~ ZHPDiag v2017.1.29.20 Por Nicolas Coolman (2017/01/29)
~ iniciado por Rafael (Administrator) (2017/01/31 14:29:40)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Status da versão: Version OK
~ Modo: Scanner
~ Relatório: C:\Users\Rafael\Desktop\ZHPDiag.txt
~ Relatório: C:\Users\Rafael\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Inicialização do sistema: Normal (Normal boot)
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601) =>.Microsoft Corporation

---\\ Navegadores Internet (2) - 0s
~ GCIE: Google Chrome v55.0.2883.87
~ MSIE: Internet Explorer v11.0.9600.18349

---\\ Informações sobre os produtos Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Softwares de proteçao do sistema (1) - 2s
Avast Free Antivirus v12.3.2280 (Protection)

---\\ Monitoramento dos softwares (2) - 2s
~ Adobe Flash Player 10 ActiveX (Surveillance)
~ Adobe Acrobat Reader DC - Português (Surveillance)

---\\ Softwares de partilha do PeerToPeer (P2P) (1) - 2s
~ µTorrent v3.4.9.43085 (P2P)

---\\ Informações sobre o sistema (6) - 0s
~ Operating System: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3631.728 MB (9% free) : ATTENTION =>Warning RAM
System Restore: Activé (Enable)
System drive C: has 62 GB (13%) free of 476 GB : OK =>.Disk Space

---\\ Modo de conexão ao sistema (3) - 0s
~ Computer Name: RAFAEL-COMPUTER
~ User Name: Rafael
~ Logged in as Administrator

---\\ Enumeração das unidades dos discos (2) - 0s
~ Drive C: has 62 GB free of 476 GB (System)
~ Drive G: has 0 GB free of 0 GB

---\\ Estado do Centro de Segurança do Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Pesquisa particular de ficheiros genéricos (25) - 4s
[MD5.9D77CC4A36FEEA644D002CFB9B2D42C0] - 22/01/2016 - (.Microsoft Corporation - Windows Explorer.) -- C:\Windows\Explorer.exe [3231232] =>.Microsoft Corporation
[MD5.DD81D91FF3B0763C392422865C9AC12E] - 13/07/2009 - (.Microsoft Corporation - Processo de host do Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [45568] =>.Microsoft Corporation
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - 13/07/2009 - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) -- C:\Windows\System32\Wininit.exe [129024] =>.Microsoft Corporation
[MD5.EA1B9D3C7D11CA407AA89CBB266139CF] - 20/05/2016 - (.Microsoft Corporation - Internet Extensions para Win32.) -- C:\Windows\System32\wininet.dll [2597888] =>.Microsoft Corporation
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - 17/07/2014 - (.Microsoft Corporation - Aplicativo de Logon do Windows.) -- C:\Windows\System32\Winlogon.exe [455168] =>.Microsoft Corporation
[MD5.067FA52BFB59A56110A12312EF9AF243] - 20/11/2010 - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) -- C:\Windows\System32\sppcomapi.dll [232448] =>.Microsoft Corporation
[MD5.492D07D79E7024CA310867B526D9636D] - 03/03/2011 - (.Microsoft Corporation - DLL da API de cliente DNS.) -- C:\Windows\System32\dnsapi.dll [357888] =>.Microsoft Corporation
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DLL da API de cliente DNS.) -- C:\Windows\Syswow64\dnsapi.dll [270336] =>.Microsoft Corporation
[MD5.9A4A1EEE802BF2F878EE8EAB407B21B7] - 13/10/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [497664] =>.Microsoft Corporation
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - 13/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows®
[MD5.B8BD2BB284668C84865658C77574381A] - 13/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation
[MD5.F036CE71586E93D94DAB220D7BDF4416] - 20/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] =>.Microsoft Corporation
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - 20/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [102400] =>.Microsoft Corporation
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 20/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] =>.Microsoft Corporation
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 13/07/2009 - (.Microsoft Corporation - Driver de porta i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] =>.Microsoft Corporation
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 13/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] =>.Microsoft Corporation
[MD5.10112D850C844606419C79EE24EE6016] - 12/05/2016 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [159744] =>.Microsoft Corporation
[MD5.E47D571FEC2C76E867935109AB2A770C] - 11/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [262144] =>.Microsoft Corporation
[MD5.47B2D0B31BDC3EBE6090228E2BA3764D] - 11/01/2016 - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) -- C:\Windows\System32\drivers\ntfs.sys [1684416] =>.Microsoft Windows®
[MD5.0086431C29C35BE1DBC43F52CC273887] - 13/07/2009 - (.Microsoft Corporation - Driver de porta paralela.) -- C:\Windows\System32\drivers\Parport.sys [97280] =>.Microsoft Corporation
[MD5.471815800AE33E6F1C32FB1B97C490CA] - 20/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] =>.Microsoft Corporation
[MD5.1B6163C503398B23FF8B939C67747683] - 20/11/2010 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [165888] =>.Microsoft Corporation
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 13/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] =>.Microsoft Corporation
[MD5.AA77EB517D2F07A947294F260E3ACA83] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [118272] =>.Microsoft Corporation
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 20/11/2010 - (.Microsoft Corporation - Driver de cópia de sombra de volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows®

---\\ Serviços NT não Microsoft e não desativados (22) - 3s
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) . (.Autodesk Inc. - Autodesk Application Manager.) - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe =>.Autodesk, Inc®
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: Autodesk Content Service (Autodesk Content Service) . (.Autodesk, Inc. - AutoCAD component.) - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe =>.Autodesk, Inc®
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.®
O23 - Service: Serviço do Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation®
O23 - Service: Serviço do Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Serviço de Descoberta de dispositivos CUE HP (hpqddsvc) . (.Hewlett-Packard Co. - HP CUE DeviceDiscovery Service.) - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll =>.Hewlett Packard®
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.HP Inc. - HP Support Solutions Framework Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.HP Inc.®
O23 - Service: Service Installer TrueKey (InstallerService) . (...) - C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe (.not file.)
O23 - Service: Motorola Device Manager Service (Motorola Device Manager) . (.Motorola Mobility LLC - MotoHelper Service.) - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe =>.Motorola Mobility Inc.®
O23 - Service: (Net Driver HPZ12) . (.Hewlett-Packard - Dot4Net Module.) - C:\Windows\system32\HPZinw12.dll =>.Hewlett-Packard
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 368.2.) - C:\Windows\system32\nvvsvc.exe =>.NVIDIA Corporation
O23 - Service: (Pml Driver HPZ12) . (.Hewlett-Packard - PmlDrv Module.) - C:\Windows\system32\HPZipm12.dll =>.Hewlett-Packard
O23 - Service: PST Service (PST Service) . (.Motorola - ForwardDemon.) - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe =>.Motorola
O23 - Service: Componente de Segurança Bradesco (scpbradserv) . (.Scopus Soluções em TI Ltda - Componente de Segurança Bradesco.) - C:\Program Files (x86)\scpbrad\scpbradserv.exe {6BF579C5D5F0E893175CCC4B5271311F}
O23 - Service: Baidu Spark Service (SparkSvc) . (.Baidu Inc. - spark.) - C:\Program Files (x86)\baidu\Baidu Browser\sparkservice.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe =>.NVIDIA Corporation®
O23 - Service: Intel Security True Key (TrueKey) . (.McAfee, Inc. - Intel Security True Key.) - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe =>.McAfee, Inc.®
O23 - Service: Intel Security True Key Scheduler (TrueKeyScheduler) . (.McAfee, Inc. - Intel Security True Key.) - C:\Program Files\TrueKey\McTkSchedulerService.exe =>.McAfee, Inc.®

---\\ Serviços não Microsoft (SR=Executados, SS=Parados) (28) - 28s
SR - Auto [05/12/2014] [ 599944] Autodesk Application Manager Service (AdAppMgrSvc) . (.Autodesk Inc..) - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe =>.Autodesk, Inc®
SR - Auto [19/12/2016] [ 82640] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SR - Auto [05/02/2015] [ 31160] Autodesk Content Service (Autodesk Content Service) . (.Autodesk, Inc..) - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe =>.Autodesk, Inc®
SR - Auto [08/09/2016] [ 197128] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.®
SR - Auto [30/08/2011] [ 462184] Serviço do Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
SR - Demand [29/07/2016] [ 1467072] Disc Soft Lite Bus Service (Disc Soft Lite Bus Service) . (.Disc Soft Ltd.) - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe =>.Disc Soft Ltd®
SS - Demand [01/12/2016] [ 1369856] FlexNet Licensing Service 64 (FlexNet Licensing Service 64) . (.Flexera Software LLC.) - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe =>.Flexera Software LLC®
SR - Auto [02/05/2016] [ 1165368] NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation®
SS - Auto [07/06/2016] [ 154440] Serviço do Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [07/06/2016] [ 154440] Serviço do Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Demand [18/11/2009] [ 253568] hpqcxs08 (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll =>.Hewlett Packard®
SR - Auto [18/11/2009] [ 137344] Serviço de Descoberta de dispositivos CUE HP (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll =>.Hewlett Packard®
SR - Auto [07/12/2016] [ 31776] HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.HP Inc..) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.HP Inc.®
SR - Auto [08/04/2014] [ 137528] Motorola Device Manager Service (Motorola Device Manager) . (.Motorola Mobility LLC.) - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe =>.Motorola Mobility Inc.®
SR - Auto [03/12/2008] [ 71680] (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\system32\HPZinw12.dll =>.Hewlett-Packard
SR - Auto [02/05/2016] [ 1881144] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation®
SR - Demand [02/05/2016] [ 3634232] NVIDIA Streamer Network Service (NvStreamNetworkSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe =>.NVIDIA Corporation®
SR - Auto [02/05/2016] [ 2522680] NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe =>.NVIDIA Corporation®
SR - Auto [20/05/2016] [ 1352760] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe =>.NVIDIA Corporation®
SR - Auto [03/12/2008] [ 89600] (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\system32\HPZipm12.dll =>.Hewlett-Packard
SR - Auto [02/09/2011] [ 65657] PST Service (PST Service) . (.Motorola.) - C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe =>.Motorola
SR - Auto [03/11/2016] [ 1926672] Componente de Segurança Bradesco (scpbradserv) . (.Scopus Soluções em TI Ltda.) - C:\Program Files (x86)\scpbrad\scpbradserv.exe {6BF579C5D5F0E893175CCC4B5271311F}
SR - Auto [16/10/2016] [ 97080] Baidu Spark Service (SparkSvc) . (.Baidu Inc..) - C:\Program Files (x86)\baidu\Baidu Browser\sparkservice.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
SS - Demand [23/06/2015] [ 1371960] Baidu Spark Updater (SparkUpdater) . (.Baidu.com, Inc..) - C:\Program Files (x86)\baidu\SparkUpdate\Sparkupdate.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
SR - Auto [19/05/2016] [ 426040] NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe =>.NVIDIA Corporation®
SR - Auto [05/01/2017] [ 995800] Intel Security True Key (TrueKey) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe =>.McAfee, Inc.®
SR - Auto [05/01/2017] [ 16248] Intel Security True Key Scheduler (TrueKeyScheduler) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McTkSchedulerService.exe =>.McAfee, Inc.®
SS - Demand [05/01/2017] [ 86864] TrueKeyServiceHelper (TrueKeyServiceHelper) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe =>.McAfee, Inc.®

---\\ Tarefas planificadas automaticamente (20) - 6s
[MD5.A0747D9A94EDFD251ED8E6556E70BA37] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1160408] (.Activate.) =>.Adobe Systems, Incorporated®
[MD5.A35AE98D2D85B9504789A12860BBB5EC] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1656456] (.Activate.) =>.AVAST Software a.s.®
[MD5.750446ED76A5D13E902174DDDDA1A62B] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440] (.Activate.) =>.Google Inc®
[MD5.750446ED76A5D13E902174DDDDA1A62B] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440] (.Activate.) =>.Google Inc®
[MD5.7A44FC5E70C4D1B4002E75039A04F0B7] [APT] [Motorola Device Manager Initial Update] (.Copyright 2012.) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [272176] (.Activate.) =>.Motorola Mobility Inc.®
[MD5.7A44FC5E70C4D1B4002E75039A04F0B7] [APT] [Motorola Device Manager Update] (.Copyright 2012.) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [272176] (.Activate.) =>.Motorola Mobility Inc.®
[MD5.BD4ED9F9E637297417B855B13810D83F] [APT] [SafeZone scheduled Autoupdate 1462678298] (.Avast Software.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [783320] (.Activate.) =>.AVAST Software s.r.o.®
[MD5.13E901EEC0347A024450962C48385120] [APT] [SparkUpdater] (.Baidu.com, Inc..) -- C:\Program Files (x86)\baidu\Baidu Browser\SparkUpdate.exe [1372472] (.Activate.) =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.00000000000000000000000000000000] [APT] [{663CD0C6-916E-40D1-9A43-EAD2DF2FD0AB}] (...) -- F:\topograph\TOPOGRAPH 98SE\INSTALAR\INSTALAR.EXE (.not file.) [0] (.Activate.) =>.Superfluous.Empty
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] (.Activate.) =>.Apple Inc.®
[MD5.C72865DE00C0B7E4B4C3DEBCB347FC36] [APT] [AVAST Software\Avast settings backup] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [797264] (.Activate.) =>.AVAST Software s.r.o.®
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [4476] =>.Adobe Systems, Incorporated®
O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\Windows\System32\Tasks\avast! Emergency Update [4180] =>.AVAST Software a.s.®
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3372] =>.Google Inc®
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3500] =>.Google Inc®
O39 - APT: Motorola Device Manager Initial Update - (.Copyright 2012.) -- C:\Windows\System32\Tasks\Motorola Device Manager Initial Update [3296] =>.Motorola Mobility Inc.®
O39 - APT: Motorola Device Manager Update - (.Copyright 2012.) -- C:\Windows\System32\Tasks\Motorola Device Manager Update [3488] =>.Motorola Mobility Inc.®
O39 - APT: SafeZone scheduled Autoupdate 1462678298 - (.Avast Software.) -- C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1462678298 [3910] =>.AVAST Software s.r.o.®
O39 - APT: SparkUpdater - (.Baidu.com, Inc..) -- C:\Windows\System32\Tasks\SparkUpdater [4102] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O39 - APT: {663CD0C6-916E-40D1-9A43-EAD2DF2FD0AB} - (...) -- C:\Windows\System32\Tasks\{663CD0C6-916E-40D1-9A43-EAD2DF2FD0AB} [3196] (.Orphan.) =>.Superfluous.Orphan

---\\ Aplicações iniciadas por registo & pastas (22) - 14s
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe =>.NVIDIA Corporation®
O4 - HKLM\..\Run: [ShadowPlay] . (.Microsoft Corporation - Processo de host do Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe =>.Microsoft Corporation
O4 - HKLM\..\Run: [Intel Service] . (...) -- C:\Users\Rafael\AppData\Local\Temp\Java\SYSRAFAEL-COMPUTER.exe
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Rafael\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®
O4 - HKCU\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Rafael\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.Disc Soft Ltd®
O4 - HKCU\..\Run: [Akamai NetSession Interface] C:\Users\Rafael\AppData\Local\Akamai\netsession_win.exe (.not file.) =>.Superfluous.AkamaiHD
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software s.r.o.®
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Company®
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] . (.Microsoft Corporation - SP Reviewer.) -- C:\Windows\System32\SPReview\SPReview.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3160859695-2790579841-356027318-1000\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Rafael\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®
O4 - HKUS\S-1-5-21-3160859695-2790579841-356027318-1000\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - HKUS\S-1-5-21-3160859695-2790579841-356027318-1000\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Rafael\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - HKUS\S-1-5-21-3160859695-2790579841-356027318-1000\..\Run: [DAEMON Tools Lite Automount] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.Disc Soft Ltd®
O4 - HKUS\S-1-5-21-3160859695-2790579841-356027318-1000\..\Run: [Akamai NetSession Interface] C:\Users\Rafael\AppData\Local\Akamai\netsession_win.exe (.not file.) =>.Superfluous.AkamaiHD

---\\ Processos lançados (37) - 8s
[MD5.00000000000000000000000000000000] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 368.2.) -- C:\Windows\system32\nvvsvc.exe [0] [PID.796] =>.NVIDIA Corporation
[MD5.215AC49E16A2E5E31CEA79C6E20B0860] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe [426040] [PID.820] =>.NVIDIA Corporation®
[MD5.F4E0580B5789474385E7ACB189C4AF2C] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128] [PID.1268] =>.AVAST Software a.s.®
[MD5.B0B066142BD31A068749F597FAD81EA2] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1273400] [PID.1320] =>.NVIDIA Corporation®
[MD5.CBDF353624D1744734F2FD13B4786F90] - (.Autodesk Inc. - Autodesk Application Manager.) -- C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944] [PID.1848] =>.Autodesk, Inc®
[MD5.B932E0EE190778D840F1442DFC0F9612] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82640] [PID.1888] =>.Adobe Systems, Incorporated®
[MD5.B52F9B2C63DF84B58E59016FE25648C0] - (.Autodesk, Inc. - AutoCAD component.) -- C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [31160] [PID.1920] =>.Autodesk, Inc®
[MD5.EBBCD5DFBB1DE70E8F4AF8FA59E401FD] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462184] [PID.1968] =>.Apple Inc.®
[MD5.4CEDC66C726F7BE116BE7694B3CD22CD] - (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368] [PID.2036] =>.NVIDIA Corporation®
[MD5.2FA536882DDAB801A9440EB208725770] - (.Motorola Mobility LLC - MotoHelper Service.) -- C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528] [PID.1424] =>.Motorola Mobility Inc.®
[MD5.FA9BC0048ED46C5FB5C93EAFFC97F63D] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144] [PID.2080] =>.NVIDIA Corporation®
[MD5.77BE9E1AFCE995652A1C4FF4C8A0F839] - (.NVIDIA Corporation - NVIDIA Streamer Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680] [PID.2196] =>.NVIDIA Corporation®
[MD5.EA735BF6DF13A857A83C99BF27A422AD] - (.Motorola - ForwardDemon.) -- C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657] [PID.2280] =>.Motorola
[MD5.EECCC7F95FC9E1176A960E2FA8DFA3B7] - (.Scopus Soluções em TI Ltda - Componente de Segurança Bradesco.) -- C:\Program Files (x86)\scpbrad\scpbradserv.exe [1926672] [PID.2328] {6BF579C5D5F0E893175CCC4B5271311F}
[MD5.6A881210DB2753D610EF045BF27BC022] - (.Baidu Inc. - spark.) -- C:\Program Files (x86)\baidu\Baidu Browser\sparkservice.exe [97080] [PID.2368] =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
[MD5.B6A784DF9C081A9D5829C78E33BDCE42] - (.McAfee, Inc. - Intel Security True Key.) -- C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [995800] [PID.2484] =>.McAfee, Inc.®
[MD5.26EBE10498108E9EA746EF804AF4C680] - (.McAfee, Inc. - Intel Security True Key.) -- C:\Program Files\TrueKey\McTkSchedulerService.exe [16248] [PID.2612] =>.McAfee, Inc.®
[MD5.3F8DADF839EF7F8F5B9B59EB70E94599] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2456632] [PID.3004] =>.NVIDIA Corporation®
[MD5.AF5BE3694A76365874B8967331049F2C] - (.NVIDIA Corporation - NVIDIA Network Stream Service.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232] [PID.3308] =>.NVIDIA Corporation®
[MD5.FFBABD581A7AB74C777FD5E9C825F54C] - (.Scopus Soluções em TI Ltda - Módulo de Interação do Componente de Segura.) -- C:\Program Files (x86)\scpbrad\scpbradguard.exe [2577424] [PID.2864] {6BF579C5D5F0E893175CCC4B5271311F}
[MD5.20CA20E8CD2A844DA861FC070D6DF3D7] - (...) -- C:\Users\Rafael\AppData\Local\Temp\Java\SYSRAFAEL-COMPUTER.exe [96489472] [PID.2188]
[MD5.EAA666E9DD8DCDA6E075087091CB85EE] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [275072] [PID.1368] =>.Hewlett Packard®
[MD5.EC80F3ECC5F8543E22BBCB037D837CA9] - (.HP Inc. - HP Support Solutions Framework Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776] [PID.1292] =>.HP Inc.®
[MD5.CE99AA11D0274BE5BDEF3991508852E9] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [9080768] [PID.4256] =>.AVAST Software s.r.o.®
[MD5.6EACC43D0542EF88226FB34B0B12EDB0] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552] [PID.4344] =>.Oracle America, Inc.®
[MD5.557D6535DB4E3131C73E15F9B044AAA9] - (.Disc Soft Ltd - Disc Soft Bus Service Lite.) -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072] [PID.4796] =>.Disc Soft Ltd®
[MD5.3E7E1E950F123521C5CE072E61929DA4] - (.NVIDIA Corporation - NVIDIA Streamer User Agent.) -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe [21328952] [PID.4496] =>.NVIDIA Corporation®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.5344] =>.Google Inc®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.5532] =>.Google Inc®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.2680] =>.Google Inc®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.6100] =>.Google Inc®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.1640] =>.Google Inc®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.3868] =>.Google Inc®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.5208] =>.Google Inc®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.3360] =>.Google Inc®
[MD5.638EC39FFA5EB20E09F03E3433E9746E] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728] [PID.4856] =>.Google Inc®
[MD5.8D883619931CA818961D1072A3328BAC] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Rafael\Downloads\ZHPDiag3.exe [2657792] [PID.5180] =>.Nicolas Coolman

---\\ Google Chrome, Arranque,Pesquisa,Extensões (32) - 1s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://all-czech.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://mobclub.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://pagead2.googlesyndication.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://worldinsearch.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://mc.yandex.ru
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com.br =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek]
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake]
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf]
G2 - GCE: Preference [User Data\Default] [bahkljhhdeciiaodlkppoonappfnheoi] Search Manager =>.Superfluous.SearchManager
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [bnbaboaihhkjoaolfnfoablhllahjnee] GeoGebra Math Apps =>.International GeoGebra Institute
G2 - GCE: Preference [User Data\Default] [eickpojackhkmikkekjomggleamlbgja] __MSG_extensionName__
G2 - GCE: Preference [User Data\Default] [eofcbnmajmjmplflapaojjnihcjkigck] Avast SafePrice =>.Avast Software s.r.o
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [fepcmibnfndljocfagoboiedajipieom] PConverter =>PUP.Optional.MyWebSearch
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc. =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gigbojghnfpjkdhnokmneobgmacpkene] =>.Superfluous.Orphan
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security =>.Avast Software s.r.o
G2 - GCE: Preference [User Data\Default] [hddgnhkmddmopefkmakpfnbjmoepboni] =>.Superfluous.Orphan
G2 - GCE: Preference [User Data\Default] [hmjkmjkepdijhoojdojkdfohbdgmmhki] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [hmlnlmaelklmakhfceeikknfhllcpiaj] __MSG_extensionName__
G2 - GCE: Preference [User Data\Default] [ikgjglmlehllifdekcggaapkaplbdpje] VideoDownloadConverter =>.Superfluous.MindSpark
G2 - GCE: Preference [User Data\Default] [jhimonjgjjckhajcpjliolkggmlanifd] __MSG_extensionName__
G2 - GCE: Preference [User Data\Default] [mjlcgeckbempjdjaihbhdkgkapahlinm] Clean Broken Links
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [ofphefggcjagmhmnbcmdiojcceaaeebm] Drop to mark Deck
G2 - GCE: Preference [User Data\Default] [oilgfljkmfgcdmaaacbaglomncekpclh] Open Right Click
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ Internet Explorer, Arranque, Pesquisa, Phishing (15) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer

---\\ Internet Explorer, Gestão do Proxy (7) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;localhost;
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:9722 =>Hijacker.Proxy
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies []

---\\ Análise das linhas, Carregamento Automático de programas (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Redireção do ficheiro Hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (23)

---\\ Browser Helper Objects do navegador (3) - 0s
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll =>.AVAST Software s.r.o.®
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation®

---\\ Atalhos globais Startup (98) - 9s
O4 - GS\Desktop [Administrador]: aTube Catcher.lnk . (.DsNET - aTube Catcher to download and convert video.) C:\aTube Catcher 2.0\yct.exe =>.DS NET CORP SA DE CV®
O4 - GS\Desktop [Administrador]: FL Studio 12 (64bit).lnk . (.Image-Line - FL Studio.) C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe =>.Image Line®
O4 - GS\Desktop [Administrador]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [Administrador]: Tg_98SE - Atalho.lnk . (.char *Pointer Informática - Tg98.) C:\Tg98SE\Tg_98SE.exe
O4 - GS\Desktop [Administrador]: Vegas Pro 13.0 (64-bit).lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\Desktop [Administrador]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Rafael\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrador]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Quicklaunch [Administrador]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrador]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\sendTo [Administrador]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\TaskBar [Administrador]: Calculator.lnk . (.Microsoft Corporation - Calculadora do Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrador]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrador]: Vegas Pro 13.0 (64-bit).lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\TaskBar [Administrador]: Windows Explorer.lnk . (.Microsoft Corporation - Windows Explorer.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrador]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Administrador]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrador]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [Convidado]: aTube Catcher.lnk . (.DsNET - aTube Catcher to download and convert video.) C:\aTube Catcher 2.0\yct.exe =>.DS NET CORP SA DE CV®
O4 - GS\Desktop [Convidado]: FL Studio 12 (64bit).lnk . (.Image-Line - FL Studio.) C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe =>.Image Line®
O4 - GS\Desktop [Convidado]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [Convidado]: Tg_98SE - Atalho.lnk . (.char *Pointer Informática - Tg98.) C:\Tg98SE\Tg_98SE.exe
O4 - GS\Desktop [Convidado]: Vegas Pro 13.0 (64-bit).lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\Desktop [Convidado]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Rafael\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Convidado]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Quicklaunch [Convidado]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Convidado]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\sendTo [Convidado]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\TaskBar [Convidado]: Calculator.lnk . (.Microsoft Corporation - Calculadora do Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Convidado]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Convidado]: Vegas Pro 13.0 (64-bit).lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\TaskBar [Convidado]: Windows Explorer.lnk . (.Microsoft Corporation - Windows Explorer.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Convidado]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Convidado]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Convidado]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [Rafael]: aTube Catcher.lnk . (.DsNET - aTube Catcher to download and convert video.) C:\aTube Catcher 2.0\yct.exe =>.DS NET CORP SA DE CV®
O4 - GS\Desktop [Rafael]: FL Studio 12 (64bit).lnk . (.Image-Line - FL Studio.) C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe =>.Image Line®
O4 - GS\Desktop [Rafael]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [Rafael]: Tg_98SE - Atalho.lnk . (.char *Pointer Informática - Tg98.) C:\Tg98SE\Tg_98SE.exe
O4 - GS\Desktop [Rafael]: Vegas Pro 13.0 (64-bit).lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\Desktop [Rafael]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Rafael\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Rafael]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe --bar=1016 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\Quicklaunch [Rafael]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Rafael]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\sendTo [Rafael]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\TaskBar [Rafael]: Calculator.lnk . (.Microsoft Corporation - Calculadora do Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Rafael]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Rafael]: Vegas Pro 13.0 (64-bit).lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\TaskBar [Rafael]: Windows Explorer.lnk . (.Microsoft Corporation - Windows Explorer.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Rafael]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Rafael]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Rafael]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated®
O4 - GS\CommonDesktop [Public]: Avast Free Antivirus.lnk . (.AVAST Software - .) C:\Program Files (x86)\AVAST Software\Avast\AvastUI.exe =>.AVAST Software
O4 - GS\CommonDesktop [Public]: Baidu Browser.lnk . (.Copyright (C) 2011 - spark.) C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe --bar=1014 =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O4 - GS\CommonDesktop [Public]: Google Earth.lnk . (.Google - Google Earth.) C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: IQ Option.lnk . (...) C:\Program Files (x86)\IQ Option\IQ Option.exe {05DB2C101259D0B4EA2AF96B0376F7E0}
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Rafael\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Processador de comandos do Windows.) C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloco de notas.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Windows Explorer.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe -extoff =>.Microsoft Corporation®
O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Editor de caracteres particulares.) C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\Startup [Public]: HP Digital Imaging Monitor.lnk . (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe =>.Hewlett Packard®
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculadora do Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Alternador de Vídeo.) C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Acessório Painel de Entrada de Expressões M.) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Windows Mobility Center.) C:\Windows\system32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: NetworkProjection.lnk . (.Microsoft Corporation - Connect to a Network Projector.) C:\Windows\system32\NetProj.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Conexão de Área de Trabalho Remota.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Ferramenta de Captura.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Gravador de Som do Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Notas Autoadesivas.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Processo de host do Windows (Rundll32).) C:\Windows\system32\rundll32.exe %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Aplicativo Wordpad do Windows.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Mapa de caracteres.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Desfragmentador de Disco da Microsoft®.) C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gerenciador de Limpeza de Espaço em Disco p.) C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Monitor de Recursos e Desempenho.) C:\Windows\system32\perfmon.exe /res =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informações do sistema.) C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauração do Sistema do Microsoft® Window.) C:\Windows\system32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc /s =>..Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Aplicativo de Pós Migração de Transferência.) C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Aplicativo Transferência Fácil do Windows.) C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\Windows\Installer\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Apple Software Update.lnk . (...) C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe =>.Apple Inc.
O4 - GS\ProgramsCommon [Public]: Avast SafeZone Browser.lnk . (.Avast Software - Avast SafeZone Browser.) C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software s.r.o.®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Grand Theft Auto V.lnk . (.Rockstar Games - Grand Theft Auto V Launcher.) C:\Program Files (x86)\Grand Theft Auto V\GTAVLauncher.exe =>.Take-Two Interactive Software, Inc.®
O4 - GS\ProgramsCommon [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets da Área de Trabalho do Windows.) C:\Program Files (x86)\Windows Sidebar\sidebar.exe /showgadgets =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: True Key.lnk . (.Intel Security - True Key™.) C:\Program Files\Intel Security\True Key\application\truekey.exe --open-source=startmenu =>.McAfee, Inc.®
O4 - GS\ProgramsCommon [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\DVD Maker\DVDMaker.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visualizador XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation

---\\ Alteração Dominio/Clientes DNS (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{A6F09D41-7EC8-4FD1-974E-C41A592856A1}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress

---\\ Protocolo adicional (21) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Software instalados (122) - 13s
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc®
O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {55D55008-E5F6-47D6-B16F-B2A40D4D145F} =>.Hewlett-Packard
O42 - Logiciel: ACA & MEP 2016 Object Enabler - (.Autodesk.) [HKLM][64Bits] -- {5783F2D7-F004-0000-5102-0060B0CE6BBA} =>.Autodesk
O42 - Logiciel: ACAD Private - (.Autodesk.) [HKLM][64Bits] -- {5783F2D7-F001-0000-3102-0060B0CE6BBA} =>.Autodesk
O42 - Logiciel: Adobe Acrobat Reader DC - Português - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1046-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems, Inc..) [HKLM][64Bits] -- {B7B3E9B3-FB14-4927-894B-E9124509AF5A} =>.Adobe Systems, Inc.
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824211354} =>.Adobe Systems Incorporated
O42 - Logiciel: Aplicativos da Autodesk em destaque 2016 - (.Autodesk.) [HKLM][64Bits] -- {D42F37CD-9AF9-4435-A474-B387C5BB6B47} =>.Autodesk
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc.
O42 - Logiciel: ASIO4ALL - (.Michael Tippach.) [HKLM][64Bits] -- ASIO4ALL =>.Michael Tippach
O42 - Logiciel: Atualizações da NVIDIA 2.11.3.5 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation
O42 - Logiciel: aTube Catcher versão 3.8 - (.DsNET Corp.) [HKLM][64Bits] -- {D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1 =>.DsNET Corp
O42 - Logiciel: AutoCAD 2016 - (.Autodesk.) [HKLM][64Bits] -- {5783F2D7-F001-0000-0102-0060B0CE6BBA} =>.Autodesk
O42 - Logiciel: AutoCAD 2016 - English - (.Autodesk.) [HKLM][64Bits] -- {5783F2D7-F001-0409-2102-0060B0CE6BBA} =>.Autodesk, Inc®
O42 - Logiciel: AutoCAD 2016 Language Pack - English - (.Autodesk.) [HKLM][64Bits] -- {5783F2D7-F001-0409-1102-0060B0CE6BBA} =>.Autodesk
O42 - Logiciel: Autodesk App Manager 2016 - (.Autodesk.) [HKLM][64Bits] -- {4ECF9E00-2978-46AF-BD80-455EFEAB7A93} =>.Autodesk
O42 - Logiciel: Autodesk Application Manager - (.Autodesk.) [HKLM][64Bits] -- Autodesk Application Manager =>.Autodesk, Inc®
O42 - Logiciel: Autodesk AutoCAD 2016 - English - (.Autodesk.) [HKLM][64Bits] -- AutoCAD 2016 - English =>.Autodesk, Inc®
O42 - Logiciel: Autodesk AutoCAD Performance Feedback Tool 1.2.4 - (.Autodesk.) [HKLM][64Bits] -- {4E20873D-BC20-495C-AFD9-B18877B7F9BB} =>.Autodesk
O42 - Logiciel: Autodesk BIM 360 Glue AutoCAD 2016 Add-in 64 bit - (.Autodesk.) [HKLM][64Bits] -- {4BEE127E-95C4-434D-ABAC-65155192BB24} =>.Autodesk
O42 - Logiciel: Autodesk Content Service - (.Autodesk.) [HKLM][64Bits] -- {A37CDB58-AAE8-0000-8C13-E0F7BACB0D5F} =>.Autodesk
O42 - Logiciel: Autodesk Content Service - (.Autodesk.) [HKLM][64Bits] -- Autodesk Content Service =>.Autodesk, Inc®
O42 - Logiciel: Autodesk Content Service Language Pack - (.Autodesk.) [HKLM][64Bits] -- {A37CDB58-AAE8-0001-8C13-E0F7BACB0D5F} =>.Autodesk
O42 - Logiciel: Autodesk Material Library 2016 - (.Autodesk.) [HKLM][64Bits] -- {29A7D6EC-63C2-42FD-8143-5812ABD2923F} =>.Autodesk
O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2016 - (.Autodesk.) [HKLM][64Bits] -- {6B4CFC6E-ECB0-47FE-95D3-65C680ED0687} =>.Autodesk
O42 - Logiciel: Autodesk ReCap 2016 - (.Autodesk.) [HKLM][64Bits] -- {F6FD1651-0000-1033-0102-387BAF9B3B0A} =>.Autodesk
O42 - Logiciel: Autodesk ReCap 2016 - (.Autodesk.) [HKLM][64Bits] -- Autodesk ReCap 2016 =>.Autodesk, Inc®
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast =>.AVAST Software a.s.®
O42 - Logiciel: Baidu Browser - (.Baidu Inc..) [HKLM][64Bits] -- Spark =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} =>.Apple Inc.
O42 - Logiciel: Broadcom 802.11 Network Adapter - (.Broadcom Corporation.) [HKLM][64Bits] -- Broadcom 802.11 Network Adapter =>.Broadcom Corporation®
O42 - Logiciel: BufferChm - (.Hewlett-Packard.) [HKLM][64Bits] -- {FA0FF682-CC70-4C57-93CD-E276F3E7537E} =>.Hewlett-Packard
O42 - Logiciel: C4600 - (.Hewlett-Packard.) [HKLM][64Bits] -- {9E0E1E3B-229C-4CF9-8A39-4455477327E4} =>.Hewlett-Packard
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640} =>.Cisco Systems, Inc.
O42 - Logiciel: Componente de Segurança Bradesco - (.Banco Bradesco S.A..) [HKLM][64Bits] -- scpbrad {6BF579C5D5F0E893175CCC4B5271311F}
O42 - Logiciel: Counter-Strike: Source - (.Valve.) [HKLM][64Bits] -- Counter-Strike: Source =>.Valve
O42 - Logiciel: CPUID HWMonitor 1.28 - (.CPUID Inc.) [HKLM][64Bits] -- CPUID HWMonitor_is1 =>.CPUID Inc
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.Disc Soft Ltd®
O42 - Logiciel: Destinations - (.Hewlett-Packard.) [HKLM][64Bits] -- {BD7204BA-DD64-499E-9B55-6A282CDF4FA4} =>.Hewlett-Packard
O42 - Logiciel: DeviceDiscovery - (.Hewlett-Packard.) [HKLM][64Bits] -- {1458BB78-1DC5-4BC0-B9A3-2B644F5A8105} =>.Hewlett-Packard
O42 - Logiciel: DHTML Editing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {2EA870FA-585F-4187-903D-CB9FFD21E2E0} =>.Microsoft Corporation
O42 - Logiciel: DirectX 9.0c Extra Files (x86, x64) - (.Sereby Corporation.) [HKLM][64Bits] -- {8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1 =>.Sereby Corporation
O42 - Logiciel: Facebook Games Arcade 0.5.0.0 - (.Facebook.) [HKLM][64Bits] -- {0FFF54D9-8D7B-4111-A21E-14E2FF1B54E7} =>.Facebook
O42 - Logiciel: FL Studio 12 - (.Image-Line.) [HKLM][64Bits] -- FL Studio 12 =>.Image Line®
O42 - Logiciel: FL Studio ASIO - (.Image-Line.) [HKLM][64Bits] -- FL Studio ASIO =>.Image Line®
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {F6430171-B86B-4639-839E-374913E7911D} =>.Google
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: GPBaseService2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {BB3447F6-9553-4AA9-960E-0DB5310C5779} =>.Hewlett-Packard
O42 - Logiciel: Grand Theft Auto V - (..) [HKLM][64Bits] -- R3JhbmRUaGVmdEF1dG9W_is1
O42 - Logiciel: HP Customer Participation Program 14.0 - (.HP.) [HKLM][64Bits] -- HPExtendedCapabilities =>.Hewlett Packard®
O42 - Logiciel: HP Imaging Device Functions 14.0 - (.HP.) [HKLM][64Bits] -- HP Imaging Device Functions =>.Hewlett Packard®
O42 - Logiciel: HP Photosmart C4600 All-In-One Driver Software 14.0 Rel. 5 - (.HP.) [HKLM][64Bits] -- {1E1746EF-F5BF-4677-8F30-04FE399130DA} =>.Hewlett Packard®
O42 - Logiciel: HP Smart Web Printing 4.60 - (.HP.) [HKLM][64Bits] -- HP Smart Web Printing =>.Hewlett Packard®
O42 - Logiciel: HP Solution Center 14.0 - (.HP.) [HKLM][64Bits] -- HP Solution Center & Imaging Support Tools =>.Hewlett Packard®
O42 - Logiciel: HP Support Solutions Framework - (.HP Inc..) [HKLM][64Bits] -- {0A8C9032-3AB5-4CB7-8173-13BDE66B779A} =>.HP Inc.
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} =>.Hewlett-Packard
O42 - Logiciel: HPProductAssistant - (.Hewlett-Packard.) [HKLM][64Bits] -- {150B6201-E9E6-4DFB-960E-CCBD53FBDDED} =>.Hewlett-Packard
O42 - Logiciel: HPSSupply - (.Hewlett-Packard.) [HKLM][64Bits] -- {AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3} =>.Hewlett-Packard
O42 - Logiciel: IL Download Manager - (.Image-Line.) [HKLM][64Bits] -- IL Download Manager =>.Image Line®
O42 - Logiciel: Importação do SketchUp 2016-2017 - (.Autodesk.) [HKLM][64Bits] -- {063925DB-9D8C-48E2-8F04-1B7038B6C783} =>.Autodesk
O42 - Logiciel: Intel Security True Key - (.Intel Security.) [HKLM][64Bits] -- TrueKey =>.McAfee, Inc.®
O42 - Logiciel: Intel® RealSense™ SDK 2014 Runtime (x64): Core - (.Intel Corporation.) [HKLM][64Bits] -- {37D41A97-6B02-4C30-8753-85107BE1D674} =>.Intel Corporation
O42 - Logiciel: IQ Option - (.IQOption.) [HKLM][64Bits] -- IQ Option {05DB2C101259D0B4EA2AF96B0376F7E0}
O42 - Logiciel: Java 8 Update 101 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F32180101F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Jogos Level Up - (.Level Up.) [HKCU][64Bits] -- bda992e0694a5bbb
O42 - Logiciel: MarketResearch - (.Hewlett-Packard.) [HKLM][64Bits] -- {D360FA88-17C8-4F14-B67F-13AAF9607B12} =>.Hewlett-Packard
O42 - Logiciel: Motorola Device Manager - (.Motorola Mobility.) [HKLM][64Bits] -- {28DB8373-C1BB-444F-A427-A55585A12ED7} =>.Motorola Mobility
O42 - Logiciel: Motorola Device Software Update - (.Motorola Mobility.) [HKLM][64Bits] -- {894AB83D-A9AF-4E54-BFF3-A7262A0A6C13} =>.Motorola Mobility
O42 - Logiciel: Motorola Mobile Drivers Installation 6.4.0 - (.Motorola Mobility LLC.) [HKLM][64Bits] -- {27986EDD-C9EC-4B52-B92F-06D073F0AA52} =>.Motorola Mobility LLC
O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM][64Bits] -- {D10D0851-CCC6-11E3-9ED2-F04DA23A5C58} =>.Sony Creative Software Inc.
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {196467F1-C11F-4F76-858B-5812ADC83B94} =>.Microsoft Corporation
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D95BA90-F4F8-47EC-A882-441C99D30C1E} =>.Microsoft Corporation
O42 - Logiciel: NVIDIA Driver de áudio HD 1.3.34.14 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Driver de controle do 3D Vision 364.44 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Driver de gráficos 368.22 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Driver do 3D Vision 368.22 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA GeForce Experience 2.11.3.5 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA GeForce Experience Service - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA LED Visualizer 1.0 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Network Service - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA ShadowPlay 2.11.3.5 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Software do sistema PhysX 9.16.0318 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- NVIDIAStereo =>.NVIDIA Corporation®
O42 - Logiciel: NVIDIA Update Core - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Virtual Audio 1.2.40 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver =>.NVIDIA Corporation
O42 - Logiciel: OpenIV - (..black/OpenIV Team.) [HKCU][64Bits] -- OpenIV =>..black/OpenIV Team
O42 - Logiciel: Painel de controle da NVIDIA 368.22 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation
O42 - Logiciel: PL-2303 USB-to-Serial - (.Prolific Technology INC.) [HKLM][64Bits] -- {ECC3713C-08A4-40E3-95F1-7D0704F1CE5E} =>.Prolific Technology INC
O42 - Logiciel: PS_AIO_05_C4600_Software_Min - (.Hewlett-Packard.) [HKLM][64Bits] -- {1CA3A991-B03D-4C92-9922-315E5434E87B} =>.Hewlett-Packard
O42 - Logiciel: QPST - (..) [HKLM][64Bits] -- {31228E31-2BFF-11D2-8866-00805F0D9D40}
O42 - Logiciel: QuickTransfer - (.Hewlett-Packard.) [HKLM][64Bits] -- {E517094C-06B6-419F-8FFD-EF4F57972130} =>.Hewlett-Packard
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Rockstar Games Social Club - (.Rockstar Games.) [HKLM][64Bits] -- Rockstar Games Social Club =>.Take-Two Interactive Software, Inc.®
O42 - Logiciel: SafeZone Stable 1.51.2220.62 - (.Avast Software.) [HKLM][64Bits] -- SafeZone 1.51.2220.62 =>.AVAST Software s.r.o.®
O42 - Logiciel: Scan - (.Hewlett-Packard.) [HKLM][64Bits] -- {06A1D88C-E102-4527-AF70-29FFD7AF215A} =>.Hewlett-Packard
O42 - Logiciel: SHIELD Streaming - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv =>.NVIDIA Corporation
O42 - Logiciel: SHIELD Wireless Controller Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController =>.NVIDIA Corporation
O42 - Logiciel: Shop for HP Supplies - (.HP.) [HKLM][64Bits] -- Shop for HP Supplies =>.Hewlett Packard®
O42 - Logiciel: Sistema topoGRAPH 98 SE - (..) [HKLM][64Bits] -- Sistema topoGRAPH 98 SE
O42 - Logiciel: SmartWebPrinting - (.Hewlett-Packard.) [HKLM][64Bits] -- {8FF6F5CA-4E30-4E3B-B951-204CAAA2716A} =>.Hewlett-Packard
O42 - Logiciel: SolutionCenter - (.Hewlett-Packard.) [HKLM][64Bits] -- {5DCF0E4B-F8EA-4229-A0BD-5CA6D4AFB749} =>.Hewlett-Packard
O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify =>.Spotify AB®
O42 - Logiciel: Status - (.Hewlett-Packard.) [HKLM][64Bits] -- {2FB9EA69-51D4-4913-9AD5-762C034DE811} =>.Hewlett-Packard
O42 - Logiciel: Suporte para Aplicativos Apple (32-bit) - (.Apple Inc..) [HKLM][64Bits] -- {AFA1153A-F547-409B-B837-3A0D6C5A3FEC} =>.Apple Inc.
O42 - Logiciel: Tony Hawks Pro Skater HD - (..) [HKLM][64Bits] -- Tony Hawks Pro Skater HD_is1
O42 - Logiciel: Toolbox - (.Hewlett-Packard.) [HKLM][64Bits] -- {292F0F52-B62D-4E71-921B-89A682402201} =>.Hewlett-Packard
O42 - Logiciel: Topcon Link v.8.2 - (.Topcon.) [HKLM][64Bits] -- {E4F979C2-73FE-4B78-BE3A-9031016B9683}
O42 - Logiciel: Topcon Link v.8.2 - (.Topcon.) [HKLM][64Bits] -- Topcon Link v.8.2
O42 - Logiciel: TrayApp - (.Hewlett-Packard.) [HKLM][64Bits] -- {CD31E63D-47FD-491C-8117-CF201D0AFAB5} =>.Hewlett-Packard
O42 - Logiciel: UmmyVideoDownloader - (..) [HKLM][64Bits] -- {E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1
O42 - Logiciel: Vegas Pro 13.0 (64-bit) - (.Sony.) [HKLM][64Bits] -- {D0360940-CCC6-11E3-B9C6-F04DA23A5C58} =>.Sony
O42 - Logiciel: Visual Basic for Applications (R) Core - (.Microsoft Corporation.) [HKLM][64Bits] -- {FB97C283-1F3C-42D4-AE01-ADC1DC12F774} =>.Microsoft Corporation
O42 - Logiciel: Visual Basic for Applications (R) Core - English - (.Microsoft Corporation.) [HKLM][64Bits] -- {A13D16C5-38A9-4D96-9647-59FCCAB12A85} =>.Microsoft Corporation
O42 - Logiciel: Visualization Content - (.Bentley Systems, Incorporated.) [HKLM][64Bits] -- {0D41BCFC-B16D-479F-8347-4F68F6CD34CE}
O42 - Logiciel: Warface - (.Level Up! Games.) [HKCU][64Bits] -- {094FAADD-5A39-4C64-911A-B4C9AD818484}_is1
O42 - Logiciel: WebReg - (.Hewlett-Packard.) [HKLM][64Bits] -- {8EE94FD8-5F52-4463-A340-185D16328158} =>.Hewlett-Packard
O42 - Logiciel: WinRAR 5.31 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®

---\\ Softwares de proteçao do sistema (Supérfluo) (117) - 13s
HKLM\SOFTWARE\Wow6432Node\Activision =>.Activision
HKLM\SOFTWARE\Wow6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies =>.AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ASIO =>.Steinberg Media Technologies
HKLM\SOFTWARE\Wow6432Node\ASIO4ALL =>.Michael Tippach
HKLM\SOFTWARE\Wow6432Node\Autodesk =>.Autodesk
HKLM\SOFTWARE\Wow6432Node\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\Wow6432Node\Baidu =>.Baidu
HKLM\SOFTWARE\Wow6432Node\Bentley
HKLM\SOFTWARE\Wow6432Node\CDDB =>.Cddb Software
HKLM\SOFTWARE\Wow6432Node\char Pointer Informática
HKLM\SOFTWARE\Wow6432Node\CloudOPTInfo =>.Baidu Technology
HKLM\SOFTWARE\Wow6432Node\EasyAntiCheat =>.EasyAntiCheat
HKLM\SOFTWARE\Wow6432Node\ej-technologies =>.ej-technologies
HKLM\SOFTWARE\Wow6432Node\GOG.com =>.GOG.com
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\ICE =>.Legitimate
HKLM\SOFTWARE\Wow6432Node\Image-Line =>.Image-Line
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\Intel Security =>.Intel Security
HKLM\SOFTWARE\Wow6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\Wow6432Node\Licenses =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\Wow6432Node\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\Wow6432Node\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\Wow6432Node\MimarSinan =>.Mimar Sinan
HKLM\SOFTWARE\Wow6432Node\Motorola =>.Motorola
HKLM\SOFTWARE\Wow6432Node\Motorola Mobility =>.Motorola Mobility
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\NCH Software =>.NCH Software
HKLM\SOFTWARE\Wow6432Node\NCH Swift Sound =>.NCH Swift Sound
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Wow6432Node\proDAD =>.proDAD GmbH
HKLM\SOFTWARE\Wow6432Node\Prolific Technology INC =>.Prolific Technology INC
HKLM\SOFTWARE\Wow6432Node\Propellerhead Software =>.Propellerhead Software
HKLM\SOFTWARE\Wow6432Node\QUALCOMM =>.Qualcomm Atheros
HKLM\SOFTWARE\Wow6432Node\Razer =>.Razer
HKLM\SOFTWARE\Wow6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Rockstar Games =>.Rockstar Games
HKLM\SOFTWARE\Wow6432Node\SoftVoice =>.SoftVoice
HKLM\SOFTWARE\Wow6432Node\Sony Creative Software =>.Sony Creative Software
HKLM\SOFTWARE\Wow6432Node\TeamViewer =>.TeamViewer
HKLM\SOFTWARE\Wow6432Node\Topcon
HKLM\SOFTWARE\Wow6432Node\TrendMicro =>.TrendMicro
HKLM\SOFTWARE\Wow6432Node\TrueKey =>.Intel Corporation
HKLM\SOFTWARE\Wow6432Node\Valve =>.Valve
HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo! Inc.
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Affinix =>.Affinix Software
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\ASIO4ALL v2 by Wuschel =>.Unknow
HKCU\SOFTWARE\Autodesk =>.Autodesk
HKCU\SOFTWARE\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\Baidu =>.Baidu
HKCU\SOFTWARE\BcmSetup =>.BCM
HKCU\SOFTWARE\Bentley
HKCU\SOFTWARE\BgT
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\char *Pointer Informática
HKCU\SOFTWARE\Counter-Strike Source
HKCU\SOFTWARE\DirectShow =>.Microsoft Corporation
HKCU\SOFTWARE\Disc Soft =>.Disc Soft
HKCU\SOFTWARE\drpsu =>.Driver PackSolution
HKCU\SOFTWARE\ej-technologies =>.ej-technologies
HKCU\SOFTWARE\Facebook =>.Facebook
HKCU\SOFTWARE\GOG.com =>.GOG.com
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKCU\SOFTWARE\HP =>.HP
HKCU\SOFTWARE\Huidu
HKCU\SOFTWARE\Ifb
HKCU\SOFTWARE\Image-Line =>.Image-Line
HKCU\SOFTWARE\Intel Security =>.Intel Security
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\Magicbit =>.Superfluous.Magicbit
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\NCH Software =>.NCH Software
HKCU\SOFTWARE\NCH Swift Sound =>.NCH Swift Sound
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\NewTechnologyStudio =>.New Technology Studio
HKCU\SOFTWARE\NTSCorp =>.NTSCorp Ltd
HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\proDAD GmbH =>.proDAD GmbH
HKCU\SOFTWARE\QCNView
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\QUALCOMM =>.Qualcomm Atheros
HKCU\SOFTWARE\Rockstar Games =>.Rockstar Games
HKCU\SOFTWARE\SoftVoice =>.SoftVoice
HKCU\SOFTWARE\Solution Softwares
HKCU\SOFTWARE\Sony Creative Software =>.Sony Creative Software
HKCU\SOFTWARE\SplitmediaLabs =>.SplitMediaLabs
HKCU\SOFTWARE\Spotify =>.Spotify
HKCU\SOFTWARE\Topcon
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\TrueKey =>.Intel Corporation
HKCU\SOFTWARE\Valve =>.Valve
HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
HKCU\SOFTWARE\VirtualDub.org =>.VirtualDub.org
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft =>.JavaSoft

---\\ Conteúdo das pastas Programs (291) - 59s
O43 - CFD: 30/04/2016 - [0] SHD -- C:\Program Files\Arquivos Comuns =>.Microsoft Corporation
O43 - CFD: 22/12/2016 - [] D -- C:\Program Files\Autodesk =>.Autodesk
O43 - CFD: 08/05/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software s.r.o.®
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files\Bonjour =>.Apple Inc.
O43 - CFD: 01/05/2016 - [] D -- C:\Program Files\Broadcom =>.Broadcom Corporation®
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 08/05/2016 - [] D -- C:\Program Files\CPUID =>.CPUID Inc
O43 - CFD: 24/08/2016 - [] D -- C:\Program Files\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files\DVD Maker =>.Aone Software
O43 - CFD: 17/01/2017 - [] D -- C:\Program Files\Image-Line =>.Image-Line
O43 - CFD: 11/11/2016 - [] D -- C:\Program Files\Intel Security =>.Intel Corporation
O43 - CFD: 15/06/2016 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files\Microsoft Sync Framework =>.Microsoft Corporation
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files\Microsoft Synchronization Services =>.Microsoft Corporation
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files\Motorola Mobility LLC =>.Motorola Mobility LLC
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 03/06/2016 - [] D -- C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 22/12/2016 - [] D -- C:\Program Files\Rockstar Games =>.Take-Two Interactive Software, Inc.®
O43 - CFD: 25/06/2016 - [] D -- C:\Program Files\Sony =>.Sony
O43 - CFD: 21/01/2017 - [] D -- C:\Program Files\TrueKey =>.Intel Corporation
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 11/05/2016 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 11/05/2016 - [] D -- C:\Program Files\Windows Journal =>.Microsoft Corporation
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 10/05/2016 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 01/05/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 08/11/2016 - [] D -- C:\Program Files (x86)\Activision =>.Activision
O43 - CFD: 11/11/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.
O43 - CFD: 17/01/2017 - [] D -- C:\Program Files (x86)\ASIO4ALL v2 =>.Michael Tippach
O43 - CFD: 22/12/2016 - [] D -- C:\Program Files (x86)\Autodesk =>.Autodesk
O43 - CFD: 05/06/2016 - [] D -- C:\Program Files (x86)\AutoKrypt11
O43 - CFD: 16/10/2016 - [] D -- C:\Program Files (x86)\baidu =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Bonjour =>.Apple Inc.
O43 - CFD: 01/05/2016 - [] D -- C:\Program Files (x86)\Cisco =>.Cisco Systems, Inc.
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 14/01/2017 - [] D -- C:\Program Files (x86)\Counter-Strike Source
O43 - CFD: 06/06/2016 - [] D -- C:\Program Files (x86)\DsNET Corp =>.DsNET Corp
O43 - CFD: 29/01/2017 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 28/01/2017 - [] D -- C:\Program Files (x86)\Grand Theft Auto V =>.Take-Two Interactive Software, Inc.®
O43 - CFD: 04/11/2016 - [] D -- C:\Program Files (x86)\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 04/11/2016 - [] D -- C:\Program Files (x86)\HP =>.Hewlett-Packard
O43 - CFD: 17/01/2017 - [] D -- C:\Program Files (x86)\Image-Line =>.Image Line®
O43 - CFD: 17/09/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield Software
O43 - CFD: 15/06/2016 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 07/01/2017 - [] D -- C:\Program Files (x86)\IQ Option
O43 - CFD: 26/07/2016 - [] D -- C:\Program Files (x86)\Java =>.Oracle
O43 - CFD: 21/01/2017 - [0] D -- C:\Program Files (x86)\McAfee =>.McAfee
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation
O43 - CFD: 06/06/2016 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET =>.Microsoft Corporation
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8 =>.Microsoft Corporation
O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files (x86)\Motorola =>.Motorola
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files (x86)\Motorola Mobility =>.Motorola Mobility Inc.®
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files (x86)\MSXML 4.0 =>.Microsoft Corporation
O43 - CFD: 02/11/2016 - [] D -- C:\Program Files (x86)\NCH Software =>.NCH Software
O43 - CFD: 03/06/2016 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 24/06/2016 - [] D -- C:\Program Files (x86)\proDAD =>.proDAD GmbH
O43 - CFD: 01/07/2016 - [] D -- C:\Program Files (x86)\QPST =>.Qualcomm Atheros
O43 - CFD: 20/01/2017 - [] D -- C:\Program Files (x86)\Razer =>.Razer
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 22/12/2016 - [] D -- C:\Program Files (x86)\Rockstar Games =>.Take-Two Interactive Software, Inc.®
O43 - CFD: 03/11/2016 - [] D -- C:\Program Files (x86)\scpbrad {6BF579C5D5F0E893175CCC4B5271311F}
O43 - CFD: 25/06/2016 - [] D -- C:\Program Files (x86)\Sony =>.Sony
O43 - CFD: 05/12/2016 - [] D -- C:\Program Files (x86)\TeamViewer =>.TeamViewer
O43 - CFD: 15/11/2016 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation
O43 - CFD: 25/11/2016 - [] D -- C:\Program Files (x86)\Topcon
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 17/01/2017 - [] D -- C:\Program Files (x86)\VstPlugins =>.VTS
O43 - CFD: 03/06/2016 - [] D -- C:\Program Files (x86)\VulkanRT =>.LunarG, Inc
O43 - CFD: 11/05/2016 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 09/05/2016 - [] D -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 08/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision =>.Activision
O43 - CFD: 09/05/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 30/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher =>.DsNET
O43 - CFD: 02/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software =>.AVAST Software
O43 - CFD: 16/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Baidu Browser =>.Baidu Technology
O43 - CFD: 03/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Componente de Segurança Bradesco
O43 - CFD: 14/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike Source
O43 - CFD: 08/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID =>.CPUID Inc
O43 - CFD: 24/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 02/11/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 29/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth =>.Google Earth
O43 - CFD: 04/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP =>.Hewlett-Packard
O43 - CFD: 17/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line =>.Image-Line
O43 - CFD: 07/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IQ Option
O43 - CFD: 26/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 02/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 21/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorola Device Manager =>.Motorola Solutions
O43 - CFD: 03/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 20/01/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\proDAD =>.proDAD GmbH
O43 - CFD: 01/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QPST =>.Qualcomm Atheros
O43 - CFD: 02/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint =>.Microsoft Corporation
O43 - CFD: 15/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sistema topoGRAPH 98SE
O43 - CFD: 25/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony =>.Sony
O43 - CFD: 22/12/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC =>.Wacom Technology
O43 - CFD: 25/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topcon
O43 - CFD: 04/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UmmyVideoDownloader =>.UmmyVideoDownloader
O43 - CFD: 01/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 11/11/2016 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 30/01/2017 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 17/09/2016 - [] D -- C:\ProgramData\Applications =>.Microsoft Corporation
O43 - CFD: 22/12/2016 - [] D -- C:\ProgramData\Autodesk =>.Autodesk
O43 - CFD: 08/05/2016 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 16/10/2016 - [] D -- C:\ProgramData\Baidu =>.Baidu
O43 - CFD: 17/09/2016 - [] D -- C:\ProgramData\Bentley
O43 - CFD: 28/11/2016 - [] D -- C:\ProgramData\boost_interprocess =>.boost.org
O43 - CFD: 30/04/2016 - [0] SHD -- C:\ProgramData\Dados de aplicativos =>.Microsoft Corporation
O43 - CFD: 24/08/2016 - [] D -- C:\ProgramData\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [0] SHD -- C:\ProgramData\Documentos =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 16/10/2016 - [] D -- C:\ProgramData\FARO =>.FARO
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [0] SHD -- C:\ProgramData\Favoritos
O43 - CFD: 16/05/2016 - [] D -- C:\ProgramData\FLEXnet =>.Flexera Software
O43 - CFD: 07/11/2016 - [] D -- C:\ProgramData\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 04/11/2016 - [] D -- C:\ProgramData\HP =>.Hewlett-Packard
O43 - CFD: 04/11/2016 - [] D -- C:\ProgramData\HP Product Assistant =>.Hewlett-Packard
O43 - CFD: 26/07/2016 - [] D -- C:\ProgramData\levelup downloader =>.Level Up! Interactive
O43 - CFD: 05/06/2016 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes
O43 - CFD: 27/11/2016 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 30/04/2016 - [0] SHD -- C:\ProgramData\Menu Iniciar =>.Microsoft Corporation
O43 - CFD: 17/01/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 02/01/2017 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [0] SHD -- C:\ProgramData\Modelos =>.Microsoft Corporation
O43 - CFD: 24/06/2016 - [] D -- C:\ProgramData\Motorola =>.Motorola
O43 - CFD: 24/06/2016 - [] D -- C:\ProgramData\NCH Software =>.NCH Software
O43 - CFD: 31/01/2017 - [] D -- C:\ProgramData\NVIDIA =>.nVidia Corporation
O43 - CFD: 06/06/2016 - [] D -- C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 26/07/2016 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 17/10/2016 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 03/11/2016 - [] D -- C:\ProgramData\scpbrad
O43 - CFD: 24/08/2016 - [] D -- C:\ProgramData\Socialclub =>.Legitimate
O43 - CFD: 25/06/2016 - [] D -- C:\ProgramData\Sony =>.Sony
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation
O43 - CFD: 22/12/2016 - [] D -- C:\ProgramData\Steam =>.Steam Games
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation
O43 - CFD: 11/11/2016 - [] D -- C:\ProgramData\TrueKey =>.Intel Corporation
O43 - CFD: 04/11/2016 - [] D -- C:\ProgramData\WEBREG =>.Hewlett-Packard
O43 - CFD: 25/11/2016 - [] HDC -- C:\ProgramData\{4CC36232-64D7-4870-BDC2-62F91B001274}
O43 - CFD: 11/11/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc.
O43 - CFD: 01/12/2016 - [] D -- C:\Program Files (x86)\Common Files\Autodesk Shared =>.Autodesk
O43 - CFD: 02/05/2016 - [] D -- C:\Program Files (x86)\Common Files\AV =>.Avast
O43 - CFD: 04/11/2016 - [] D -- C:\Program Files (x86)\Common Files\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 04/11/2016 - [] D -- C:\Program Files (x86)\Common Files\HP =>.Hewlett-Packard
O43 - CFD: 15/11/2016 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 26/07/2016 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 11/11/2016 - [] D -- C:\Program Files (x86)\Common Files\McAfee =>.McAfee
O43 - CFD: 17/09/2016 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 21/06/2016 - [] D -- C:\Program Files (x86)\Common Files\MSSoap =>.Microsoft Corporation
O43 - CFD: 17/01/2017 - [] D -- C:\Program Files (x86)\Common Files\Propellerhead Software =>.Propellerhead Software AB
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 10/05/2016 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 25/11/2016 - [] D -- C:\Program Files (x86)\Common Files\Topcon
O43 - CFD: 24/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\.minecraft =>.Microsoft Corporation
O43 - CFD: 11/11/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 01/12/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Autodesk =>.Autodesk
O43 - CFD: 02/05/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\AVAST Software =>.AVAST Software
O43 - CFD: 16/10/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Baidu =>.Baidu
O43 - CFD: 17/09/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Bentley
O43 - CFD: 05/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Charles
O43 - CFD: 24/08/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 05/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\gnupg =>.GNU PG
O43 - CFD: 21/12/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\HD2016
O43 - CFD: 15/08/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\HelloGames =>.HelloGames
O43 - CFD: 13/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\HP =>.Hewlett-Packard
O43 - CFD: 11/11/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\HpUpdate =>.Hewlett-Packard
O43 - CFD: 30/04/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Identities =>.Microsoft Corporation
O43 - CFD: 17/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\Image-Line =>.Image-Line
O43 - CFD: 07/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\IQ Option
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Rafael\AppData\Roaming\Media Center Programs =>.Microsoft Corporation
O43 - CFD: 17/01/2017 - [] SD -- C:\Users\Rafael\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 21/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Motorola =>.Motorola
O43 - CFD: 21/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Motorola Mobility =>.Motorola Mobility
O43 - CFD: 24/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\NCH Software =>.NCH Software
O43 - CFD: 18/09/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\New Technology Studio =>.New Technology Studio
O43 - CFD: 25/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\NVIDIA =>.nVidia Corporation
O43 - CFD: 24/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\proDAD =>.proDAD GmbH
O43 - CFD: 25/06/2016 - [0] D -- C:\Users\Rafael\AppData\Roaming\Publish Providers =>.Unknow
O43 - CFD: 25/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Sony =>.Sony
O43 - CFD: 14/08/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Sony Creative Software Inc =>.Sony Corporation
O43 - CFD: 30/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\Spotify =>.Spotify
O43 - CFD: 05/06/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 17/09/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\TeamViewer =>.TeamViewer
O43 - CFD: 31/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\uTorrent
O43 - CFD: 01/05/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 31/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 11/11/2016 - [] D -- C:\Users\Rafael\AppData\Local\Adobe =>.Adobe
O43 - CFD: 20/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\Akamai =>.Superfluous.AkamaiHD
O43 - CFD: 30/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\Apple =>.Apple Inc.
O43 - CFD: 07/05/2016 - [] D -- C:\Users\Rafael\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 17/10/2016 - [] D -- C:\Users\Rafael\AppData\Local\Autodesk =>.Autodesk
O43 - CFD: 17/09/2016 - [] D -- C:\Users\Rafael\AppData\Local\Bentley
O43 - CFD: 17/05/2016 - [] D -- C:\Users\Rafael\AppData\Local\CEF =>.CEF
O43 - CFD: 27/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 27/07/2016 - [] D -- C:\Users\Rafael\AppData\Local\CrashRpt =>.Superfluous.CrashReports
O43 - CFD: 30/04/2016 - [0] SHD -- C:\Users\Rafael\AppData\Local\Dados de aplicativos =>.Microsoft Corporation
O43 - CFD: 26/07/2016 - [0] D -- C:\Users\Rafael\AppData\Local\Deployment =>.Microsoft Corporation
O43 - CFD: 12/12/2016 - [] D -- C:\Users\Rafael\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 24/08/2016 - [] D -- C:\Users\Rafael\AppData\Local\Disc_Soft_Ltd =>.Disc Soft Ltd
O43 - CFD: 22/12/2016 - [] D -- C:\Users\Rafael\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 17/05/2016 - [] D -- C:\Users\Rafael\AppData\Local\Facebook =>.Facebook
O43 - CFD: 17/05/2016 - [] D -- C:\Users\Rafael\AppData\Local\FacebookGames =>.Facebook
O43 - CFD: 31/10/2016 - [] D -- C:\Users\Rafael\AppData\Local\Google =>.Google
O43 - CFD: 12/05/2016 - [] D -- C:\Users\Rafael\AppData\Local\GWX =>.GWX
O43 - CFD: 30/04/2016 - [0] SHD -- C:\Users\Rafael\AppData\Local\Histórico =>.Microsoft Corporation
O43 - CFD: 13/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\HP =>.Hewlett-Packard
O43 - CFD: 26/07/2016 - [] D -- C:\Users\Rafael\AppData\Local\IsolatedStorage =>.id Software
O43 - CFD: 27/07/2016 - [] D -- C:\Users\Rafael\AppData\Local\Level Up!
O43 - CFD: 08/08/2016 - [] D -- C:\Users\Rafael\AppData\Local\Mega Limited =>.MEGA Limited
O43 - CFD: 20/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\MEGAsync =>.MegaSystems
O43 - CFD: 07/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 27/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 17/09/2016 - [] D -- C:\Users\Rafael\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 16/10/2016 - [] D -- C:\Users\Rafael\AppData\Local\MiniService =>.Baidu Technology
O43 - CFD: 21/06/2016 - [] D -- C:\Users\Rafael\AppData\Local\Motorola =>.Motorola
O43 - CFD: 18/09/2016 - [] D -- C:\Users\Rafael\AppData\Local\New Technology Studio =>.New Technology Studio
O43 - CFD: 03/06/2016 - [] D -- C:\Users\Rafael\AppData\Local\NVIDIA =>.nVidia Corporation
O43 - CFD: 03/06/2016 - [] D -- C:\Users\Rafael\AppData\Local\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 25/11/2016 - [0] D -- C:\Users\Rafael\AppData\Local\PackageAware =>PUP.Optional.BearShare
O43 - CFD: 08/05/2016 - [] D -- C:\Users\Rafael\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 20/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\Razer =>.Razer
O43 - CFD: 24/08/2016 - [] D -- C:\Users\Rafael\AppData\Local\Rockstar Games =>.Rockstar Games
O43 - CFD: 08/11/2016 - [] D -- C:\Users\Rafael\AppData\Local\SKIDROW =>.SKIDROW
O43 - CFD: 25/06/2016 - [] D -- C:\Users\Rafael\AppData\Local\Sony =>.Sony
O43 - CFD: 31/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\Spotify =>.Spotify
O43 - CFD: 31/01/2017 - [] D -- C:\Users\Rafael\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [0] SHD -- C:\Users\Rafael\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 27/11/2016 - [] D -- C:\Users\Rafael\AppData\Local\tkdata =>.TK-Data
O43 - CFD: 04/07/2016 - [] D -- C:\Users\Rafael\AppData\Local\UmmyVideoDownloader =>.UmmyVideoDownloader
O43 - CFD: 01/07/2016 - [] D -- C:\Users\Rafael\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 26/07/2016 - [] D -- C:\Users\Rafael\AppData\Local\YSearchUtil =>.Yahoo! inc.
O43 - CFD: 08/05/2016 - [0] D -- C:\Users\Rafael\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 10/05/2016 - [] RD -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 17/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 =>.Michael Tippach
O43 - CFD: 14/01/2017 - [0] D -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike Source
O43 - CFD: 17/05/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook =>.Facebook
O43 - CFD: 25/05/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 17/01/2017 - [] D -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line =>.Image-Line
O43 - CFD: 27/07/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Level Up =>.Level Up! Interactive
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 20/01/2017 - [] RD -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 01/05/2016 - [] D -- C:\Users\Rafael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Dados de aplicativos =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Histórico =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 08/05/2016 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Dados de aplicativos =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Histórico =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 08/05/2016 - [0] D -- C:\Users\Default User\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 09/08/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 08/05/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\Google =>.Google
O43 - CFD: 14/07/2009 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 29/05/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\Razer =>.Razer
O43 - CFD: 26/07/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\YSearchUtil =>.Yahoo! inc.
O43 - CFD: 22/12/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Fighters =>.Legitimate
O43 - CFD: 08/05/2016 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ Heuristic Search (8) - 1s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL de Extensão do Shell do Armazenamento A.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O106 - SIOI: Groove Explorer Icon Overlay 1 (GFS Unread Stub) [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] - {99FD978C-D287-4F50-827F-B2C658EDA8E7}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 2 (GFS Stub) [Groove Explorer Icon Overlay 2 (GFS Stub)] - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] - {920E6DB1-9907-4370-B3A0-BAFC03D81399}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 3 (GFS Folder) [Groove Explorer Icon Overlay 3 (GFS Folder)] - {16F3DD56-1AF5-4347-846D-7C10C4192619}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 4 (GFS Unread Mark) [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensões do Shell para compartilhamento.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software a.s.®

---\\ Lista dos drivers do sistema (59) - 14s
O58 - SDL:2009/07/13 23:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] =>.Microsoft Windows®
O58 - SDL:2011/03/11 04:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] =>.Microsoft Windows®
O58 - SDL:2011/03/11 04:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] =>.Microsoft Windows®
O58 - SDL:2016/09/08 17:47:22 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [37656] =>.AVAST Software a.s.® (.AVAST Software)
O58 - SDL:2016/09/08 17:47:06 A . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\Windows\System32\drivers\aswKbd.sys [37144] =>.AVAST Software a.s.®
O58 - SDL:2016/09/08 17:47:22 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [108816] =>.AVAST Software a.s.®
O58 - SDL:2016/09/08 17:47:22 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [103064] =>.AVAST Software a.s.®
O58 - SDL:2016/09/08 17:47:22 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [74544] =>.AVAST Software a.s.® (.AVAST Software)
O58 - SDL:2016/09/13 17:47:53 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswsnx.sys [969184] =>.AVAST Software s.r.o.®
O58 - SDL:2016/09/22 17:48:00 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswsp.sys [513632] =>.AVAST Software s.r.o.®
O58 - SDL:2016/09/08 17:47:23 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [163416] =>.AVAST Software a.s.®
O58 - SDL:2016/10/14 11:08:08 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswvmm.sys [293352] =>.AVAST Software s.r.o.® (.AVAST Software)
O58 - SDL:2009/06/10 18:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] =>.Broadcom Corporation
O58 - SDL:2009/06/10 18:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] =>.Brother Industries, Ltd.
O58 - SDL:2009/06/10 18:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/13 23:19:07 A . (.Brother Industries Ltd. - Brother Serial I/F Driver (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 18:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 18:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 18:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 18:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] =>.Broadcom Corporation
O58 - SDL:2009/07/13 23:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2016/08/24 20:58:57 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual SCSI Bus Driver.) -- C:\Windows\System32\drivers\dtlitescsibus.sys [30264] =>.Disc Soft Ltd®
O58 - SDL:2016/08/24 21:00:32 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual USB Bus Driver.) -- C:\Windows\System32\drivers\dtliteusbbus.sys [47672] =>.Disc Soft Ltd®
O58 - SDL:2009/07/13 23:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] =>.Microsoft Windows®
O58 - SDL:2009/06/10 18:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] =>.Broadcom Corporation
O58 - SDL:2009/06/10 18:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] =>.Hauppauge Computer Works, Inc.
O58 - SDL:2010/11/20 11:33:35 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] =>.Microsoft Windows®
O58 - SDL:2011/03/11 04:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] =>.Microsoft Windows®
O58 - SDL:2016/05/21 19:10:34 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\System32\drivers\nvhda64v.sys [141256] =>.NVIDIA Corporation®
O58 - SDL:2016/05/20 05:01:55 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [13412408] =>.NVIDIA Corporation®
O58 - SDL:2011/03/11 04:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] =>.Microsoft Windows®
O58 - SDL:2011/03/11 04:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] =>.Microsoft Windows®
O58 - SDL:2016/04/14 03:38:19 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\Windows\System32\drivers\nvvad64v.sys [56384] =>.NVIDIA Corporation®
O58 - SDL:2009/07/13 23:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] =>.Microsoft Windows®
O58 - SDL:2016/05/02 22:17:24 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Dri.) -- C:\Windows\System32\drivers\Rt64win7.sys [677480] =>.Realtek Semiconductor Corp®
O58 - SDL:2009/06/10 18:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2009/07/13 23:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] =>.Microsoft Windows®
O58 - SDL:2016/09/05 06:47:06 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\Windows\System32\drivers\ssudbus.sys [131712] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/09/05 06:47:12 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\Windows\System32\drivers\ssudmdm.sys [165504] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2009/07/13 23:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] =>.Microsoft Windows®
O58 - SDL:2016/09/12 19:21:57 A . (.Trend Micro Inc. - TrendMicro Common Module.) -- C:\Windows\System32\drivers\tmcomm.sys [305832] =>.Trend Micro, Inc.®
O58 - SDL:2009/07/13 23:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] =>.Microsoft Windows®

---\\ Últimos ficheiros alterados ou criados (Utilizador) (4) - 125s
O61 - LFC: 2017/01/25 07:00:06 A . (..) -- C:\Users\Rafael\AppData\Local\NVIDIA\NvBackend\UMDShim\nvcoproc.bin [7772597] =>.NVIDIA Corporation
O61 - LFC: 2017/01/28 07:08:47 A . (..) -- C:\Users\Rafael\AppData\Roaming\Spotify\natives_blob.bin [367250] =>.Spotify
O61 - LFC: 2017/01/28 07:08:48 A . (..) -- C:\Users\Rafael\AppData\Roaming\Spotify\snapshot_blob.bin [648432] =>.Spotify
O61 - LFC: 2017/01/30 15:57:16 A . (..) -- C:\Users\Rafael\Documents\My Games\Tony Hawk Pro Skater HD\THHDGame\Config\CFile.bin [41648]

---\\ Associações Shell Spawning (11) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files (x86)\baidu\Baidu Browser\spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.scr> [HKCU\..\open\Command] (.Microsoft Corporation - Bloco de notas.) -- C:\Windows\System32\notepad.exe =>.Microsoft Corporation

---\\ Menu de inicialização Internet (16) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Copyright (C) 2011 - spark.) -- C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe =>.Baidu Online Network Technology (Beijing) Co.,Ltd.®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files (x86)\baidu\Baidu Browser\spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files (x86)\baidu\Baidu Browser\spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Copyright (C) 2011 - spark.) -- C:\Program Files (x86)\baidu\Baidu Browser\spark.exe
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software

---\\ Pesquisa de infeção nos navegadores da Internet (4) - 0s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] {799C38E4-A542-4A5C-A6CE-C0869FBC7FED} - (Google) - http://www.google.com/ =>.Google Inc.
O69 - SBI: SearchScopes [HKCU] {AD6AF066-BF0B-4565-BD0D-515E015A8349} - (Yahoo Search) - http://br.search.yahoo.com/ =>.Yahoo! Inc.
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ Listagem dos serviços iniciados pelo Svchost (33) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Serviço de Experiência com Aplicativo.) -- C:\Windows\System32\aelupsvc.dll [72192] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\Windows\system32\srvsvc.dll [236032] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Diretiva de Grupo.) -- C:\Windows\System32\gpsvc.dll [794624] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\Windows\System32\ikeext.dll [859648] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Serviço de Áudio do Windows.) -- C:\Windows\System32\Audiosrv.dll [680960] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acess.) -- C:\Windows\System32\rasauto.dll [99328] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\Windows\System32\rasmans.dll [344064] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll [97792] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistem.) -- C:\Windows\System32\Sens.dll [64512] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\Windows\System32\ipnathlp.dll [359424] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft(R) Windo.) -- C:\Windows\System32\tapisrv.dll [316928] =>.Microsoft Corporation
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gerenciador de Conexões Remotas do Servidor.) -- C:\Windows\System32\termsrv.dll [683520] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\system32\wuaueng.dll [2610688] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de pla.) -- C:\Windows\System32\qmgr.dll [849920] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll [370688] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em u.) -- C:\Windows\System32\iphlpsvc.dll [569344] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\Windows\system32\seclogon.dll [30720] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\Windows\System32\appinfo.dll [70656] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Serviço Agendador de Classes de Multimídia.) -- C:\Windows\system32\mmcss.dll [67584] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho.) -- C:\Windows\System32\SessEnv.dll [121856] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\Windows\System32\browser.dll [136704] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\Windows\System32\eapsvc.dll [111104] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\Windows\system32\schedsvc.dll [1110016] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Serviço de Gerenciamento de Chaves.) -- C:\Windows\system32\kmsvc.dll [90624] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\Windows\System32\wercplsupport.dll [84480] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\Windows\system32\themeservice.dll [44544] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\Windows\System32\bdesvc.dll [100864] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Serviço de instalação do software.) -- C:\Windows\System32\appmgmts.dll [193536] =>.Microsoft Corporation

---\\ Lista das exceções do FireWall (FirewallRules) (20) - 4s
O87 - FAEL: "TCP Query User{35863E3D-8827-44B7-808F-BD7C4A101C3B}C:\users\rafael\appdata\local\akamai\netsession_win.exe" [In-None-P6-TRUE] .(...) -- C:\users\rafael\appdata\local\akamai\netsession_win.exe (.not file.) =>.Superfluous.AkamaiHD
O87 - FAEL: "UDP Query User{20ABC03D-36A9-49EA-8D9B-AD6FB960B1A2}C:\users\rafael\appdata\local\akamai\netsession_win.exe" [In-None-P17-TRUE] .(...) -- C:\users\rafael\appdata\local\akamai\netsession_win.exe (.not file.) =>.Superfluous.AkamaiHD
O87 - FAEL: "TCP Query User{E2554F9B-6ADA-4CC4-A3A7-AB52CA7AB5FA}C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe (.not file.)
O87 - FAEL: "UDP Query User{9E2C5AC9-74AD-4EE5-95A6-271FFC8A02BE}C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\rockstar games\gta san andreas\gta_sa.exe (.not file.)
O87 - FAEL: "TCP Query User{3C427513-64DE-49B1-B555-E1193D80399A}C:\program files (x86)\rockstar games\grand theft auto san andreas\gta_sa.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\rockstar games\grand theft auto san andreas\gta_sa.exe
O87 - FAEL: "UDP Query User{72FAE44A-C1D9-429E-8481-B637AC3CD0B4}C:\program files (x86)\rockstar games\grand theft auto san andreas\gta_sa.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\rockstar games\grand theft auto san andreas\gta_sa.exe
O87 - FAEL: "TCP Query User{451CA8B1-D93B-4FB2-86F7-0A649C7E2903}C:\program files\charles\charles.exe" [In-None-P6-TRUE] .(...) -- C:\program files\charles\charles.exe (.not file.)
O87 - FAEL: "UDP Query User{383CEEFC-1095-4BD1-B625-BE191EA3E456}C:\program files\charles\charles.exe" [In-None-P17-TRUE] .(...) -- C:\program files\charles\charles.exe (.not file.)
O87 - FAEL: "TCP Query User{50B821B9-32D3-478D-AAD1-D48591713A99}C:\program files (x86)\autokrypt11\jre\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\autokrypt11\jre\bin\javaw.exe (.not file.)
O87 - FAEL: "UDP Query User{76CB8239-4604-4C3A-B56E-D6DDB1F6B55E}C:\program files (x86)\autokrypt11\jre\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\autokrypt11\jre\bin\javaw.exe (.not file.)
O87 - FAEL: "TCP Query User{9FB0B177-0922-4314-BA4A-B6F8FC7764B3}C:\program files (x86)\motorola\rsd lite\sdl.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\motorola\rsd lite\sdl.exe (.not file.)
O87 - FAEL: "UDP Query User{19BBC817-03C5-4DE9-AA0C-6797D6E0B904}C:\program files (x86)\motorola\rsd lite\sdl.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\motorola\rsd lite\sdl.exe (.not file.)
O87 - FAEL: "TCP Query User{FF058E5C-CFDD-444D-87ED-70FBC00682F6}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe (.not file.)
O87 - FAEL: "UDP Query User{A9FEF90C-8504-4F0F-B34B-083DC6DB7124}C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\java\jre1.8.0_91\bin\javaw.exe (.not file.)
O87 - FAEL: "TCP Query User{0240D036-6934-48D0-B7D4-8216F5D2E3EE}C:\users\rafael\appdata\local\apps\2.0\lezcnpm4.2o7\pc569b7c.4rx\leve..tion_3af41edd49c109a3_0000.0009_68082bad8b8cd4e1\tools\aria2-1.16.3-win-32bit-build1\aria2c.exe" [In-None-P6-TRUE] .(...) -- C:\users\rafael\appdata\local\apps\2.0\lezcnpm4.2o7\pc569b7c.4rx\leve..tion_3af41edd49c109a3_0000.0009_68082bad8b8cd4e1\tools\aria2-1.16.3-win-32bit-build1\aria2c.exe
O87 - FAEL: "UDP Query User{BD4F4412-E3D3-40B8-A4CF-FD3F7CDC5EF5}C:\users\rafael\appdata\local\apps\2.0\lezcnpm4.2o7\pc569b7c.4rx\leve..tion_3af41edd49c109a3_0000.0009_68082bad8b8cd4e1\tools\aria2-1.16.3-win-32bit-build1\aria2c.exe" [In-None-P17-TRUE] .(...) -- C:\users\rafael\appdata\local\apps\2.0\lezcnpm4.2o7\pc569b7c.4rx\leve..tion_3af41edd49c109a3_0000.0009_68082bad8b8cd4e1\tools\aria2-1.16.3-win-32bit-build1\aria2c.exe
O87 - FAEL: "TCP Query User{395B467B-1156-43F2-92A4-85958192F1CC}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe" [In-None-P6-TRUE] .(...) -- C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
O87 - FAEL: "UDP Query User{52AD50E8-3D05-4FC9-A280-AE8939DB6B99}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe" [In-None-P17-TRUE] .(...) -- C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
O87 - FAEL: "TCP Query User{B9BBDBDF-37F6-4D4D-958D-4DC1C1985EE2}C:\users\rafael\appdata\local\temp\java\sysrafael-computer.exe" [In-None-P6-TRUE] .(...) -- C:\users\rafael\appdata\local\temp\java\sysrafael-computer.exe =>.Temporary file not necessary
O87 - FAEL: "UDP Query User{9F84F7CB-65F1-4CF1-991B-66B965972F93}C:\users\rafael\appdata\local\temp\java\sysrafael-computer.exe" [In-None-P17-TRUE] .(...) -- C:\users\rafael\appdata\local\temp\java\sysrafael-computer.exe =>.Temporary file not necessary

---\\ Scâner Aditional (12) - 2s
C:\Users\Rafael\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi =>.Superfluous.SearchManager
C:\Users\Rafael\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepcmibnfndljocfagoboiedajipieom =>PUP.Optional.MyWebSearch
C:\Users\Rafael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikgjglmlehllifdekcggaapkaplbdpje =>.Superfluous.MindSpark
C:\Users\Rafael\AppData\Local\Akamai =>.Superfluous.AkamaiHD
C:\Users\Rafael\AppData\Local\CrashRpt =>.Superfluous.CrashReports
C:\Users\Rafael\AppData\Local\PackageAware =>PUP.Optional.BearShare
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:TCP Query User{35863E3D-8827-44B7-808F-BD7C4A101C3B}C:\users\rafael\appdata\local\akamai\netsession_win.exe =>.Superfluous.AkamaiHD
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:UDP Query User{20ABC03D-36A9-49EA-8D9B-AD6FB960B1A2}C:\users\rafael\appdata\local\akamai\netsession_win.exe =>.Superfluous.AkamaiHD
C:\Users\Rafael\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_icloud.softonic.com.br_0.localstorage =>.Superfluous.Softonic
C:\Users\Rafael\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_icloud.softonic.com.br_0.localstorage-journal =>.Superfluous.Softonic
C:\Users\Rafael\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dv1i8jtpn48rn.cloudfront.net_0.localstorage =>.Superfluous.CloudfrontNet
C:\Users\Rafael\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_dv1i8jtpn48rn.cloudfront.net_0.localstorage-journal =>.Superfluous.CloudfrontNet

---\\ Ponto de restauro do sistema (9) - 0s
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.AkamaiHD
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.SearchManager
https://www.nicolascoolman.com/fr/adware-mywebsearch/ =>PUP.Optional.MyWebSearch
https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.Superfluous.MindSpark
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.Magicbit
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.CrashReports
https://www.nicolascoolman.com/fr/pup-bearshare/ =>PUP.Optional.BearShare
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/logiciels-superflus =>.Superfluous.Softonic
https://www.anti-malware.top/2016/08/31/cloudfront-net/ =>.Superfluous.CloudfrontNet

~ Unselected Options: O82,
~ End of the scan, 39256 items in 07mn02s (1163)(0)