Start::
ServiceStop:DCIService
ServiceStop:gupdate
ServiceDemand:gupdatem
O4 - HKLM\..\RunOnce: [ZHPCleaner] . (. - .) -- Notepad C:\Users\Icebrave\AppData\Roaming\ZHP\ZHPCleaner.txt (.Not File.) =>.SUP.Orphan
O4 - HKLM\..\Wow6432Node\RunOnce: [ZHPCleaner_Key1] . (. - .) -- REG delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player NPAPI Notifier" .Adobe =>.SUP.Orphan
O4 - HKLM\..\Wow6432Node\RunOnce: [ZHPCleaner_Key2] . (. - .) -- REG delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater" .Adobe =>.SUP.Orphan
O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000 =>.SUP.Orphan
O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000 =>.SUP.Orphan
O23 - Service: DCIService (DCIService) . (...) - C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe (.not file.)
O23 - Service: Serviço do Google Update (gupdate) (gupdate) . (.Google LLC - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC®
P2 - EXT FILE: (.Mozilla - Firefox.) -- \Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi =>.Mozilla
P2 - EXT FILE: (.Mozilla - Firefox.) -- \Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi =>.Mozilla
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_192.dll =>.Adobe
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.212.2] - (.Oracle Corp..) -- C:\Program Files (x86)\Java\jre1.8.0_212\bin\dtplugin\npDeployJava1.dll =>.Oracle Corp.
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.212.2] - (.Oracle Corp..) -- C:\Program Files (x86)\Java\jre1.8.0_212\bin\plugin2\npjp2.dll =>.Oracle Corp.
SR - Auto [00/00/0000] [ 0] DCIService (DCIService) . (...) - C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe (.not file.) [Unsigned]
SR - Auto [04/01/2024] [ 162080] Serviço do Google Update (gupdate) (gupdate) . (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC®
SS - Demand [04/01/2024] [ 162080] Serviço do Google Update (gupdatem) (gupdatem) . (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC®
SR - Auto [04/01/2024] [ 162080] Serviço do Google Update (gupdate) (gupdate) . (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC®
SS - Demand [04/01/2024] [ 162080] Serviço do Google Update (gupdatem) (gupdatem) . (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (...) -- C:\Program Files\Java\jre1.8.0_212\bin\jp2ssv.dll (.not file.)
O42 - Logiciel: Java 8 Update 212 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F32180212F0} [Unsigned] =>.Oracle Corporation
O42 - Logiciel: Java 8 Update 212 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F64180212F0} [Unsigned] =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} [Unsigned] =>.Oracle Corporation (Hidden)
O43 - CFD: 30/01/2024 - [] D -- C:\ProgramData\Ultra Adware Killer =>.Carifred
O43 - CFD: 26/01/2024 - [0] D -- C:\Users\Icebrave\AppData\Local\Lavasoft =>.Lavasoft
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68bcac.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68bcce.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68bd2d.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68bd7d.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68bdbe.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be0e.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be10.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be22.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be33.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be35.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be47.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be49.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be6a.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be8b.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68be9d.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68beed.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68beef.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68bf20.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-171c-a38-68bf41.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13ac9c.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13b048.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13b098.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13b0b9.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13b203.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13b244.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13b321.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13b73a.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13bd18.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13c315.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13c8f3.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13cba4.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13d1a2.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13d5f9.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13d6a7.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13d939.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13da16.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13dc89.tmp
O43 - CFD: 03/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1c2c-260-13dd27.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efa7b.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efa9c.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efa9e.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efab0.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efac1.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efad3.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efad5.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efae6.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efae8.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efc04.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efc15.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efc27.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efc39.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efc5a.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efc6b.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efc7d.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efc8f.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efca0.tmp
O43 - CFD: 02/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-1e04-1ec8-2efcc2.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146d0e.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146d20.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146d31.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146d43.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146d64.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146d76.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146d87.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146d99.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146dba.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146dcc.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146dce.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146de0.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146df1.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146e03.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146e14.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146e16.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146e38.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146e49.tmp
O43 - CFD: 04/02/2024 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Local\tw-d40-1e5c-146e6b.tmp
HKLM\SOFTWARE\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Piriform =>.Piriform
HKLM\SOFTWARE\WOW6432Node\AVG =>.AVG Software
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MBAMShlExt =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3} =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\MBAMShlExt =>.SUP.Orphan
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MBAMShlExt =>.SUP.Orphan
HKLM\Software\Wow6432Node\Classes\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3} =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\MBAMShlExt =>.SUP.Orphan
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner PostInstall
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AVGUI.exe =>.AVG Software
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\TechnoMage\Technomage.EXE =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Visual Pinball\VPinballX.exe =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Visual Pinball\VPinball8.exe =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files (x86)\TechnoMage\Technomage.EXE =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Visual Pinball\VPinballX.exe =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Visual Pinball\VPinball8.exe =>.SUP.Orphan.Compatibility
[0E4418E2DEDE36DD2974C3443AFB5CE5] [04/01/2024] (.Google LLC.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google LLC
[0E4418E2DEDE36DD2974C3443AFB5CE5] [30/01/2024] (.Google LLC.) - C:\Program Files (x86)\Google\Update\1.3.36.372\GoogleCrashHandler.exe =>.Google LLC
[0E4418E2DEDE36DD2974C3443AFB5CE5] [30/01/2024] (.Google LLC.) - C:\Program Files (x86)\Google\Update\1.3.36.372\GoogleCrashHandler64.exe =>.Google LLC
[009EB86320BC00ABF185BBDE0332C26F58] [30/01/2024] (.DOS SANTOS DA SILVA ALFREDO.) - C:\Users\Net\Desktop\UltraAdwareKiller.exe =>.Not verified
[009EB86320BC00ABF185BBDE0332C26F58] [30/01/2024] (.DOS SANTOS DA SILVA ALFREDO.) - C:\Users\Net\Desktop\UltraAdwareKiller64.exe =>.Not verified
End::