ 53248] OracleMTSRecoveryService (OracleMTSRecoveryService) . (.Oracle Corporation.) - C:\oracle\ORA1020\BIN\omtsreco.exe ©
SR - Auto [27/07/2011] [ 481552] Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe =>.Intel Corporation - Mobile Wireless Group®
SR - Auto [07/01/2011] [ 446592] Conexant SmartAudio service (SAService) . (.Conexant Systems, Inc..) - C:\Windows\System32\SASrv.exe =>.Conexant Systems, Inc.®
SR - Auto [24/06/2014] [ 1738168] Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe =>.Safer Networking Ltd.®
SR - Auto [27/06/2014] [ 2088408] Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe =>.Safer Networking Ltd.®
SR - Auto [25/04/2014] [ 171928] Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe =>.Safer Networking Ltd.®
SR - Auto [15/07/2014] [ 144496] Symantec Endpoint Protection (SepMasterService) . (.Symantec Corporation.) - C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4112.4156.105\Bin\ccSvcHst.exe =>.Symantec Corporation®
SR - Demand [18/09/2014] [ 1746696] Symantec Management Client (SmcService) . (.Symantec Corporation.) - C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4112.4156.105\Bin\Smc.exe =>.Symantec Corporation®
SS - Demand [18/09/2014] [ 289136] Symantec Network Access Control (SNAC) . (.Symantec Corporation.) - C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.4112.4156.105\Bin\snac.exe =>.Symantec Corporation®
SR - Auto [18/06/2008] [ 106613] Check Point VPN-1 Securemote service (SR_Service) . (.Check Point Software Technologies.) - C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe ©
SR - Auto [18/06/2008] [ 36982] Check Point VPN-1 Securemote watchdog (SR_Watchdog) . (.Check Point Software Technologies.) - C:\Program Files\CheckPoint\SecuRemote\bin\SR_Watchdog.exe ©
SR - Auto [13/10/2014] [ 743688] SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD..) - C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe =>.DEVGURU CO LTD®
SS - Demand [14/02/2014] [ 24120] System Update (SUService) . (.Copyright © 2014.) - C:\Program Files\Lenovo\System Update\SUService.exe =>.Lenovo Information Products (Shenzhen) Co.,Ltd®
SR - Auto [12/09/2014] [ 4799760] TeamViewer 9 (TeamViewer9) . (.TeamViewer GmbH.) - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe =>.TeamViewer®
SR - Auto [20/06/2013] [ 115704] Lenovo Hotkey Client Loader (TPHKLOAD) . (.Lenovo Group Limited.) - C:\Program Files\Lenovo\HOTKEY\tphkload.exe {6433A25DB5498D25B5D53720AD2374B6} ©
SR - Auto [20/06/2013] [ 125504] On Screen Display (TPHKSVC) . (.Lenovo Group Limited.) - C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe {6433A25DB5498D25B5D53720AD2374B6} ©
SR - Auto [28/11/2014] [ 923960] IBM Endpoint Manager for Remote Control - Target (TRCTARGET) . (.IBM Corporation.) - C:\Program Files\ibm\tivoli\Remote Control\Target\trc_base.exe {63CD26DF48BB82DF3837F2E3A0DDCBBC} ©

---\\ Scâner Aditional (1) - 0s
HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner

---\\ Informações complémentaires do módulos (1) - 0s
http://www.nicolascoolman.fr/?p=712 =>PUP.Optional.ToolbarCleaner

~ End of the scan, 20014 items in 00h07mn17s (868)(0)