~ ZHPDiag v2016.2.8.27 Por Nicolas Coolman (2016/02/08) ~ iniciado por Sidneia (Administrator) (2016/02/09 19:15:46) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Status da versão: Version OK ~ Modo: Scanner ~ Relatório: C:\Users\Sidneia\Desktop\ZHPDiag.txt ~ Relatório: C:\Users\Sidneia\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Inicialização do sistema: Normal (Normal boot) Windows 10 Home Single Language, 64-bit (Build 10586) ---\\ Navegadores Internet (2) - 1s GCIE: Google Chrome v48.0.2564.103 MSIE: Internet Explorer v11.63.10586.0 ---\\ Informações sobre os produtos Windows (3) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK ---\\ Softwares de proteçao do sistema (1) - 1s Windows Defender (Deactivate) ---\\ Monitoramento dos softwares (1) - 2s Adobe Reader XI ---\\ Informações sobre o sistema (6) - 0s ~ Operating System: Intel64 Family 6 Model 69 Stepping 1, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4096.18 MB (39% free) System Restore: Activé (Enable) System drive C: has 886 GB () free of 943 GB ---\\ Modo de conexão ao sistema (3) - 0s ~ Computer Name: NOTE ~ User Name: Sidneia ~ Logged in as Administrator ---\\ Enumeração das unidades dos discos (2) - 0s ~ Drive C: has 886 GB free of 943 GB (System) ~ Drive E: has GB free of 0 GB ---\\ Estado do Centro de Segurança do Windows (7) - 0s [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Pesquisa particular de ficheiros genéricos (24) - 2s [MD5.4572EB3DDBD2DFA10DE7A037A6CC6D53] - 30/10/2015 - (.Microsoft Corporation - Windows Explorer.) -- C:\WINDOWS\Explorer.exe [4502864] =>.Microsoft Windows® [MD5.0DCB89B1F3689BC6262FF30BBD603171] - 30/10/2015 - (.Microsoft Corporation - Processo de host do Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [59392] =>.Microsoft Corporation [MD5.CAD491DD9EC00BB841EA407D9C498C4A] - 30/10/2015 - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) -- C:\WINDOWS\System32\Wininit.exe [290856] =>.Microsoft Windows Publisher® [MD5.AB4C1A9F37C0B8467AC923ED4AD727D6] - 08/12/2015 - (.Microsoft Corporation - Internet Extensions para Win32.) -- C:\WINDOWS\System32\wininet.dll [2647552] =>.Microsoft Corporation [MD5.7B24B823404D53DA4748F21AD2BF04C9] - 04/01/2016 - (.Microsoft Corporation - Aplicativo de Logon do Windows.) -- C:\WINDOWS\System32\Winlogon.exe [584704] =>.Microsoft Corporation [MD5.9EEAA1B69DC3FD620AE576CC8F4147DC] - 30/10/2015 - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) -- C:\WINDOWS\System32\sppcomapi.dll [430592] =>.Microsoft Corporation [MD5.E7B524818100B0FDE2B057C74B0C0DCD] - 30/10/2015 - (.Microsoft Corporation - DLL da API de cliente DNS.) -- C:\WINDOWS\System32\dnsapi.dll [686984] =>.Microsoft Windows® [MD5.2796C0957F6F05A528DD64B8591371B6] - 30/10/2015 - (.Microsoft Corporation - DLL da API de cliente DNS.) -- C:\WINDOWS\Syswow64\dnsapi.dll [535088] =>.Microsoft Windows® [MD5.70148EFA9A562E7185B75BBE7D376BF7] - 08/12/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [578912] =>.Microsoft Windows® [MD5.492B99D2E3D5D7BFD5F0AE1BE7BD37DD] - 30/10/2015 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28512] =>.Microsoft Windows® [MD5.7F9C7226D743B232907ED2537B8A574F] - 30/10/2015 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [92672] =>.Microsoft Corporation [MD5.82D97776BF982AA143BDC7DFB5054EA8] - 30/10/2015 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173568] =>.Microsoft Corporation [MD5.C9478D7DB7BE5D7ACE65CB1167F07320] - 30/10/2015 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [148480] =>.Microsoft Corporation [MD5.84BC034B6BB763733C1949B7B9BAF976] - 30/10/2015 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [79872] =>.Microsoft Corporation [MD5.53FDD9E69189E546DE4740F8C4D8AB2F] - 30/10/2015 - (.Microsoft Corporation - Driver de porta i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [114688] =>.Microsoft Corporation [MD5.9E5E8F2A1996F23B7E9687846AA81B01] - 30/10/2015 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [143360] =>.Microsoft Corporation [MD5.61F9F27A8C3D7BCD287FE98A440421CE] - 30/10/2015 - (.Microsoft Corporation - Minirdr SMB do Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [430944] =>.Microsoft Windows® [MD5.F51C02D992A8D6BC5EC4D990F227D4C7] - 30/10/2015 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [279552] =>.Microsoft Corporation [MD5.EFEFC245B884B1BE0401931398DCD707] - 01/12/2015 - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2152800] =>.Microsoft Windows® [MD5.7D0FC96264C0F8F2C1321E33E8EB646C] - 30/10/2015 - (.Microsoft Corporation - Driver de porta paralela.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation [MD5.381B8F2311A0375676B635EA5E7C8AB0] - 30/10/2015 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960] =>.Microsoft Corporation [MD5.1DC2CC74B51E4DC4CD5A20C1021E4010] - 30/10/2015 - (.Microsoft Corporation - Redirecionador do Dispositivo RDP da Micros.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [173056] =>.Microsoft Corporation [MD5.91D3F2A6253EF83EFBD7903028F58C4D] - 08/12/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118624] =>.Microsoft Windows® [MD5.E1F91A727A04C9F8199D04FF3BBBF63C] - 30/10/2015 - (.Microsoft Corporation - Driver de cópia de sombra de volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [414560] =>.Microsoft Windows® ---\\ Serviços NT não Microsoft e não desativados (27) - 3s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® O23 - Service: Change Modem Device Service (Change Modem Device Service) . (...) - C:\Windows\SysWOW64\ChgService.exe O23 - Service: Dell Digital Delivery Service (DellDigitalDelivery) . (.Dell Products, LP. - Dell Digital Delivery Windows Service.) - C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe =>.Dell Inc.® O23 - Service: FAService (FAService) . (.Sensible Vision - FastAccess.) - C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe {5A3025AB87473F2ED013C7BD8AFC2593} =>.Sensible Vision O23 - Service: Gbp Service (GbpSv) . (.GAS Tecnologia - G-Buster Browser Defense - Service.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe {305BA2DD88FE398D8CF90790C9D266BA} O23 - Service: Serviço do Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: McAfee Home Network (HomeNetSvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\igfxCUIService.exe =>.Intel Corporation - pGFX® O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - c:\Program Files\Intel\iCLS Client\HeciServer.exe =>.Intel(R) Corporation O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Intel® Management Engine Firmware® O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Software and Firmware Products® O23 - Service: McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (.McAfee, Inc. - McAfee WebAdvisor.) - C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe =>.McAfee, Inc.® O23 - Service: McAfee AP Service (McAPExe) . (.McAfee, Inc. - McAfee Access Protection.) - C:\Program Files\mcafee\msc\McAPExe.exe =>.McAfee, Inc.® O23 - Service: McAfee CSP Service (mccspsvc) . (.McAfee, Inc. - McAfee CSP Service Host.) - C:\Program Files\Common Files\mcafee\CSP\1.8.190.0\McCSPServiceHost.exe =>.McAfee, Inc.® O23 - Service: McAfee VirusScan Announcer (McNaiAnn) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® O23 - Service: McAfee Platform Services (mcpltsvc) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® O23 - Service: McAfee Proxy Service (McProxy) . (.McAfee, Inc. - McAfee Service Host.) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® O23 - Service: McAfee Service Controller (mfemms) . (.McAfee, Inc. - McAfee Management Service.) - C:\Program Files\Common Files\mcafee\SystemCore\mfemms.exe =>.McAfee, Inc.® O23 - Service: McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc. - McAfee Process Validation Service.) - C:\Windows\System32\mfevtps.exe =>.McAfee, Inc.® O23 - Service: My Dell Client Framework (My Dell Client Framework) . (.Dell Inc. - Dell Client Framework.) - C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe =>.Dell Inc. O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.CyberLink - RichVideo Module.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe =>.CyberLink Corp.® O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp® O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl® O23 - Service: (Update service) . (.Popcorn Time - Updater.) - C:\Program Files (x86)\Popcorn Time\Updater.exe =>.Popcorn Time O23 - Service: Warsaw Technology (Warsaw Technology) . (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) - C:\Program Files\Diebold\Warsaw\core.exe {305BA2DD88FE398D8CF90790C9D266BA} O23 - Service: Wyse PocketCloud (WysePocketCloud) . (.Copyright © 2013 - PocketCloudService.) - C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe {0771F240FB28B143EAAB7F12409D9532} O23 - Service: Wyse RemoteAccess (WyseRemoteAccess) . (.DELL Inc. - Wyse RemoteAccess Server.) - C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe =>.Dell Inc. ---\\ Serviços não Microsoft (SR=Executados, SS=Parados) (36) - 36s SR - Auto [14/09/2015] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® SR - Auto [21/06/2013] [ 135168] Change Modem Device Service (Change Modem Device Service) . (...) - C:\Windows\SysWOW64\ChgService.exe SS - Demand [19/12/2015] [ 300968] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe =>.Intel Corporation - pGFX® SR - Auto [16/03/2015] [ 237448] Dell Digital Delivery Service (DellDigitalDelivery) . (.Dell Products, LP..) - C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe =>.Dell Inc.® SS - Demand [31/10/2014] [ 278568] Dell Product Registration Manager (DellProdRegManager) . (.Aviata, Inc..) - C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe =>.Leader Technologies Inc® SR - Auto [01/07/2014] [ 2938672] FAService (FAService) . (.Sensible Vision.) - C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe {5A3025AB87473F2ED013C7BD8AFC2593} =>.Sensible Vision SR - Auto [22/09/2015] [ 593120] Gbp Service (GbpSv) . (.GAS Tecnologia.) - C:\Program Files (x86)\GbPlugin\gbpsv.exe {305BA2DD88FE398D8CF90790C9D266BA} SS - Auto [20/03/2015] [ 107848] Serviço do Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [20/03/2015] [ 107848] Serviço do Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Auto [02/11/2015] [ 451960] McAfee Home Network (HomeNetSvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® SR - Auto [19/12/2015] [ 373160] Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\igfxCUIService.exe =>.Intel Corporation SR - Auto [27/08/2013] [ 747520] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - c:\Program Files\Intel\iCLS Client\HeciServer.exe =>.Intel(R) Corporation SS - Demand [27/08/2013] [ 828376] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe =>.Intel® Trusted Connect Service® SR - Auto [10/12/2013] [ 169432] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Intel® Management Engine Firmware® SR - Auto [10/12/2013] [ 390616] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Software and Firmware Products® SR - Auto [29/12/2015] [ 158952] McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe =>.McAfee, Inc.® SR - Auto [10/11/2015] [ 863448] McAfee AP Service (McAPExe) . (.McAfee, Inc..) - C:\Program Files\mcafee\msc\McAPExe.exe =>.McAfee, Inc.® SS - Demand [24/07/2013] [ 334608] McAfee Activation Service (McAWFwk) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe =>.McAfee, Inc.® SR - Auto [27/10/2015] [ 1694152] McAfee CSP Service (mccspsvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\CSP\1.8.190.0\McCSPServiceHost.exe =>.McAfee, Inc.® SR - Auto [02/11/2015] [ 451960] McAfee VirusScan Announcer (McNaiAnn) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® SS - Demand [20/10/2015] [ 679120] McAfee Scanner (McODS) . (.McAfee, Inc..) - C:\Program Files\mcafee\VirusScan\mcods.exe =>.McAfee, Inc.® SS - Disabl [02/11/2015] [ 451960] McAfee OOBE Service2 (McOobeSv2) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® SR - Auto [02/11/2015] [ 451960] McAfee Platform Services (mcpltsvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® SR - Auto [02/11/2015] [ 451960] McAfee Proxy Service (McProxy) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe =>.McAfee, Inc.® SR - Demand [21/09/2015] [ 233680] McAfee Firewall Core Service (mfefire) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\SystemCore\mfefire.exe =>.McAfee, Inc.® SR - Auto [21/10/2015] [ 378848] McAfee Service Controller (mfemms) . (.McAfee, Inc..) - C:\Program Files\Common Files\mcafee\SystemCore\mfemms.exe =>.McAfee, Inc.® SR - Auto [21/09/2015] [ 256840] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, Inc..) - C:\Windows\system32\mfevtps.exe =>.McAfee, Inc. SS - Auto [10/01/2014] [ 168960] My Dell Client Framework (My Dell Client Framework) . (.Dell Inc..) - C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe =>.Dell Inc. SR - Auto [30/07/2013] [ 253776] Cyberlink RichVideo Service(CRVS) (RichVideo) . (.CyberLink.) - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe =>.CyberLink Corp.® SR - Auto [04/08/2015] [ 312056] Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp® SS - Auto [09/07/2015] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl® SR - Auto [19/10/2015] [ 339968] (Update service) . (.Popcorn Time.) - C:\Program Files (x86)\Popcorn Time\Updater.exe =>.Popcorn Time SR - Auto [04/11/2015] [ 904928] Warsaw Technology (Warsaw Technology) . (.GAS Tecnologia LTDA.) - C:\Program Files\Diebold\Warsaw\core.exe {305BA2DD88FE398D8CF90790C9D266BA} SR - Auto [22/08/2013] [ 16176] Wyse PocketCloud (WysePocketCloud) . (.Copyright © 2013.) - C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe {0771F240FB28B143EAAB7F12409D9532} SR - Auto [19/08/2013] [ 1785344] Wyse RemoteAccess (WyseRemoteAccess) . (.DELL Inc..) - C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe =>.Dell Inc. ---\\ Tarefas planificadas automaticamente (31) - 4s [MD5.EABAB863E4451B22CA44A4919E59D2B8] [APT] [CLMLSvc_P2G8] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [110144] =>.CyberLink Corp.® [MD5.B545F8575AF154A5690B5EACECEE1B5E] [APT] [CLVDLauncher] (.CyberLink Corp..) -- C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [340440] =>.CyberLink Corp.® [MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] =>.Google Inc® [MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] =>.Google Inc® [MD5.FB14434577860E1D8BC8A982902F90EE] [APT] [Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse] (.McAfee, Inc..) -- C:\Program Files\Common Files\mcafee\AMContent\scanners\x86_64\datrep\21.0\mcdatrep.exe [1766256] =>.McAfee, Inc.® [MD5.FB14434577860E1D8BC8A982902F90EE] [APT] [Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse] (.McAfee, Inc..) -- C:\Program Files\Common Files\mcafee\AMContent\scanners\x86_64\datrep\21.0\mcdatrep.exe [1766256] =>.McAfee, Inc.® [MD5.671F14F5173740A6B87836632E53A541] [APT] [osTip] (.Copyright (C) 2015.) -- C:\ProgramData\WindowsMsg\osmsg.exe [2036224] [MD5.8BA44835428A33E6E000CFA309FF28F3] [APT] [PocketCloud] (.Copyright © 2013.) -- C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudDesktopApp.exe [713008] {0771F240FB28B143EAAB7F12409D9532} [MD5.39462EAB782F7232C2F06FF249DAD6DC] [APT] [PocketCloudUpdater] (.Copyright © 2013.) -- C:\Program Files (x86)\Wyse\PocketCloud\Updater.exe [50480] {0771F240FB28B143EAAB7F12409D9532} [MD5.C567947FEB5704B0BB63974A90A0D7CF] [APT] [PocketCloudVirtualChannel] (.Copyright © 2013.) -- C:\Program Files (x86)\Wyse\PocketCloud\WPCRDPVirtualChannelServer.exe [17200] {0771F240FB28B143EAAB7F12409D9532} [MD5.00000000000000000000000000000000] [APT] [Sabhuqt] (...) -- C:\PROGRA~1\GROOVE~1\Dijmommi.bat (.not file.) [0] =>PUP.Optional.Groover [MD5.65381FF128341C3B6E6AA4ABCCFABD79] [APT] [Synaptics TouchPad Enhancements] (.Synaptics Incorporated.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000] =>.Synaptics Incorporated® [MD5.00000000000000000000000000000000] [APT] [ttwifi] (...) -- C:\Program Files (x86)\ttwifi\tiantianwifi.exe (.not file.) [0] [MD5.9D517D097DB891EEB1302C9652325DCB] [APT] [Dell\Dell Product Registration] (.Aviata Inc.) -- C:\Program Files (x86)\Dell Product Registration\prodreg.exe [157216] =>.Leader Technologies Inc® [MD5.9D517D097DB891EEB1302C9652325DCB] [APT] [Dell\Dell Product Registration Update] (.Aviata Inc.) -- C:\Program Files (x86)\Dell Product Registration\prodreg.exe [157216] =>.Leader Technologies Inc® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1082] =>.Google Inc. O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1086] =>.Google Inc. O39 - APT: Synaptics TouchPad Enhancements - (.Synaptics Incorporated.) -- C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job [264] =>.Synaptics Incorporated O39 - APT: CLMLSvc_P2G8 - (.CyberLink.) -- C:\WINDOWS\System32\Tasks\CLMLSvc_P2G8 [2350] =>.CyberLink O39 - APT: CLVDLauncher - (.CyberLink Corp..) -- C:\WINDOWS\System32\Tasks\CLVDLauncher [2350] =>.CyberLink Corp. O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3912] =>.Google Inc. O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4144] =>.Google Inc. O39 - APT: Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse - (.McAfee, Inc..) -- C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse [4020] =>.McAfee, Inc. O39 - APT: Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse - (.McAfee, Inc..) -- C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse [4208] =>.McAfee, Inc. O39 - APT: osTip - (.Copyright (C) 2015.) -- C:\WINDOWS\System32\Tasks\osTip [2998] O39 - APT: PocketCloud - (.Copyright © 2013.) -- C:\WINDOWS\System32\Tasks\PocketCloud [2130] O39 - APT: PocketCloudUpdater - (.Copyright © 2013.) -- C:\WINDOWS\System32\Tasks\PocketCloudUpdater [2384] O39 - APT: PocketCloudVirtualChannel - (.Copyright © 2013.) -- C:\WINDOWS\System32\Tasks\PocketCloudVirtualChannel [2232] O39 - APT: Sabhuqt - (...) -- C:\WINDOWS\System32\Tasks\Sabhuqt [3406] (.Orphean.) =>PUP.Optional.Groover O39 - APT: Synaptics TouchPad Enhancements - (.Synaptics Incorporated.) -- C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements [2048] =>.Synaptics Incorporated O39 - APT: ttwifi - (...) -- C:\WINDOWS\System32\Tasks\ttwifi [3104] (.Orphean.) =>.Superfluous.Orphean ---\\ Processos lançados (54) - 4s [MD5.BBE2179C44B7D16F85DE1285DEAB71AF] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) -- C:\Program Files (x86)\GbPlugin\gbpsv.exe [593120] [PID.1256] {305BA2DD88FE398D8CF90790C9D266BA} [MD5.078DE1A9D9DB0BB617D4DCF1EF925928] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\System32\igfxCUIService.exe [373160] [PID.1436] =>.Intel Corporation - pGFX® [MD5.36AC33C98A8AE084EFD1FE6C6E197033] - (.Sensible Vision - FastAccess.) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe [2938672] [PID.1696] {5A3025AB87473F2ED013C7BD8AFC2593} =>.Sensible Vision [MD5.DBE1ADA144291F8E0F29ECC40AE14562] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [312056] [PID.1892] =>.Realtek Semiconductor Corp® [MD5.F6CEFEF46986DE02A3AE5D93AE32B5DC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.2264] =>.Adobe Systems, Incorporated® [MD5.DAE6C3099D291EED8922A65C29ABCF52] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520] [PID.2280] =>.Intel(R) Corporation [MD5.74FFFB94D7FFD4750BD429CCB197720E] - (...) -- C:\Windows\SysWOW64\ChgService.exe [135168] [PID.2288] [MD5.C76DEBD4675A90C6A9CECA4E12F9295C] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\Windows\System32\mfevtps.exe [256840] [PID.2308] =>.McAfee, Inc.® [MD5.BD93D1A0E0A7A96BEA4585F17C9B3307] - (.Popcorn Time - Updater.) -- C:\Program Files (x86)\Popcorn Time\Updater.exe [339968] [PID.2664] =>.Popcorn Time [MD5.A85058C7BD11372404E3C3AE63C78E71] - (.DELL Inc. - Wyse RemoteAccess Server.) -- C:\Program Files (x86)\Wyse\PocketCloud\WyseRemoteAccess.exe [1785344] [PID.2672] =>.Dell Inc. [MD5.3B3DD0A864547FD2A45589F8D9B5997D] - (.Copyright © 2013 - PocketCloudService.) -- C:\Program Files (x86)\Wyse\PocketCloud\PocketCloudService.exe [16176] [PID.2812] {0771F240FB28B143EAAB7F12409D9532} [MD5.29CAAED140D5A9E837E1188FA2EF0FD0] - (.McAfee, Inc. - McAfee Management Service.) -- C:\Program Files\Common Files\mcafee\SystemCore\mfemms.exe [378848] [PID.2832] =>.McAfee, Inc.® [MD5.0E60FE005DC0D858EEFA58D8600B79B1] - (.McAfee, Inc. - McAfee WebAdvisor.) -- C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [158952] [PID.2908] =>.McAfee, Inc.® [MD5.C76DEBD4675A90C6A9CECA4E12F9295C] - (.McAfee, Inc. - McAfee Process Validation Service.) -- C:\Windows\System32\mfevtps.exe [256840] [PID.2992] =>.McAfee, Inc.® [MD5.2F95003AA0074E67DA44F472A2BCE399] - (.McAfee, Inc. - McAfee Scanner service.) -- C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe [1046296] [PID.2412] =>.McAfee, Inc.® [MD5.0A8120FB835F5FC47609F7C7744343C2] - (.McAfee, Inc. - McAfee Core Firewall Service.) -- C:\Program Files\Common Files\mcafee\SystemCore\mfefire.exe [233680] [PID.3024] =>.McAfee, Inc.® [MD5.0A8120FB835F5FC47609F7C7744343C2] - (.McAfee, Inc. - McAfee Core Firewall Service.) -- C:\Program Files\Common Files\mcafee\SystemCore\mfefire.exe [233680] [PID.2424] =>.McAfee, Inc.® [MD5.62C2E5AB62EABACCB7CA53A7C24D2638] - (.McAfee, Inc. - McAfee Access Protection.) -- C:\Program Files\mcafee\msc\McAPExe.exe [863448] [PID.3128] =>.McAfee, Inc.® [MD5.47F727600D00D12E15748FCCAF29E6FA] - (.McAfee, Inc. - McAfee Service Host.) -- C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [451960] [PID.3288] =>.McAfee, Inc.® [MD5.DE16DF8B00803C1A26BAFC1067951D11] - (.Sensible Vision - FAsenmon Application.) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FAsenmon.exe [631600] [PID.4680] {5A3025AB87473F2ED013C7BD8AFC2593} =>.Sensible Vision [MD5.D02EF4F75F84FF46011AA7C1DC08D1A2] - (.McAfee, Inc. - McAfee CSP Service Host.) -- C:\Program Files\Common Files\mcafee\CSP\1.8.190.0\McCSPServiceHost.exe [1694152] [PID.6304] =>.McAfee, Inc.® [MD5.188BCE1A33FAEE1F19A8D8875B0781DC] - (.Dell Products, LP. - Dell Digital Delivery Windows Service.) -- C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe [237448] [PID.6324] =>.Dell Inc.® [MD5.52069AEB42D3D0F97CBCA1085EBF55E6] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432] [PID.5620] =>.Intel Corporation - Intel® Management Engine Firmware® [MD5.E2952760B05A256FB1412D20A41C89C1] - (.Intel Corporation - Intel(R) Local Management Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [390616] [PID.9792] =>.Intel Corporation - Software and Firmware Products® [MD5.CBE300DA6064C31F2AC4ED8A0722BEF0] - (.CyberLink - RichVideo Module.) -- C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776] [PID.9892] =>.CyberLink Corp.® [MD5.0E2ACB398A31D620A1C08FCE5763CEB2] - (.Sensible Vision - FACSMon Application.) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FACSMon.exe [38704] [PID.4320] {5A3025AB87473F2ED013C7BD8AFC2593} =>.Sensible Vision [MD5.65381FF128341C3B6E6AA4ABCCFABD79] - (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000] [PID.564] =>.Synaptics Incorporated® [MD5.BBE2179C44B7D16F85DE1285DEAB71AF] - (.GAS Tecnologia - G-Buster Browser Defense - Service.) -- C:\Program Files (x86)\GbPlugin\gbpsv.exe [593120] [PID.9528] {305BA2DD88FE398D8CF90790C9D266BA} [MD5.D61AEC9A148F08A82487938E4EA5DADC] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\System32\igfxEM.exe [354216] [PID.5984] =>.Intel Corporation - pGFX® [MD5.3A19FD28BF891CB67FD89A94BEC88C3F] - (...) -- C:\Windows\System32\igfxTray.exe [402344] [PID.3136] =>.Intel Corporation - pGFX® [MD5.BC5A40AEAC1CF7708D07CBC2F577F90B] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411320] [PID.3332] =>.Realtek Semiconductor Corp® [MD5.BC5A40AEAC1CF7708D07CBC2F577F90B] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411320] [PID.7692] =>.Realtek Semiconductor Corp® [MD5.8C9BD078573EB023066B39B22D349ACD] - (.McAfee, Inc. - McAfee.) -- C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [791360] [PID.7020] =>.McAfee, Inc.® [MD5.641B19018CB32619ADBD0AED4964E1D9] - (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8512760] [PID.5052] =>.Realtek Semiconductor Corp® [MD5.BC5A40AEAC1CF7708D07CBC2F577F90B] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411320] [PID.3992] =>.Realtek Semiconductor Corp® [MD5.0D7E3548CB03D862F4E4D8E44396686A] - (.Dell Inc. - QuickSet.) -- C:\Program Files\Dell\QuickSet\quickset.exe [3777696] [PID.1460] =>.Dell Inc. [MD5.65066A6E15E60A707E587005E4DDA398] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe [2065944] [PID.860] =>.BitTorrent Inc® [MD5.248FB4D46C7F4A39D601EA870EE55AC4] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528] [PID.2640] =>.Oracle America, Inc.® [MD5.55F5FF4E4BD359CB8D44787DFD945855] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\Sidneia\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe [335872] [PID.8264] [MD5.55F5FF4E4BD359CB8D44787DFD945855] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\Sidneia\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe [335872] [PID.9360] [MD5.F7795B86D82629B0B2BD9240A1330F6F] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [199408] [PID.2276] =>.Synaptics Incorporated® [MD5.EABAB863E4451B22CA44A4919E59D2B8] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [110144] [PID.4252] =>.CyberLink Corp.® [MD5.671F14F5173740A6B87836632E53A541] - (.Copyright (C) 2015 - .) -- C:\ProgramData\WindowsMsg\osmsg.exe [2036224] [PID.412] [MD5.904CA475F6ADD4080B0EA5144D23FDF1] - (...) -- C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe [144384] [PID.9096] [MD5.D12F3CA52F4F9B56C30495906A4C4B59] - (...) -- C:\Program Files (x86)\VIVO INTERNET\Main\USB Modem.exe [2285568] [PID.6168] [MD5.2FBDC69E68D2B895276E460905E3FA78] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748872] [PID.5140] =>.Google Inc® [MD5.2FBDC69E68D2B895276E460905E3FA78] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748872] [PID.1688] =>.Google Inc® [MD5.2FBDC69E68D2B895276E460905E3FA78] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748872] [PID.9688] =>.Google Inc® [MD5.2FBDC69E68D2B895276E460905E3FA78] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748872] [PID.8872] =>.Google Inc® [MD5.FF0D699FF9149BF994FAF537CE673272] - (.McAfee, Inc. - SiteAdvisor.) -- C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe [393768] [PID.4860] =>.McAfee, Inc.® [MD5.2FBDC69E68D2B895276E460905E3FA78] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748872] [PID.7912] =>.Google Inc® [MD5.2FBDC69E68D2B895276E460905E3FA78] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748872] [PID.5728] =>.Google Inc® [MD5.26F9D5A0E956CD2787F2F8D0FAA4A0E8] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Sidneia\Desktop\ZHPDiag3.exe [2114560] [PID.5788] =>.Nicolas Coolman [MD5.2FBDC69E68D2B895276E460905E3FA78] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748872] [PID.4768] =>.Google Inc® ---\\ Google Chrome, Arranque,Pesquisa,Extensões (9) - 0s G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [fheoggkfdfchfphceeifdbepaooicaho] SiteAdvisor G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (4) - 26s P2 - FPN: [HKCU] [gastecnologia.com.br/sf/bb] - (.GAS Tecnologia.) -- C:\Users\Sidneia\AppData\Local\GAS Tecnologia\GBBD\npsf_bb.dll P2 - FPN: [HKCU] [gastecnologia.com.br/sf/bb64] - (.GAS Tecnologia.) -- C:\Users\Sidneia\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll P2 - FPN: [HKLM] [@mcafee.com/MSC,version=10] - (.McAfee Total Protection MIME Plugin.) -- c:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll =>.McAfee Total Protection MIME Plugin P2 - FPN: [HKLM] [@sensiblevision.com/FastAccess,version=4.1.110] - (.Sensible Vision.) -- C:\Program Files (x86)\Sensible Vision\Fast Access\xpcom_fasso\nprt.dll =>.Sensible Vision ---\\ Internet Explorer, Arranque, Pesquisa, Phishing (18) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer, Gestão do Proxy (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 ---\\ Análise das linhas, Carregamento Automático de programas (3) - 0s F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet= ---\\ Redireção do ficheiro Hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (1) ---\\ Browser Helper Objects do navegador (5) - 0s O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll =>.Oracle America, Inc.® O2 - BHO: SkypeIEPluginBHO [64Bits] - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll =>.Skype Software Sarl® O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} (Orphean) O2 - BHO: SSOIEAddonBHO [64Bits] - {DA5BCE70-D057-4D63-943D-5F3927EC59F1} . (.Sensible Vision - Face recognition web login for FastAccess.) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll {5A3025AB87473F2ED013C7BD8AFC2593} =>.Sensible Vision O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll =>.Oracle America, Inc.® ---\\ Aplicações iniciadas por registo & pastas (23) - 2s O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics Incorporated® O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe =>.Realtek Semiconductor Corp® O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp® O4 - HKLM\..\Run: [WavesSvc] C:\Program Files\Realtek\Audio\HDA\WavesSvc64.exe (.not file.) O4 - HKLM\..\Run: [QuickSet] . (.Dell Inc. - QuickSet.) -- c:\Program Files\Dell\QuickSet\quickset.exe =>.Dell Inc. O4 - HKLM\..\Run: [IgfxTray] . (...) -- C:\Windows\System32\igfxTray.exe =>.Intel Corporation - pGFX® O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe (.not file.) O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe (.not file.) O4 - HKLM\..\Run: [Diebold - Warsaw] . (.GAS Tecnologia LTDA - GAS Tecnologia - Core.) -- C:\Program Files\Diebold\Warsaw\core.exe {305BA2DD88FE398D8CF90790C9D266BA} O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Sidneia\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation® O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - HKCU\..\Run: [osmsg] . (.Copyright (C) 2015 - .) -- C:\ProgramData\WindowsMsg\osmsg.exe O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - HKLM\..\Wow6432Node\Run: [FATrayAlert] . (.Sensible Vision - FATrayMon.) -- C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe {5A3025AB87473F2ED013C7BD8AFC2593} =>.Sensible Vision O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.® O4 - HKLM\..\Wow6432Node\Run: [FAStartup] (Orphean) O4 - HKLM\..\policies\Explorer\Run: [BtvStack] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe (.not file.) O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-2220204222-2514893637-543024124-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Sidneia\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-2220204222-2514893637-543024124-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - HKUS\S-1-5-21-2220204222-2514893637-543024124-1001\..\Run: [osmsg] . (.Copyright (C) 2015 - .) -- C:\ProgramData\WindowsMsg\osmsg.exe O4 - HKUS\S-1-5-21-2220204222-2514893637-543024124-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® ---\\ Atalhos globais Startup (31) - 5s O4 - GS\Desktop [Administrador]: cm0102.exe - Atalho.lnk . (...) C:\Users\Sidneia\Downloads\CM 0102\cm0102.exe O4 - GS\Desktop [Administrador]: Excel 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [Administrador]: Word 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [Administrador]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Sidneia\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [Administrador]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [Administrador]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Administrador]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [Administrador]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Administrador]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [Convidado]: cm0102.exe - Atalho.lnk . (...) C:\Users\Sidneia\Downloads\CM 0102\cm0102.exe O4 - GS\Desktop [Convidado]: Excel 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [Convidado]: Word 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [Convidado]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Sidneia\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [Convidado]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [Convidado]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Convidado]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [Convidado]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Convidado]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [Sidneia]: cm0102.exe - Atalho.lnk . (...) C:\Users\Sidneia\Downloads\CM 0102\cm0102.exe O4 - GS\Desktop [Sidneia]: Excel 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [Sidneia]: Word 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [Sidneia]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Sidneia\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [Sidneia]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [Sidneia]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Sidneia]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Sidneia\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [Sidneia]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Sidneia]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: Counter-Strike 1.6.lnk . (.Valve - Half-Life Launcher.) C:\Program Files (x86)\Valve\hl.exe =>.Valve O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\WINDOWS\Installer\{FC965A47-4839-40CA-B618-18F486F042C6}\SkypeIcon.exe O4 - GS\CommonDesktop [Public]: VIVO INTERNET.lnk . (...) C:\Program Files (x86)\VIVO INTERNET\Main\USB Modem.exe ---\\ Alteração Dominio/Clientes DNS (5) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.204.135.203 200.204.135.200 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{c771f293-2194-48ec-b2ac-feaff21fec06}: DhcpNameServer = 172.20.10.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{d5ac6117-4a8f-4962-8f0e-0eccf3a933f4}: DhcpNameServer = 200.19.215.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DFA673C9-1E9D-4C02-B5A8-0964452CE2D1}: DhcpNameServer = 200.204.135.253 187.100.246.252 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{eea51d1f-6c97-4b62-a4ef-789370856acb}: DhcpNameServer = 200.204.135.203 200.204.135.200 ---\\ Protocolo adicional (29) - 1s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dssrequest [64Bits] - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - WebAdvisor.) -- c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll =>.McAfee, Inc.® O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: osf [64Bits] - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL =>.Microsoft Corporation® O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: sacore [64Bits] - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - WebAdvisor.) -- c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll =>.McAfee, Inc.® O18 - Handler: skypec2c [64Bits] - {91774881-D725-4E58-B298-07617B9B86A8} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll =>.Skype Software Sarl® O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-mfe-ipt [64Bits] - {3EF5086B-5478-4598-A054-786C45D75692} . (.McAfee, Inc. - McAfee MSC IE plugin DLL.) -- c:\Program Files (x86)\McAfee\msc\McSnIePl.dll =>.McAfee, Inc.® O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Software instalados (55) - 17s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc® O42 - Logiciel: Adobe Reader XI (11.0.13) MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-AB0000000001} =>.Adobe Systems Incorporated O42 - Logiciel: Arquivo do WinRAR - (...) [HKLM][64Bits] -- WinRAR archiver O42 - Logiciel: Counter-Strike 1.6 - (...) [HKLM][64Bits] -- {9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9} O42 - Logiciel: CyberLink LabelPrint 2.5 - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} =>.CyberLink Corp.® O42 - Logiciel: CyberLink Media Suite 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {1FBF6C24-C1fD-4101-A42B-0C564F9E8E79} =>.CyberLink Corp.® O42 - Logiciel: CyberLink Media Suite Essentials - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7} =>.CyberLink Corp.® O42 - Logiciel: CyberLink Power2Go 8 - (.CyberLink Corp..) [HKLM][64Bits] -- {2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2} =>.CyberLink Corp.® O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {B0B4F6D2-F2AE-451A-9496-6F2F6A897B32} =>.CyberLink Corp.® O42 - Logiciel: CyberLink PowerDVD 12 - (.CyberLink Corp..) [HKLM][64Bits] -- {B46BEA36-0B71-4A4E-AE41-87241643FA0A} =>.CyberLink Corp.® O42 - Logiciel: Dell Backup and Recovery - (.Dell Inc..) [HKLM][64Bits] -- {0ED7EE95-6A97-47AA-AD73-152C08A15B04} =>.Dell Inc. O42 - Logiciel: Dell Backup and Recovery - Support Software - (.Dell Inc..) [HKLM][64Bits] -- {A9668246-FB70-4103-A1E3-66C9BC2EFB49} =>.Dell Inc. O42 - Logiciel: Dell Digital Delivery - (.Dell Products, LP.) [HKLM][64Bits] -- {693A23FB-F28B-4F7A-A720-4C1263F97F43} =>.Dell Products, LP O42 - Logiciel: Dell Product Registration - (.Aviata Inc..) [HKLM][64Bits] -- {24F2AD94-CC1B-4294-B184-D4D31A3186A7} =>.Aviata Inc. O42 - Logiciel: Dell Touchpad - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated O42 - Logiciel: Dell Update - (.Dell Inc..) [HKLM][64Bits] -- {9E4750A7-90F6-4181-8A8A-B1ADF4216E93} =>.Dell Inc. O42 - Logiciel: Dell WLAN and Bluetooth Client Installation - (.Dell Inc..) [HKLM][64Bits] -- {28006915-2739-4EBE-B5E8-49B25D32EB33} =>.Dell Inc. O42 - Logiciel: FastAccess - (.Sensible Vision.) [HKLM][64Bits] -- {E89914BB-7C2B-49D9-B4FE-C1AF0E9766DB} =>.Sensible Vision O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} =>.Intel Corporation - Software and Firmware Products® O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - pGFX® O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {B5E06417-A4AC-4225-B36E-7E34C91616E7} =>.Intel Corporation O42 - Logiciel: IRPF2015 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva - (.Receita Federal do Brasil.) [HKLM][64Bits] -- IRPF2015 O42 - Logiciel: Java 8 Update 40 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86418040F0} =>.Oracle Corporation O42 - Logiciel: Java 8 Update 71 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218071F0} =>.Oracle Corporation O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation O42 - Logiciel: K-Lite Codec Pack 11.2.0 Full - (...) [HKLM][64Bits] -- KLiteCodecPack_is1 O42 - Logiciel: McAfee AntiVirus - (.McAfee, Inc..) [HKLM][64Bits] -- MSC =>.McAfee, Inc.® O42 - Logiciel: McAfee WebAdvisor - (.McAfee, Inc..) [HKLM][64Bits] -- {35ED3F83-4BDC-4c44-8EC6-6A8301C7413A} =>.McAfee, Inc.® O42 - Logiciel: Microsoft Access MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft DCF MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Excel MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Groove MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft InfoPath MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Lync MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft OneNote MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Outlook MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft PowerPoint MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Publisher MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation O42 - Logiciel: Microsoft Word MUI (Portuguese (Brazil)) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-0416-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Módulo de Segurança - Banco do Brasil - (...) [HKLM][64Bits] -- {36386dc9-8543-4b12-ae6b-220fd52f19f3}_is1 O42 - Logiciel: My Dell Client Framework - (.Dell.) [HKLM][64Bits] -- {05F1B866-2372-4E82-9AA8-C64FB11CEF8B} =>.Dell O42 - Logiciel: My Dell Client Framework - (.Dell.) [HKLM][64Bits] -- InstallShield_{05F1B866-2372-4E82-9AA8-C64FB11CEF8B} =>.Dell O42 - Logiciel: PocketCloud - (.Wyse Technology.) [HKLM][64Bits] -- {D9752C7D-A595-4687-A0D5-362E9C311C55} =>.Wyse Technology O42 - Logiciel: Qualcomm Atheros Bluetooth Suite (64) - (.Qualcomm Atheros Communications.) [HKLM][64Bits] -- {A84A4FB1-D703-48DB-89E0-68B6499D2801} =>.Qualcomm Atheros Communications O42 - Logiciel: Quickset64 - (.Dell Inc..) [HKLM][64Bits] -- {87CF757E-C1F1-4D22-865C-00C6950B5258} =>.Dell Inc. O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp® O42 - Logiciel: Receitanet - (.Serpro - Serviço Federal de Processamento de Dados.) [HKLM][64Bits] -- ECC16E3C-16D1-4DC2-9D8A-6AC06B3005A5 O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} =>.Microsoft Corporation O42 - Logiciel: Skype™ 7.18 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A. O42 - Logiciel: VIVO INTERNET - (...) [HKLM][64Bits] -- VIVO INTERNET 1.14.17.39.2.577 O42 - Logiciel: Warsaw 1.11.0.42826 64 bits - (.GAS Tecnologia.) [HKLM][64Bits] -- {20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1 ---\\ HKCU & HKLM Software Keys (88) - 17s HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\ATHEROS HKLM\SOFTWARE\Wow6432Node\Aviata HKLM\SOFTWARE\Wow6432Node\Caphyon HKLM\SOFTWARE\Wow6432Node\CyberLink HKLM\SOFTWARE\Wow6432Node\Dell HKLM\SOFTWARE\Wow6432Node\Dell Inc. HKLM\SOFTWARE\Wow6432Node\DellBackupandRecovery HKLM\SOFTWARE\Wow6432Node\DellShared HKLM\SOFTWARE\Wow6432Node\Dell_Wlan HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\HaaliMkx HKLM\SOFTWARE\Wow6432Node\Icaros HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\KLCodecPack HKLM\SOFTWARE\Wow6432Node\Lake HKLM\SOFTWARE\Wow6432Node\LAV HKLM\SOFTWARE\Wow6432Node\LphcmModem HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\McAfee HKLM\SOFTWARE\Wow6432Node\McAfee.com HKLM\SOFTWARE\Wow6432Node\Megalog HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\My Dell Client Framework HKLM\SOFTWARE\Wow6432Node\Network Associates HKLM\SOFTWARE\Wow6432Node\Nuance HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\PC-Doctor HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\Sensible Vision HKLM\SOFTWARE\Wow6432Node\SiteAdvisor HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SoftThinks HKLM\SOFTWARE\Wow6432Node\Sports Interactive Ltd HKLM\SOFTWARE\Wow6432Node\SuppHelpDir HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\Waves Audio HKLM\SOFTWARE\Wow6432Node\Wow6432Node HKLM\SOFTWARE\Wow6432Node\Wyse HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Atheros HKCU\SOFTWARE\AutoHelpDesk HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\Brasfoot2015 HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\Emulators HKCU\SOFTWARE\GbPlugin HKCU\SOFTWARE\Google HKCU\SOFTWARE\Haali HKCU\SOFTWARE\Icaros HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\McAfee HKCU\SOFTWARE\MediaInfo HKCU\SOFTWARE\Mine HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\MPC-HC HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\osTip HKCU\SOFTWARE\PC-Doctor HKCU\SOFTWARE\Popcorn Time HKCU\SOFTWARE\PopcornTime HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\Sensible Vision HKCU\SOFTWARE\Skype HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\Valve HKCU\SOFTWARE\Waves Audio HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\JavaSoft HKCU\SOFTWARE\AppDataLow\Software\Sensible Vision ---\\ Conteúdo das pastas Programs (187) - 23s O43 - CFD: 08/02/2016 - [] D -- C:\Program Files (x86)\4C4C4544-1453744389-5810-804D-C7C04F463232 =>PUP.Optional.CrossRider O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Cisco O43 - CFD: 22/01/2016 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 08/10/2014 - [] AD -- C:\Program Files (x86)\CyberLink =>.CyberLink® O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Dell O43 - CFD: 08/12/2015 - [] AD -- C:\Program Files (x86)\Dell Backup and Recovery {50FC97C7D0FC39DEDD3AD0A4E53C5F83} O43 - CFD: 10/06/2015 - [] AD -- C:\Program Files (x86)\Dell Digital Delivery O43 - CFD: 02/04/2015 - [] AD -- C:\Program Files (x86)\Dell Product Registration =>.Leader Technologies Inc® O43 - CFD: 29/03/2015 - [] AD -- C:\Program Files (x86)\Dell Update =>.Dell Inc.® O43 - CFD: 08/12/2015 - [] AD -- C:\Program Files (x86)\Dell Wireless O43 - CFD: 29/03/2015 - [] HD -- C:\Program Files (x86)\Diebold {58C005F9811C3FD333668072A04E0D1B} O43 - CFD: 29/03/2015 - [] HD -- C:\Program Files (x86)\GAS Tecnologia O43 - CFD: 09/02/2016 - [] AD -- C:\Program Files (x86)\GbPlugin {305BA2DD88FE398D8CF90790C9D266BA} O43 - CFD: 20/03/2015 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 17/03/2015 - [] HD -- C:\Program Files (x86)\InstallJammer Registry O43 - CFD: 01/01/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.CyberLink Corp.® O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation - pGFX® O43 - CFD: 20/12/2015 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 22/01/2016 - [] D -- C:\Program Files (x86)\Java =>.Oracle America, Inc.® O43 - CFD: 18/06/2015 - [] AD -- C:\Program Files (x86)\K-Lite Codec Pack O43 - CFD: 26/08/2015 - [] D -- C:\Program Files (x86)\McAfee =>.McAfee, Inc.® O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\mcafee.com =>.McAfee, Inc.® O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation® O43 - CFD: 16/03/2015 - [] AD -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Microsoft Silverlight =>.Microsoft Corporation® O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Microsoft SQL Server O43 - CFD: 08/12/2015 - [] AD -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 08/02/2016 - [] AD -- C:\Program Files (x86)\Popcorn Time O43 - CFD: 17/03/2015 - [] D -- C:\Program Files (x86)\Programas RFB O43 - CFD: 11/06/2015 - [0] D -- C:\Program Files (x86)\R.G. Mechanics O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek Semiconductor Corp® O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 22/03/2015 - [] D -- C:\Program Files (x86)\Sensible Vision {5A3025AB87473F2ED013C7BD8AFC2593} O43 - CFD: 25/01/2016 - [] RD -- C:\Program Files (x86)\Skype =>.Skype Software Sarl® O43 - CFD: 08/12/2015 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 01/01/2016 - [] AD -- C:\Program Files (x86)\Valve O43 - CFD: 23/10/2015 - [] D -- C:\Program Files (x86)\VIVO INTERNET O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 30/10/2015 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 16/03/2015 - [] D -- C:\Program Files (x86)\WinRAR O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Wyse {0771F240FB28B143EAAB7F12409D9532} O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 20/03/2015 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brasfoot 2015 O43 - CFD: 20/03/2015 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brasfoot2015 O43 - CFD: 01/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CS Tradutor para o CSBot O43 - CFD: 01/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CSBot V1.50 - da CSBRasil Comunidade O43 - CFD: 08/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite O43 - CFD: 08/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell O43 - CFD: 08/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastAccess Facial Recognition O43 - CFD: 08/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel O43 - CFD: 22/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 09/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programas RFB O43 - CFD: 22/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 30/10/2015 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VIVO INTERNET O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wyse O43 - CFD: 16/03/2015 - [] D -- C:\ProgramData\Adobe O43 - CFD: 12/03/2015 - [] D -- C:\ProgramData\Atheros O43 - CFD: 08/10/2014 - [] D -- C:\ProgramData\Aviata O43 - CFD: 31/01/2016 - [0] D -- C:\ProgramData\baidu O43 - CFD: 03/02/2016 - [] D -- C:\ProgramData\BlueStacksSetup O43 - CFD: 29/03/2015 - [0] D -- C:\ProgramData\boost_interprocess O43 - CFD: 08/10/2014 - [] D -- C:\ProgramData\CLSK O43 - CFD: 30/10/2015 - [0] D -- C:\ProgramData\Comms O43 - CFD: 10/09/2015 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 11/03/2015 - [0] SHD -- C:\ProgramData\Dados de Aplicativos O43 - CFD: 08/10/2014 - [] D -- C:\ProgramData\DELL O43 - CFD: 08/12/2015 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 11/03/2015 - [0] SHD -- C:\ProgramData\Documentos O43 - CFD: 08/10/2014 - [] D -- C:\ProgramData\Downloaded Installations O43 - CFD: 29/03/2015 - [] D -- C:\ProgramData\GAS Tecnologia O43 - CFD: 06/02/2016 - [] D -- C:\ProgramData\GbPlugin O43 - CFD: 08/10/2014 - [] D -- C:\ProgramData\install_clap O43 - CFD: 08/10/2014 - [] D -- C:\ProgramData\Intel O43 - CFD: 20/12/2015 - [] D -- C:\ProgramData\McAfee O43 - CFD: 11/03/2015 - [0] SHD -- C:\ProgramData\Menu Iniciar O43 - CFD: 08/12/2015 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 16/03/2015 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Microsoft OneDrive O43 - CFD: 11/03/2015 - [0] SHD -- C:\ProgramData\Modelos O43 - CFD: 16/03/2015 - [] D -- C:\ProgramData\Oracle O43 - CFD: 25/01/2016 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 22/03/2015 - [] D -- C:\ProgramData\PCDr O43 - CFD: 08/10/2014 - [] D -- C:\ProgramData\PocketCloud O43 - CFD: 08/12/2015 - [] AD -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 22/01/2016 - [] D -- C:\ProgramData\Skype O43 - CFD: 06/02/2016 - [] D -- C:\ProgramData\SoftwareDistribution O43 - CFD: 16/03/2015 - [] D -- C:\ProgramData\Sun O43 - CFD: 29/03/2015 - [] D -- C:\ProgramData\Temp O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\USOPrivate O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\USOShared O43 - CFD: 03/02/2016 - [] D -- C:\ProgramData\WindowsMsg O43 - CFD: 16/03/2015 - [] AD -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Common Files\Atheros O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Common Files\CyberLink O43 - CFD: 16/03/2015 - [] AD -- C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 01/01/2016 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel O43 - CFD: 22/01/2016 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Common Files\mcafee O43 - CFD: 08/12/2015 - [] AD -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 08/10/2014 - [] D -- C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 22/01/2016 - [] AD -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 16/03/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\Adobe O43 - CFD: 12/03/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\Atheros O43 - CFD: 31/01/2016 - [0] D -- C:\Users\Sidneia\AppData\Roaming\Baidu O43 - CFD: 10/09/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\CyberLink O43 - CFD: 24/03/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\FastAccessSup O43 - CFD: 17/03/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\Identities O43 - CFD: 24/03/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\Macromedia O43 - CFD: 03/02/2016 - [] SD -- C:\Users\Sidneia\AppData\Roaming\Microsoft O43 - CFD: 03/02/2016 - [0] D -- C:\Users\Sidneia\AppData\Roaming\Mozilla O43 - CFD: 22/03/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\PCDr O43 - CFD: 09/02/2016 - [] D -- C:\Users\Sidneia\AppData\Roaming\Skype O43 - CFD: 06/11/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\Sports Interactive O43 - CFD: 21/01/2016 - [0] D -- C:\Users\Sidneia\AppData\Roaming\Spotify O43 - CFD: 22/01/2016 - [] D -- C:\Users\Sidneia\AppData\Roaming\Sun O43 - CFD: 09/02/2016 - [] D -- C:\Users\Sidneia\AppData\Roaming\uTorrent O43 - CFD: 17/03/2015 - [0] D -- C:\Users\Sidneia\AppData\Roaming\WinRAR O43 - CFD: 09/02/2016 - [] D -- C:\Users\Sidneia\AppData\Roaming\ZHP O43 - CFD: 08/12/2015 - [0] D -- C:\Users\Sidneia\AppData\Local\ActiveSync O43 - CFD: 16/03/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Adobe O43 - CFD: 20/03/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Apps O43 - CFD: 12/03/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Aviata O43 - CFD: 12/03/2015 - [] D -- C:\Users\Sidneia\AppData\Local\BMExplorer O43 - CFD: 08/12/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Comms O43 - CFD: 29/10/2015 - [] D -- C:\Users\Sidneia\AppData\Local\CrashDumps O43 - CFD: 09/02/2016 - [] D -- C:\Users\Sidneia\AppData\Local\CrashRpt =>.Superfluous.CrashReports O43 - CFD: 10/09/2015 - [] D -- C:\Users\Sidneia\AppData\Local\CyberLink O43 - CFD: 08/12/2015 - [0] SHD -- C:\Users\Sidneia\AppData\Local\Dados de Aplicativos O43 - CFD: 10/11/2015 - [0] D -- C:\Users\Sidneia\AppData\Local\Diagnostics O43 - CFD: 17/03/2015 - [] SHD -- C:\Users\Sidneia\AppData\Local\EmieBrowserModeList O43 - CFD: 25/01/2016 - [0] SHD -- C:\Users\Sidneia\AppData\Local\EmieSiteList O43 - CFD: 25/01/2016 - [0] SHD -- C:\Users\Sidneia\AppData\Local\EmieUserList O43 - CFD: 29/03/2015 - [] D -- C:\Users\Sidneia\AppData\Local\GAS Tecnologia O43 - CFD: 13/09/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Google O43 - CFD: 02/06/2015 - [] D -- C:\Users\Sidneia\AppData\Local\GWX O43 - CFD: 08/12/2015 - [0] SHD -- C:\Users\Sidneia\AppData\Local\Histórico O43 - CFD: 29/07/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Intel_Corporation O43 - CFD: 19/01/2016 - [] D -- C:\Users\Sidneia\AppData\Local\Microsoft O43 - CFD: 16/03/2015 - [0] D -- C:\Users\Sidneia\AppData\Local\Microsoft Help O43 - CFD: 13/01/2016 - [] D -- C:\Users\Sidneia\AppData\Local\MicrosoftEdge O43 - CFD: 08/12/2015 - [0] D -- C:\Users\Sidneia\AppData\Local\NetworkTiles O43 - CFD: 27/01/2016 - [] D -- C:\Users\Sidneia\AppData\Local\Packages O43 - CFD: 20/12/2015 - [] D -- C:\Users\Sidneia\AppData\Local\PopcornTimeDesktop O43 - CFD: 12/03/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Power2Go8 O43 - CFD: 17/03/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Programs O43 - CFD: 08/12/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Publishers O43 - CFD: 22/01/2016 - [0] D -- C:\Users\Sidneia\AppData\Local\Skype O43 - CFD: 19/12/2015 - [] D -- C:\Users\Sidneia\AppData\Local\Sports Interactive O43 - CFD: 09/02/2016 - [] D -- C:\Users\Sidneia\AppData\Local\Temp O43 - CFD: 08/12/2015 - [0] SHD -- C:\Users\Sidneia\AppData\Local\Temporary Internet Files O43 - CFD: 08/12/2015 - [] D -- C:\Users\Sidneia\AppData\Local\TileDataLayer O43 - CFD: 01/05/2015 - [] D -- C:\Users\Sidneia\AppData\Local\VirtualStore O43 - CFD: 30/10/2015 - [] RD -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 08/12/2015 - [] RD -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 31/01/2016 - [] RD -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 20/03/2015 - [0] D -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brasfoot2015 O43 - CFD: 11/06/2015 - [0] D -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter Strike 1.6 - 2013 O43 - CFD: 30/10/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 08/12/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Programas RFB2015 O43 - CFD: 31/01/2016 - [] RD -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 30/10/2015 - [] RD -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 30/10/2015 - [] RSD -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell O43 - CFD: 08/12/2015 - [] D -- C:\Users\Sidneia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 1s O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Sidneia\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Sidneia\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Sidneia\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Sidneia\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Sidneia\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\FileSyncShell.dll =>.Microsoft Corporation® ---\\ Lista dos drivers do sistema (76) - 26s O58 - SDL:2015/10/30 05:17:22 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107360] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:22 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:22 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:22 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:22 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:22 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows® O58 - SDL:2015/08/13 22:11:48 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athw10x.sys [4318760] =>.WDKTestCert qcaswbld,130129545209614653® O58 - SDL:2015/10/30 05:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [9728] =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/10/30 05:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider O58 - SDL:2016/02/03 22:03:30 A . (...) -- C:\WINDOWS\System32\drivers\bsdriver.sys [34712] =>PUP.Optional.Shopperz O58 - SDL:2014/01/08 01:42:22 A . (.Qualcomm Atheros - Qualcomm Atheros BUS driver.) -- C:\WINDOWS\System32\drivers\btath_bus.sys [34384] =>.Atheros Communications Inc.® O58 - SDL:2015/03/09 09:48:34 A . (.Qualcomm Atheros - Qualcomm Atheros BtFilter Driver.) -- C:\WINDOWS\System32\drivers\btfilter.sys [599240] =>.Qualcomm Atheros® O58 - SDL:2015/10/30 05:17:22 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows® O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Personal Firewall IDS Plugin.) -- C:\WINDOWS\System32\drivers\cfwids.sys [80760] =>.McAfee, Inc.® O58 - SDL:2016/02/03 22:02:50 A . (.Windows (R) Win 7 DDK provider - Cherimoya Ltd.) -- C:\WINDOWS\System32\drivers\cherimoya.sys [56728] =>PUP.Optional.Shopperz O58 - SDL:2013/03/05 13:01:42 A . (.CyberLink - It is a virtual device driver which could c.) -- C:\WINDOWS\System32\drivers\CLVirtualDrive.sys [91712] =>.CyberLink Corp.® O58 - SDL:2013/06/21 12:35:46 A . (.Wireless Data Device - USB NDIS Miniport Driver.) -- C:\WINDOWS\System32\drivers\cmntnet.sys [141824] O58 - SDL:2013/06/21 12:35:46 A . (.Wireless Device - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\cmnuusbser.sys [123776] O58 - SDL:2013/01/25 00:12:08 A . (.OSR Open Systems Resources, Inc. - Airplane Mode Switch Driver.) -- C:\WINDOWS\System32\drivers\DellRbtn.sys [10752] =>.OSR Open Systems Resources, Inc. O58 - SDL:2015/10/30 05:17:22 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3436896] =>.Microsoft Windows® O58 - SDL:2012/09/03 18:28:04 A . (.Windows (R) Win 7 DDK provider - FastAccess Video Capture.) -- C:\WINDOWS\System32\drivers\facap.sys [37888] =>.Windows (R) Win 7 DDK provider O58 - SDL:2016/02/09 00:29:50 A . (.GAS Tecnologia - GAS Tecnologia - FAC.) -- C:\WINDOWS\System32\drivers\gbpddfac64.sys [28888] {58C005F9811C3FD333668072A04E0D1B} O58 - SDL:2015/10/30 05:17:22 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:18 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation O58 - SDL:2015/10/30 05:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [165888] =>.Intel Corporation O58 - SDL:2015/10/30 05:17:18 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group® O58 - SDL:2015/10/30 05:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation O58 - SDL:2013/08/29 13:13:36 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [644968] =>.Intel Corporation - Intel® Rapid Storage Technology® O58 - SDL:2015/10/30 05:17:22 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:22 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [424800] =>.Microsoft Windows® O58 - SDL:2015/12/19 01:08:22 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [7858088] =>.Intel Corporation - pGFX® O58 - SDL:2015/10/28 15:42:30 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [474376] =>.Intel Corporation - Client Components Group® O58 - SDL:2013/12/26 21:30:20 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\intelaud.sys [38296] =>.Intel Wireless Display® O58 - SDL:2015/10/30 05:17:23 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108888] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [104800] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [99168] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microsoft Windows® O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Arbitrary Access Control Driver.) -- C:\WINDOWS\System32\drivers\mfeaack.sys [415976] =>.McAfee, Inc.® O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - Anti-Virus File System Filter Driver.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys [351120] =>.McAfee, Inc.® O58 - SDL:2015/10/06 21:32:30 A . (...) -- C:\WINDOWS\System32\drivers\mfeclnrk.sys [20480] =>.McAfee, Inc.® O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee ELAM Driver.) -- C:\WINDOWS\System32\drivers\mfeelamk.sys [82072] =>.Microsoft Windows Early Launch Anti-malware Publisher® O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Core Firewall Engine Driver.) -- C:\WINDOWS\System32\drivers\mfefirek.sys [497888] =>.McAfee, Inc.® O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - McAfee Link Driver.) -- C:\WINDOWS\System32\drivers\mfehidk.sys [841944] =>.McAfee, Inc.® O58 - SDL:2015/10/06 21:32:30 A . (.McAfee, Inc. - Event Driver.) -- C:\WINDOWS\System32\drivers\mfencbdc.sys [537192] =>.McAfee, Inc.® O58 - SDL:2015/10/06 21:32:30 A . (.McAfee, Inc. - Detection driver.) -- C:\WINDOWS\System32\drivers\mfencrk.sys [109480] =>.McAfee, Inc.® O58 - SDL:2015/09/23 09:43:48 A . (.McAfee, Inc. - Anti-Virus Mini-Firewall Driver.) -- C:\WINDOWS\System32\drivers\mfewfpk.sys [244544] =>.McAfee, Inc.® O58 - SDL:2015/10/30 05:17:23 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [705376] =>.Microsoft Windows® O58 - SDL:2016/01/31 11:30:22 A . (.DotC United Inc - MPC Driver.) -- C:\WINDOWS\System32\drivers\MPCKpt.sys [60136] =>.Superfluous.MPCCleaner O58 - SDL:2015/10/30 05:17:23 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [76128] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58208] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [58720] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.40 64-bit Dri.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [589824] =>.Realtek O58 - SDL:2015/08/04 00:21:50 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4518136] =>.Realtek Semiconductor Corp® O58 - SDL:2015/08/05 01:46:52 A . (.Realsil Semiconductor Corporation - RTS USB READER Driver.) -- C:\WINDOWS\System32\drivers\RtsUer.sys [412400] =>.Realtek Semiconductor Corp® O58 - SDL:2015/10/30 05:17:23 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows® O58 - SDL:2014/01/22 09:52:12 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (M.) -- C:\WINDOWS\System32\drivers\ssudserd.sys [206080] =>.DEVGURU CO LTD® O58 - SDL:2015/10/30 05:17:23 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows® O58 - SDL:2014/01/15 18:27:26 A . (.Synaptics Incorporated - Synaptics I2C Driver.) -- C:\WINDOWS\System32\drivers\SynRMIHID.sys [41200] =>.Synaptics Incorporated® O58 - SDL:2014/01/15 18:27:28 A . (.Synaptics Incorporated - Synaptics Touchpad Win64 Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [543984] =>.Synaptics Incorporated® O58 - SDL:2013/08/22 10:40:24 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\tap0901.sys [40664] =>.OpenVPN Technologies, Inc.® O58 - SDL:2013/12/10 13:27:36 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverx64.sys [100312] =>.Intel Corporation - Intel® Management Engine Firmware® O58 - SDL:2015/10/30 05:17:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [26976] =>.Microsoft Windows® O58 - SDL:2015/10/30 05:17:23 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [59232] =>.Microsoft Windows® O58 - SDL:2016/02/09 00:29:10 A . (.GAS Tecnologia - GAS Tecnologia - FAC.) -- C:\WINDOWS\System32\drivers\wsddfac.sys [101080] {58C005F9811C3FD333668072A04E0D1B} O58 - SDL:2015/11/24 11:04:26 A . (.GAS Tecnologia - Warsaw Device Driver 64 bits.) -- C:\WINDOWS\System32\drivers\wsddin64.sys [148088] {305BA2DD88FE398D8CF90790C9D266BA} O58 - SDL:2015/03/18 10:23:04 N . (.GAS Tecnologia - GAS Tecnologia - PP.) -- C:\WINDOWS\System32\drivers\wsddpp.sys [103640] {58C005F9811C3FD333668072A04E0D1B} O58 - SDL:2013/12/12 02:10:38 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\athwbx.sys [3881472] =>.Qualcomm Atheros Communications, Inc. ---\\ Últimos ficheiros alterados ou criados (Utilizador) (5) - 40s O61 - LFC: 2016/02/09 03:23:35 A . (..) -- C:\Users\Sidneia\Downloads\CM 0102\hall_of_fame.bin [336009] O61 - LFC: 2016/02/05 01:05:54 A . (.BitTorrent Inc..) -- C:\Users\Sidneia\AppData\Roaming\uTorrent\updates\3.4.5_41712\utorrentie.exe [335872] O61 - LFC: 2016/02/09 18:24:48 A . (..) -- C:\Users\Sidneia\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin [8192] O61 - LFC: 2016/02/09 18:55:12 A . (..) -- C:\Users\Sidneia\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148] O61 - LFC: 2016/02/06 01:46:35 A . (.Copyright 2013.) -- C:\Users\Sidneia\AppData\Local\Microsoft\Windows\INetCache\IE\0F3VY4AJ\Validate[2].exe [61981] ---\\ Associações Shell Spawning (10) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de inicialização Internet (8) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation ---\\ Pesquisa de infeção nos navegadores da Internet (2) - 0s O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {C8D0B076-4E42-4B8D-A7FB-6813A34ECB47} [DefaultScope] - (Bing) - http://www.bing.com/ ---\\ Listagem dos serviços iniciados pelo Svchost (41) - 4s O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\Windows\System32\certprop.dll [192000] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\WINDOWS\System32\certprop.dll [192000] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\WINDOWS\system32\srvsvc.dll [283136] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Política de Grupo.) -- C:\WINDOWS\System32\gpsvc.dll [1338368] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\WINDOWS\System32\ikeext.dll [957952] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em u.) -- C:\WINDOWS\System32\iphlpsvc.dll [958464] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\WINDOWS\system32\seclogon.dll [31232] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\WINDOWS\System32\appinfo.dll [94720] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\WINDOWS\System32\eapsvc.dll [112640] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\WINDOWS\system32\schedsvc.dll [1012224] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [225280] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\WINDOWS\System32\browser.dll [134656] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [328192] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho.) -- C:\Windows\System32\SessEnv.dll [372736] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\WINDOWS\System32\wercplsupport.dll [96256] =>.Microsoft Corporation O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\system32\dcpsvc.dll [186880] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Serviço Conta da Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll [2057216] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Serviço Assistente de Conectividade de Rede.) -- C:\WINDOWS\System32\ncasvc.dll [168960] =>.Microsoft Corporation O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Serviço de Configuração de Rede.) -- C:\WINDOWS\System32\NetSetupSvc.dll [203776] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\WINDOWS\system32\themeservice.dll [59392] =>.Microsoft Corporation O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\system32\RDXService.dll [1073152] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Serviço de Geolocalização.) -- C:\Windows\System32\lfsvc.dll [27136] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acess.) -- C:\WINDOWS\System32\rasauto.dll [106496] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\WINDOWS\System32\rasmans.dll [696320] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll [507904] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistem.) -- C:\WINDOWS\System32\sens.dll [73216] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\WINDOWS\System32\ipnathlp.dll [457728] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft® Windows.) -- C:\Windows\System32\tapisrv.dll [311808] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll [2280448] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de tel.) -- C:\WINDOWS\System32\qmgr.dll [1144320] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll [608768] =>.Microsoft Corporation O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [57856] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\WINDOWS\System32\bdesvc.dll [360448] =>.Microsoft Corporation O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll [1035776] =>.Microsoft Corporation O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Atualizar Sessão do Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [360960] =>.Microsoft Corporation O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1130496] =>.Microsoft Corporation O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL do Serviço de Gerenciamento do Windows.) -- C:\Windows\System32\Windows.Internal.Management.dll [278016] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gerenciador de Instalação de Dispositivo.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [205824] =>.Microsoft Corporation O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [912384] =>.Microsoft Corporation O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [948224] =>.Microsoft Corporation ---\\ Scâner Aditional (4) - 0s C:\WINDOWS\System32\Tasks\Sabhuqt =>PUP.Optional.Groover C:\Program Files (x86)\4C4C4544-1453744389-5810-804D-C7C04F463232 =>PUP.Optional.CrossRider C:\Users\Sidneia\AppData\Local\CrashRpt =>.Superfluous.CrashReports C:\WINDOWS\System32\drivers\bsdriver.sys =>PUP.Optional.Shopperz ---\\ Resumo dos elementos encontrados na sua estação de trabalho (4) - 0s http://www.nicolascoolman.fr/pup-optional-groover/ =>PUP.Optional.Groover http://www.nicolascoolman.fr/?p=180 =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CrashReports http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Shopperz ~ End of the scan, 38871 items in 00h03mn43s (851)(0)