Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado da Correção pela Farbar Recovery Scan Tool (x64) Versão: 16.05.2018 01
Executado por User (20-05-2018 23:10:43) Run:1
Executando a partir de C:\Users\User\Desktop
Perfis Carregados: User (Perfis Disponíveis: User)
Modo da Inicialização: Normal
==============================================
fixlist Conteúdo:
*****************
CloseProcesses:
GroupPolicy: Restri��o - Chrome <==== ATEN��O
GroupPolicy\User: Restri��o ? <==== ATEN��O
CHR HKLM\SOFTWARE\Policies\Google: Restri��o <==== ATEN��O
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: Sem Nome -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> Nenhum Arquivo
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2018-01-25] (IObit)
BHO-x32: Sem Nome -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> Nenhum Arquivo
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9u8z7zib.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2017-10-18]
CHR HomePage: Default -> hxxps://www.google.com.br/?gfe_rd=cr&ei=Vju2VsGJOaWX8Qfjm56oBA
S4 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [206096 2018-01-25] (IObit)
S3 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2016-01-13] () [Arquivo n�o assinado]
S4 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S4 Win I Service; C:\Users\User\AppData\Roaming\sXe Injected\wininjsrv.exe [2065408 2016-12-13] (Developed by Alejandro Cort�s) [Arquivo n�o assinado]
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [21928 2017-06-06] (IObit.com)
S3 IURegProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys [22416 2018-01-11] (IObit.com)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-05-19] (Malwarebytes)
U3 arkmwdan; C:\Windows\System32\Drivers\arkmwdan.sys [0 ] (Microsoft Corporation) <==== ATEN��O (zero byte Arquivo/Pasta)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys [X]
2018-05-19 21:30 - 2018-05-19 21:30 - 000003044 _____ C:\Windows\System32\Tasks\Aero
2018-05-19 15:48 - 2018-05-19 21:13 - 000000000 ____D C:\Users\User\AppData\Local\PrivaZer
2018-05-19 02:25 - 2018-05-19 02:25 - 000035128 _____ C:\ComboFix.txt
2018-05-19 01:14 - 2018-05-19 21:31 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-05-19 01:14 - 2018-05-19 01:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-05-19 01:14 - 2018-04-26 05:36 - 000152184 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\Users\Todos os Usu�rios\Malwarebytes
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\Program Files\Malwarebytes
2018-04-03 22:26 - 2011-06-26 03:45 - 000256000 _____ C:\Windows\PEV.exe
2018-04-03 22:26 - 2010-11-07 14:20 - 000208896 _____ C:\Windows\MBR.exe
2018-04-03 22:26 - 2009-04-20 01:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000098816 _____ C:\Windows\sed.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000080412 _____ C:\Windows\grep.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000068096 _____ C:\Windows\zip.exe
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\Users\Todos os Usu�rios\Spybot - Search & Destroy
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2018-04-03 01:45 - 2018-04-03 01:45 - 000000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2018-04-03 00:00 - 2018-04-03 00:04 - 000000000 ____D C:\AdwCleaner
2018-04-02 22:56 - 2018-05-19 21:46 - 000000000 ____D C:\Qoobox
2018-05-19 21:56 - 2016-02-06 16:40 - 000000000 ____D C:\Program Files (x86)\IObit
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\Users\User\AppData\Roaming\IObit
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\Users\Todos os Usu�rios\IObit
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\ProgramData\IObit
2018-05-18 17:06 - 2016-02-06 16:40 - 000000000 ____D C:\Users\Todos os Usu�rios\ProductData
2018-05-18 17:06 - 2016-02-06 16:40 - 000000000 ____D C:\ProgramData\ProductData
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Nenhum Arquivo
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Nenhum Arquivo
ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2018-01-25] (IObit)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Nenhum Arquivo
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Nenhum Arquivo
ContextMenuHandlers4: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2018-01-25] (IObit)
ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2018-01-25] (IObit)
Task: {5F6710A0-EAE0-4D17-8209-53AEB8867F60} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2018-02-02] (AVAST Software)
Task: {698DC899-675C-4251-8AEF-CFD9F1CF8B88} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {90E44006-6533-4B6F-B4D8-274D4522D782} - System32\Tasks\Uninstaller_SkipUac_User => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2018-03-28] (IObit)
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
AlternateDataStreams: C:\Windows:CM_19eafbed2e5c22a84b131f38305ac75313a8de243df0836e0998844693ddf628 [74]
AlternateDataStreams: C:\Windows:CM_506d03957dbd4ca282f94d48b0cbea227cbb884bbe7ac2338e355ac806e184c7 [74]
AlternateDataStreams: C:\Windows:CM_599e40e338059b7c8201d84b6a6f021a4177c11e44d72cdd6d7af9f4fe138d3a [74]
AlternateDataStreams: C:\Windows:CM_a8b02020e43ffe81fc74475d2e2c1b3f050aa7bbdf482b07d6fc067e9b527a6e [74]
AlternateDataStreams: C:\Users\Public\AppData:CSM [474]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\IMFservice => "@"="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
CreateRestorePoint:
Emptytemp:
Reboot:
Hosts:
*****************
Processos fechados com sucesso.
C:\Windows\system32\GroupPolicy\Machine => movido com sucesso
C:\Windows\system32\GroupPolicy\GPT.ini => movido com sucesso
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => movido com sucesso
C:\Windows\system32\GroupPolicy\User => movido com sucesso
"HKLM\SOFTWARE\Policies\Google" => removido (a) com sucesso.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor restaurado com sucesso
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => não encontrado (a)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor restaurado com sucesso
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removido (a) com sucesso.
HKLM\Software\Wow6432Node\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8} => não encontrado (a)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814} => não encontrado (a)
HKLM\Software\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814} => não encontrado (a)
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}" => removido (a) com sucesso.
HKLM\Software\Wow6432Node\Classes\CLSID\{FFCB3198-32F3-4E8B-9539-4324694ED664} => não encontrado (a)
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9u8z7zib.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi => movido com sucesso
"Chrome HomePage" => removido (a) com sucesso.
IObitUnSvr => serviço não encontrado (a).
"HKLM\System\CurrentControlSet\Services\KMService" => removido (a) com sucesso.
KMService => serviço removido (a) com sucesso.
MBAMService => serviço não encontrado (a).
"HKLM\System\CurrentControlSet\Services\Win I Service" => removido (a) com sucesso.
Win I Service => serviço removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Services\IUFileFilter" => removido (a) com sucesso.
IUFileFilter => serviço removido (a) com sucesso.
IURegProcessFilter => serviço não encontrado (a).
"HKLM\System\CurrentControlSet\Services\MBAMSwissArmy" => removido (a) com sucesso.
MBAMSwissArmy => serviço removido (a) com sucesso.
arkmwdan => serviço não encontrado (a).
"HKLM\System\CurrentControlSet\Services\catchme" => removido (a) com sucesso.
catchme => serviço removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Services\cpuz143" => removido (a) com sucesso.
cpuz143 => serviço removido (a) com sucesso.
C:\Windows\System32\Tasks\Aero => movido com sucesso
C:\Users\User\AppData\Local\PrivaZer => movido com sucesso
C:\ComboFix.txt => movido com sucesso
"C:\Windows\system32\Drivers\mbamswissarmy.sys" => não encontrado (a)
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes" => não encontrado (a)
"C:\Windows\system32\Drivers\mbae64.sys" => não encontrado (a)
"C:\Users\Todos os Usu�rios\Malwarebytes" => não encontrado (a)
"C:\ProgramData\Malwarebytes" => não encontrado (a)
"C:\Program Files\Malwarebytes" => não encontrado (a)
C:\Windows\PEV.exe => movido com sucesso
C:\Windows\MBR.exe => movido com sucesso
C:\Windows\NIRCMD.exe => movido com sucesso
C:\Windows\SWREG.exe => movido com sucesso
C:\Windows\SWSC.exe => movido com sucesso
C:\Windows\sed.exe => movido com sucesso
C:\Windows\grep.exe => movido com sucesso
C:\Windows\zip.exe => movido com sucesso
"C:\Users\Todos os Usu�rios\Spybot - Search & Destroy" => não encontrado (a)
C:\ProgramData\Spybot - Search & Destroy => movido com sucesso
C:\Program Files (x86)\Spybot - Search & Destroy 2 => movido com sucesso
C:\Windows\System32\Tasks\Safer-Networking => movido com sucesso
C:\AdwCleaner => movido com sucesso
C:\Qoobox => movido com sucesso
C:\Program Files (x86)\IObit => movido com sucesso
C:\Users\User\AppData\Roaming\IObit => movido com sucesso
"C:\Users\Todos os Usu�rios\IObit" => não encontrado (a)
C:\ProgramData\IObit => movido com sucesso
"C:\Users\Todos os Usu�rios\ProductData" => não encontrado (a)
C:\ProgramData\ProductData => movido com sucesso
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => não encontrado (a)
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Advanced SystemCare" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} => não encontrado (a)
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593} => não encontrado (a)
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObitUnstaler => não encontrado (a)
HKLM\Software\Classes\CLSID\{B19ED566-D419-470b-B111-3C89040BC027} => não encontrado (a)
"HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\Advanced SystemCare" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} => não encontrado (a)
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MBAMShlExt => não encontrado (a)
HKLM\Software\Classes\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3} => não encontrado (a)
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Advanced SystemCare" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} => não encontrado (a)
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObitUnstaler => não encontrado (a)
HKLM\Software\Classes\CLSID\{B19ED566-D419-470b-B111-3C89040BC027} => não encontrado (a)
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\IObitUnstaler => não encontrado (a)
HKLM\Software\Classes\CLSID\{B19ED566-D419-470b-B111-3C89040BC027} => não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{5F6710A0-EAE0-4D17-8209-53AEB8867F60}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5F6710A0-EAE0-4D17-8209-53AEB8867F60}" => removido (a) com sucesso.
C:\Windows\System32\Tasks\AVAST Software\Avast settings backup => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVAST Software\Avast settings backup" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{698DC899-675C-4251-8AEF-CFD9F1CF8B88}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{698DC899-675C-4251-8AEF-CFD9F1CF8B88}" => removido (a) com sucesso.
C:\Windows\System32\Tasks\Adobe Acrobat Update Task => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{90E44006-6533-4B6F-B4D8-274D4522D782}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90E44006-6533-4B6F-B4D8-274D4522D782}" => removido (a) com sucesso.
C:\Windows\System32\Tasks\Uninstaller_SkipUac_User => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_User" => removido (a) com sucesso.
C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Atalho argumento removido (a) com sucesso.
C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => Atalho argumento removido (a) com sucesso.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => Atalho argumento removido (a) com sucesso.
C:\Windows => ":CM_19eafbed2e5c22a84b131f38305ac75313a8de243df0836e0998844693ddf628" ADS removido (a) com sucesso.
C:\Windows => ":CM_506d03957dbd4ca282f94d48b0cbea227cbb884bbe7ac2338e355ac806e184c7" ADS removido (a) com sucesso.
C:\Windows => ":CM_599e40e338059b7c8201d84b6a6f021a4177c11e44d72cdd6d7af9f4fe138d3a" ADS removido (a) com sucesso.
C:\Windows => ":CM_a8b02020e43ffe81fc74475d2e2c1b3f050aa7bbdf482b07d6fc067e9b527a6e" ADS removido (a) com sucesso.
C:\Users\Public\AppData => ":CSM" ADS removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\IMFservice" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\MBAMService" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" => removido (a) com sucesso.
Ponto de Restauração criado com sucesso.
C:\Windows\System32\Drivers\etc\hosts => movido com sucesso
Hosts restaurado com sucesso.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 9835953 B
Executado por User (20-05-2018 23:10:43) Run:1
Executando a partir de C:\Users\User\Desktop
Perfis Carregados: User (Perfis Disponíveis: User)
Modo da Inicialização: Normal
==============================================
fixlist Conteúdo:
*****************
CloseProcesses:
GroupPolicy: Restri��o - Chrome <==== ATEN��O
GroupPolicy\User: Restri��o ? <==== ATEN��O
CHR HKLM\SOFTWARE\Policies\Google: Restri��o <==== ATEN��O
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: Sem Nome -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> Nenhum Arquivo
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2018-01-25] (IObit)
BHO-x32: Sem Nome -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> Nenhum Arquivo
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9u8z7zib.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2017-10-18]
CHR HomePage: Default -> hxxps://www.google.com.br/?gfe_rd=cr&ei=Vju2VsGJOaWX8Qfjm56oBA
S4 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [206096 2018-01-25] (IObit)
S3 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2016-01-13] () [Arquivo n�o assinado]
S4 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S4 Win I Service; C:\Users\User\AppData\Roaming\sXe Injected\wininjsrv.exe [2065408 2016-12-13] (Developed by Alejandro Cort�s) [Arquivo n�o assinado]
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [21928 2017-06-06] (IObit.com)
S3 IURegProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys [22416 2018-01-11] (IObit.com)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-05-19] (Malwarebytes)
U3 arkmwdan; C:\Windows\System32\Drivers\arkmwdan.sys [0 ] (Microsoft Corporation) <==== ATEN��O (zero byte Arquivo/Pasta)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz143; \??\C:\Windows\temp\cpuz143\cpuz143_x64.sys [X]
2018-05-19 21:30 - 2018-05-19 21:30 - 000003044 _____ C:\Windows\System32\Tasks\Aero
2018-05-19 15:48 - 2018-05-19 21:13 - 000000000 ____D C:\Users\User\AppData\Local\PrivaZer
2018-05-19 02:25 - 2018-05-19 02:25 - 000035128 _____ C:\ComboFix.txt
2018-05-19 01:14 - 2018-05-19 21:31 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-05-19 01:14 - 2018-05-19 01:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-05-19 01:14 - 2018-04-26 05:36 - 000152184 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\Users\Todos os Usu�rios\Malwarebytes
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-05-19 01:13 - 2018-05-19 01:13 - 000000000 ____D C:\Program Files\Malwarebytes
2018-04-03 22:26 - 2011-06-26 03:45 - 000256000 _____ C:\Windows\PEV.exe
2018-04-03 22:26 - 2010-11-07 14:20 - 000208896 _____ C:\Windows\MBR.exe
2018-04-03 22:26 - 2009-04-20 01:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000098816 _____ C:\Windows\sed.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000080412 _____ C:\Windows\grep.exe
2018-04-03 22:26 - 2000-08-30 21:00 - 000068096 _____ C:\Windows\zip.exe
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\Users\Todos os Usu�rios\Spybot - Search & Destroy
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2018-04-03 01:45 - 2018-04-03 22:04 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2018-04-03 01:45 - 2018-04-03 01:45 - 000000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2018-04-03 00:00 - 2018-04-03 00:04 - 000000000 ____D C:\AdwCleaner
2018-04-02 22:56 - 2018-05-19 21:46 - 000000000 ____D C:\Qoobox
2018-05-19 21:56 - 2016-02-06 16:40 - 000000000 ____D C:\Program Files (x86)\IObit
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\Users\User\AppData\Roaming\IObit
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\Users\Todos os Usu�rios\IObit
2018-05-19 21:29 - 2016-02-06 16:40 - 000000000 ____D C:\ProgramData\IObit
2018-05-18 17:06 - 2016-02-06 16:40 - 000000000 ____D C:\Users\Todos os Usu�rios\ProductData
2018-05-18 17:06 - 2016-02-06 16:40 - 000000000 ____D C:\ProgramData\ProductData
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Nenhum Arquivo
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Nenhum Arquivo
ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2018-01-25] (IObit)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Nenhum Arquivo
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Nenhum Arquivo
ContextMenuHandlers4: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2018-01-25] (IObit)
ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2018-01-25] (IObit)
Task: {5F6710A0-EAE0-4D17-8209-53AEB8867F60} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2018-02-02] (AVAST Software)
Task: {698DC899-675C-4251-8AEF-CFD9F1CF8B88} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {90E44006-6533-4B6F-B4D8-274D4522D782} - System32\Tasks\Uninstaller_SkipUac_User => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2018-03-28] (IObit)
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
AlternateDataStreams: C:\Windows:CM_19eafbed2e5c22a84b131f38305ac75313a8de243df0836e0998844693ddf628 [74]
AlternateDataStreams: C:\Windows:CM_506d03957dbd4ca282f94d48b0cbea227cbb884bbe7ac2338e355ac806e184c7 [74]
AlternateDataStreams: C:\Windows:CM_599e40e338059b7c8201d84b6a6f021a4177c11e44d72cdd6d7af9f4fe138d3a [74]
AlternateDataStreams: C:\Windows:CM_a8b02020e43ffe81fc74475d2e2c1b3f050aa7bbdf482b07d6fc067e9b527a6e [74]
AlternateDataStreams: C:\Users\Public\AppData:CSM [474]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\IMFservice => "@"="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
CreateRestorePoint:
Emptytemp:
Reboot:
Hosts:
*****************
Processos fechados com sucesso.
C:\Windows\system32\GroupPolicy\Machine => movido com sucesso
C:\Windows\system32\GroupPolicy\GPT.ini => movido com sucesso
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => movido com sucesso
C:\Windows\system32\GroupPolicy\User => movido com sucesso
"HKLM\SOFTWARE\Policies\Google" => removido (a) com sucesso.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor restaurado com sucesso
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => não encontrado (a)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => valor restaurado com sucesso
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removido (a) com sucesso.
HKLM\Software\Wow6432Node\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8} => não encontrado (a)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814} => não encontrado (a)
HKLM\Software\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814} => não encontrado (a)
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}" => removido (a) com sucesso.
HKLM\Software\Wow6432Node\Classes\CLSID\{FFCB3198-32F3-4E8B-9539-4324694ED664} => não encontrado (a)
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9u8z7zib.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi => movido com sucesso
"Chrome HomePage" => removido (a) com sucesso.
IObitUnSvr => serviço não encontrado (a).
"HKLM\System\CurrentControlSet\Services\KMService" => removido (a) com sucesso.
KMService => serviço removido (a) com sucesso.
MBAMService => serviço não encontrado (a).
"HKLM\System\CurrentControlSet\Services\Win I Service" => removido (a) com sucesso.
Win I Service => serviço removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Services\IUFileFilter" => removido (a) com sucesso.
IUFileFilter => serviço removido (a) com sucesso.
IURegProcessFilter => serviço não encontrado (a).
"HKLM\System\CurrentControlSet\Services\MBAMSwissArmy" => removido (a) com sucesso.
MBAMSwissArmy => serviço removido (a) com sucesso.
arkmwdan => serviço não encontrado (a).
"HKLM\System\CurrentControlSet\Services\catchme" => removido (a) com sucesso.
catchme => serviço removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Services\cpuz143" => removido (a) com sucesso.
cpuz143 => serviço removido (a) com sucesso.
C:\Windows\System32\Tasks\Aero => movido com sucesso
C:\Users\User\AppData\Local\PrivaZer => movido com sucesso
C:\ComboFix.txt => movido com sucesso
"C:\Windows\system32\Drivers\mbamswissarmy.sys" => não encontrado (a)
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes" => não encontrado (a)
"C:\Windows\system32\Drivers\mbae64.sys" => não encontrado (a)
"C:\Users\Todos os Usu�rios\Malwarebytes" => não encontrado (a)
"C:\ProgramData\Malwarebytes" => não encontrado (a)
"C:\Program Files\Malwarebytes" => não encontrado (a)
C:\Windows\PEV.exe => movido com sucesso
C:\Windows\MBR.exe => movido com sucesso
C:\Windows\NIRCMD.exe => movido com sucesso
C:\Windows\SWREG.exe => movido com sucesso
C:\Windows\SWSC.exe => movido com sucesso
C:\Windows\sed.exe => movido com sucesso
C:\Windows\grep.exe => movido com sucesso
C:\Windows\zip.exe => movido com sucesso
"C:\Users\Todos os Usu�rios\Spybot - Search & Destroy" => não encontrado (a)
C:\ProgramData\Spybot - Search & Destroy => movido com sucesso
C:\Program Files (x86)\Spybot - Search & Destroy 2 => movido com sucesso
C:\Windows\System32\Tasks\Safer-Networking => movido com sucesso
C:\AdwCleaner => movido com sucesso
C:\Qoobox => movido com sucesso
C:\Program Files (x86)\IObit => movido com sucesso
C:\Users\User\AppData\Roaming\IObit => movido com sucesso
"C:\Users\Todos os Usu�rios\IObit" => não encontrado (a)
C:\ProgramData\IObit => movido com sucesso
"C:\Users\Todos os Usu�rios\ProductData" => não encontrado (a)
C:\ProgramData\ProductData => movido com sucesso
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => não encontrado (a)
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Advanced SystemCare" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} => não encontrado (a)
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593} => não encontrado (a)
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IObitUnstaler => não encontrado (a)
HKLM\Software\Classes\CLSID\{B19ED566-D419-470b-B111-3C89040BC027} => não encontrado (a)
"HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\Advanced SystemCare" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} => não encontrado (a)
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MBAMShlExt => não encontrado (a)
HKLM\Software\Classes\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3} => não encontrado (a)
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Advanced SystemCare" => removido (a) com sucesso.
HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D} => não encontrado (a)
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IObitUnstaler => não encontrado (a)
HKLM\Software\Classes\CLSID\{B19ED566-D419-470b-B111-3C89040BC027} => não encontrado (a)
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\IObitUnstaler => não encontrado (a)
HKLM\Software\Classes\CLSID\{B19ED566-D419-470b-B111-3C89040BC027} => não encontrado (a)
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{5F6710A0-EAE0-4D17-8209-53AEB8867F60}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5F6710A0-EAE0-4D17-8209-53AEB8867F60}" => removido (a) com sucesso.
C:\Windows\System32\Tasks\AVAST Software\Avast settings backup => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVAST Software\Avast settings backup" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{698DC899-675C-4251-8AEF-CFD9F1CF8B88}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{698DC899-675C-4251-8AEF-CFD9F1CF8B88}" => removido (a) com sucesso.
C:\Windows\System32\Tasks\Adobe Acrobat Update Task => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{90E44006-6533-4B6F-B4D8-274D4522D782}" => removido (a) com sucesso.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90E44006-6533-4B6F-B4D8-274D4522D782}" => removido (a) com sucesso.
C:\Windows\System32\Tasks\Uninstaller_SkipUac_User => movido com sucesso
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_User" => removido (a) com sucesso.
C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Atalho argumento removido (a) com sucesso.
C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => Atalho argumento removido (a) com sucesso.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => Atalho argumento removido (a) com sucesso.
C:\Windows => ":CM_19eafbed2e5c22a84b131f38305ac75313a8de243df0836e0998844693ddf628" ADS removido (a) com sucesso.
C:\Windows => ":CM_506d03957dbd4ca282f94d48b0cbea227cbb884bbe7ac2338e355ac806e184c7" ADS removido (a) com sucesso.
C:\Windows => ":CM_599e40e338059b7c8201d84b6a6f021a4177c11e44d72cdd6d7af9f4fe138d3a" ADS removido (a) com sucesso.
C:\Windows => ":CM_a8b02020e43ffe81fc74475d2e2c1b3f050aa7bbdf482b07d6fc067e9b527a6e" ADS removido (a) com sucesso.
C:\Users\Public\AppData => ":CSM" ADS removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\IMFservice" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\MBAMService" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart" => removido (a) com sucesso.
"HKLM\System\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" => removido (a) com sucesso.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" => removido (a) com sucesso.
Ponto de Restauração criado com sucesso.
C:\Windows\System32\Drivers\etc\hosts => movido com sucesso
Hosts restaurado com sucesso.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 9835953 B