~ ZHPDiag v2017.2.7.24 Por Nicolas Coolman (2017/02/07)
~ iniciado por cesar silva (Administrator) (2017/02/09 14:44:11)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Status da versão: Version OK
~ Modo: Scanner
~ Relatório: C:\Users\cesar silva\Desktop\ZHPDiag.txt
~ Relatório: C:\Users\cesar silva\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Inicialização do sistema: Normal (Normal boot)
Windows 8.1 Single Language, 64-bit (Build 9600) =>.Microsoft Corporation

---\\ Navegadores Internet (2) - 0s
~ MFIE: Mozilla Firefox 51.0.1 (x86 pt-BR)
~ MSIE: Internet Explorer v11.0.9600.18538

---\\ Informações sobre os produtos Windows (3) - 4s
~ Windows Server License Manager Script : OK
System - VBScript Engine not found
Windows Automatic Updates : OK

---\\ Softwares de proteçao do sistema (1) - 5s
Windows Defender (Activate) (Protection)

---\\ Informações sobre o sistema (6) - 0s
~ Operating System: Intel64 Family 6 Model 55 Stepping 8, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4072.864 MB (65% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 342 GB (74%) free of 461 GB : OK =>.Disk Space

---\\ Modo de conexão ao sistema (3) - 0s
~ Computer Name: CESAR
~ User Name: cesar silva
~ Logged in as Administrator

---\\ Enumeração das unidades dos discos (1) - 0s
~ Drive C: has 342 GB free of 461 GB (System)

---\\ Estado do Centro de Segurança do Windows (12) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Pesquisa particular de ficheiros genéricos (24) - 4s
[MD5.ED6B4C95E2A6D67480B9DBB8A8E7D9B4] - 27/08/2016 - (.Microsoft Corporation - Windows Explorer.) -- C:\Windows\Explorer.exe [2755504] =>.Microsoft Windows®
[MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - 22/11/2014 - (.Microsoft Corporation - Processo de host do Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [54784] =>.Microsoft Corporation
[MD5.EC302D06155F8E3C383750993FCB6B27] - 05/10/2015 - (.Microsoft Corporation - Aplicativo de Inicialização do Windows.) -- C:\Windows\System32\Wininit.exe [146432] =>.Microsoft Corporation
[MD5.105954F9BEAD700A6DF4B5B489FCCB4B] - 12/11/2016 - (.Microsoft Corporation - Internet Extensions para Win32.) -- C:\Windows\System32\wininet.dll [2920960] =>.Microsoft Corporation
[MD5.B1102BBDDD9C87B3D609D6C08F7A3DBD] - 05/01/2016 - (.Microsoft Corporation - Aplicativo de Logon do Windows.) -- C:\Windows\System32\Winlogon.exe [570880] =>.Microsoft Corporation
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - 22/11/2014 - (.Microsoft Corporation - Biblioteca de Licenciamento de Software.) -- C:\Windows\System32\sppcomapi.dll [447488] =>.Microsoft Corporation
[MD5.84B55134C5CA26063E7AA980BB15D976] - 08/10/2016 - (.Microsoft Corporation - DLL da API de cliente DNS.) -- C:\Windows\System32\dnsapi.dll [658432] =>.Microsoft Corporation
[MD5.4CD766EF361C27DAE50C84AC40C15DF2] - 08/10/2016 - (.Microsoft Corporation - DLL da API de cliente DNS.) -- C:\Windows\Syswow64\dnsapi.dll [498688] =>.Microsoft Corporation
[MD5.A460C3AF3755A2A79A3C8EFE72E147B5] - 13/10/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [559616] =>.Microsoft Corporation
[MD5.74B14192CF79A72F7536B27CB8814FBD] - 22/08/2013 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [26464] =>.Microsoft Windows®
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - 22/08/2013 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [88576] =>.Microsoft Corporation
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - 22/08/2013 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [164352] =>.Microsoft Corporation
[MD5.FBFF94FC1FE0699A6BC5ACE270AB9EA1] - 08/09/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [138240] =>.Microsoft Corporation
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - 22/11/2014 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [76800] =>.Microsoft Corporation
[MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - 18/12/2014 - (.Microsoft Corporation - Driver de porta i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [108544] =>.Microsoft Corporation
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - 22/11/2014 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [142848] =>.Microsoft Corporation
[MD5.C3B0566DE49265AE98405825938C20A1] - 19/11/2016 - (.Microsoft Corporation - Minirdr SMB do Windows NT.) -- C:\Windows\System32\drivers\MRxSmb.sys [401408] =>.Microsoft Corporation
[MD5.9DC17B7D9D84C37C102D379FCC7D4942] - 13/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [281088] =>.Microsoft Corporation
[MD5.9980B262DBE439AE6BDC91AA985F19EE] - 30/12/2015 - (.Microsoft Corporation - Driver do Sistema de Arquivos NT.) -- C:\Windows\System32\drivers\ntfs.sys [2017624] =>.Microsoft Windows®
[MD5.57DCE4FB0467986AE78E1C6FC5240D32] - 11/08/2016 - (.Microsoft Corporation - Driver de porta paralela.) -- C:\Windows\System32\drivers\Parport.sys [96256] =>.Microsoft Corporation
[MD5.235624C147E3CB4C288D5D3D8E8D64A2] - 02/02/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [112640] =>.Microsoft Corporation
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - 22/11/2014 - (.Microsoft Corporation - Redirecionador do Dispositivo RDP da Micros.) -- C:\Windows\System32\drivers\rdpdr.sys [195584] =>.Microsoft Corporation
[MD5.E0BD2D83875464FEEEB242CBA8B7E073] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [108032] =>.Microsoft Corporation
[MD5.17F7B0F2298D97F4B6C7A69511033D3D] - 14/03/2016 - (.Microsoft Corporation - Driver de cópia de sombra de volume.) -- C:\Windows\System32\drivers\volsnap.sys [316760] =>.Microsoft Windows®

---\\ Serviços NT não Microsoft e não desativados (1) - 3s
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe =>.Intel(R) Corporation

---\\ Serviços não Microsoft (SR=Executados, SS=Parados) (5) - 24s
SS - Demand [02/12/2013] [ 279024] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe =>.Intel Corporation - Software and Firmware Products®
SS - Demand [24/04/2012] [ 169752] Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe =>.Intel Corporation®
SR - Auto [01/07/2013] [ 733696] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe =>.Intel(R) Corporation
SS - Demand [01/07/2013] [ 822232] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe =>.Intel® Trusted Connect Service®
SS - Disabl [27/08/2013] [ 904248] VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc..) - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe =>.VMware, Inc.®

---\\ Tarefas planificadas automaticamente (6) - 21s
[MD5.C2C9E42D6C51E99C1BAB44F108E8851C] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6868696] (.Activate.) =>.Piriform Ltd®
[MD5.56831CF0D755103BB0E7EA141A4895D9] [APT] [Java Platform SE Auto Updater] (.Oracle Corporation.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288] (.Activate.) =>.Oracle America, Inc.®
[MD5.00000000000000000000000000000000] [APT] [{62F45CB1-1991-4A5C-85EA-4558E0085217}] (...) -- C:\Users\cesar silva\Desktop\ImmunityDebugger_1_83_setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2796] =>.Piriform Ltd®
O39 - APT: Java Platform SE Auto Updater - (.Oracle Corporation.) -- C:\Windows\System32\Tasks\Java Platform SE Auto Updater [3704] =>.Oracle America, Inc.®
O39 - APT: {62F45CB1-1991-4A5C-85EA-4558E0085217} - (...) -- C:\Windows\System32\Tasks\{62F45CB1-1991-4A5C-85EA-4558E0085217} [3192] (.Orphan.) =>.Superfluous.Orphan

---\\ Aplicações iniciadas por registo & pastas (7) - 0s
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe =>.Intel Corporation
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe =>.Intel Corporation
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe =>.Synaptics Incorporated®
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKUS\S-1-5-21-1615625633-780187929-2241240901-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®

---\\ Processos lançados (10) - 2s
[MD5.768DD5CB66952BC4A3BD474757AEE34F] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696] [PID.1420] =>.Intel(R) Corporation
[MD5.812075D5302EDC5B0B7CFA2091A272AF] - (.Realtek Semiconductor - Gerenciador de áudio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13664984] [PID.3320] =>.Realtek Semiconductor Corp®
[MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [0] [PID.3360] =>.Intel Corporation
[MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\system32\igfxsrvc.exe [0] [PID.3380] =>.Intel Corporation
[MD5.00000000000000000000000000000000] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [0] [PID.3408] =>.Intel Corporation
[MD5.17D33596D8FD74E3C5AB7AE4E60628CE] - (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2805488] [PID.3448] =>.Synaptics Incorporated®
[MD5.865A1F2F14E3634CD6898D34EDC30041] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [199408] [PID.3604] =>.Synaptics Incorporated®
[MD5.6769BDE9FEED576008187A73FF3DA617] - (.Mega Limited - MEGAsync.) -- C:\Users\cesar silva\AppData\Local\MEGAsync\MEGAsync.exe [5374464] [PID.3644] {166DC4B190914581A6A56199} =>.MEGA Limited
[MD5.8AA4A3119B2DF4FFAAD39A98F4764E47] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [8912088] [PID.3152] =>.Piriform Ltd®
[MD5.36FD583A26E4F6CCBB5D870B8FD4EBC0] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\cesar silva\Desktop\ZHPDiag3.exe [2660864] [PID.2132] =>.Nicolas Coolman

---\\ Mozilla Firefox, Plugins,Arranque,Pesquisa,Extensões (6) - 3s
M0 - MFSP: prefs.js [cesar silva - ljovqst8.default] http://www.google.com.br/ =>.Google Inc.
P2 - EXT FILE: (.Firefox Hotfix - Firefox Hotfix: avoid updates that wou.) -- C:\Users\cesar silva\AppData\Roaming\Mozilla\Firefox\Profiles\ljovqst8.default\extensions\firefox-hotfix@mozilla.org.xpi =>.Firefox Hotfix
P2 - EXT FILE: (.MEGA - Secure Cloud Storage.) -- C:\Users\cesar silva\AppData\Roaming\Mozilla\Firefox\Profiles\ljovqst8.default\extensions\firefox@mega.co.nz.xpi =>.MEGA
P2 - EXT FILE: (.Adblock Plus - Ads were yesterday!.) -- C:\Users\cesar silva\AppData\Roaming\Mozilla\Firefox\Profiles\ljovqst8.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi =>.Adblock Plus
P2 - EXT: (...) -- C:\Users\cesar silva\AppData\Roaming\Mozilla\Firefox\Profiles\ljovqst8.default\extensions\abs@avira.com =>.Avira Software
P2 - EXT: (.NetVideoHunter - NetVideoHunter.) -- C:\Users\cesar silva\AppData\Roaming\Mozilla\Firefox\Profiles\ljovqst8.default\extensions\netvideohunter@netvideohunter.com =>.NetVideoHunter

---\\ Internet Explorer, Arranque, Pesquisa, Phishing (19) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.cce.com.br
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Gestão do Proxy (6) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies []

---\\ Análise das linhas, Carregamento Automático de programas (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\System32\Userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Redireção do ficheiro Hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (1)

---\\ Browser Helper Objects do navegador (2) - 0s
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (.Orphan.)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} (.Orphan.)

---\\ Atalhos globais Startup (114) - 14s
O4 - GS\Desktop [Administrador]: BitComet.exe - Atalho.lnk . (.www.BitComet.com - .) C:\Program Files (x86)\BitComet\BitComet.exe =>.www.BitComet.com
O4 - GS\Desktop [Administrador]: CCleaner.exe - Atalho.lnk . (.Piriform Ltd - .) C:\Program Files (x86)\CCleaner\CCleaner.exe =>.Piriform Ltd
O4 - GS\Desktop [Administrador]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe =>.Bloodshed Software
O4 - GS\Desktop [Administrador]: Immunity Debugger.lnk . (.Copyright � 2000-2010 Immunity, Inc - Immunity Debugger, 32-bit analysing debugge.) C:\Program Files (x86)\Immunity Inc\Immunity Debugger\ImmunityDebugger.exe
O4 - GS\Desktop [Administrador]: My ISO Files - Atalho.lnk . (...) C:\Users\cesar silva\Documents\My ISO Files
O4 - GS\Desktop [Administrador]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Desktop [Administrador]: python.exe - Atalho.lnk . (...) C:\Users\cesar silva\Desktop\Python25\python.exe
O4 - GS\Desktop [Administrador]: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe =>.VS Revo Group®
O4 - GS\Desktop [Administrador]: VirtualDJ Home FREE.lnk . (.Atomix Productions - VirtualDJ.) C:\Program Files (x86)\VirtualDJ\virtualdj_home.exe =>.Atomix Productions
O4 - GS\Desktop [Administrador]: Vídeos - Atalho.lnk . (...) C:\Users\cesar silva\Videos
O4 - GS\Desktop [Administrador]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\cesar silva\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrador]: ConTEXT.lnk . (.ConTEXT Project Ltd - ConTEXT Programmers Editor.) C:\Program Files (x86)\ConTEXT\ConTEXT.exe =>.ConTEXT Project Ltd®
O4 - GS\Quicklaunch [Administrador]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrador]: Navegador web em uma caixa.lnk . (...) C:\Program Files\Sandboxie\Start.exe default_browser
O4 - GS\Quicklaunch [Administrador]: XnView.lnk . (.XnView, http://www.xnview.com - XnView for Windows.) C:\Program Files (x86)\XnView\xnview.exe =>.Pierre GOUGELET®
O4 - GS\sendTo [Administrador]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrador]: Sandboxie - DefaultBox.lnk . (...) C:\Program Files (x86)\Sandboxie\Start.exe /box:DefaultBox
O4 - GS\TaskBar [Administrador]: DOSBox 0.74.lnk . (.DOSBox Team - DOSBox DOS Emulator.) C:\Program Files (x86)\DOSBox-0.74\DOSBox.exe -userconf =>.DOSBox Team
O4 - GS\TaskBar [Administrador]: Google Chrome.lnk . (...) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Administrador]: IDLE (Python GUI).lnk . (...) C:\Windows\Installer\{61121B12-88BD-4261-A6EE-AB32610A56DD}\python_icon.exe "C:\Python27\Lib\idlelib\idle.pyw"
O4 - GS\TaskBar [Administrador]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\TaskBar [Administrador]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Administrador]: Notepad.lnk . (.Microsoft Corporation - Bloco de notas.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrador]: Programmer's Notepad.lnk . (.Simon Steele (Echo Software) - Programmer's Notepad 2.) C:\Program Files (x86)\Programmer's Notepad\pn.exe
O4 - GS\Startup [Administrador]: MEGAsync.lnk . (.Mega Limited - MEGAsync.) C:\Users\cesar silva\AppData\Local\MEGAsync\MEGAsync.exe {166DC4B190914581A6A56199} =>.MEGA Limited
O4 - GS\Programs [Administrador]: Documents.lnk . (...) C:\Users\cesar silva\Documents
O4 - GS\Programs [Administrador]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrador]: Pictures.lnk . (...) C:\Users\cesar silva\Pictures =>.Microsoft Corporation
O4 - GS\Desktop [cesar silva]: BitComet.exe - Atalho.lnk . (.www.BitComet.com - .) C:\Program Files (x86)\BitComet\BitComet.exe =>.www.BitComet.com
O4 - GS\Desktop [cesar silva]: CCleaner.exe - Atalho.lnk . (.Piriform Ltd - .) C:\Program Files (x86)\CCleaner\CCleaner.exe =>.Piriform Ltd
O4 - GS\Desktop [cesar silva]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe =>.Bloodshed Software
O4 - GS\Desktop [cesar silva]: Immunity Debugger.lnk . (.Copyright � 2000-2010 Immunity, Inc - Immunity Debugger, 32-bit analysing debugge.) C:\Program Files (x86)\Immunity Inc\Immunity Debugger\ImmunityDebugger.exe
O4 - GS\Desktop [cesar silva]: My ISO Files - Atalho.lnk . (...) C:\Users\cesar silva\Documents\My ISO Files
O4 - GS\Desktop [cesar silva]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Desktop [cesar silva]: python.exe - Atalho.lnk . (...) C:\Users\cesar silva\Desktop\Python25\python.exe
O4 - GS\Desktop [cesar silva]: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe =>.VS Revo Group®
O4 - GS\Desktop [cesar silva]: VirtualDJ Home FREE.lnk . (.Atomix Productions - VirtualDJ.) C:\Program Files (x86)\VirtualDJ\virtualdj_home.exe =>.Atomix Productions
O4 - GS\Desktop [cesar silva]: Vídeos - Atalho.lnk . (...) C:\Users\cesar silva\Videos
O4 - GS\Desktop [cesar silva]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\cesar silva\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [cesar silva]: ConTEXT.lnk . (.ConTEXT Project Ltd - ConTEXT Programmers Editor.) C:\Program Files (x86)\ConTEXT\ConTEXT.exe =>.ConTEXT Project Ltd®
O4 - GS\Quicklaunch [cesar silva]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [cesar silva]: Navegador web em uma caixa.lnk . (...) C:\Program Files\Sandboxie\Start.exe default_browser
O4 - GS\Quicklaunch [cesar silva]: XnView.lnk . (.XnView, http://www.xnview.com - XnView for Windows.) C:\Program Files (x86)\XnView\xnview.exe =>.Pierre GOUGELET®
O4 - GS\sendTo [cesar silva]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [cesar silva]: Sandboxie - DefaultBox.lnk . (...) C:\Program Files (x86)\Sandboxie\Start.exe /box:DefaultBox
O4 - GS\TaskBar [cesar silva]: DOSBox 0.74.lnk . (.DOSBox Team - DOSBox DOS Emulator.) C:\Program Files (x86)\DOSBox-0.74\DOSBox.exe -userconf =>.DOSBox Team
O4 - GS\TaskBar [cesar silva]: Google Chrome.lnk . (...) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [cesar silva]: IDLE (Python GUI).lnk . (...) C:\Windows\Installer\{61121B12-88BD-4261-A6EE-AB32610A56DD}\python_icon.exe "C:\Python27\Lib\idlelib\idle.pyw"
O4 - GS\TaskBar [cesar silva]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\TaskBar [cesar silva]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [cesar silva]: Notepad.lnk . (.Microsoft Corporation - Bloco de notas.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\TaskBar [cesar silva]: Programmer's Notepad.lnk . (.Simon Steele (Echo Software) - Programmer's Notepad 2.) C:\Program Files (x86)\Programmer's Notepad\pn.exe
O4 - GS\Startup [cesar silva]: MEGAsync.lnk . (.Mega Limited - MEGAsync.) C:\Users\cesar silva\AppData\Local\MEGAsync\MEGAsync.exe {166DC4B190914581A6A56199} =>.MEGA Limited
O4 - GS\Programs [cesar silva]: Documents.lnk . (...) C:\Users\cesar silva\Documents
O4 - GS\Programs [cesar silva]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [cesar silva]: Pictures.lnk . (...) C:\Users\cesar silva\Pictures =>.Microsoft Corporation
O4 - GS\Desktop [Convidado]: BitComet.exe - Atalho.lnk . (.www.BitComet.com - .) C:\Program Files (x86)\BitComet\BitComet.exe =>.www.BitComet.com
O4 - GS\Desktop [Convidado]: CCleaner.exe - Atalho.lnk . (.Piriform Ltd - .) C:\Program Files (x86)\CCleaner\CCleaner.exe =>.Piriform Ltd
O4 - GS\Desktop [Convidado]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe =>.Bloodshed Software
O4 - GS\Desktop [Convidado]: Immunity Debugger.lnk . (.Copyright � 2000-2010 Immunity, Inc - Immunity Debugger, 32-bit analysing debugge.) C:\Program Files (x86)\Immunity Inc\Immunity Debugger\ImmunityDebugger.exe
O4 - GS\Desktop [Convidado]: My ISO Files - Atalho.lnk . (...) C:\Users\cesar silva\Documents\My ISO Files
O4 - GS\Desktop [Convidado]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Desktop [Convidado]: python.exe - Atalho.lnk . (...) C:\Users\cesar silva\Desktop\Python25\python.exe
O4 - GS\Desktop [Convidado]: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe =>.VS Revo Group®
O4 - GS\Desktop [Convidado]: VirtualDJ Home FREE.lnk . (.Atomix Productions - VirtualDJ.) C:\Program Files (x86)\VirtualDJ\virtualdj_home.exe =>.Atomix Productions
O4 - GS\Desktop [Convidado]: Vídeos - Atalho.lnk . (...) C:\Users\cesar silva\Videos
O4 - GS\Desktop [Convidado]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\cesar silva\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Convidado]: ConTEXT.lnk . (.ConTEXT Project Ltd - ConTEXT Programmers Editor.) C:\Program Files (x86)\ConTEXT\ConTEXT.exe =>.ConTEXT Project Ltd®
O4 - GS\Quicklaunch [Convidado]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Convidado]: Navegador web em uma caixa.lnk . (...) C:\Program Files\Sandboxie\Start.exe default_browser
O4 - GS\Quicklaunch [Convidado]: XnView.lnk . (.XnView, http://www.xnview.com - XnView for Windows.) C:\Program Files (x86)\XnView\xnview.exe =>.Pierre GOUGELET®
O4 - GS\sendTo [Convidado]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Convidado]: Sandboxie - DefaultBox.lnk . (...) C:\Program Files (x86)\Sandboxie\Start.exe /box:DefaultBox
O4 - GS\TaskBar [Convidado]: DOSBox 0.74.lnk . (.DOSBox Team - DOSBox DOS Emulator.) C:\Program Files (x86)\DOSBox-0.74\DOSBox.exe -userconf =>.DOSBox Team
O4 - GS\TaskBar [Convidado]: Google Chrome.lnk . (...) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar [Convidado]: IDLE (Python GUI).lnk . (...) C:\Windows\Installer\{61121B12-88BD-4261-A6EE-AB32610A56DD}\python_icon.exe "C:\Python27\Lib\idlelib\idle.pyw"
O4 - GS\TaskBar [Convidado]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\TaskBar [Convidado]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Convidado]: Notepad.lnk . (.Microsoft Corporation - Bloco de notas.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Convidado]: Programmer's Notepad.lnk . (.Simon Steele (Echo Software) - Programmer's Notepad 2.) C:\Program Files (x86)\Programmer's Notepad\pn.exe
O4 - GS\Startup [Convidado]: MEGAsync.lnk . (.Mega Limited - MEGAsync.) C:\Users\cesar silva\AppData\Local\MEGAsync\MEGAsync.exe {166DC4B190914581A6A56199} =>.MEGA Limited
O4 - GS\Programs [Convidado]: Documents.lnk . (...) C:\Users\cesar silva\Documents
O4 - GS\Programs [Convidado]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Convidado]: Pictures.lnk . (...) C:\Users\cesar silva\Pictures =>.Microsoft Corporation
O4 - GS\CommonDesktop [Public]: Horizon.lnk . (.Daring Development Inc. - Horizon.) C:\Program Files (x86)\Daring Development\Horizon\Horizon.exe {0515A642FB50AD5EB4FC662E482E9874} =>.Daring Development Inc.
O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: UltraISO.lnk . (.EZB Systems, Inc. - UltraISO Premium.) C:\Program Files (x86)\UltraISO\UltraISO.exe =>.SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD.®
O4 - GS\Programs [Public]: Documents.lnk . (...) C:\Users\cesar silva\Documents
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Pictures.lnk . (...) C:\Users\cesar silva\Pictures =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloco de notas.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculadora do Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Conexão de Área de Trabalho Remota.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Ferramenta de Captura.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Gravador de Som do Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Gravador de Passos.) C:\Windows\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Notas Autoadesivas.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Aplicativo Wordpad do Windows.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visualizador XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Mapa de caracteres.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Camera.lnk . (.Microsoft Corporation - Camera.) C:\Windows\Camera\Camera.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: FileManager.lnk . (.Microsoft Corporation - OneDrive.) C:\Windows\FileManager\FileManager.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: Horizon.lnk . (.Daring Development Inc. - Horizon.) C:\Program Files (x86)\Daring Development\Horizon\Horizon.exe {0515A642FB50AD5EB4FC662E482E9874} =>.Daring Development Inc.
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\Windows\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Movie Maker.lnk . (.Microsoft Corporation - Movie Maker.) C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Photo Gallery.lnk . (.Microsoft Corporation - Photo Gallery.) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: PhotosApp.lnk . (.Microsoft Corporation - Photos.) C:\Windows\FileManager\PhotosApp.exe =>.Microsoft Windows®
O4 - GS\ProgramsCommon [Public]: Search.lnk . (.Microsoft Corporation - Processo de host do Windows (Rundll32).) C:\Windows\system32\rundll32.exe -sta {C90FB8CA-3295-4462-A721-2935E83694BA} =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Store.lnk . (...) C:\Windows\WinStore\WinStore.htm =>.Microsoft Corporation

---\\ Alteração Dominio/Clientes DNS (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{1876204E-3042-485A-BB5F-6564851420B7}: DhcpNameServer = 192.168.0.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{5B1D9F95-A247-47F4-814B-8D1B99FB72EE}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress

---\\ Protocolo adicional (21) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensões OLE32 para Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Controle ActiveX para streaming de vídeo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizador de HTML da Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Photo Gallery Album Download Protocol Handl.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation®
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation

---\\ Software instalados (41) - 16s
O42 - Logiciel: 7-Zip 16.04 (x64) - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip =>.Igor Pavlov
O42 - Logiciel: AVG PC TuneUp - (.AVG Technologies.) [HKLM][64Bits] -- {8F8B61CD-192B-4252-A88F-C3D7B90090A0} =>.AVG Technologies
O42 - Logiciel: BitComet 1.44 - (.CometNetwork.) [HKLM][64Bits] -- BitComet_x64 =>.CometNetwork
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {AF312B06-5C5C-468E-89B3-BE6DE2645722} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F} =>.Cisco Systems, Inc.
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft
O42 - Logiciel: Dev-C++ - (.Bloodshed Software.) [HKLM][64Bits] -- Dev-C++ =>.Bloodshed Software
O42 - Logiciel: Galeria de Fotos - (.Microsoft Corporation.) [HKLM][64Bits] -- {9EE1AE8B-4872-41CA-8C9A-C33D899523E0} =>.Microsoft Corporation
O42 - Logiciel: Horizon - (.Daring Development Inc..) [HKLM][64Bits] -- {6c4303a5-5115-4cfd-bf48-8af0541cd082} {0515A642FB50AD5EB4FC662E482E9874} =>.Daring Development Inc.
O42 - Logiciel: Horizon - (.Daring Development Inc..) [HKLM][64Bits] -- {788E0680-8042-49A4-A77A-3D9DB7359B53} =>.Daring Development Inc.
O42 - Logiciel: Hotspot Shield 5.4.11 Embedded - (.Buildbot.) [HKLM][64Bits] -- {AF599C42-A2E5-4251-B7EE-4925A167594F} =>.Buildbot
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - Software and Firmware Products®
O42 - Logiciel: Intel(R) Sideband Fabric Device Driver - (.Intel Corporation.) [HKLM][64Bits] -- C5A8BC6E-723A-4C0F-96E1-C426D1A4BCA9 =>.Intel Corporation
O42 - Logiciel: Intel(R) Trusted Execution Engine - (.Intel Corporation.) [HKLM][64Bits] -- {176E2755-0A17-42C6-88E2-192AB2131278} =>.Intel Corporation
O42 - Logiciel: Intel(R) Trusted Execution Engine - (.Intel Corporation.) [HKLM][64Bits] -- {BCCACFE6-91A0-4F32-80A0-ADC0CA048C7B} =>.Intel Corporation
O42 - Logiciel: Intel(R) Trusted Execution Engine Driver - (.Intel Corporation.) [HKLM][64Bits] -- {3685B5E8-A0A8-494B-B035-B221547A4B63} =>.Intel Corporation
O42 - Logiciel: Java 8 Update 121 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F64180121F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: MEGAsync - (.Mega Limited.) [HKLM][64Bits] -- MEGAsync {166DC4B190914581A6A56199} =>.MEGA Limited
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Mozilla Firefox 51.0.1 (x86 pt-BR) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 51.0.1 (x86 pt-BR) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} =>.Microsoft
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} =>.Microsoft
O42 - Logiciel: Python 2.5.1 - (.Martin v. Löwis.) [HKLM][64Bits] -- {31800004-6386-4999-A519-518F2D78D8F0} =>.Martin v. Löwis
O42 - Logiciel: Python 2.7 pygame-1.9.1 - (.Pete Shinners, Rene Dudfield, Marcus von Appen, Bob Pendleton, others....) [HKLM][64Bits] -- {5D13804A-67B7-49DA-9B15-65B70A83B9C3}
O42 - Logiciel: Python 2.7.8 - (.Python Software Foundation.) [HKLM][64Bits] -- {61121B12-88BD-4261-A6EE-AB32610A56DD} =>.Python Software Foundation
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.
O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9DAABC60-A5EF-41FF-B2B9-17329590CD5} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated
O42 - Logiciel: VirtualDJ Home FREE - (.Atomix Productions.) [HKLM][64Bits] -- {95575578-5158-4AAE-856E-3FF9DB46A316} =>.Atomix Productions
O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484} =>.AVG Technologies
O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} =>.AVG Technologies CZ, s.r.o.
O42 - Logiciel: Visual Studio 2015 Update 3 (KB3022398) - (.Microsoft Corporation.) [HKLM][64Bits] -- {7a68448b-9cf2-4049-bd73-5875f1aa7ba2} =>.Microsoft Corporation®
O42 - Logiciel: VMware Player - (.VMware, Inc..) [HKLM][64Bits] -- {E452E727-86B8-4233-8CC3-41FD817AFAFF} =>.VMware, Inc.
O42 - Logiciel: WinRAR archiver - (.RarLab.) [HKLM][64Bits] -- WinRAR archiver =>.RarLab

---\\ Softwares de proteçao do sistema (Supérfluo) (98) - 16s
HKLM\SOFTWARE\Wow6432Node\.dpr
HKLM\SOFTWARE\Wow6432Node\AVG =>.AVG Software
HKLM\SOFTWARE\Wow6432Node\AVG Web TuneUp =>.AVG Web TuneUp
HKLM\SOFTWARE\Wow6432Node\Avira =>.Avira
HKLM\SOFTWARE\Wow6432Node\Disc Soft =>.Disc Soft
HKLM\SOFTWARE\Wow6432Node\DT Soft =>.DT Soft Ltd
HKLM\SOFTWARE\Wow6432Node\EasyBoot Systems =>.EasyBoot Systems
HKLM\SOFTWARE\Wow6432Node\Eset =>.ESET
HKLM\SOFTWARE\Wow6432Node\FPDPRFile
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\Greatis =>.Greatis Software
HKLM\SOFTWARE\Wow6432Node\HotspotShield =>.AnchorFree Inc.
HKLM\SOFTWARE\Wow6432Node\HotspotShield MSI =>.AnchorFree Inc.
HKLM\SOFTWARE\Wow6432Node\Immunity Inc
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\Internet Download Manager =>.Tonec Inc
HKLM\SOFTWARE\Wow6432Node\IObit =>.IObit
HKLM\SOFTWARE\Wow6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\Wow6432Node\Lavasoft =>.Lavasoft
HKLM\SOFTWARE\Wow6432Node\Licenses =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nuance =>.Nuance
HKLM\SOFTWARE\Wow6432Node\NuGet =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Wow6432Node\Opera Software =>.Opera Software
HKLM\SOFTWARE\Wow6432Node\Preview Systems =>.Preview Systems, Inc
HKLM\SOFTWARE\Wow6432Node\Python =>.Python
HKLM\SOFTWARE\Wow6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Simply Super Software =>.Simply Super Software
HKLM\SOFTWARE\Wow6432Node\Skype =>.Skype
HKLM\SOFTWARE\Wow6432Node\ThinPrint =>.ThinPrint
HKLM\SOFTWARE\Wow6432Node\TuneUp =>.TuneUp
HKLM\SOFTWARE\Wow6432Node\VirtualDJ =>.Atomix Production
HKLM\SOFTWARE\Wow6432Node\VMware, Inc. =>.VMware, Inc.
HKLM\SOFTWARE\Wow6432Node\WinRAR =>.WinRAR
HKLM\SOFTWARE\Wow6432Node\wtu =>.WTU
HKLM\SOFTWARE\Wow6432Node\XnView =>.Pierre-Emmanuel Gougelet
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\9-lab =>.9-lab
HKCU\SOFTWARE\AnchorFree
HKCU\SOFTWARE\AnVir =>.Anvir Software
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\ASProtect =>.ASPack Software
HKCU\SOFTWARE\AVG =>.AVG Software
HKCU\SOFTWARE\AVG Web TuneUp =>.AVG Web TuneUp
HKCU\SOFTWARE\Avira =>.Avira
HKCU\SOFTWARE\BitComet =>.BitComet (P2P)
HKCU\SOFTWARE\Bitdefender =>.Bitdefender
HKCU\SOFTWARE\Daring Development Inc. =>.Daring Development Inc.
HKCU\SOFTWARE\Disc Soft =>.Disc Soft
HKCU\SOFTWARE\DownloadManager =>.DownloadManager
HKCU\SOFTWARE\DT Soft =>.DT Soft Ltd
HKCU\SOFTWARE\EasyBoot Systems =>.EasyBoot Systems
HKCU\SOFTWARE\Echo Software
HKCU\SOFTWARE\Eden
HKCU\SOFTWARE\Emulators =>.Open Source
HKCU\SOFTWARE\epsxe =>.ePSXe
HKCU\SOFTWARE\ESET =>.ESET
HKCU\SOFTWARE\Game Maker
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Greatis =>.Greatis Software
HKCU\SOFTWARE\Immunity Inc
HKCU\SOFTWARE\Intel =>.Intel
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\Licenses =>.Microsoft Corporation
HKCU\SOFTWARE\LunarianConcepts
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\Malwarebytes =>.Malwarebytes
HKCU\SOFTWARE\Mirage =>.Mirage Game
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\Opera Software =>.Opera Software
HKCU\SOFTWARE\PEiD
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\PSXeven7
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Simply Super Software =>.Simply Super Software
HKCU\SOFTWARE\Synaptics =>.Synaptics
HKCU\SOFTWARE\Sysinternals =>.Sysinternals
HKCU\SOFTWARE\TechnoLogismiki
HKCU\SOFTWARE\The Silicon Realms Toolworks =>.The Silicon Realms Toolworks
HKCU\SOFTWARE\UnThreat AntiVirus
HKCU\SOFTWARE\VirtualDJ =>.Atomix Production
HKCU\SOFTWARE\VS Revo Group =>.VS Revo Group
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation

---\\ Conteúdo das pastas Programs (227) - 15s
O43 - CFD: 06/01/2017 - [] D -- C:\Program Files\7-Zip =>.Igor Pavlov
O43 - CFD: 03/03/2015 - [0] SHD -- C:\Program Files\Arquivos Comuns =>.Microsoft Corporation
O43 - CFD: 02/12/2016 - [] D -- C:\Program Files\BitComet =>.BitComet (P2P)
O43 - CFD: 15/09/2016 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 08/02/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files\EFEnglishtown.app
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files\Intel =>.Intel Corporation
O43 - CFD: 10/11/2016 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files\Java =>.Oracle
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files\Microsoft SQL Server =>.Microsoft Corporation
O43 - CFD: 27/01/2017 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files\OblyTile =>.Argony-OT
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated®
O43 - CFD: 22/08/2013 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 20/12/2016 - [] D -- C:\Program Files\VS Revo Group =>.VS Revo Group
O43 - CFD: 08/03/2016 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 26/10/2016 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 02/02/2017 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files (x86)\Cisco =>.Cisco Systems, Inc.
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 05/02/2017 - [] D -- C:\Program Files (x86)\ConTEXT =>.ConTEXT Project Ltd®
O43 - CFD: 06/01/2017 - [] D -- C:\Program Files (x86)\Daring Development {0515A642FB50AD5EB4FC662E482E9874}
O43 - CFD: 28/01/2017 - [] D -- C:\Program Files (x86)\Dev-Cpp =>.Dev-Cpp
O43 - CFD: 21/08/2015 - [] D -- C:\Program Files (x86)\DOSBox-0.74
O43 - CFD: 31/01/2017 - [] D -- C:\Program Files (x86)\Google =>.Google
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\IIS Express
O43 - CFD: 13/09/2016 - [] D -- C:\Program Files (x86)\Immunity Inc
O43 - CFD: 01/09/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield Software
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 10/11/2016 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files (x86)\lenovowinwinbr
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET =>.Microsoft Corporation
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Microsoft SDKs =>.Microsoft Corporation
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Microsoft SQL Server =>.Microsoft Corporation
O43 - CFD: 27/01/2017 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 27/01/2017 - [] D -- C:\Program Files (x86)\Microsoft Web Tools =>.Microsoft Corporation
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 27/01/2017 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla
O43 - CFD: 16/11/2016 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 01/11/2016 - [] D -- C:\Program Files (x86)\MSECache =>.Microsoft Corporation
O43 - CFD: 15/01/2016 - [] D -- C:\Program Files (x86)\Programmer's Notepad
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files (x86)\REALTEK PCIE Wireless LAN Driver =>.Realtek Semiconductor Corp.
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation
O43 - CFD: 09/12/2016 - [] D -- C:\Program Files (x86)\UltraISO =>.EZB Systems
O43 - CFD: 15/01/2017 - [] D -- C:\Program Files (x86)\VirtualDJ =>.Atomix Production
O43 - CFD: 08/03/2016 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Windows Kits =>.Microsoft Corporation
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 26/10/2016 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 21/09/2016 - [] D -- C:\Program Files (x86)\WinRAR =>.WinRAR
O43 - CFD: 31/10/2016 - [] D -- C:\Program Files (x86)\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 06/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 12/01/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\9-lab Removal Tool
O43 - CFD: 22/11/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 18/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 25/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 02/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit) =>.BitComet (P2P)
O43 - CFD: 28/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++ =>.Bloodshed Software
O43 - CFD: 15/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 18/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClamWin Antivirus
O43 - CFD: 23/11/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks =>.CodeBlocks Team
O43 - CFD: 10/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ConTEXT
O43 - CFD: 21/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74
O43 - CFD: 21/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Pascal
O43 - CFD: 03/10/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield =>.Hotspot Shield
O43 - CFD: 13/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immunity Inc
O43 - CFD: 03/03/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel =>.Intel Corporation
O43 - CFD: 30/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 26/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia =>.Macromedia
O43 - CFD: 22/08/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 15/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programmer's Notepad
O43 - CFD: 20/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.5 =>.Python
O43 - CFD: 09/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7 =>.Python
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller =>.VS Revo Group
O43 - CFD: 19/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie =>.Sandboxie
O43 - CFD: 12/01/2017 - [0] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 09/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO =>.EZB Systems
O43 - CFD: 19/10/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware =>.VMware
O43 - CFD: 29/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 31/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 15/11/2016 - [] D -- C:\ProgramData\.clamwin
O43 - CFD: 07/01/2017 - [] D -- C:\ProgramData\9-lab =>.9-lab
O43 - CFD: 17/12/2014 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 17/10/2016 - [] HD -- C:\ProgramData\Common Files =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [0] SHD -- C:\ProgramData\Dados de Aplicativos =>.Microsoft Corporation
O43 - CFD: 03/01/2017 - [] D -- C:\ProgramData\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [0] SHD -- C:\ProgramData\Documentos =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 01/02/2017 - [] D -- C:\ProgramData\HP =>.Hewlett-Packard
O43 - CFD: 12/12/2016 - [0] D -- C:\ProgramData\IDM =>.IDM
O43 - CFD: 03/03/2015 - [] D -- C:\ProgramData\Intel =>.Intel Corporation
O43 - CFD: 24/08/2016 - [] D -- C:\ProgramData\Licenses =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\Logs =>.ABBYY Software
O43 - CFD: 03/03/2015 - [0] SHD -- C:\ProgramData\Menu Iniciar =>.Microsoft Corporation
O43 - CFD: 30/01/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 27/01/2017 - [] D -- C:\ProgramData\Microsoft DNX =>.Microsoft Corporation
O43 - CFD: 17/12/2014 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [0] SHD -- C:\ProgramData\Modelos =>.Microsoft Corporation
O43 - CFD: 06/10/2016 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 03/02/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 27/01/2017 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 11/09/2015 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation
O43 - CFD: 16/02/2016 - [] D -- C:\ProgramData\Synaptics =>.Synaptics
O43 - CFD: 03/02/2017 - [] AD -- C:\ProgramData\TEMP =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\VMware =>.VMware
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR =>.Adobe Inc.
O43 - CFD: 09/12/2016 - [] D -- C:\Program Files (x86)\Common Files\EZB Systems =>.EZB Systems
O43 - CFD: 01/09/2016 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 03/03/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel =>.Intel Corporation
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 01/10/2015 - [] D -- C:\Program Files (x86)\Common Files\mcafee =>.McAfee
O43 - CFD: 30/01/2017 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 01/09/2016 - [] D -- C:\Program Files (x86)\Common Files\Vbox =>.Vmedia
O43 - CFD: 20/09/2016 - [] D -- C:\Program Files (x86)\Common Files\VMware =>.VMware
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files (x86)\Common Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 07/01/2017 - [] D -- C:\Users\cesar silva\AppData\Roaming\9-lab =>.9-lab
O43 - CFD: 29/07/2015 - [] D -- C:\Users\cesar silva\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 08/02/2017 - [] D -- C:\Users\cesar silva\AppData\Roaming\Audacity =>.Audacity
O43 - CFD: 07/02/2017 - [] D -- C:\Users\cesar silva\AppData\Roaming\BitComet =>.BitComet (P2P)
O43 - CFD: 18/11/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\CodeBlocks =>.CodeBlocks Team
O43 - CFD: 07/01/2017 - [] D -- C:\Users\cesar silva\AppData\Roaming\DAEMON Tools Lite =>.DAEMON Tools
O43 - CFD: 28/01/2017 - [] D -- C:\Users\cesar silva\AppData\Roaming\Dev-Cpp =>.Dev-Cpp
O43 - CFD: 14/01/2017 - [0] D -- C:\Users\cesar silva\AppData\Roaming\DMCache =>.DMCache
O43 - CFD: 08/12/2015 - [] D -- C:\Users\cesar silva\AppData\Roaming\dvdcss =>.VideoLan Team
O43 - CFD: 15/01/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\Echo Software
O43 - CFD: 21/08/2015 - [] D -- C:\Users\cesar silva\AppData\Roaming\fp
O43 - CFD: 13/09/2016 - [0] D -- C:\Users\cesar silva\AppData\Roaming\Immunity Debugger
O43 - CFD: 24/10/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\LavasoftStatistics =>.Lavasoft
O43 - CFD: 16/12/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 07/02/2017 - [] SD -- C:\Users\cesar silva\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 11/09/2015 - [] D -- C:\Users\cesar silva\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 24/10/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\QuickScan =>.Bitdefender
O43 - CFD: 17/07/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\Subversion =>.Games Software
O43 - CFD: 06/10/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 21/09/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\VMware =>.VMware
O43 - CFD: 29/07/2015 - [0] D -- C:\Users\cesar silva\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 16/11/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 09/02/2017 - [] D -- C:\Users\cesar silva\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 17/01/2016 - [] D -- C:\Users\cesar silva\AppData\Local\Adobe =>.Adobe
O43 - CFD: 03/12/2016 - [] D -- C:\Users\cesar silva\AppData\Local\AnVir =>.Anvir Software
O43 - CFD: 15/01/2017 - [] D -- C:\Users\cesar silva\AppData\Local\Audacity =>.Audacity
O43 - CFD: 15/11/2016 - [] D -- C:\Users\cesar silva\AppData\Local\CEF =>.CEF
O43 - CFD: 29/07/2015 - [0] SHD -- C:\Users\cesar silva\AppData\Local\Dados de Aplicativos =>.Microsoft Corporation
O43 - CFD: 06/01/2017 - [] D -- C:\Users\cesar silva\AppData\Local\Daring_Development_Inc
O43 - CFD: 02/10/2015 - [] D -- C:\Users\cesar silva\AppData\Local\DOSBox =>.DOSBox Team
O43 - CFD: 22/08/2015 - [0] SHD -- C:\Users\cesar silva\AppData\Local\EmieBrowserModeList =>.Enterprise mode Site List Mgr
O43 - CFD: 22/08/2015 - [0] SHD -- C:\Users\cesar silva\AppData\Local\EmieSiteList =>.Enterprise mode Site List Mgr
O43 - CFD: 22/08/2015 - [0] SHD -- C:\Users\cesar silva\AppData\Local\EmieUserList =>.Enterprise mode Site List Mgr
O43 - CFD: 21/08/2015 - [] D -- C:\Users\cesar silva\AppData\Local\FreePascal
O43 - CFD: 31/01/2017 - [] D -- C:\Users\cesar silva\AppData\Local\Google =>.Google
O43 - CFD: 13/03/2016 - [] D -- C:\Users\cesar silva\AppData\Local\GWX =>.GWX
O43 - CFD: 10/01/2017 - [] D -- C:\Users\cesar silva\AppData\Local\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 29/07/2015 - [0] SHD -- C:\Users\cesar silva\AppData\Local\Histórico =>.Microsoft Corporation
O43 - CFD: 13/09/2015 - [] D -- C:\Users\cesar silva\AppData\Local\Intel_Corporation =>.Intel Corporation
O43 - CFD: 08/12/2016 - [] D -- C:\Users\cesar silva\AppData\Local\Mega Limited =>.MEGA Limited
O43 - CFD: 07/02/2017 - [] D -- C:\Users\cesar silva\AppData\Local\MEGAsync =>.MegaSystems
O43 - CFD: 08/02/2017 - [] D -- C:\Users\cesar silva\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 11/09/2015 - [] D -- C:\Users\cesar silva\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 03/01/2017 - [] D -- C:\Users\cesar silva\AppData\Local\MulletPower
O43 - CFD: 09/02/2017 - [] D -- C:\Users\cesar silva\AppData\Local\niemiro
O43 - CFD: 17/07/2016 - [] D -- C:\Users\cesar silva\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 21/08/2015 - [] D -- C:\Users\cesar silva\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 09/02/2017 - [] D -- C:\Users\cesar silva\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 29/07/2015 - [0] SHD -- C:\Users\cesar silva\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 15/09/2016 - [] D -- C:\Users\cesar silva\AppData\Local\TSVNCache =>.RealVNC Ltd
O43 - CFD: 28/01/2017 - [] D -- C:\Users\cesar silva\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 21/09/2016 - [0] D -- C:\Users\cesar silva\AppData\Local\VMware =>.VMware
O43 - CFD: 30/01/2017 - [] D -- C:\Users\cesar silva\AppData\Local\vsixinstaller =>.Legitimate
O43 - CFD: 21/08/2015 - [0] D -- C:\Users\cesar silva\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] RD -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] RD -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 18/10/2016 - [] RD -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 18/12/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnVir Task Manager Free
O43 - CFD: 22/08/2013 - [] D -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 08/12/2016 - [] D -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync =>.MegaSystems
O43 - CFD: 12/01/2017 - [] RD -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 03/10/2016 - [] RD -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 15/01/2017 - [] D -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ =>.Atomix Production
O43 - CFD: 29/07/2015 - [] D -- C:\Users\cesar silva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [0] SHD -- C:\Users\Default\AppData\Local\Dados de Aplicativos =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [0] SHD -- C:\Users\Default\AppData\Local\Histórico =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [0] SHD -- C:\Users\Default User\AppData\Local\Dados de Aplicativos =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 03/03/2015 - [0] SHD -- C:\Users\Default User\AppData\Local\Histórico =>.Microsoft Corporation
O43 - CFD: 22/11/2014 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 07/01/2017 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Avg =>.AVG Software
O43 - CFD: 28/01/2017 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 16/12/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 06/12/2015 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Hotspot Shield =>.Hotspot Shield
O43 - CFD: 07/10/2015 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 10/10/2016 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\VMware =>.VMware

---\\ Heuristic Search (3) - 1s
O106 - SIOI:
MEGA (Pending) [
MEGA (Pending)] - {056D528D-CE28-4194-9BA3-BA2E9197FF8C}. (...) -- C:\Users\cesar silva\AppData\Local\MEGAsync\ShellExtX32.dll
O106 - SIOI:
MEGA (Synced) [
MEGA (Synced)] - {05B38830-F4E9-4329-978B-1DD28605D202}. (...) -- C:\Users\cesar silva\AppData\Local\MEGAsync\ShellExtX32.dll
O106 - SIOI:
MEGA (Syncing) [
MEGA (Syncing)] - {0596C850-7BDD-4C9D-AFDF-873BE6890637}. (...) -- C:\Users\cesar silva\AppData\Local\MEGAsync\ShellExtX32.dll

---\\ Lista dos drivers do sistema (57) - 13s
O58 - SDL:2013/08/22 10:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [108896] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [782176] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79200] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [25952] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [114016] =>.Microsoft Windows®
O58 - SDL:2013/08/12 21:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [17624] =>.Broadcom Corporation®
O58 - SDL:2013/09/03 09:59:02 A . (.Baidu, Inc. - Baidu Antivirus Minifilter Driver.) -- C:\Windows\System32\drivers\BprotectEx.sys [78144] =>.Baidu Online Network Technology (Beijing)Co., Ltd®
O58 - SDL:2013/08/22 10:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3357024] =>.Microsoft Windows®
O58 - SDL:2013/08/27 00:33:30 A . (.VMware, Inc. - VMware USB monitor.) -- C:\Windows\System32\drivers\hcmon.sys [53816] =>.VMware, Inc.®
O58 - SDL:2013/08/22 10:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows®
O58 - SDL:2013/07/30 16:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568] =>.Intel Corporation - Software and Firmware Products®
O58 - SDL:2013/07/25 17:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320] =>.Intel Corporation - Software and Firmware Products®
O58 - SDL:2013/08/09 22:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [651248] =>.Intel Corporation - Intel® Rapid Storage Technology®
O58 - SDL:2013/08/22 10:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows®
O58 - SDL:2013/11/26 15:30:46 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [4209152] =>.Intel Corporation
O58 - SDL:2013/11/26 15:37:13 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [449496] =>.Intel Corporation - Software and Firmware Products®
O58 - SDL:2013/10/28 23:08:35 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\intelaud.sys [39320] =>.Intel Wireless Display®
O58 - SDL:2013/10/28 23:08:35 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\iwdbus.sys [27032] =>.Intel Wireless Display®
O58 - SDL:2013/08/22 10:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109408] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [93536] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [81760] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows®
O58 - SDL:2013/10/09 22:44:38 A . (.Intel Corporation - MBI driver.) -- C:\Windows\System32\drivers\MBI.sys [29464] =>.Intel(R) Software®
O58 - SDL:2013/08/22 10:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [56672] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [168288] =>.Microsoft Windows®
O58 - SDL:2009/12/30 11:21:26 A . (.VS Revo Group - Revo Uninstaller Minifilter.) -- C:\Windows\System32\drivers\revoflt.sys [31800] =>.VS Revo Group®
O58 - SDL:2013/08/15 04:28:42 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\Windows\System32\drivers\Rt630x64.sys [830680] =>.Realtek Semiconductor Corp®
O58 - SDL:2014/01/14 11:20:52 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [3837144] =>.Realtek Semiconductor Corp®
O58 - SDL:2013/12/20 01:31:48 A . (.Realsil Semiconductor Corporation - RTS PCIE READER Driver.) -- C:\Windows\System32\drivers\RtsPer.sys [461528] =>.Realtek Semiconductor Corp®
O58 - SDL:2013/11/22 12:03:02 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driverr.) -- C:\Windows\System32\drivers\rtwlane.sys [2987224] =>.Realtek Semiconductor Corp®
O58 - SDL:2013/08/22 13:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2013/08/22 10:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows®
O58 - SDL:2013/08/22 10:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows®
O58 - SDL:2014/01/16 17:19:50 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [29936] =>.Synaptics Incorporated®
O58 - SDL:2014/01/16 17:19:52 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_Intel.sys [31472] =>.Synaptics Incorporated®
O58 - SDL:2016/09/05 05:47:06 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\Windows\System32\drivers\ssudbus.sys [131712] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/09/05 05:47:12 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\Windows\System32\drivers\ssudmdm.sys [165504] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2013/08/22 10:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows®
O58 - SDL:2014/01/16 17:19:52 A . (.Synaptics Incorporated - Synaptics Touchpad Win64 Driver.) -- C:\Windows\System32\drivers\SynTP.sys [548080] =>.Synaptics Incorporated®
O58 - SDL:2014/12/03 20:38:18 A . (.Anchorfree Inc. - Anchorfree HSS VPN Adapter.) -- C:\Windows\System32\drivers\taphss6.sys [42184] =>.AnchorFree Inc®
O58 - SDL:2013/07/01 21:10:20 A . (.Intel Corporation - Intel(R) Trusted Execution Engine Interface.) -- C:\Windows\System32\drivers\TXEIx64.sys [87568] =>.Intel Corporation - Client Components Group®
O58 - SDL:2013/08/22 10:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [19808] =>.Microsoft Windows®
O58 - SDL:2013/08/15 19:25:12 A . (.VMware, Inc. - VMware PCI VMCI Bus Device.) -- C:\Windows\System32\drivers\vmci.sys [85584] =>.VMware, Inc.®
O58 - SDL:2013/08/27 13:41:58 A . (.VMware, Inc. - VMware keyboard filter driver (64-bit).) -- C:\Windows\System32\drivers\VMkbd.sys [32848] =>.VMware, Inc.®
O58 - SDL:2013/08/27 13:42:02 A . (.VMware, Inc. - VMware virtual network driver (64-bit).) -- C:\Windows\System32\drivers\vmnet.sys [24656] =>.VMware, Inc.®
O58 - SDL:2013/08/27 13:42:02 A . (.VMware, Inc. - VMware virtual network adapter driver (64-b.) -- C:\Windows\System32\drivers\vmnetadapter.sys [20560] =>.VMware, Inc.®
O58 - SDL:2013/08/27 13:42:02 A . (.VMware, Inc. - VMware bridge driver (64-bit).) -- C:\Windows\System32\drivers\vmnetbridge.sys [46160] =>.VMware, Inc.®
O58 - SDL:2013/08/27 13:42:46 A . (.VMware, Inc. - VMware network application interface driver.) -- C:\Windows\System32\drivers\vmnetuserif.sys [30800] =>.VMware, Inc.®
O58 - SDL:2013/08/27 13:42:20 A . (.VMware, Inc. - VMware kernel driver.) -- C:\Windows\System32\drivers\vmx86.sys [64080] =>.VMware, Inc.®
O58 - SDL:2013/08/22 10:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [168800] =>.Microsoft Windows®
O58 - SDL:2013/08/15 19:25:16 A . (.VMware, Inc. - VMware vSockets Service.) -- C:\Windows\System32\drivers\vsock.sys [73296] =>.VMware, Inc.®
O58 - SDL:2013/08/22 10:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows®

---\\ Últimos ficheiros alterados ou criados (Utilizador) (9) - 74s
O61 - LFC: 2017/02/07 20:14:26 A . (..) -- C:\Users\cesar silva\AppData\Local\MEGAsync\bearer\qgenericbearer.dll [30]
O61 - LFC: 2017/02/07 20:14:26 A . (..) -- C:\Users\cesar silva\AppData\Local\MEGAsync\bearer\qnativewifibearer.dll [33]
O61 - LFC: 2017/02/09 13:32:09 A . (..) -- C:\Users\cesar silva\Desktop\actraiser.bin [4096]
O61 - LFC: 2017/02/09 07:13:38 A . (.niemiro.) -- C:\Users\cesar silva\Desktop\SFCFix.exe [2884096]
O61 - LFC: 2017/02/09 14:13:47 A . (..) -- C:\Users\cesar silva\Desktop\size.exe [131175]
O61 - LFC: 2017/02/03 15:47:53 A . (..) -- C:\Users\cesar silva\Documents\decompre1.exe [133441]
O61 - LFC: 2017/02/03 19:35:53 A . (..) -- C:\Users\cesar silva\Documents\files.exe [131688]
O61 - LFC: 2017/02/09 07:13:38 A . (.niemiro.) -- C:\Users\cesar silva\Downloads\SFCFix(1).exe [2884096]
O61 - LFC: 2017/02/07 22:16:19 A . (..) -- C:\Users\cesar silva\Videos\decompress.exe [133331]

---\\ Associações Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Iniciador do snap-in de 'Visualizar eventos.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Editor do Registro.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Menu de inicialização Internet (8) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitário de Inicialização por Usuário do.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Pesquisa de infeção nos navegadores da Internet (2) - 21s
O69 - SBI: SearchScopes [HKCU] {0A7D0DF5-3F85-4227-B9E5-34A7F52B972E} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM] {0A7D0DF5-3F85-4227-B9E5-34A7F52B972E} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com

---\\ Listagem dos serviços iniciados pelo Svchost (34) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Serviço de Experiência com Aplicativo.) -- C:\Windows\System32\aelupsvc.dll [214528] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\Windows\System32\certprop.dll [156160] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Serviço de Propagação de Certificado de Car.) -- C:\Windows\System32\certprop.dll [156160] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL de Serviço do Servidor.) -- C:\Windows\system32\srvsvc.dll [329216] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Cliente da Política de Grupo.) -- C:\Windows\System32\gpsvc.dll [1360896] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extensão IKE.) -- C:\Windows\System32\ikeext.dll [1080320] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Serviço que oferece conectividade IPv6 em u.) -- C:\Windows\System32\iphlpsvc.dll [927744] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de serviço de logon secundário.) -- C:\Windows\system32\seclogon.dll [31744] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Serviço de Informações de Aplicativos.) -- C:\Windows\System32\appinfo.dll [110080] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Serviço de Descoberta iSCSI.) -- C:\Windows\system32\iscsiexe.dll [151040] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Serviço Microsoft EAPHost.) -- C:\Windows\System32\eapsvc.dll [110592] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Serviço Agendador de Tarefas.) -- C:\Windows\system32\schedsvc.dll [1265152] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [230400] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Serviço Agendador de Classes de Multimídia.) -- C:\Windows\system32\mmcss.dll [71168] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL de Serviço Pesquisador de Computadores.) -- C:\Windows\System32\browser.dll [135168] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [228864] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Serviço de Configuração da Área de Trabalho.) -- C:\Windows\System32\SessEnv.dll [342528] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Relatórios de Problemas e Soluções.) -- C:\Windows\System32\wercplsupport.dll [84992] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Serviço de Gerenciamento de Chaves.) -- C:\Windows\system32\kmsvc.dll [101376] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Serviço BDE.) -- C:\Windows\System32\bdesvc.dll [348672] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Serviço de Estrutura de Localização do Wind.) -- C:\Windows\System32\GeofenceMonitorService.dll [522240] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Serviço Conta da Microsoft®.) -- C:\Windows\system32\wlidsvc.dll [1639424] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL do Serviço de Tema do Shell do Windows.) -- C:\Windows\system32\themeservice.dll [59392] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gerenciador de Instalação de Dispositivo.) -- C:\Windows\System32\DeviceSetupManager.dll [206848] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Serviço Assistente de Conectividade de Rede.) -- C:\Windows\System32\ncasvc.dll [166400] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gerenciador de Discagem Automática de Acess.) -- C:\Windows\System32\rasauto.dll [102912] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gerenciador de conexão de acesso remoto.) -- C:\Windows\System32\rasmans.dll [542720] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gerenciador de Interface Dinâmica.) -- C:\Windows\System32\mprdim.dll [233472] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Serviço de Notificação de Eventos do Sistem.) -- C:\Windows\System32\sens.dll [73728] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componentes do Microsoft NAT Helper.) -- C:\Windows\System32\ipnathlp.dll [452608] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Servidor de telefonia do Microsoft(R) Windo.) -- C:\Windows\System32\tapisrv.dll [313344] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\system32\wuaueng.dll [3667968] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Serviço de transferência inteligente de tel.) -- C:\Windows\System32\qmgr.dll [933376] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - DLL de serviços do Shell do Windows.) -- C:\Windows\System32\shsvcs.dll [640000] =>.Microsoft Corporation

---\\ Scâner Aditional (6) - 1s
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} =>.Superfluous.Orphan
HKLM\Software\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} =>.Superfluous.Orphan
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} =>.Superfluous.Orphan
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} =>.Superfluous.Orphan
HKLM\Software\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} =>.Superfluous.Orphan
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435b-BC74-9C25C1C588A9} =>.Superfluous.Orphan

---\\ Ponto de restauro do sistema (1) - 0s
~ Nenhum ítem malicioso o desnecessários foi encontrado.

~ Unselected Options: O82,
~ End of the scan, 26648 items in 04mn13s (836)(0)