~ ZHPDiag v2015.8.23.124 Por Nicolas Coolman (2015/08/23)
~ iniciado por Thiago (Administrator)  (2015/08/23 11:38:20)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Status da versão:  Version OK
~ Modo: Scanner
~ Relatório: C:\Users\Thiago\Desktop\ZHPDiag.txt
~ Relatório: C:\Users\Thiago\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Inicialização do sistema: Normal (Normal boot)
Windows 10 Pro, 64-bit  (Build 10240)

---\\ Navegadores Internet (3) - 0s
GCIE: Google Chrome v44.0.2403.157
MFIE: Mozilla Firefox 39.0 (x86 pt-BR) v39.0
MSIE: Internet Explorer v11.0.10240.16431

---\\ Informações sobre os produtos Windows (4) - 1s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK (Auto)
Windows Activation Technologies : OK

---\\ Softwares de proteçao do sistema (3) - 1s
Avast Free Antivirus v10.3.2225
Malwarebytes Anti-Malware versão 2.1.8.1057
Windows Defender W10 (Deactivate)

---\\ Softwares de proteçao do sistema (Supérfluo) (1) - 1s
SpyHunter 4 v4.20.9.4533

---\\ Monitoramento dos softwares (1) - 1s
Adobe Flash Player 18 NPAPI

---\\ Informações sobre o sistema (6) - 0s
~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System:  64-bit 
~ Boot mode: Normal (Normal boot)
Total RAM: 16743.544 MB (84% free)
~ System Restore: Activé (Enable)
~ System drive C: has 56 GB free of 228 GB

---\\ Modo de conexão ao sistema (3) - 0s
~ Computer Name: EDITION-PC
~ User Name: Thiago
~ Logged in as Administrator

---\\ Enumeração das unidades dos discos (3) - 0s
~ Drive C: has 56 GB free of 228 GB  (System)
~ Drive E: has 751 GB free of 2861 GB
~ Drive J: has 15707 GB free of 16777 GB

---\\ Estado do Centro de Segurança do Windows (9) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Pesquisa particular de ficheiros genéricos (22) - 0s
[MD5.F1CBCB7FA6F3B309639AA2D4EF74469C] - (.Microsoft Corporation - Windows Explorer.) () -- C:\WINDOWS\Explorer.exe [4532304]
[MD5.5DED2A3F11AE916C8F2724947E736261] - (.Microsoft Corporation - Processo de host do Windows (Rundll32).) () -- C:\WINDOWS\System32\rundll32.exe [59392]
[MD5.7718A2A9B2BFB2C8E2BAEB03310CA3FD] - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) () -- C:\WINDOWS\System32\Wininit.exe [290312]
[MD5.FE32B8423711B4B4378C0BA3C3560ED4] - (.Microsoft Corporation - Internet Extensions para Win32.) () -- C:\WINDOWS\System32\wininet.dll [2741760]
[MD5.26EFEFD877A84EE9FBDE6DEE630892C9] - (.Microsoft Corporation - Aplicativo de Logon do Windows.) () -- C:\WINDOWS\System32\Winlogon.exe [578048]
[MD5.ECB1943967424DFB96E03F6A098434EF] - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) () -- C:\WINDOWS\System32\sppcomapi.dll [430592]
[MD5.6C12C7E01A4F64E0AA9C88AF66955CC9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\WINDOWS\System32\drivers\AFD.sys [577888]
[MD5.8921DF6060DB5C7700AA48CB12E9EA08] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\WINDOWS\System32\drivers\atapi.sys [28512]
[MD5.F2829DC6D292DCAC5029893BB2E9FEE3] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\WINDOWS\System32\drivers\Cdfs.sys [92672]
[MD5.CA160E02F35A61C6F5C681FB4669C519] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\WINDOWS\System32\drivers\Cdrom.sys [174080]
[MD5.25435407D97419627F4B10653433BF2B] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\WINDOWS\System32\drivers\DfsC.sys [138240]
[MD5.C277A49F8A8295840DEBC9240B75A282] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\WINDOWS\System32\drivers\HDAudBus.sys [80896]
[MD5.D4CDEE4A62BDFFF6E8558A9552148EA7] - (.Microsoft Corporation - Driver de porta i8042.) () -- C:\WINDOWS\System32\drivers\i8042prt.sys [114688]
[MD5.5D3744E6FDEC1A6FB3FA9B1DD4AF0694] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\WINDOWS\System32\drivers\IpNat.sys [143360]
[MD5.1DF2C5FD2710A13B07E663A12F0E0EEA] - (.Microsoft Corporation - Minirdr SMB do Windows NT.) () -- C:\WINDOWS\System32\drivers\MRxSmb.sys [415232]
[MD5.F0D791348AD254360CC3C3E501CCB745] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\WINDOWS\System32\drivers\netBT.sys [273408]
[MD5.466EC5659C02ED53DBD47DC1BC2B8086] - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) () -- C:\WINDOWS\System32\drivers\ntfs.sys [2116448]
[MD5.38F1AE32339731F6E5A7281AE8042545] - (.Microsoft Corporation - Driver de porta paralela.) () -- C:\WINDOWS\System32\drivers\Parport.sys [96768]
[MD5.CA60F6C03611AF1710BC903ED9F566FB] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960]
[MD5.A32AED8C644734B283A7C9D08D76064D] - (.Microsoft Corporation - Redirecionador do Dispositivo RDP da Micros.) () -- C:\WINDOWS\System32\drivers\rdpdr.sys [176128]
[MD5.28E1E63A1AC65E17B3194238FA2CF3BF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\WINDOWS\System32\drivers\tdx.sys [116576]
[MD5.823A237D871CD652C6BFD47BECB6810A] - (.Microsoft Corporation - Driver de cópia de sombra de volume.) () -- C:\WINDOWS\System32\drivers\volsnap.sys [378720]

---\\ Processos lançados (39) - 1s
[MD5.DFCCA437717EACA8418F47992A41B39A] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 353.6.) -- C:\WINDOWS\system32\nvvsvc.exe [937800] [PID.680]
[MD5.4392321C9F3FB8D6061CCB37E85E588D] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [410768] [PID.788]
[MD5.9B27D30D8B11DF474F1AA958CD6C717E] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1253008] [PID.1164]
[MD5.DFCCA437717EACA8418F47992A41B39A] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 353.6.) -- C:\WINDOWS\system32\nvvsvc.exe [937800] [PID.1180]
[MD5.4F440DCDB7C8C14DEDDB1D63B94335D1] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) -- C:\Program Files (x86)\GbPlugin\gbpsv.exe [579896] [PID.1640]
[MD5.4956380A54B1C9E6BFDF3D80DACB9698] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600] [PID.1356]
[MD5.A961108F8655E03ED5BC7CF776020589] - (.0install.de - Zero Install Store Service.) -- C:\Program Files\Zero Install\0store-service.exe [41984] [PID.2068]
[MD5.EBBCD5DFBB1DE70E8F4AF8FA59E401FD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462184] [PID.2076]
[MD5.6EB87FDB59AABF6D19C927492DEA0D36] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128] [PID.2084]
[MD5.5031F3E650D242EEECEB92EB9900FB93] - (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216] [PID.2096]
[MD5.301E3FDFCF33640BB8763BA444BC5093] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160] [PID.2164]
[MD5.83C982A395D00BAFF6515FB38424EA76] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880] [PID.2172]
[MD5.0F6A17DC2DA7CFF449C9293CB772DAD5] - (.Adobe Systems Incorporated - Adobe Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [680112] [PID.2180]
[MD5.4EBEE69A8FE7DC85FD3C122821C617A0] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504] [PID.2272]
[MD5.D23A07D549243F5B77780BAA4FBF5BC3] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592] [PID.2280]
[MD5.A271A66ABF8CAC3606FB114D7E8C517B] - (...) -- C:\Users\Thiago\AppData\Roaming\NetService\netservice.exe [173088] [PID.2288]
[MD5.842DCC07124924D945D8F17C7768074B] - (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) -- C:\Program Files\Diebold\Warsaw\core.exe [858424] [PID.2376]
[MD5.EE4FB36AC2ADAF84DDF28D9B704D71D9] - (.NVIDIA Corporation - NVIDIA Network Stream Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [7546000] [PID.2188]
[MD5.E16832CBA3A4A64B85D2327C320F8EA0] - (.NVIDIA Corporation - NVIDIA Streamer User Agent.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe [21921936] [PID.4080]
[MD5.264B7FD1B9DF0B3B6894AF491B62E90C] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2447504] [PID.5608]
[MD5.8F82FFC6CD0F4C83F4565E1A40332CCD] - (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634896] [PID.5620]
[MD5.22EBD5AE3B3220D713E544D1D3AB3FEE] - (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800] [PID.5868]
[MD5.842DCC07124924D945D8F17C7768074B] - (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) -- C:\Program Files\Diebold\Warsaw\core.exe [858424] [PID.2824]
[MD5.02A27FC0972181EF743160BE9F62F2B4] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [170280] [PID.2588]
[MD5.2208D673C5D4B22EB0235EA1EC6269CC] - (.Apple Inc. - iPodService Module (64-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [644904] [PID.5792]
[MD5.D6FE9E0F705794A86F87A01B222290EF] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776] [PID.5420]
[MD5.4F9DD96AECDC12373D4203253D665C6D] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896] [PID.6280]
[MD5.051B5C9492CBAF8AF8BF800A27BE0529] - (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2303152] [PID.6484]
[MD5.240AF8882E2C0D1280572DFAB3C31D93] - (.Adobe Systems Incorporated - Adobe IPC Broker.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe [1011872] [PID.6552]
[MD5.69505856F6152A24B02AAAFDB53414A0] - (.Adobe Systems Incorporated - Creative Cloud.) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe [2266800] [PID.6776]
[MD5.2BB639512E57F6C38AFE5AC7E5E4005B] - (.Adobe Systems Incorporated - Adobe CEF Helper.) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe [174256] [PID.6792]
[MD5.DA1074E7E45E78E36CCED6735CFCA7E0] - (.Copyright © 2013-2015, Adobe Systems Incorporated. Al - Core Sync.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe [31535264] [PID.5032]
[MD5.549EC13970E949612DC969C87DD0FB0A] - (.Adobe Systems Incorporated - CCLibraries.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe [156336] [PID.6568]
[MD5.834FEE01042FC042F6C0AEBC9CCD7187] - (.Joyent, Inc - Evented I/O for V8 JavaScript.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe [5521792] [PID.7388]
[MD5.1CE7982AA6A983F4C49A32C8D624237B] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] [PID.7144]
[MD5.4F440DCDB7C8C14DEDDB1D63B94335D1] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) -- C:\Program Files (x86)\GbPlugin\gbpsv.exe [579896] [PID.1812]
[MD5.1924A360BC16359680100C6E16A97271] - (.Enigma Software Group USA, LLC. - SpyHunter4 application.) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\SpyHunter4.exe [7136640] [PID.6032]
[MD5.ABFF2B3A80AA5348BE5E43EFD6B415D1] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6554424] [PID.8164]
[MD5.84867350CFF4C8551E5F5A3D355D8CB3] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Thiago\ZHPDiag3.exe [1901056] [PID.8812]

---\\ Google Chrome, Arranque,Pesquisa,Extensões (10) - 1s
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security
G2 - GCE: Preference [User Data\Default] [jcgcoifbkbphhjnekfkmohklfaimhikk] __MSG_chrome_extension_name__
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest  =>.Google Inc.

---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (18) - 0s
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\buscape.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\mercadolivre.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\twitter.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-br.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-br.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - FPN: [HKCU] [gastecnologia.com.br/sf/abn] - (.GAS Tecnologia.) -- C:\Users\Thiago\AppData\Local\GAS Tecnologia\GBBD\npsf_abn.dll
P2 - FPN: [HKCU] [gastecnologia.com.br/sf/abn64] - (.GAS Tecnologia.) -- C:\Users\Thiago\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll
P2 - FPN: [HKCU] [gastecnologia.com.br/sf/bb64] - (...) -- C:\Users\Thiago\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll
P2 - FPN: [HKCU] [gastecnologia.com.br/sf/cef64] - (...) -- C:\Users\Thiago\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll
P2 - FPN: [HKCU] [gastecnologia.com.br/sf/uni] - (.GAS Tecnologia.) -- C:\Users\Thiago\AppData\Local\GAS Tecnologia\GBBD\npsf_uni.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll

---\\ Internet Explorer, Arranque, Pesquisa, Phishing (18) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean  =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Gestão do Proxy (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

---\\ Análise das linhas, Carregamento Automático de programas (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=

---\\ Redireção do ficheiro Hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (26)

---\\ Browser Helper Objects do navegador (4) - 0s
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
O2 - BHO: Google Toolbar Helper [64Bits] - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

---\\ Barras do Internet Explorer (2) - 1s
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: 0x00 - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

---\\ Aplicações iniciadas por registo & pastas (18) - 0s
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
O4 - HKLM\..\Run: [ShadowPlay] . (.Microsoft Corporation - Processo de host do Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O4 - HKLM\..\Run: [Diebold - Warsaw] . (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) -- C:\Program Files\Diebold\Warsaw\core.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Thiago\AppData\Local\Microsoft\OneDrive\OneDrive.exe
O4 - HKLM\..\Wow6432Node\Run: [SwitchBoard] . (.Adobe Systems Incorporated - SwitchBoard Server (32 bit).) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe
O4 - HKUS\.DEFAULT\..\RunOnce: [iCloud] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [iCloud] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe
O4 - HKUS\S-1-5-21-1369154560-1995163402-3710260967-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Thiago\AppData\Local\Microsoft\OneDrive\OneDrive.exe

---\\ Alteração Dominio/Clientes DNS (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 201.75.168.35 201.75.168.41
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 201.75.168.35 201.75.168.41

---\\ Protocolo adicional (22) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\System32\urlmon.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\System32\MSVidCtl.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

---\\ Serviços NT não Microsoft e não desativados (16) - 0s
O23 - Service: Zero Install Store Service (0store-service) . (.0install.de - Zero Install Store Service.) - C:\Program Files\Zero Install\0store-service.exe
O23 - Service:  (AdobeUpdateService) . (.Adobe Systems Incorporated - Adobe Update Service.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Serviço do Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Gbp Service (GbpSv) . (.GAS Tecnologia - G-Buster Browser Defense - Service.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Serviço do Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service:  (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Net.Tcp Service Handler (NetTcpHandler) . (...) - C:\Users\Thiago\AppData\Roaming\NetService\netservice.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 353.6.) - C:\WINDOWS\system32\nvvsvc.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Warsaw Technology (Warsaw Technology) . (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) - C:\Program Files\Diebold\Warsaw\core.exe

---\\ Listagem dos dados do BootExecute (1) - 0s
O34 - HKLM BootExecute: (sh4native Sh4Removal)

---\\ Tarefas planificadas automaticamente (20) - 3s
[MD5.7C58046ACEAF10525077BD586A740E9F] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe   [268976]
[MD5.76F586CEF7018BD376CBBD74AEAC93F5] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe   [1373872]
[MD5.92B2CC464136BA72FF7E57DF98993ACA] [APT] [avastBCLRestart_chrome.exe] (.Google Inc..) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [813896]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648]
[MD5.61C4BC09512502638E682CD78DD9E111] [APT] [Red Giant Link] (...) -- C:\Program Files (x86)\Red Giant Link\Common\Red Giant Link.exe   [137072]
[MD5.1924A360BC16359680100C6E16A97271] [APT] [SpyHunter4Startup] (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\SpyHunter4.exe   [7136640]  =>.Enigma Software
[MD5.CC699FC55AB0FBD5A0CE5CC758B9CE7D] [APT] [Nero\Nero Info] (.Nero AG.) -- C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe   [3227984]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job   [902]  =>.Adobe Systems Incorporated
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job   [1094]  =>.Google Inc.
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job   [1098]  =>.Google Inc.
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater   [3900]  =>.Adobe Systems Incorporated
O39 - APT: Orphean - (...) -- C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-thiago_miacci@hotmail.com   [3618]
O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\WINDOWS\System32\Tasks\avast! Emergency Update   [4280]  =>.AVAST Software
O39 - APT: avastBCLRestart_chrome.exe - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\avastBCLRestart_chrome.exe   [3324]  =>.Google Inc.
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore   [3944]  =>.Google Inc.
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA   [4180]  =>.Google Inc.
O39 - APT: Red Giant Link - (...) -- C:\WINDOWS\System32\Tasks\Red Giant Link   [4294]
O39 - APT: SpyHunter4Startup - (.Enigma Software Group USA, LLC..) -- C:\WINDOWS\System32\Tasks\SpyHunter4Startup   [3404]  =>.Enigma Software Group USA, LLC.
O39 - APT: Orphean - (...) -- C:\WINDOWS\System32\Tasks\{637B188C-61AF-4D27-9BA4-304A2F0067C1}   [3318]

---\\ Software instalados (94) - 5s
O42 - Logiciel: Desinstalar impressora EPSON T50 Series - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON T50 Series
O42 - Logiciel: HWiNFO64 Version 4.60 - (.Martin Malík - REALiX.) [HKLM][64Bits] -- HWiNFO64_is1
O42 - Logiciel: Magic Bullet Suite - (.Team V.R.) [HKLM][64Bits] -- Magic Bullet Suite_is1
O42 - Logiciel: DUO-CAPTURE Driver - (.Roland Corporation.) [HKLM][64Bits] -- RolandRDID0116
O42 - Logiciel: Shooter Suite - (.Team V.R.) [HKLM][64Bits] -- Shooter Suite_is1
O42 - Logiciel: Sigil 0.8.7 - (.John Schember.) [HKLM][64Bits] -- Sigil_is1
O42 - Logiciel: RE:Vision Effects Twixtor AE - (.Team V.R.) [HKLM][64Bits] -- Twixtor AE 6.1.0_is1
O42 - Logiciel: Zero Install - (.0install.de.) [HKLM][64Bits] -- Zero Install_is1
O42 - Logiciel: Warsaw 1.5.2.9896 64 bits - (.GAS Tecnologia.) [HKLM][64Bits] -- {20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {5D61F006-168C-4B8B-B7FD-F113C10AE0E4}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: iCloud - (.Apple Inc..) [HKLM][64Bits] -- {709A2D23-C25E-47B5-9268-CB6FEE648504}
O42 - Logiciel: Suporte para Aplicativos Apple Apple (64-bit) - (.Apple Inc..) [HKLM][64Bits] -- {B255D495-4734-4E9B-B4F5-96702FD4A7B9}
O42 - Logiciel: NVIDIA Driver do 3D Vision 353.62 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision
O42 - Logiciel: NVIDIA Driver de gráficos 353.62 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA GeForce Experience 2.5.12.11 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience
O42 - Logiciel: NVIDIA Driver de controle do 3D Vision 352.65 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB
O42 - Logiciel: NVIDIA Software do sistema PhysX 9.15.0428 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA Driver de áudio HD 1.3.34.3 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver
O42 - Logiciel: NVIDIA Áudio Virtual Miracast 353.30 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio
O42 - Logiciel: Magic Bullet Suite 64-bit - (.Red Giant.) [HKLM][64Bits] -- {E7676EF4-3896-4B7E-B030-1356EEC477CE}
O42 - Logiciel: Boris Continuum Complete 9 for Adobe CS5, CS6, CC - (.Boris FX, Inc..) [HKLM][64Bits] -- {FACC4A77-9AE6-4C39-80DF-65DBF762D017}
O42 - Logiciel: Saraiva Reader ALPHA_7RC11b169 - (.Saraiva e Siciliano S.A..) [HKLM][64Bits] -- 8505-5699-0960-8592
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe Creative Cloud - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Creative Cloud
O42 - Logiciel: Adobe Flash Player 18 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI
O42 - Logiciel: Audacity 2.1.1 - (.Audacity Team.) [HKLM][64Bits] -- Audacity®_is1
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
O42 - Logiciel: Adobe® Content Viewer - (.Adobe Systems, Incorporated.) [HKLM][64Bits] -- com.adobe.dmp.contentviewer
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Magic Bullet Suite 64-bit - (.Red Giant.) [HKLM][64Bits] -- InstallShield_{E7676EF4-3896-4B7E-B030-1356EEC477CE}
O42 - Logiciel: K-Lite Mega Codec Pack 11.0.5 - (...) [HKLM][64Bits] -- KLiteCodecPack_is1
O42 - Logiciel: MacX HD Video Converter Pro For Windows 5.5.4 - (.Digiarty Software, Inc..) [HKLM][64Bits] -- MacX HD Video Converter Pro For Windows_is1
O42 - Logiciel: Malwarebytes Anti-Malware versão 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: MiniTool Power Data Recovery - (.MiniTool Solution Ltd..) [HKLM][64Bits] -- MiniTool Power Data Recovery_is1
O42 - Logiciel: MKVToolNix 7.9.0 (32bit) - (.Moritz Bunkus.) [HKLM][64Bits] -- MKVToolNix
O42 - Logiciel: Mozilla Firefox 39.0 (x86 pt-BR) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 39.0 (x86 pt-BR)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: NOOK Study - (.Barnesandnoble.com.) [HKLM][64Bits] -- NOOK Study
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo
O42 - Logiciel: SpyHunter 4 - (.Enigma Software Group, LLC.) [HKLM][64Bits] -- SpyHunter  =>.Enigma Software
O42 - Logiciel: Subtitle Workshop 2.51 - (...) [HKLM][64Bits] -- SubtitleWorkshop
O42 - Logiciel: TechPowerUp GPU-Z - (.TechPowerUp.) [HKLM][64Bits] -- TechPowerUp GPU-Z
O42 - Logiciel: Unigine Valley Benchmark version 1.0 - (.Unigine Corp..) [HKLM][64Bits] -- Unigine Valley Benchmark_is1
O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPFix_is1
O42 - Logiciel: RAWanizer - (.RAWanizer.) [HKLM][64Bits] -- {04366673-BFFF-4604-93F6-400D9716187E}
O42 - Logiciel: Adobe Encore CS6 Library - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {07E80932-FFB1-402D-9198-18C58EBAF216}
O42 - Logiciel: Adobe Media Encoder CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0FAC7130-BEC5-47A5-8813-1D339B8326ED}
O42 - Logiciel: Adobe After Effects CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {147EC100-14BE-45EF-AB42-35BAEE7D02F0}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: ph - (.Your Company Name.) [HKLM][64Bits] -- {185F9795-9663-4F13-9EF9-307A282ADB5A}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Nero SharedVideoCodecs - (.Nero AG.) [HKLM][64Bits] -- {2432E589-6256-4513-B0BF-EFA8E325D5F0}
O42 - Logiciel: Adobe Extension Manager CC - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {244FD30F-63F1-49B9-9D98-1150FF4FFCB1}
O42 - Logiciel: Java 8 Update 51 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218051F0}
O42 - Logiciel: bl - (.Your Company Name.) [HKLM][64Bits] -- {2A075BB4-E976-4278-BF3F-E5C6945D84C0}
O42 - Logiciel: Brorsoft Video Converter Trial Ver 1.4.5.0 - (...) [HKLM][64Bits] -- {3231B80A-455C-497a-8425-3E44C006D76C}_is1
O42 - Logiciel: Adobe Premiere Pro CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {38C72D42-0672-43B1-9E05-E7631684F9A1}
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}
O42 - Logiciel: Hamster Free EbookConverter - (.HamsterSoft.) [HKLM][64Bits] -- {441AC599-200D-4E04-B274-C6B7B50C281D}_is1
O42 - Logiciel: Uninstall dispcalGUI - (.Florian Höch.) [HKLM][64Bits] -- {4714199A-0D66-4E69-97FF-7B54BFF80B88}_is1
O42 - Logiciel: Adobe Illustrator CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5680D629-B263-49CC-821E-3CEBD4507B51}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: PornTime - (.PornTime.) [HKLM][64Bits] -- {6450E6AC-0E02-4E24-A13E-EE7DC5F1CFAF}_is1
O42 - Logiciel: calibre - (.Kovid Goyal.) [HKLM][64Bits] -- {6C086582-8A0F-49D8-9E0D-82AAF2912118}
O42 - Logiciel: Guardião - Itaú 30 horas - (...) [HKLM][64Bits] -- {70e5f739-1d2a-40ae-bbc9-4b3e6af4c831}_is1
O42 - Logiciel: Adobe Premiere Pro CS6 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {7176B973-6011-43C1-AEBC-2D73FE7C6982}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {77D28FF5-242F-488A-8215-937D6A4D69E0}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Adobe Photoshop CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {793C2BF7-A4FE-4608-91C9-9282C5801C21}
O42 - Logiciel: Suporte para Aplicativos Apple (32-bit) - (.Apple Inc..) [HKLM][64Bits] -- {7FE25256-B7C1-480D-B736-10A67A833AEA}
O42 - Logiciel: Adobe Lightroom - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}
O42 - Logiciel: Módulo de Proteção - Banco Santander (Brasil) S.A. - (...) [HKLM][64Bits] -- {83033d93-48d0-48fc-9c5b-82e57e7e0dd6}_is1
O42 - Logiciel: Adobe Audition CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {839A3566-AED6-4787-A849-5CBE2B1DC6AE}
O42 - Logiciel: Camtasia Studio 8 - (.TechSmith Corporation.) [HKLM][64Bits] -- {A0FC961E-DC6D-4144-9277-ECDBB99D0AB9}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {ABC88553-8770-4B97-B43E-5A90647A5B63}
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AF37176A-78CA-545B-34EF-8B6A21514DD1}
O42 - Logiciel: Nero Burning ROM 2014 - (.Nero AG.) [HKLM][64Bits] -- {B0E4ACBC-4CFA-4B6D-9B7B-E13C171BCC23}
O42 - Logiciel: Nero Burning Core - (.Nero AG.) [HKLM][64Bits] -- {B166374C-105E-445E-8E5D-A86CA5742645}
O42 - Logiciel: Nero Info - (.Nero AG.) [HKLM][64Bits] -- {B791E0AB-87A9-41A4-8D98-D13C2E37D928}
O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM][64Bits] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263}
O42 - Logiciel: Adobe® Content Viewer - (.Adobe Systems, Incorporated.) [HKLM][64Bits] -- {C6824E02-0D74-9191-A2BA-B18FB9C4AAAA}
O42 - Logiciel: Nero ControlCenter Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {CDFE8F95-F80F-4115-9C3F-0E1FD8F9F58C}
O42 - Logiciel: Epson Print CD - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {D16A31F9-276D-4968-A753-FFEAC56995D0}
O42 - Logiciel: Adobe InDesign CC 2015 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {DBFD0312-6E55-1014-8952-E78D43BC0147}
O42 - Logiciel: Photo Mechanic 5 - (.Camera Bits, Inc.) [HKLM][64Bits] -- {DE924CF0-B8BB-42BA-BDA0-14535F79DF3F}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Nero Burning ROM - (.Nero AG.) [HKLM][64Bits] -- {F2B9C8D6-C69C-4BA7-95D2-66F1C68D15DA}
O42 - Logiciel: Nero Burning ROM Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {FA78CC15-9F90-443B-BA61-A66595F06432}
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent

---\\ HKCU & HKLM Software Keys (109) - 5s
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ASIO
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\Barnes & Noble
HKLM\SOFTWARE\Wow6432Node\Boris FX, Inc.
HKLM\SOFTWARE\Wow6432Node\calibre
HKLM\SOFTWARE\Wow6432Node\Camera Bits, Inc
HKLM\SOFTWARE\Wow6432Node\ej-technologies
HKLM\SOFTWARE\Wow6432Node\EnigmaSoftwareGroup
HKLM\SOFTWARE\Wow6432Node\EPSON
HKLM\SOFTWARE\Wow6432Node\GNU
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\HaaliMkx
HKLM\SOFTWARE\Wow6432Node\HamsterSoft
HKLM\SOFTWARE\Wow6432Node\Icaros
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\KLCodecPack
HKLM\SOFTWARE\Wow6432Node\LAV
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nero
HKLM\SOFTWARE\Wow6432Node\NetTcpHandler
HKLM\SOFTWARE\Wow6432Node\NtSvcHandler
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\PornTime
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Red Giant
HKLM\SOFTWARE\Wow6432Node\Red Giant Software
HKLM\SOFTWARE\Wow6432Node\seekmx
HKLM\SOFTWARE\Wow6432Node\SEIKO EPSON CORPORATION
HKLM\SOFTWARE\Wow6432Node\Sonic
HKLM\SOFTWARE\Wow6432Node\SRS Labs
HKLM\SOFTWARE\Wow6432Node\Subtitle Workshop
HKLM\SOFTWARE\Wow6432Node\TechSmith
HKLM\SOFTWARE\Wow6432Node\URUSoft
HKLM\SOFTWARE\Wow6432Node\WinRAR
HKLM\SOFTWARE\Wow6432Node\Zero Install
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Adobe Lightroom
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\AutoHelpDesk
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\Barnes & Noble
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Brorsoft
HKCU\SOFTWARE\bunkus.org
HKCU\SOFTWARE\calibre
HKCU\SOFTWARE\Camera Bits, Inc.
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\eBookConverter
HKCU\SOFTWARE\ej-technologies
HKCU\SOFTWARE\EPSON
HKCU\SOFTWARE\GbAs
HKCU\SOFTWARE\GbPlugin
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\HWiNFO64
HKCU\SOFTWARE\Icaros
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\madshi
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\MediaInfo
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\MiniTool Solution Ltd.
HKCU\SOFTWARE\Mirage
HKCU\SOFTWARE\mkvmergeGUI
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\MPC-HC
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Network Optix
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Red Giant
HKCU\SOFTWARE\Red Giant Software
HKCU\SOFTWARE\RedGiantSoftware
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\techPowerUp
HKCU\SOFTWARE\TechSmith
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Conteúdo das pastas Programs (271) - 5s
O43 - CFD: 2015/08/04 12:50:04 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2015/04/03 09:42:11 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2015/08/12 19:05:35 - [] D -- C:\Program Files (x86)\Audacity
O43 - CFD: 2015/08/02 12:04:27 - [] D -- C:\Program Files (x86)\Barnes & Noble
O43 - CFD: 2015/04/04 12:27:21 - [] D -- C:\Program Files (x86)\Bonjour
O43 - CFD: 2015/07/30 09:59:50 - [] D -- C:\Program Files (x86)\Brorsoft
O43 - CFD: 2015/08/02 11:19:33 - [] D -- C:\Program Files (x86)\Calibre2
O43 - CFD: 2015/04/12 20:49:07 - [] D -- C:\Program Files (x86)\Camera Bits
O43 - CFD: 2015/08/22 07:19:56 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2015/04/20 13:20:48 - [] HD -- C:\Program Files (x86)\Diebold
O43 - CFD: 2015/07/30 09:26:29 - [] D -- C:\Program Files (x86)\Digiarty
O43 - CFD: 2015/03/30 20:12:56 - [] D -- C:\Program Files (x86)\dispcalGUI
O43 - CFD: 2015/08/02 22:33:27 - [0] D -- C:\Program Files (x86)\eBookConverter
O43 - CFD: 2015/04/23 22:30:48 - [] D -- C:\Program Files (x86)\Epson Software
O43 - CFD: 2015/08/02 22:32:21 - [0] D -- C:\Program Files (x86)\ePUBee
O43 - CFD: 2015/04/20 13:20:48 - [] HD -- C:\Program Files (x86)\GAS Tecnologia
O43 - CFD: 2015/08/23 11:36:16 - [] AD -- C:\Program Files (x86)\GbPlugin
O43 - CFD: 2015/04/06 09:35:30 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/03/28 12:58:26 - [] D -- C:\Program Files (x86)\GPU-Z
O43 - CFD: 2015/08/12 15:34:56 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2015/08/07 19:50:08 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2015/08/12 13:25:11 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 2015/07/30 08:09:36 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2015/04/03 09:39:39 - [] D -- C:\Program Files (x86)\K-Lite Codec Pack
O43 - CFD: 2015/08/12 15:34:52 - [] D -- C:\Program Files (x86)\LooksBuilder
O43 - CFD: 2015/08/23 10:46:46 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 2015/04/07 10:55:25 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 2015/04/07 10:57:54 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/04/07 10:57:54 - [] D -- C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 2015/04/07 10:56:29 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 2015/08/01 12:51:03 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2015/05/13 10:37:13 - [] D -- C:\Program Files (x86)\MKVToolNix
O43 - CFD: 2015/07/22 16:18:49 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/07/22 16:18:49 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2015/04/02 19:31:13 - [] D -- C:\Program Files (x86)\My Company Name
O43 - CFD: 2015/04/15 10:40:09 - [] D -- C:\Program Files (x86)\Nero
O43 - CFD: 2015/08/01 12:51:03 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 2015/08/21 14:30:02 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 2015/06/19 09:42:36 - [] D -- C:\Program Files (x86)\PornTime
O43 - CFD: 2015/05/12 09:13:44 - [] D -- C:\Program Files (x86)\PowerDataRecovery
O43 - CFD: 2015/04/03 09:42:34 - [] D -- C:\Program Files (x86)\QuickTime
O43 - CFD: 2015/04/27 11:41:56 - [] D -- C:\Program Files (x86)\RAWanizer
O43 - CFD: 2015/03/27 08:19:02 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2015/03/26 16:31:54 - [] D -- C:\Program Files (x86)\Red Giant
O43 - CFD: 2015/08/12 15:34:50 - [] D -- C:\Program Files (x86)\Red Giant Link
O43 - CFD: 2015/08/01 12:38:58 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/07/24 11:00:29 - [] D -- C:\Program Files (x86)\Subtitle Workshop
O43 - CFD: 2015/04/30 08:48:55 - [] D -- C:\Program Files (x86)\TechSmith
O43 - CFD: 2015/03/27 08:19:39 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 2015/08/21 16:10:25 - [] D -- C:\Program Files (x86)\TransMac
O43 - CFD: 2015/08/22 07:19:56 - [] D -- C:\Program Files (x86)\UltraISO
O43 - CFD: 2015/03/30 19:53:57 - [] D -- C:\Program Files (x86)\Unigine
O43 - CFD: 2015/07/24 11:18:18 - [] D -- C:\Program Files (x86)\URUSoft
O43 - CFD: 2015/07/10 13:36:39 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2015/08/01 12:51:03 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/07/10 13:36:39 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2015/07/10 08:04:26 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2015/07/10 08:04:22 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2015/07/10 13:36:39 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2015/07/10 08:04:26 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2015/07/10 08:04:22 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2015/07/10 08:04:22 - [] SD -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 2015/03/26 15:05:09 - [] D -- C:\Program Files (x86)\WinRAR
O43 - CFD: 2015/08/22 08:10:09 - [] D -- C:\Program Files (x86)\ZHPFix
O43 - CFD: 2015/07/10 08:04:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/07/10 13:50:07 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/07/10 13:50:07 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 2015/08/02 12:04:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Barnes & Noble
O43 - CFD: 2015/08/01 12:51:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brorsoft
O43 - CFD: 2015/08/02 11:19:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
O43 - CFD: 2015/08/01 12:51:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Digiarty
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dispcalGUI
O43 - CFD: 2015/08/01 12:51:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
O43 - CFD: 2015/08/12 13:21:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
O43 - CFD: 2015/03/27 18:16:45 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImpulZ
O43 - CFD: 2015/08/12 13:25:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
O43 - CFD: 2015/08/12 15:34:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic Bullet Looks
O43 - CFD: 2015/07/10 08:04:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/23 10:46:47 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Power Data Recovery 6.8
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MKVToolNix
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 2015/08/01 17:55:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Mechanic 5
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PornTime
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2015/08/01 12:51:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RAWanizer
O43 - CFD: 2015/08/12 15:34:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Red Giant
O43 - CFD: 2015/08/01 12:51:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REVisionEffects
O43 - CFD: 2015/08/01 12:51:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roland
O43 - CFD: 2015/08/03 10:58:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Saraiva Reader
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 2015/08/02 22:09:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sigil
O43 - CFD: 2015/08/01 12:52:59 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2015/07/10 08:04:26 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/07/10 13:50:02 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
O43 - CFD: 2015/08/01 12:51:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unigine
O43 - CFD: 2015/08/01 12:51:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\URUSoft
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zero Install
O43 - CFD: 2015/08/22 08:09:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
O43 - CFD: 2015/03/30 20:12:56 - [] D -- C:\ProgramData\0install.net
O43 - CFD: 2015/08/04 12:51:02 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2015/08/04 14:15:14 - [0] D -- C:\ProgramData\ALM
O43 - CFD: 2015/04/04 12:27:29 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2015/04/04 12:27:50 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2015/07/10 09:21:38 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2015/04/06 09:31:07 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2015/03/27 18:16:45 - [] D -- C:\ProgramData\Blackmagic Design
O43 - CFD: 2015/08/23 11:36:54 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 2015/04/12 20:52:24 - [] D -- C:\ProgramData\Camera Bits, Inc
O43 - CFD: 2015/07/10 08:04:22 - [0] D -- C:\ProgramData\Comms
O43 - CFD: 2015/03/26 10:08:17 - [0] SHD -- C:\ProgramData\Dados de Aplicativos
O43 - CFD: 2015/07/10 09:21:38 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2015/03/30 20:12:56 - [0] D -- C:\ProgramData\dispcalGUI
O43 - CFD: 2015/03/26 10:08:17 - [0] SHD -- C:\ProgramData\Documentos
O43 - CFD: 2015/07/10 09:21:38 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/08/12 13:25:08 - [] D -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
O43 - CFD: 2015/08/02 11:51:01 - [] D -- C:\ProgramData\eBook Converter
O43 - CFD: 2015/04/07 10:48:13 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 2015/04/20 13:21:43 - [] D -- C:\ProgramData\GAS Tecnologia
O43 - CFD: 2015/08/22 07:17:08 - [] D -- C:\ProgramData\GbPlugin
O43 - CFD: 2015/08/23 10:46:45 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 2015/03/26 10:08:17 - [0] SHD -- C:\ProgramData\Menu Iniciar
O43 - CFD: 2015/08/01 12:51:05 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/04/07 11:00:04 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2015/08/01 17:45:55 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 2015/03/26 10:08:17 - [0] SHD -- C:\ProgramData\Modelos
O43 - CFD: 2015/07/22 16:18:44 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2015/04/15 10:40:16 - [] D -- C:\ProgramData\Nero
O43 - CFD: 2015/08/23 11:36:13 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 2015/08/01 17:56:00 - [] D -- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 2015/07/30 08:09:44 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2015/08/04 13:21:59 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2015/08/01 12:51:05 - [] D -- C:\ProgramData\PRICache
O43 - CFD: 2015/03/26 16:31:49 - [] D -- C:\ProgramData\Red Giant
O43 - CFD: 2015/03/31 10:29:18 - [] D -- C:\ProgramData\RedGiant
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 2015/07/10 13:50:02 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\ProgramData\regid.1995-08.com.techsmith
O43 - CFD: 2015/05/13 17:37:47 - [] D -- C:\ProgramData\REVisionEffects
O43 - CFD: 2015/07/10 08:04:22 - [0] D -- C:\ProgramData\SoftwareDistribution
O43 - CFD: 2015/03/26 16:31:53 - [] D -- C:\ProgramData\Sony
O43 - CFD: 2015/07/10 09:21:38 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2015/04/14 17:40:20 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2015/04/30 08:48:55 - [] D -- C:\ProgramData\TechSmith
O43 - CFD: 2015/07/10 09:21:38 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/08/21 16:43:38 - [0] D -- C:\ProgramData\update
O43 - CFD: 2015/07/10 09:22:45 - [] D -- C:\ProgramData\USOPrivate
O43 - CFD: 2015/07/10 09:22:45 - [] D -- C:\ProgramData\USOShared
O43 - CFD: 2015/08/21 14:55:05 - [] D -- C:\ProgramData\VS Revo Group
O43 - CFD: 2015/08/04 15:36:51 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2015/04/23 19:48:34 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2015/08/12 13:21:46 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2015/04/07 10:58:00 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2015/03/27 08:17:23 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2015/07/30 08:09:28 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2015/08/01 12:51:03 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2015/04/15 10:40:22 - [] D -- C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 2015/04/08 15:46:54 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 2015/07/10 08:04:26 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2015/04/02 19:31:17 - [] D -- C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 2015/07/10 13:36:39 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2015/04/30 08:49:00 - [] D -- C:\Program Files (x86)\Common Files\TechSmith Shared
O43 - CFD: 2015/08/02 11:33:00 - [] D -- C:\Users\Thiago\AppData\Roaming\.ePUBee
O43 - CFD: 2015/08/02 22:20:02 - [] D -- C:\Users\Thiago\AppData\Roaming\.ePUBeedrmremoval
O43 - CFD: 2015/03/30 20:12:56 - [] D -- C:\Users\Thiago\AppData\Roaming\0install.net
O43 - CFD: 2015/08/04 14:15:14 - [] D -- C:\Users\Thiago\AppData\Roaming\Adobe
O43 - CFD: 2015/08/12 19:25:26 - [] D -- C:\Users\Thiago\AppData\Roaming\Apple Computer
O43 - CFD: 2015/08/01 18:06:51 - [] D -- C:\Users\Thiago\AppData\Roaming\ArgyllCMS
O43 - CFD: 2015/08/12 23:28:19 - [] D -- C:\Users\Thiago\AppData\Roaming\Audacity
O43 - CFD: 2015/04/06 09:45:13 - [] D -- C:\Users\Thiago\AppData\Roaming\AVAST Software
O43 - CFD: 2015/08/02 12:04:43 - [] D -- C:\Users\Thiago\AppData\Roaming\Barnes & Noble
O43 - CFD: 2015/07/30 09:55:21 - [] D -- C:\Users\Thiago\AppData\Roaming\Brorsoft
O43 - CFD: 2015/08/03 11:06:40 - [] D -- C:\Users\Thiago\AppData\Roaming\calibre
O43 - CFD: 2015/04/12 20:51:20 - [] D -- C:\Users\Thiago\AppData\Roaming\Camera Bits, Inc
O43 - CFD: 2015/08/02 11:32:52 - [0] D -- C:\Users\Thiago\AppData\Roaming\decrypt
O43 - CFD: 2015/07/30 09:26:32 - [] D -- C:\Users\Thiago\AppData\Roaming\Digiarty
O43 - CFD: 2015/08/01 19:10:03 - [] D -- C:\Users\Thiago\AppData\Roaming\dispcalGUI
O43 - CFD: 2015/08/02 22:28:56 - [] D -- C:\Users\Thiago\AppData\Roaming\eBookConverter
O43 - CFD: 2015/04/23 22:31:39 - [] D -- C:\Users\Thiago\AppData\Roaming\Epson
O43 - CFD: 2015/08/02 11:32:52 - [0] D -- C:\Users\Thiago\AppData\Roaming\ePUBeedrmremoval
O43 - CFD: 2015/08/02 12:00:11 - [] D -- C:\Users\Thiago\AppData\Roaming\Epubsoft
O43 - CFD: 2015/03/30 20:13:14 - [] D -- C:\Users\Thiago\AppData\Roaming\gnupg
O43 - CFD: 2015/04/06 20:18:41 - [] D -- C:\Users\Thiago\AppData\Roaming\Google
O43 - CFD: 2015/03/26 13:21:20 - [] D -- C:\Users\Thiago\AppData\Roaming\Identities
O43 - CFD: 2015/04/23 22:30:42 - [] D -- C:\Users\Thiago\AppData\Roaming\InstallShield
O43 - CFD: 2015/03/26 10:56:48 - [] D -- C:\Users\Thiago\AppData\Roaming\Macromedia
O43 - CFD: 2015/08/01 12:55:17 - [] SD -- C:\Users\Thiago\AppData\Roaming\Microsoft
O43 - CFD: 2015/05/13 10:38:43 - [0] D -- C:\Users\Thiago\AppData\Roaming\mkvtoolnix
O43 - CFD: 2015/07/22 16:18:59 - [] D -- C:\Users\Thiago\AppData\Roaming\Mozilla
O43 - CFD: 2015/04/03 23:11:34 - [] D -- C:\Users\Thiago\AppData\Roaming\MPC-HC
O43 - CFD: 2015/04/15 10:45:54 - [] D -- C:\Users\Thiago\AppData\Roaming\Nero
O43 - CFD: 2015/08/21 14:18:24 - [] D -- C:\Users\Thiago\AppData\Roaming\NetService
O43 - CFD: 2015/03/26 14:35:18 - [] D -- C:\Users\Thiago\AppData\Roaming\NVIDIA
O43 - CFD: 2015/08/21 14:19:14 - [] D -- C:\Users\Thiago\AppData\Roaming\Opera Software
O43 - CFD: 2015/08/21 14:30:35 - [] D -- C:\Users\Thiago\AppData\Roaming\PowerISO
O43 - CFD: 2015/06/19 09:42:36 - [] D -- C:\Users\Thiago\AppData\Roaming\PT
O43 - CFD: 2015/08/12 15:35:18 - [] D -- C:\Users\Thiago\AppData\Roaming\Red Giant Link
O43 - CFD: 2015/08/21 19:35:01 - [] D -- C:\Users\Thiago\AppData\Roaming\RunDir
O43 - CFD: 2015/04/30 08:54:57 - [] D -- C:\Users\Thiago\AppData\Roaming\TechSmith
O43 - CFD: 2015/08/21 20:26:26 - [] D -- C:\Users\Thiago\AppData\Roaming\uTorrent
O43 - CFD: 2015/03/26 15:05:42 - [] D -- C:\Users\Thiago\AppData\Roaming\WinRAR
O43 - CFD: 2015/08/23 11:38:27 - [] D -- C:\Users\Thiago\AppData\Roaming\ZHP
O43 - CFD: 2015/03/30 20:12:59 - [] D -- C:\Users\Thiago\AppData\Local\0install.net
O43 - CFD: 2015/08/23 11:36:54 - [] D -- C:\Users\Thiago\AppData\Local\Adobe
O43 - CFD: 2015/04/03 09:42:11 - [] D -- C:\Users\Thiago\AppData\Local\Apple
O43 - CFD: 2015/08/02 12:04:45 - [] D -- C:\Users\Thiago\AppData\Local\Apple Computer
O43 - CFD: 2015/04/29 12:23:09 - [] D -- C:\Users\Thiago\AppData\Local\BorisFX
O43 - CFD: 2015/07/06 10:15:45 - [0] D -- C:\Users\Thiago\AppData\Local\calibre-cache
O43 - CFD: 2015/08/22 07:43:04 - [] D -- C:\Users\Thiago\AppData\Local\Comms
O43 - CFD: 2015/07/06 14:06:50 - [] D -- C:\Users\Thiago\AppData\Local\CrashDumps
O43 - CFD: 2015/08/01 12:50:30 - [0] SHD -- C:\Users\Thiago\AppData\Local\Dados de Aplicativos
O43 - CFD: 2015/06/23 21:15:27 - [0] D -- C:\Users\Thiago\AppData\Local\Diagnostics
O43 - CFD: 2015/08/12 15:33:52 - [] D -- C:\Users\Thiago\AppData\Local\Downloaded Installations
O43 - CFD: 2015/07/06 10:27:23 - [0] SHD -- C:\Users\Thiago\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/07/06 10:27:23 - [0] SHD -- C:\Users\Thiago\AppData\Local\EmieSiteList
O43 - CFD: 2015/07/06 10:27:23 - [0] SHD -- C:\Users\Thiago\AppData\Local\EmieUserList
O43 - CFD: 2015/04/07 11:22:41 - [] D -- C:\Users\Thiago\AppData\Local\GAS Tecnologia
O43 - CFD: 2015/07/22 17:25:16 - [] D -- C:\Users\Thiago\AppData\Local\Google
O43 - CFD: 2015/06/01 12:42:25 - [] D -- C:\Users\Thiago\AppData\Local\GWX
O43 - CFD: 2015/08/01 12:50:30 - [0] SHD -- C:\Users\Thiago\AppData\Local\Histórico
O43 - CFD: 2015/03/31 11:00:38 - [] D -- C:\Users\Thiago\AppData\Local\LooksBuilder
O43 - CFD: 2015/07/22 16:19:30 - [] D -- C:\Users\Thiago\AppData\Local\Macromedia
O43 - CFD: 2015/08/21 14:19:22 - [] D -- C:\Users\Thiago\AppData\Local\Microsoft
O43 - CFD: 2015/04/07 10:55:20 - [0] D -- C:\Users\Thiago\AppData\Local\Microsoft Help
O43 - CFD: 2015/08/01 18:17:00 - [] D -- C:\Users\Thiago\AppData\Local\MicrosoftEdge
O43 - CFD: 2015/07/22 16:25:00 - [] D -- C:\Users\Thiago\AppData\Local\Mozilla
O43 - CFD: 2015/03/30 13:29:43 - [] D -- C:\Users\Thiago\AppData\Local\NVIDIA
O43 - CFD: 2015/03/30 13:29:22 - [] D -- C:\Users\Thiago\AppData\Local\NVIDIA Corporation
O43 - CFD: 2015/08/21 14:19:14 - [] D -- C:\Users\Thiago\AppData\Local\Opera Software
O43 - CFD: 2015/08/01 18:01:42 - [] D -- C:\Users\Thiago\AppData\Local\Packages
O43 - CFD: 2015/08/02 20:57:05 - [0] D -- C:\Users\Thiago\AppData\Local\PeerDistRepub
O43 - CFD: 2015/03/26 16:45:59 - [] D -- C:\Users\Thiago\AppData\Local\PluralEyes 3
O43 - CFD: 2015/06/19 09:43:01 - [] D -- C:\Users\Thiago\AppData\Local\PornTime
O43 - CFD: 2015/03/26 16:31:21 - [] D -- C:\Users\Thiago\AppData\Local\Programs
O43 - CFD: 2015/08/01 17:44:29 - [] D -- C:\Users\Thiago\AppData\Local\Publishers
O43 - CFD: 2015/04/27 11:42:16 - [] D -- C:\Users\Thiago\AppData\Local\RAWanizer
O43 - CFD: 2015/03/31 11:00:44 - [] D -- C:\Users\Thiago\AppData\Local\Red Giant
O43 - CFD: 2015/03/26 16:45:58 - [] D -- C:\Users\Thiago\AppData\Local\Red_Giant
O43 - CFD: 2015/08/02 22:11:06 - [] D -- C:\Users\Thiago\AppData\Local\sigil-ebook
O43 - CFD: 2015/04/30 08:54:28 - [] D -- C:\Users\Thiago\AppData\Local\TechSmith
O43 - CFD: 2015/08/23 11:38:17 - [] D -- C:\Users\Thiago\AppData\Local\Temp
O43 - CFD: 2015/08/01 12:50:30 - [0] SHD -- C:\Users\Thiago\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/08/01 17:44:13 - [] D -- C:\Users\Thiago\AppData\Local\TileDataLayer
O43 - CFD: 2015/08/21 16:10:25 - [] D -- C:\Users\Thiago\AppData\Local\TransMac
O43 - CFD: 2015/08/23 11:33:01 - [] D -- C:\Users\Thiago\AppData\Local\VirtualStore
O43 - CFD: 2015/08/21 14:55:08 - [] D -- C:\Users\Thiago\AppData\Local\VS Revo Group
O43 - CFD: 2015/07/10 08:04:26 - [] RD -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/08/01 17:44:13 - [] RD -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/08/12 13:27:56 - [] RD -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dispcalGUI
O43 - CFD: 2015/07/10 08:04:26 - [] D -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/12 13:27:56 - [] RD -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Subtitle Workshop
O43 - CFD: 2015/08/01 12:50:39 - [] RD -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
O43 - CFD: 2015/08/21 16:10:25 - [] D -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TransMac
O43 - CFD: 2015/08/01 12:50:39 - [] D -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\URUSoft
O43 - CFD: 2015/07/10 08:04:45 - [] RSD -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
O43 - CFD: 2015/08/01 12:52:59 - [] D -- C:\Users\Thiago\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ Últimos arquivos criados no Windows Prefetcher (4) - 4s
O45 - LFCP:[MD5.D39D7EF758F6B284E243AF159441B22E] 2015/08/21 14:18:34 A -- C:\WINDOWS\Prefetch\OURSURFINGEIPC_18_08--E8ECAE9-4A87E6CA.pf  =>PUP.Optional.OurSurfing
O45 - LFCP:[MD5.F14277B340718ED72BEE52C94544B380] 2015/08/21 17:03:38 A -- C:\WINDOWS\Prefetch\SPYHUNTER-INSTALLER.EXE-43139681.pf  =>.Enigma Software
O45 - LFCP:[MD5.E2FF9B4164D0C054FA3EE56BCEC600D6] 2015/08/21 17:10:46 A -- C:\WINDOWS\Prefetch\SPYHUNTER4.EXE-6CB9AD08.pf  =>.Enigma Software
O45 - LFCP:[MD5.D05F57667C791BA0E2C273A999AC0966] 2015/08/21 17:09:06 A -- C:\WINDOWS\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf  =>.Enigma Software

---\\ Lista dos drivers do sistema (63) - 1s
O58 - SDL:2015/07/10 07:59:38 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys   [107360]
O58 - SDL:2015/07/10 07:59:38 A . (.PMC-Sierra - PMC-Sierra Storport  Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys   [1135456]
O58 - SDL:2015/07/10 07:59:38 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys   [83296]
O58 - SDL:2015/07/10 07:59:38 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys   [259424]
O58 - SDL:2015/07/10 07:59:38 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys   [26976]
O58 - SDL:2015/07/10 07:59:38 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys   [131936]
O58 - SDL:2015/08/12 15:51:05 A . (.AVAST Software - avast! HWID.) -- C:\WINDOWS\System32\drivers\aswHwid.sys   [28656]
O58 - SDL:2015/08/12 15:51:05 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys   [90968]
O58 - SDL:2015/08/12 15:51:05 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr2.sys   [93528]
O58 - SDL:2015/08/12 15:51:05 A . (.AVAST Software - avast! Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt.sys   [65224]
O58 - SDL:2015/08/13 14:45:03 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswsnx.sys   [1048344]
O58 - SDL:2015/08/12 15:51:05 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys   [447944]
O58 - SDL:2015/08/12 15:51:05 A . (.AVAST Software - Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStm.sys   [150672]
O58 - SDL:2015/08/12 15:51:05 A . (.AVAST Software - avast! VM Monitor.) -- C:\WINDOWS\System32\drivers\aswVmm.sys   [274808]
O58 - SDL:2015/07/10 07:59:38 A . (.Windows (R) Win 7 DDK provider - BCM Function 2  Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys   [17624]
O58 - SDL:2015/07/10 07:59:38 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys   [531296]
O58 - SDL:2012/04/24 03:01:00 A . (.Corel Corporation - CDR4 64-bit CD and DVD Place Holder Driver.) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys   [10864]
O58 - SDL:2012/04/24 03:01:00 A . (.Corel Corporation - CDRAL 64-bit Place Holder Driver (see PxHel.) -- C:\WINDOWS\System32\drivers\cdralw2k.sys   [11376]
O58 - SDL:2015/07/10 07:59:38 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys   [3436896]
O58 - SDL:2015/08/12 13:27:47 A . (...) -- C:\WINDOWS\System32\drivers\gbpddfac64.sys   [0]
O58 - SDL:2012/10/03 16:14:56 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\System32\drivers\GEARAspiWDM.sys   [33240]
O58 - SDL:2010/10/19 23:34:26 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECIx64.sys   [56344]
O58 - SDL:2015/07/10 07:59:38 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys   [64352]
O58 - SDL:2015/07/10 07:59:36 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys   [38128]
O58 - SDL:2015/07/10 07:59:36 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys   [122608]
O58 - SDL:2015/07/10 07:59:38 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys   [673120]
O58 - SDL:2015/07/10 07:59:38 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys   [412000]
O58 - SDL:2015/07/10 07:59:39 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys   [424800]
O58 - SDL:2014/01/31 14:08:28 A . (.http://libusb-win32.sourceforge.net - LibUSB-Win32 - Kernel Driver.) -- C:\WINDOWS\System32\drivers\libusb0.sys   [52832]
O58 - SDL:2015/07/10 07:59:38 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys   [108896]
O58 - SDL:2015/07/10 07:59:38 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys   [104800]
O58 - SDL:2015/07/10 07:59:38 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys   [99168]
O58 - SDL:2015/07/10 07:59:38 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys   [82784]
O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys   [25816]
O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\System32\drivers\mbamchameleon.sys   [109272]
O58 - SDL:2015/08/23 11:37:46 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys   [113880]
O58 - SDL:2015/07/10 07:59:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys   [59744]
O58 - SDL:2015/07/10 07:59:39 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys   [575840]
O58 - SDL:2015/07/10 07:59:39 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys   [705376]
O58 - SDL:2015/07/10 07:59:39 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys   [63840]
O58 - SDL:2015/06/18 08:42:02 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\WINDOWS\System32\drivers\mwac.sys   [64216]
O58 - SDL:2015/07/10 07:59:39 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys   [76128]
O58 - SDL:2015/07/24 21:14:14 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\WINDOWS\System32\drivers\nvhda64v.sys   [204648]
O58 - SDL:2015/07/23 04:02:12 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\WINDOWS\System32\drivers\nvlddmkm.sys   [11142984]
O58 - SDL:2015/07/10 07:59:39 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys   [150368]
O58 - SDL:2015/07/10 07:59:39 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys   [166240]
O58 - SDL:2015/07/03 01:28:26 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\WINDOWS\System32\drivers\nvvad64v.sys   [47976]
O58 - SDL:2015/07/10 07:59:39 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys   [58208]
O58 - SDL:2015/07/10 07:59:39 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys   [58720]
O58 - SDL:2012/06/22 03:01:00 A . (.Corel Corporation - Px Engine Device Driver for 64-bit (x86-64).) -- C:\WINDOWS\System32\drivers\PxHlpa64.sys   [56336]
O58 - SDL:2015/07/10 07:59:39 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.40 64-bit Dri.) -- C:\WINDOWS\System32\drivers\rt640x64.sys   [587264]
O58 - SDL:2015/06/24 22:57:00 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys   [4504320]
O58 - SDL:2015/06/07 23:59:30 A . (.Power Software Ltd - PowerISO Virtual Drive.) -- C:\WINDOWS\System32\drivers\scdemu.sys   [127760]
O58 - SDL:2015/07/10 07:59:39 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys   [44896]
O58 - SDL:2015/07/10 07:59:39 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys   [81760]
O58 - SDL:2015/07/10 07:59:39 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys   [31072]
O58 - SDL:2015/07/10 07:59:48 A . (...) -- C:\WINDOWS\System32\drivers\Udecx.sys   [44032]
O58 - SDL:2015/06/10 23:08:36 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl64.sys   [54784]
O58 - SDL:2015/07/10 07:59:39 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys   [166752]
O58 - SDL:2015/07/10 07:59:39 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS   [305504]
O58 - SDL:2015/07/10 07:59:39 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys   [26976]
O58 - SDL:2015/07/10 07:59:39 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys   [59232]
O58 - SDL:2015/04/23 21:18:53 A . (.Basil - WinDivert (web: http://reqrypt.org/windiver.) -- C:\WINDOWS\System32\WinDivert64.sys   [38104]

---\\ Últimos ficheiros alterados ou criados (Utilizador) (32) - 7s
O61 - LFC: 2015/08/21 14:54:50 A . (.VS Revo Group.) -- C:\Users\Thiago\Downloads\RevoUninProSetup.exe   [10694392]
O61 - LFC: 2015/08/21 14:56:21 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter-Installer (1).exe   [3237248].Enigma Software
O61 - LFC: 2015/08/21 14:56:21 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter-Installer.exe   [3237248].Enigma Software
O61 - LFC: 2015/08/21 20:02:07 A . (.EZB Systems, Inc..) -- C:\Users\Thiago\Downloads\uiso9_pe.exe   [4401160]
O61 - LFC: 2015/08/21 20:04:21 RA . (.EZB Systems, Inc..) -- C:\Users\Thiago\Downloads\UltraISO 9.5.2.2836\uiso9_pe.exe   [3935978]
O61 - LFC: 2015/08/21 16:45:16 A . (.tigrr.) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\SpyHunterPortable.exe   [199000].Enigma Software
O61 - LFC: 2015/08/21 16:44:59 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\Common.dll   [447360].Enigma Software
O61 - LFC: 2015/08/21 16:45:23 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\Defman.dll   [907136].Enigma Software
O61 - LFC: 2015/08/21 16:44:55 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\esgiguard.sys   [15920].Enigma Software
O61 - LFC: 2015/08/21 16:44:55 A . (..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\EsgScanner.sys   [19984].Enigma Software
O61 - LFC: 2015/08/21 16:45:01 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\ExecutionGuard.dll   [555392].Enigma Software
O61 - LFC: 2015/08/21 16:33:09 A . (..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\native.exe   [22400].Enigma Software
O61 - LFC: 2015/08/21 16:45:12 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\SH4Service.exe   [771968].Enigma Software
O61 - LFC: 2015/08/21 16:45:23 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\ShScanner.dll   [2272640].Enigma Software
O61 - LFC: 2015/08/21 16:45:25 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\SpyHunter4.com   [7136640].Enigma Software
O61 - LFC: 2015/08/21 16:45:23 A . (.Enigma Software Group USA, LLC..) -- C:\Users\Thiago\Downloads\SpyHunter 4.20.9.4533 Portable\App\SpyHunter\SpyHunter4.exe   [7136640].Enigma Software
O61 - LFC: 2015/08/23 11:26:05 A . (.Copyright (C) 2001.) -- C:\Users\Thiago\Downloads\deadpixeltest\DeadPixelTest.exe   [421888]
O61 - LFC: 2015/08/21 16:05:10 A . (.Cvad Software.) -- C:\Users\Thiago\Downloads\BootDiskUtility.exe.v2.170b\BootDiskUtility.exe   [9438208]
O61 - LFC: 2015/08/21 10:56:51 A . (.BitTorrent Inc..) -- C:\Users\Thiago\AppData\Roaming\uTorrent\uTorrent.exe   [1696096]
O61 - LFC: 2015/08/21 10:56:51 A . (.BitTorrent Inc..) -- C:\Users\Thiago\AppData\Roaming\uTorrent\updates\3.4.4_40911.exe   [1696096]
O61 - LFC: 2015/08/19 05:36:41 A . (..) -- C:\Users\Thiago\AppData\Roaming\RunDir\ccec.exe   [129992]
O61 - LFC: 2015/08/19 05:36:41 A . (..) -- C:\Users\Thiago\AppData\Roaming\RunDir\temp\ccec.exe   [129992]
O61 - LFC: 2015/08/21 11:21:28 A . (..) -- C:\Users\Thiago\AppData\Local\Packages\Microsoft.WindowsFeedback_cw5n1h2txyewy\AC\Microsoft\CLR_v4.0\NativeImages\Microsoft.We3060aee#\b0e4a0f7524a96609c23edf433ffea6a\Microsoft.Windows.Internal.Feedback.ni.dll   [99328]
O61 - LFC: 2015/08/21 11:21:28 A . (..) -- C:\Users\Thiago\AppData\Local\Packages\Microsoft.WindowsFeedback_cw5n1h2txyewy\AC\Microsoft\CLR_v4.0\NativeImages\feedbackapp.helper\64e439fe869e407acfead97d0dc16d90\feedbackapp.helper.ni.dll   [54784]
O61 - LFC: 2015/08/23 11:35:21 A . (..) -- C:\Users\Thiago\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin   [8192]
O61 - LFC: 2015/08/22 07:26:43 A . (..) -- C:\Users\Thiago\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\UrlBlock\urlblock_635758270324405660.bin   [96529]
O61 - LFC: 2015/08/21 11:30:06 A . (..) -- C:\Users\Thiago\AppData\Local\NVIDIA\NvBackend\UMDShim\nvcoproc.bin   [5165952]
O61 - LFC: 2015/08/23 10:38:35 A . (..) -- C:\Users\Thiago\AppData\Local\NVIDIA\NvBackend\Packages\00007cf0\CoProc update.19885687.exe   [518256]
O61 - LFC: 2015/08/23 10:38:37 A . (..) -- C:\Users\Thiago\AppData\Local\NVIDIA\NvBackend\Packages\00007cee\DAO.19885646.exe   [6107912]
O61 - LFC: 2015/08/18 18:16:58 A . (..) -- C:\Users\Thiago\AppData\Local\Microsoft\GameDVR\KnownGameList.bin   [48528]
O61 - LFC: 2015/08/23 10:55:22 A . (..) -- C:\Users\Thiago\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin   [1113849]
O61 - LFC: 2015/08/18 02:23:54 A . (.Google Inc..) -- C:\Users\Thiago\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.823\_platform_specific\win_x86\widevinecdmadapter.dll   [189256]

---\\ Associações Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

---\\ Menu de inicialização Internet (12) - 1s
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe

---\\ Pesquisa de infeção nos navegadores da Internet (2) - 0s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com/

---\\ Listagem dos serviços iniciados pelo Svchost (42) - 1s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\WINDOWS\System32\certprop.dll   [192000]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\WINDOWS\System32\certprop.dll   [192000]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\WINDOWS\system32\srvsvc.dll   [283136]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Política de Grupo.) -- C:\WINDOWS\System32\gpsvc.dll   [1335296]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\WINDOWS\System32\ikeext.dll   [954368]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em u.) -- C:\WINDOWS\System32\iphlpsvc.dll   [954880]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\WINDOWS\system32\seclogon.dll   [31232]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\WINDOWS\System32\appinfo.dll   [93696]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll   [151040]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\WINDOWS\System32\eapsvc.dll   [106496]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\WINDOWS\system32\schedsvc.dll   [1008640]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll   [226304]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\WINDOWS\System32\browser.dll   [133120]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll   [324608]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho.) -- C:\Windows\System32\SessEnv.dll   [371200]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\WINDOWS\System32\wercplsupport.dll   [95744]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Serviço Conta da Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll   [2093056]
O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\system32\dcpsvc.dll   [196096]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Serviço Assistente de Conectividade de Rede.) -- C:\WINDOWS\System32\ncasvc.dll   [167424]
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Serviço de Configuração de Rede.) -- C:\WINDOWS\System32\NetSetupSvc.dll   [186368]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acess.) -- C:\WINDOWS\System32\rasauto.dll   [106496]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\WINDOWS\System32\rasmans.dll   [679936]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll   [497152]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistem.) -- C:\WINDOWS\System32\sens.dll   [72192]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\WINDOWS\System32\ipnathlp.dll   [452608]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll   [311808]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll   [2235904]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de tel.) -- C:\WINDOWS\System32\qmgr.dll   [1168896]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll   [593920]
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll   [63488]
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll   [1149440]
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll   [1019392]
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Atualizar Sessão do Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll   [343040]
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll   [717312]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Serviço de Geolocalização.) -- C:\Windows\System32\lfsvc.dll   [27136]
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL do Serviço de Gerenciamento do Windows.) -- C:\Windows\System32\Windows.Internal.Management.dll   [267776]
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll   [918016]
O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\system32\RDXService.dll   [996352]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\WINDOWS\System32\bdesvc.dll   [359936]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gerenciador de Instalação de Dispositivo.) -- C:\WINDOWS\System32\DeviceSetupManager.dll   [237568]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\WINDOWS\system32\themeservice.dll   [58368]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Serviço de instalação do software.) -- C:\Windows\System32\appmgmts.dll   [200192]

---\\ Lista das exceções do FireWall (FirewallRules) (21) - 1s
O87 - FAEL: "{4B940B29-5F51-4B48-88CC-CDCF95F256C5}" [In-None-P17-TRUE] .(.PornTime - PornTime Updater.) -- C:\Users\Thiago\AppData\Roaming\PT\updater.exe
O87 - FAEL: "{D092F768-8C8B-45A9-B04B-4017F2C517D4}" [In-None-P6-TRUE] .(.PornTime - PornTime Updater.) -- C:\Users\Thiago\AppData\Roaming\PT\updater.exe
O87 - FAEL: "{FB5BBD2D-A751-4CD5-AF82-F21EEC73F9CD}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\PornTime\PornTime.exe
O87 - FAEL: "{A8B82152-6C47-4DE6-9F9C-F915BDEBFD52}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\PornTime\PornTime.exe
O87 - FAEL: "{F8BE3570-DF16-48D2-A205-3FC5D2D072B4}" [In-None-P6-TRUE] .(.GAS Tecnologia LTDA - GAS Tecnologia - Core.) -- C:\Program Files\Diebold\Warsaw\core.exe
O87 - FAEL: "UDP Query User{E437799E-9E9E-4CCA-8AD5-F5F4575A0909}C:\program files (x86)\camera bits\photo mechanic 5\photo mechanic.exe" [In-None-P17-TRUE] .(.Camera Bits, Inc. - Photo Mechanic 5.0.0.0.) -- C:\program files (x86)\camera bits\photo mechanic 5\photo mechanic.exe
O87 - FAEL: "TCP Query User{94803FCC-A533-424E-AF87-067A35B6F5EB}C:\program files (x86)\camera bits\photo mechanic 5\photo mechanic.exe" [In-None-P6-TRUE] .(.Camera Bits, Inc. - Photo Mechanic 5.0.0.0.) -- C:\program files (x86)\camera bits\photo mechanic 5\photo mechanic.exe
O87 - FAEL: "UDP Query User{87DB1B9B-8677-4685-81A3-FA73ECA8B6B2}C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe" [In-None-P17-TRUE] .(...) -- C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe (.not file.)
O87 - FAEL: "TCP Query User{297CF07D-BD57-48FC-9A90-91719836EDA1}C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe" [In-None-P6-TRUE] .(...) -- C:\program files\adobe\adobe media encoder cc 2014\adobe media encoder.exe (.not file.)
O87 - FAEL: "UDP Query User{DDAC19AB-1EF3-4EE1-8589-34891B6110C8}C:\program files\adobe\adobe premiere pro cc 2014\adobe premiere pro.exe" [In-None-P17-TRUE] .(...) -- C:\program files\adobe\adobe premiere pro cc 2014\adobe premiere pro.exe (.not file.)
O87 - FAEL: "TCP Query User{6D81DB1B-8BEA-4474-B020-CEEAA79665B0}C:\program files\adobe\adobe premiere pro cc 2014\adobe premiere pro.exe" [In-None-P6-TRUE] .(...) -- C:\program files\adobe\adobe premiere pro cc 2014\adobe premiere pro.exe (.not file.)
O87 - FAEL: "{4E5C6CC4-E4B5-4CC2-BD1F-E66A4017EB78}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Thiago\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "{6F7EF35D-E552-421C-9EEB-8CA6D2138A2B}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Thiago\AppData\Roaming\uTorrent\uTorrent.exe
O87 - FAEL: "UDP Query User{625F7593-A389-4A01-B0C5-DA23F616458A}C:\program files\adobe\adobe premiere pro cc 2014\adobe premiere pro.exe" [In-None-P17-TRUE] .(...) -- C:\program files\adobe\adobe premiere pro cc 2014\adobe premiere pro.exe (.not file.)
O87 - FAEL: "TCP Query User{7375A40B-5B43-431F-AC35-3D2A6E2AD949}C:\program files\adobe\adobe premiere pro cc 2014\adobe premiere pro.exe" [In-None-P6-TRUE] .(...) -- C:\program files\adobe\adobe premiere pro cc 2014\adobe premiere pro.exe (.not file.)
O87 - FAEL: "TCP Query User{A574D5F3-79AC-4525-AA2A-0C894543D669}E:\argyll_v1.7.0\bin\dispwin.exe" [In-None-P6-TRUE] .(...) -- E:\argyll_v1.7.0\bin\dispwin.exe
O87 - FAEL: "UDP Query User{D620BDC9-9ED0-40B5-9CCA-4245334BB553}E:\argyll_v1.7.0\bin\dispwin.exe" [In-None-P17-TRUE] .(...) -- E:\argyll_v1.7.0\bin\dispwin.exe
O87 - FAEL: "TCP Query User{726D6C1D-D784-4684-88DD-010E45C71DEB}E:\argyll_v1.7.0\bin\dispcal.exe" [In-None-P6-TRUE] .(...) -- E:\argyll_v1.7.0\bin\dispcal.exe
O87 - FAEL: "UDP Query User{9A905D7D-FE13-42DB-A127-1558EB750B4F}E:\argyll_v1.7.0\bin\dispcal.exe" [In-None-P17-TRUE] .(...) -- E:\argyll_v1.7.0\bin\dispcal.exe
O87 - FAEL: "{05E99363-7952-4531-96CD-345DD56A3837}" [In-None-P6-TRUE] .(.Barnes & Noble, Inc. - NOOK Study.) -- C:\Program Files (x86)\Barnes & Noble\NOOKstudy\NOOKStudy.exe
O87 - FAEL: "{86176FD3-0482-4E36-9056-4FD0866B9CBB}" [In-None-P17-TRUE] .(.Barnes & Noble, Inc. - NOOK Study.) -- C:\Program Files (x86)\Barnes & Noble\NOOKstudy\NOOKStudy.exe

---\\ Serviços não Microsoft (SR=Executados, SS=Parados) (6) - 15s
SR - Auto   [2015/07/06 09:04:23] [   41984]  Zero Install Store Service (0store-service) . (.0install.de.) - C:\Program Files\Zero Install\0store-service.exe
SR - Auto   [2015/04/29 11:16:40] [  579896]  Gbp Service (GbpSv) . (.GAS Tecnologia.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe
SS - Auto   [2015/04/06 09:34:23] [  116648]  Serviço do Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - Demand [2015/04/06 09:34:23] [  116648]  Serviço do Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - Auto   [2015/07/08 22:26:02] [  173088]  Net.Tcp Service Handler (NetTcpHandler) . (...) - C:\Users\Thiago\AppData\Roaming\NetService\netservice.exe
SR - Auto   [2015/06/24 21:57:18] [  858424]  Warsaw Technology (Warsaw Technology) . (.GAS Tecnologia LTDA.) - C:\Program Files\Diebold\Warsaw\core.exe

---\\ Scâner Aditional (4) - 0s
C:\WINDOWS\Prefetch\OURSURFINGEIPC_18_08--E8ECAE9-4A87E6CA.pf  =>PUP.Optional.OurSurfing
C:\WINDOWS\Prefetch\SPYHUNTER-INSTALLER.EXE-43139681.pf  =>.Enigma Software
C:\WINDOWS\Prefetch\SPYHUNTER4.EXE-6CB9AD08.pf  =>.Enigma Software
C:\WINDOWS\Prefetch\SPYHUNTER4.EXE-7BD5E907.pf  =>.Enigma Software

---\\ Resumo dos elementos encontrados na sua estação de trabalho (1) - 0s
http://www.nicolascoolman.fr/blog  =>PUP.Optional.OurSurfing

~ End of the scan, 26743 items in 55 seconds (945)(0)()