Emsisoft Anti-Malware Free - Versão 10.0 Última atualização 11/01/2016 17:44:49 User account: Pc-Aleson\Áleson Configuração do exame: Tipo de exame: Exame Personalizado arquivos: Rootkits, Memória, Rastros, A:\, C:\ Detect PUPs: Ligado Análise de arquivos: Ligado Análise de ADS: Ligado Extensão de arquivo: Desligado Caching avançado: Ligado Acesso direto ao disco: Desligado Início do exame: 11/01/2016 17:48:31 C:\Users\Áleson\AppData\Roaming\XBox\XBLive.exe detectados: Trojan.SafeGuard.B (B) C:\Program Files (x86)\Intelore\ detectados: Application.Win32.PassRecover (A) Key: HKEY_USERS\S-1-5-21-3432586907-597726681-3595710473-1001\SOFTWARE\PASSWARE\RAR KEY detectados: Application.Win32.PassRecover (A) Value: HKEY_USERS\S-1-5-21-3432586907-597726681-3595710473-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN -> TOK-CIRRHATUS detectados: Worm.Win32.Brontok (A) A:\Documents\Personalização\Object Dock Plus Full\Ativador.exe detectados: Riskware.Win32.Keygen (A) A:\Documents\Programas\CloneDVD 3.6.0.0 (Com Serial) DVD X Studios\CloneDVD 3.6.0.0 (Com Serial) DVD X Studios\Keygen\Keygen.exe detectados: Trojan.Generic.5796853 (B) A:\Documents\Programas\DriverEasy Pro + Keygen\keygen\EasyWare Multi-KeyFile Generator.exe detectados: Riskware.MSIL.Keygen (A) A:\Documents\Programas\Guitar Pro 6\Guitar Pro 6\Keygen Guitar Pro 6.1.1\keygen.exe detectados: Application.Keygen.FB (B) A:\Documents\Programas\Microk\Microkê-Platinum\Microke_Injection_crack.exe detectados: Adware.Generic.80414 (B) A:\Documents\Programas\Nero 2014 Platinum 15.0.02200 Final (Patch Kindly) [ChingLiu]\Patch Kindly\nero.14.platinum.v15.0.02200_patch.exe detectados: Gen:Trojan.Heur.FU.cuW@aKksdWk (B) A:\Documents\Programas\P8-v25\P8-v25\P8_v25.exe detectados: Riskware.Win32.WinAct (A) A:\Documents\Programas\Sony Vagas\Vegas12Patch\vegas.pro.12.-patch.exe detectados: Gen:Variant.Zusy.107954 (B) A:\Documents\Programas\Sound Forge Pro 11\Keygen Sound forge pro11 _ Tutoriais DaNet\Keygen.exe detectados: Riskware.Win32.Keygen (A) A:\Documents\Programas\Visual Studio 2010 Ultimate\Crack\microsoft.visual.studio.2010.patch.exe detectados: Trojan.Generic.6886848 (B) A:\Documents\Unopar\1000.CAD.Up.By.Leoseven\Benchmark\Bench'emAll\setup.exe -> (NSIS o) -> zlib_nsis0005 detectados: Trojan.Generic.7282881 (B) A:\Downloads\Gpedit Installer Final.exe detectados: Gen:Application.Bundler.Firseria.1 (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\BrowseMark.BrowserAdapter.exe.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\BrowseMarkBAApp.dll.vir detectados: Adware.Agent.OCI (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\BrowseMark.PurBrowse64.exe.vir detectados: Adware.SwiftBrowse.P (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\plugins\BrowseMark.Bromon.dll.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\plugins\BrowseMark.BrowserAdapterS.dll.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\plugins\BrowseMark.FFUpdate.dll.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\plugins\BrowseMark.CompatibilityChecker.dll.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\plugins\BrowseMark.IEUpdate.dll.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\{b99c8534-7800-48fa-bd71-519a46cdc7e1}.dll.vir detectados: Adware.Agent.OCH (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\plugins\BrowseMark.PurBrowseG.dll.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\bin\utilBrowseMark.exe.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\BrowseMarkBHO.dll.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\Program Files (x86)\BrowseMark\updateBrowseMark.exe.vir detectados: Adware.SwiftBrowse.CN (B) C:\AdwCleaner\Quarantine\C\ProgramData\WindowsMangerProtect\update\update.exe.vir detectados: Trojan.GenericKD.2451623 (B) C:\AdwCleaner\Quarantine\C\Users\Áleson\AppData\Local\Temp\Iminent\7485b9dc-137c-405a-a65b-c68277.vir -> (RAR Sfx o) -> MetroInstallPack.MIP -> __TMPDeployFolder/IMGUpdater.exe detectados: Adware.Agent.PQQ (B) C:\AdwCleaner\Quarantine\C\Users\Áleson\AppData\Local\Temp\Iminent\7485b9dc-137c-405a-a65b-c68277.vir -> (RAR Sfx o) -> MetroInstallPack.MIP -> __TMPDeployFolder/Umbrella.exe detectados: Application.Iminent.A (B) C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\nethfdrv.sys.vir detectados: Adware.SwiftBrowse.AJ (B) C:\AdwCleaner\Quarantine\C\WINDOWS\SysWOW64\hfpapi.dll.vir detectados: Gen:Variant.Adware.Netfilter.2 (B) C:\AdwCleaner\Quarantine\C\WINDOWS\System32\drivers\{b99c8534-7800-48fa-bd71-519a46cdc7e1}Gw64.sys.vir detectados: Adware.SwiftBrowse.BF (B) C:\AdwCleaner\Quarantine\C\WINDOWS\SysWOW64\installd.exe.vir detectados: Gen:Variant.Adware.Netfilter.2 (B) C:\AdwCleaner\Quarantine\C\WINDOWS\SysWOW64\netupdsrv.exe.vir detectados: Gen:Variant.Adware.Netfilter.2 (B) C:\AdwCleaner\Quarantine\C\WINDOWS\SysWOW64\nethtsrv.exe.vir detectados: Gen:Variant.Adware.Netfilter.2 (B) C:\FRST\Quarantine\C\ProgramData\uemtqux.exe.xBAD detectados: Gen:Heur.MSIL.Androm.3 (B) C:\Program Files\KMSpico\AutoPico.exe detectados: Riskware.Win32.HackTool (A) C:\Program Files\KMSpico\Service_KMS.exe detectados: Riskware.MSIL.HackTool (A) C:\Users\-leson\AppData\Roaming\XBox\Xbox.Live.dll detectados: Trojan.SafeGuard.B (B) C:\Users\Áleson\AppData\Local\31731\a767.exe detectados: Gen:Application.Imonetize.1 (B) C:\Users\Áleson\AppData\Roaming\Software Tool\Setup__11615_il1150099.exe detectados: Application.InstallAd (A) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\Deleted -> (message 9) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe -> (SCRENC) detectados: Trojan.Script.636644 (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\Deleted -> (message 12) -> [Subject: Delivery Status Notification (Failure)][Date: Sat, 4 Apr 2015 13:29:09 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\Deleted -> (message 13) -> [Subject: Delivery Status Notification (Failure)][Date: Thu, 2 Apr 2015 13:25:53 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\Deleted -> (message 14) -> [Subject: Delivery Status Notification (Failure)][Date: Thu, 2 Apr 2015 13:25:53 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\Deleted -> (message 15) -> [Subject: Delivery Status Notification (Failure)][Date: Thu, 2 Apr 2015 13:26:29 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\Deleted -> (message 16) -> [Subject: Delivery Status Notification (Failure)][Date: Thu, 2 Apr 2015 13:26:47 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\Deleted -> (message 17) -> [Subject: Delivery Status Notification (Delay)][Date: Fri, 3 Apr 2015 01:27:58 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\XBox\Xbox.Live.dll detectados: Trojan.SafeGuard.B (B) C:\Users\Áleson\AppData\Roaming\XBox\XBLive.exe detectados: Trojan.SafeGuard.B (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\INBOX -> (message 11) -> [Subject: Achei essa sua foto, posso postar no face? rrrsss][Date: Sun, 22 Mar 2015 17:37:11 -0300] -> DSC01381.JPEG (SONY).zip -> DSC01381.JPEG (SONY).vbe -> (SCRENC) detectados: Trojan.VB.Agent.QZ (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\INBOX -> (message 874) -> [Subject: Delivery Status Notification (Failure)][Date: Sat, 4 Apr 2015 13:29:09 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\INBOX -> (message 878) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe -> (SCRENC) detectados: Trojan.Script.636644 (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\INBOX -> (message 879) -> [Subject: Delivery Status Notification (Failure)][Date: Thu, 2 Apr 2015 13:25:53 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\INBOX -> (message 880) -> [Subject: Delivery Status Notification (Failure)][Date: Thu, 2 Apr 2015 13:25:53 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\INBOX -> (message 881) -> [Subject: Delivery Status Notification (Failure)][Date: Thu, 2 Apr 2015 13:26:29 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\INBOX -> (message 882) -> [Subject: Delivery Status Notification (Failure)][Date: Thu, 2 Apr 2015 13:26:47 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\AppData\Roaming\Thunderbird\Profiles\6184ls08.default\ImapMail\imap-mail.outlook-1.com\INBOX -> (message 883) -> [Subject: Delivery Status Notification (Delay)][Date: Fri, 3 Apr 2015 01:27:58 -0700] -> (message) -> [Subject: Tudo vai acontecer no tempo certo...][Date: Thu, 2 Apr 2015 17:25:51 -0300] -> IMAGEM_DSC_JPG.zip -> IMAGEM_DSC_JPG.vbe detectados: Exploit.SpamMalware-ZIP.Gen (B) C:\Users\Áleson\Documents\Programas\AtvDR Win 8.1 - PHDOWNS\AtvDR Win 8.1 - PHDOWNS\KMSpico - PHDOWNS.exe detectados: Riskware.Win32.HackTool (A) C:\Users\Áleson\Documents\Programas\Comunidade-Canção-Nova-Entoai-Salmos_downloader-Q3NSFkggm.exe -> (NSIS o) -> lzma_solid_nsis0000 detectados: Application.Bundler.Somoto.X (B) C:\Users\Áleson\Documents\Programas\CCleaner.Professional.4.11.4619.baixedetudo.net\CCleaner Professional 4.11.4619\Piriform.Keymaker-CORE.rar -> Piriform.Keymaker-CORE\cr-pirfm.exe detectados: Trojan.GenericKD.2009062 (B) C:\Users\Áleson\Documents\Programas\connectify-80030686-32-bits.exe detectados: Application.Win32.InstallAd (A) C:\Users\Áleson\Documents\Programas\ConvertxtoDVD.5.x.patch.v2.9-Cerberus\convertxtodvd.5.x.patch.v2.9-Cerberus\convertxtodvd.5.x.patch.v2.9-Cerberus.exe detectados: Gen:Variant.Kazy.709709 (B) C:\Users\Áleson\Documents\Programas\Download.exe detectados: Trojan.Generic.11288169 (B) C:\Users\Áleson\Documents\Programas\FlashPlayersetup__8030_i643166289_il9.exe detectados: Application.Bundler.Amonetize.D (B) C:\Users\Áleson\Documents\Programas\FLVPlayer_downloader-N5uzDmYTg.exe -> (NSIS o) -> lzma_solid_nsis0000 detectados: Application.Bundler.Somoto.AH (B) C:\Users\Áleson\Documents\Programas\FLVPlayerSetup-bsKSI1Pj.exe -> (NSIS o) -> zlib_nsis0000 detectados: Application.Bundler.Somoto.I (B) C:\Users\Áleson\Documents\Programas\FreemakeVideoConverterSetup.exe detectados: Application.Win32.AdSweet (A) C:\Users\Áleson\Documents\Programas\FreemakeVideoDownloaderSetup.exe detectados: Application.Win32.InstallAd (A) C:\Users\Áleson\Documents\Programas\IDM 6.23 build 10\ATIVADOR\INTERNET DOWNLOAD MANAGER.EXE detectados: Riskware.Win32.HackTool.Patcher (A) C:\Users\Áleson\Downloads\Compressed\elibagla\elibagla.exe detectados: Gen:Variant.Graftor.52206 (B) C:\Users\Áleson\Downloads\Compressed\Emulador XBOX 360\Xbox 360 Emulator 3.2.4\Xbox 360 Emulator 3.2.4\Xbox 360 Emulator 3.2.4.exe detectados: Gen:Variant.Kazy.345197 (B) C:\Users\Áleson\Downloads\Compressed\IDM 6.23 build 10\IDM-6.2.X-Patch.7z -> IDM-6.2.X-Patch.exe detectados: Application.Hacktool.IP (B) C:\Users\Áleson\Downloads\Kaspersky + Renovar licença de uso para 30 dias.rar -> Kaspersky + Renovar licenￃﾧa de uso para 30 dias\Renovar licenￃﾧa de uso para 30 dias.exe detectados: Gen:Variant.Strictor.97539 (B) C:\Users\Áleson\Downloads\Kaspersky + Renovar licença de uso para 30 dias\Kaspersky + Renovar licença de uso para 30 dias\Renovar licença de uso para 30 dias.exe detectados: Gen:Variant.Strictor.97539 (B) C:\Users\Áleson\Downloads\Kaspersky Antivirus + Internet Security + Total Security 2016 16.0.0.424 Beta + Trial Resetters - AppzDam\Kaspersky Total Security 2016 16.0.0.424 Beta + Trial Resetter - AppzDam\KRT.rar -> KRT_5.0.0.99_beta.exe detectados: Application.Generic.1248785 (B) C:\Users\Áleson\Downloads\Patchs\Patchs\Opção 2\Patch.exe detectados: Gen:Variant.Kazy.301519 (B) C:\Users\Áleson\Downloads\Utorrent + ativador 2016\Utorrent + ativador 2016\Ativador\uTorrent.exe detectados: Trojan.Generic.15245295 (B) C:\Users\Áleson\Downloads\Xbox 360 Emulator 3.2.4.rar -> Xbox 360 Emulator 3.2.4\Xbox 360 Emulator 3.2.4.exe detectados: Gen:Variant.Kazy.345197 (B) C:\Users\Áleson\Videos\Engenharia Civil\2015.1\Introdução à Computação\Curso de Programação em C_C++ (G-Tech)\Projetos\2\bin\Debug\Projeto2.exe detectados: Trojan.Generic.14829395 (B) C:\Users\Áleson\Videos\Tutoriais\Sony Vegas\Brainstorm Tutoriais\Tutorial Sony Vegas- Como instalar os plugins NewBlue FX\NewBlueFX - Brainstorm Tutoriais\NewBlueFX - Brainstorm Tutoriais\Art effects.exe detectados: Adware.Generic.64429 (B) C:\Windows.old\Users\Áleson\AppData\Local\Temp\nsx7055.tmp-2\APN_ATU3_.exe detectados: Application.Win32.InstallTool (A) C:\Windows.old\Users\Áleson\AppData\Local\Temp\RarSFX0\P8_v25.exe detectados: Riskware.Win32.WinAct (A) C:\Windows\SysWOW64\hfnapi.dll detectados: Gen:Variant.Adware.Netfilter.2 (B) C:\Windows\SysWOW64\worker\xboxupdate.zip -> Xbox.Live.dll detectados: Trojan.SafeGuard.B (B) C:\Xbox 360 Emulator 3.2.4\Xbox 360 Emulator 3.2.4.exe detectados: Gen:Variant.Kazy.345197 (B) Analisados: 460321 Achado 89 Fim do exame: 11/01/2016 21:39:57 Duração do exame: 3:51:26