Ir ao conteúdo
  • Cadastre-se
Entre para seguir isso  
Ana.C

msconfig e regedit abrem e fecham rapidamente

Recommended Posts

Boa noite,

quando tento abrir o regedit ou o msconfig, eles abrem, porém fecham rapidamente. Não consegui gerar os logs DDS, pois ao tentar fazer isso acontece a mesma coisa! Ele começa a executar e fecha sozinho em poucos segundos. Me ajude, por favor... :(

Aguardo resposta.

Obrigada.

Compartilhar este post


Link para o post
Compartilhar em outros sites

Olá

Desculpe a demora :)

Postes os logs de acordo com Leia Antes de Postar - Criando um novo Tópico

ATENÇÃO 1: Não precisa abrir um novo tópico, coloque os novos logs neste mesmo tópico, obrigado!

ATENÇÃO 2: Não edite seu tópico, use o botão responder, obrigado!

ATENÇÃO 3: Não coloque os logs entre TAGS, obrigado!

ATENÇÃO 4: Não anexe os logs, obrigado!

Abraços :D

Compartilhar este post


Link para o post
Compartilhar em outros sites

Seguem os logs:

DDS (Ver_2012-11-20.01) - NTFS_AMD64 NETWORK

Internet Explorer: 10.0.9200.16611 BrowserJavaVersion: 1.6.0_39

Run by Pessoal at 18:25:01 on 2013-06-24

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.55.1046.18.3032.1750 [GMT -3:00]

.

AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\Explorer.EXE

C:\Windows\system32\ctfmon.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://brasil-pesquisa.pw/r.asp#

uSearch Bar = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

uSearch Page = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

uDefault_Page_URL = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

uDefault_Search_URL = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

mStart Page = about:newtab

mSearch Bar = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

mSearch Page = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

mDefault_Page_URL = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

mDefault_Search_URL = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

uURLSearchHooks: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - <orphaned>

uURLSearchHooks: {930f1200-f5f1-4870-bac6-e233ec8e7023} - <orphaned>

mWinlogon: Userinit = userinit.exe

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

BHO: Auxiliar de Conexão do Windows Live ID: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

BHO: IMinent WebBooster (BHO): {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} -

BHO: Skype Plug-In: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

BHO: Avira SearchFree Toolbar plus Web Protection: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

BHO: HomeTab: {da2e16d5-254c-4e11-8fed-2a1b201de379} - C:\Users\Pessoal\AppData\Roaming\HomeTab\HomeTab.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB: Avira SearchFree Toolbar plus Web Protection: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

TB: Avira SearchFree Toolbar plus Web Protection: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

TB: HomeTab: {da2e16d5-254c-4e11-8fed-2a1b201de379} - C:\Users\Pessoal\AppData\Roaming\HomeTab\HomeTab.dll

uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe

uRun: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent

uRun: [GoogleChromeAutoLaunch_6DF0EB03A8923C60684E56320F038E2D] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

uRun: [e966e] C:\Users\Pessoal\AppData\Roaming\ff70f\e966e.js

mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

mRun: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m

mRun: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"

mRun: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2

mRun: [Desktop Disc Tool] "c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"

mRun: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter

mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

mRun: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot

mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

StartupFolder: C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ba24.js

StartupFolder: C:\Users\Pessoal\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\DELLDO~1.LNK - C:\Program Files\Dell\DellDock\DellDock.exe

StartupFolder: C:\Users\Pessoal\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\RECORT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\AUTOCA~1.LNK - C:\Program Files (x86)\Common Files\Autodesk Shared\acstart16.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: E&xportar para o Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: Enviar imagem para Dispositivo &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

IE: Enviar página para Dispositivo &Bluetooth ... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html

IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

IE: {a9eaf767-5ae6-4b79-a213-5963c37cbae6} - {da2e16d5-254c-4e11-8fed-2a1b201de379}

IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

LSP: C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll

DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab

DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab

TCP: NameServer = 192.168.0.1

TCP: Interfaces\{AD8C9A72-A805-49B8-A0BB-57DA757F12D4} : DHCPNameServer = 192.168.0.1

TCP: Interfaces\{AD8C9A72-A805-49B8-A0BB-57DA757F12D4}\3556C6D696E68616 : DHCPNameServer = 200.222.123.101 200.165.132.155 192.168.0.1

TCP: Interfaces\{AD8C9A72-A805-49B8-A0BB-57DA757F12D4}\F49602759664960264F6E6 : DHCPNameServer = 192.168.182.1 192.168.182.1

TCP: Interfaces\{CB1930A5-1097-44BE-A440-C9724CBB6C4C} : DHCPNameServer = 192.168.0.1

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-mStart Page = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

x64-mDefault_Page_URL = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} -

x64-Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe

x64-Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe

x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe

x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe

x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe

x64-Run: [broadcom Wireless Manager UI] C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe

x64-Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe

x64-Run: [iAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe

x64-RunOnce: [DSUpdateLauncher] "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" /NOCONSOLE /D="C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate" /RUNAS "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe"

x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - <orphaned>

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

x64-Notify: GoToAssist - C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll

x64-Notify: igfxcui - igfxdev.dll

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2233703&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.startup.homepage - about:home

FF - prefs.js: browser.search.selectedEngine - portaldosites

FF - prefs.js: network.proxy.type - 0

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\plugins\nprpplugin.dll

FF - plugin: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll

FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll

FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

FF - plugin: C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\extensions\{e0301295-ab3e-4af3-979f-3d453c5f9f48}\plugins\np-mswmp.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll

FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

FF - ExtSQL: 2013-06-21 06:33; {65145f6e-3049-4f26-9782-88518b8d82c5}; C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\extensions\{65145f6e-3049-4f26-9782-88518b8d82c5}

.

---- FIREFOX POLICIES ----

FF - user.js: browser.startup.homepage - hxxp://brasil-pesquisa.pw/r.asp#);user_pref(keyword.URL, http://brasil-pesquisa.pw/r.asp#

============= SERVICES / DRIVERS ===============

.

R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-3-31 55280]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-3-31 215552]

R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2010-3-31 393728]

S1 avkmgr;avkmgr;C:\Windows\System32\drivers\avkmgr.sys [2012-10-18 27760]

S2 AntiVirSchedulerService;Avira Programador;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-10-18 86224]

S2 AntiVirService;Avira Realtime Protection;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-10-18 110032]

S2 AntiVirWebService;Avira Web Protection;C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe [2012-10-18 465360]

S2 avgntflt;avgntflt;C:\Windows\System32\drivers\avgntflt.sys [2012-10-18 98848]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 DockLoginService;Dock Login Service;C:\Program Files\Dell\DellDock\DockLogin.exe [2009-6-9 155648]

S2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2010-3-31 656624]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]

S2 winzipersvc;WinZiper service;C:\Program Files (x86)\WinZipper\winzipersvc.exe [2013-6-21 424104]

S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2010-3-31 35104]

S3 CryptOSD;Phoenix CryptOSD Device Driver;C:\Windows\System32\drivers\CryptOSD.sys [2009-9-17 415360]

S3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\System32\drivers\CtClsFlt.sys [2010-3-31 172704]

S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2012-6-18 48488]

S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-3-8 1492840]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-6-16 59392]

S3 WatAdminSvc;Serviço de Tecnologias de Ativação do Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-4-22 1255736]

S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

.

=============== File Associations ===============

.

FileExt: .scr: AutoCADScriptFile="C:\Windows\SysWOW64\notepad.exe" "%1"

.

=============== Created Last 30 ================

.

2013-06-24 16:37:44 -------- d-----w- C:\Users\Pessoal\GMER

2013-06-24 16:24:39 2092792 ----a-w- C:\Users\Pessoal\avira_free_antivirus.exe

2013-06-21 12:26:46 31816 ----a-w- C:\Windows\Launcher.exe

2013-06-21 12:26:46 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\SimplyTech

2013-06-21 12:26:45 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\HomeTab

2013-06-21 12:26:45 -------- d-----w- C:\Program Files (x86)\HomeTab

2013-06-21 12:25:28 -------- d-----w- C:\Users\Pessoal\AppData\Local\Programs

2013-06-21 04:32:28 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\337

2013-06-21 04:32:04 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\WinZipper

2013-06-21 04:32:04 -------- d-----w- C:\Program Files (x86)\WinZipper

2013-06-21 04:27:22 -------- d-----w- C:\Users\Pessoal\AppData\Local\DealPlyLive

2013-06-21 04:27:22 -------- d-----w- C:\ProgramData\DealPlyLive

2013-06-21 04:27:22 -------- d-----w- C:\Program Files (x86)\DealPlyLive

2013-06-21 04:27:15 -------- d-----w- C:\Program Files (x86)\DealPly

2013-06-21 04:27:11 -------- d-----w- C:\ProgramData\eSafe

2013-06-21 04:27:02 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Desk 365

2013-06-21 04:27:02 -------- d-----w- C:\Program Files (x86)\Desk 365

2013-06-21 04:26:56 -------- d-----w- C:\ProgramData\Tarma Installer

2013-06-21 01:38:37 -------- d-----w- C:\ProgramData\Baidu Security

2013-06-21 01:37:51 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Baidu

2013-06-21 01:37:51 -------- d-----w- C:\ProgramData\Baidu

2013-06-21 01:37:39 -------- d-----w- C:\Program Files (x86)\Baidu Security

2013-06-21 01:20:58 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\Baidu Security

2013-06-21 01:20:13 -------- d-----w- C:\Users\Pessoal\AppData\Roaming\eIntaller

2013-06-19 02:16:22 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll

2013-06-19 02:16:22 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll

2013-06-19 02:16:10 1910632 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2013-06-19 02:13:22 751104 ----a-w- C:\Windows\System32\win32spl.dll

2013-06-19 02:13:22 492544 ----a-w- C:\Windows\SysWow64\win32spl.dll

2013-06-19 02:13:15 30720 ----a-w- C:\Windows\System32\cryptdlg.dll

2013-06-19 02:13:15 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll

2013-06-19 02:12:34 903168 ----a-w- C:\Windows\SysWow64\certutil.exe

2013-06-19 02:12:34 1464320 ----a-w- C:\Windows\System32\crypt32.dll

2013-06-19 02:12:34 1192448 ----a-w- C:\Windows\System32\certutil.exe

2013-06-19 02:12:33 1160192 ----a-w- C:\Windows\SysWow64\crypt32.dll

2013-06-19 02:12:32 52224 ----a-w- C:\Windows\System32\certenc.dll

2013-06-19 02:12:32 43008 ----a-w- C:\Windows\SysWow64\certenc.dll

2013-06-19 02:12:32 184320 ----a-w- C:\Windows\System32\cryptsvc.dll

2013-06-19 02:12:32 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll

2013-06-19 02:12:32 139776 ----a-w- C:\Windows\System32\cryptnet.dll

2013-06-19 02:12:32 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll

2013-06-19 02:12:22 1887232 ----a-w- C:\Windows\System32\d3d11.dll

2013-06-19 02:12:22 1505280 ----a-w- C:\Windows\SysWow64\d3d11.dll

2013-06-07 00:24:54 -------- d-sh--w- C:\Users\Pessoal\AppData\Roaming\ff70f

2013-06-07 00:24:53 -------- d-sh--w- C:\fea

.

==================== Find3M ====================

.

2013-06-19 03:06:51 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2013-06-19 03:06:51 692104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2013-06-08 12:28:46 2706432 ----a-w- C:\Windows\System32\mshtml.tlb

2013-06-08 11:13:19 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2013-05-17 01:27:29 866720 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll

2013-05-17 01:27:29 788896 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2013-05-17 01:25:57 1767936 ----a-w- C:\Windows\SysWow64\wininet.dll

2013-05-17 01:25:27 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll

2013-05-17 01:25:26 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll

2013-05-17 01:25:26 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll

2013-05-17 00:59:03 2241024 ----a-w- C:\Windows\System32\wininet.dll

2013-05-17 00:58:10 3958784 ----a-w- C:\Windows\System32\jscript9.dll

2013-05-17 00:58:08 67072 ----a-w- C:\Windows\System32\iesetup.dll

2013-05-17 00:58:08 136704 ----a-w- C:\Windows\System32\iesysprep.dll

2013-05-14 12:23:25 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

2013-05-14 08:40:13 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe

2013-04-13 05:49:23 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49:19 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49:19 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49:19 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45:16 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll

2013-04-13 04:45:15 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll

2013-04-12 14:45:08 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys

2013-04-10 06:01:54 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys

2013-04-10 06:01:53 983400 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2013-04-10 03:30:50 3153920 ----a-w- C:\Windows\System32\win32k.sys

.

============= FINISH: 18:25:32,80 ===============

GMER 2.1.19163 - http://www.gmer.net

Rootkit scan 2013-06-24 18:14:29

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST950032 rev.D003 465,76GB

Running: gmer.exe; Driver: C:\Users\Pessoal\AppData\Local\Temp\kwdyqkog.sys

---- User code sections - GMER 2.1 ----

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[852] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075e01465 2 bytes [E0, 75]

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[852] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075e014bb 2 bytes [E0, 75]

.text ... * 2

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationThread + 5 000000007771f991 7 bytes {MOV EDX, 0x1f3e28; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtOpenThreadToken + 5 000000007771fbd5 7 bytes {MOV EDX, 0x1f3e68; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcess + 5 000000007771fc05 7 bytes {MOV EDX, 0x1f3da8; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtSetInformationFile + 5 000000007771fc1d 7 bytes {MOV EDX, 0x1f3d28; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtMapViewOfSection + 5 000000007771fc35 7 bytes {MOV EDX, 0x1f3f28; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtUnmapViewOfSection + 5 000000007771fc65 7 bytes {MOV EDX, 0x1f3f68; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtOpenThreadTokenEx + 5 000000007771fce5 7 bytes {MOV EDX, 0x1f3ee8; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcessTokenEx + 5 000000007771fcfd 7 bytes {MOV EDX, 0x1f3ea8; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtOpenFile + 5 000000007771fd49 7 bytes {MOV EDX, 0x1f3c68; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtQueryAttributesFile + 5 000000007771fe41 7 bytes {MOV EDX, 0x1f3ca8; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtCreateFile + 5 0000000077720099 7 bytes {MOV EDX, 0x1f3c28; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtOpenProcessToken + 5 00000000777210a5 7 bytes {MOV EDX, 0x1f3de8; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtOpenThread + 5 000000007772111d 7 bytes {MOV EDX, 0x1f3d68; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\SysWOW64\ntdll.dll!NtQueryFullAttributesFile + 5 0000000077721321 7 bytes {MOV EDX, 0x1f3ce8; JMP RDX}

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075e01465 2 bytes [E0, 75]

.text C:\Program Files (x86)\Google\Chrome\Application\chrome.exe[588] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075e014bb 2 bytes [E0, 75]

.text ... * 2

---- Registry - GMER 2.1 ----

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\904ce5d217a1

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\904ce5d217a1@001dbec75ddd 0x38 0x13 0x68 0xB5 ...

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\904ce5d217a1@679d79796601 0x2D 0xC7 0x36 0xD8 ...

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\904ce5d217a1@6cd68a5483da 0x48 0x3A 0xA4 0xF9 ...

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\904ce5d217a1@5d4c7df16612 0x58 0xEA 0x4A 0x1D ...

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\904ce5d217a1@a0f419b2a104 0xCD 0x47 0x70 0xD2 ...

Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\904ce5d217a1 (not active ControlSet)

Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\904ce5d217a1@001dbec75ddd 0x38 0x13 0x68 0xB5 ...

Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\904ce5d217a1@679d79796601 0x2D 0xC7 0x36 0xD8 ...

Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\904ce5d217a1@6cd68a5483da 0x48 0x3A 0xA4 0xF9 ...

Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\904ce5d217a1@5d4c7df16612 0x58 0xEA 0x4A 0x1D ...

Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\904ce5d217a1@a0f419b2a104 0xCD 0x47 0x70 0xD2 ...

---- EOF - GMER 2.1 ----

Obrigada.

Compartilhar este post


Link para o post
Compartilhar em outros sites

Cara Ana.C

Recomendo que salve este tópico em seus Favoritos para facilitar na hora de encontrá-lo.

Por favor, atente para o seguinte:

  • Caso fique sem resposta durante 3 dias, me envie uma Mensagem Privada (MP);
  • O que será passado aqui, somente será com relação ao problema do seu computador portanto, não faça mais em nenhum outro;
  • Siga, por favor, atentamente as instruções passadas e em caso de dúvidas não hesite em perguntá-las;
  • Sempre coloque suas respostas neste tópico... Não abra outro!
  • Procure sempre me manter informado, durante a remoção, sobre o que acontece com seu computador.
  • Respeite a ordem das instruções passadas.
  • Observação: Não tome outra medida além das passadas aqui; atente para que, caso peça ajuda em outro fórum, não deixe de nos informar, sob risco de desconfigurar seu computador!

# Etapa nº 1 #

Faça o download Junkware Removal Tool e salve em seu Desktop.

  • Desative seus programas de proteção (antivírus etc) para evitar qualquer conflito.
  • Clique duas vezes JRT.exe
    • Se seu sistema for Windows Vista ou Windows 7 ou Windows 8, clique com o botão direito do mouse e peça para Executar como Administrador.

    [*]Seja paciente e aguarde o scan terminar.[*]Abra o log JRT.txt que está em seu Desktop.[*]Copie todo conteúdo e cole em sua próximo mensagem.

# Etapa nº 2 #

  • Clique duas vezes no adwcleaner.exe
    • Atenção: Usuários Windows Vista, 7 e 8, cliquem com o botão direito do mouse e escolha: execadmin.png

  • Clique em Pesquisar
  • No final do scan será aberto um log com o resultado.
  • Caso algo seja detectado, clique então no botão Remover.
  • Novamente, no final do scan será aberto um log com o resultado.
  • Copie todo seu conteúdo e cole em sua próxima resposta.

# Etapa nº 3 #

Faça o donwload do OTL by OldTimer e salve em seu Desktop.

  • Clique duas vezes no ícone 3984478580_7ed4cabc45_o.gif
  • Deixe a tela principal configurada conforme figura abaixo:

5369448421_6bf795eb1a_b.jpg

  • Copie e cole o conteúdo abaixo, no espaço logo após 5369460409_ee749edc8e_m.jpg
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dl
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
/md5stop

  • Clique no botão 5370056362_e3d07d5d8a_m.jpg
  • Não interrompa o scan em hipótese alguma;
  • Quando terminar será gerado dois logs: OTL.txt e Extras.txt;
  • Reinicie o computador;
  • Poste os dois logs em sua próxima resposta.
  • Não exclua o OTL

Abraços :D

Compartilhar este post


Link para o post
Compartilhar em outros sites

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.9.4 (05.06.2013:1)

OS: Windows 7 Home Premium x64

Ran by Pessoal on 01/07/2013 at 20:29:17,49

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apnupdater

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Bar

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduitengine

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminent

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\iminent

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\conduitengine

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\Software\pricegong

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\escort.dll

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\genericasktoolbar.dll

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.activecontenthandle.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.activecontenthandler

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.browserhelperobject

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.browserhelperobject.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.scriptextender

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.scriptextender.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.tinyurlhandler

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.tinyurlhandler.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\features\a28b4d68debaa244eb686953b7074fef

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\a28b4d68debaa244eb686953b7074fef

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthost.tool

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthost.tool.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\mybabylontb_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\tracing\mybabylontb_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\classes\Toolbar.CT1142338

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

~~~ Files

Successfully deleted: [File] C:\eula.1028.txt

Successfully deleted: [File] C:\eula.1031.txt

Successfully deleted: [File] C:\eula.1033.txt

Successfully deleted: [File] C:\eula.1036.txt

Successfully deleted: [File] C:\eula.1040.txt

Successfully deleted: [File] C:\eula.1041.txt

Successfully deleted: [File] C:\eula.1042.txt

Successfully deleted: [File] C:\eula.2052.txt

Successfully deleted: [File] C:\install.res.1028.dll

Successfully deleted: [File] C:\install.res.1031.dll

Successfully deleted: [File] C:\install.res.1033.dll

Successfully deleted: [File] C:\install.res.1036.dll

Successfully deleted: [File] C:\install.res.1040.dll

Successfully deleted: [File] C:\install.res.1041.dll

Successfully deleted: [File] C:\install.res.1042.dll

Successfully deleted: [File] C:\install.res.2052.dll

Successfully deleted: [File] C:\install.res.3082.dll

Successfully deleted: [File] "C:\Windows\syswow64\conduitengine.tmp"

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"

Successfully deleted: [Folder] "C:\ProgramData\baidu"

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"

Successfully deleted: [Folder] "C:\ProgramData\iminent"

Successfully deleted: [Folder] "C:\ProgramData\installmate"

Successfully deleted: [Folder] "C:\ProgramData\premium"

Successfully deleted: [Folder] "C:\ProgramData\tarma installer"

Successfully deleted: [Folder] "C:\Users\Pessoal\AppData\Roaming\babylon"

Successfully deleted: [Folder] "C:\Users\Pessoal\AppData\Roaming\baidu"

Successfully deleted: [Folder] "C:\Users\Pessoal\AppData\Roaming\dealply"

Successfully deleted: [Folder] "C:\Users\Pessoal\AppData\Roaming\opencandy"

Successfully deleted: [Folder] "C:\Users\Pessoal\AppData\Roaming\registry mechanic"

Successfully deleted: [Folder] "C:\Users\Pessoal\appdata\local\babylon"

Successfully deleted: [Folder] "C:\Users\Pessoal\appdata\local\conduit"

Successfully deleted: [Folder] "C:\Users\Pessoal\appdata\local\softonic_english"

Successfully deleted: [Folder] "C:\Users\Pessoal\appdata\locallow\conduit"

Successfully deleted: [Folder] "C:\Users\Pessoal\appdata\locallow\conduitengine"

Successfully deleted: [Folder] "C:\Users\Pessoal\appdata\locallow\pricegong"

Successfully deleted: [Folder] "C:\Users\Pessoal\appdata\locallow\simplytech"

Successfully deleted: [Folder] "C:\Program Files (x86)\claro"

Successfully deleted: [Folder] "C:\Program Files (x86)\conduitengine"

Successfully deleted: [Folder] "C:\Program Files (x86)\iminent"

Successfully deleted: [Folder] "C:\Program Files (x86)\registry mechanic"

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{007AE346-5EE0-4A51-88DB-F3AC0619D671}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{02D74FBD-8C47-4812-9B70-FD79159964CB}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{038A1F4F-784E-4550-981C-F9CAAB1F8E68}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{054D0E43-10D2-43D5-B1E7-E459361F9B62}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{06005AD5-BA83-424F-8A9E-4D163693E24F}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{064C2BE1-F024-45A2-8293-E16DF2362D9C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{071FECB9-6DEA-4218-A347-FA2FFB730FA5}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{074206A6-6F7C-476D-8960-B63816552046}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{0C55518E-5748-4D0F-AD19-AE50670800B8}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{0C8FE0A6-661D-40E7-8A91-4D180723A586}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{1230471D-D482-469E-B4D3-D25266FEA555}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{12563785-BB47-42C1-A868-42DD5E1E8967}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{13E2DF36-5D1C-40AD-96F6-2A1F0D43A1D2}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{14D6F6C2-C7B7-473B-A983-3A41813D773D}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{158C674B-2A28-494E-B8E1-DF3656A98017}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{159A088F-C68E-4F53-B5FB-A7F9BBA62348}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{16181D20-7A2B-4773-B85F-B2F9D6F02EAB}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{1CBC664F-37C1-4525-B402-082A817BC02C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{1DB502B9-F1FE-4816-A226-F2E9DF0833ED}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{1E903453-F73C-44C5-A056-87641B468100}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{1EBADD03-04DB-4E9B-9A20-51B2255C7143}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{1F37C874-1690-48BF-B2FE-2D897F636F42}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{1F757967-0DE9-4FDA-BEE4-2438DF204FCF}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{21619337-3714-4930-AF33-42E1B32836F5}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{21CCC449-C128-43B2-B242-615850F5C1FF}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{22AC9365-0153-4A9E-ACF9-87411D3D7A19}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{26C3ABE0-DDE2-4F5B-BB2F-60B8B8723CB2}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{2703C81F-4C88-41AE-B700-EBE0C344A62E}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{271ABFDA-0333-4A53-B730-D354F8C878CA}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{2CF9BECE-9E47-4342-8255-D569CDA611F4}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{32F5B852-A762-4308-BEE8-64EC95F4B414}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{336CCBC4-CDA0-47AD-B012-10F5C768EDFD}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{34D4FA8D-AEAC-4E87-A285-4C6C74296A56}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{350E273B-5950-40AF-A459-48599EE33C8E}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{35F04AEF-75D7-4CFD-BFC7-C269CC907275}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{35F9C07A-03C9-4BEA-9DEF-24FA83108013}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{36132EE4-3229-4052-8041-60017ED656CD}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{367CE9EC-8D7C-440F-8BA2-BD3E0676EE99}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{36CECB80-43E7-460A-BDEA-DD39E130E91A}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{390D9B93-6DB9-4993-8F2D-743FA11BFF93}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{3A4C5557-3E6A-4656-8ECB-8048BBDF4E10}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{3B0D76AA-2C7C-4693-84AA-2231FA849972}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{3C14FB3C-A444-4F37-92A1-39BBB9AEE858}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{3C530788-5143-4A1D-A2ED-3EE027249DCD}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{3E3501AB-2598-4E78-9C9E-774149A73586}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4049F244-00B8-4903-B0A1-62022DB99415}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{411B8548-9E1E-45D5-AA27-985FC68940A8}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{47AAE83D-EB5B-4595-A67B-BB2553FC2FD2}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{48700BFA-D43C-4713-86F0-73DF66DD00DB}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4A458BDA-721F-4D4E-AADE-C05FBED2789D}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4BB61CA5-72F9-4AC1-8C21-8676B843B3DB}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4C197C62-12CF-47FA-B063-B37FA4DA9DDB}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4C28AB84-509C-4F4A-A9AD-21CA88EB910A}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4C611BF1-56B4-490B-96CD-A1441584FD18}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4D34028D-2F3D-4040-88F5-0A0B7A18B8C2}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4E9C2708-4D03-4966-8084-FD7FFC166E82}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{4F46FF0B-60FE-451B-BE7C-0A662B63F40C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{514E2B97-816B-4AFD-9D10-F8FEF6A6EBC1}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{518EBBC3-6CBB-434E-A930-C87812D594DB}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{54CB36F0-2D81-4838-A7BC-983E666EBAD9}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{564EAD46-C0F9-463E-863A-2DDF3EBAAB42}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{5925C3FE-DEDE-4BCD-9A50-A43DEA9BCBAF}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{5C4FAD6E-15A6-49B0-8D4F-34F346299710}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{5C64DB0C-DA77-493C-83B7-66064114D72E}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{5DEFEC15-282D-4AA2-9B83-BD89070E782F}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{5E0B0518-A3BA-47ED-8E24-55533B13B9D5}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{5F2B2E15-69CD-43BD-B6C3-D14362D8633B}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{5F7F5B54-B43A-4B64-9710-5ACAA3AB3AE9}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{609AA60B-FD24-4C9B-8C7B-848F736853D1}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{61C5D266-EB34-4F21-B403-2747D2848137}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{62EF6FC9-C656-49EE-BC42-61C689FD4AFC}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{64D1E139-53C6-49C4-B483-927252A6A3F1}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{65A69A40-5134-48B1-8E64-00EAB5E8C7CC}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{65D6558F-6083-4682-A8CB-32F729283FF8}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{6898BE07-B96E-4AF0-ABAC-133F5F81A4AF}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{69495BEA-6E29-4C72-B5FA-21E6A29A57DB}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{6978106A-4DD8-4396-9AEC-C48DD07F363C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{69C225C8-3A12-42AF-A5B1-9F6E3416CF0F}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{6A9294C5-CD47-4DF8-84C9-A67AFCCFD405}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{6B1422AF-73EC-492C-8560-B496397DE925}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{6D11D6D9-A392-40F8-9263-23DEE53CC1B0}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{6E1202FB-CA2A-40EC-A06D-C93D7C6D0049}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{70D53E4D-4D3B-475C-9B18-B2C8B0BD0B07}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{71B30DB1-EFAE-4231-A5F4-A07F76AF5967}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{72483CB9-9079-45E9-85BC-62474F6E3850}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{746701D7-E0A2-4F53-9E52-41D9431B4D06}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{76220D74-74F7-44C2-8FA3-D5C7BBE8CF81}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{76252D23-123C-4F4B-86C6-2A80787191CE}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{77CACAF3-0E39-4E23-A498-D15F90E32256}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{77EF5458-0EA3-4B78-989B-1C2FE2C5E7C1}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{793CB1E6-5A82-474C-A402-FC0D68DF1FDC}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{7A2D5997-B64B-4952-8737-36841AFA0325}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{7A3DBBBE-016E-4BBB-BDFF-B813A806C413}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{7A8C49D4-2214-4979-AA7E-7BEDC9D39512}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{80B474F5-F74A-4CD6-A4AB-2CE82064C852}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{8209860E-ECB4-4866-93D5-BCA5C02E67A7}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{8251CCDC-C725-4E8F-B698-E7478642AF04}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{839706B0-5E9C-4B23-B51A-8094D0907E30}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{86747618-2CFD-497D-A684-B25342B10736}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{86B24EEF-B09E-46C8-A708-63B729B86E36}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{8707D533-0A47-480E-923F-79537A0BA2E8}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{8770BBF8-65EE-42C8-9EBE-FD6BE06869ED}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{89D104F2-CD8E-464E-8867-509BFCDAB126}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{8A3E9C21-8125-4EDA-B4AA-ADE582697D0D}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{8BF32FDD-7B30-43FD-85F7-FDACB6156F09}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{8FEFE5BB-EFB6-45A0-A0EC-067A6503EA7B}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{90ECAA28-EE5E-40D2-9B09-13BFCAD3C28F}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{9166BD02-79FF-4DFC-9DC3-A2B5E4A0EDB5}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{916FC96D-E362-40EA-A6F1-AFCE11D5A958}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{91B70E0C-C554-4BE7-BB5A-131518CCA1FC}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{92C965AE-4D58-4228-8C35-15FBE90C07E2}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{934B48DC-3264-466F-B511-C2E21B43C82F}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{935C32DA-D9A6-4AF9-8263-AC43FDB85488}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{93FD2E3C-3A06-45C4-924C-9ADD000F92C8}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{94808F85-088F-4973-B035-6CE2B5E8A3DF}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{956996C4-F294-410A-B059-4B878CCDE9D9}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{9607F092-3173-42D2-8450-0ACEEEEBD72A}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{968385D5-E892-4D44-9B6F-398A130A9C40}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{99379504-C422-422C-B377-F883AB7B9DA4}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{9C1981A3-826A-4BDB-9B60-975B82B41783}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{9C8D8C83-49A5-498C-BF5F-97CBD8551F07}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{9F10422A-DA58-4180-9389-CDB769563FD0}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A067CF3D-C05B-498A-B49B-115F040EAF55}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A0D492E1-8735-4900-A7E3-FA7C2502B2D6}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A30B083F-506F-491F-AC7B-B5D930AEA510}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A4818EF2-E5A9-43BD-9CB7-F2ACAFAC1B48}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A4E62BD9-D6DA-4EFE-B894-57BC354745F1}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A56E6346-C668-4A28-BC5E-3F49E5167FCC}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A60BFEBF-EAB0-42CB-B7EA-71B76CD3C2A8}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A66347DB-06DE-4A9A-BE10-C0C9583C282D}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A6E9C054-DFB3-4E7D-924B-2B66323811C5}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A718C2DC-6F41-44F2-89BB-A1A6C3788DA5}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A808105C-692D-495E-8A07-B02484F75E40}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{A88F549E-BB80-428C-858C-408589E0CBE2}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AA1EBA07-215B-4B51-B3FF-FB0507C30782}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AA6762DC-8FB9-4B94-BA38-F4FDB9AF71DD}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AC192370-6697-440A-9731-ED7EC07FA1CC}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AC640E8A-035E-40DE-9C5D-A0CB6F77DCC1}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{ACAB4D78-FA2B-4B30-8400-53795D3CD80A}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AD9F6D73-33D9-4193-B179-9BDCF6216E34}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{ADCB3133-84AC-47F5-9CF1-90F69AAD1BF2}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AE195D67-882D-4F5F-82C4-A7AAE1A3B801}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AED4A15C-CB68-411E-9DBD-F34B426DA01E}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AEE4C508-E6C0-4267-8C64-F0E8EF065233}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AF1E730B-D58B-45FA-9101-96560E751C21}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AF20735E-51F3-4B5B-BF50-011977F48542}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{AFAF5BA4-9B52-4E7C-BDF7-BFF178DD9553}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B0EAB0FE-595F-4250-A32D-2B22E9087F38}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B17094B3-CACC-44AA-9A62-F4EAE20EC351}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B20C987B-78C2-4CF3-B551-CD732B21F406}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B29B9C23-B09C-4853-95BA-0DE713C83E0D}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B2C93D7F-1687-4159-A07F-98290602D228}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B502B600-E983-43EB-BF84-E9794A2B6876}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B52A4F1C-AF70-407F-81F6-230F244EA1FC}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B56BC7C6-1BE6-4967-B0CD-F88F802566A0}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B9835B9B-FE13-49F3-B948-88E31A8277FE}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{B9B61B81-F8E7-4BEF-B880-CA1BBEDF0AB8}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BB3C8905-BF67-4901-A8CF-05076E1EA4C9}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BC532242-C046-4C7A-A993-480ACC19C003}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BC880E54-6A34-4F9A-83BE-6DFD899FA39E}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BCBA14F6-E48E-4944-AB55-574D413B08C8}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BD0531B9-13EB-4213-AB2C-C65B91D721D6}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BDC97722-69F8-43B9-962F-B7F3C6E955E4}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BE95DFEA-2811-4157-964D-F628099F17C0}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BF441D6E-33D9-4F1D-B893-33B3B93CE580}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{BFFA17CB-6B33-4381-B428-E4CF289F476D}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{C0A11232-3F19-4F85-976A-B6F4B3CDF9D9}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{C0CB2163-7E99-4A43-BB30-125CFB89461C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{C29E154B-86CD-4BBB-96AC-E5BAD27974E6}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{C314FBA9-A44A-429F-8139-7096B4C53431}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{C6265DD7-B7DD-4BFE-9F5E-C34DAEEC51D4}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{C77D9C4A-3D16-4A76-86AA-08D186C387D9}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{C9274AE4-8082-4ED5-A9FF-3EA61E3947FD}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{CA296BEE-69E1-4C76-AF9A-8B6BBE789BDF}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{CB64B6E3-8FDB-439D-9E49-F3E5EAD36F59}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{CC28B447-7B01-45C4-9E31-4BFAB80FAF32}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{CCA57961-8DF3-47AB-ADC1-C11B4C9DCF82}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{CD8DBC91-BA23-4054-875C-CF7E4D752C26}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{CF5140C7-34D1-4C4F-8C57-AAC4B793693B}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{CF7B0DD4-1317-40CF-B0DD-8813343D4E8E}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{D05228DA-130D-4010-BA65-1CA5C4BFE6A0}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{D18DA142-9904-4B13-A16F-9B5EEE4BB29C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{D219271E-57EC-47C3-B179-12290309523B}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{D5BA3926-F368-4949-9658-6262AB715551}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{D663E4B2-BD36-4ADE-BB8D-AC3635C3608F}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{D7CC5CF0-D36B-4D5D-97DD-33365759F38A}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{DB181647-2F68-4D79-8553-ECE32E3C0D34}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{DC1F6FF6-D93A-4F37-A953-224436027D3D}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{DE2C12C7-B578-48BA-8D43-3A89F1D0B807}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{DF6E5B22-994F-49E7-927D-FA4324E035D6}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{E55CFE10-83F3-44AB-BB1F-32BA682D40EB}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{E5E10A9F-7FD4-4E61-8733-E2287C4AD334}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{E89B63E4-F30C-4251-AC90-2D83943BE21C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{E9CFFB90-2A7D-4DD5-91D3-9355FF4A32FD}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{ED25EF9D-ACB4-46B7-8A9F-7DA79ADD1824}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{EE5AD87D-4CED-4E7C-8ECD-7D089BCBE872}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{EF680D2A-93BC-4F2C-AF5B-4AE03507B890}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{EFBD7431-FFC0-4F4D-972E-3E00FCD77FFE}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F0509061-4BE8-4476-A1C1-6199537EB92A}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F061E16E-4D5E-4B53-A340-21716C1088CE}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F3695DEC-E615-4AE5-BFBE-6404A1B8C3B5}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F4651C94-6087-4928-9D8B-AB9990B67BBD}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F54FD517-26A8-4319-BBF2-691161A17C43}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F583AB24-3914-46DF-89AE-75B0179493A9}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F5BD7F1F-A87E-4DB3-BE81-C8C965409D33}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F5FBA550-764A-4939-BC56-95E04DB1B9D6}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F7F3B35B-8AA6-47AE-AE83-C66F173FF20B}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F963B2E5-4E3D-4A08-B869-794C1C22F35C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F9695C18-3F44-4FD4-B31A-F6E63A1F2E59}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{F9D140C9-C1DB-4DF4-B6CC-5E6E4CF9E82C}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{FBF4901F-A2FB-4853-89B3-9E237659E1B5}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{FC2AF0ED-86CC-4812-AE6A-73DEA4AB455D}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{FD7556B8-13D1-415E-A8D2-65FC0050FF9A}

Successfully deleted: [Empty Folder] C:\Users\Pessoal\appdata\local\{FDFCB87C-BC14-40D5-8FE1-D021C2BE1C0B}

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 01/07/2013 at 20:34:20,30

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Compartilhar este post


Link para o post
Compartilhar em outros sites

log após verificação

# AdwCleaner v2.303 - Relatório criado em 01/07/2013 às 21:00:47

# Atualizado em 08/06/2013 por Xplode

# Sistema Operacional : Windows 7 Home Premium Service Pack 1 (64 bits)

# Usuário : Pessoal - ANACLARA-PC

# Modo de Boot : Modo Seguro com Rede

# Executado de : C:\Users\Pessoal\Desktop\AdwCleaner.exe

# Opção [Verificar]

***** [serviços] *****

***** [Arquivos/Pastas] *****

Arquivo Encontrado : C:\user.js

Arquivo Encontrado : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\searchplugins\Conduit.xml

Pasta Encontrado : C:\Program Files (x86)\Ask.com

Pasta Encontrado : C:\Program Files (x86)\Desk 365

Pasta Encontrado : C:\ProgramData\eSafe

Pasta Encontrado : C:\Users\Pessoal\AppData\Local\APN

Pasta Encontrado : C:\Users\Pessoal\AppData\LocalLow\AskToolbar

Pasta Encontrado : C:\Users\Pessoal\AppData\Roaming\Desk 365

Pasta Encontrado : C:\Users\Pessoal\AppData\Roaming\eIntaller

Pasta Encontrado : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\ConduitCommon

Pasta Encontrado : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\CT2233703

Pasta Encontrado : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\CT2851643

Pasta Encontrado : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}

Pasta Encontrado : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\extensions\{e0301295-ab3e-4af3-979f-3d453c5f9f48}

Pasta Encontrado : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registro] *****

Chave Encontrada : HKCU\Software\APN

Chave Encontrada : HKCU\Software\AutocompleteProBHO

Chave Encontrada : HKCU\Software\InstallCore

Chave Encontrada : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}

Chave Encontrada : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Chave Encontrada : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}

Chave Encontrada : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Chave Encontrada : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}

Chave Encontrada : HKCU\Software\V9

Chave Encontrada : HKLM\Software\APN

Chave Encontrada : HKLM\Software\AskToolbar

Chave Encontrada : HKLM\Software\BFlix

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\{13C8734A-1AD2-4500-9F65-10D99AD80F54}

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\Iminent.MMServer.EXE

Chave Encontrada : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.DLL

Chave Encontrada : HKLM\SOFTWARE\Classes\IminentMMServer.ACPlayer

Chave Encontrada : HKLM\SOFTWARE\Classes\IminentMMServer.ACPlayer.1

Chave Encontrada : HKLM\SOFTWARE\Classes\IminentWebBooster.Web2IMBHandler

Chave Encontrada : HKLM\SOFTWARE\Classes\IminentWebBooster.Web2IMBHandler.1

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{425F621C-217C-40AD-B22F-4EFCFF452800}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}

Chave Encontrada : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}

Chave Encontrada : HKLM\Software\Desksvc

Chave Encontrada : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32

Chave Encontrada : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS

Chave Encontrada : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32

Chave Encontrada : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS

Chave Encontrada : HKLM\Software\portaldositesSoftware

Chave Encontrada : HKLM\Software\V9

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{01BB6254-5E89-4C53-BEF1-4D1656B09B86}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8E948448-E97B-4864-8177-546200709672}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{913FAA37-8CDB-4144-9047-E2A950CD967E}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A93B530D-2B18-48C7-9F3C-281679403372}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{913FAA37-8CDB-4144-9047-E2A950CD967E}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cfd485f0-96bd-47cd-bb6d-cd7dda95f102}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}

Chave Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{913FAA37-8CDB-4144-9047-E2A950CD967E}

Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}

Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Chave Encontrada : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Chave Encontrada : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Chave Encontrada : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

Dados Encontrada : HKLM\...\StartMenuInternet\FIREFOX.EXE [(Default)] = C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\firefox.exe hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

Dados Encontrada : HKLM\...\StartMenuInternet\Google Chrome [(Default)] = "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

Valor Encontrada : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [support@predictad.com]

Valor Encontrada : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Navegadores] *****

-\\ Internet Explorer v10.0.9200.16611

[HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

[HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

[HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

[HKCU\Software\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=43168&st=bs&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&q=%s

[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=43168&st=bs&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&q=%s

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q=

-\\ Mozilla Firefox v8.0 (pt-BR)

Arquivo : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\prefs.js

Encontrada : user_pref("CT2233703..clientLogIsEnabled", false);

Encontrada : user_pref("CT2233703..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]

Encontrada : user_pref("CT2233703..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]

Encontrada : user_pref("CT2233703.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Encontrada : user_pref("CT2233703.BrowserCompStateIsOpen_1000515", true);

Encontrada : user_pref("CT2233703.BrowserCompStateIsOpen_129575152550744596", true);

Encontrada : user_pref("CT2233703.BrowserCompStateIsOpen_1308308482930860462", true);

Encontrada : user_pref("CT2233703.CT2233703", "CT2233703");

Encontrada : user_pref("CT2233703.CommunitiesChangesLastCheckTime", "0");

Encontrada : user_pref("CT2233703.CurrentServerDate", "24-8-2011");

Encontrada : user_pref("CT2233703.DialogsAlignMode", "LTR");

Encontrada : user_pref("CT2233703.DialogsGetterLastCheckTime", "Tue Aug 23 2011 20:03:52 GMT-0300 (Hora oficial d[...]

Encontrada : user_pref("CT2233703.DownloadReferralCookieData", "");

Encontrada : user_pref("CT2233703.EMailNotifierPollDate", "Tue Aug 23 2011 22:35:43 GMT-0300 (Hora oficial do Bra[...]

Encontrada : user_pref("CT2233703.FirstServerDate", "24-8-2011");

Encontrada : user_pref("CT2233703.FirstTime", true);

Encontrada : user_pref("CT2233703.FirstTimeFF3", true);

Encontrada : user_pref("CT2233703.FixPageNotFoundErrors", true);

Encontrada : user_pref("CT2233703.GroupingInvalidateCache", false);

Encontrada : user_pref("CT2233703.GroupingLastCheckTime", "0");

Encontrada : user_pref("CT2233703.GroupingLastServerUpdateTime", "0");

Encontrada : user_pref("CT2233703.GroupingServerCheckInterval", 1440);

Encontrada : user_pref("CT2233703.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Encontrada : user_pref("CT2233703.HasUserGlobalKeys", true);

Encontrada : user_pref("CT2233703.HomePageProtectorEnabled", true);

Encontrada : user_pref("CT2233703.Initialize", true);

Encontrada : user_pref("CT2233703.InitializeCommonPrefs", true);

Encontrada : user_pref("CT2233703.InstallationAndCookieDataSentCount", 1);

Encontrada : user_pref("CT2233703.InstallationType", "Unknown");

Encontrada : user_pref("CT2233703.InstalledDate", "Tue Aug 23 2011 20:03:59 GMT-0300 (Hora oficial do Brasil)");

Encontrada : user_pref("CT2233703.InvalidateCache", false);

Encontrada : user_pref("CT2233703.IsAlertDBUpdated", true);

Encontrada : user_pref("CT2233703.IsGrouping", false);

Encontrada : user_pref("CT2233703.IsInitSetupIni", true);

Encontrada : user_pref("CT2233703.IsMulticommunity", false);

Encontrada : user_pref("CT2233703.IsOpenThankYouPage", true);

Encontrada : user_pref("CT2233703.IsOpenUninstallPage", true);

Encontrada : user_pref("CT2233703.IsProtectorsInit", true);

Encontrada : user_pref("CT2233703.LanguagePackLastCheckTime", "Tue Aug 23 2011 20:03:59 GMT-0300 (Hora oficial do[...]

Encontrada : user_pref("CT2233703.LanguagePackReloadIntervalMM", 1440);

Encontrada : user_pref("CT2233703.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]

Encontrada : user_pref("CT2233703.LastLogin_3.6.0.10", "Tue Aug 23 2011 20:03:52 GMT-0300 (Hora oficial do Brasil[...]

Encontrada : user_pref("CT2233703.LatestVersion", "3.6.0.10");

Encontrada : user_pref("CT2233703.Locale", "en");

Encontrada : user_pref("CT2233703.MCDetectTooltipHeight", "83");

Encontrada : user_pref("CT2233703.MCDetectTooltipShow", false);

Encontrada : user_pref("CT2233703.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Encontrada : user_pref("CT2233703.MCDetectTooltipWidth", "295");

Encontrada : user_pref("CT2233703.MyStuffEnabledAtInstallation", true);

Encontrada : user_pref("CT2233703.OriginalFirstVersion", "3.6.0.10");

Encontrada : user_pref("CT2233703.RadioIsPodcast", false);

Encontrada : user_pref("CT2233703.RadioLastCheckTime", "Tue Aug 23 2011 22:37:42 GMT-0300 (Hora oficial do Brasil[...]

Encontrada : user_pref("CT2233703.RadioLastUpdateIPServer", "0");

Encontrada : user_pref("CT2233703.RadioMediaID", "11027882");

Encontrada : user_pref("CT2233703.RadioMediaType", "Media Player");

Encontrada : user_pref("CT2233703.RadioMenuSelectedID", "EBRadioMenu_CT223370311027882");

Encontrada : user_pref("CT2233703.RadioShrinkedFromSetup", false);

Encontrada : user_pref("CT2233703.RadioStationName", "DANCE%20radio");

Encontrada : user_pref("CT2233703.RadioStationURL", "hxxp://www.abradio.cz/asx/danceradio32.asx");

Encontrada : user_pref("CT2233703.SavedHomepage", "hxxp://www.google.com.br/");

Encontrada : user_pref("CT2233703.SearchEngineBeforeUnload", "4shared.com Customized Web Search");

Encontrada : user_pref("CT2233703.SearchFromAddressBarIsInit", true);

Encontrada : user_pref("CT2233703.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT223[...]

Encontrada : user_pref("CT2233703.SearchInNewTabEnabled", true);

Encontrada : user_pref("CT2233703.SearchInNewTabIntervalMM", 1440);

Encontrada : user_pref("CT2233703.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 20:03:57 GMT-0300 (Hora oficial [...]

Encontrada : user_pref("CT2233703.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]

Encontrada : user_pref("CT2233703.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]

Encontrada : user_pref("CT2233703.SearchProtectorEnabled", true);

Encontrada : user_pref("CT2233703.SearchProtectorToolbarDisabled", true);

Encontrada : user_pref("CT2233703.ServiceMapLastCheckTime", "Tue Aug 23 2011 20:03:47 GMT-0300 (Hora oficial do B[...]

Encontrada : user_pref("CT2233703.SettingsLastCheckTime", "Tue Aug 23 2011 22:37:37 GMT-0300 (Hora oficial do Bra[...]

Encontrada : user_pref("CT2233703.SettingsLastUpdate", "1314014773");

Encontrada : user_pref("CT2233703.ThirdPartyComponentsInterval", 504);

Encontrada : user_pref("CT2233703.ThirdPartyComponentsLastCheck", "Tue Aug 23 2011 20:03:47 GMT-0300 (Hora oficia[...]

Encontrada : user_pref("CT2233703.ThirdPartyComponentsLastUpdate", "1246786978");

Encontrada : user_pref("CT2233703.ToolbarDisabled", true);

Encontrada : user_pref("CT2233703.ToolbarShrinkedFromSetup", false);

Encontrada : user_pref("CT2233703.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2233703");

Encontrada : user_pref("CT2233703.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]

Encontrada : user_pref("CT2233703.UserID", "UN68542659388745326");

Encontrada : user_pref("CT2233703.WeatherNetwork", "");

Encontrada : user_pref("CT2233703.WeatherPollDate", "Tue Aug 23 2011 22:35:45 GMT-0300 (Hora oficial do Brasil)")[...]

Encontrada : user_pref("CT2233703.WeatherUnit", "C");

Encontrada : user_pref("CT2233703.alertChannelId", "631527");

Encontrada : user_pref("CT2233703.approveUntrustedApps", false);

Encontrada : user_pref("CT2233703.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D4[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7ex305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e.:2z527", "247E706A73744345343D4436387E4A3F422F77317D7C207[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e06cg5el8:", "6E6D706E727075716E71");

Encontrada : user_pref("CT2233703.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473767478767B777477242F4B4947[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347474[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e8x305", "247E3441402B327844393C29712B7A7C207D3027324740434[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]

Encontrada : user_pref("CT2233703.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215[...]

Encontrada : user_pref("CT2233703.backendstorage./9b-0?3g>d", "6F6F3B6C6B7441417A44447A7220774C4A4A252323247D2A7E[...]

Encontrada : user_pref("CT2233703.backendstorage./9b-0?3g@6:5;", "");

Encontrada : user_pref("CT2233703.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E424[...]

Encontrada : user_pref("CT2233703.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "676A6D7273747576");

Encontrada : user_pref("CT2233703.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484777213F3E484F4E4D464[...]

Encontrada : user_pref("CT2233703.backendstorage./9b5ba==9cjag", "693C713C737070747A7245457B75777A7B4D205020");

Encontrada : user_pref("CT2233703.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D706E727075707375777576");

Encontrada : user_pref("CT2233703.backendstorage./9b9643g3/9e", "6A");

Encontrada : user_pref("CT2233703.backendstorage./9b<:222h64<", "393F352F3E");

Encontrada : user_pref("CT2233703.backendstorage./9b=+03eh8h8j?:", "4443");

Encontrada : user_pref("CT2233703.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]

Encontrada : user_pref("CT2233703.backendstorage./9b?b0d:8aj62<h", "6D");

Encontrada : user_pref("CT2233703.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");

Encontrada : user_pref("CT2233703.components.1000034", false);

Encontrada : user_pref("CT2233703.components.1000082", false);

Encontrada : user_pref("CT2233703.components.1000515", false);

Encontrada : user_pref("CT2233703.components.129018176144925716", false);

Encontrada : user_pref("CT2233703.components.129115936916398172", false);

Encontrada : user_pref("CT2233703.components.129212710531499469", false);

Encontrada : user_pref("CT2233703.components.129575152550744596", false);

Encontrada : user_pref("CT2233703.components.1308308482930860462", false);

Encontrada : user_pref("CT2233703.components.5174646587324121019", false);

Encontrada : user_pref("CT2233703.components.7020432453048141244", false);

Encontrada : user_pref("CT2233703.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]

Encontrada : user_pref("CT2233703.globalFirstTimeInfoLastCheckTime", "Tue Aug 23 2011 20:03:53 GMT-0300 (Hora ofi[...]

Encontrada : user_pref("CT2233703.homepageProtectorEnableByLogin", true);

Encontrada : user_pref("CT2233703.initDone", true);

Encontrada : user_pref("CT2233703.isAppTrackingManagerOn", true);

Encontrada : user_pref("CT2233703.isFirstRadioInstallation", false);

Encontrada : user_pref("CT2233703.myStuffEnabled", true);

Encontrada : user_pref("CT2233703.myStuffPublihserMinWidth", 400);

Encontrada : user_pref("CT2233703.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]

Encontrada : user_pref("CT2233703.myStuffServiceIntervalMM", 1440);

Encontrada : user_pref("CT2233703.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]

Encontrada : user_pref("CT2233703.searchProtectorDialogDelayInSec", 10);

Encontrada : user_pref("CT2233703.searchProtectorEnableByLogin", true);

Encontrada : user_pref("CT2233703.testingCtid", "");

Encontrada : user_pref("CT2233703.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 20:03:51 GMT-0300 (Hora ofic[...]

Encontrada : user_pref("CT2233703.toolbarContextMenuLastCheckTime", "Tue Aug 23 2011 20:03:58 GMT-0300 (Hora ofic[...]

Encontrada : user_pref("CT2233703.usagesFlag", 2);

Encontrada : user_pref("CT2851643..clientLogIsEnabled", false);

Encontrada : user_pref("CT2851643..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]

Encontrada : user_pref("CT2851643..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]

Encontrada : user_pref("CT2851643.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

Encontrada : user_pref("CT2851643.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Encontrada : user_pref("CT2851643.AppTrackingLastCheckTime", "Mon Jan 30 2012 17:46:16 GMT-0200");

Encontrada : user_pref("CT2851643.BrowserCompStateIsOpen_130056798614995770", true);

Encontrada : user_pref("CT2851643.BrowserCompStateIsOpen_1359634298000", true);

Encontrada : user_pref("CT2851643.CTID", "CT2851643");

Encontrada : user_pref("CT2851643.CurrentServerDate", "3-5-2013");

Encontrada : user_pref("CT2851643.DialogsAlignMode", "LTR");

Encontrada : user_pref("CT2851643.DialogsGetterLastCheckTime", "Fri May 03 2013 13:53:46 GMT-0300 (Hora oficial d[...]

Encontrada : user_pref("CT2851643.DownloadReferralCookieData", "");

Encontrada : user_pref("CT2851643.EMailNotifierPollDate", "Fri Nov 25 2011 19:52:43 GMT-0200");

Encontrada : user_pref("CT2851643.FeedLastCount1733423638652034402", 538);

Encontrada : user_pref("CT2851643.FeedPollDate129351530881212974", "Wed Feb 16 2011 17:30:14 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881212980", "Wed Feb 16 2011 17:30:14 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881212986", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881212992", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881212998", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881213004", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881213010", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881213016", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881213022", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881213028", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedPollDate129351530881213034", "Wed Feb 16 2011 17:30:15 GMT-0200");

Encontrada : user_pref("CT2851643.FeedTTL129351530881212974", 10);

Encontrada : user_pref("CT2851643.FeedTTL129351530881212998", 15);

Encontrada : user_pref("CT2851643.FeedTTL129351530881213010", 5);

Encontrada : user_pref("CT2851643.FeedTTL129351530881213022", 5);

Encontrada : user_pref("CT2851643.FirstServerDate", "26-1-2011");

Encontrada : user_pref("CT2851643.FirstTime", true);

Encontrada : user_pref("CT2851643.FirstTimeFF3", true);

Encontrada : user_pref("CT2851643.FixPageNotFoundErrors", true);

Encontrada : user_pref("CT2851643.GroupingServerCheckInterval", 1440);

Encontrada : user_pref("CT2851643.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Encontrada : user_pref("CT2851643.HasUserGlobalKeys", true);

Encontrada : user_pref("CT2851643.HomePageProtectorEnabled", false);

Encontrada : user_pref("CT2851643.Initialize", true);

Encontrada : user_pref("CT2851643.InitializeCommonPrefs", true);

Encontrada : user_pref("CT2851643.InstallationAndCookieDataSentCount", 3);

Encontrada : user_pref("CT2851643.InstalledDate", "Wed Jan 26 2011 14:30:50 GMT-0200");

Encontrada : user_pref("CT2851643.IsAlertDBUpdated", true);

Encontrada : user_pref("CT2851643.IsGrouping", false);

Encontrada : user_pref("CT2851643.IsMulticommunity", false);

Encontrada : user_pref("CT2851643.IsOpenThankYouPage", true);

Encontrada : user_pref("CT2851643.IsOpenUninstallPage", true);

Encontrada : user_pref("CT2851643.LanguagePackLastCheckTime", "Fri May 03 2013 13:53:55 GMT-0300 (Hora oficial do[...]

Encontrada : user_pref("CT2851643.LanguagePackReloadIntervalMM", 1440);

Encontrada : user_pref("CT2851643.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]

Encontrada : user_pref("CT2851643.LastLogin_3.10.0.1", "Wed Mar 06 2013 08:48:54 GMT-0300 (Hora oficial do Brasil[...]

Encontrada : user_pref("CT2851643.LastLogin_3.18.0.7", "Fri May 03 2013 13:53:49 GMT-0300 (Hora oficial do Brasil[...]

Encontrada : user_pref("CT2851643.LastLogin_3.2.5.2", "Mon Mar 21 2011 20:22:41 GMT-0300 (Hora oficial do Brasil)[...]

Encontrada : user_pref("CT2851643.LastLogin_3.3.3.2", "Tue Jun 21 2011 17:58:28 GMT-0300 (Hora oficial do Brasil)[...]

Encontrada : user_pref("CT2851643.LastLogin_3.5.0.12", "Tue Aug 02 2011 17:13:26 GMT-0300 (Hora oficial do Brasil[...]

Encontrada : user_pref("CT2851643.LastLogin_3.6.0.10", "Fri Sep 23 2011 19:46:58 GMT-0300 (Hora oficial do Brasil[...]

Encontrada : user_pref("CT2851643.LastLogin_3.7.0.6", "Tue Nov 08 2011 19:24:08 GMT-0200");

Encontrada : user_pref("CT2851643.LastLogin_3.8.0.8", "Mon Dec 05 2011 09:40:19 GMT-0200");

Encontrada : user_pref("CT2851643.LastLogin_3.8.1.0", "Sun Jan 22 2012 16:40:30 GMT-0200");

Encontrada : user_pref("CT2851643.LastLogin_3.9.0.3", "Tue Apr 17 2012 07:23:40 GMT-0300 (Hora oficial do Brasil)[...]

Encontrada : user_pref("CT2851643.LatestVersion", "3.18.0.7");

Encontrada : user_pref("CT2851643.Locale", "pt");

Encontrada : user_pref("CT2851643.MCDetectTooltipHeight", "83");

Encontrada : user_pref("CT2851643.MCDetectTooltipShow", false);

Encontrada : user_pref("CT2851643.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Encontrada : user_pref("CT2851643.MCDetectTooltipWidth", "295");

Encontrada : user_pref("CT2851643.MyStuffEnabledAtInstallation", true);

Encontrada : user_pref("CT2851643.SHRINK_TOOLBAR", 1);

Encontrada : user_pref("CT2851643.SearchBoxWidth", 462);

Encontrada : user_pref("CT2851643.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");

Encontrada : user_pref("CT2851643.SearchFromAddressBarIsInit", true);

Encontrada : user_pref("CT2851643.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT285[...]

Encontrada : user_pref("CT2851643.SearchInNewTabEnabled", true);

Encontrada : user_pref("CT2851643.SearchInNewTabIntervalMM", 1440);

Encontrada : user_pref("CT2851643.SearchInNewTabLastCheckTime", "Fri May 03 2013 13:53:44 GMT-0300 (Hora oficial [...]

Encontrada : user_pref("CT2851643.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]

Encontrada : user_pref("CT2851643.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]

Encontrada : user_pref("CT2851643.SearchProtectorEnabled", false);

Encontrada : user_pref("CT2851643.SearchProtectorToolbarDisabled", false);

Encontrada : user_pref("CT2851643.ServiceMapLastCheckTime", "Fri May 03 2013 13:53:44 GMT-0300 (Hora oficial do B[...]

Encontrada : user_pref("CT2851643.SettingsLastCheckTime", "Fri May 03 2013 13:53:44 GMT-0300 (Hora oficial do Bra[...]

Encontrada : user_pref("CT2851643.SettingsLastUpdate", "1367568777");

Encontrada : user_pref("CT2851643.ThirdPartyComponentsInterval", 504);

Encontrada : user_pref("CT2851643.ThirdPartyComponentsLastCheck", "Fri May 03 2013 13:53:44 GMT-0300 (Hora oficia[...]

Encontrada : user_pref("CT2851643.ThirdPartyComponentsLastUpdate", "1331806008");

Encontrada : user_pref("CT2851643.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2851643");

Encontrada : user_pref("CT2851643.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]

Encontrada : user_pref("CT2851643.UserID", "UN93282510536799387");

Encontrada : user_pref("CT2851643.ValidationData_Search", 2);

Encontrada : user_pref("CT2851643.ValidationData_Toolbar", 2);

Encontrada : user_pref("CT2851643.WeatherNetwork", "");

Encontrada : user_pref("CT2851643.WeatherPollDate", "Fri May 03 2013 13:53:46 GMT-0300 (Hora oficial do Brasil)")[...]

Encontrada : user_pref("CT2851643.WeatherUnit", "C");

Encontrada : user_pref("CT2851643.alertChannelId", "1243677");

Encontrada : user_pref("CT2851643.approveUntrustedApps", false);

Encontrada : user_pref("CT2851643.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7ex305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e-x305", "247E29327641363937333545397E3F493B2F77317E2025203[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e.:2z527", "2423");

Encontrada : user_pref("CT2851643.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e06cg5el8:", "6E6D6B6B6D7474747178");

Encontrada : user_pref("CT2851643.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737171737A7A7A777E242F4B4947[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4B524B4[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]

Encontrada : user_pref("CT2851643.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934235[...]

Encontrada : user_pref("CT2851643.backendstorage./9b-0?3g>d", "3E69406E416B43747A4375754720484A7B4B257B2351222A7E[...]

Encontrada : user_pref("CT2851643.backendstorage./9b-0?3g@6:5;", "");

Encontrada : user_pref("CT2851643.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");

Encontrada : user_pref("CT2851643.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332[...]

Encontrada : user_pref("CT2851643.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");

Encontrada : user_pref("CT2851643.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484779213F3E484F4E4D464[...]

Encontrada : user_pref("CT2851643.backendstorage./9b5ba==9cjag", "6F6D3F6C6A7441427A784873494B754B497A504C7D");

Encontrada : user_pref("CT2851643.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6B6B6D7474747074797476");

Encontrada : user_pref("CT2851643.backendstorage./9b9643g3/9e", "6A");

Encontrada : user_pref("CT2851643.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");

Encontrada : user_pref("CT2851643.backendstorage./9b<:222h64<", "393F352F3E");

Encontrada : user_pref("CT2851643.backendstorage./9b<:222h64<l8daj", "6D70706F7674727977732A7A79727A77757E7C");

Encontrada : user_pref("CT2851643.backendstorage./9b=+03eh8h8j?:", "4443");

Encontrada : user_pref("CT2851643.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]

Encontrada : user_pref("CT2851643.backendstorage./9b?b0d:8aj62<h", "6D");

Encontrada : user_pref("CT2851643.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");

Encontrada : user_pref("CT2851643.backendstorage.cb_firstuse0100", "31");

Encontrada : user_pref("CT2851643.backendstorage.cbcountry_000", "4252");

Encontrada : user_pref("CT2851643.backendstorage.cbcountry_001", "4252");

Encontrada : user_pref("CT2851643.backendstorage.cbfirsttime", "5468752053657020323920323031312032313A33353A34312[...]

Encontrada : user_pref("CT2851643.backendstorage.enableinj", "");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_appsdata", "7B2261707073223A5B7B226964223A225072696365476[...]

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_appsdefaultenabled", "6E756C6C");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_appstate_pricegong", "6F6E");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_appstatereporttime", "31333637363031323731343138");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_configuration", "7B22636F6E66696775726174696F6E223A5B7B22[...]

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_currentversion", "312E342E342E36");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_first_time", "31");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_lastlogintime", "31333637363031323731383533");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_localization", "7B22676164676574436F6E74656E74506F6C69637[...]

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_settings1.4.3.1", "7B22537461747573223A227375636365656465[...]

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_settings1.4.3.2", "7B22537461747573223A227375636365656465[...]

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_settings1.4.4.6", "7B22537461747573223A227375636365656465[...]

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_showclosebutton", "74727565");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_showwelcomegadget", "66616C7365");

Encontrada : user_pref("CT2851643.backendstorage.mam_gk_userid", "63353261323463352D373062362D346635392D613463392[...]

Encontrada : user_pref("CT2851643.backendstorage.pairingkey", "33413935413443414132453335324444383533453644343435[...]

Encontrada : user_pref("CT2851643.backendstorage.pg_enable", "74727565");

Encontrada : user_pref("CT2851643.backendstorage.scriptsource", "687474703A2F2F3132372E302E302E313A31303030302F67[...]

Encontrada : user_pref("CT2851643.backendstorage.searchappstate", "32");

Encontrada : user_pref("CT2851643.backendstorage.searchapptracking", "73656E74");

Encontrada : user_pref("CT2851643.backendstorage.sf_just_installed", "46414C5345");

Encontrada : user_pref("CT2851643.backendstorage.sf_status", "454E41424C4544");

Encontrada : user_pref("CT2851643.backendstorage.sf_user_id", "6369645F33353230313331343135353336343134383831");

Encontrada : user_pref("CT2851643.backendstorage.url_history", "687474703A2F2F7777772E626172626163656E612E6D672E6[...]

Encontrada : user_pref("CT2851643.backendstorage.url_history0001", "687474703A2F2F70742E77696B6970656469612E6F726[...]

Encontrada : user_pref("CT2851643.backendstorage.url_history_time", "31333237393532373837333437");

Encontrada : user_pref("CT2851643.backendstorage.uttorrents", "7B226275696C64223A32303638332C226C6162656C223A5B5D[...]

Encontrada : user_pref("CT2851643.components.1000034", false);

Encontrada : user_pref("CT2851643.components.129422837839831266", false);

Encontrada : user_pref("CT2851643.components.1733423638652034402", false);

Encontrada : user_pref("CT2851643.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]

Encontrada : user_pref("CT2851643.globalFirstTimeInfoLastCheckTime", "Fri May 03 2013 13:53:46 GMT-0300 (Hora ofi[...]

Encontrada : user_pref("CT2851643.homepageProtectorEnableByLogin", true);

Encontrada : user_pref("CT2851643.initDone", true);

Encontrada : user_pref("CT2851643.isAppTrackingManagerOn", false);

Encontrada : user_pref("CT2851643.myStuffEnabled", true);

Encontrada : user_pref("CT2851643.myStuffPublihserMinWidth", 400);

Encontrada : user_pref("CT2851643.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]

Encontrada : user_pref("CT2851643.myStuffServiceIntervalMM", 1440);

Encontrada : user_pref("CT2851643.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]

Encontrada : user_pref("CT2851643.oldAppsList", "129351530870587943,129351530870900444,1000234,129351530871056696[...]

Encontrada : user_pref("CT2851643.revertSettingsEnabled", true);

Encontrada : user_pref("CT2851643.searchProtectorDialogDelayInSec", 10);

Encontrada : user_pref("CT2851643.searchProtectorEnableByLogin", true);

Encontrada : user_pref("CT2851643.testingCtid", "");

Encontrada : user_pref("CT2851643.toolbarAppMetaDataLastCheckTime", "Fri May 03 2013 13:53:45 GMT-0300 (Hora ofic[...]

Encontrada : user_pref("CT2851643.toolbarContextMenuLastCheckTime", "Fri May 03 2013 13:53:48 GMT-0300 (Hora ofic[...]

Encontrada : user_pref("CT2851643.usagesFlag", 2);

Encontrada : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2233703&Search[...]

Encontrada : user_pref("CommunityToolbar.ConduitSearchList", "4shared.com Customized Web Search");

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2851643/CT2851643[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1243677/1239350/BR", "\"0\"[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/631527/627389/BR", "\"0\"")[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/BR", "\"0\"")[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2233703", [...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2851643", [...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2233703",[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2851643",[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2233703&octid=[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2851643&octid=[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2851643/CT2851643[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]

Encontrada : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=pt", "\"63d[...]

Encontrada : user_pref("CommunityToolbar.EngineOwner", "");

Encontrada : user_pref("CommunityToolbar.EngineOwnerGuid", "{e0301295-ab3e-4af3-979f-3d453c5f9f48}");

Encontrada : user_pref("CommunityToolbar.EngineOwnerToolbarId", "utorrentbar_pt");

Encontrada : user_pref("CommunityToolbar.IsEngineShown", true);

Encontrada : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);

Encontrada : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Pessoal\\AppData\\Roaming\\Mozilla\[...]

Encontrada : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");

Encontrada : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://cdn.triplegames.com/shared/apps/gamearcade/ar[...]

Encontrada : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://youtube.conduitapps.com/v115/gadget.php?appMo[...]

Encontrada : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2851643");

Encontrada : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{e0301295-ab3e-4af3-979f-3d453c5f9f48}");

Encontrada : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar_pt");

Encontrada : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");

Encontrada : user_pref("CommunityToolbar.ToolbarsList", "CT2851643,CT2233703");

Encontrada : user_pref("CommunityToolbar.ToolbarsList2", "CT2851643,CT2233703");

Encontrada : user_pref("CommunityToolbar.ToolbarsList4", "CT2233703");

Encontrada : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue Mar 22 2011 09:32:09 GMT-03[...]

Encontrada : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);

Encontrada : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Apr 12 2011 20:41:04 GMT-0300 (Hora [...]

Encontrada : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");

Encontrada : user_pref("CommunityToolbar.alert.locale", "en");

Encontrada : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);

Encontrada : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 17:58:46 GMT-0300 (Hora ofic[...]

Encontrada : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");

Encontrada : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);

Encontrada : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");

Encontrada : user_pref("CommunityToolbar.alert.showTrayIcon", false);

Encontrada : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);

Encontrada : user_pref("CommunityToolbar.alert.userId", "67e84ae9-0184-4c11-ac50-317026a5e67a");

Encontrada : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Jul 10 2012 16:35:49 GMT-0300 (Hor[...]

Encontrada : user_pref("CommunityToolbar.globalUserId", "55cffb54-8b3b-4832-ba1c-7791e0e62ac0");

Encontrada : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

Encontrada : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

Encontrada : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2233703");

Encontrada : user_pref("CommunityToolbar.killedEngine", true);

Encontrada : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri May 03 2013 13:53:5[...]

Encontrada : user_pref("CommunityToolbar.notifications.alertEnabled", true);

Encontrada : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);

Encontrada : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri May 03 2013 13:53:54 GMT-030[...]

Encontrada : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");

Encontrada : user_pref("CommunityToolbar.notifications.locale", "en");

Encontrada : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);

Encontrada : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri May 03 2013 13:53:46 GMT-0300 (H[...]

Encontrada : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");

Encontrada : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);

Encontrada : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");

Encontrada : user_pref("CommunityToolbar.notifications.showTrayIcon", false);

Encontrada : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);

Encontrada : user_pref("CommunityToolbar.notifications.userId", "2e5c5ae8-a9f6-4f87-8e76-8fc2e65040d8");

Encontrada : user_pref("CommunityToolbar.undefined", "");

Encontrada : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");

Encontrada : user_pref("browser.search.defaultengine", "Ask.com");

Encontrada : user_pref("browser.search.defaultthis.engineName", "4shared.com Customized Web Search");

Encontrada : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2233703&Sea[...]

Encontrada : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");

Encontrada : user_pref("extensions.BabylonToolbar_i.babExt", "");

Encontrada : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=100888");

Encontrada : user_pref("extensions.BabylonToolbar_i.hardId", "7cd4aca4000000000000f07bcb332c1d");

Encontrada : user_pref("extensions.BabylonToolbar_i.id", "7cd4aca4000000000000f07bcb332c1d");

Encontrada : user_pref("extensions.BabylonToolbar_i.instlDay", "15363");

Encontrada : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");

Encontrada : user_pref("extensions.BabylonToolbar_i.newTab", true);

Encontrada : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=100888&babsrc=NT_s[...]

Encontrada : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");

Encontrada : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");

Encontrada : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");

Encontrada : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");

Encontrada : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");

Encontrada : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");

Encontrada : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1714:04:33");

Encontrada : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");

Encontrada : user_pref("extensions.asktb.ff-original-keyword-url", "");

Encontrada : user_pref("extensions.engine@conduit.com.install-event-fired", true);

Encontrada : user_pref("extensions.toolbar@ask.com.install-event-fired", true);

Encontrada : user_pref("browser.startup.homepage", "hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&[...]

Encontrada : user_pref("browser.search.defaultenginename", "Ask.com");

Encontrada : user_pref("browser.search.order.1", "Ask.com");

Encontrada : user_pref("browser.search.selectedEngine", "Ask.com");

-\\ Google Chrome v27.0.1453.116

Arquivo : C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Preferences

Encontrada [l.1] : urls_to_restore_on_startup ={"distribution":{"import_home_page":false, "verbose_logging":false, "create_all_shortcuts":true, "import_search_engine":false, "skip_first_run_ui":true, "show_welcome_page":true, "do_not_launch_chrome":true, "alternate_shortcut_text":false, "make_chrome_default_for_user":true, "import_history":false, "chrome_shortcut_icon_index":0}, "instant":{"enabled_time":"12970290913776241"}, "sync":{"keep_everything_synced":false, "preferences":false, "suppress_start":true, "search_engines":false}, "devtools":{"split_location":392}, "default_apps_install_state":3, "reverse_autologin":{"enabled":false}, "printing":{"print_preview_sticky_settings":{"appState":"{\"version\":2,\"selectedDestinationId\":\"Save as PDF\",\"isSelectedDestinationLocal\":true,\"isGcpPromoDismissed\":false,\"marginsType\":null,\"isColorEnabled\":null,\"isDuplexEnabled\":null,\"isHeaderFooterEnabled\":null,\"isLandscapeEnabled\":null,\"isCollateEnabled\":null,\"isCssBackgroundEnabled\":null}", "savePath":"C:\\Users\\Pessoal\\Desktop"}}, "plugins":{"removed_old_component_pepper_flash_settings":true, "enabled_nacl":true, "last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\27.0.1453.116", "migrated_to_pepper_flash":true, "plugins_list":[{"name":"Remoting Viewer", "version":"", "path":"internal-remoting-viewer", "enabled":true}, {"name":"Remoting Viewer", "enabled":true}, {"name":"Native Client", "version":"", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\27.0.1453.116\\ppGoogleNaClPluginChrome.dll", "enabled":true}, {"name":"Native Client", "enabled":true}, {"name":"Chrome PDF Viewer", "version":"", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\27.0.1453.116\\pdf.dll", "enabled":true}, {"name":"Chrome PDF Viewer", "enabled":true}, {"name":"Shockwave Flash", "version":"11,2,202,235", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\27.0.1453.116\\gcswf32.dll", "enabled":true}, {"name":"Shockwave Flash", "version":"10,3,181,34", "path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32.dll", "enabled":true}, {"name":"Flash", "enabled":true}, {"name":"Adobe Acrobat", "version":"9.1.0.2009022700", "path":"C:\\Program Files (x86)\\Adobe\\Reader 9.0\\Reader\\Browser\\nppdf32.dll", "enabled":false}, {"name":"Adobe Acrobat", "enabled":false}, {"name":"Java Deployment Toolkit 6.0.290.11", "version":"6.0.290.11", "path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll", "enabled":true}, {"name":"Java Platform SE 6 U29", "version":"6.0.290.11", "path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll", "enabled":true}, {"name":"Java", "enabled":true}, {"name":"Microsoft\u00ae Windows Media Player Firefox Plugin", "version":"1.0.0.8", "path":"C:\\Program Files (x86)\\Mozilla Firefox 4.0 Beta 8\\plugins\\np-mswmp.dll", "enabled":true}, {"name":"Windows Media Player", "enabled":true}, {"name":"Google Update", "version":"1.3.21.111", "path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.111\\npGoogleUpdate3.dll", "enabled":true}, {"name":"Google Update", "enabled":true}, {"name":"RealNetworks Chrome Background Extension Plug-In (32-bit) ", "version":"12.0.1.669", "path":"C:\\ProgramData\\Real\\RealPlayer\\BrowserRecordPlugin\\MozillaPlugins\\nprpchromebrowserrecordext.dll", "enabled":true}, {"name":"RealNetworks Chrome Background Extension Plug-In (32-bit) ", "enabled":true}, {"name":"RealPlayer HTML5VideoShim Plug-In (32-bit) ", "version":"12.0.1.669", "path":"C:\\ProgramData\\Real\\RealPlayer\\BrowserRecordPlugin\\MozillaPlugins\\nprphtml5videoshim.dll", "enabled":true}, {"name":"RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) ", "version":"12.0.1.669", "path":"c:\\program files (x86)\\real\\realplayer\\Netscape6\\nppl3260.dll", "enabled":true}, {"name":"RealPlayer Version Plugin", "version":"12.0.1.669", "path":"c:\\program files (x86)\\real\\realplayer\\Netscape6\\nprpjplug.dll", "enabled":true}, {"name":"RealPlayer", "enabled":true}, {"name":"Shockwave for Director", "version":"11.6r626", "path":"C:\\Windows\\system32\\Adobe\\Director\\np32dsw.dll", "enabled":true}, {"name":"Shockwave", "enabled":true}, {"name":"Silverlight Plug-In", "version":"5.1.10411.0", "path":"c:\\Program Files (x86)\\Microsoft Silverlight\\5.1.10411.0\\npctrl.dll", "enabled":true}, {"name":"Silverlight", "enabled":true}, {"name":"RealJukebox NS Plugin", "version":"12.0.1.669", "path":"c:\\program files (x86)\\real\\realplayer\\Netscape6\\nprjplug.dll", "enabled":true}, {"name":"RealJukebox NS Plugin", "enabled":true}], "enabled_internal_pdf3":true}, "browser":{"window_placement":{"work_area_top":0, "work_area_right":1366, "top":0, "left":59, "bottom":556, "maximized":true, "right":800, "work_area_left":0, "work_area_bottom":728}, "clear_data":{"hosted_apps_data":true, "content_licenses":true, "passwords":true, "time_period":1, "form_data":true}, "last_prompted_google_url":"hxxps://www.google.com.br/", "pepper_flash_settings_enabled":true, "last_known_google_url":"hxxps://www.google.com.br/", "show_home_button":true, "clear_lso_data_enabled":true}, "homepage_is_newtabpage":"true", "session":{["about:newtab?source=home"], "restore_on_startup_migrated":true, "restore_on_startup":4}, "net":{"hxxp_server_properties":{"version":1, "servers":{"p5-uzskhttgluw2m-3ffuxebsjftk7wzt-745062-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-smrakvyx7cidi-n6d6op7bpxsvj3zd-796588-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-skqfwv4t5vc5c-oq2zle6zq72eitpc-757072-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3rih62zie3w4i-4tbyjzmbeqgly3zo-545952-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-awyv2ge4wykds-mtizf5bisxzh34sh-528766-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sujrezphprbog-xjkgekgyglsb2mma-718475-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-himsde75y6oja-xdjc7nzsjw4dehqd-416625-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bjkrnwphjsz3m-u7cikgu4ksuxtrdq-452292-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-enijxbmmc6e2a-hp7ujfjvheu3c5tz-382409-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6yhs4b2yfkn4a-ggks2dg5x7poqvip-825275-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "static.panoramio.com.storage.googleapis.com:443":{"supports_spdy":true}, "p5-j5kdq4tjtt6mk-wsombekykufh5fvv-701452-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6ijzz4jzvde56-ckqkeorubu6hsoda-431490-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zkvappnxk2tls-ivsogad2xyudi35t-806504-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "mts2.google.com:443":{"supports_spdy":true}, "p5-h3tzkyrt7a3x4-6upbkp4rsd7afu3z-311302-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-w7mprhetjyogy-5sw6p5dhcsp6asni-482120-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-locdthwl726yo-6psutk4f7xqazcwy-430121-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "api.facebook.com:443":{"supports_spdy":true}, "p5-whn55lowchdpe-37xzucdg5we7jjl3-917897-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ntrnaea7vovjw-ec3nfslmtgjyiofw-871869-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-v6idu436cavn2-y6mrhos2az4mlf4y-496692-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-t35jaeisdh3zc-e3rjp6hvpypmekl3-688430-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dtzoqousyvm54-jngs43suoyvma3hs-966660-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dsfigd3lzgrrc-hlfmk2qd727k52hf-601079-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-tjdx4eyqfp7mw-cipobjlmh7gxjjjd-982111-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5tosqplghegiu-jk337c7qozzh3wgx-886811-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-y7w44czbuyn3s-ti4trtgh5xvotqpq-231912-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "70.docs.google.com:443":{"supports_spdy":true}, "www.sites.google.com:443":{"supports_spdy":true}, "p5-vw754d73sypue-yiigqlqoe6oelwtd-952115-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-k7qtnix24kawo-xox3evqohqee24ek-818370-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-locdthwl726yo-6psutk4f7xqazcwy-430121-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "docs.google.com:443":{"supports_spdy":true}, "p5-kx64dvxb3rcvo-onh3qg5i5vfbxvt7-923542-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ybdnnqasa2kxg-tw42epgc53eyy5a7-519378-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zzycsbwhblgxk-7z3sizg7fox7k2us-584500-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lpwywonixj7zy-bmcbe32olqclqxcp-687224-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-esaihhgyrqv2w-e655xjofl2rcosqf-145934-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hhe6qj3ec5lji-u5fpzpeftnayvwcm-630036-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lajg3eplutr6c-yza4lrlgf7jqrfei-513494-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "news.google.com:443":{"supports_spdy":true}, "p5-ve6gnezhwehlu-cdsfjoknsjgly2nw-223861-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xinhz2m6vzwa4-t2guilspga2fvfgc-721593-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-y5hvwgt5ql5vm-a5n45x5kfd7ghble-486182-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "67.docs.google.com:443":{"supports_spdy":true}, "p5-e5vsarbph75na-555uod5bpgpvn3ay-565135-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-oe2esmafsigzw-gevzgkjou6pkwkhf-136105-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kinflx6fhvaru-jja6seo5wbbv6hzz-550640-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p5hz3qifwtrgs-shmy6okanw4l5aqx-471715-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ynpizvicvtele-oj5gidpe24tu367r-996035-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dhg6wi6yop6d2-t2qtat3gsfhmco5a-229005-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yh2vpimqs4gaq-bwr5obbmii2e6dda-992885-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-26sb7xej3ssfg-ldrd63mge5lviypx-584946-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6tgonxa45qcoc-ccxbmghljlor2jdl-707206-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mmf4uvdghrrbu-wurhp4bfbrk3li7m-136907-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4wkr4q6vxm3ba-wohuvwehrzow3xcq-289867-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-im665ovcw5btu-loehwwtntwmgkj3n-490632-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-whn55lowchdpe-37xzucdg5we7jjl3-321035-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5xne6a2qbexzg-ko3pbmakvqh7cwdk-999987-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rnwgnr6ztwzpo-or3qsbimicc3itgl-836090-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-i7hurkoj5zh62-lhwr7dsy2psoqswn-537868-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "ad-emea.doubleclick.net:443":{"supports_spdy":true}, "p5-p5j6cvjxw7glc-nc3wy7gmxdwwe4j2-828148-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hrucc4s4ncgso-jdqahrzrnj2o3o44-878279-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-w7mprhetjyogy-5sw6p5dhcsp6asni-553505-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-36tv7k4ickbni-ojg2o7txy2e3qukp-832275-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-spxgpskcuvvg2-hgtgjy53esi4dp52-906934-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6smsmdbhvsmou-al43fuel5fwzar7l-388350-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dtzoqousyvm54-jngs43suoyvma3hs-966660-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "themes.googleusercontent.com:443":{"settings":{"4":100, "5":16, "6":4}, "supports_spdy":true}, "p5-zobxg3yvaneqy-mjqnri7efovmytm6-930325-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "pixel.facebook.com:443":{"supports_spdy":true}, "p5-e5vsarbph75na-555uod5bpgpvn3ay-565135-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ve5aed3bmqwvu-25nj72wdun7r2r44-327337-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-o7eue6vi4y7jo-by4frxs64isw6jhp-156324-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-usvwly5o33dmk-acyfnqpcvnhqhe6v-280372-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-svcdoe425vueq-nfn5ni3hhu6uhido-119668-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "mts3.google.com:443":{"supports_spdy":true}, "p5-vkmdpwt36gt6k-23o4wj7x55czzbi2-824080-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mrdp2qjircpfa-tyyi6iq35ymx3vkw-297598-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mfqtosidcy25o-6ignlpjtqffztug5-878508-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-i7hurkoj5zh62-lhwr7dsy2psoqswn-161311-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "developer.android.com:443":{"supports_spdy":true}, "p5-47adpq37pdhxg-pzv6xo6pz5mx266f-190367-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-osrvwm7cro43o-bgkk7uy6wfoqqiwx-639376-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-35tsdvo6e53yi-tyjn66hpfw3ov5hp-298049-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4idcf3bonnpdg-yee5dyjiuqsekbpy-909295-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-7ngf2qpq3vscw-gx3g2jlgo673hfmx-155543-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-awyv2ge4wykds-mtizf5bisxzh34sh-528766-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xp3g3dvikoxhs-nz3ozhsbupwxvwdx-864778-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-y5zzdsfghxx6q-vik5hgxcrauv6weu-206717-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mrdp2qjircpfa-tyyi6iq35ymx3vkw-297598-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-osrvwm7cro43o-bgkk7uy6wfoqqiwx-846290-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2x7rv5xlc5gdw-ci66uwvef3ik5uxb-449858-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qflobb453nltk-xstubouatmg4ekkf-805848-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yh2vpimqs4gaq-bwr5obbmii2e6dda-415977-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "partner.googleadservices.com:443":{"supports_spdy":true}, "www.dropbox.com:443":{"supports_spdy":true}, "p5-qyx4hsc7zmpda-itdnl4rrlwi4ljom-514994-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "linkhelp.clients.google.com:443":{"supports_spdy":true}, "p5-gmz722ozrwfmk-kq5rhbtfjblascgt-391946-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dhjeomq6zosrm-ku7n6dgtldwqxwuc-976736-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p5hz3qifwtrgs-shmy6okanw4l5aqx-757009-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dx3zeduk3o4to-ceoorykgrzl6maue-434701-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "encrypted-tbn0.gstatic.com:443":{"supports_spdy":true}, "p5-p3ntpiyynagcy-rrtgg7wenbtvmcaq-784514-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-j2eq3ujd5t2jo-dvwulfgrkimuzpky-350757-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dlpy6mk4mogxm-hz4efuigsynclpuj-792911-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "i1.ytimg.com:443":{"supports_spdy":true}, "p5-dhg6wi6yop6d2-t2qtat3gsfhmco5a-581465-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-w7mprhetjyogy-5sw6p5dhcsp6asni-482120-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "www.googletagservices.com:443":{"supports_spdy":true}, "p5-e2i6j4qwxj7mq-c7pagt2ajw34xcwl-454516-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-icbpgnm2eapa6-rzgdav56avvpcjo5-426434-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ff6jteouuiehs-k27no4qgrdutwysp-948246-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-whzbtbaiuxyjy-ffdy4b7d7foeq7x5-103608-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "stats.g.doubleclick.net:443":{"supports_spdy":true}, "p5-mxezskp6cqypy-fbvpf66lvlrzobwk-865547-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-muo5huyo5e4ny-kndp4ijcsseteyci-843557-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "fonts.googleapis.com:443":{"settings":{"4":100, "5":16, "6":0}, "supports_spdy":true}, "p5-5jmpm5t2uw7a4-mzuvaeqcqndiztuc-683635-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-f3m3egsrtl2ew-bouikni2e7bp6enf-804278-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "cbks2.google.com:443":{"supports_spdy":true}, "p5-hbusovypv2cqy-hycyvxp4rbc74zuy-567114-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-twraaqi5qrk2s-u24lp7medixyh4vh-714519-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dx3zeduk3o4to-ceoorykgrzl6maue-434701-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ztzvmg5kemuim-t3d7wyr5lugc64gw-884757-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wv44m6ko4hb4w-7ccrulnrix7hmyzm-602465-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ou4eltpu6uq5i-bq7qseippmn25yjn-190440-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "mj89sp3sau2k7lj1eg3k40hkeppguj6j-a-sites-opensocial.googleusercontent.com:443":{"supports_spdy":true}, "p5-es6pyczgdjh76-3nfyw5rw2h7sbqr2-997108-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "encrypted-tbn3.google.com:443":{"supports_spdy":true}, "p5-yvdfz4poeen34-kqsc75yc3cmvjdks-760559-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cm647qzum4xvw-57b2jymojonj34sh-646452-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "wam-campaign.commondatastorage.googleapis.com:443":{"supports_spdy":true}, "photos-a.xx.fbcdn.net:443":{"supports_spdy":true}, "p5-lmzc2564kpxe2-5f23firi27buhlfx-682488-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cfswwptqa7eyw-ofy4s73s2shqqxze-546981-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-u4bs6o7js5ade-caomzzu2vtq2rwyd-889469-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dvjqsfanky6oo-4krtplju7yb2fijt-184102-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-j3wb2da636vfi-xkvowxesg7dvkk4f-238668-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cvaelfe5aycza-weau6w2at3xrp274-368807-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ncxvspfuda43u-rsuu7wm5xt2hp43g-528913-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jlh2m2qkfujxq-lioo3d4s77a7kxi6-569428-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-adcrlu4bemopa-rcuvwyqtpoxothqx-456208-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4idcf3bonnpdg-yee5dyjiuqsekbpy-909295-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-807250-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "s.ytimg.com:443":{"supports_spdy":true}, "p5-hso2hueujahag-gftusru46f4bx7tu-132055-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yuyvrdxrwwed6-oy4ufq6hbxz5upwm-813543-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ghsct3gkgxrv6-ndihs2qr6twns4qu-984408-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-pe2hv7ofjllco-dkioujkz7ok3ilk6-242009-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yjxjzvacwynss-t3n5tdfbwbnw4kll-623308-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hpicgztymdqjc-seali5mt6cdm4sxu-654292-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-adcrlu4bemopa-rcuvwyqtpoxothqx-456208-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lrzverp5fm6gg-yfqimyfofca4jos6-920701-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-srnmbtnbgniry-xno7upo2fkpb3ttl-497378-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-fowmt4tffvwwy-lp2ibctdhpyba3bs-110564-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-594065-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p4-h3ro6psoa3tv4-hgpluk2k3o7s5xe5-269259-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "oauth.googleusercontent.com:443":{"supports_spdy":true}, "p5-mmf4uvdghrrbu-wurhp4bfbrk3li7m-136907-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sojbbswjikbma-laoqcbdrwxlpchz2-857336-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xocwjgtee2gxm-hqwidtacljze6p2j-675492-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-y5hvwgt5ql5vm-a5n45x5kfd7ghble-486182-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "img.youtube.com:443":{"supports_spdy":true}, "p5-ciredmjnkwsae-jjdwwilehmlwor4m-307413-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "jui7hd9kkjcdicl7jm720k33e2r6jdu8-a-sites-opensocial.googleusercontent.com:443":{"supports_spdy":true}, "p5-rriluryge5knk-o5x4pmztxj2v3iks-603087-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-i7hnuu2szocpw-7sctvjlhwtcbzzug-232720-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qflobb453nltk-xstubouatmg4ekkf-442369-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-k7qtnix24kawo-xox3evqohqee24ek-394448-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-vafcrv22mthu4-yw7ksd4fqqgbvg4z-382917-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zkdyxqwii7c62-353if5c3apdlpe6r-227217-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sblx3ugxicfz4-xz7ua635t354gc3j-650622-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-koth4tqelr32c-wlisipbqgjucu27i-245408-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4nihuzndktluy-gj5doe6afvcwfx7u-849577-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-liauemsvotqys-ddoriia2m4vifzqj-404212-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qpysdvk7iwthc-6a2grxaibegtun7t-166956-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qrgrqabb5s3k2-233oj4sp2o5dtv2c-151951-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3bn7bqlk52lho-eaj5gi7oqht2re57-466162-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-j2dq5a5pjhwfe-grfy25fhwh5swxs2-429237-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-vkmdpwt36gt6k-23o4wj7x55czzbi2-343283-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yhz4dpj6hxcqy-xqr225ckb6rl7chd-468601-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nxy3ldk2rjarw-kgyq53tzzwpgydxn-576740-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2zd42dwosgtdo-6erbqalkmxmy4s4p-147638-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-t35jaeisdh3zc-e3rjp6hvpypmekl3-688430-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "www.google.com:443":{"settings":{"4":100, "5":16, "6":3}, "supports_spdy":true}, "p5-2s5o74tg3yowk-xme2ynndbwymcwip-873526-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "chart.googleapis.com:443":{"supports_spdy":true}, "i3.ytimg.com:443":{"supports_spdy":true}, "p5-jmyrjao4k6dck-desnxuaoi2drx2p6-411110-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dtzoqousyvm54-jngs43suoyvma3hs-966660-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-u2umc6u3lva34-wwdrdk6wywnlnqm2-129762-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "public-api.wordpress.com:443":{"supports_spdy":true}, "p5-i7hurkoj5zh62-lhwr7dsy2psoqswn-537868-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zobxg3yvaneqy-mjqnri7efovmytm6-713660-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p2-il37r4f25rliq-4jjviv2hge7cmcnn-790496-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "clients2.googleusercontent.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-721242-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5qux5pkrautfs-5gi7nbeerp4osz2g-282219-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gnodr3qq3otv6-izpgrrkociimsdgt-738783-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ix2ynalvirqic-5riqtgubs5hyj57y-574738-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bjkrnwphjsz3m-u7cikgu4ksuxtrdq-452292-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-214881-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cvaelfe5aycza-weau6w2at3xrp274-541574-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-izteo7j7hrsem-f7npt4456o6rzuzd-895161-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lyyy3syhprpqu-lorotl4uomztfakv-264105-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-etedk352aolo2-5dtpwm5mqaxv2kbo-656893-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-w4ikzfslabkzi-646cyorclx5wpehv-452054-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3xwv6sni2vmsg-quroharhweyvhfhr-429722-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zjdj7gla4fzwm-hbs2g3lgjghsicfq-721720-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jhwsqcwxqho6a-6hh2ctlgzczoiy4d-903823-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xlkgj43lda7k4-t4uk4vietp3u2lvn-558606-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-e5vsarbph75na-555uod5bpgpvn3ay-565135-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bv4dew7sfq24k-6vsju7ljsuwfuaa4-852718-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-45ui4ta7kx2ps-p6q7kvaa65i6ttzw-452584-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "s.youtube.com:443":{"supports_spdy":true}, "p5-dlpy6mk4mogxm-hz4efuigsynclpuj-792911-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "liasergia.files.wordpress.com:443":{"supports_spdy":true}, "p5-eludi3fuddlki-dni4wcxu6qi5bm54-690683-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p3lkpy5mxlvcq-bzpoozrn23fkqap6-141652-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sojbbswjikbma-laoqcbdrwxlpchz2-247374-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dhg6wi6yop6d2-t2qtat3gsfhmco5a-229005-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3cjpznmvkjisy-o2d6lfmyeodsltph-940229-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ayqfm27loyrku-coqe6skosprrjc3q-271462-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "khms1.google.com.br:443":{"supports_spdy":true}, "p5-wqjdxo5waqs7e-2wx5eomahxf7qfhx-421607-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "mts1.google.com:443":{"supports_spdy":true}, "p5-62xydcka4qqjg-6wrfn6atkccs72y5-228796-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-65kxpzz7rud6y-qqjmjql23mgqvr5q-197905-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rpzs7tanyjjp6-dencz3ebocebytv5-286220-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xocwjgtee2gxm-hqwidtacljze6p2j-675492-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-fgadhksuknfws-jy63lre4uieosp4p-289286-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-shdalr76k6cxa-ufpqan36zgn3za5y-586568-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-j3wb2da636vfi-xkvowxesg7dvkk4f-303530-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-e7yans7cfm3ig-klolz645axoaixtv-210551-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2inx5wdxbtspa-f7ksxq5gzhmzdqmw-273285-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-727627-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "video.google.com:443":{"supports_spdy":true}, "i4.ytimg.com:443":{"supports_spdy":true}, "p2-il37r4f25rliq-4jjviv2hge7cmcnn-if-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6n5h73sqiy342-zfhf6ca54kvxsgkb-686550-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mtrdc4l3q6s3i-pbhtqp2fvreozux2-253471-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rp2xvdqa3zi7c-iq562flwljzdfxri-925414-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-srnmbtnbgniry-xno7upo2fkpb3ttl-497378-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xp3g3dvikoxhs-nz3ozhsbupwxvwdx-781899-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-vzgz66bbqk23a-h33dou7haqmiw4on-109652-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-esaihhgyrqv2w-e655xjofl2rcosqf-145934-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-72ts3pjkdix5e-bokra3mfp6tu6efr-354765-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "ad.doubleclick.net:443":{"supports_spdy":true}, "p5-at33ilqoknc6s-4m3zt5k6csjbo74m-738493-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-e5wg7xakhuyxy-nnlk2vpqnajycdik-858607-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jlh2m2qkfujxq-lioo3d4s77a7kxi6-855540-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "api-read.facebook.com:443":{"supports_spdy":true}, "i.ytimg.com:443":{"supports_spdy":true}, "accounts.google.com.br:443":{"supports_spdy":true}, "p5-ia23qd6a7kwbi-lhrd7a2dpndxwbio-246402-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "encrypted-tbn0.google.com:443":{"supports_spdy":true}, "p5-35tsdvo6e53yi-tyjn66hpfw3ov5hp-298049-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-979151-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "ssl.google-analytics.com:443":{"settings":{"4":100, "5":16, "6":0}, "supports_spdy":true}, "p5-liauemsvotqys-ddoriia2m4vifzqj-404212-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6ycx65h2eshvi-aa3qggxd5lg54yma-832998-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "cbks0.google.com:443":{"supports_spdy":true}, "p5-vzgz66bbqk23a-h33dou7haqmiw4on-109652-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-u6eueitznavpu-ahxxindiwo5cddcp-455603-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "www.googletagmanager.com:443":{"supports_spdy":true}, "p5-ju7v5ej5eqheq-ylslslvz5yuh7px6-807005-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cvaelfe5aycza-weau6w2at3xrp274-308963-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bjkrnwphjsz3m-u7cikgu4ksuxtrdq-240260-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4t4kmfvgt3b2g-w4cyyoqwbelgbqrv-695443-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ve5aed3bmqwvu-25nj72wdun7r2r44-272771-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "developers.google.com:443":{"supports_spdy":true}, "p5-rawx4phlkbaps-ofhhvwsqot5g4ivz-142172-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mxezskp6cqypy-fbvpf66lvlrzobwk-865547-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dhjeomq6zosrm-ku7n6dgtldwqxwuc-987119-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-64m3xms3vmx2a-wwlsbwlmiwoil35t-799335-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rhsqfp47quu5c-nezwj7loum54uy4y-241738-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cxnqsachja5xq-kaatjz6bac6xpcyp-444120-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "analytics.twitter.com:443":{"supports_spdy":true}, "p5-by2umdx3bgwmi-yrl4an733xfbwdvf-997020-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-aeo56q5xc2e54-aeqokmm35btoui6x-569073-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "profile-b.xx.fbcdn.net:443":{"supports_spdy":true}, "p5-shdalr76k6cxa-ufpqan36zgn3za5y-586568-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "gp5.googleusercontent.com:443":{"supports_spdy":true}, "maps.google.com:443":{"supports_spdy":true}, "p5-2w2nowk2waiga-tciliiucac2pbdyj-685820-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mvhebovdtqupw-ivgutdbsxo3gn4cn-765692-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-twzuqpkflzf4y-3cxiqgub4gts7kpk-138384-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wv44m6ko4hb4w-7ccrulnrix7hmyzm-650869-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lpklhjgmhy2wu-rsfktjl53extizw5-632737-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-26sb7xej3ssfg-ldrd63mge5lviypx-584946-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lmtenm6zymb4w-xrcfequydd7bh4cb-575960-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-es6pyczgdjh76-3nfyw5rw2h7sbqr2-997108-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-674wrp3ccpryu-wzhxznwl4myq6epg-429743-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3pj5a53t7a73q-gywizeudstgqjlra-656655-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-a3nkmz7kkr6mw-dwwn3j7caz2yu6hf-110993-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-z22zfkohjtwgk-kdf3dcr25p246tjq-405932-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-arhfw5swwceoo-shuewrgnzxgq2qqe-881873-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lrzverp5fm6gg-yfqimyfofca4jos6-920701-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "graph.facebook.com:443":{"supports_spdy":true}, "p5-jjcpf7dhimqfo-i42pwd5ixdbo2ejs-308048-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bn6fkn7qot7oq-nrcioqxooshw5boe-855999-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "storage.googleapis.com:443":{"settings":{"4":100}, "supports_spdy":true}, "p5-r6yajtebapweu-eo7ypzlergyhvko3-486395-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qtlmvlxzymygg-u4ftwntvwk7f3txs-461803-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "lh3.googleusercontent.com:443":{"supports_spdy":true}, "p5-6ijzz4jzvde56-ckqkeorubu6hsoda-431490-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wv44m6ko4hb4w-7ccrulnrix7hmyzm-179281-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rvmq2vtbmyp6c-aahncvcby5zzgwy4-449292-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-d3ukj6v6vno3e-fg32sc4ilvqpv74s-686700-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ldrxfm474t4zc-usetecdlgqz36bu4-809719-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "clients6.google.com:443":{"settings":{"4":100}, "supports_spdy":true}, "p5-xwatprpigy7w2-kggqohwh5uyvfdqm-446023-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rjj5nwnkaxjju-g3odag6wmdaonopm-758956-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-fgadhksuknfws-jy63lre4uieosp4p-289286-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5yosurzocrlik-ufv5sptqmazfhb54-478326-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nkqqvwap26gqe-lzg5jm6bmnabmmnv-129677-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jfdbcb5gnf6cs-7kpsc34c4cqlsjye-832262-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rjj5nwnkaxjju-g3odag6wmdaonopm-817771-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ovy2hxb4njcaa-bu6z6btb47hebgu2-887826-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-s6s2ab2fxwsl4-chevadwfh4cxe3nq-423522-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-oez74cjjg6j4s-2hkp7v75byhm66ty-294032-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-szj77bh56prvm-6wnkewardl3teaya-745915-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "picasaweb.google.com:443":{"supports_spdy":true}, "p5-kynkpcdug7uhw-ytkuvjrqmhkbsg6p-993442-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-oamzjt547fz3q-5ktv6uga3kffxykq-959854-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-77vs572rbtnay-uaoxtd47j3rhyw6y-528562-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "static.googleusercontent.com:443":{"supports_spdy":true}, "p5-feyawhupugtm4-gycjvs7hwuvcyptd-328859-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-whzbtbaiuxyjy-ffdy4b7d7foeq7x5-103608-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-u4bs6o7js5ade-caomzzu2vtq2rwyd-513678-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ynpizvicvtele-oj5gidpe24tu367r-996035-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-pi66xfkfkvp4y-ezyskwntzkfasz47-738590-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qpysdvk7iwthc-6a2grxaibegtun7t-166956-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5qux5pkrautfs-5gi7nbeerp4osz2g-532465-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4wkr4q6vxm3ba-wohuvwehrzow3xcq-998989-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hfbqqpbvntcoy-vulgabedjdwyc7xo-820935-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "gp6.googleusercontent.com:443":{"supports_spdy":true}, "p5-hs3shcmgxv6hq-5qmwnswc5idavkfq-708315-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-whr6blzwlzjsc-gfw2ickkzl7gdjyv-569436-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "mw2.google.com:443":{"supports_spdy":true}, "p5-fszw746qcl2ka-pbcx7rcoynzvu3ly-182446-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-khwzwgjbuixhk-rc5bng3vpvkgmefc-431803-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-iydvhseavde4m-6osgpypsiw4xkzxl-821154-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-shdalr76k6cxa-ufpqan36zgn3za5y-509051-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hs3shcmgxv6hq-5qmwnswc5idavkfq-408499-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hl4hked5t7d56-abmagr2vsqtdxokq-584971-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yiue7ztrnx4oo-qrdczmx3ss7kwrdc-623581-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-f3m3egsrtl2ew-bouikni2e7bp6enf-804278-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4utjuivhqbens-c7iqcif52t5mefk7-731285-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "apps.facebook.com:443":{"supports_spdy":true}, "ad-g.doubleclick.net:443":{"supports_spdy":true}, "p5-dyyknyusjsbyw-m6ffg4miqupktz4n-879370-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xl7ehc6o3m6l2-lolrfsz4fxxir7ku-601495-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wmih5meoowiec-eok5mu37axqwjtoi-154318-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nhauoivrlk4qk-isvjguv7tthpyeke-977209-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kbp2u2hgp4ads-4g7k4nhcop4tviwn-395847-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "attachment.fbsbx.com:443":{"supports_spdy":true}, "p5-4l7flzkbizbrm-qp4blfaxbwjejnkv-140489-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hoso7gda6ob4o-32caiekfblkxlulo-572367-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-u2umc6u3lva34-wwdrdk6wywnlnqm2-129762-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "wam-mobile.appspot.com:443":{"supports_spdy":true}, "khms0.google.com.br:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-727627-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "clients1.google.com.br:443":{"supports_spdy":true}, "p5-twraaqi5qrk2s-u24lp7medixyh4vh-678708-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6ijzz4jzvde56-ckqkeorubu6hsoda-439203-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6dhhqhbvilieo-loyvuyf3oedqengb-813652-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "www.gstatic.com:443":{"settings":{"4":100}, "supports_spdy":true}, "35cfa8de-a-62cb3a1a-s-sites.googlegroups.com:443":{"supports_spdy":true}, "p5-f3m3egsrtl2ew-bouikni2e7bp6enf-804278-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "pubads.g.doubleclick.net:443":{"supports_spdy":true}, "p5-hs3shcmgxv6hq-5qmwnswc5idavkfq-708315-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hl4hked5t7d56-abmagr2vsqtdxokq-584971-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-j3wb2da636vfi-xkvowxesg7dvkk4f-303530-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hbpwj7m6hwzfm-gydd23vivjncoaf5-246041-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "attachments.facebook.com:443":{"supports_spdy":true}, "p5-dpsn7qukvav3o-2zx3e5ampzthu5nu-173720-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5tcumbglpsuzy-uqwvrqkv67oswrwc-692630-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4nihuzndktluy-gj5doe6afvcwfx7u-849577-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3pj5a53t7a73q-gywizeudstgqjlra-656655-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gbreuqnqffz4c-m55qc77hwmqzuvol-874205-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-du766enajeqoe-udmmrf7qs37w6zvo-854062-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lmtenm6zymb4w-xrcfequydd7bh4cb-575960-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "chatenabled.mail.google.com:443":{"supports_spdy":true}, "p5-zobxg3yvaneqy-mjqnri7efovmytm6-248911-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qrgrqabb5s3k2-233oj4sp2o5dtv2c-151951-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hroxheo3y5y4o-ybaixf5vnadgyn4c-629742-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "www.youtube.com:443":{"supports_spdy":true}, "p5-dhjeomq6zosrm-ku7n6dgtldwqxwuc-987119-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mtgz6rdxi255k-wfrdwflzfteeezxm-232417-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gcersyowir27c-4h6aen7rcrcduhv3-172326-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mrdp2qjircpfa-tyyi6iq35ymx3vkw-297598-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xinhz2m6vzwa4-t2guilspga2fvfgc-684004-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "fls.doubleclick.net:443":{"settings":{"4":100, "5":32, "6":0}, "supports_spdy":true}, "8e130ce6-a-62cb3a1a-s-sites.googlegroups.com:443":{"supports_spdy":true}, "p5-ynbbwttu2sybc-habnhuhpt3bqjyaj-868741-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-c27sir6omsyn2-ul67q2m3zz6gakwh-970518-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-vkwzvbwzwlpsq-awojmz7clh2itxnt-308536-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xz6jzeh4xxgpk-resntho5qncywl2u-300704-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mxezskp6cqypy-fbvpf66lvlrzobwk-496045-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dqusfqk3cdxjw-l7l2w7ktunkn2zr2-666928-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "lh4.googleusercontent.com:443":{"supports_spdy":true}, "p5-jbq3ajx65d7bm-h6p3a2xwtttfoldw-420913-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wzi375tsvuzwy-puc2ms3y5ko4md2y-246538-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gfsoe4z4sw7ke-r77yvbpevfx362ns-680264-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5m4pzueyfuyle-wfyhwpta7qdfyvtg-298217-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-tlkp4nehy45h2-snadheefsdxfljdp-700646-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ug4qrzzy45tny-346hg5tpghthqxyt-988856-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ynpizvicvtele-oj5gidpe24tu367r-996035-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2kekskczur23g-b7zojb4irnjrajjg-669850-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2qgw77tkacrtu-ecxx5ispiuqny53k-475165-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-y5zzdsfghxx6q-vik5hgxcrauv6weu-271381-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "clients1.google.com:443":{"supports_spdy":true}, "id.google.com:443":{"supports_spdy":true}, "p5-shdalr76k6cxa-ufpqan36zgn3za5y-509051-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2tzhmwj22ymua-febq2ovlczvq7tnt-373420-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-feyawhupugtm4-gycjvs7hwuvcyptd-328859-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "04504f4c-a-62cb3a1a-s-sites.googlegroups.com:443":{"supports_spdy":true}, "p5-rjj5nwnkaxjju-g3odag6wmdaonopm-758956-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gb63a4fgrrtko-4gyotyedm5nexw7d-187018-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "ajax.cloudflare.com:443":{"supports_spdy":true}, "p5-bkrhqolv5jsta-vfhez5x5kwnc5nab-248761-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-7vt57tbnsmsxy-o7mfi3o7u4fp7f2m-759446-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ilivug22vna2u-hlfawopzpbdteoji-153826-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-7ycmgmjjua3sq-vifuwjtegawyhhga-201958-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5mpwvoct2anak-kontcwbxm752pdja-257099-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nk36q7y6ydmig-z776rpiwbviwpzip-983684-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "pagead2.googlesyndication.com:443":{"supports_spdy":true}, "p5-4bjf7xmnfzqhe-xg4enhulz75x2mxd-590171-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5qux5pkrautfs-5gi7nbeerp4osz2g-159584-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-q46tqp2e3zafi-d4uzmfl5ojbnrdya-976340-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lrzverp5fm6gg-yfqimyfofca4jos6-920701-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-pxamvtwojhmwq-oxldhzhjop3xkaai-138032-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "id.google.com.br:443":{"settings":{"4":100, "5":32, "6":0}, "supports_spdy":true}, "p5-yh2vpimqs4gaq-bwr5obbmii2e6dda-346913-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-im665ovcw5btu-loehwwtntwmgkj3n-490632-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ie2qknwtjzx3w-n4egxzbvyq2d4zfm-346631-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dzl5kzyemqjkk-dyugeniy6tzvvgmf-224292-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-klwya6j427uig-vefbtzh3q3jn3m2m-714211-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p5hz3qifwtrgs-shmy6okanw4l5aqx-944239-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mtgz6rdxi255k-wfrdwflzfteeezxm-232417-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-fywjc62uxnb2w-melluwhdkavvbpw5-112851-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-u2umc6u3lva34-wwdrdk6wywnlnqm2-129762-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "developers.facebook.com:443":{"supports_spdy":true}, "masolis-javascript.googlecode.com:443":{"supports_spdy":true}, "accounts.google.com:443":{"supports_spdy":true}, "p5-at33ilqoknc6s-4m3zt5k6csjbo74m-738493-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zgb3lruwocigo-pfhdtb6bogrhzp42-240129-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jfdbcb5gnf6cs-7kpsc34c4cqlsjye-832262-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4uimshepzm4cm-f6rkg7waw4arg3gf-374726-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-tlkp4nehy45h2-snadheefsdxfljdp-700646-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "maps.google.com.br:443":{"supports_spdy":true}, "p5-k33hucwoaf6ji-redhpmwcy3xigong-721743-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "mts0.google.com:443":{"supports_spdy":true}, "6d0eea55-a-cd9f6fd9-s-sites.googlegroups.com:443":{"supports_spdy":true}, "p5-y3oofqgmql426-msq7azbh32n7v26w-462165-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-pwugwchyunf4k-zn22y23ciecc6rs4-545612-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p2wc7kw7fxbmu-ackmyziprxsphk25-391263-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-tn3tpqxuc53v2-jdmyunfvw77xl4mq-480963-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "hostedtalkgadget.google.com:443":{"supports_spdy":true}, "p5-id3amq23r5wjs-5nsejlgcpsxmzw2s-337917-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-v2hdsc3r5jabg-k2gsgq6khbksb2qo-842656-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kwjfex2rb4h7q-ej53ysyjo2fpquex-281274-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "sphotos-a.xx.fbcdn.net:443":{"supports_spdy":true}, "p5-lnd3w6trnz44u-ypdznz7uoy5v4ntb-924239-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dx3zeduk3o4to-ceoorykgrzl6maue-434701-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xp3g3dvikoxhs-nz3ozhsbupwxvwdx-864778-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-smrakvyx7cidi-n6d6op7bpxsvj3zd-796588-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dsfigd3lzgrrc-hlfmk2qd727k52hf-601079-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-szj77bh56prvm-6wnkewardl3teaya-745915-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "78.docs.google.com:443":{"supports_spdy":true}, "p5-cvaelfe5aycza-weau6w2at3xrp274-308963-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ja3vmmanbhus4-x3l65lmdyhm3dujj-594574-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-twraaqi5qrk2s-u24lp7medixyh4vh-678708-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nwuis2ilvkcjk-zfdpzqovvrmxehbl-265234-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5xne6a2qbexzg-ko3pbmakvqh7cwdk-999987-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qvmbyvzcevu2i-moi7mr6hqrpgndnm-726712-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ryhzs7v3374wm-birkrqodoqgt7qc2-497014-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bnyysrbrul2j4-shsiqvtr42wynzzf-493146-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ryhzs7v3374wm-birkrqodoqgt7qc2-497014-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sojbbswjikbma-laoqcbdrwxlpchz2-857336-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-755kho2oiz63s-rfmnpjf47zqtm2nh-588438-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qxnwzkjwmti76-ljaon3v7qyqf3xxt-158518-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rpzs7tanyjjp6-dencz3ebocebytv5-670400-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "static.doubleclick.net:443":{"supports_spdy":true}, "p5-whn55lowchdpe-37xzucdg5we7jjl3-272483-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3noz366urq53k-thwqkaqmfstcu3sv-473816-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ingtrzxdicvqe-ijsai2mvglvgp56a-679152-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "wordpress.com:443":{"supports_spdy":true}, "p5-mpcqe7y5inexg-muxzftf7wy7odmkp-360458-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xinhz2m6vzwa4-t2guilspga2fvfgc-684004-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-n3yf4y572mmus-bfpuviogssunvfss-611017-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xl7ehc6o3m6l2-lolrfsz4fxxir7ku-601495-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-aknzfktjqxgl6-fs4kumkx5a7i5lex-724042-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-pymyqvfifqaka-cgcrpb5mvs63bwkc-924816-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xinhz2m6vzwa4-t2guilspga2fvfgc-721593-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "00eec74a-a-62cb3a1a-s-sites.googlegroups.com:443":{"supports_spdy":true}, "p5-p5spmntxjue3w-62gi3w5h3ripya4s-535730-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cxnqsachja5xq-kaatjz6bac6xpcyp-444120-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cvaelfe5aycza-weau6w2at3xrp274-804776-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2uxgr47aarudc-x25lnitm3mv36hiy-746537-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gr5crp6s7ownk-difu6wl73wgznc5a-595654-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p4-h3ro6psoa3tv4-hgpluk2k3o7s5xe5-if-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ykokyemd3nmw2-vhxhjs2yhu5vy5y3-964754-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wv44m6ko4hb4w-7ccrulnrix7hmyzm-179281-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dhg6wi6yop6d2-t2qtat3gsfhmco5a-581465-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rawx4phlkbaps-ofhhvwsqot5g4ivz-142172-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-a3ah2jh72e2ly-whexjphcwrvv2fm4-623343-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "plus.google.com:443":{"supports_spdy":true}, "p5-hl4hked5t7d56-abmagr2vsqtdxokq-386775-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kvjr3w4qrkple-hvwfmqqxstezix2h-174808-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p3ntpiyynagcy-rrtgg7wenbtvmcaq-784514-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "securepubads.g.doubleclick.net:443":{"supports_spdy":true}, "p5-nffbqwyqwdq56-xynsw7fqp4jhxvxx-213930-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gcersyowir27c-4h6aen7rcrcduhv3-172326-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5oqielntaq4ci-ixgu3yp2zqjfutyj-278107-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cvaelfe5aycza-weau6w2at3xrp274-308963-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "groups.google.com:443":{"supports_spdy":true}, "p5-schtxuh3naxpk-xzgyyjwcyafdslgr-913197-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-b65nspuphlnjc-pisrn5svptjpn24v-327091-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mxezskp6cqypy-fbvpf66lvlrzobwk-496045-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4tpi6k4iviadc-sdd43orpem5n2uzf-590970-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "mail-attachment.googleusercontent.com:443":{"supports_spdy":true}, "p5-ieftrvwd7f4wm-ro2fbwavwrq7r4nr-103714-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "accounts.blogger.com:443":{"supports_spdy":true}, "p5-5ajtk76f5icp4-2knfi7dk4qb7kshi-650252-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-v2hdsc3r5jabg-k2gsgq6khbksb2qo-842656-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "cbks3.google.com:443":{"supports_spdy":true}, "p5-pzy6qiyhmb4am-3c5rik66e37r2o6x-365201-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6ijzz4jzvde56-ckqkeorubu6hsoda-439203-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-h3tzkyrt7a3x4-6upbkp4rsd7afu3z-771130-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "hfcrokj5neo8jqtide9hbgsq3opjndlh-a-gm-opensocial.googleusercontent.com:443":{"supports_spdy":true}, "p5-uehhlvmifktra-44f5ab7cnu5ve63d-310265-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "twitter.com:443":{"supports_spdy":true}, "p5-peczgzh6eyqss-gm6mgtavjgl2w2ib-293301-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-7dsrenvq6func-x2u7edhfeojvtir4-594069-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kr22gfflcbxni-mut2vm7wn7nopxk5-633138-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qnmsm4xvfhb42-fq7scinejruw7odp-985534-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jsol7zotfim3s-cccz46njrrwzblpi-565619-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "plusone.google.com:443":{"settings":{"4":100, "5":16, "6":1}, "supports_spdy":true}, "p5-duwefkhdidlrg-tqsur7ghxm5mymyj-563111-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ilivug22vna2u-hlfawopzpbdteoji-336035-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-twraaqi5qrk2s-u24lp7medixyh4vh-714519-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-erwwitc7uoxya-ed3jrhpakyoeelms-541704-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "clients2.google.com:443":{"supports_spdy":true}, "r.twimg.com:443":{"supports_spdy":true}, "www.orkut.gmodules.com:443":{"supports_spdy":true}, "p5-wzi375tsvuzwy-puc2ms3y5ko4md2y-635686-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "inputtools.google.com:443":{"supports_spdy":true}, "www.google.com.br:443":{"settings":{"4":100, "5":2, "6":3}, "supports_spdy":true}, "p5-svcdoe425vueq-nfn5ni3hhu6uhido-119668-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p5hz3qifwtrgs-shmy6okanw4l5aqx-471715-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-uy5ixcg3blvjw-xiaauj4y62myej5m-902178-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "www.gmail.com:443":{"supports_spdy":true}, "p5-jjcpf7dhimqfo-i42pwd5ixdbo2ejs-962231-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ovy2hxb4njcaa-bu6z6btb47hebgu2-887826-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-l3ri3biztcsdo-kpxkp25jnjouushi-798457-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qpysdvk7iwthc-6a2grxaibegtun7t-166956-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-by2umdx3bgwmi-yrl4an733xfbwdvf-997020-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wmih5meoowiec-eok5mu37axqwjtoi-727973-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nrrvab63dupwe-lw5dq2kr77erocby-718779-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-tg5s2ktqgyzm6-ljbc547wadorvgkl-676413-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2nr3hsgegm2q4-vhbjo5plzw5n4qkq-648965-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lafodalswkblq-jpmgdvnc3j2isyur-730068-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2kjwxomtq4da2-qx22g2i3x5idyoxv-502751-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "googleads.g.doubleclick.net:443":{"settings":{"4":100, "5":16, "6":0}, "supports_spdy":true}, "p5-xsen67ftp6dac-thik62tsgqksw575-519997-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "qa-lighthouse.sandbox.google.com:443":{"supports_spdy":true}, "p5-5iqpykttcmow2-z37456l2q5yuekfm-911574-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cwfgh2ahk6zda-c2cmwugjsctg5daf-989450-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-shdalr76k6cxa-ufpqan36zgn3za5y-835535-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4l7flzkbizbrm-qp4blfaxbwjejnkv-140489-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-feyawhupugtm4-gycjvs7hwuvcyptd-328859-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-g5pbqrhlijbwi-u4hbeo36c6mbtfh7-195219-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p2-il37r4f25rliq-4jjviv2hge7cmcnn-790496-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-i7hurkoj5zh62-lhwr7dsy2psoqswn-537868-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bjkrnwphjsz3m-u7cikgu4ksuxtrdq-240260-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sblx3ugxicfz4-xz7ua635t354gc3j-650622-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-fp6peb6jbdfbs-f7xkmr67viesg2cz-557294-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6upnrge4cxsr4-whfetmoer4ulurl5-699174-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-n4oulxgtprsxk-kdiad7kzqd2kinna-513451-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bgcwiqgpq5coo-irao5y7daxzkstoo-331645-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-igxrojk6b6r5k-qmbmyu5dcgv5b7n6-713663-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3ighf3jtjjs4g-7bkmt7qgkpsvawnk-810425-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "profile-a.xx.fbcdn.net:443":{"supports_spdy":true}, "p5-y3oofqgmql426-msq7azbh32n7v26w-462165-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "www.youtube-nocookie.com:443":{"supports_spdy":true}, "p5-6yhs4b2yfkn4a-ggks2dg5x7poqvip-825275-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-7icswdrfer3l4-mayhigtntvwkaw2f-263728-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lxwjfs2orduqq-pfzrwj6zzjylj37s-610200-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-x6prpnlbc7akm-72yh4bmg5caha54y-232103-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "csi.gstatic.com:443":{"supports_spdy":true}, "p5-jlh2m2qkfujxq-lioo3d4s77a7kxi6-236262-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-7ycmgmjjua3sq-vifuwjtegawyhhga-909925-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "cbks1.google.com:443":{"supports_spdy":true}, "p5-bjkrnwphjsz3m-u7cikgu4ksuxtrdq-743010-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qo6kok44ncofc-spcxzdqnj475ycwb-680863-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-idnbrnit7xfos-paiphpuhg74xirh5-581452-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ie2qknwtjzx3w-n4egxzbvyq2d4zfm-346631-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "encrypted-tbn1.gstatic.com:443":{"supports_spdy":true}, "ajax.googleapis.com:443":{"supports_spdy":true}, "p5-k33hucwoaf6ji-redhpmwcy3xigong-721743-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-eludi3fuddlki-dni4wcxu6qi5bm54-690683-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-j2dq5a5pjhwfe-grfy25fhwh5swxs2-429237-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wqjdxo5waqs7e-2wx5eomahxf7qfhx-421607-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-icbpgnm2eapa6-rzgdav56avvpcjo5-493237-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cvaelfe5aycza-weau6w2at3xrp274-132449-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "api.twitter.com:443":{"supports_spdy":true}, "p5-674wrp3ccpryu-wzhxznwl4myq6epg-429743-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sx6z5xbuhaquo-kxgqudkrlobnuqmt-305474-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-fgadhksuknfws-jy63lre4uieosp4p-289286-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-43l43jd32wiam-piin3doymc5dbcsn-560990-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-fywjc62uxnb2w-melluwhdkavvbpw5-112851-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-7wrlsj4ayerwa-qh54b7izkclgnusg-735518-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-a773hwvhpbphw-y5hhvv4cxs5tvnre-318319-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2sx5gfky6x5ks-qtambyavuzffquax-444683-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ox34qmlbwgfqk-w3gxzsmcd4nb523h-843789-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "upload.facebook.com:443":{"supports_spdy":true}, "code.google.com:443":{"supports_spdy":true}, "p5-himsde75y6oja-xdjc7nzsjw4dehqd-416625-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rp2xvdqa3zi7c-iq562flwljzdfxri-925414-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-x6prpnlbc7akm-72yh4bmg5caha54y-526317-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kpmnlnmck6szy-5zz5oxnz6hwqa7wz-836892-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hso2hueujahag-gftusru46f4bx7tu-132055-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gbreuqnqffz4c-m55qc77hwmqzuvol-486851-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-schtxuh3naxpk-xzgyyjwcyafdslgr-913197-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hhe6qj3ec5lji-u5fpzpeftnayvwcm-630036-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yvdfz4poeen34-kqsc75yc3cmvjdks-760559-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zlrlpvqf5kqig-wze5g4kc3vy3jgma-230359-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dqusfqk3cdxjw-l7l2w7ktunkn2zr2-666928-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "translate.google.com:443":{"supports_spdy":true}, "p5-khwzwgjbuixhk-rc5bng3vpvkgmefc-585367-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-66jpatwijqchs-3k7qdyqrgya46m6g-104319-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zlrlpvqf5kqig-wze5g4kc3vy3jgma-230359-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-7f37pfcc47kvi-jb7mk47wphekbedd-752337-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nv5rqejrvr5kg-7qcuu7ocea4l4k7h-914794-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6mhtzq6s5lxg2-gwepsilb5rtdv2lq-389421-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "talkgadget.google.com:443":{"supports_spdy":true}, "p5-jbq3ajx65d7bm-h6p3a2xwtttfoldw-420913-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-i3wbax73v4lgu-ejlzgsi2jezo36oc-199425-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-e5wg7xakhuyxy-nnlk2vpqnajycdik-858607-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sojbbswjikbma-laoqcbdrwxlpchz2-857336-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hoso7gda6ob4o-32caiekfblkxlulo-572367-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-u4bs6o7js5ade-caomzzu2vtq2rwyd-513678-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ff6jteouuiehs-k27no4qgrdutwysp-948246-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-q44xes6kc4jaa-hhjc46erd5ffm2ov-671238-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":{"4":100, "5":32, "6":0}, "supports_spdy":true}, "p5-fd73q3cduoqqa-vdw2uro5jnndvcre-600499-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "30.docs.google.com:443":{"supports_spdy":true}, "p5-jdzhgjuvtvn52-ssqtn33kstdwsji5-172858-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xeyn2uod4pz3o-aoyye5e75ft4tcb5-839698-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "gp3.googleusercontent.com:443":{"supports_spdy":true}, "p5-y6io7jstxdtt2-bvkuzzb3d64vh333-356878-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-237008-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hl4hked5t7d56-abmagr2vsqtdxokq-386775-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-727627-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5jmpm5t2uw7a4-mzuvaeqcqndiztuc-683635-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "encrypted-tbn2.gstatic.com:443":{"supports_spdy":true}, "p5-h5vlqg7fcvpj4-tcnsmh5idojqd5lt-476778-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qxnwzkjwmti76-ljaon3v7qyqf3xxt-685929-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3cjpznmvkjisy-o2d6lfmyeodsltph-940229-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sbw3eonguvtxo-74u33n4td4yxhfuy-910880-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-pody23c7zqm3c-znlwyrh2mv75lqxn-277694-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "chrome.google.com:443":{"supports_spdy":true}, "www.google-analytics.com:443":{"supports_spdy":true}, "p5-sx6z5xbuhaquo-kxgqudkrlobnuqmt-305474-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rir4vhud4nlt2-iabtakpozmzc35cf-247530-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "2542116.fls.doubleclick.net:443":{"supports_spdy":true}, "p5-orx4gczm3axxm-tqvtixsvz6bno3ha-955759-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5rawhofzyq4is-t7jldw3o5tzs2cxt-479240-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ptwy7sxtciccm-a7ejrhnkkerprert-419960-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ilivug22vna2u-hlfawopzpbdteoji-238474-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nddj7wjszox4g-su72hr6kkst4wixb-416378-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-n4eiz4cklqgfa-jqruit4vyn5ismzg-167938-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-tlkp4nehy45h2-snadheefsdxfljdp-700646-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "www-gm-opensocial.googleusercontent.com:443":{"supports_spdy":true}, "p5-5qux5pkrautfs-5gi7nbeerp4osz2g-532465-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "cdnjs.cloudflare.com:443":{"supports_spdy":true}, "p5-ryhzs7v3374wm-birkrqodoqgt7qc2-497014-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ndskuwycdpdw6-wn6gsgaeaucaz25r-673435-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-erwwitc7uoxya-ed3jrhpakyoeelms-541704-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-s6s2ab2fxwsl4-chevadwfh4cxe3nq-423522-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xyvlgf6tbjytc-72mo3xttdugjtozr-365717-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5ajtk76f5icp4-2knfi7dk4qb7kshi-650252-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rhf7cwy7horqa-dsy3titzkylv2drb-281659-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-h5vlqg7fcvpj4-tcnsmh5idojqd5lt-476778-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "maps-api-ssl.google.com:443":{"supports_spdy":true}, "mail.google.com:443":{"supports_spdy":true}, "p5-tbk3aqnbvt2s6-h6bbkum2rsz3v6tg-494504-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p5j6cvjxw7glc-nc3wy7gmxdwwe4j2-422333-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-b4gn5keak7ime-uubvelrkawdgjy2x-200693-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-au6oafffnybsm-tihmre2cfds2wvhk-802595-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "7f72f15a-a-53590c36-s-sites.googlegroups.com:443":{"supports_spdy":true}, "p5-u4bs6o7js5ade-caomzzu2vtq2rwyd-889469-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jlh2m2qkfujxq-lioo3d4s77a7kxi6-569428-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-srnmbtnbgniry-xno7upo2fkpb3ttl-497378-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5qux5pkrautfs-5gi7nbeerp4osz2g-159584-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lwfgvgsfnr5cu-vfossjg7y34kunjh-694854-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-so7ay4e3btk2g-hq62xqtw5gd32lmk-971718-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wmih5meoowiec-eok5mu37axqwjtoi-154318-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6hwe3nnp7zs6o-o7uchsrtb2t6jphz-697532-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-izzizrhspej6c-4nf5ybg4hbscfmp3-761860-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2s5o74tg3yowk-xme2ynndbwymcwip-873526-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ikcnmjs2tljic-eq6gcx5zdtljiqbw-443997-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ovy2hxb4njcaa-bu6z6btb47hebgu2-356768-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "encrypted-tbn3.gstatic.com:443":{"supports_spdy":true}, "p5-ebm44ukflehdo-uxycbn7qiugmdggl-756363-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nwuis2ilvkcjk-zfdpzqovvrmxehbl-265234-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-w2e6lfu574e2s-hpqrlm3hxjsxnvea-873007-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-45ui4ta7kx2ps-p6q7kvaa65i6ttzw-452584-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5m4pzueyfuyle-wfyhwpta7qdfyvtg-298217-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gxk2lmsifo74s-va4vuuwwkhq2lv5q-386571-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-l7nmp45hdgemi-yfvdrwjltcoj5xgz-523746-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dlpy6mk4mogxm-hz4efuigsynclpuj-330625-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-k33hucwoaf6ji-redhpmwcy3xigong-721743-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p4a2wfgqfbeg6-aqqinlwi6qeujc5b-143995-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p2-grh3azunruhu2-jfeeurv2ye6rmymu-if-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xeyn2uod4pz3o-aoyye5e75ft4tcb5-839698-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dlpy6mk4mogxm-hz4efuigsynclpuj-330625-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "cm.g.doubleclick.net:443":{"supports_spdy":true}, "p5-s7pgsxwhlpx36-nlx2tkejujbmet3d-126292-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bjkrnwphjsz3m-u7cikgu4ksuxtrdq-743010-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-twraaqi5qrk2s-u24lp7medixyh4vh-714519-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xinhz2m6vzwa4-t2guilspga2fvfgc-721593-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qyx4hsc7zmpda-itdnl4rrlwi4ljom-514994-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jsol7zotfim3s-cccz46njrrwzblpi-565619-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "lh4.ggpht.com:443":{"supports_spdy":true}, "p2-il37r4f25rliq-4jjviv2hge7cmcnn-790496-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-klwya6j427uig-vefbtzh3q3jn3m2m-498447-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "0.docs.google.com:443":{"supports_spdy":true}, "www.blogger.com:443":{"supports_spdy":true}, "p5-n4oulxgtprsxk-kdiad7kzqd2kinna-513451-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-gfsoe4z4sw7ke-r77yvbpevfx362ns-680264-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6w3rmfdzu3374-rcrzmvj63hchunas-369551-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jz2kxkptaaegq-liyakgpsxovm7e42-257376-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-myjmkhugt7ljw-ssmqwjawystfck26-649187-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-q36otmfnd6gli-lkwvql34npoa26im-627040-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-n3yf4y572mmus-bfpuviogssunvfss-611017-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "s2.youtube.com:443":{"supports_spdy":true}, "i2.ytimg.com:443":{"supports_spdy":true}, "p5-zgb3lruwocigo-pfhdtb6bogrhzp42-240129-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3jnka3dk5icnw-dcpnz6zdktesgfni-412272-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3noz366urq53k-thwqkaqmfstcu3sv-473816-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2hu4j6ojij6wu-ffo5koombsm7kb4l-510787-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "pt-br.facebook.com:443":{"supports_spdy":true}, "p5-yh2vpimqs4gaq-bwr5obbmii2e6dda-762688-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "badge.facebook.com:443":{"supports_spdy":true}, "p5-p5hz3qifwtrgs-shmy6okanw4l5aqx-471715-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hroxheo3y5y4o-ybaixf5vnadgyn4c-634577-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-whn55lowchdpe-37xzucdg5we7jjl3-321035-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "sites.google.com:443":{"supports_spdy":true}, "26.docs.google.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-721242-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-682426-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nrrvab63dupwe-lw5dq2kr77erocby-718779-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-fibs2dph4voo6-2e2fpqrqov74eyhi-274106-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lajg3eplutr6c-yza4lrlgf7jqrfei-513494-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "spreadsheets.google.com:443":{"supports_spdy":true}, "p5-v2hdsc3r5jabg-k2gsgq6khbksb2qo-842656-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-g6ohmschaspva-jraj7uzcnhx25iu4-176880-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dhg6wi6yop6d2-t2qtat3gsfhmco5a-581465-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-r6yajtebapweu-eo7ypzlergyhvko3-486395-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-uehhlvmifktra-44f5ab7cnu5ve63d-310265-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kvjr3w4qrkple-hvwfmqqxstezix2h-174808-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-65kxpzz7rud6y-qqjmjql23mgqvr5q-197905-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hoso7gda6ob4o-32caiekfblkxlulo-572367-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yh2vpimqs4gaq-bwr5obbmii2e6dda-346913-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ovy2hxb4njcaa-bu6z6btb47hebgu2-356768-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-erwwitc7uoxya-ed3jrhpakyoeelms-541704-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-26sb7xej3ssfg-ldrd63mge5lviypx-728024-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "maps.googleapis.com:443":{"supports_spdy":true}, "static.xx.fbcdn.net:443":{"supports_spdy":true}, "p5-eact5ltxzh3vk-dfnum6katuu6giez-673378-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yh2vpimqs4gaq-bwr5obbmii2e6dda-521737-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ilivug22vna2u-hlfawopzpbdteoji-177497-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ia23qd6a7kwbi-lhrd7a2dpndxwbio-246402-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ozwsat5twe5om-dvg2x4fdsdntrjn5-494515-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dhg6wi6yop6d2-t2qtat3gsfhmco5a-229005-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-aeo56q5xc2e54-aeqokmm35btoui6x-569073-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-i3wbax73v4lgu-ejlzgsi2jezo36oc-199425-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p4-h3ro6psoa3tv4-hgpluk2k3o7s5xe5-269259-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ajgggeaeekk56-oq7dcsahqv2p77ux-514547-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-usvwly5o33dmk-acyfnqpcvnhqhe6v-280372-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dsfigd3lzgrrc-hlfmk2qd727k52hf-601079-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-42vv5argbvwrk-vej5edql2r3rm5va-780453-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "lh5.googleusercontent.com:443":{"supports_spdy":true}, "p5-ia23qd6a7kwbi-lhrd7a2dpndxwbio-246402-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bz6f55wpudhnw-4mu45ltlylus6l2i-105251-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-icbpgnm2eapa6-rzgdav56avvpcjo5-426434-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ciredmjnkwsae-jjdwwilehmlwor4m-307413-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4oiwwkuklt3wi-c6525vmmvotkacpa-339007-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yand6dwnexyyg-7pmj576xxove62ae-721521-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zobxg3yvaneqy-mjqnri7efovmytm6-930325-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lajg3eplutr6c-yza4lrlgf7jqrfei-513494-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nb73upibstxry-6kam6wqj5fw3zwh6-483789-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ncxvspfuda43u-rsuu7wm5xt2hp43g-528913-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "www.googleapis.com:443":{"supports_spdy":true}, "p5-ghkz2fchhycxi-7xphn5vlfro6ymgb-591134-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-whc4qucaychz6-c7kh7c7ogin2zve5-638063-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wzi375tsvuzwy-puc2ms3y5ko4md2y-246538-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "gp4.googleusercontent.com:443":{"supports_spdy":true}, "ssl.gstatic.com:443":{"settings":{"4":100, "5":16, "6":0}, "supports_spdy":true}, "support.google.com:443":{"supports_spdy":true}, "p5-i7hurkoj5zh62-lhwr7dsy2psoqswn-161311-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3fa5asnfgw73u-5kgxvcllgnw3pgkw-921986-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qabf4og4rpvbu-d6rvm3kfd5v2l6gh-189287-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-vkwzvbwzwlpsq-awojmz7clh2itxnt-308536-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-755kho2oiz63s-rfmnpjf47zqtm2nh-588438-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rriluryge5knk-o5x4pmztxj2v3iks-603087-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ffqq3dapqi7xu-p3zlkq4oybjhchm6-460465-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xl7ehc6o3m6l2-lolrfsz4fxxir7ku-601495-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-f3m3egsrtl2ew-bouikni2e7bp6enf-495860-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "translate.googleapis.com:443":{"supports_spdy":true}, "p5-fssnezxmwqr7q-ucououqrnuzuxry7-897248-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6qp5ujulhixj2-zons4mjrt2hgtb5e-215057-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-e5wg7xakhuyxy-nnlk2vpqnajycdik-858607-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-594065-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "www.googleadservices.com:443":{"settings":{"4":100, "5":32, "6":0}, "supports_spdy":true}, "p5-4utjuivhqbens-c7iqcif52t5mefk7-731285-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-uiyc23qhsihjs-dlsscl7io7wey2e2-431946-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-qcv2wiilpmytu-m2ilzt6b534vpwgg-221565-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bsh3laiirvl24-ijukwyedej5xxjae-900508-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-oez74cjjg6j4s-2hkp7v75byhm66ty-294032-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dehnfhh7q22fy-3qemuotdjarroclx-887936-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-elg6to6y6cjcu-tvcx7afnuu4borrq-382048-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-aeo56q5xc2e54-aeqokmm35btoui6x-569073-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hlrt4ruribkjy-ncrfehcjagtnbuec-566351-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5iqpykttcmow2-z37456l2q5yuekfm-911574-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-2tzhmwj22ymua-febq2ovlczvq7tnt-373420-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3ighf3jtjjs4g-7bkmt7qgkpsvawnk-810425-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dqa6cbnls4tf4-zvmpodqrd43lc5sj-692903-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kydnrkpvuceao-qpwlt222a7f6jnkz-910462-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-so7ay4e3btk2g-hq62xqtw5gd32lmk-971718-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xinhz2m6vzwa4-t2guilspga2fvfgc-684004-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ikcnmjs2tljic-eq6gcx5zdtljiqbw-443997-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-4wkr4q6vxm3ba-wohuvwehrzow3xcq-289867-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-xzwuzarxbl27c-syythpja6dp6cb3p-979897-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "21.docs.google.com:443":{"supports_spdy":true}, "p5-umrmhrc2kbl4q-jzlsrg4hj5hgghou-154343-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kinflx6fhvaru-jja6seo5wbbv6hzz-550640-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nv3e3hozb3keq-byzr6g2r5rvucbfq-584755-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "encrypted-tbn1.google.com:443":{"supports_spdy":true}, "p5-osrvwm7cro43o-bgkk7uy6wfoqqiwx-846290-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "btbuckets.appspot.com:443":{"supports_spdy":true}, "p5-wqjdxo5waqs7e-2wx5eomahxf7qfhx-421607-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "lh6.googleusercontent.com:443":{"supports_spdy":true}, "p5-5yosurzocrlik-ufv5sptqmazfhb54-478326-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-807250-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-luti73rlkna6w-dpmnclvkisnhoyfh-701742-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "secure.gravatar.com:443":{"supports_spdy":true}, "p5-hsgllhndo7bn6-qaq4gzuumlimdvip-237008-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "images-focus-opensocial.googleusercontent.com:443":{"supports_spdy":true}, "p5-sojbbswjikbma-laoqcbdrwxlpchz2-247374-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-c2dht5r6awxae-z55zbcbjeqxnhark-884580-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "gdata.youtube.com:443":{"supports_spdy":true}, "p5-xp3g3dvikoxhs-nz3ozhsbupwxvwdx-864778-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-j3wb2da636vfi-xkvowxesg7dvkk4f-238668-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-5qux5pkrautfs-5gi7nbeerp4osz2g-282219-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-epmhbmixw3cy4-ggmdumkupuslguev-816586-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dhjeomq6zosrm-ku7n6dgtldwqxwuc-987119-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "secure.facebook.com:443":{"supports_spdy":true}, "p5-pgwzstd3iya46-acfigsixadf42y2v-603468-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hroxheo3y5y4o-ybaixf5vnadgyn4c-502238-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-vq6qedqe5fwie-2zu7exkurjbtzle2-146297-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-f3m3egsrtl2ew-bouikni2e7bp6enf-184375-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "lh5.ggpht.com:443":{"supports_spdy":true}, "p5-4t4kmfvgt3b2g-w4cyyoqwbelgbqrv-695443-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-dtqgluhodeca6-yt3wcpbd3ea3wbhm-583093-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "sphotos-b.xx.fbcdn.net:443":{"supports_spdy":true}, "p5-izteo7j7hrsem-f7npt4456o6rzuzd-895161-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-pxi3kruflj5pi-udcbwo7ejluwpp5q-830645-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zgb3lruwocigo-pfhdtb6bogrhzp42-240129-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-whzbtbaiuxyjy-ffdy4b7d7foeq7x5-103608-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-vk5qyhazmbims-ca7nwj3xv6rhxmub-975729-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-sbszekkio6u2e-wbq3w25n7lmrhea3-199847-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yh2vpimqs4gaq-bwr5obbmii2e6dda-992885-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-jebjz7ylsw4yw-oexumdmmzwetitsp-343883-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nh57qiwrgner6-o3aamqjjjchluesv-444523-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-nn6psnxsq2sjs-fr2rdss26kd2rm4r-848754-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-twzuqpkflzf4y-3cxiqgub4gts7kpk-138384-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "maps.gstatic.com:443":{"supports_spdy":true}, "p5-twraaqi5qrk2s-u24lp7medixyh4vh-678708-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-osrvwm7cro43o-bgkk7uy6wfoqqiwx-846290-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bsh3laiirvl24-ijukwyedej5xxjae-900508-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hujhjk54glmso-funus3fwd4266bu6-984677-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p4uihedlzo6vu-o7awchsllygp2st7-500532-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-f3m3egsrtl2ew-bouikni2e7bp6enf-184375-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-cvaelfe5aycza-weau6w2at3xrp274-368807-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "s0.2mdn.net:443":{"supports_spdy":true}, "p5-n4oulxgtprsxk-kdiad7kzqd2kinna-513451-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-bv4dew7sfq24k-6vsju7ljsuwfuaa4-852718-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "tpc.googlesyndication.com:443":{"supports_spdy":true}, "p5-hehinwqidz5fq-4wcjp7j2ipjhyatl-854406-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yhz4dpj6hxcqy-xqr225ckb6rl7chd-468601-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ilivug22vna2u-hlfawopzpbdteoji-618826-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yjxjzvacwynss-t3n5tdfbwbnw4kll-623308-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-pzy6qiyhmb4am-3c5rik66e37r2o6x-365201-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-wmih5meoowiec-eok5mu37axqwjtoi-727973-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-koaxsaeifjagu-7o7e3yqhkyc22xwx-594820-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yx77jgrymhn2e-hmrehqxtfr2zf4w3-963089-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "encrypted-tbn2.google.com:443":{"supports_spdy":true}, "p5-enijxbmmc6e2a-hp7ujfjvheu3c5tz-382409-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "accounts.youtube.com:443":{"supports_spdy":true}, "p5-77vs572rbtnay-uaoxtd47j3rhyw6y-528562-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-hdmtpciwzvk2i-aeqvu3htyfmwv4ud-751871-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-r7iaqy7fvsaw2-e47oaatvvpattbgk-954667-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "gg.google.com:443":{"supports_spdy":true}, "p5-elg6to6y6cjcu-tvcx7afnuu4borrq-382048-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rhsqfp47quu5c-nezwj7loum54uy4y-241738-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-smlfirdz2fbwq-rsmjhowixjnl2dpt-259968-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-6tgonxa45qcoc-ccxbmghljlor2jdl-707206-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-x6prpnlbc7akm-72yh4bmg5caha54y-526317-s1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-lji4cwgc6r434-nqhe7gmhazufjoav-643030-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-p5hz3qifwtrgs-shmy6okanw4l5aqx-757009-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-v6idu436cavn2-y6mrhos2az4mlf4y-496692-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-id3amq23r5wjs-5nsejlgcpsxmzw2s-337917-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-zobxg3yvaneqy-mjqnri7efovmytm6-713660-i2-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-koaxsaeifjagu-7o7e3yqhkyc22xwx-594820-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "apis.google.com:443":{"settings":{"4":100, "5":12, "6":0}, "supports_spdy":true}, "p5-shdalr76k6cxa-ufpqan36zgn3za5y-835535-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-oamzjt547fz3q-5ktv6uga3kffxykq-959854-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yh2vpimqs4gaq-bwr5obbmii2e6dda-915565-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-rriluryge5knk-o5x4pmztxj2v3iks-603087-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "www.facebook.com:443":{"supports_spdy":true}, "94.docs.google.com:443":{"supports_spdy":true}, "p5-qabf4og4rpvbu-d6rvm3kfd5v2l6gh-189287-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-3ds2uzwczgvxm-yqgvth3xbi2mj6ag-936551-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-mz3mb3duq7fwc-z5w2soajieo5guzm-709336-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-edkjkceyb2nuk-4p6qb6d74i7hd2mk-909518-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-kxddkg2yih4cy-qisbcg4xjvtthndp-900542-i1-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}, "p5-ox34qmlbwgfqk-w3gxzsmcd4nb523h-843789-i1-v6exp3-v4.metric.gstatic.com:443":{"supports_spdy":true}, "p5-yhz4dpj6hxcqy-xqr225ckb6rl7chd-468601-i2-v6exp3-ds.metric.gstatic.com:443":{"supports_spdy":true}}}}, "homepage_changed":true, "custom_handlers":{"registered_protocol_handlers":[{"default":true, "title":"E-mail de WebMail da Engenharia UFJF", "url":"hxxps://mail.google.com/mail/?extsrc=mailto&url=%s", "protocol":"mailto"}], "enabled":true}, "extensions":{"alerts":{"initialized":true}, "chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]}, "sideload_wipeout_done":true, "sideload_wipeout_bubble_shown":3, "blacklistupdate":{"lastpingday":"13016530804379531", "version":"0.0.0.148"}, "settings":{"bndahdijlcnncjbpammoedeapmlobllc":{"blacklist":true}, "lndempehphjoeimfchjflohpmhamiamf":{"blacklist":true}, "flmmgcfcpbfddenepkfmgfpbaceolcoe":{"blacklist":true}, "mfncimdpmknolnnnccdmkpnpkaofonkc":{"blacklist":true}, "loldehkdjdncebfnncknlkdchjclifbn":{"blacklist":true}, "gpgehbjbkfhngdlfpfeokjgbkmmokjhe":{"blacklist":true}, "ggkpicnfnljflddbdoeeaajjgepapcbf":{"blacklist":true}, "pfaooklcbjnkgconjjepimkohgcjmdji":{"blacklist":true}, "pmbjemmaclljifpmnlagkcgpbcipdldb":{"blacklist":true}, "ojglppmhgfohhfeinlhklglifnbfebak":{"blacklist":true}, "cpcimcpneglaogklgcfniikmjipcgheg":{"ack_external":true}, "fpbkafpphnhlpakobppekmkebmbhkoco":{"blacklist":true}, "jaoiiahdoamhobamdkmcmielddmnelko":{"blacklist":true}, "ghgphbmpcfgkfneodjpbdanmdoemklio":{"blacklist":true}, "acomnmbomlajgjbcijkflekoojdfcldj":{"blacklist":true}, "ehgoiaffgjoinpkllmmnikghgpghnabc":{"blacklist":true}, "efbeabpbbkahnnjalakldjfhljboclkf":{"blacklist":true}, "cmjphjljejnfgdbkdgdlclaabimpknna":{"blacklist":true}, "pndadpldhngimdmhnajebjldbmcbpjol":{"blacklist":true}, "kdmmkfaghgcicheaimnpffeeekheafkb":{"from_bookmark":false, "last_active_pingday":"12984476401997467", "location":1, "was_installed_by_default":false, "install_time":"13016081829068981", "creation_flags":9, "page_ordinal":"n", "lastpingday":"13016530803380531", "app_launcher_ordinal":"x", "state":1, "from_webstore":true, "manifest":{"description":"Take the guesswork out of home remodeling projects! Autodesk\u00ae Homestyler\u00ae is free and it's easy to get started.", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD14qvyCvCpI6dD8hoIwaF+FZQWxa2+w6unQBKpwklo4DE9N5AlwDUMYg7YMYH+VaIS3UzMk26Nf8N0bac2XksJf8+GQk3mai95YbVesZNuwnteBrPV4lzXX+12ArUy1h0SletrCxieSJoe0Qyr3FxjltRpKcPhBgmDiJ/J0lc5kwIDAQAB", "update_url":"hxxps://clients2.google.com/service/update2/crx", "name":"Autodesk Homestyler", "icons":{"128":"icon_128.png"}, "app":{"urls":["hxxp://www.homestyler.com/designer"], "launch":{"web_url":"hxxp://www.homestyler.com/designer"}}, "version":"2.3", "manifest_version":2}, "path":"kdmmkfaghgcicheaimnpffeeekheafkb\\2.3_0", "active_bit":false}, "nibohffepnilngkecenfdgnokfhmnkod":{"blacklist":true}, "jafnimahlamccccjbkhjjpeiipiedpik":{"blacklist":true}, "indfhnliadamglhalanplbajgenpjdml":{"blacklist":true}, "goedioiidkokkbobdnopnlnaaalniegm":{"blacklist":true}, "amahogbojgleppliihjnmkbnnnfdbmck":{"from_bookmark":false, "last_active_pingday":"13004265629083192", "location":1, "was_installed_by_default":false, "install_time":"13004149576538401", "creation_flags":9, "page_ordinal":"n", "lastpingday":"13016530803380531", "app_launcher_ordinal":"z", "state":1, "from_webstore":true, "manifest":{"name":"Blackjack", "description":"Blackjack \u00e9 um cl\u00e1ssico chips de cart\u00e3o engra\u00e7ado game.Select para lugar de aposta ou escolher Min ou Max aposta. Clique Seguros contra um Blackjack Dealer. Revendedor deve bater soft 17", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9u97tE8+c2s20eFS6JdgjvFNSvi9NPupgzzeYtm9tIlWZMdYY9VLlEO6v6xAfL3jgA2Ldu9saNjmQM85iaScHNW3O1ZMoWrDYSKXZ4PDIRFh4lr9AOi6IOizkdZ+o2dZq/yn3f2I0HqU/UaArilPj+MxHAKXzn4F2+nJK+05YxwIDAQAB", "default_locale":"en", "update_url":"hxxp://clients2.google.com/service/update2/crx", "current_locale":"pt_BR", "icons":{"128":"128.png"}, "version":"2.0.0", "app":{"urls":["hxxp://www.higamecenter.com/web-store/blackjack.php"], "launch":{"web_url":"hxxp://www.higamecenter.com/web-store/blackjack.php"}}, "manifest_version":2}, "path":"amahogbojgleppliihjnmkbnnnfdbmck\\2.0.0_0", "active_bit":false}, "noefghcilkpcabnhhilojimkkjplhcnd":{"blacklist":true}, "ibnhidklhjoopebonemhliklfbhndjjd":{"blacklist":true}, "lceaiepehinnomgijphkmjccbigkljkj":{"blacklist":true}, "iljfgjkppapinhcgonhjnipfppfmfedh":{"blacklist":true}, "bmjhmeeepkkbmjdajachipfgihmpokpd":{"blacklist":true}, "ookcgejbfhcmcanfkfmmmpahflnlajbl":{"blacklist":true}, "cbbbpmlnlpnjojeplppgeilanlihoojg":{"blacklist":true}, "ennkphjdgehloodpbhlhldgbnhmacadg":{"from_bookmark":false, "active_permissions":{"api":["app.currentWindowInternal", "app.runtime", "app.window"], "explicit_host":["chrome://settings-frame/*"]}, "location":5, "events":["app.runtime.onLaunched"], "running":false, "install_time":"13013998398002289", "creation_flags":1, "page_ordinal":"n", "manifest":{"name":"Settings", "description":"Settings", "permissions":["chrome://settings-frame/"], "app":{"background":{"scripts":["settings_app.js"]}}, "icons":{"128":"settings_app_icon_128.png", "48":"settings_app_icon_48.png", "32":"settings_app_icon_32.png", "16":"settings_app_icon_16.png"}, "display_in_launcher":false, "version":"0.2", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB", "manifest_version":2}, "app_launcher_ordinal":"zm", "was_installed_by_default":false, "from_webstore":false, "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\27.0.1453.94\\resources\\settings_app"}, "nckmikohoilfkcoahbjpbgbpegcjgngm":{"blacklist":true}, "jolgdmpdhloiienhblmiimamomhdphlk":{"blacklist":true}, "dkhkecikbdfpoiopnnpoeglbdphgflmf":{"blacklist":true}, "jbnafcjbcfgejacaanogofkkehcomamp":{"blacklist":true}, "amoobcjlpgloocplpikcldcpjjdnoeii":{"blacklist":true}, "jkmhalpofmlfeglboejbchpoijnkmcgh":{"blacklist":true}, "hcpndbchnlgojmnijaldkicigmihmdca":{"blacklist":true}, "bccdgfmbcjkfkinkkagaflgdaoaamogo":{"blacklist":true}, "kdpcgcpfnkolljkhgdbbgimplfkhakec":{"blacklist":true}, "kljhmdlkclaglodecegamnpioaflmage":{"blacklist":true}, "nloaaepkhcnmoakooihnefhhggbmemed":{"blacklist":true}, "kfodnkhdfdgeaegehjjnkjkieloddelg":{"blacklist":true}, "gchbiabnbdikkgfhnkclecjncojnkmhb":{"blacklist":true}, "jpeijjbllejgmokmahkeommcodahoobm":{"blacklist":true}, "bldgnkigdcpgnbfehgbameigoohecdfl":{"blacklist":true}, "lcmpleboacinanffcdgenhhbkboclkjb":{"blacklist":true}, "kkhomejdleoonmbdhcigkhkjcghngncf":{"blacklist":true}, "jpgidahfcgiajlcbleeiaibpmmblcmnb":{"blacklist":true}, "fbjjhbijaiopkcdolheliknnjlkaekeb":{"blacklist":true}, "pkhidkonipdjidjglnkfcfhnkfnlefbk":{"blacklist":true}, "pgelifedkjaohmjehecojkfldinjlamn":{"blacklist":true}, "hjnigaibahdeadcdnpnommdehajodlhc":{"blacklist":true}, "lookpbabilcplifjdeifacodednpacmk":{"blacklist":true}, "gkjmgdpdndoaiholejnmdbbpdaafahmm":{"blacklist":true}, "kbmkecfipofebpaikgifajmahdmadlnb":{"blacklist":true}, "jnehbnhjkefckoljkcmjfgkkeejhipgi":{"blacklist":true}, "ogjbodghhojomghbdfnlkppdagkfjede":{"blacklist":true}, "eagmciolnojfofmggkffclbonhleeank":{"blacklist":true}, "hecijapnccjhonbmacmkmffooodfokoo":{"blacklist":true}, "lnjgjionmhobdfdegbciceafphgemjnc":{"blacklist":true}, "cgnkbnaiipmfbakpmhllalggoepniemh":{"blacklist":true}, "fbhiehmngojjcmljddjmgpmcockbccmo":{"blacklist":true}, "eijbdinddjecmebnlienfoijpjjobkjh":{"blacklist":true}, "jjnkfllhcgkgnfbekpnmoikpfihpjfli":{"blacklist":true}, "mlmegahemifabfmdnndafagnncfbnahn":{"blacklist":true}, "ebhdpnhjbfkchfamjcpebpeddhhicnab":{"blacklist":true}, "nmmnodocfckpoddcgihiihcdinaonckb":{"blacklist":true}, "odeckaficnaplobiiaomegfbokokehhb":{"blacklist":true}, "jhhabiomopkibeecgngiggmopkeofacl":{"blacklist":true}, "hmmoglffhpmacaacfbbmbbkcbdkjphnc":{"blacklist":true}, "gandihaiobadcggbfkhpbkocmiemjlnf":{"blacklist":true}, "hhommgjjeekpmpcbdmfnhpchijdkgaei":{"blacklist":true}, "ahfgeienlihckogmohjhadlkjgocpleb":{"from_bookmark":false, "page_index":0, "active_permissions":{"api":["management", "webstorePrivate"]}, "location":5, "was_installed_by_default":false, "install_time":"13013998398002289", "creation_flags":1, "page_ordinal":"n", "app_launcher_index":-2, "app_launcher_ordinal":"h", "from_webstore":false, "manifest":{"name":"Store", "app":{"urls":["hxxps://chrome.google.com/webstore"], "launch":{"web_url":"hxxps://chrome.google.com/webstore"}}, "description":"Chrome Web Store", "version":"0.2", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB", "permissions":["webstorePrivate", "management"], "icons":{"128":"webstore_icon_128.png", "16":"webstore_icon_16.png"}}, "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\27.0.1453.94\\resources\\web_store"}, "acchaoeabgiclhngknbkegekbfphgndl":{"blacklist":true}, "cfdedhfmaeiheeklgodcmcgfpedooocj":{"blacklist":true}, "clapnamcglekekmamicmbahkghdcjaeh":{"blacklist":true}, "gkjeccpmibljcfpfapfljciimedljpnm":{"blacklist":true}, "bnffnggkphadlnoopcoakdnkellnifjp":{"blacklist":true}, "lcbfjcekjncehfbcimlogajbekmoeblm":{"blacklist":true}, "boclfockfmgcppbajihcgajhpggaakgl":{"blacklist":true}, "pjloefkigphblpjminnlpbhjchjafcfc":{"blacklist":true}, "hnkcpoijaeegompjgbjjhkdmljldaccg":{"blacklist":true}, "amfgdngndpfldigimkcindjalokfnmem":{"blacklist":true}, "einmhcleeonenkkldjlmhhcmgolhblhh":{"blacklist":true}, "kelljdoinjlkmkncffgadbebgpmlcang":{"blacklist":true}, "bhdkpmneahdelgdgfhddianklldfoell":{"blacklist":true}, "nbfcehkihbmpebblmfkihadebllgfmgl":{"blacklist":true}, "pbnmelddedlommnmllmfhoephaidddmk":{"from_bookmark":false, "last_active_pingday":"13004179226502752", "location":1, "was_installed_by_default":false, "install_time":"13003356616656000", "creation_flags":9, "page_ordinal":"n", "lastpingday":"13016530803380531", "app_launcher_ordinal":"yn", "state":1, "from_webstore":true, "manifest":{"name":"Flow Free", "description":"Flow Free (PC version) is a simple yet addictive puzzle game. Just Connect matching colors with pipe to create a flow :) Have fun", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjOj17aFSG3NRQ7oXGqf7OYnxvvP2k2yf6oeTsrNvH4Crz+6Mdo1mgTz+9BFQKY1UULx9/zTe+9dMcWkdbXBGBfWrZv94zCI6dG17ziiDjNOh+Oak2HYZkPEcC3ZESl1vsV/J33FRu2EDzFuoWzETL3fYNBNUxkWm/YEUUm8OFYwIDAQAB", "default_locale":"en", "update_url":"hxxp://clients2.google.com/service/update2/crx", "current_locale":"pt_BR", "icons":{"128":"icon_128.png", "16":"icon_16.png"}, "version":"1.2", "app":{"launch":{"web_url":"hxxp://moh97.us/flow/"}}, "manifest_version":2}, "path":"pbnmelddedlommnmllmfhoephaidddmk\\1.2_0", "active_bit":false}, "hhlgbfcfbkhlmajakkcjippgpcmejkko":{"blacklist":true}, "lambangeielkjcnmioccboaphdfcffib":{"blacklist":true}, "jiofcofpcbijcnlpekdkpmgjdppajbjb":{"blacklist":true}, "pfhlnanelpgjbhndafjamnpfhkjadoip":{"blacklist":true}, "omnicnmbagoinlpamknknbcgopadcoci":{"blacklist":true}, "mknjbohhleiicbpagpgmhoaigbblmnic":{"blacklist":true}, "mickhiflmjglhpdpfigpkpjiipfdlphj":{"blacklist":true}, "canhmdgddepdjikkjhpmhcfdkkjdbppi":{"blacklist":true}, "kpbfifeiomkhocgkkffocfinoedcjebg":{"blacklist":true}, "akadaakimgegecohlifeejdnnjbnobop":{"blacklist":true}, "gdlgbpbmiiagaikjbednkikinokbkbcb":{"blacklist":true}, "pfckhplmfbblecglndaigpojefidapai":{"blacklist":true}, "bhkdpodceenlocjmmgodpbbpkafkpljc":{"blacklist":true}, "hgbaomphocgmdpmiohjclchaaljpaelp":{"blacklist":true}, "oidjdpbndkjhmhmgdoggibcjnippkcgo":{"blacklist":true}, "aldalonecchncedclgcndcndgilaclnk":{"blacklist":true}, "ijenlpgidnapbndonoinbkhekgjonojg":{"blacklist":true}, "gkcfodgjdcijjlliehfhgohlkemcbobl":{"blacklist":true}, "kdicckonacionpoompfoopggkgimjpcb":{"blacklist":true}, "kelcbonmemlciepjdmfcifnhloeammhj":{"blacklist":true}, "khgjomcpjblpoaipanicbfjfgcfbpegp":{"blacklist":true}, "iiiinekimabooeihccihfopoadcaaphn":{"blacklist":true}, "dmhgenmamfphbclmhdgmffajkfommkom":{"blacklist":true}, "hpcdoodjfcmpcpkeendjnjkeinimhkih":{"blacklist":true}, "hnpgphegniamplngojaffllhjahkgbfl":{"blacklist":true}, "mpcglemopeoeapmagdbeenepkdbajape":{"blacklist":true}, "fhlkffpjoajppmhcakbkjndbjfljccpi":{"blacklist":true}, "hgboiaecclcbjphldpbgfgggcbihmnai":{"blacklist":true}, "kbipembkfhbdmkkkfbigmohilmknjnof":{"blacklist":true}, "hfpfbhnmbbigpmoodjemilggabklpopj":{"blacklist":true}, "bioeopenmokdgbekbgpgnacecjmpckbb":{"blacklist":true}, "jdiakcmbpmcnniggjcmcjknnklpdlogc":{"blacklist":true}, "hnonhhpgjnjcjfbkjdpfbkfpaodcmncb":{"blacklist":true}, "digmihafmlfkgdbjjdgbcojghcgcoeoa":{"blacklist":true}, "doneghboglgnflpdicnkaojmmljgejkj":{"blacklist":true}, "dgkemngdheppgohkjjelnkjmdeimmfml":{"blacklist":true}, "oebmjchahlpmalnjpeagiibojcbfmema":{"blacklist":true}, "mjhlngjakabhonjagnlimeicooahajpl":{"blacklist":true}, "bokkificjhapflinbdejegngffgkcgfe":{"blacklist":true}, "gfmmoiakbmdohkgeoekiokjgljcminig":{"blacklist":true}, "cniodhfhdiidogekcjkplecimemfocpn":{"blacklist":true}, "kdfahjokahcbmecgaandpobmgiiknagf":{"blacklist":true}, "cpiiakoibaohkfoaijaigdnocfolnmll":{"blacklist":true}, "blpcfgokakmgnkcojhhkbfbldkacnbeo":{"from_bookmark":true, "ack_external":true, "last_active_pingday":"13007890810810001", "location":1, "was_installed_by_default":true, "install_time":"13011915693822873", "creation_flags":153, "page_ordinal":"n", "lastpingday":"13016530803380531", "app_launcher_ordinal":"t", "state":1, "from_webstore":true, "manifest":{"name":"YouTube", "description":"A comunidade de v\u00eddeos on-line mais popular do mundo.", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB", "default_locale":"en", "update_url":"hxxp://clients2.google.com/service/update2/crx", "current_locale":"pt_BR", "icons":{"128":"128.png"}, "version":"4.2.6", "permissions":["appNotifications"], "app":{"launch":{"web_url":"hxxp://www.youtube.com/?feature=ytca", "container":"tab"}, "web_content":{"origin":"hxxp://www.youtube.com", "enabled":true}}, "manifest_version":2}, "path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.6_0", "active_bit":false}, "gdggdkkjecogagaffaemnbfmllcoihjp":{"blacklist":true}, "jihmekmccilkocefjpejdebpapohlhjb":{"blacklist":true}, "jokbafidjfknjbchmcakabjgdiiacgek":{"blacklist":true}, "ndiogongcmocdgjciemhagfhpjamehpe":{"blacklist":true}, "dkpdmjefniplpkalcgnainfmmclllpnn":{"blacklist":true}, "gekkhpjigmckhgmgngadbeknekgpgolb":{"blacklist":true}, "ifbkndkaolfbjjhnnhfmkbkoclpdkpli":{"blacklist":true}, "jiiccolbjkhpgockodneljpejdeaaodf":{"blacklist":true}, "eihjeehdobnpkonebmpanonopghepfle":{"blacklist":true}, "kgbmmcjgkkecjcafigegjphkmkdpnggo":{"blacklist":true}, "jabpdgllijbnknhkgjideeajfofafckp":{"blacklist":true}, "maakimnachffhlgdhfomaejeeaikgjap":{"blacklist":true}, "ejijgghlncnaphklndknkbkclebfboca":{"blacklist":true}, "lnahlgmhpghkhmafjppdidhcoaomipfg":{"blacklist":true}, "dpcdiabehkofdddfhdmkgkndjilfoppd":{"blacklist":true}, "fclheclkknbgfndeahkfdomollhmfkcn":{"blacklist":true}, "cconecmbohgadkjghlfbchmjpgbobkaf":{"blacklist":true}, "danapgfidmepmcfbjjacceiaiiioieio":{"blacklist":true}, "dfoegfajplmijblljfancdapbdaopebb":{"blacklist":true}, "obhplmafmpmelgapjjbfhcdkicnhakhf":{"blacklist":true}, "kojkdbedffnppdoalcfkkeelbhbklhgp":{"blacklist":true}, "mbifidpgmfiielflaipknojhpfcljmgo":{"blacklist":true}, "nnioepmjbjjlflmdgjanlcmbjahljeeo":{"blacklist":true}, "flalbhkmnijcnpialgakicllnabckmhi":{"blacklist":true}, "lodollblmkailkkdiijmoccefdfjohgk":{"blacklist":true}, "hhjmkijkgojfifipdgmiemghfikbohcm":{"blacklist":true}, "ekikoahmboikmmclhnijlmldpmleahnh":{"blacklist":true}, "jmifipgdcllamghkhdplfjffkciekbgo":{"blacklist":true}, "fihepkmlkmciffbhijldnpmifhbkiinp":{"blacklist":true}, "onpnpccdagncipgnoofbhchlbajcjnkd":{"blacklist":true}, "gjkbghdignnlcknknflbigpammebiolo":{"blacklist":true}, "elcaigjcaijbfpjngaekbblphmfjdhfo":{"blacklist":true}, "diinokaoicgobepmadnmedlhdfnpehcj":{"blacklist":true}, "jindbcpkhnnnjgcjgmkjedbibibiojjf":{"blacklist":true}, "mjalegijammcloleihdmooifidcjggjp":{"blacklist":true}, "bkkchglolnigbfncnbnnbhhempjkdpkf":{"blacklist":true}, "echngajnlpjeacbanjejlhcajjfoedcc":{"blacklist":true}, "aphncaagnlabkeipnbbicmcahnamibgb":{"blacklist":true}, "bilgncckogfgfipdlejkffnbkgjkmflh":{"blacklist":true}, "jfjagidcpadkoaonbogmbgfimmnefeie":{"blacklist":true}, "ndhkiimgbjnendpcfbiadlifmangejoa":{"blacklist":true}, "hhfiljkpjapjjphcocclhhaldpfkkjbi":{"blacklist":true}, "fhpclkemjlhmbfbjakbmdjihocinkmim":{"blacklist":true}, "pkbkgagehkkoajkpgnmjegibihpalfdk":{"blacklist":true}, "lnlaeblencbjjjeaanegaldcjfekeled":{"blacklist":true}, "dadcalgappognjbjpalfophhcfakoeac":{"blacklist":true}, "eiflkkehgogioennialfbilppmegcpoa":{"blacklist":true}, "fnhcgnmfccojojojacgeiaaeacefdohb":{"blacklist":true}, "kcgplbmkmfcpngilmhjmebdgkkpbdemp":{"blacklist":true}, "fnoadkjdjfgafomgmablhmffooijcfbn":{"blacklist":true}, "gplgjmecjpbfcdikpbicknafcnfcidek":{"blacklist":true}, "gifglngcdbggmlgkcombebegdaoknkho":{"blacklist":true}, "aebfkgcamgnimcbnbiopgdakknjgggnm":{"blacklist":true}, "mlnndjkcclbekgoebkenkdgiggaomaed":{"blacklist":true}, "bhmahaiplmeodpakkcchmolaihbhkpdl":{"blacklist":true}, "jjhackoobdibnnndjopfjldbjmohkpdk":{"blacklist":true}, "cfogpbanfnocakdckmgafapdlmclpiln":{"blacklist":true}, "fnkaadkanmfgpfbmdcllhjdgmdbgljpi":{"blacklist":true}, "eemcgdkfndhakfknompkggombfjjjeno":{"from_bookmark":false, "active_permissions":{"api":["bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs"], "explicit_host":["chrome://favicon/*", "chrome://resources/*"]}, "location":5, "was_installed_by_default":false, "install_time":"13006821975865470", "creation_flags":1, "manifest":{"description":"Bookmark Manager", "permissions":["bookmarks", "bookmarkManagerPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/"], "content_security_policy":"object-src 'none'; script-src chrome://resources 'self'", "chrome_url_overrides":{"bookmarks":"main.html"}, "incognito":"split", "name":"Bookmark Manager", "version":"0.1", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB", "manifest_version":2}, "from_webstore":false, "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.97\\resources\\bookmark_manager"}, "benclngoadbppljglhphhnfknoppmjoa":{"blacklist":true}, "gbenikfjhilhpgagllmfgggdjaflbmbi":{"blacklist":true}, "iggjepemmdkieakihpomccndhdfcljdp":{"blacklist":true}, "fnihpenllbnplcglabekelhhblcdndbb":{"blacklist":true}, "ljeihpebkahejeacdalhkhmckmggppif":{"blacklist":true}, "hdnbmmfjbblajkjkcaeofolgfnljpnim":{"blacklist":true}, "pkbkkendemaimikinaefldfljliecapm":{"blacklist":true}, "nhboiakpmibkbkbeehchlfkggmhphpnk":{"blacklist":true}, "ldmoahefokhfelhpbgfjpelcdbahdofk":{"blacklist":true}, "hcapokajkngndbglnfglpfdpoeidmpha":{"blacklist":true}, "coobgpohoikkiipiblmjeljniedjpjpf":{"from_bookmark":true, "ack_external":true, "last_active_pingday":"12992857221368002", "location":1, "was_installed_by_default":true, "install_time":"13008916624103017", "creation_flags":153, "page_ordinal":"n", "lastpingday":"13016530803380531", "app_launcher_ordinal":"w", "state":1, "from_webstore":true, "manifest":{"name":"Pesquisa do Google", "description":"A maneira mais r\u00e1pida de pesquisar na web.", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB", "default_locale":"en", "update_url":"hxxp://clients2.google.com/service/update2/crx", "current_locale":"pt_BR", "icons":{"128":"128.png", "48":"48.png", "32":"32.png", "16":"16.png"}, "version":"0.0.0.20", "app":{"urls":["*://www.google.com/search", "*://www.google.com/webhp", "*://www.google.com/imgres"], "launch":{"web_url":"hxxp://www.google.com/webhp?source=search_app"}}, "manifest_version":2}, "path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.20_0", "active_bit":false}, "jcmipejepoimfflnoapdmkdephgjinck":{"blacklist":true}, "igjhgaoajaccjllfkfffboldnmncmhoh":{"blacklist":true}, "odnamglmogfldajnhkfodmloofeokcmm":{"blacklist":true}, "ochmdkhojipfibbplgpeeggeimnagcfd":{"blacklist":true}, "fjpofaghniailakahnhkjjfbfonpfglo":{"blacklist":true}, "emcdpbapjmnjgoannclkongdfboaabho":{"blacklist":true}, "jjahldbngdicbnejidklgkienpkdcpba":{"blacklist":true}, "lplmcpcnhpbffpcfiaddbeaplhhbengd":{"blacklist":true}, "efnaljpgehfilpmkhobibbjceeeondmn":{"blacklist":true}, "hjkhligcnpfjhjlapmejaiaiigibofif":{"blacklist":true}, "echjhfifjidfhoappglfmoffcpmpkigb":{"blacklist":true}, "febmhchodibcbchcofonaamfglbjhggg":{"blacklist":true}, "nlefocohkhlgmjdhgkjgdodobmffjbod":{"blacklist":true}, "pcaedgdgamlfffkfblocmakhgieggoak":{"blacklist":true}, "iccblehkchfmjgfafjcpjlkjcponhdhl":{"blacklist":true}, "cfnfobbpdaccoljfahpmfjdmbfmmkeof":{"blacklist":true}, "gklphmokmaaepjgandocpneomjlidjag":{"blacklist":true}, "kmlebjoghkhpapfhbdikannggmmffnco":{"blacklist":true}, "cbbjhegipokkofhhicbckicchjpcpeni":{"blacklist":true}, "hphibigbodkkohoglgfkddblldpfohjl":{"blacklist":true}, "mfooalpniplhaaealemjpchkchmmgdko":{"blacklist":true}, "keknhkokjnjhgpcofobpcbelddppeolp":{"blacklist":true}, "jpiedgcdjigcoeagojmlokclbljokpon":{"blacklist":true}, "keoimpnicgbcjamfdgpcecihicnbmhej":{"blacklist":true}, "mplhbhmkccidaokcelbcbcmhhedebcng":{"blacklist":true}, "dhdepfaagokllfmhfbcfmocaeigmoebo":{"blacklist":true}, "biiponhbbifajapmbggbgaepiedinifm":{"blacklist":true}, "hhfffemhgkginfafaoapljdllodppana":{"blacklist":true}, "fnnmbghphdnmmjdapccfobgjemjadeli":{"blacklist":true}, "pbdgmppmccanplobanhfkjndjkmmabgk":{"blacklist":true}, "ghmaokcegalalefnhlfcnjhnpdbanjkj":{"blacklist":true}, "jbfebbkjjmkcoldeaeelhpconkmgjhbg":{"blacklist":true}, "gpdcodmabpgmncbkhpipakhehepmpopk":{"blacklist":true}, "gagalgomhifgcmeciklindhpaihmecgi":{"blacklist":true}, "kcmnkpehkjhodoodchlmgnicaifckhdj":{"blacklist":true}, "lmhdacagnmfmomeodbgmlghejdbmldge":{"blacklist":true}, "pbglijbamgmlcpnnpbfjkbdeheejjloj":{"blacklist":true}, "imkffpjpdngdkpgadcmnlkhhmhdocijn":{"blacklist":true}, "fpbippbofbmgmbojjmgfcifpmdaelcmd":{"blacklist":true}, "bpfadpmhabiajakhgnaipdplkcjaklnj":{"blacklist":true}, "dpaphgcjeeochbiafgbochohgmpcmlbj":{"blacklist":true}, "cidnoinjdbalndcidafahfnoeehfblfl":{"blacklist":true}, "kdjhalklkkcmodeicjiaekcgifkcepaf":{"blacklist":true}, "ahjfgnikolodijnpakeknpilnemojlhc":{"blacklist":true}, "egljdhfnbjahogjahnigfnbpidlmdagi":{"blacklist":true}, "gncfgndgeoddelbfhlndhljnecoednaa":{"blacklist":true}, "ehmjnpjodmgeocfphkjjnheiheehcoid":{"blacklist":true}, "gkhbgnodbilglgholifcjdblbgdaieah":{"blacklist":true}, "hnbcdmfeoldeppcbnnjmjkdofohaljbn":{"blacklist":true}, "lhajoamjgchgljkdjigcgmmcehjkagan":{"blacklist":true}, "cbhhdkemlehgodemcigfabmcdnohhhef":{"blacklist":true}, "kdcnnmifdmlmjffdgeieikcokcogpbej":{"blacklist":true}, "eopmhecjnginkckggjmhombbopmkjpam":{"blacklist":true}, "bcddmcejgphfgofbpoocakaeapfomlek":{"blacklist":true}, "glhhlafadlhkgbklgbjnmblfhnkfknbm":{"blacklist":true}, "megkcfpbmemnpkgadkoompnoajcolpni":{"blacklist":true}, "hnnebfeppcbhhbhiifeaajgcjnkljlld":{"blacklist":true}, "oilfokmpgejhjhecdjjpikloibggpenf":{"blacklist":true}, "mplpabdbfbloeiboikmdbnggfnjbjmlh":{"blacklist":true}, "hpibmhghjndideebpackbdlpncgkcppp":{"blacklist":true}, "fjjeecfjmgfnleghoellhldedkaocjfc":{"blacklist":true}, "loggadfheaoeabmkgolecncpfdfioefa":{"blacklist":true}, "inbhlfpapeikbbgpfionabkigakepbbm":{"blacklist":true}, "nlgapikcofpablcmfgaoodlhiejiehhh":{"blacklist":true}, "agmhonoepgcnakccfpidhjehlocaeaaj":{"blacklist":true}, "iomejadoamfilglofmeaffghddcgapmf":{"blacklist":true}, "foenbafkkmajnmfnlcmejonkfaipdmme":{"blacklist":true}, "djnahdkbfgnhgpakidinfonfcjbagkgp":{"blacklist":true}, "cepfogmgfkddnllaopgknbdfkceejmhk":{"blacklist":true}, "lojppnndedobolgfepahepphhloediji":{"blacklist":true}, "eofejpelggimkodeojpeojnbijgiglgh":{"blacklist":true}, "aojicjocmihiopalnhjikigammkhgckb":{"blacklist":true}, "gaicmfjflflabagobdiodejfpjikheeo":{"blacklist":true}, "pkdlpbfmpolnhligegklimbccminkioc":{"blacklist":true}, "pjdhkkcnlbfebiokpeghfffajaabahfo":{"blacklist":true}, "dmhjdbigobajgnfoabodjgmcdgoeoljm":{"blacklist":true}, "peahabnpipmmfiajjjhgfggbeigbmbgp":{"blacklist":true}, "dinhjcapnfbffhiihdlnbdfjdjjfhcbk":{"blacklist":true}, "igaajdmlejbjcbmpmnigopikfdaccdcm":{"blacklist":true}, "apdebchnkegjokdjplmfmepcdgneemhe":{"blacklist":true}, "gompblemgafijijmlgbaepcijfgfgljf":{"blacklist":true}, "negkalblfongjbphdcbbhddlickhlamd":{"blacklist":true}, "dpmloehicimdjkibmobhmpgdndgbcced":{"blacklist":true}, "fpmajanjndhgpifbcbnklbiehgnpkgmf":{"blacklist":true}, "gjmhdmobkhfhkpfmfegnkkimlamjdldi":{"blacklist":true}, "mkobblpffgbncfhijabakfafmkjdmmnm":{"blacklist":true}, "dmkdhgkknhnfpdjeicefnpmhcpbimden":{"blacklist":true}, "copjbedljgpkaakkmbhgkpoaadeahido":{"blacklist":true}, "pfonklmafadkmcedjlodommcoipgbcde":{"blacklist":true}, "bkplhcigeaiiliajeehehiikokgocbhb":{"blacklist":true}, "dfafokiagoiocidlpglcanjkcdbdnioi":{"blacklist":true}, "iemfpgbdjfoihicbocpbjppipdbfimeh":{"blacklist":true}, "iedogbkombgmapifenoojnmpcnjighfm":{"blacklist":true}, "hhbihfbjoifhhebcnchglobmkmapgjkm":{"blacklist":true}, "laicaenbonaajhkmfhhbpiapobdieffm":{"blacklist":true}, "cihlkpohodpdkdnfalhdkhhlhmhffmbe":{"blacklist":true}, "oncmkbmjpjlihkpbohlpmjghiiogmoie":{"blacklist":true}, "naopgnjebjeeedbbhcadkhkmeefmloho":{"blacklist":true}, "aakhlmakppmkkmfkoibponkmmpgpmjgl":{"blacklist":true}, "efonemhbokfedckpfpohpmcamfihnnlm":{"blacklist":true}, "oanjogmonneelfpnfmdlalfddkeckdej":{"blacklist":true}, "cfbdodejdeejbkffcmiaknpmojjeibpn":{"blacklist":true}, "kcanfkmhccbaheheaackijegkclkaeic":{"blacklist":true}, "obfnipbbnnhkbafmdbbfpgfgbjmmkgpm":{"blacklist":true}, "fommcgokigkhmnhlhlkckfjhefnmfohd":{"blacklist":true}, "pnaaalnkbgjaphhmahecamecmaldknkc":{"blacklist":true}, "kinhljbhjmcmoddhdoodekeklmjapjff":{"blacklist":true}, "aandpgohbohmlknpjbblpmoladhoochg":{"blacklist":true}, "ejakhnjbomgngodiidgbkapjgbdckhnh":{"blacklist":true}, "pnpfkfanlgljpkpilhgiimfadggfmhcd":{"blacklist":true}, "npfpmgjnfcklmaipcffpjhapedmpjggj":{"blacklist":true}, "cbjlfaogacjpkplebfbijaakaifoflno":{"blacklist":true}, "pbekednmpdekknlffkiopooofokfmkla":{"blacklist":true}, "abfclfmhaemoockhhinpplncjehfpdbd":{"blacklist":true}, "jkkfmenldnihjkgnolhlakhaepomhoob":{"blacklist":true}, "kiipngoehgkgkackngaidmhmnchfbmio":{"blacklist":true}, "ckckpgefkpjfopjppjfcikppehdhceah":{"blacklist":true}, "pajgiddgjidlcajihkjoacjbplimkgfe":{"blacklist":true}, "hbaajkahagmlkdekmbdabikbopdgpaac":{"blacklist":true}, "ppmfajacidhcjbddpgmcmigffpppcadd":{"blacklist":true}, "fbmimoidopbghbcmdmpkjaffffmcbmbg":{"blacklist":true}, "pgmpnhbchhaningbkefchpdalnimjijd":{"blacklist":true}, "bkhafliomebnpccanacmlfaemgfiofko":{"blacklist":true}, "oocfbmollajebjjpkahmlnclfhkjijea":{"blacklist":true}, "chhniecmnighakmlnhkifeogjddhoajn":{"blacklist":true}, "cedclbokcakighlpbnbhfjffdjeihfdp":{"blacklist":true}, "dhclobcklknojliojkkclgjndemadnig":{"blacklist":true}, "jfhmafmjfdblceidmfdmoihamolaaeco":{"blacklist":true}, "ihnembcpodnfgkafmiojebccomjekopm":{"blacklist":true}, "gngmkbiihflpghldjnbpemaicedhdddk":{"blacklist":true}, "aglmapjbjphdidmnileogpjkgpdoliep":{"blacklist":true}, "aljdncnajablgppdcfbehhmidlmbndda":{"blacklist":true}, "folhciaicehdnoalhbkbgkakfcockopc":{"blacklist":true}, "nmgpbidjnaebdlbdbpjggenmbaolmfoi":{"blacklist":true}, "lkhcbijhgfchgdmklonlobkfbcadbokg":{"blacklist":true}, "gmghjgfdialcnhadahmjefeflgnhcjeb":{"blacklist":true}, "kibgmcdcfmcglajcfbecilngejnfppjp":{"blacklist":true}, "ijecjbcgpblkacpijljpaienknanaloa":{"blacklist":true}, "pnnbdjcjeiobikdfikegpclkcimgafpp":{"blacklist":true}, "kgbkdabomfdpfoibliicpmibceaoohgh":{"blacklist":true}, "cjohbbapkbkkhpohinffggbphnhoblea":{"blacklist":true}, "aofechiiopolnegcjcddgedjabmkemhf":{"blacklist":true}, "jgoljhcbgajhbhnchplgjdkknendhjnn":{"blacklist":true}, "mfffdpnblflpobcnekhekiahepofaane":{"blacklist":true}, "mfhfkclojmdocagbmecgcnlofppebebd":{"blacklist":true}, "acmpfcamncegnhjdeiodgilikjafcamg":{"blacklist":true}, "fiiblakkkkgeljngobmpeljjapemenhi":{"blacklist":true}, "lcccggoiffkhgfkefgbicjdgdnfpoihn":{"blacklist":true}, "phkpgooenaonkpnabopdbjjfmphclela":{"blacklist":true}, "fmcccidacjgnfiafddkngmeolkoiihil":{"blacklist":true}, "mpgehpkneknbopplhmmkfijfiniddipf":{"blacklist":true}, "clfhanhcjmgjnbpjfopldmnabimhmcmp":{"blacklist":true}, "edmnikahahfkfilbbjbdoiabnghbkmjc":{"blacklist":true}, "bdgijcibmhjjccgbdohofncdjcophknj":{"blacklist":true}, "mcbkimglepddodbiongpohpeidioafgk":{"blacklist":true}, "hbmlheccjkodhfejcmblndjodllmnlnl":{"blacklist":true}, "knkapnclbofjjgicpkfoagdjohlfjhpd":{"from_bookmark":false, "active_permissions":{"api":["background"]}, "last_active_pingday":"13004179226502752", "location":1, "was_installed_by_default":false, "install_time":"12999054292657759", "app_launcher_ordinal":"y", "page_ordinal":"n", "lastpingday":"13016530803380531", "state":1, "from_webstore":true, "manifest":{"app":{"urls":["*://littlealchemy.com/", "hxxp://alchemy.l8r.pl/"], "launch":{"web_url":"hxxp://littlealchemy.com/"}}, "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHG77wRLh8u6+APxcnbpfLYEVTBq7VSd83aIl5rrubYSDoIOWQtt5INEFfoUpdMyZ70yubOFfeA7CKpN74RL+IvbIxF9sl+PO+MuiyHR81wCHQeC1ZOpM8plBLWbJ8y02d/W07NaHkCuId4i4AWqWJR9jZ9juu7w7Yv0CSeDqKywIDAQAB", "update_url":"hxxp://clients2.google.com/service/update2/crx", "name":"Little Alchemy", "icons":{"128":"128.png", "16":"16.png"}, "background":{"page":"hxxps://littlealchemy.com/background.html#0"}, "offline_enabled":true, "description":"Start with four basic elements, then mix and match them to create more and more awesome things.", "permissions":["background"], "version":"0.0.15.7", "manifest_version":2}, "path":"knkapnclbofjjgicpkfoagdjohlfjhpd\\0.0.15.7_0", "active_bit":false}, "iablioliielnhdianpbiijaoncbmfend":{"blacklist":true}, "ijjmbbddenkbenbcfldgghhjgjmcnioo":{"blacklist":true}, "lnbeebaenahmkbffnimghceldeeihfak":{"blacklist":true}, "dbmdicehacbaohlockjgdglcobimmjkh":{"blacklist":true}, "fleljamdchegbjeiipbnmiebnhgheeld":{"blacklist":true}, "afenhmponmfmdmbmccbmglppcmjhmhmh":{"blacklist":true}, "efhjelcghjkfigiagdfbfilndaffpmdj":{"blacklist":true}, "ecinfbhalenfhdhnljmkglajfjjfehoj":{"blacklist":true}, "fibgploapkhokkbncddlkcmbmiengcfp":{"blacklist":true}, "cgnegjfmdfenjojhjffejinpnpoglmlh":{"blacklist":true}, "fomljmklmcefndkgpakgifbiiidgbjej":{"blacklist":true}, "kgdhnhadbnpeibkghaebmhmngobdafag":{"blacklist":true}, "jfmjfhklogoienhpfnppmbcbjfjnkonk":{"lastpingday":"13016530803380531", "allowFileAccess":true, "active_permissions":{"scriptable_host":["hxxp://*/*", "hxxps://*/*"], "api":["tabs"], "explicit_host":["hxxp://*/*", "hxxps://*/*"]}, "location":3, "ack_external":true, "disable_reasons":16, "install_time":"12964232350137059", "manifest":{"name":"RealPlayer HTML5Video Downloader Extension", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCl0WKWTrid8Fh+tsoJPRheLc7tksPgH1NfLF79Fj3YKb0fk2Fip1eE/chfSnGWQkxe5Ck2r+ZPba7m+FWQhZDCE5EXvOTDoqi7TEvjccW5pMpW5wCUOLKQVSttgBwkY8EUYt40SwtJ6HmLoPZfQmo9W3qAjnlhlF5AkY4jYgBv3QIDAQAB", "content_scripts":[{"run_at":"document_idle", "matches":["hxxp://*/*", "hxxps://*/*"], "js":["contentscript.js"]}], "background_page":"background.html", "description":"RealPlayer HTML5Video Downloader Extension", "permissions":["tabs", "hxxp://*/*", "hxxps://*/*"], "version":"1.5"}, "state":0, "incognito":false, "path":"jfmjfhklogoienhpfnppmbcbjfjnkonk\\1.5_0"}, "oimplfccampifgkgndlamabnkcibkngc":{"blacklist":true}, "nepfiodmbijheamafkiglonfkjebdjmf":{"blacklist":true}, "jgmpapdckakiohhebmeoemejibommimi":{"blacklist":true}, "onjaecbdddgibdijafoemfiachlbcgkj":{"blacklist":true}, "jpkdlckejfjidmplieobnhijmoiecbhl":{"blacklist":true}, "dgcfmgdfbfbgcpbendbhbkfjppboebed":{"blacklist":true}, "kdchmeaiapjkejkcbeclgjklemecieeg":{"blacklist":true}, "ocnlnkjmfnolmbclblfhfhcakldceiec":{"blacklist":true}, "kffhenjbibjnbnjhlkcdlmpeccpaohio":{"blacklist":true}, "gobjcjhhebpjbmjdgmejhebbleadnceo":{"blacklist":true}, "ljcicfibknpmlcmcecddjlbgkejehhpa":{"blacklist":true}, "liomofjeffddiiccaolcnllbhnipbkhe":{"blacklist":true}, "cdogaeccgljmkecjmoedambgiekkllij":{"blacklist":true}, "hefmoncdemhjembgbnkgglhlookbipdc":{"blacklist":true}, "fcijaeofmfihkldhkofkjoibdoeoflha":{"blacklist":true}, "dlobhinihbmedmheccecfnkcadpehmbf":{"blacklist":true}, "dfjhgoeofgmepmcngkhnaiphbhdbonhp":{"blacklist":true}, "idbdlnkdnaodonmgnimcfelpngbmcpjk":{"blacklist":true}, "aokenbhllkgpooaacldiamnpmmgkjblo":{"blacklist":true}, "oblicopoaionpjoapgjmmoncjadpdioh":{"blacklist":true}, "fpjdackpllilinpkgmhkpidkanmccblc":{"blacklist":true}, "igkdgkdiiolilocklmiolkpoohacojop":{"blacklist":true}, "fngolbdmkneakeaoiieafkilnogbocda":{"blacklist":true}, "nhkmojkfnknbbmhbnacjdlodokeophkl":{"blacklist":true}, "jmeanodbelbflfmnkfdjgpikmldgjjko":{"blacklist":true}, "gfjfhihpkmehdmblhfaikkipeplpdcla":{"blacklist":true}, "pgldfhecfiofkhnbgcncepnkjkeoahlk":{"blacklist":true}, "hdijkiondgomjpehfhopomicjbiodmcm":{"blacklist":true}, "chlplighidmhpgmidehfmjfdlahakjog":{"blacklist":true}, "dgaehaeahdegbdlenicbmkbakhdgoeml":{"blacklist":true}, "lpgiafapdmlapiokjnmpbbfkomiceoml":{"blacklist":true}, "dcfefnkefopibnlcjhjcfegckhanekld":{"blacklist":true}, "kkkeikdkpjenmoiicggnnodbkebafgpc":{"blacklist":true}, "kgdkcodealpfjolmiagcogfbgmaamegh":{"blacklist":true}, "jmbkhogpjgjpfjhpdikloblkbkljkgao":{"blacklist":true}, "lfechjkgjjijfjoandhakaghdeimjcod":{"blacklist":true}, "fjhfnfakmfcejgmfkmnapemgblmehppf":{"blacklist":true}, "ldgfapfmnplpaohbbadnecegcpfkfall":{"blacklist":true}, "omceiakkomngangmllpgbjcoeloglald":{"blacklist":true}, "hkbgccpdcpbdckohbknjlamamelcnlki":{"blacklist":true}, "efcnjdcimjmggfdkahncpoikhehcfgnh":{"blacklist":true}, "dcpjokbfgfnbaekphjgehhjaokkcifbj":{"blacklist":true}, "kincjchfokkeneeofpeefomkikfkiedl":{"blacklist":true}, "jaejgaoiipdjjlbnapngknalafalbkej":{"blacklist":true}, "leccghfplhenabeogpibljliijgapfgb":{"blacklist":true}, "hfjpjodbolkmheaehcnmfhjakjileoof":{"blacklist":true}, "lhgbajoidigcpmgbnnonllfkndhahmie":{"blacklist":true}, "ejlekamipdcfcfpgfepjmklllbpeecaj":{"blacklist":true}, "hgjgaeknhmidehalnmokomhpfhbfmpcm":{"blacklist":true}, "ehomcoocpagnlcakcbecdaknmacmedld":{"blacklist":true}, "pjkljhegncpnkpknbcohdijeoejaedia":{"from_bookmark":false, "active_permissions":{"api":["notifications"]}, "ack_external":true, "last_active_pingday":"12979897210600544", "location":1, "was_installed_by_default":true, "install_time":"12997225574107729", "app_launcher_ordinal":"n", "page_ordinal":"n", "lastpingday":"13016530803380531", "state":1, "from_webstore":true, "manifest":{"name":"Gmail", "description":"E-mail r\u00e1pido e pesquis\u00e1vel com menos spam.", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB", "default_locale":"en", "update_url":"hxxp://clients2.google.com/service/update2/crx", "current_locale":"pt_BR", "icons":{"128":"128.png"}, "options_page":"hxxps://mail.google.com/mail/ca/#settings", "version":"7", "permissions":["notifications"], "app":{"urls":["*://mail.google.com/mail/ca"], "launch":{"web_url":"hxxps://mail.google.com/mail/ca", "container":"tab"}}}, "path":"pjkljhegncpnkpknbcohdijeoejaedia\\7_1", "granted_permissions":{"api":["notifications"]}, "active_bit":false}, "oghphhcagopecifjblgdcfihjnlcbcfc":{"blacklist":true}, "jeehjhnmgohgpfpjneglogiholalkeip":{"blacklist":true}, "mjgobkikdipfikmaoakdcdbicpioljgg":{"blacklist":true}, "ilhjicgcglhjigdehkcehjdokmkahbjl":{"blacklist":true}, "iobnpmeeecphddicmhhmdjbnlbdhjlne":{"blacklist":true}, "mgdgiplcofghdmpekdeeceolepakodcb":{"blacklist":true}, "lcfkojlnjnedeoepfemhdgkhiabkeadc":{"blacklist":true}, "pnpgiaejfbdapllkchhgchjpdbcpiooa":{"blacklist":true}, "hilncbjbdpnfepdidfchmdclhpnlegpj":{"blacklist":true}, "ljlppmpjdogefnanekncklkjgpnhpcpd":{"blacklist":true}, "aemcjbfajnnmhblifaejadoecfoaebld":{"blacklist":true}, "hbdhabpmbbanaopgkbaondabkkepjfaf":{"blacklist":true}, "dbiblcmlcgdjjbdpbmbcpineegngkiip":{"blacklist":true}, "ncpdanjmicnihdlijomcggnnekloephc":{"blacklist":true}, "nmphbnbmgfccfhcmibikmhcgajjpelpf":{"blacklist":true}, "pcojpoljjgnicbhaffkiphphplijgbcc":{"blacklist":true}, "odefpckfdnfkeandbeccopcpncnbkonn":{"blacklist":true}, "jljfnkmkkdkppfndippkedacgfkafped":{"blacklist":true}, "fopgndklnkecillfbdmfknhmadmenikm":{"blacklist":true}, "ajneiojjdhceikkgmhnjhgaacpfhldpi":{"blacklist":true}, "obgljnmbldahelaakfdbjkplokjoneip":{"blacklist":true}, "jkihmglffmfjedfbpbpdbbimcodjbmdh":{"blacklist":true}, "mbmdaiddhfoljplpdhohimgieioblfif":{"blacklist":true}, "djpnjilhooodipllnjedjeiabkboakok":{"blacklist":true}, "hfcgbiofoebieldldghfocjfnnajmpej":{"blacklist":true}, "onfbaaifbbahonepmednhkjbhdgogkbl":{"blacklist":true}, "geggofhlfbcmanadhknllmlajiafopoh":{"blacklist":true}, "ljmjoloiepllcndinchenhomcdcgbgef":{"blacklist":true}, "pfgmgcnbngcnhjddppmnloflcidemopc":{"blacklist":true}, "fbmgoajoadbjhoachcdiplofcblaihdc":{"blacklist":true}, "npadaghbcdejfngcjpbnoikajdnongca":{"blacklist":true}, "mfehgcgbbipciphmccgaenjidiccnmng":{"from_bookmark":false, "active_permissions":{"api":["cloudPrintPrivate"]}, "location":5, "was_installed_by_default":false, "install_time":"13006821975865470", "creation_flags":1, "manifest":{"name":"Cloud Print", "app":{"urls":["hxxps://www.google.com/cloudprint", "hxxps://www.google.com/cloudprint/enable_chrome_connector"], "launch":{"web_url":"hxxps://www.google.com/cloudprint"}}, "display_in_launcher":false, "description":"Cloud Print", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB", "permissions":["cloudPrintPrivate"], "version":"0.1"}, "from_webstore":false, "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\25.0.1364.97\\resources\\cloud_print"}, "boaoagnmpennjoigkkmnjhecapibhfko":{"blacklist":true}, "cjhklhdjonhcohlacgggcbklpnldleck":{"blacklist":true}, "oomelpjfeldbopnleifpjibbpekflhlg":{"blacklist":true}, "pobponmhkpmphbnfhpjdagklbkmjhked":{"blacklist":true}, "igghanohiioehififjoalfkdoicafjof":{"blacklist":true}, "dibljdngacjhpccjckmlmeklpgjeinjd":{"blacklist":true}, "jgdkappiifgomhgikcjbanhnmlekpeje":{"blacklist":true}, "gngfmjidncdccdlfjcjbnngeaaclfgpl":{"blacklist":true}, "jddbdddmbfencninofcgnodekclofpaj":{"blacklist":true}, "hkjcejgfmaanpncnpoidgbhoikcaeepd":{"blacklist":true}, "dpfanoongnoofcdhgijjdjmbnfekdejj":{"blacklist":true}, "dbanhghadfmjndnjmmejdgfdmgidlbpm":{"blacklist":true}, "opnnngnphijodjhemhdafpnnpdjggofe":{"blacklist":true}, "nhbfbnmmdjkjahhfdeklgphihfodfgnb":{"blacklist":true}, "fafoohpbicgbcejffcplajonhhooddle":{"blacklist":true}, "igbaoknfddliiaoimhehfbkfekpmmfll":{"blacklist":true}, "nifbebeekindefklojhchehidpikbjfc":{"blacklist":true}, "lkfdchejjogilmloogbbjlnlpbhgjfab":{"blacklist":true}, "mlnoedbhndgbjcbeadjfnmjloejlgojk":{"blacklist":true}, "mnichagcickblneeijmfnmoiakigmmhf":{"blacklist":true}, "ilmknaabackgdbnkgbihgpgiopnlkjek":{"blacklist":true}, "nihhbeikpchdddoillfdcdinnnnllmna":{"blacklist":true}, "mdngbiejioalifclonjepjjfppmbgned":{"blacklist":true}, "magllcifjcllaafcdplnajmobccbcdlo":{"blacklist":true}, "abciiempgohamehppammbkhkicmkgkob":{"blacklist":true}, "oafccdmmjdpialdmgenjfhijoondgncj":{"blacklist":true}, "gnapdhmknipknfmhhnhdmhakdfhgeing":{"blacklist":true}, "lgalokbapphhklmilicdefmgbjkcmldf":{"blacklist":true}, "himgjpdejpikenoibmolgmfblolpahno":{"blacklist":true}, "cnimdnlablahacgompaahbgohcokcclp":{"blacklist":true}, "oakhllhnbcpgagdafgbninlpjdemdmjk":{"blacklist":true}, "fakdahljemjliginkgdehfoocmjgloam":{"blacklist":true}, "pbipaboekjdfhkfifpkofbfnpbnlolji":{"blacklist":true}, "fekjidlkjnecepnlmdmjohmgpkdlbegi":{"blacklist":true}, "nhooocacdhkpbmoocdclodjlddcebfoe":{"blacklist":true}, "deonbedlmakdddidplniclflladdjoep":{"blacklist":true}, "npolaghondefgiomhkbiiompikfjneep":{"blacklist":true}, "caphkimknlmnhpjoneddiaakmcaajagb":{"blacklist":true}, "ajlkjjdbgcjdiklbcomhnfghjigfccoh":{"blacklist":true}, "mdiehnlecbjlppbpaaipmlnhhjgepfcg":{"blacklist":true}, "jbmbiepnidbnhbbfdbgioomdkgnbcacj":{"blacklist":true}, "lgcnahanhlfpceencjmlehpfklokhojk":{"blacklist":true}, "pdhjoamffhjhlkiiminjhmihalkfjaee":{"blacklist":true}, "ebdcdchjcndpjhehacedepnggfdbfkpn":{"blacklist":true}, "mjolnadmlahbpepjaemohnkhpjkbhmef":{"blacklist":true}, "deocpjmfifplhepinpkmpinpnbiemfje":{"blacklist":true}, "likifpgnijjfbdegfepoalpamlgnfofi":{"blacklist":true}, "pgmfkblbflahhponhjmkcnpjinenhlnc":{"blacklist":true}, "lbficnmfealeidppcbgdcbemgfjodbkg":{"blacklist":true}, "mndoohjdoechinpkfbkolflbonciahfo":{"blacklist":true}, "fiapkdjniadkodmdibdnchoifkpfoiid":{"blacklist":true}, "pjgbfgdpkbfimabdalhjmmeeelbmkcac":{"blacklist":true}, "hkjfdgjkgpbbdmadbglcgljjjddkcdha":{"blacklist":true}, "aifmjmboebdkdelpjenakhaodgneempp":{"blacklist":true}, "lljnngafekbnkpdfophmcdlbfebcbcld":{"blacklist":true}, "fcfepemfihgibdacjlnlecebknaaepmj":{"blacklist":true}, "mfgkkephjfnkggbmahehnjhdcmkioaff":{"blacklist":true}, "kcfnnanmpghdnoompcfclakpacapnfbn":{"blacklist":true}, "bjihddggcgnblgojnmhpnngonofbnkaj":{"blacklist":true}, "mlmmbepkgelpbenpobinockmiehdahai":{"blacklist":true}, "coajchbkdbfhmhbgcjepiofllfjjcpfp":{"blacklist":true}, "pfcelnbmkeoaeicedjomcjkcammlkdbk":{"blacklist":true}, "pfoiaildicnbcjojocjlpcibenphhbln":{"blacklist":true}, "imfbomjbodpfgfhfahlgkkcllmhbelhk":{"blacklist":true}, "hncomkjbbkchfjelocejkbbflmjhlhfp":{"blacklist":true}, "lkdimamelhbiijkiljlnedmhnnkkmlbl":{"blacklist":true}, "hnipgljcblpgnnojcfldehpeknhakbgj":{"blacklist":true}, "oelhhkgiajkjfbccafjgggcpkbkjgpij":{"blacklist":true}, "mamfageekafifnickhgkibkofcclfefe":{"blacklist":true}, "apdmgffkfhjfeejmbjidennfjdkmmmbl":{"blacklist":true}, "aaaangaohdajkgeopjhpbnlpkehbhmbj":{"from_bookmark":false, "active_permissions":{"scriptable_host":["*://*.ask.com/", "*://*.bagsbuy.com/*", "*://*.childrenschorus.org/*", "*://*.csaa.com/*", "*://*.facebook.com/*", "*://*.google.com/*", "*://*.google.com/imgres*", "*://*.mercurynews.com/*", "*://*.usnews.com/*", "*://*.wikipedia.org/*", "*://*/*", "*://codesearch.google.com/*", "*://images.google.com/*"], "api":["bookmarks", "contextMenus", "cookies", "geolocation", "history", "idle", "management", "notifications", "plugin", "tabs", "unlimitedStorage"], "explicit_host":["chrome://favicon/*", "hxxp://*/*", "hxxps://*/*"]}, "location":3, "was_installed_by_default":false, "install_time":"13016638639381425", "creation_flags":1, "ack_prompt_count":1, "state":0, "from_webstore":false, "manifest":{"plugins":[{"path":"background/registryAccess.dll", "public":false}], "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCx+zTj9AqzrVtkCAW6gmhvRMY++4+9SXS64frvxCR/GaqZwzTaKIQVQnde4gq5S5eu2ZpT00OZ3MIdGr2Gq3DgWF0XY+ZeVbrnMSdoE5HXo8hvbFb+GbwOHt+yJWqhcteNbosCgSQriLBk7oy6WOph0FusdubqkPiLEnDhL526EQIDAQAB", "chrome_url_overrides":{"newtab":"config/skin/new-tab.html"}, "browser_action":{"default_title":"Avira Toolbar", "default_popup":"config/skin/options.html", "default_icon":"config/skin/images/ask_logo_19x.png"}, "update_url":"hxxp://apnmedia.ask.com/media/toolbar/supertoolbar/chrome/manifest.php", "name":"Avira Toolbar", "icons":{"128":"config/skin/images/ask_logo_128x.png"}, "version":"7.15.2.0", "content_scripts":[{"run_at":"document_start", "matches":["*://*/*"], "js":["lib/jquery.js", "lib/constant.js", "lib/default-config.js", "config/tb-config.js", "lib/tb-message.js", "content_script/toolbar.js", "content_script/widget.js", "content_script/injector.js"]}, {"css":["content_script/hack/facebook.css"], "matches":["*://*.facebook.com/*"]}, {"run_at":"document_start", "css":["content_script/hack/relative.css"], "matches":["*://*.google.com/*", "*://*.ask.com/", "*://*.bagsbuy.com/*", "*://*.csaa.com/*", "*://*.childrenschorus.org/*", "*://*.wikipedia.org/*", "*://*.mercurynews.com/*", "*://*.usnews.com/*"]}, {"run_at":"document_start", "css":["content_script/hack/static.css"], "matches":["*://*.google.com/imgres*", "*://images.google.com/*", "*://codesearch.google.com/*"]}], "permissions":["bookmarks", "contextMenus", "cookies", "geolocation", "history", "idle", "management", "notifications", "tabs", "unlimitedStorage", "hxxp://*/*", "hxxps://*/*", "chrome://favicon/*", "chrome-internal://newtab/"], "description":"Convenient tools and links to make your browsing more enjoyable", "background_page":"background/background.html"}, "path":"aaaangaohdajkgeopjhpbnlpkehbhmbj\\7.15.2.0_0"}, "mandondadnlimicalgkbkaohmeopdojj":{"blacklist":true}, "nbieffehfdniifkgdckbndjhojohbfjj":{"blacklist":true}, "mcknnlhkkdbcppajgefagceglahcafjd":{"blacklist":true}, "dmabikjmolgegjajdhmgpmgffajlmmkb":{"blacklist":true}, "abidmaanmbfeddegmapgpjhdmgjaloen":{"blacklist":true}, "dhmghpedmigfknfpolfmkihcaeiccjgf":{"blacklist":true}, "ocmhjnhildbnglmlfimkjnnfgddelacb":{"blacklist":true}, "pkcbihpffghlanbclfmkegjmbijcpobj":{"blacklist":true}, "dlopielgodpjhkbapdlbbicpiefpaack":{"blacklist":true}, "fpoajjnnpmledpmohlgpgbmlhbgkgahg":{"blacklist":true}, "kkhejjmlcfbcleolhadhekjbcanoopna":{"blacklist":true}, "agodbcffjkjcnceklapkjfcmkfepmbgm":{"blacklist":true}, "jfalnphfjdoalcdhlnhdpekbmmopkgkj":{"blacklist":true}, "peiijdmlgbelnnmnkighhkpeihmmamio":{"blacklist":true}, "mafccdbbhekjhemajjejkaidndokeena":{"blacklist":true}, "lncjcfkpannmofmpgdfoonkniofdnaba":{"blacklist":true}, "kleaapgdkahaekcocmkbgfainbhihccj":{"blacklist":true}, "mogepbcllienegdibkfpmombhefhcoic":{"blacklist":true}, "aaaaabfjnbeinlpljodiajipidiompfl":{"ack_external":true, "exclude_from_sideload_wipeout":true}, "ojmdhklabgbnnkkilmkcfcemdhognifc":{"blacklist":true}, "ckphhghhpjbfddcgkpfbelfeojcciglo":{"blacklist":true}, "fmonlemffgbabjifjfaoamdflijecdbk":{"blacklist":true}, "jpehgolpfgnknboibogccapmdcadjkbd":{"blacklist":true}, "nidodbfomffkfabciljelkbdiabkeehe":{"blacklist":true}, "pnaiiipilbpcceggeanphcpkkihnojan":{"blacklist":true}, "anmjpohfnlopdfaojooicpemopnliimn":{"blacklist":true}, "mnhcgaghminpdabllkbkecahjfkdiabk":{"blacklist":true}, "epbmnbdplhcomkedpjfceakddnbgfjmf":{"blacklist":true}, "nochkknnbahbhmmknnmdhagelcnfagom":{"blacklist":true}, "mgndgikekgjfcpckkfioiadnlibdjbkf":{"from_bookmark":false, "location":5, "was_installed_by_default":false, "install_time":"13009410322210534", "creation_flags":1, "page_ordinal":"n", "manifest":{"display_in_new_tab_page":false, "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB", "description":"Chrome as an app", "name":"Chrome", "icons":{"128":"product_logo_128.png", "16":"product_logo_16.png"}, "display_in_launcher":true, "app":{"launch":{"web_url":"hxxp://THIS-WILL-BE-REPLACED"}}, "version":"0.1"}, "app_launcher_ordinal":"zm", "from_webstore":false, "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\26.0.1410.43\\resources\\chrome_app"}, "dejippphmhbpgckbhdidnjmdcpfccbaj":{"blacklist":true}, "ffgfbfakpcnngelphjnppokmoicdollk":{"blacklist":true}, "bckhfnghfdponbaldednpnljadgfjecj":{"blacklist":true}, "pkbbbncikcipejaiiiioboongndhmjgl":{"blacklist":true}, "gomkbnfeifchddfokcicibjnlgbolhol":{"blacklist":true}, "alfahpoknocfdebmiclonikapcnljlob":{"blacklist":true}, "aconhjfogglfnkjhkjipaifepjklolog":{"blacklist":true}, "ifeijfpkjckedpclgncedmgdiaoeahmk":{"blacklist":true}, "pgjpnfpidejcmjibaaohcmehfohacckf":{"blacklist":true}, "plfijddblbcdcnammpdmfccchkbdekmm":{"blacklist":true}, "nfecfkjnlkbphobjbcnphimihniieehc":{"blacklist":true}, "nidmbljkkcbdfklgdkklgjgmhejmbojn":{"blacklist":true}, "dnemhlkdpajbbniphgkgceplmnkfnhfo":{"blacklist":true}, "aieglpnmmhleoenpbmfaffppfomgjmba":{"blacklist":true}, "mhbffdldpckobeihgebaamjalehefnia":{"blacklist":true}, "mmjodihhmnpkldljaifiajmlnpflfhpm":{"blacklist":true}, "mokdlfbphidpiopnlfejpcmadcbomckn":{"blacklist":true}, "fpokembamndopkflopmplkklbdngnknd":{"blacklist":true}, "lbaddolhebpnhdcdkicpcflhnfamcemn":{"blacklist":true}, "cmlokmkdolieoaoddlfhaidnlmiadhik":{"blacklist":true}, "aieihijcjcccdiepockaiekhpflicdii":{"blacklist":true}, "lfggokjjaanlfikbbapgnfemifmddalf":{"blacklist":true}, "alcbnnpmipohgdllkkglhkbncijplago":{"blacklist":true}, "akbdojiajlefghcdclgkgmbbljamgehd":{"blacklist":true}, "cekdjgnecpoooikhmceokdhojckkkhmh":{"blacklist":true}, "kolbbghckjilleabphhgeggcgpfidofi":{"blacklist":true}, "janhdpmhnighonkkbkdpnljcoenpfkbh":{"blacklist":true}, "kgdmldjagfciieddcnlhampgkajkpanc":{"blacklist":true}, "dpgenihgggagjjggfocjceeobjkadcbc":{"blacklist":true}, "cmnfphnmpedeolmelllmgkghmjcnlajp":{"blacklist":true}, "icihfeaofpcfehanhbnjigdlpfahjlee":{"blacklist":true}, "mnllienogacopjnkmhgnniopjpgjpopp":{"blacklist":true}, "mikpklndmiopinkkmalgoophegfnmmfh":{"blacklist":true}, "aangdcfipmfploijfkoonkajgpdkfmbm":{"blacklist":true}, "pihcfdffalbcnmbghijdfcaanagapelf":{"blacklist":true}, "lbcmmpmjjaockhkcofljpakjcbmjmgla":{"blacklist":true}, "mhldlgmggplfkkjgpgjjpebflplpgekg":{"blacklist":true}}, "last_chrome_version":"27.0.1453.116", "toolbarsize":-1, "autoupdate":{"last_check":"13016598051833918", "next_check":"13016642141133770"}}, "google":{"services":{"username":""}}, "ntp":{"app_page_names":["Aplicativos"], "shown_sections":64, "webstore_last_promo_id":"1335115", "pref_version":3, "sign_in_promo":{"group":84, "group_max":100}, "intro_display_count":3, "shown_page":2048}, "translate_language_blacklist":["en"], "profile":{"avatar_index":0, "per_host_zoom_levels":{"www.hinouniversitario.com":0.522759, "www.kissmecorsets.com.br":-0.577883, "mail.google.com":-0.577883, "www.youtube.com":0.522759, "world.needforspeed.com":0.522759, "uploaded.to":-1, "aaaangaohdajkgeopjhpbnlpkehbhmbj":-0.577883, "accounts.google.com":1.2239, "siga.ufjf.br":0.522759, "docs.google.com":0.522759, "sn145w.snt145.mail.live.com":0.522759, "www.ufjf.br":0.522759, "www.google.com.br":0.522759, "www.chicorei.com":-0.577883, "www.ime.usp.br":-0.577883, "cinema.terra.com.br":-0.577883, "www.imdb.com":-0.577883, "musica.com.br":-0.577883, "www.facebook.com":0.522759, "www.casamundo.org.br":-0.577883, "www.dihitt.com":-0.577883}, "content_settings":{"pattern_pairs":{"hxxps://mail.google.com:443,*":{"notifications":1}, "[*.]www.youtube.com,*":{"plugins":1, "fullscreen":1}, "[*.]www.runescape.com,*":{"plugins":1}, "hxxp://web.ebuddy.com:80,*":{"notifications":2}, "[*.]www.tjmmg.jus.br,*":{"popups":1}, "[*.]siga.ufjf.br,*":{"popups":1}, "hxxp://myelt.heinle.com:80,*":{"media-stream-mic":1, "media-stream-camera":1}}, "clear_on_exit_migrated":true, "pref_version":1}, "exited_cleanly":true, "name":"Primeiro usu\u00e1rio", "exit_type":"Crashed", "is_managed":false}, "tabs":{"use_compact_navigation_bar":false, "use_vertical_tabs":false}, "translate_denied_count":{"en":12, "ar":0, "zh-TW":0, "ru":0, "es":0}, "cloud_print":{"email":""}, "autofill":{"negative_upload_rate":1, "positive_upload_rate":1}, "spdy":{"servers":["lh6.googleusercontent.com:443", "sites.google.com:443", "checkout.google.com:443", "lh5.googleusercontent.com:443", "blogger.googleusercontent.com:443", "lh4.googleusercontent.com:443", "ajax.googleapis.com:443", "www.youtube.com:443", "accounts.google.com:443", "mail-attachment.googleusercontent.com:443", "plusone.google.com:443", "tpc.googlesyndication.com:443", "adwords.google.com:443", "toolbarqueries.google.com:443", "apis.google.com:443", "chatenabled.mail.google.com:443", "i2.ytimg.com:443", "chrome.google.com:443", "docs.google.com:443", "support.google.com:443", "googleads.g.doubleclick.net:443", "pagead2.googleadservices.com:443", "static1.orkut.com:443", "blob-s-docs.googlegroups.com:443", "www.googleadservices.com:443", "lh3.googleusercontent.com:443", "accounts.google.com.br:443", "ssl.gstatic.com:443", "accounts.youtube.com:443", "fonts.googleapis.com:443", "mail.google.com:443", "www.google.com:443", "www.gstatic.com:443", "talkgadget.google.com:443", "themes.googleusercontent.com:443", "lh5.ggpht.com:443", "controladorcentral.appspot.com:443", "ssl.google-analytics.com:443", "clients2.google.com:443", "plus.google.com:443", "fls.doubleclick.net:443", "maps.google.com:443"]}, "hxxp_throttling":{"enabled":true}, "homepage":"about:newtab?source=home", "countryid_at_install":16978, "download":{"directory_upgrade":true, "extensions_to_open":""}, "translate_accepted_count":{"en":0, "ar":1, "zh-TW":1, "ru":1, "es":3}, "apps_promo_counter":11, "selectfile":{"last_directory":"C:\\Users\\Pessoal\\Documents\\Ambiental\\5\u00ba per\u00edodo\\Microbiologia"}}

*************************

AdwCleaner[R1].txt - [205668 octets] - [01/07/2013 21:00:47]

########## EOF - C:\AdwCleaner[R1].txt - [205730 octets] ##########

log após remoção

# AdwCleaner v2.303 - Relatório criado em 01/07/2013 às 21:20:57

# Atualizado em 08/06/2013 por Xplode

# Sistema Operacional : Windows 7 Home Premium Service Pack 1 (64 bits)

# Usuário : Pessoal - ANACLARA-PC

# Modo de Boot : Modo Seguro com Rede

# Executado de : C:\Users\Pessoal\Desktop\AdwCleaner.exe

# Opção [Remover]

***** [serviços] *****

***** [Arquivos/Pastas] *****

Arquivo Removido : C:\user.js

Arquivo Removido : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\searchplugins\Conduit.xml

Pasta Removido : C:\Program Files (x86)\Ask.com

Pasta Removido : C:\Program Files (x86)\Desk 365

Pasta Removido : C:\ProgramData\eSafe

Pasta Removido : C:\Users\Pessoal\AppData\Local\APN

Pasta Removido : C:\Users\Pessoal\AppData\LocalLow\AskToolbar

Pasta Removido : C:\Users\Pessoal\AppData\Roaming\Desk 365

Pasta Removido : C:\Users\Pessoal\AppData\Roaming\eIntaller

Pasta Removido : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\ConduitCommon

Pasta Removido : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\CT2233703

Pasta Removido : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\CT2851643

Pasta Removido : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}

Pasta Removido : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\extensions\{e0301295-ab3e-4af3-979f-3d453c5f9f48}

Pasta Removido : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

***** [Registro] *****

Chave Removida : HKCU\Software\APN

Chave Removida : HKCU\Software\AutocompleteProBHO

Chave Removida : HKCU\Software\InstallCore

Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}

Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}

Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Chave Removida : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}

Chave Removida : HKCU\Software\V9

Chave Removida : HKLM\Software\APN

Chave Removida : HKLM\Software\AskToolbar

Chave Removida : HKLM\Software\BFlix

Chave Removida : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}

Chave Removida : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Chave Removida : HKLM\SOFTWARE\Classes\AppID\{13C8734A-1AD2-4500-9F65-10D99AD80F54}

Chave Removida : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

Chave Removida : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Chave Removida : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Chave Removida : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Chave Removida : HKLM\SOFTWARE\Classes\AppID\Iminent.MMServer.EXE

Chave Removida : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.DLL

Chave Removida : HKLM\SOFTWARE\Classes\IminentMMServer.ACPlayer

Chave Removida : HKLM\SOFTWARE\Classes\IminentMMServer.ACPlayer.1

Chave Removida : HKLM\SOFTWARE\Classes\IminentWebBooster.Web2IMBHandler

Chave Removida : HKLM\SOFTWARE\Classes\IminentWebBooster.Web2IMBHandler.1

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{425F621C-217C-40AD-B22F-4EFCFF452800}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}

Chave Removida : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}

Chave Removida : HKLM\Software\Desksvc

Chave Removida : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32

Chave Removida : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS

Chave Removida : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32

Chave Removida : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS

Chave Removida : HKLM\Software\portaldositesSoftware

Chave Removida : HKLM\Software\V9

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{01BB6254-5E89-4C53-BEF1-4D1656B09B86}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8E948448-E97B-4864-8177-546200709672}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{913FAA37-8CDB-4144-9047-E2A950CD967E}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A93B530D-2B18-48C7-9F3C-281679403372}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{913FAA37-8CDB-4144-9047-E2A950CD967E}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cfd485f0-96bd-47cd-bb6d-cd7dda95f102}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}

Chave Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

Chave Removida : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Chave Removida : HKLM\SOFTWARE\Classes\Interface\{913FAA37-8CDB-4144-9047-E2A950CD967E}

Chave Removida : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Chave Removida : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Chave Removida : HKLM\SOFTWARE\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}

Chave Removida : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}

Chave Removida : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}

Chave Removida : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

Chave Removida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

Dados Removida : HKLM\...\StartMenuInternet\FIREFOX.EXE [(Default)] = C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\firefox.exe hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

Dados Removida : HKLM\...\StartMenuInternet\Google Chrome [(Default)] = "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808

Valor Removida : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [support@predictad.com]

Valor Removida : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Navegadores] *****

-\\ Internet Explorer v10.0.9200.16611

Substituído : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q= --> hxxp://www.google.com

Substituído : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q= --> hxxp://www.google.com

Substituído : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q= --> hxxp://www.google.com

Substituído : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q= --> hxxp://www.google.com

Substituído : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q= --> hxxp://www.google.com

Substituído : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q= --> hxxp://www.google.com

Substituído : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=43168&st=bs&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&q=%s --> hxxp://www.google.com

Substituído : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=43168&st=bs&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&q=%s --> hxxp://www.google.com

Substituído : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808 --> hxxp://www.google.com

Substituído : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=ST9500325AS_5VE9GJJYXXXX5VE9GJJY&ts=1371788808 --> hxxp://www.google.com

Substituído : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=43168&tid=4003&ver=3.4&ts=1371817532988&tguid=43168-4003-1371817532988-6CBB1CB95E9623EAC2AA0305F8E058D8&st=chrome&q= --> hxxp://www.google.com

-\\ Mozilla Firefox v8.0 (pt-BR)

Arquivo : C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\prefs.js

C:\Users\Pessoal\AppData\Roaming\Mozilla\Firefox\Profiles\nu1lksf9.default\user.js ... Removido !

Removida : user_pref("CT2233703..clientLogIsEnabled", false);

Removida : user_pref("CT2233703..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]

Removida : user_pref("CT2233703..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]

Removida : user_pref("CT2233703.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Removida : user_pref("CT2233703.BrowserCompStateIsOpen_1000515", true);

Removida : user_pref("CT2233703.BrowserCompStateIsOpen_129575152550744596", true);

Removida : user_pref("CT2233703.BrowserCompStateIsOpen_1308308482930860462", true);

Removida : user_pref("CT2233703.CT2233703", "CT2233703");

Removida : user_pref("CT2233703.CommunitiesChangesLastCheckTime", "0");

Removida : user_pref("CT2233703.CurrentServerDate", "24-8-2011");

Removida : user_pref("CT2233703.DialogsAlignMode", "LTR");

Removida : user_pref("CT2233703.DialogsGetterLastCheckTime", "Tue Aug 23 2011 20:03:52 GMT-0300 (Hora oficial d[...]

Removida : user_pref("CT2233703.DownloadReferralCookieData", "");

Removida : user_pref("CT2233703.EMailNotifierPollDate", "Tue Aug 23 2011 22:35:43 GMT-0300 (Hora oficial do Bra[...]

Removida : user_pref("CT2233703.FirstServerDate", "24-8-2011");

Removida : user_pref("CT2233703.FirstTime", true);

Removida : user_pref("CT2233703.FirstTimeFF3", true);

Removida : user_pref("CT2233703.FixPageNotFoundErrors", true);

Removida : user_pref("CT2233703.GroupingInvalidateCache", false);

Removida : user_pref("CT2233703.GroupingLastCheckTime", "0");

Removida : user_pref("CT2233703.GroupingLastServerUpdateTime", "0");

Removida : user_pref("CT2233703.GroupingServerCheckInterval", 1440);

Removida : user_pref("CT2233703.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Removida : user_pref("CT2233703.HasUserGlobalKeys", true);

Removida : user_pref("CT2233703.HomePageProtectorEnabled", true);

Removida : user_pref("CT2233703.Initialize", true);

Removida : user_pref("CT2233703.InitializeCommonPrefs", true);

Removida : user_pref("CT2233703.InstallationAndCookieDataSentCount", 1);

Removida : user_pref("CT2233703.InstallationType", "Unknown");

Removida : user_pref("CT2233703.InstalledDate", "Tue Aug 23 2011 20:03:59 GMT-0300 (Hora oficial do Brasil)");

Removida : user_pref("CT2233703.InvalidateCache", false);

Removida : user_pref("CT2233703.IsAlertDBUpdated", true);

Removida : user_pref("CT2233703.IsGrouping", false);

Removida : user_pref("CT2233703.IsInitSetupIni", true);

Removida : user_pref("CT2233703.IsMulticommunity", false);

Removida : user_pref("CT2233703.IsOpenThankYouPage", true);

Removida : user_pref("CT2233703.IsOpenUninstallPage", true);

Removida : user_pref("CT2233703.IsProtectorsInit", true);

Removida : user_pref("CT2233703.LanguagePackLastCheckTime", "Tue Aug 23 2011 20:03:59 GMT-0300 (Hora oficial do[...]

Removida : user_pref("CT2233703.LanguagePackReloadIntervalMM", 1440);

Removida : user_pref("CT2233703.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]

Removida : user_pref("CT2233703.LastLogin_3.6.0.10", "Tue Aug 23 2011 20:03:52 GMT-0300 (Hora oficial do Brasil[...]

Removida : user_pref("CT2233703.LatestVersion", "3.6.0.10");

Removida : user_pref("CT2233703.Locale", "en");

Removida : user_pref("CT2233703.MCDetectTooltipHeight", "83");

Removida : user_pref("CT2233703.MCDetectTooltipShow", false);

Removida : user_pref("CT2233703.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Removida : user_pref("CT2233703.MCDetectTooltipWidth", "295");

Removida : user_pref("CT2233703.MyStuffEnabledAtInstallation", true);

Removida : user_pref("CT2233703.OriginalFirstVersion", "3.6.0.10");

Removida : user_pref("CT2233703.RadioIsPodcast", false);

Removida : user_pref("CT2233703.RadioLastCheckTime", "Tue Aug 23 2011 22:37:42 GMT-0300 (Hora oficial do Brasil[...]

Removida : user_pref("CT2233703.RadioLastUpdateIPServer", "0");

Removida : user_pref("CT2233703.RadioMediaID", "11027882");

Removida : user_pref("CT2233703.RadioMediaType", "Media Player");

Removida : user_pref("CT2233703.RadioMenuSelectedID", "EBRadioMenu_CT223370311027882");

Removida : user_pref("CT2233703.RadioShrinkedFromSetup", false);

Removida : user_pref("CT2233703.RadioStationName", "DANCE%20radio");

Removida : user_pref("CT2233703.RadioStationURL", "hxxp://www.abradio.cz/asx/danceradio32.asx");

Removida : user_pref("CT2233703.SavedHomepage", "hxxp://www.google.com.br/");

Removida : user_pref("CT2233703.SearchEngineBeforeUnload", "4shared.com Customized Web Search");

Removida : user_pref("CT2233703.SearchFromAddressBarIsInit", true);

Removida : user_pref("CT2233703.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT223[...]

Removida : user_pref("CT2233703.SearchInNewTabEnabled", true);

Removida : user_pref("CT2233703.SearchInNewTabIntervalMM", 1440);

Removida : user_pref("CT2233703.SearchInNewTabLastCheckTime", "Tue Aug 23 2011 20:03:57 GMT-0300 (Hora oficial [...]

Removida : user_pref("CT2233703.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]

Removida : user_pref("CT2233703.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]

Removida : user_pref("CT2233703.SearchProtectorEnabled", true);

Removida : user_pref("CT2233703.SearchProtectorToolbarDisabled", true);

Removida : user_pref("CT2233703.ServiceMapLastCheckTime", "Tue Aug 23 2011 20:03:47 GMT-0300 (Hora oficial do B[...]

Removida : user_pref("CT2233703.SettingsLastCheckTime", "Tue Aug 23 2011 22:37:37 GMT-0300 (Hora oficial do Bra[...]

Removida : user_pref("CT2233703.SettingsLastUpdate", "1314014773");

Removida : user_pref("CT2233703.ThirdPartyComponentsInterval", 504);

Removida : user_pref("CT2233703.ThirdPartyComponentsLastCheck", "Tue Aug 23 2011 20:03:47 GMT-0300 (Hora oficia[...]

Removida : user_pref("CT2233703.ThirdPartyComponentsLastUpdate", "1246786978");

Removida : user_pref("CT2233703.ToolbarDisabled", true);

Removida : user_pref("CT2233703.ToolbarShrinkedFromSetup", false);

Removida : user_pref("CT2233703.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2233703");

Removida : user_pref("CT2233703.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]

Removida : user_pref("CT2233703.UserID", "UN68542659388745326");

Removida : user_pref("CT2233703.WeatherNetwork", "");

Removida : user_pref("CT2233703.WeatherPollDate", "Tue Aug 23 2011 22:35:45 GMT-0300 (Hora oficial do Brasil)")[...]

Removida : user_pref("CT2233703.WeatherUnit", "C");

Removida : user_pref("CT2233703.alertChannelId", "631527");

Removida : user_pref("CT2233703.approveUntrustedApps", false);

Removida : user_pref("CT2233703.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D4[...]

Removida : user_pref("CT2233703.backendstorage./9b+7ex305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e.:2z527", "247E706A73744345343D4436387E4A3F422F77317D7C207[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e06cg5el8:", "6E6D706E727075716E71");

Removida : user_pref("CT2233703.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473767478767B777477242F4B4947[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347474[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e8x305", "247E3441402B327844393C29712B7A7C207D3027324740434[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]

Removida : user_pref("CT2233703.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]

Removida : user_pref("CT2233703.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]

Removida : user_pref("CT2233703.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]

Removida : user_pref("CT2233703.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]

Removida : user_pref("CT2233703.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]

Removida : user_pref("CT2233703.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]

Removida : user_pref("CT2233703.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215[...]

Removida : user_pref("CT2233703.backendstorage./9b-0?3g>d", "6F6F3B6C6B7441417A44447A7220774C4A4A252323247D2A7E[...]

Removida : user_pref("CT2233703.backendstorage./9b-0?3g@6:5;", "");

Removida : user_pref("CT2233703.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E424[...]

Removida : user_pref("CT2233703.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "676A6D7273747576");

Removida : user_pref("CT2233703.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484777213F3E484F4E4D464[...]

Removida : user_pref("CT2233703.backendstorage./9b5ba==9cjag", "693C713C737070747A7245457B75777A7B4D205020");

Removida : user_pref("CT2233703.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D706E727075707375777576");

Removida : user_pref("CT2233703.backendstorage./9b9643g3/9e", "6A");

Removida : user_pref("CT2233703.backendstorage./9b<:222h64<", "393F352F3E");

Removida : user_pref("CT2233703.backendstorage./9b=+03eh8h8j?:", "4443");

Removida : user_pref("CT2233703.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]

Removida : user_pref("CT2233703.backendstorage./9b?b0d:8aj62<h", "6D");

Removida : user_pref("CT2233703.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");

Removida : user_pref("CT2233703.components.1000034", false);

Removida : user_pref("CT2233703.components.1000082", false);

Removida : user_pref("CT2233703.components.1000515", false);

Removida : user_pref("CT2233703.components.129018176144925716", false);

Removida : user_pref("CT2233703.components.129115936916398172", false);

Removida : user_pref("CT2233703.components.129212710531499469", false);

Removida : user_pref("CT2233703.components.129575152550744596", false);

Removida : user_pref("CT2233703.components.1308308482930860462", false);

Removida : user_pref("CT2233703.components.5174646587324121019", false);

Removida : user_pref("CT2233703.components.7020432453048141244", false);

Removida : user_pref("CT2233703.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]

Removida : user_pref("CT2233703.globalFirstTimeInfoLastCheckTime", "Tue Aug 23 2011 20:03:53 GMT-0300 (Hora ofi[...]

Removida : user_pref("CT2233703.homepageProtectorEnableByLogin", true);

Removida : user_pref("CT2233703.initDone", true);

Removida : user_pref("CT2233703.isAppTrackingManagerOn", true);

Removida : user_pref("CT2233703.isFirstRadioInstallation", false);

Removida : user_pref("CT2233703.myStuffEnabled", true);

Removida : user_pref("CT2233703.myStuffPublihserMinWidth", 400);

Removida : user_pref("CT2233703.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]

Removida : user_pref("CT2233703.myStuffServiceIntervalMM", 1440);

Removida : user_pref("CT2233703.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]

Removida : user_pref("CT2233703.searchProtectorDialogDelayInSec", 10);

Removida : user_pref("CT2233703.searchProtectorEnableByLogin", true);

Removida : user_pref("CT2233703.testingCtid", "");

Removida : user_pref("CT2233703.toolbarAppMetaDataLastCheckTime", "Tue Aug 23 2011 20:03:51 GMT-0300 (Hora ofic[...]

Removida : user_pref("CT2233703.toolbarContextMenuLastCheckTime", "Tue Aug 23 2011 20:03:58 GMT-0300 (Hora ofic[...]

Removida : user_pref("CT2233703.usagesFlag", 2);

Removida : user_pref("CT2851643..clientLogIsEnabled", false);

Removida : user_pref("CT2851643..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]

Removida : user_pref("CT2851643..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]

Removida : user_pref("CT2851643.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

Removida : user_pref("CT2851643.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

Removida : user_pref("CT2851643.AppTrackingLastCheckTime", "Mon Jan 30 2012 17:46:16 GMT-0200");

Removida : user_pref("CT2851643.BrowserCompStateIsOpen_130056798614995770", true);

Removida : user_pref("CT2851643.BrowserCompStateIsOpen_1359634298000", true);

Removida : user_pref("CT2851643.CTID", "CT2851643");

Removida : user_pref("CT2851643.CurrentServerDate", "3-5-2013");

Removida : user_pref("CT2851643.DialogsAlignMode", "LTR");

Removida : user_pref("CT2851643.DialogsGetterLastCheckTime", "Fri May 03 2013 13:53:46 GMT-0300 (Hora oficial d[...]

Removida : user_pref("CT2851643.DownloadReferralCookieData", "");

Removida : user_pref("CT2851643.EMailNotifierPollDate", "Fri Nov 25 2011 19:52:43 GMT-0200");

Removida : user_pref("CT2851643.FeedLastCount1733423638652034402", 538);

Removida : user_pref("CT2851643.FeedPollDate129351530881212974", "Wed Feb 16 2011 17:30:14 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881212980", "Wed Feb 16 2011 17:30:14 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881212986", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881212992", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881212998", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881213004", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881213010", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881213016", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881213022", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881213028", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedPollDate129351530881213034", "Wed Feb 16 2011 17:30:15 GMT-0200");

Removida : user_pref("CT2851643.FeedTTL129351530881212974", 10);

Removida : user_pref("CT2851643.FeedTTL129351530881212998", 15);

Removida : user_pref("CT2851643.FeedTTL129351530881213010", 5);

Removida : user_pref("CT2851643.FeedTTL129351530881213022", 5);

Removida : user_pref("CT2851643.FirstServerDate", "26-1-2011");

Removida : user_pref("CT2851643.FirstTime", true);

Removida : user_pref("CT2851643.FirstTimeFF3", true);

Removida : user_pref("CT2851643.FixPageNotFoundErrors", true);

Removida : user_pref("CT2851643.GroupingServerCheckInterval", 1440);

Removida : user_pref("CT2851643.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

Removida : user_pref("CT2851643.HasUserGlobalKeys", true);

Removida : user_pref("CT2851643.HomePageProtectorEnabled", false);

Removida : user_pref("CT2851643.Initialize", true);

Removida : user_pref("CT2851643.InitializeCommonPrefs", true);

Removida : user_pref("CT2851643.InstallationAndCookieDataSentCount", 3);

Removida : user_pref("CT2851643.InstalledDate", "Wed Jan 26 2011 14:30:50 GMT-0200");

Removida : user_pref("CT2851643.IsAlertDBUpdated", true);

Removida : user_pref("CT2851643.IsGrouping", false);

Removida : user_pref("CT2851643.IsMulticommunity", false);

Removida : user_pref("CT2851643.IsOpenThankYouPage", true);

Removida : user_pref("CT2851643.IsOpenUninstallPage", true);

Removida : user_pref("CT2851643.LanguagePackLastCheckTime", "Fri May 03 2013 13:53:55 GMT-0300 (Hora oficial do[...]

Removida : user_pref("CT2851643.LanguagePackReloadIntervalMM", 1440);

Removida : user_pref("CT2851643.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]

Removida : user_pref("CT2851643.LastLogin_3.10.0.1", "Wed Mar 06 2013 08:48:54 GMT-0300 (Hora oficial do Brasil[...]

Removida : user_pref("CT2851643.LastLogin_3.18.0.7", "Fri May 03 2013 13:53:49 GMT-0300 (Hora oficial do Brasil[...]

Removida : user_pref("CT2851643.LastLogin_3.2.5.2", "Mon Mar 21 2011 20:22:41 GMT-0300 (Hora oficial do Brasil)[...]

Removida : user_pref("CT2851643.LastLogin_3.3.3.2", "Tue Jun 21 2011 17:58:28 GMT-0300 (Hora oficial do Brasil)[...]

Removida : user_pref("CT2851643.LastLogin_3.5.0.12", "Tue Aug 02 2011 17:13:26 GMT-0300 (Hora oficial do Brasil[...]

Removida : user_pref("CT2851643.LastLogin_3.6.0.10", "Fri Sep 23 2011 19:46:58 GMT-0300 (Hora oficial do Brasil[...]

Removida : user_pref("CT2851643.LastLogin_3.7.0.6", "Tue Nov 08 2011 19:24:08 GMT-0200");

Removida : user_pref("CT2851643.LastLogin_3.8.0.8", "Mon Dec 05 2011 09:40:19 GMT-0200");

Removida : user_pref("CT2851643.LastLogin_3.8.1.0", "Sun Jan 22 2012 16:40:30 GMT-0200");

Removida : user_pref("CT2851643.LastLogin_3.9.0.3", "Tue Apr 17 2012 07:23:40 GMT-0300 (Hora oficial do Brasil)[...]

Removida : user_pref("CT2851643.LatestVersion", "3.18.0.7");

Removida : user_pref("CT2851643.Locale", "pt");

Removida : user_pref("CT2851643.MCDetectTooltipHeight", "83");

Removida : user_pref("CT2851643.MCDetectTooltipShow", false);

Removida : user_pref("CT2851643.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

Removida : user_pref("CT2851643.MCDetectTooltipWidth", "295");

Removida : user_pref("CT2851643.MyStuffEnabledAtInstallation", true);

Removida : user_pref("CT2851643.SHRINK_TOOLBAR", 1);

Removida : user_pref("CT2851643.SearchBoxWidth", 462);

Removida : user_pref("CT2851643.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");

Removida : user_pref("CT2851643.SearchFromAddressBarIsInit", true);

Removida : user_pref("CT2851643.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT285[...]

Removida : user_pref("CT2851643.SearchInNewTabEnabled", true);

Removida : user_pref("CT2851643.SearchInNewTabIntervalMM", 1440);

Removida : user_pref("CT2851643.SearchInNewTabLastCheckTime", "Fri May 03 2013 13:53:44 GMT-0300 (Hora oficial [...]

Removida : user_pref("CT2851643.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]

Removida : user_pref("CT2851643.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]

Removida : user_pref("CT2851643.SearchProtectorEnabled", false);

Removida : user_pref("CT2851643.SearchProtectorToolbarDisabled", false);

Removida : user_pref("CT2851643.ServiceMapLastCheckTime", "Fri May 03 2013 13:53:44 GMT-0300 (Hora oficial do B[...]

Removida : user_pref("CT2851643.SettingsLastCheckTime", "Fri May 03 2013 13:53:44 GMT-0300 (Hora oficial do Bra[...]

Removida : user_pref("CT2851643.SettingsLastUpdate", "1367568777");

Removida : user_pref("CT2851643.ThirdPartyComponentsInterval", 504);

Removida : user_pref("CT2851643.ThirdPartyComponentsLastCheck", "Fri May 03 2013 13:53:44 GMT-0300 (Hora oficia[...]

Removida : user_pref("CT2851643.ThirdPartyComponentsLastUpdate", "1331806008");

Removida : user_pref("CT2851643.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2851643");

Removida : user_pref("CT2851643.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]

Removida : user_pref("CT2851643.UserID", "UN93282510536799387");

Removida : user_pref("CT2851643.ValidationData_Search", 2);

Removida : user_pref("CT2851643.ValidationData_Toolbar", 2);

Removida : user_pref("CT2851643.WeatherNetwork", "");

Removida : user_pref("CT2851643.WeatherPollDate", "Fri May 03 2013 13:53:46 GMT-0300 (Hora oficial do Brasil)")[...]

Removida : user_pref("CT2851643.WeatherUnit", "C");

Removida : user_pref("CT2851643.alertChannelId", "1243677");

Removida : user_pref("CT2851643.approveUntrustedApps", false);

Removida : user_pref("CT2851643.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474[...]

Removida : user_pref("CT2851643.backendstorage./9b+7ex305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e-x305", "247E29327641363937333545397E3F493B2F77317E2025203[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e.:2z527", "2423");

Removida : user_pref("CT2851643.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e06cg5el8:", "6E6D6B6B6D7474747178");

Removida : user_pref("CT2851643.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737171737A7A7A777E242F4B4947[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]

Removida : user_pref("CT2851643.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]

Removida : user_pref("CT2851643.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4B524B4[...]

Removida : user_pref("CT2851643.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]

Removida : user_pref("CT2851643.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]

Removida : user_pref("CT2851643.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]

Removida : user_pref("CT2851643.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]

Removida : user_pref("CT2851643.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934235[...]

Removida : user_pref("CT2851643.backendstorage./9b-0?3g>d", "3E69406E416B43747A4375754720484A7B4B257B2351222A7E[...]

Removida : user_pref("CT2851643.backendstorage./9b-0?3g@6:5;", "");

Removida : user_pref("CT2851643.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");

Removida : user_pref("CT2851643.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332[...]

Removida : user_pref("CT2851643.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");

Removida : user_pref("CT2851643.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484779213F3E484F4E4D464[...]

Removida : user_pref("CT2851643.backendstorage./9b5ba==9cjag", "6F6D3F6C6A7441427A784873494B754B497A504C7D");

Removida : user_pref("CT2851643.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6B6B6D7474747074797476");

Removida : user_pref("CT2851643.backendstorage./9b9643g3/9e", "6A");

Removida : user_pref("CT2851643.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");

Removida : user_pref("CT2851643.backendstorage./9b<:222h64<", "393F352F3E");

Removida : user_pref("CT2851643.backendstorage./9b<:222h64<l8daj", "6D70706F7674727977732A7A79727A77757E7C");

Removida : user_pref("CT2851643.backendstorage./9b=+03eh8h8j?:", "4443");

Removida : user_pref("CT2851643.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]

Removida : user_pref("CT2851643.backendstorage./9b?b0d:8aj62<h", "6D");

Removida : user_pref("CT2851643.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");

Removida : user_pref("CT2851643.backendstorage.cb_firstuse0100", "31");

Removida : user_pref("CT2851643.backendstorage.cbcountry_000", "4252");

Removida : user_pref("CT2851643.backendstorage.cbcountry_001", "4252");

Removida : user_pref("CT2851643.backendstorage.cbfirsttime", "5468752053657020323920323031312032313A33353A34312[...]

Removida : user_pref("CT2851643.backendstorage.enableinj", "");

Removida : user_pref("CT2851643.backendstorage.mam_gk_appsdata", "7B2261707073223A5B7B226964223A225072696365476[...]

Removida : user_pref("CT2851643.backendstorage.mam_gk_appsdefaultenabled", "6E756C6C");

Removida : user_pref("CT2851643.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");

Removida : user_pref("CT2851643.backendstorage.mam_gk_appstate_pricegong", "6F6E");

Removida : user_pref("CT2851643.backendstorage.mam_gk_appstatereporttime", "31333637363031323731343138");

Removida : user_pref("CT2851643.backendstorage.mam_gk_configuration", "7B22636F6E66696775726174696F6E223A5B7B22[...]

Removida : user_pref("CT2851643.backendstorage.mam_gk_currentversion", "312E342E342E36");

Removida : user_pref("CT2851643.backendstorage.mam_gk_first_time", "31");

Removida : user_pref("CT2851643.backendstorage.mam_gk_lastlogintime", "31333637363031323731383533");

Removida : user_pref("CT2851643.backendstorage.mam_gk_localization", "7B22676164676574436F6E74656E74506F6C69637[...]

Removida : user_pref("CT2851643.backendstorage.mam_gk_settings1.4.3.1", "7B22537461747573223A227375636365656465[...]

Removida : user_pref("CT2851643.backendstorage.mam_gk_settings1.4.3.2", "7B22537461747573223A227375636365656465[...]

Removida : user_pref("CT2851643.backendstorage.mam_gk_settings1.4.4.6", "7B22537461747573223A227375636365656465[...]

Removida : user_pref("CT2851643.backendstorage.mam_gk_showclosebutton", "74727565");

Removida : user_pref("CT2851643.backendstorage.mam_gk_showwelcomegadget", "66616C7365");

Removida : user_pref("CT2851643.backendstorage.mam_gk_userid", "63353261323463352D373062362D346635392D613463392[...]

Removida : user_pref("CT2851643.backendstorage.pairingkey", "33413935413443414132453335324444383533453644343435[...]

Removida : user_pref("CT2851643.backendstorage.pg_enable", "74727565");

Removida : user_pref("CT2851643.backendstorage.scriptsource", "687474703A2F2F3132372E302E302E313A31303030302F67[...]

Removida : user_pref("CT2851643.backendstorage.searchappstate", "32");

Removida : user_pref("CT2851643.backendstorage.searchapptracking", "73656E74");

Removida : user_pref("CT2851643.backendstorage.sf_just_installed", "46414C5345");

Removida : user_pref("CT2851643.backendstorage.sf_status", "454E41424C4544");

Removida : user_pref("CT2851643.backendstorage.sf_user_id", "6369645F33353230313331343135353336343134383831");

Removida : user_pref("CT2851643.backendstorage.url_history", "687474703A2F2F7777772E626172626163656E612E6D672E6[...]

Removida : user_pref("CT2851643.backendstorage.url_history0001", "687474703A2F2F70742E77696B6970656469612E6F726[...]

Removida : user_pref("CT2851643.backendstorage.url_history_time", "31333237393532373837333437");

Removida : user_pref("CT2851643.backendstorage.uttorrents", "7B226275696C64223A32303638332C226C6162656C223A5B5D[...]

Removida : user_pref("CT2851643.components.1000034", false);

Removida : user_pref("CT2851643.components.129422837839831266", false);

Removida : user_pref("CT2851643.components.1733423638652034402", false);

Removida : user_pref("CT2851643.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]

Removida : user_pref("CT2851643.globalFirstTimeInfoLastCheckTime", "Fri May 03 2013 13:53:46 GMT-0300 (Hora ofi[...]

Removida : user_pref("CT2851643.homepageProtectorEnableByLogin", true);

Removida : user_pref("CT2851643.initDone", true);

Removida : user_pref("CT2851643.isAppTrackingManagerOn", false);

Removida : user_pref("CT2851643.myStuffEnabled", true);

Removida : user_pref("CT2851643.myStuffPublihserMinWidth", 400);

Removida : user_pref("CT2851643.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]

Removida : user_pref("CT2851643.myStuffServiceIntervalMM", 1440);

Removida : user_pref("CT2851643.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]

Removida : user_pref("CT2851643.oldAppsList", "129351530870587943,129351530870900444,1000234,129351530871056696[...]

Removida : user_pref("CT2851643.revertSettingsEnabled", true);

Removida : user_pref("CT2851643.searchProtectorDialogDelayInSec", 10);

Removida : user_pref("CT2851643.searchProtectorEnableByLogin", true);

Removida : user_pref("CT2851643.testingCtid", "");

Removida : user_pref("CT2851643.toolbarAppMetaDataLastCheckTime", "Fri May 03 2013 13:53:45 GMT-0300 (Hora ofic[...]

Removida : user_pref("CT2851643.toolbarContextMenuLastCheckTime", "Fri May 03 2013 13:53:48 GMT-0300 (Hora ofic[...]

Removida : user_pref("CT2851643.usagesFlag", 2);

Removida : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2233703&Search[...]

Removida : user_pref("CommunityToolbar.ConduitSearchList", "4shared.com Customized Web Search");

Removida : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2851643/CT2851643[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1243677/1239350/BR", "\"0\"[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/631527/627389/BR", "\"0\"")[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/BR", "\"0\"")[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2233703", [...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2851643", [...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2233703",[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2851643",[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63433363123173[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/20[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/20[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2233703&octid=[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2851643&octid=[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2851643/CT2851643[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]

Removida : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=pt", "\"63d[...]

Removida : user_pref("CommunityToolbar.EngineOwner", "");

Removida : user_pref("CommunityToolbar.EngineOwnerGuid", "{e0301295-ab3e-4af3-979f-3d453c5f9f48}");

Removida : user_pref("CommunityToolbar.EngineOwnerToolbarId", "utorrentbar_pt");

Removida : user_pref("CommunityToolbar.IsEngineShown", true);

Removida : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);

Removida : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Pessoal\\AppData\\Roaming\\Mozilla\[...]

Removida : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");

Removida : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://cdn.triplegames.com/shared/apps/gamearcade/ar[...]

Removida : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://youtube.conduitapps.com/v115/gadget.php?appMo[...]

Removida : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2851643");

Removida : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{e0301295-ab3e-4af3-979f-3d453c5f9f48}");

Removida : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar_pt");

Removida : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");

Removida : user_pref("CommunityToolbar.ToolbarsList", "CT2851643,CT2233703");

Removida : user_pref("CommunityToolbar.ToolbarsList2", "CT2851643,CT2233703");

Removida : user_pref("CommunityToolbar.ToolbarsList4", "CT2233703");

Removida : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue Mar 22 2011 09:32:09 GMT-03[...]

Removida : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);

Removida : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Apr 12 2011 20:41:04 GMT-0300 (Hora [...]

Removida : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");

Removida : user_pref("CommunityToolbar.alert.locale", "en");

Removida : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);

Removida : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 17:58:46 GMT-0300 (Hora ofic[...]

Removida : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");

Removida : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);

Removida : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");

Removida : user_pref("CommunityToolbar.alert.showTrayIcon", false);

Removida : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);

Removida : user_pref("CommunityToolbar.alert.userId", "67e84ae9-0184-4c11-ac50-317026a5e67a");

Removida : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Jul 10 2012 16:35:49 GMT-0300 (Hor[...]

Removida : user_pref("CommunityToolbar.globalUserId", "55cffb54-8b3b-4832-ba1c-7791e0e62ac0");

Removida : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

Removida : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

Removida : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2233703");

Removida : user_pref("CommunityToolbar.killedEngine", true);

Removida : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri May 03 2013 13:53:5[...]

Removida : user_pref("CommunityToolbar.notifications.alertEnabled", true);

Removida : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);

Removida : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri May 03 2013 13:53:54 GMT-030[...]

Removida : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");

Removida : user_pref("CommunityToolbar.notifications.locale", "en");

Removida : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);

Removida : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri May 03 2013 13:53:46 GMT-0300 (H[...]

Removida : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");

Removida : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);

Removida : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");

Removida : user_pref("CommunityToolbar.notifications.showTrayIcon", false);

Removida : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);

Removida : user_pref("CommunityToolbar.notifications.userId", "2e5c5ae8-a9f6-4f87-8e76-8fc2e65040d8");

Removida : user_pref("CommunityToolbar.undefined", "");

Removida : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");

Removida : user_pref("browser.search.defaultengine", "Ask.com");

Removida : user_pref("browser.search.defaultthis.engineName", "4shared.com Customized Web Search");

Removida : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2233703&Sea[...]

Removida : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");

Removida : user_pref("extensions.BabylonToolbar_i.babExt", "");

Removida : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=100888");

Removida : user_pref("extensions.BabylonToolbar_i.hardId", "7cd4aca4000000000000f07bcb332c1d");

Removida : user_pref("extensions.BabylonToolbar_i.id", "7cd4aca4000000000000f07bcb332c1d");

Removida : user_pref("extensions.BabylonToolbar_i.instlDay", "15363");

Removida : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");

Removida : user_pref("extensions.BabylonToolbar_i.newTab", true);

Removida : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=100888&babsrc=NT_s[...]

Removida : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");

Removida : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");

Removida : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");

Removida : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");

Removida : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");

Removida : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");

Removida : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1714:04:33");

Removida : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");

Removida : user_pref("extensions.asktb.ff-original-keyword-url", "");

Removida : user_pref("extensions.engine@conduit.com.install-event-fired", true);

Removida : user_pref("extensions.toolbar@ask.com.install-event-fired", true);

Removida : user_pref("browser.startup.homepage", "hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&[...]

Removida : user_pref("browser.search.defaultenginename", "Ask.com");

Removida : user_pref("browser.search.order.1", "Ask.com");

Removida : user_pref("browser.search.selectedEngine", "Ask.com");

-\\ Google Chrome v27.0.1453.116

Arquivo : C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Preferences

Removida [l.1] : urls_to_restore_on_startup ={"distribution":{"import_home_page":false, "verbose_logging":false, "create_all_shortcuts":true, "im[...]

*************************

AdwCleaner[R1].txt - [205781 octets] - [01/07/2013 21:00:47]

AdwCleaner[s1].txt - [59190 octets] - [01/07/2013 21:20:57]

########## EOF - C:\AdwCleaner[s1].txt - [59251 octets] ##########

Compartilhar este post


Link para o post
Compartilhar em outros sites

otl.txt

OTL logfile created on: 01/07/2013 22:55:52 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Pessoal\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16614)

Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy

2,96 Gb Total Physical Memory | 2,39 Gb Available Physical Memory | 80,84% Memory free

5,92 Gb Paging File | 5,39 Gb Available in Paging File | 90,98% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 456,56 Gb Total Space | 303,66 Gb Free Space | 66,51% Space Free | Partition Type: NTFS

Computer Name: ANACLARA-PC | User Name: Pessoal | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/07/01 22:12:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

========== Modules (No Company Name) ==========

MOD - [2011/10/05 02:52:30 | 000,756,048 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSPTLS.DLL

========== Services (SafeList) ==========

SRV:64bit: - [2009/07/17 14:06:22 | 000,033,280 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE -- (wltrysvc)

SRV:64bit: - [2009/06/29 17:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe -- (STacSV)

SRV - [2013/07/01 19:41:49 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2013/07/01 19:37:37 | 000,589,368 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)

SRV - [2013/07/01 19:36:19 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2013/06/21 01:32:04 | 000,424,104 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) [Auto | Stopped] -- C:\Program Files (x86)\WinZipper\winzipersvc.exe -- (winzipersvc)

SRV - [2013/06/19 00:06:52 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012/07/23 10:15:52 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2012/07/13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2011/03/28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2010/12/01 13:37:23 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)

SRV - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Arquivos de Programas\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)

SRV - [2010/03/31 03:35:10 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist)

SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009/12/02 16:47:00 | 000,656,624 | ---- | M] (SoftThinks) [Auto | Stopped] -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe -- (SftService)

SRV - [2009/07/01 18:54:02 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)

SRV - [2009/06/29 17:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe -- (STacSV)

SRV - [2009/06/10 18:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009/06/09 11:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Stopped] -- C:\Arquivos de Programas\Dell\DellDock\DockLogin.exe -- (DockLoginService)

SRV - [2009/06/04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)

SRV - [2009/05/21 08:59:08 | 000,206,064 | ---- | M] (SupportSoft, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_DellSupportCenter)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/06/24 19:07:27 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)

DRV:64bit: - [2013/06/24 19:07:27 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)

DRV:64bit: - [2013/06/24 19:07:27 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)

DRV:64bit: - [2012/03/08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)

DRV:64bit: - [2012/03/01 03:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011/03/11 03:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/11 03:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010/11/20 10:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/11/20 08:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2009/09/17 21:21:40 | 000,415,360 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CryptOSD.sys -- (CryptOSD)

DRV:64bit: - [2009/08/05 13:28:36 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)

DRV:64bit: - [2009/08/05 13:28:32 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)

DRV:64bit: - [2009/08/05 13:28:32 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)

DRV:64bit: - [2009/08/05 13:28:32 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)

DRV:64bit: - [2009/07/17 14:06:20 | 000,022,520 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcm42rly.sys -- (BCM42RLY)

DRV:64bit: - [2009/07/17 14:06:16 | 002,769,400 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)

DRV:64bit: - [2009/07/13 22:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 22:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 22:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2009/06/29 17:44:38 | 000,487,424 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)

DRV:64bit: - [2009/06/15 13:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)

DRV:64bit: - [2009/06/10 17:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 17:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 17:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 17:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009/06/04 23:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

DRV:64bit: - [2009/06/03 16:16:56 | 007,333,472 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2009/05/20 16:10:00 | 000,393,728 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)

DRV:64bit: - [2009/05/08 21:15:18 | 000,215,552 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV:64bit: - [2009/02/06 00:54:10 | 000,225,328 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)

DRV:64bit: - [2006/11/01 11:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)

DRV - [2009/07/13 22:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =

IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE:64bit: - HKLM\..\SearchScopes\{DE7B4D18-E985-4940-82D0-D14C7E947A63}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab

IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\..\SearchScopes\{965E8CC7-987E-406B-A4C0-FDC30ADAB875}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-BR

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 81 3C 9D B3 AE 9D CC 01 [binary data]

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.pt/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADSA_pt-BR

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\SearchScopes\{965E8CC7-987E-406B-A4C0-FDC30ADAB875}: "URL" = http://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}

IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: {EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}:2.0

FF - prefs.js..extensions.enabledAddons: compatibility@addons.mozilla.org:1.1

FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}:6.0.39

FF - prefs.js..extensions.enabledAddons: foxyproxy@eric.h.jung:4.1.3

FF - prefs.js..extensions.enabledAddons: testpilot@labs.mozilla.com:1.2.2

FF - prefs.js..extensions.enabledAddons: {e0301295-ab3e-4af3-979f-3d453c5f9f48}:3.18.0.7

FF - prefs.js..extensions.enabledAddons: {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:5.4

FF - prefs.js..network.proxy.socks_remote_dns: true

FF - prefs.js..network.proxy.type: 0

FF - prefs.js..browser.search.useDBForOrder: true

FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/06/25 13:48:54 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/06/25 13:48:54 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\components [2012/01/01 22:00:45 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\plugins [2012/06/18 09:49:36 | 000,000,000 | ---D | M]

[2010/12/29 19:22:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Extensions

[2013/07/01 21:21:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Firefox\Profiles\nu1lksf9.default\extensions

[2013/03/06 09:04:38 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Firefox\Profiles\nu1lksf9.default\extensions\foxyproxy@eric.h.jung

[2012/03/04 13:10:40 | 000,164,722 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\compatibility@addons.mozilla.org.xpi

[2013/03/06 09:04:38 | 000,621,521 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\testpilot@labs.mozilla.com.xpi

[2013/05/03 14:14:22 | 000,117,151 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi

[2013/02/08 10:29:32 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX 4.0 BETA 8\EXTENSIONS\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}

File not found (No name found) -- C:\USERS\PESSOAL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NU1LKSF9.DEFAULT\EXTENSIONS\{E0301295-AB3E-4AF3-979F-3D453C5F9F48}

File not found (No name found) -- C:\USERS\PESSOAL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NU1LKSF9.DEFAULT\EXTENSIONS\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangaohdajkgeopjhpbnlpkehbhmbj\7.15.2.0_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\amahogbojgleppliihjnmkbnnnfdbmck\2.0.0_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb\2.3_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd\0.0.15.7_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbnmelddedlommnmllmfhoephaidddmk\1.2_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2013/06/25 01:10:38 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2:64bit: - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found

O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.

O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.

O3 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.

O3 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.

O4:64bit: - HKLM..\Run: [Apoint] C:\Arquivos de Programas\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)

O4:64bit: - HKLM..\Run: [broadcom Wireless Manager UI] C:\Arquivos de Programas\Dell\Dell Wireless WLAN Card\WLTRAY.EXE (Dell Inc.)

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [iAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [igfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [sysTrayApp] C:\Arquivos de Programas\IDT\WDM\sttray64.exe (IDT, Inc.)

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()

O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)

O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)

O4 - HKLM..\Run: [Desktop Disc Tool] c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()

O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)

O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)

O4 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000..\Run: [e966e] C:\Users\Pessoal\AppData\Roaming\ff70f\e966e.js ()

O4 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000..\Run: [GoogleChromeAutoLaunch_6DF0EB03A8923C60684E56320F038E2D] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

O4 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found

O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found

O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found

O4 - Startup: C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\be27.js ()

O4 - Startup: C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found

O4 - Startup: C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O7 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2

O7 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1

O8:64bit: - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8:64bit: - Extra context menu item: Enviar página para Dispositivo &Bluetooth ... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html File not found

O8 - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8 - Extra context menu item: Enviar página para Dispositivo &Bluetooth ... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html File not found

O9:64bit: - Extra Button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:64bit: - Extra 'Tools' menuitem : @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Enviar para Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra 'Tools' menuitem : Enviar para Dispositivo &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O13 - gopher Prefix: missing

O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.6.0_39)

O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)

O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 10.21.2)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 201.46.128.9 8.8.8.8 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AD8C9A72-A805-49B8-A0BB-57DA757F12D4}: DhcpNameServer = 201.46.128.9 8.8.8.8 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CB1930A5-1097-44BE-A440-C9724CBB6C4C}: DhcpNameServer = 192.168.0.1

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Arquivos de Programas\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000 Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

SafeBootMin:64bit: Base - Driver Group

SafeBootMin:64bit: Boot Bus estender - Driver Group

SafeBootMin:64bit: Boot file system - Driver Group

SafeBootMin:64bit: File system - Driver Group

SafeBootMin:64bit: Filter - Driver Group

SafeBootMin:64bit: HelpSvc - Service

SafeBootMin:64bit: MCODS - Reg Error: Value error.

SafeBootMin:64bit: PCI Configuration - Driver Group

SafeBootMin:64bit: PNP Filter - Driver Group

SafeBootMin:64bit: Primary disk - Driver Group

SafeBootMin:64bit: sacsvr - Service

SafeBootMin:64bit: SCSI Class - Driver Group

SafeBootMin:64bit: System Bus estender - Driver Group

SafeBootMin:64bit: vmms - Service

SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus estender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: HelpSvc - Service

SafeBootMin: MCODS - Reg Error: Value error.

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: sacsvr - Service

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: System Bus estender - Driver Group

SafeBootMin: vmms - Service

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:64bit: Base - Driver Group

SafeBootNet:64bit: Boot Bus estender - Driver Group

SafeBootNet:64bit: Boot file system - Driver Group

SafeBootNet:64bit: File system - Driver Group

SafeBootNet:64bit: Filter - Driver Group

SafeBootNet:64bit: HelpSvc - Service

SafeBootNet:64bit: McMPFSvc - Service

SafeBootNet:64bit: MCODS - Reg Error: Value error.

SafeBootNet:64bit: Messenger - Service

SafeBootNet:64bit: NDIS Wrapper - Driver Group

SafeBootNet:64bit: NetBIOSGroup - Driver Group

SafeBootNet:64bit: NetDDEGroup - Driver Group

SafeBootNet:64bit: Network - Driver Group

SafeBootNet:64bit: NetworkProvider - Driver Group

SafeBootNet:64bit: PCI Configuration - Driver Group

SafeBootNet:64bit: PNP Filter - Driver Group

SafeBootNet:64bit: PNP_TDI - Driver Group

SafeBootNet:64bit: Primary disk - Driver Group

SafeBootNet:64bit: rdsessmgr - Service

SafeBootNet:64bit: sacsvr - Service

SafeBootNet:64bit: SCSI Class - Driver Group

SafeBootNet:64bit: Streams Drivers - Driver Group

SafeBootNet:64bit: System Bus estender - Driver Group

SafeBootNet:64bit: TDI - Driver Group

SafeBootNet:64bit: vmms - Service

SafeBootNet:64bit: WudfUsbccidDriver - Driver

SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers

SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus estender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: GoToAssist - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)

SafeBootNet: HelpSvc - Service

SafeBootNet: McMPFSvc - Service

SafeBootNet: MCODS - Reg Error: Value error.

SafeBootNet: Messenger - Service

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: rdsessmgr - Service

SafeBootNet: sacsvr - Service

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus estender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: vmms - Service

SafeBootNet: WudfUsbccidDriver - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers

SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig

ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework

ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework

ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {49C187D7-91E1-459E-9759-2925384BD397} - .NET Framework

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install

ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework

ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

Drivers32: VIDC.FFDS - ff_vfw.dll File not found

Drivers32: vidc.tscc - C:\Program Files (x86)\MpcStar\Codecs\tscc\tsccvid.dll (TechSmith Corporation)

========== Files/Folders - Created Within 30 Days ==========

[2013/07/01 22:09:38 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

[2013/07/01 20:29:13 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2013/07/01 20:28:38 | 000,000,000 | ---D | C] -- C:\JRT

[2013/07/01 20:19:12 | 000,545,954 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\Pessoal\Desktop\JRT.exe

[2013/06/25 01:13:23 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN

[2013/06/25 01:10:21 | 000,000,000 | ---D | C] -- C:\Windows\temp

[2013/06/25 01:01:10 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe

[2013/06/25 01:01:10 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe

[2013/06/25 01:01:10 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe

[2013/06/25 00:35:36 | 000,000,000 | ---D | C] -- C:\Qoobox

[2013/06/25 00:35:18 | 000,000,000 | ---D | C] -- C:\Windows\erdnt

[2013/06/24 23:49:36 | 000,000,000 | ---D | C] -- C:\PenClean

[2013/06/24 19:33:15 | 000,083,672 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013/06/24 19:17:52 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Roaming\Avira

[2013/06/24 19:16:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

[2013/06/24 19:16:16 | 000,000,000 | ---D | C] -- C:\Firefox

[2013/06/24 19:13:23 | 000,130,016 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013/06/24 19:13:23 | 000,100,712 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013/06/24 19:13:23 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys

[2013/06/24 19:13:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira

[2013/06/24 16:56:29 | 000,085,969 | ---- | C] (GMER) -- C:\Windows\SysWow64\drivers\gmer.sys

[2013/06/24 13:37:44 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\GMER

[2013/06/21 09:25:28 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Local\Programs

[2013/06/21 08:21:54 | 005,081,922 | R--- | C] (Swearware) -- C:\Users\Pessoal\Desktop\ComboFix.exe

[2013/06/21 02:51:04 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll

[2013/06/21 02:51:04 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll

[2013/06/21 02:51:04 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe

[2013/06/21 02:51:04 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe

[2013/06/21 02:51:04 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll

[2013/06/21 02:51:04 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll

[2013/06/21 02:51:04 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe

[2013/06/21 02:51:04 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll

[2013/06/21 02:51:04 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll

[2013/06/21 02:51:03 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll

[2013/06/21 02:51:02 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll

[2013/06/21 02:51:02 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll

[2013/06/21 02:51:02 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll

[2013/06/21 02:50:03 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll

[2013/06/21 02:50:03 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

[2013/06/21 01:56:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MpcStar

[2013/06/21 01:32:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper

[2013/06/21 01:32:04 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Roaming\WinZipper

[2013/06/21 01:32:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinZipper

[2013/06/21 01:27:22 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Local\DealPlyLive

[2013/06/21 01:27:22 | 000,000,000 | ---D | C] -- C:\ProgramData\DealPlyLive

[2013/06/21 01:27:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DealPlyLive

[2013/06/20 22:38:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Baidu Security

[2013/06/20 22:37:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Baidu Security

[2013/06/20 22:20:58 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Roaming\Baidu Security

[2013/06/18 23:16:22 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll

[2013/06/18 23:13:22 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll

[2013/06/18 23:13:22 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll

[2013/06/18 23:13:15 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll

[2013/06/18 23:13:15 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll

[2013/06/18 23:12:34 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll

[2013/06/18 23:12:34 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe

[2013/06/18 23:12:34 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe

[2013/06/18 23:12:32 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll

[2013/06/18 23:12:32 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll

[2013/06/18 23:12:32 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll

[2013/06/18 23:12:22 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll

[2013/06/18 23:12:22 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll

[2013/06/06 21:24:54 | 000,000,000 | -HSD | C] -- C:\Users\Pessoal\AppData\Roaming\ff70f

[2013/06/06 21:24:53 | 000,000,000 | -HSD | C] -- C:\fea

[2013/06/05 00:55:28 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe

[2013/06/05 00:55:28 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll

[2013/06/05 00:55:28 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll

[2013/06/05 00:55:28 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll

[2013/06/05 00:55:28 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll

[2013/06/05 00:55:28 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe

[2013/06/05 00:55:28 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe

[2013/06/05 00:55:28 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe

[2013/06/05 00:55:28 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll

[2013/06/05 00:55:28 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll

[2013/06/05 00:55:28 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll

[2013/06/05 00:55:28 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll

[2013/06/05 00:55:28 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll

[2013/06/05 00:55:28 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe

[2013/06/05 00:55:28 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll

[2013/06/05 00:55:28 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll

[2013/06/05 00:55:28 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe

[2013/06/05 00:55:27 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl

[2013/06/05 00:55:27 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat

[2013/06/05 00:55:27 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll

[2013/06/05 00:55:27 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec

[2013/06/05 00:55:27 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec

[2013/06/05 00:55:27 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll

[2013/06/05 00:55:27 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll

[2013/06/05 00:55:27 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll

[2013/06/05 00:55:27 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll

[2013/06/05 00:55:27 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx

[2013/06/05 00:55:27 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll

[2013/06/05 00:55:26 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl

[2013/06/05 00:55:26 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat

[2013/06/05 00:55:26 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll

[2013/06/05 00:55:26 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll

[2013/06/05 00:55:26 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll

[2013/06/05 00:55:26 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll

[2013/06/05 00:55:26 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll

[2013/06/05 00:55:26 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll

[2013/06/05 00:55:26 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe

[2013/06/05 00:55:26 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe

[2013/06/05 00:55:26 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll

[2013/06/05 00:55:26 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe

[2013/06/05 00:55:26 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll

[2013/06/05 00:55:26 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll

[2013/06/05 00:55:26 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll

[2013/06/05 00:55:26 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll

[2013/06/05 00:55:26 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe

[2013/06/05 00:55:26 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll

[2013/06/05 00:55:26 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx

[2013/06/05 00:55:26 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll

[2013/06/05 00:55:26 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll

[2013/06/05 00:55:26 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll

[2013/06/05 00:55:26 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll

[2013/06/05 00:55:26 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe

[2013/06/05 00:55:26 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe

[2011/08/04 12:49:28 | 003,085,984 | ---- | C] (Adobe Systems, Inc.) -- C:\Users\Pessoal\install_flash_player.exe

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/07/01 22:51:24 | 001,545,566 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013/07/01 22:51:24 | 000,673,322 | ---- | M] () -- C:\Windows\SysNative\prfh0416.dat

[2013/07/01 22:51:24 | 000,624,800 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013/07/01 22:51:24 | 000,133,158 | ---- | M] () -- C:\Windows\SysNative\prfc0416.dat

[2013/07/01 22:51:24 | 000,110,438 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013/07/01 22:47:10 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013/07/01 22:47:04 | 2384,744,448 | -HS- | M] () -- C:\hiberfil.sys

[2013/07/01 22:46:25 | 000,047,721 | ---- | M] () -- C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\be27.js

[2013/07/01 22:12:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

[2013/07/01 22:04:00 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013/07/01 21:58:00 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013/07/01 21:31:35 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013/07/01 21:31:35 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013/07/01 21:24:58 | 000,000,384 | ---- | M] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Pessoal.job

[2013/07/01 21:23:12 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013/07/01 20:47:09 | 000,648,201 | ---- | M] () -- C:\Users\Pessoal\Desktop\AdwCleaner.exe

[2013/07/01 20:21:05 | 000,545,954 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Pessoal\Desktop\JRT.exe

[2013/07/01 19:51:04 | 000,000,374 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateXML_Pessoal.job

[2013/07/01 19:43:29 | 000,083,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013/06/27 20:14:01 | 000,000,378 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Pessoal.job

[2013/06/27 07:14:24 | 000,031,816 | ---- | M] () -- C:\Windows\Launcher.exe

[2013/06/25 01:10:38 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2013/06/24 19:07:27 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013/06/24 19:07:27 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013/06/24 19:07:27 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys

[2013/06/24 17:20:01 | 000,000,250 | ---- | M] () -- C:\Windows\gmer.ini

[2013/06/24 16:56:29 | 000,884,736 | ---- | M] () -- C:\Windows\gmer.dll

[2013/06/24 16:56:29 | 000,085,969 | ---- | M] (GMER) -- C:\Windows\SysWow64\drivers\gmer.sys

[2013/06/24 16:56:29 | 000,000,080 | ---- | M] () -- C:\Windows\gmer_uninstall.cmd

[2013/06/24 16:53:16 | 000,811,008 | ---- | M] () -- C:\Windows\gmer.exe

[2013/06/21 08:25:25 | 005,081,922 | R--- | M] (Swearware) -- C:\Users\Pessoal\Desktop\ComboFix.exe

[2013/06/21 01:56:50 | 000,001,107 | ---- | M] () -- C:\Users\Public\Desktop\Comet Player.lnk

[2013/06/21 01:56:50 | 000,000,957 | ---- | M] () -- C:\Users\Public\Desktop\MpcStar.lnk

[2013/06/19 00:06:51 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe

[2013/06/19 00:06:51 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

[2013/06/10 01:05:55 | 000,281,644 | ---- | M] () -- C:\Users\Pessoal\Documents\FAQ.pdf

[2013/06/08 11:06:58 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll

[2013/06/08 08:40:02 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll

[2013/06/05 00:55:28 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe

[2013/06/05 00:55:28 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll

[2013/06/05 00:55:28 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll

[2013/06/05 00:55:28 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll

[2013/06/05 00:55:28 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll

[2013/06/05 00:55:28 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe

[2013/06/05 00:55:28 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe

[2013/06/05 00:55:28 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe

[2013/06/05 00:55:28 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll

[2013/06/05 00:55:28 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll

[2013/06/05 00:55:28 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll

[2013/06/05 00:55:28 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll

[2013/06/05 00:55:28 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll

[2013/06/05 00:55:28 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe

[2013/06/05 00:55:28 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll

[2013/06/05 00:55:28 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll

[2013/06/05 00:55:28 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe

[2013/06/05 00:55:27 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl

[2013/06/05 00:55:27 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat

[2013/06/05 00:55:27 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll

[2013/06/05 00:55:27 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec

[2013/06/05 00:55:27 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec

[2013/06/05 00:55:27 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll

[2013/06/05 00:55:27 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll

[2013/06/05 00:55:27 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll

[2013/06/05 00:55:27 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll

[2013/06/05 00:55:27 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx

[2013/06/05 00:55:27 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf

[2013/06/05 00:55:27 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll

[2013/06/05 00:55:26 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl

[2013/06/05 00:55:26 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat

[2013/06/05 00:55:26 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll

[2013/06/05 00:55:26 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll

[2013/06/05 00:55:26 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll

[2013/06/05 00:55:26 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll

[2013/06/05 00:55:26 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll

[2013/06/05 00:55:26 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll

[2013/06/05 00:55:26 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe

[2013/06/05 00:55:26 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe

[2013/06/05 00:55:26 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll

[2013/06/05 00:55:26 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe

[2013/06/05 00:55:26 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll

[2013/06/05 00:55:26 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll

[2013/06/05 00:55:26 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll

[2013/06/05 00:55:26 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll

[2013/06/05 00:55:26 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe

[2013/06/05 00:55:26 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll

[2013/06/05 00:55:26 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx

[2013/06/05 00:55:26 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll

[2013/06/05 00:55:26 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll

[2013/06/05 00:55:26 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll

[2013/06/05 00:55:26 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll

[2013/06/05 00:55:26 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf

[2013/06/05 00:55:26 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe

[2013/06/05 00:55:26 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/07/01 22:00:03 | 000,047,721 | ---- | C] () -- C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\be27.js

[2013/07/01 20:44:39 | 000,648,201 | ---- | C] () -- C:\Users\Pessoal\Desktop\AdwCleaner.exe

[2013/06/25 01:01:10 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe

[2013/06/25 01:01:10 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe

[2013/06/25 01:01:10 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe

[2013/06/25 01:01:10 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe

[2013/06/25 01:01:10 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe

[2013/06/24 16:56:29 | 000,884,736 | ---- | C] () -- C:\Windows\gmer.dll

[2013/06/24 16:56:29 | 000,811,008 | ---- | C] () -- C:\Windows\gmer.exe

[2013/06/24 16:56:29 | 000,000,250 | ---- | C] () -- C:\Windows\gmer.ini

[2013/06/24 16:56:29 | 000,000,080 | ---- | C] () -- C:\Windows\gmer_uninstall.cmd

[2013/06/22 19:47:27 | 000,000,384 | ---- | C] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Pessoal.job

[2013/06/22 19:47:15 | 000,000,378 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Pessoal.job

[2013/06/22 19:47:13 | 000,000,374 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateXML_Pessoal.job

[2013/06/21 09:26:46 | 000,031,816 | ---- | C] () -- C:\Windows\Launcher.exe

[2013/06/21 01:56:50 | 000,001,107 | ---- | C] () -- C:\Users\Public\Desktop\Comet Player.lnk

[2013/06/21 01:56:50 | 000,000,957 | ---- | C] () -- C:\Users\Public\Desktop\MpcStar.lnk

[2013/06/10 01:05:53 | 000,281,644 | ---- | C] () -- C:\Users\Pessoal\Documents\FAQ.pdf

[2013/06/05 00:55:27 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf

[2013/06/05 00:55:26 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf

[2012/07/20 11:58:22 | 000,000,032 | ---- | C] () -- C:\Users\Pessoal\jagex_cl_runescape_LIVE.dat

[2011/10/14 21:24:32 | 000,000,660 | RHS- | C] () -- C:\Users\Pessoal\ntuser.pol

[2011/09/16 19:33:23 | 000,000,129 | ---- | C] () -- C:\Users\Pessoal\jagex_runescape_preferences2.dat

[2011/09/16 19:28:53 | 000,000,035 | ---- | C] () -- C:\Users\Pessoal\jagex_runescape_preferences.dat

[2011/07/19 19:57:35 | 000,002,072 | ---- | C] () -- C:\Users\Pessoal\Avira AntiVir Control Center.lnk

[2011/05/27 12:35:55 | 000,007,443 | ---- | C] () -- C:\Users\Pessoal\.recently-used.xbel

[2011/05/19 22:42:00 | 000,020,480 | -H-- | C] () -- C:\Users\Pessoal\photothumb.db

[2011/01/15 22:34:58 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

[2010/06/21 10:08:20 | 000,027,611 | ---- | C] () -- C:\Users\Pessoal\AppData\Roaming\UserTile.png

[2010/04/24 11:19:27 | 000,000,095 | ---- | C] () -- C:\Users\Pessoal\AppData\Local\fusioncache.dat

[2010/04/10 19:27:44 | 000,013,312 | ---- | C] () -- C:\Users\Pessoal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2009/07/14 01:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013/02/27 02:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013/02/27 01:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 22:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 09:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 22:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2010/12/30 15:24:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Atari

[2010/12/01 13:35:33 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Autodesk

[2013/06/20 22:20:58 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Baidu Security

[2012/04/03 17:50:44 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\CometPlayer

[2010/04/18 15:40:05 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Dev-Cpp

[2013/06/25 13:48:55 | 000,000,000 | -HSD | M] -- C:\Users\Pessoal\AppData\Roaming\ff70f

[2011/05/19 22:26:51 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\gtk-2.0

[2010/07/09 15:00:19 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Leadertech

[2012/07/21 18:10:42 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Need for Speed World

[2011/05/19 22:48:41 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\PhotoScape

[2012/03/04 12:45:41 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\PrimoPDF

[2012/07/03 21:35:10 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\tigerplayer

[2013/03/16 08:40:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\uTorrent

[2010/07/06 22:54:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Windows Live Writer

[2013/06/21 02:20:27 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\WinZipper

[2010/05/27 20:54:01 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Zylom

========== Purity Check ==========

========== Custom Scans ==========

< MD5 for: ATAPI.SYS >

[2009/07/13 22:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\erdnt\cache64\atapi.sys

[2009/07/13 22:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys

[2009/07/13 22:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys

[2009/07/13 22:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys

[2009/07/13 22:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.20575_none_39c1885e54505643\atapi.sys

[2009/07/13 22:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: CNGAUDIT.DLL >

[2009/07/13 22:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\erdnt\cache86\cngaudit.dll

[2009/07/13 22:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll

[2009/07/13 22:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

[2009/07/13 22:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\erdnt\cache64\cngaudit.dll

[2009/07/13 22:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll

[2009/07/13 22:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: IASTOR.SYS >

[2009/06/04 23:54:36 | 000,408,600 | ---- | M] (Intel Corporation) MD5=1D004CB1DA6323B1F55CAEF7F94B61D9 -- C:\Drivers\storage\R228436\f6flpy64\IaStor.sys

[2009/06/04 18:54:36 | 000,408,600 | ---- | M] (Intel Corporation) MD5=1D004CB1DA6323B1F55CAEF7F94B61D9 -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\driver64\IaStor.sys

[2009/06/04 23:54:36 | 000,408,600 | ---- | M] (Intel Corporation) MD5=1D004CB1DA6323B1F55CAEF7F94B61D9 -- C:\Windows\SysNative\drivers\iaStor.sys

[2009/06/04 18:54:36 | 000,408,600 | ---- | M] (Intel Corporation) MD5=1D004CB1DA6323B1F55CAEF7F94B61D9 -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_7fb62b08f6b7117a\iaStor.sys

[2009/06/04 23:54:36 | 000,408,600 | ---- | M] (Intel Corporation) MD5=1D004CB1DA6323B1F55CAEF7F94B61D9 -- C:\Windows\SysNative\DriverStore\FileRepository\iastor.inf_amd64_neutral_c065a1006c648409\iaStor.sys

[2009/06/04 18:43:16 | 000,330,264 | ---- | M] (Intel Corporation) MD5=D483687EACE0C065EE772481A96E05F5 -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\driver\IaStor.sys

< MD5 for: NETLOGON.DLL >

[2009/07/13 22:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll

[2010/11/20 10:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\erdnt\cache64\netlogon.dll

[2010/11/20 10:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll

[2010/11/20 10:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll

[2010/11/20 09:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\erdnt\cache86\netlogon.dll

[2010/11/20 09:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll

[2010/11/20 09:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll

[2009/07/13 22:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVSTOR.SYS >

[2009/07/13 22:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys

[2011/03/11 03:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys

[2011/03/11 03:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys

[2011/03/11 03:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys

[2011/03/11 03:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys

[2011/03/11 03:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys

[2011/03/11 03:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys

[2010/11/20 10:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys

[2010/11/20 10:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >

[2009/07/13 22:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll

[2009/07/13 22:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll

[2010/11/20 09:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\erdnt\cache86\scecli.dll

[2010/11/20 09:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll

[2010/11/20 09:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll

[2010/11/20 10:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\erdnt\cache64\scecli.dll

[2010/11/20 10:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll

[2010/11/20 10:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:D1B5B4F1

< End of report >

Compartilhar este post


Link para o post
Compartilhar em outros sites

extras.txt

OTL Extras logfile created on: 01/07/2013 22:55:52 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Pessoal\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16614)

Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy

2,96 Gb Total Physical Memory | 2,39 Gb Available Physical Memory | 80,84% Memory free

5,92 Gb Paging File | 5,39 Gb Available in Paging File | 90,98% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 456,56 Gb Total Space | 303,66 Gb Free Space | 66,51% Space Free | Partition Type: NTFS

Computer Name: ANACLARA-PC | User Name: Pessoal | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

"FirewallDisableNotify" = 0

"AntiVirusDisableNotify" = 0

"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"AutoUpdateDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

"DisableUnicastResponsesToMulticastBroadcast" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{03ACB9AB-A885-49DB-B890-6D2AE1BF8FDD}" = lport=2869 | protocol=6 | dir=in | app=system |

"{1F2E76B5-AD13-4FFC-BF25-ADF9B7FABD78}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{3D5CC2E7-C5FE-40F0-ADFE-1C3D5AC90323}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{4063D144-63CB-48AD-B265-619691043635}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{50DF4A82-ECE0-4B5F-BB83-FED491ECAF4E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{5C75993A-94AF-4360-9927-E028C35DADE4}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |

"{5C8006E8-DFF1-44BE-AB96-9B5934E0BC97}" = lport=138 | protocol=17 | dir=in | app=system |

"{67AF6E37-87E9-49CC-8665-3F96F3DDCDE8}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{689AACE9-393F-44C2-A560-EAC2FC5E7887}" = rport=445 | protocol=6 | dir=out | app=system |

"{740FA4E3-DF83-45C8-9C3E-EEEC230DAFB6}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{753DE7AA-2962-4AE0-A27B-95BF782325C5}" = lport=10243 | protocol=6 | dir=in | app=system |

"{7A39B1E7-4502-4315-8E0F-C0B828C41329}" = lport=445 | protocol=6 | dir=in | app=system |

"{7A82E115-11BB-4044-B5C5-B2967313DA8C}" = lport=137 | protocol=17 | dir=in | app=system |

"{8B5153F1-E6FF-4EA8-A4C0-2599E0B7EBAC}" = rport=139 | protocol=6 | dir=out | app=system |

"{A57D8DA5-9D2F-4D59-B18E-C8C4CF2DD6A7}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{A630A0A3-4651-4A72-943C-721308E97FDF}" = rport=137 | protocol=17 | dir=out | app=system |

"{AB21DF1A-776E-4DBF-8C49-2E8CFF3CB748}" = lport=2869 | protocol=6 | dir=in | app=system |

"{ABECA483-9C1C-4276-9481-FA61AA2110BC}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |

"{CBA42556-76EB-49BB-B9F8-04ECD6939FE6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{CE5E1189-DD9F-47FA-B679-E1A4FD64E69A}" = rport=138 | protocol=17 | dir=out | app=system |

"{CEFCBBCB-D157-40EF-8274-A5BE22532E73}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{D408D162-C661-43B7-97E8-D00302A458FA}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

"{E0A7329C-A8CB-40F0-91D3-9BCADB33211B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

"{EBD49CC3-FC48-44DF-BF15-A436D5DDBB91}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{EDD41CFE-8878-4B1C-85F8-98F21F755038}" = rport=10243 | protocol=6 | dir=out | app=system |

"{F0AF3CD9-B142-491F-9EFD-894C4F4D4AE6}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |

"{F99D752B-7C9D-47D4-9B29-3547171558D9}" = lport=139 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{01ECBD8C-1C61-401D-9BA4-A962C6F81E0B}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-x.x.x.x-4.0.0.12911-downloader.exe |

"{092A88BB-F31A-4DDC-8D2A-C15A6EEF9CF7}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |

"{19A22589-2EC6-45E7-AAB4-F7EBB9D2341B}" = protocol=6 | dir=in | app=c:\program files (x86)\deep silver\s.t.a.l.k.e.r. - clear sky\bin\xrengine.exe |

"{205FFA5E-5EFD-4642-B302-C86955E879FA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{2311EE3C-A464-4BDB-A099-383A4B51B2DE}" = protocol=17 | dir=in | app=c:\program files\hp\hp deskjet 2050 j510 series\bin\usbsetup.exe |

"{23F748EA-71FD-4082-86D9-B402EF23BA17}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{24F33719-7A46-4E73-AF8D-71F29DF3EEA3}" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow cata\launcher.patch.exe |

"{2806656B-906B-4E74-BB32-211AEB6ADF48}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{2870230B-EAAA-4FB4-AFB4-53CC69ED7526}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{2F00849A-F9F0-4713-B49D-6CA59E05B6B2}" = protocol=6 | dir=in | app=c:\program files (x86)\deep silver\s.t.a.l.k.e.r. - clear sky\bin\dedicated\xrengine.exe |

"{30D0A2A0-F5B1-4286-9837-F3DF5CD72A28}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{3F14342B-3BA5-48E6-9C59-398FFE23D71B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{4048FFBB-D4A8-4399-9A03-A60DCBF27E5F}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |

"{42C8B642-EEF5-48F0-B068-1BE9D965496E}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |

"{4889DB8D-0D9E-46BF-BC61-D25978F059AF}" = protocol=17 | dir=in | app=c:\users\pessoal\desktop\word of warcraft\launcher.patch.exe |

"{49434400-1F2E-4970-8CE5-A081D87B6766}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

"{504ECA9B-5845-4D16-8510-A680EE33D3F7}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |

"{54D85C8F-9671-466D-BC09-D5DC22C9E844}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |

"{550F74EE-7022-415B-BA9D-CE21A431F5A4}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd dx\pdvddxsrv.exe |

"{59E2857F-9ADB-4569-A009-CE0C17BECE32}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |

"{60E6CB56-29E6-4D8A-BA55-C4CAB93275CC}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |

"{62F3F19F-7C01-40E3-84AD-5D32C37ABE76}" = protocol=17 | dir=in | app=c:\program files (x86)\deep silver\s.t.a.l.k.e.r. - clear sky\bin\dedicated\xrengine.exe |

"{66A8656E-45C0-46F7-B537-FC0BCAB472B7}" = protocol=17 | dir=in | app=c:\users\pessoal\desktop\word of warcraft\launcher.exe |

"{7295E722-EFE0-4C11-A976-ADF61669BAFF}" = protocol=6 | dir=in | app=c:\users\pessoal\desktop\word of warcraft\launcher.exe |

"{775A9EE0-AC44-497D-8F8D-162E1961536E}" = protocol=17 | dir=in | app=c:\program files (x86)\deep silver\s.t.a.l.k.e.r. - clear sky\bin\xrengine.exe |

"{789AEE5F-FDDF-4FFA-A623-9DB5BD157169}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\metro 2033\metro2033.exe |

"{79ED2D0E-B93F-46A8-9D69-05DF251B3E9D}" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow\wow-x.x.x.x-4.0.0.12911-downloader.exe |

"{7A088646-F285-46BD-A25C-EF563B164043}" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow cata\launcher.patch.exe |

"{7ABB2696-B8E8-46A3-8203-0653546A33C9}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{8035FA11-F812-46EB-ACEA-3EE00B1904D2}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |

"{81692260-4022-415D-8775-C11452811D8F}" = protocol=6 | dir=out | app=system |

"{84F25076-48F1-4A77-8158-4278F7C55C3D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

"{886C6C42-BFB2-4871-A8E4-1375FAB7D9F8}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{88FA0EFE-38A2-4894-BD48-140B9D798432}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{8C6D029D-4B1D-4AF3-9EB1-D6212FC9A361}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |

"{939307F4-8B7F-46C3-98C6-3E9FAB72A55D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\metro 2033\metro2033.exe |

"{953154CA-B1C9-43D3-89CD-13DB479E3785}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |

"{9631E2F9-3438-448E-8A18-69DE9C79BAC6}" = protocol=6 | dir=in | app=c:\users\pessoal\desktop\word of warcraft\launcher.patch.exe |

"{A320DC80-DB64-4AC3-A7A3-DBD3F0C733E1}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |

"{AB0AB30D-22BD-4197-A77D-D7306F5E4B74}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{B5AF1799-9252-4D18-8933-34C3FAA83B2C}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd dx\powerdvd.exe |

"{B6DBE915-CFF6-44A9-8C15-AB45D0C5422C}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-x.x.x.x-4.0.0.12911-downloader.exe |

"{B9A39D1A-6F25-4CF2-9218-CB057D6871C4}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |

"{B9FB80A1-043F-46BB-BA4E-AF677CC6F101}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |

"{C1B7093F-048A-4738-9F2E-621173A40226}" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow\launcher.exe |

"{D2146616-FFA2-4058-9053-39DBCA4EBF8C}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{D4295C98-1314-419F-B109-FAADEB998AA1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{D7BD1C4B-9928-4F0C-8369-02ABBEB227A5}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |

"{DF7781A9-261F-4485-AD53-C12DBA36C188}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |

"{E3A46A87-E3F3-4DEB-8B60-BD5406D09755}" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow\launcher.exe |

"{E5AE3DE6-7AF2-4F7A-8042-AB3D4996638A}" = dir=in | app=c:\program files (x86)\common files\mcafee\mna\mcnasvc.exe |

"{E658C6D1-6125-4FA2-852A-AB29F84C1899}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{EA734ED7-C5B2-4D0B-BF5E-6777FBE64765}" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow\wow-x.x.x.x-4.0.0.12911-downloader.exe |

"{EC926D78-D4D7-4611-BF01-8C4F2BE8A3FD}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |

"{F3A0D074-13CB-46CB-9653-07CE1867D59A}" = protocol=6 | dir=in | app=c:\program files\hp\hp deskjet 2050 j510 series\bin\usbsetup.exe |

"TCP Query User{04ED47F9-258D-43AF-A8B8-6B15ADCCF593}C:\program files (x86)\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |

"TCP Query User{1BDD8FB0-6207-45A8-A492-7C441C33A50E}C:\users\pessoal\saved games\wow\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow\temp\wow-4.2.1.2736-enus-tools-downloader.exe |

"TCP Query User{49D101BC-76CF-46E3-8717-5433E0C92D56}C:\users\pessoal\saved games\wow\launcher.patch.exe" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow\launcher.patch.exe |

"TCP Query User{8320AFC9-31DE-4961-8B43-976481E129EF}C:\users\pessoal\saved games\wow\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe |

"TCP Query User{8ACAAA39-9D3A-486B-89EB-26027D679245}C:\users\pessoal\saved games\wow\temp\wow-4.2.1.2685-enus-tools-downloader.exe" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow\temp\wow-4.2.1.2685-enus-tools-downloader.exe |

"TCP Query User{8DB310F1-AA44-4E05-AEC6-EA26264EDC33}C:\users\pessoal\saved games\wow cata\wow-x.x.x.x-4.0.0.12911-downloader.exe" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow cata\wow-x.x.x.x-4.0.0.12911-downloader.exe |

"TCP Query User{900BD9E4-5F2F-4672-BB41-50BC71D220F9}C:\users\pessoal\saved games\wow cata\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow cata\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe |

"TCP Query User{D43A0BE8-D7B5-4761-A37E-B5936B9DAC15}C:\users\pessoal\desktop\wow\wow-x.x.x.x-4.0.0.12911-downloader.exe" = protocol=6 | dir=in | app=c:\users\pessoal\desktop\wow\wow-x.x.x.x-4.0.0.12911-downloader.exe |

"TCP Query User{F3CD4026-AE5E-4733-9D28-B7014A135DAC}C:\users\pessoal\saved games\wow cata\launcher.exe" = protocol=6 | dir=in | app=c:\users\pessoal\saved games\wow cata\launcher.exe |

"TCP Query User{F5D0F468-2EDE-4F4F-BE97-BCFBA815FC7F}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |

"UDP Query User{0A6D15C6-08D7-45F8-8A90-EB982CEF2230}C:\users\pessoal\desktop\wow\wow-x.x.x.x-4.0.0.12911-downloader.exe" = protocol=17 | dir=in | app=c:\users\pessoal\desktop\wow\wow-x.x.x.x-4.0.0.12911-downloader.exe |

"UDP Query User{111942CA-8BD4-4611-824A-5443CDAA6C36}C:\users\pessoal\saved games\wow cata\launcher.exe" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow cata\launcher.exe |

"UDP Query User{5E71A788-6B9D-42B7-8B47-1C56C0911AFE}C:\users\pessoal\saved games\wow cata\wow-x.x.x.x-4.0.0.12911-downloader.exe" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow cata\wow-x.x.x.x-4.0.0.12911-downloader.exe |

"UDP Query User{5F025417-C0C7-4969-8C9A-AEA0EDABF3A5}C:\users\pessoal\saved games\wow\launcher.patch.exe" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow\launcher.patch.exe |

"UDP Query User{8642F23E-992E-481D-A9A2-E717112486FC}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |

"UDP Query User{951F3251-CAD3-40CC-B1DC-A56B690A5F51}C:\program files (x86)\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |

"UDP Query User{9EC74E5B-D403-4B13-A366-0CB830CD6A67}C:\users\pessoal\saved games\wow\temp\wow-4.2.1.2736-enus-tools-downloader.exe" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow\temp\wow-4.2.1.2736-enus-tools-downloader.exe |

"UDP Query User{AD7B1F86-1E18-471C-A23B-969FDBD4B6FE}C:\users\pessoal\saved games\wow\temp\wow-4.2.1.2685-enus-tools-downloader.exe" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow\temp\wow-4.2.1.2685-enus-tools-downloader.exe |

"UDP Query User{DAF31BAB-E7A9-4271-A2A1-8371D2FEA63D}C:\users\pessoal\saved games\wow\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe |

"UDP Query User{FBECFAB4-0F94-4BE4-8B1D-C2B947ABA7FB}C:\users\pessoal\saved games\wow cata\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe" = protocol=17 | dir=in | app=c:\users\pessoal\saved games\wow cata\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector

"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}" = Windows Live Family Safety

"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant

"{46CCB0D4-A98F-4009-B5A5-DE38A667D068}" = Windows Live Family Safety

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer

"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007

"{90120000-002A-0416-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Portuguese (Brazil)) 2007

"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager

"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9C957F82-7EE0-423D-A386-587C9A4A83FB}" = Software básico do dispositivo HP Deskjet 2050 J510 series

"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = Software WIDCOMM Bluetooth

"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad

"{A508D5A2-3AC1-4594-A718-A663D6D3CF11}" = Windows Live Remote Service Resources

"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{B4861B32-A6CD-4E01-BB79-3F19ED307B59}" = Estudo de melhoria do produto HP Deskjet 2050 J510 series

"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053

"{C73A3942-84C8-4597-9F9B-EE227DCBA758}" = Dell Dock

"{CFF3C688-2198-4BC3-A399-598226949C39}" = Windows Live Remote Client Resources

"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter

"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client

"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service

"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"Dell Wireless WLAN Card Utility" = Dell Wireless WLAN Card Utility

"HDMI" = Intel® Graphics Media Accelerator Driver

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam

"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer

"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup

"{13766F76-6C8C-4E57-A9F3-3212D1C6E0D1}" = Dell DataSafe Online

"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update

"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions

"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java 6 Update 39

"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1

"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery

"{3889988F-762B-4B85-AB17-71C9CC3AE445}" = Messenger Companion

"{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}" = Controle ActiveX do Windows Live Mesh para Conexões Remotas

"{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials

"{4664ED39-C80A-48F7-93CD-EBDCAFAB6CC5}" = Windows Live Writer Resources

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module

"{54194F60-988C-4D03-B922-C2B00EFDA39A}" = NVIDIA PhysX

"{5783F2D7-4001-0409-0002-0060B0CE6BBA}" = AutoCAD 2006 - English

"{644063FA-ABA3-42AC-A8AC-3EDC0706018B}" = Windows Live Mesh

"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module

"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator

"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX

"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime

"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core

"{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}" = HP Deskjet 2050 J510 series Ajuda

"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide

"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable

"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform

"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime

"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT

"{90120000-0016-0416-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Portuguese (Brazil)) 2007

"{90120000-0016-0416-0000-0000000FF1CE}_HOMESTUDENTR_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-0018-0416-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007

"{90120000-0018-0416-0000-0000000FF1CE}_HOMESTUDENTR_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001B-0416-0000-0000000FF1CE}" = Microsoft Office Word MUI (Portuguese (Brazil)) 2007

"{90120000-001B-0416-0000-0000000FF1CE}_HOMESTUDENTR_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007

"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007

"{90120000-001F-0416-0000-0000000FF1CE}_HOMESTUDENTR_{8A524694-0CA4-476A-9301-B1E9D70FC952}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007

"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-002A-0416-1000-0000000FF1CE}_HOMESTUDENTR_{51530CD1-8244-4E0F-B536-BCCC05325C7F}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-002C-0416-0000-0000000FF1CE}" = Microsoft Office Proofing (Portuguese (Brazil)) 2007

"{90120000-006E-0416-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Portuguese (Brazil)) 2007

"{90120000-006E-0416-0000-0000000FF1CE}_HOMESTUDENTR_{51530CD1-8244-4E0F-B536-BCCC05325C7F}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90120000-00A1-0416-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Portuguese (Brazil)) 2007

"{90120000-00A1-0416-0000-0000000FF1CE}_HOMESTUDENTR_{AD3E8EF1-E885-4068-BC73-16C0649FEBF0}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In

"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007

"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)

"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker

"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail

"{9DA3F03B-2CEE-4344-838E-117861E61FAF}" = Windows Live Mail

"{9E2EE2F7-33BD-4D30-9E5D-8469A9F32009}" = Windows Live Sync

"{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker

"{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn

"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software

"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common

"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer

"{AC76BA86-7AD7-1046-7B44-A91000000001}" = Adobe Reader 9.1.2 - Português

"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update

"{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}" = Roxio Burn

"{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common

"{B3BE54A4-8DFE-4593-8E66-56AB7133B812}" = Windows Live Writer

"{C9E1343D-E21E-4508-A1BE-04A089EC137D}" = Windows Live Messenger

"{CB0A7694-DA75-4627-BABA-2464A8931DB2}" = IMBooster

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform

"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64

"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform

"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh

"{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack

"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10

"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Software de Suporte)

"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger

"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module

"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

"{F58E86C0-75E2-4D40-A5F7-14D7B2772DC7}" = SearchTheWeb

"{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos

"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

"7-Zip" = 7-Zip 4.65

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 11.6

"Advanced Audio FX Engine" = Advanced Audio FX Engine

"Autodesk DWF Viewer" = Autodesk DWF Viewer

"Avira AntiVir Desktop" = Avira Free Antivirus

"Dell Dock" = Dell Dock

"Dell Webcam Central" = Dell Webcam Central

"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)

"Google Chrome" = Google Chrome

"GoToAssist" = GoToAssist 8.0.0.514

"HOMESTUDENTR" = Microsoft Office Home and Student 2007

"HP Photo Creations" = HP Photo Creations

"Kit Velox Start_is1" = LightComm Start 1.0

"Mozilla Firefox 8.0 (x86 pt-BR)" = Mozilla Firefox 8.0 (x86 pt-BR)

"MpcStar" = MpcStar 5.4

"PhotoScape" = PhotoScape

"RealPlayer 15.0" = RealPlayer

"San Andreas Mod Installer1.1" = San Andreas Mod Installer

"uTorrent" = µTorrent

"WinLiveSuite" = Windows Live Essentials

"WinRAR archiver" = Arquivo do WinRAR

"WinZipper" = WinZipper

"World of Warcraft" = World of Warcraft

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1008946053-2777448904-2778355892-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Sudoku! Deluxe" = Sudoku! Deluxe

========== Last 20 Event Log Errors ==========

[ Broadcom Wireless LAN Events ]

Error - 24/05/2013 17:52:43 | Computer Name = AnaClara-PC | Source = WLAN-Tray | ID = 0

Description = 18:52:40, Fri, May 24, 13 Error - Unable to gain access to user store

[ OSession Events ]

Error - 11/01/2011 13:41:18 | Computer Name = Pessoal-PC | Source = Microsoft Office 12 Sessions | ID = 7001

Description = ID: 0, Application Name: Microsoft Office Word, Application Version:

12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 43

seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]

Error - 01/07/2013 22:02:01 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:02:07 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:02:07 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:02:07 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:03:57 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:03:57 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:03:57 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:04:13 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:04:13 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

Error - 01/07/2013 22:04:13 | Computer Name = AnaClara-PC | Source = Service Control Manager | ID = 7001

Description = O serviço Pesquisador de Computadores depende do serviço Server, mas

não foi possível iniciá-lo devido ao seguinte erro: %%1068

< End of report >

Acho que acabou! :D

Compartilhar este post


Link para o post
Compartilhar em outros sites

Cara Ana.C

Novamente com o OTL

  • Clique duas vezes no ícone 3984478580_7ed4cabc45_o.gif
  • Copie e cole o conteúdo abaixo, no espaço logo após 5369460409_ee749edc8e_m.jpg

:OTL
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language }:{referrer:source?}&ie={inputEncoding}&oe={output Encoding}&sourceid=ie7
IE:64bit: - HKLM\..\SearchScopes\{DE7B4D18-E985-4940-82D0-D14C7E947A63}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language }:{referrer:source?}&ie={inputEncoding}&oe={output Encoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{965E8CC7-987E-406B-A4C0-FDC30ADAB875}: "URL" = http://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.pt/search?q={searchTerms}&rls=com.microsoft:{language }:{referrer:source?}&ie={inputEncoding}&oe={output Encoding}&sourceid=ie7&rlz=1I7ADSA_pt-BR
IE - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\SearchScopes\{965E8CC7-987E-406B-A4C0-FDC30ADAB875}: "URL" = http://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:so urce?}
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4 - HKU\S-1-5-21-1008946053-2777448904-2778355892-1000..\Run: [e966e] C:\Users\Pessoal\AppData\Roaming\ff70f\e966e.js ()
O4 - Startup: C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\Startup\be27.js ()
[2013/06/21 01:27:22 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Local\DealPlyLive
[2013/06/21 01:27:22 | 000,000,000 | ---D | C] -- C:\ProgramData\DealPlyLive
[2013/06/21 01:27:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DealPlyLive
[2013/06/20 22:37:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Baidu Security
[2013/06/20 22:20:58 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Roaming\Baidu Security
[2013/06/06 21:24:54 | 000,000,000 | -HSD | C] -- C:\Users\Pessoal\AppData\Roaming\ff70f
[2013/06/06 21:24:53 | 000,000,000 | -HSD | C] -- C:\fea
[2013/06/25 13:48:55 | 000,000,000 | -HSD | M] -- C:\Users\Pessoal\AppData\Roaming\ff70f
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:D1B5B4F1

:Commands
[purity]
[emptyflash]
[createrestorepoint]
[emptytemp]

  • Clique no botão 5370056394_358505935a_m.jpg
  • Quando reiniciar vai aparecer uma janela, clique em executar;
  • Salve (arquivo > salvar como) o log no desktop com um nome que desejar;
  • Poste o conteúdo desse log em sua próxima resposta.
  • Atenção: se fechar o log sem ter salvo antes ele sumirá.
  • Abra novamente o OTL e clique no botão 5370056476_bf9f840a51_m.jpg
  • Não interrompa o scan em hipótese algum;
  • Quando terminar será gerado o OTL.txt;
  • Poste mais este log em sua próxima resposta o log gerado.

Observação: Se por acaso perder o log depois do reinício do computador você poderá acessá-lo na pasta C:\_OTL\Moved Files

Abraços :D

Compartilhar este post


Link para o post
Compartilhar em outros sites

Log após conserto:

All processes killed

========== OTL ==========

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DE7B4D18-E985-4940-82D0-D14C7E947A63}\ deleted successfully.

64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DE7B4D18-E985-4940-82D0-D14C7E947A63}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{965E8CC7-987E-406B-A4C0-FDC30ADAB875}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{965E8CC7-987E-406B-A4C0-FDC30ADAB875}\ not found.

Registry key HKEY_USERS\S-1-5-21-1008946053-2777448904-2778355892-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\ not found.

Registry key HKEY_USERS\S-1-5-21-1008946053-2777448904-2778355892-1000\Software\Microsoft\Internet Explorer\SearchScopes\{965E8CC7-987E-406B-A4C0-FDC30ADAB875}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{965E8CC7-987E-406B-A4C0-FDC30ADAB875}\ not found.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.

Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.

Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.

Registry value HKEY_USERS\S-1-5-21-1008946053-2777448904-2778355892-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.

Registry value HKEY_USERS\S-1-5-21-1008946053-2777448904-2778355892-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found.

Registry value HKEY_USERS\S-1-5-21-1008946053-2777448904-2778355892-1000\Software\Microsoft\Windows\CurrentVersion\Run\\e966e deleted successfully.

C:\Users\Pessoal\AppData\Roaming\ff70f\e966e.js moved successfully.

File C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\Startup\be27.js not found.

C:\Users\Pessoal\AppData\Local\DealPlyLive\CrashReports folder moved successfully.

C:\Users\Pessoal\AppData\Local\DealPlyLive folder moved successfully.

C:\ProgramData\DealPlyLive\Update\Log folder moved successfully.

C:\ProgramData\DealPlyLive\Update folder moved successfully.

C:\ProgramData\DealPlyLive folder moved successfully.

C:\Program Files (x86)\DealPlyLive\CrashReports folder moved successfully.

C:\Program Files (x86)\DealPlyLive folder moved successfully.

C:\Program Files (x86)\Baidu Security\PC Faster\3.2.0.29 folder moved successfully.

C:\Program Files (x86)\Baidu Security\PC Faster folder moved successfully.

C:\Program Files (x86)\Baidu Security\Cloud Security folder moved successfully.

C:\Program Files (x86)\Baidu Security folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\Uninstall\Baidu PC Faster Uninstall HK\0 folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\Uninstall\Baidu PC Faster Uninstall HK folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\Uninstall\Baidu PC Faster Uninstall\0 folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\Uninstall\Baidu PC Faster Uninstall folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\Uninstall folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\Run\Disable folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\Run folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\RpData folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29\PopMsg folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.29 folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.26\RpData folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster\3.2.0.26 folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security\PC Faster folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\Baidu Security folder moved successfully.

C:\Users\Pessoal\AppData\Roaming\ff70f folder moved successfully.

C:\fea folder moved successfully.

Folder C:\Users\Pessoal\AppData\Roaming\ff70f\ not found.

ADS C:\ProgramData\TEMP:D1B5B4F1 deleted successfully.

========== COMMANDS ==========

[EMPTYFLASH]

User: All Users

User: AppData

User: Default

User: Default User

User: Pessoal

->Flash cache emptied: 122773 bytes

User: Public

User: Todos os Usuários

User: Usuário Padrão

Total Flash Files Cleaned = 0,00 mb

Unable to start System Restore Service. Error code 1084

[EMPTYTEMP]

User: All Users

User: AppData

->Temp folder emptied: 0 bytes

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 51707 bytes

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

User: Pessoal

->Temp folder emptied: 7513828 bytes

->Temporary Internet Files folder emptied: 471118063 bytes

->Java cache emptied: 5980 bytes

->FireFox cache emptied: 121275815 bytes

->Google Chrome cache emptied: 112686528 bytes

->Flash cache emptied: 0 bytes

User: Public

->Temp folder emptied: 0 bytes

User: Todos os Usuários

User: Usuário Padrão

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 180638 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 68268 bytes

%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 743 bytes

RecycleBin emptied: 0 bytes

Total Files Cleaned = 680,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 07072013_150246

Files\Folders moved on Reboot...

C:\Users\Pessoal\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Log após verificação rápida:

OTL logfile created on: 07/07/2013 15:12:11 - Run 2

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Pessoal\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16614)

Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy

2,96 Gb Total Physical Memory | 1,93 Gb Available Physical Memory | 65,13% Memory free

5,92 Gb Paging File | 4,91 Gb Available in Paging File | 82,94% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 456,56 Gb Total Space | 304,18 Gb Free Space | 66,63% Space Free | Partition Type: NTFS

Computer Name: ANACLARA-PC | User Name: Pessoal | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/07/01 22:12:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

========== Modules (No Company Name) ==========

========== Services (SafeList) ==========

SRV:64bit: - [2009/07/17 14:06:22 | 000,033,280 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE -- (wltrysvc)

SRV:64bit: - [2009/06/29 17:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe -- (STacSV)

SRV - [2013/07/01 19:41:49 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2013/07/01 19:37:37 | 000,589,368 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)

SRV - [2013/07/01 19:36:19 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2013/06/21 01:32:04 | 000,424,104 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) [Auto | Stopped] -- C:\Program Files (x86)\WinZipper\winzipersvc.exe -- (winzipersvc)

SRV - [2013/06/19 00:06:52 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012/07/23 10:15:52 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2012/07/13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2011/03/28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2010/12/01 13:37:23 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)

SRV - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Arquivos de Programas\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)

SRV - [2010/03/31 03:35:10 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist)

SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009/12/02 16:47:00 | 000,656,624 | ---- | M] (SoftThinks) [Auto | Stopped] -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe -- (SftService)

SRV - [2009/07/01 18:54:02 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)

SRV - [2009/06/29 17:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe -- (STacSV)

SRV - [2009/06/10 18:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009/06/09 11:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Stopped] -- C:\Arquivos de Programas\Dell\DellDock\DockLogin.exe -- (DockLoginService)

SRV - [2009/06/04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)

SRV - [2009/05/21 08:59:08 | 000,206,064 | ---- | M] (SupportSoft, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_DellSupportCenter)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/06/24 19:07:27 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)

DRV:64bit: - [2013/06/24 19:07:27 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)

DRV:64bit: - [2013/06/24 19:07:27 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)

DRV:64bit: - [2012/03/08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)

DRV:64bit: - [2012/03/01 03:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011/03/11 03:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/11 03:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010/11/20 10:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/11/20 08:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2009/09/17 21:21:40 | 000,415,360 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CryptOSD.sys -- (CryptOSD)

DRV:64bit: - [2009/08/05 13:28:36 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)

DRV:64bit: - [2009/08/05 13:28:32 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)

DRV:64bit: - [2009/08/05 13:28:32 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)

DRV:64bit: - [2009/08/05 13:28:32 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)

DRV:64bit: - [2009/07/17 14:06:20 | 000,022,520 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcm42rly.sys -- (BCM42RLY)

DRV:64bit: - [2009/07/17 14:06:16 | 002,769,400 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)

DRV:64bit: - [2009/07/13 22:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 22:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 22:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2009/06/29 17:44:38 | 000,487,424 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)

DRV:64bit: - [2009/06/15 13:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)

DRV:64bit: - [2009/06/10 17:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 17:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 17:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 17:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009/06/04 23:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

DRV:64bit: - [2009/06/03 16:16:56 | 007,333,472 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2009/05/20 16:10:00 | 000,393,728 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)

DRV:64bit: - [2009/05/08 21:15:18 | 000,215,552 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV:64bit: - [2009/02/06 00:54:10 | 000,225,328 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)

DRV:64bit: - [2006/11/01 11:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)

DRV - [2009/07/13 22:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab

IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://brasil-pesquisa.pw/r.asp#

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-BR

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 81 3C 9D B3 AE 9D CC 01 [binary data]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab

IE - HKCU\..\SearchScopes,DefaultScope =

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: {EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}:2.0

FF - prefs.js..extensions.enabledAddons: compatibility@addons.mozilla.org:1.1

FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}:6.0.39

FF - prefs.js..extensions.enabledAddons: foxyproxy@eric.h.jung:4.1.3

FF - prefs.js..extensions.enabledAddons: testpilot@labs.mozilla.com:1.2.2

FF - prefs.js..extensions.enabledAddons: {e0301295-ab3e-4af3-979f-3d453c5f9f48}:3.18.0.7

FF - prefs.js..extensions.enabledAddons: {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:5.4

FF - prefs.js..network.proxy.socks_remote_dns: true

FF - prefs.js..network.proxy.type: 0

FF - prefs.js..browser.search.useDBForOrder: true

FF - user.js..browser.startup.homepage: "http://brasil-pesquisa.pw/r.asp#"user_pref("keyword.URL", "http://brasil-pesquisa.pw/r.asp#");

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/06/25 13:48:54 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/06/25 13:48:54 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\components [2012/01/01 22:00:45 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\plugins [2012/06/18 09:49:36 | 000,000,000 | ---D | M]

[2010/12/29 19:22:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Extensions

[2013/07/01 21:21:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Firefox\Profiles\nu1lksf9.default\extensions

[2013/03/06 09:04:38 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Firefox\Profiles\nu1lksf9.default\extensions\foxyproxy@eric.h.jung

[2012/03/04 13:10:40 | 000,164,722 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\compatibility@addons.mozilla.org.xpi

[2013/03/06 09:04:38 | 000,621,521 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\testpilot@labs.mozilla.com.xpi

[2013/05/03 14:14:22 | 000,117,151 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi

[2013/02/08 10:29:32 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX 4.0 BETA 8\EXTENSIONS\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}

File not found (No name found) -- C:\USERS\PESSOAL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NU1LKSF9.DEFAULT\EXTENSIONS\{E0301295-AB3E-4AF3-979F-3D453C5F9F48}

File not found (No name found) -- C:\USERS\PESSOAL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NU1LKSF9.DEFAULT\EXTENSIONS\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangaohdajkgeopjhpbnlpkehbhmbj\7.15.2.0_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\amahogbojgleppliihjnmkbnnnfdbmck\2.0.0_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb\2.3_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd\0.0.15.7_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbnmelddedlommnmllmfhoephaidddmk\1.2_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2013/06/25 01:10:38 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2:64bit: - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found

O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O4:64bit: - HKLM..\Run: [Apoint] C:\Arquivos de Programas\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)

O4:64bit: - HKLM..\Run: [broadcom Wireless Manager UI] C:\Arquivos de Programas\Dell\Dell Wireless WLAN Card\WLTRAY.EXE (Dell Inc.)

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [iAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [igfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [sysTrayApp] C:\Arquivos de Programas\IDT\WDM\sttray64.exe (IDT, Inc.)

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()

O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)

O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)

O4 - HKLM..\Run: [Desktop Disc Tool] c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()

O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)

O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)

O4 - HKCU..\Run: [GoogleChromeAutoLaunch_6DF0EB03A8923C60684E56320F038E2D] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found

O4 - Startup: C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\b924.js ()

O4 - Startup: C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1

O8:64bit: - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8:64bit: - Extra context menu item: Enviar página para Dispositivo &Bluetooth ... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html File not found

O8 - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8 - Extra context menu item: Enviar página para Dispositivo &Bluetooth ... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html File not found

O9:64bit: - Extra Button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:64bit: - Extra 'Tools' menuitem : @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Enviar para Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra 'Tools' menuitem : Enviar para Dispositivo &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O13 - gopher Prefix: missing

O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.6.0_39)

O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)

O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 10.21.2)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 201.46.128.9 8.8.8.8 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AD8C9A72-A805-49B8-A0BB-57DA757F12D4}: DhcpNameServer = 201.46.128.9 8.8.8.8 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CB1930A5-1097-44BE-A440-C9724CBB6C4C}: DhcpNameServer = 192.168.0.1

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Arquivos de Programas\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/07/07 15:07:44 | 000,000,000 | -HSD | C] -- C:\Users\Pessoal\AppData\Roaming\ff70f

[2013/07/07 15:07:42 | 000,000,000 | -HSD | C] -- C:\fea

[2013/07/07 15:02:46 | 000,000,000 | ---D | C] -- C:\_OTL

[2013/07/06 21:07:27 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess

[2013/07/01 22:09:38 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

[2013/07/01 20:29:13 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2013/07/01 20:28:38 | 000,000,000 | ---D | C] -- C:\JRT

[2013/07/01 20:19:12 | 000,545,954 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\Pessoal\Desktop\JRT.exe

[2013/06/25 01:13:23 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN

[2013/06/25 01:10:21 | 000,000,000 | ---D | C] -- C:\Windows\temp

[2013/06/25 01:01:10 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe

[2013/06/25 01:01:10 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe

[2013/06/25 01:01:10 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe

[2013/06/25 00:35:36 | 000,000,000 | ---D | C] -- C:\Qoobox

[2013/06/25 00:35:18 | 000,000,000 | ---D | C] -- C:\Windows\erdnt

[2013/06/24 23:49:36 | 000,000,000 | ---D | C] -- C:\PenClean

[2013/06/24 19:33:15 | 000,083,672 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013/06/24 19:17:52 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Roaming\Avira

[2013/06/24 19:16:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

[2013/06/24 19:16:16 | 000,000,000 | ---D | C] -- C:\Firefox

[2013/06/24 19:13:23 | 000,130,016 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013/06/24 19:13:23 | 000,100,712 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013/06/24 19:13:23 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys

[2013/06/24 19:13:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira

[2013/06/24 16:56:29 | 000,085,969 | ---- | C] (GMER) -- C:\Windows\SysWow64\drivers\gmer.sys

[2013/06/24 13:37:44 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\GMER

[2013/06/21 09:25:28 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Local\Programs

[2013/06/21 08:21:54 | 005,081,922 | R--- | C] (Swearware) -- C:\Users\Pessoal\Desktop\ComboFix.exe

[2013/06/21 01:56:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MpcStar

[2013/06/21 01:32:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper

[2013/06/21 01:32:04 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Roaming\WinZipper

[2013/06/21 01:32:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinZipper

[2013/06/20 22:38:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Baidu Security

[2011/08/04 12:49:28 | 003,085,984 | ---- | C] (Adobe Systems, Inc.) -- C:\Users\Pessoal\install_flash_player.exe

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/07/07 15:13:33 | 000,677,784 | ---- | M] () -- C:\Windows\SysNative\prfh0416.dat

[2013/07/07 15:13:33 | 000,629,262 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013/07/07 15:13:33 | 000,137,428 | ---- | M] () -- C:\Windows\SysNative\prfc0416.dat

[2013/07/07 15:13:33 | 000,114,708 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013/07/07 15:10:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013/07/07 15:10:32 | 2384,744,448 | -HS- | M] () -- C:\hiberfil.sys

[2013/07/07 15:10:02 | 000,047,653 | ---- | M] () -- C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\b924.js

[2013/07/07 15:09:53 | 001,545,566 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013/07/07 15:05:52 | 000,000,384 | ---- | M] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Pessoal.job

[2013/07/07 15:05:14 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013/07/07 14:58:04 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013/07/07 14:42:54 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013/07/07 14:42:54 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013/07/06 22:04:00 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013/07/06 19:52:05 | 000,000,374 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateXML_Pessoal.job

[2013/07/04 12:23:46 | 001,764,295 | ---- | M] () -- C:\Users\Pessoal\Desktop\Aula 4 Resultantes.pdf

[2013/07/01 22:12:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

[2013/07/01 20:47:09 | 000,648,201 | ---- | M] () -- C:\Users\Pessoal\Desktop\AdwCleaner.exe

[2013/07/01 20:21:05 | 000,545,954 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Pessoal\Desktop\JRT.exe

[2013/07/01 19:43:29 | 000,083,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013/06/27 20:14:01 | 000,000,378 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Pessoal.job

[2013/06/27 07:14:24 | 000,031,816 | ---- | M] () -- C:\Windows\Launcher.exe

[2013/06/25 01:10:38 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2013/06/24 19:07:27 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013/06/24 19:07:27 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013/06/24 19:07:27 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys

[2013/06/24 17:20:01 | 000,000,250 | ---- | M] () -- C:\Windows\gmer.ini

[2013/06/24 16:56:29 | 000,884,736 | ---- | M] () -- C:\Windows\gmer.dll

[2013/06/24 16:56:29 | 000,085,969 | ---- | M] (GMER) -- C:\Windows\SysWow64\drivers\gmer.sys

[2013/06/24 16:56:29 | 000,000,080 | ---- | M] () -- C:\Windows\gmer_uninstall.cmd

[2013/06/24 16:53:16 | 000,811,008 | ---- | M] () -- C:\Windows\gmer.exe

[2013/06/21 08:25:25 | 005,081,922 | R--- | M] (Swearware) -- C:\Users\Pessoal\Desktop\ComboFix.exe

[2013/06/21 01:56:50 | 000,001,107 | ---- | M] () -- C:\Users\Public\Desktop\Comet Player.lnk

[2013/06/21 01:56:50 | 000,000,957 | ---- | M] () -- C:\Users\Public\Desktop\MpcStar.lnk

[2013/06/10 01:05:55 | 000,281,644 | ---- | M] () -- C:\Users\Pessoal\Documents\FAQ.pdf

[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/07/07 15:07:44 | 000,047,653 | ---- | C] () -- C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\b924.js

[2013/07/04 12:23:44 | 001,764,295 | ---- | C] () -- C:\Users\Pessoal\Desktop\Aula 4 Resultantes.pdf

[2013/07/01 20:44:39 | 000,648,201 | ---- | C] () -- C:\Users\Pessoal\Desktop\AdwCleaner.exe

[2013/06/25 01:01:10 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe

[2013/06/25 01:01:10 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe

[2013/06/25 01:01:10 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe

[2013/06/25 01:01:10 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe

[2013/06/25 01:01:10 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe

[2013/06/24 16:56:29 | 000,884,736 | ---- | C] () -- C:\Windows\gmer.dll

[2013/06/24 16:56:29 | 000,811,008 | ---- | C] () -- C:\Windows\gmer.exe

[2013/06/24 16:56:29 | 000,000,250 | ---- | C] () -- C:\Windows\gmer.ini

[2013/06/24 16:56:29 | 000,000,080 | ---- | C] () -- C:\Windows\gmer_uninstall.cmd

[2013/06/22 19:47:27 | 000,000,384 | ---- | C] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Pessoal.job

[2013/06/22 19:47:15 | 000,000,378 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Pessoal.job

[2013/06/22 19:47:13 | 000,000,374 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateXML_Pessoal.job

[2013/06/21 09:26:46 | 000,031,816 | ---- | C] () -- C:\Windows\Launcher.exe

[2013/06/21 01:56:50 | 000,001,107 | ---- | C] () -- C:\Users\Public\Desktop\Comet Player.lnk

[2013/06/21 01:56:50 | 000,000,957 | ---- | C] () -- C:\Users\Public\Desktop\MpcStar.lnk

[2013/06/10 01:05:53 | 000,281,644 | ---- | C] () -- C:\Users\Pessoal\Documents\FAQ.pdf

[2012/07/20 11:58:22 | 000,000,032 | ---- | C] () -- C:\Users\Pessoal\jagex_cl_runescape_LIVE.dat

[2011/10/14 21:24:32 | 000,000,660 | RHS- | C] () -- C:\Users\Pessoal\ntuser.pol

[2011/09/16 19:33:23 | 000,000,129 | ---- | C] () -- C:\Users\Pessoal\jagex_runescape_preferences2.dat

[2011/09/16 19:28:53 | 000,000,035 | ---- | C] () -- C:\Users\Pessoal\jagex_runescape_preferences.dat

[2011/07/19 19:57:35 | 000,002,072 | ---- | C] () -- C:\Users\Pessoal\Avira AntiVir Control Center.lnk

[2011/05/27 12:35:55 | 000,007,443 | ---- | C] () -- C:\Users\Pessoal\.recently-used.xbel

[2011/05/19 22:42:00 | 000,020,480 | -H-- | C] () -- C:\Users\Pessoal\photothumb.db

[2011/01/15 22:34:58 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

[2010/06/21 10:08:20 | 000,027,611 | ---- | C] () -- C:\Users\Pessoal\AppData\Roaming\UserTile.png

[2010/04/24 11:19:27 | 000,000,095 | ---- | C] () -- C:\Users\Pessoal\AppData\Local\fusioncache.dat

[2010/04/10 19:27:44 | 000,013,312 | ---- | C] () -- C:\Users\Pessoal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2009/07/14 01:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013/02/27 02:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013/02/27 01:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 22:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 09:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 22:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2010/12/30 15:24:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Atari

[2010/12/01 13:35:33 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Autodesk

[2012/04/03 17:50:44 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\CometPlayer

[2010/04/18 15:40:05 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Dev-Cpp

[2013/07/07 15:07:44 | 000,000,000 | -HSD | M] -- C:\Users\Pessoal\AppData\Roaming\ff70f

[2011/05/19 22:26:51 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\gtk-2.0

[2010/07/09 15:00:19 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Leadertech

[2012/07/21 18:10:42 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Need for Speed World

[2011/05/19 22:48:41 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\PhotoScape

[2012/03/04 12:45:41 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\PrimoPDF

[2012/07/03 21:35:10 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\tigerplayer

[2013/03/16 08:40:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\uTorrent

[2010/07/06 22:54:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Windows Live Writer

[2013/06/21 02:20:27 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\WinZipper

[2010/05/27 20:54:01 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Zylom

========== Purity Check ==========

< End of report >

Compartilhar este post


Link para o post
Compartilhar em outros sites

Cara Ana.C

Novamente com o OTL

  • Clique duas vezes no ícone 3984478580_7ed4cabc45_o.gif
  • Copie e cole o conteúdo abaixo, no espaço logo após 5369460409_ee749edc8e_m.jpg

:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://brasilbrasil-pesquisa.pw/r.asp#
[2013/07/07 15:07:44 | 000,000,000 | -HSD | C] -- C:\Users\Pessoal\AppData\Roaming\ff70f
[2013/07/07 15:07:42 | 000,000,000 | -HSD | C] -- C:\fea
[2013/07/07 15:07:44 | 000,000,000 | -HSD | M] -- C:\Users\Pessoal\AppData\Roaming\ff70f

:Commands
[reboot]

  • Clique no botão 5370056394_358505935a_m.jpg
  • Quando reiniciar vai aparecer uma janela, clique em executar;
  • Salve (arquivo > salvar como) o log no desktop com um nome que desejar;
  • Poste o conteúdo desse log em sua próxima resposta.
  • Atenção: se fechar o log sem ter salvo antes ele sumirá.
  • Abra novamente o OTL e clique no botão 5370056476_bf9f840a51_m.jpg
  • Não interrompa o scan em hipótese algum;
  • Quando terminar será gerado o OTL.txt;
  • Poste mais este log em sua próxima resposta o log gerado.

Observação: Se por acaso perder o log depois do reinício do computador você poderá acessá-lo na pasta C:\_OTL\Moved Files

Abraços :D

Compartilhar este post


Link para o post
Compartilhar em outros sites

log após conserto:

========== OTL ==========

HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!

C:\Users\Pessoal\AppData\Roaming\ff70f folder moved successfully.

C:\fea folder moved successfully.

Folder C:\Users\Pessoal\AppData\Roaming\ff70f\ not found.

========== COMMANDS ==========

OTL by OldTimer - Version 3.2.69.0 log created on 07082013_225252

log após verificação rápida:

OTL logfile created on: 08/07/2013 23:01:03 - Run 3

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Pessoal\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16614)

Locale: 00000416 | Country: Brasil | Language: PTB | Date Format: dd/MM/yyyy

2,96 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 77,08% Memory free

5,92 Gb Paging File | 5,28 Gb Available in Paging File | 89,17% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 456,56 Gb Total Space | 305,88 Gb Free Space | 67,00% Space Free | Partition Type: NTFS

Computer Name: ANACLARA-PC | User Name: Pessoal | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/07/01 22:12:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

PRC - [2013/06/14 22:28:44 | 000,825,808 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

========== Modules (No Company Name) ==========

MOD - [2013/07/07 15:27:47 | 004,591,616 | ---- | M] () -- C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll

MOD - [2013/07/07 15:27:47 | 000,112,128 | ---- | M] () -- C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll

MOD - [2013/06/14 22:28:42 | 000,393,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppgooglenaclpluginchrome.dll

MOD - [2013/06/14 22:28:40 | 004,051,408 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll

MOD - [2013/06/14 22:27:48 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ffmpegsumo.dll

========== Services (SafeList) ==========

SRV:64bit: - [2009/07/17 14:06:22 | 000,033,280 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE -- (wltrysvc)

SRV:64bit: - [2009/06/29 17:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe -- (STacSV)

SRV - [2013/07/01 19:41:49 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2013/07/01 19:37:37 | 000,589,368 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)

SRV - [2013/07/01 19:36:19 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2013/06/21 01:32:04 | 000,424,104 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) [Auto | Stopped] -- C:\Program Files (x86)\WinZipper\winzipersvc.exe -- (winzipersvc)

SRV - [2013/06/19 00:06:52 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012/07/23 10:15:52 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2012/07/13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2011/03/28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2010/12/01 13:37:23 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)

SRV - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Arquivos de Programas\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)

SRV - [2010/03/31 03:35:10 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist)

SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009/12/02 16:47:00 | 000,656,624 | ---- | M] (SoftThinks) [Auto | Stopped] -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe -- (SftService)

SRV - [2009/07/01 18:54:02 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)

SRV - [2009/06/29 17:44:38 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe -- (STacSV)

SRV - [2009/06/10 18:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009/06/09 11:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Stopped] -- C:\Arquivos de Programas\Dell\DellDock\DockLogin.exe -- (DockLoginService)

SRV - [2009/06/04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)

SRV - [2009/05/21 08:59:08 | 000,206,064 | ---- | M] (SupportSoft, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_DellSupportCenter)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/06/24 19:07:27 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)

DRV:64bit: - [2013/06/24 19:07:27 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)

DRV:64bit: - [2013/06/24 19:07:27 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)

DRV:64bit: - [2012/03/08 18:40:52 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)

DRV:64bit: - [2012/03/01 03:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011/03/11 03:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011/03/11 03:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010/11/20 10:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010/11/20 08:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2009/09/17 21:21:40 | 000,415,360 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CryptOSD.sys -- (CryptOSD)

DRV:64bit: - [2009/08/05 13:28:36 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)

DRV:64bit: - [2009/08/05 13:28:32 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)

DRV:64bit: - [2009/08/05 13:28:32 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)

DRV:64bit: - [2009/08/05 13:28:32 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)

DRV:64bit: - [2009/07/17 14:06:20 | 000,022,520 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcm42rly.sys -- (BCM42RLY)

DRV:64bit: - [2009/07/17 14:06:16 | 002,769,400 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)

DRV:64bit: - [2009/07/13 22:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/13 22:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/13 22:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2009/06/29 17:44:38 | 000,487,424 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)

DRV:64bit: - [2009/06/15 13:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)

DRV:64bit: - [2009/06/10 17:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/10 17:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/10 17:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/10 17:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009/06/04 23:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

DRV:64bit: - [2009/06/03 16:16:56 | 007,333,472 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2009/05/20 16:10:00 | 000,393,728 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)

DRV:64bit: - [2009/05/08 21:15:18 | 000,215,552 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV:64bit: - [2009/02/06 00:54:10 | 000,225,328 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)

DRV:64bit: - [2006/11/01 11:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)

DRV - [2009/07/13 22:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

IE:64bit: - HKLM\..\SearchScopes,DefaultScope =

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab

IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = pt-BR

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 81 3C 9D B3 AE 9D CC 01 [binary data]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://www.google.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab

IE - HKCU\..\SearchScopes,DefaultScope =

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: {EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}:2.0

FF - prefs.js..extensions.enabledAddons: compatibility@addons.mozilla.org:1.1

FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}:6.0.39

FF - prefs.js..extensions.enabledAddons: foxyproxy@eric.h.jung:4.1.3

FF - prefs.js..extensions.enabledAddons: testpilot@labs.mozilla.com:1.2.2

FF - prefs.js..extensions.enabledAddons: {e0301295-ab3e-4af3-979f-3d453c5f9f48}:3.18.0.7

FF - prefs.js..extensions.enabledAddons: {9AA46F4F-4DC7-4c06-97AF-5035170634FE}:5.4

FF - prefs.js..network.proxy.socks_remote_dns: true

FF - prefs.js..network.proxy.type: 0

FF - prefs.js..browser.search.useDBForOrder: true

FF - user.js..browser.startup.homepage: "http://brasil-pesquisa.pw/r.asp#"user_pref("browser.startup.homepage", "http://brasil-pesquisa.pw/r.asp#");

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/06/25 13:48:54 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/06/25 13:48:54 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\components [2012/01/01 22:00:45 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 8\plugins [2012/06/18 09:49:36 | 000,000,000 | ---D | M]

[2010/12/29 19:22:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Extensions

[2013/07/01 21:21:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Firefox\Profiles\nu1lksf9.default\extensions

[2013/03/06 09:04:38 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\Pessoal\AppData\Roaming\mozilla\Firefox\Profiles\nu1lksf9.default\extensions\foxyproxy@eric.h.jung

[2012/03/04 13:10:40 | 000,164,722 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\compatibility@addons.mozilla.org.xpi

[2013/03/06 09:04:38 | 000,621,521 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\testpilot@labs.mozilla.com.xpi

[2013/05/03 14:14:22 | 000,117,151 | ---- | M] () (No name found) -- C:\Users\Pessoal\AppData\Roaming\mozilla\firefox\profiles\nu1lksf9.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi

[2013/02/08 10:29:32 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX 4.0 BETA 8\EXTENSIONS\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}

File not found (No name found) -- C:\USERS\PESSOAL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NU1LKSF9.DEFAULT\EXTENSIONS\{E0301295-AB3E-4AF3-979F-3D453C5F9F48}

File not found (No name found) -- C:\USERS\PESSOAL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NU1LKSF9.DEFAULT\EXTENSIONS\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}

========== Chrome ==========

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaangaohdajkgeopjhpbnlpkehbhmbj\7.15.2.0_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\amahogbojgleppliihjnmkbnnnfdbmck\2.0.0_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb\2.3_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd\0.0.15.7_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbnmelddedlommnmllmfhoephaidddmk\1.2_0\

CHR - Extension: No name found = C:\Users\Pessoal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2013/06/25 01:10:38 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2:64bit: - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found

O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O4:64bit: - HKLM..\Run: [Apoint] C:\Arquivos de Programas\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)

O4:64bit: - HKLM..\Run: [broadcom Wireless Manager UI] C:\Arquivos de Programas\Dell\Dell Wireless WLAN Card\WLTRAY.EXE (Dell Inc.)

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [iAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [igfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [sysTrayApp] C:\Arquivos de Programas\IDT\WDM\sttray64.exe (IDT, Inc.)

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()

O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)

O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)

O4 - HKLM..\Run: [Desktop Disc Tool] c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()

O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)

O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)

O4 - HKCU..\Run: [e966e] C:\Users\Pessoal\AppData\Roaming\ff70f\e966e.js File not found

O4 - HKCU..\Run: [GoogleChromeAutoLaunch_6DF0EB03A8923C60684E56320F038E2D] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found

O4 - Startup: C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\be27.js ()

O4 - Startup: C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1

O8:64bit: - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8:64bit: - Extra context menu item: Enviar página para Dispositivo &Bluetooth ... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html File not found

O8 - Extra context menu item: Enviar imagem para Dispositivo &Bluetooth... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()

O8 - Extra context menu item: Enviar página para Dispositivo &Bluetooth ... - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html File not found

O9:64bit: - Extra Button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9:64bit: - Extra 'Tools' menuitem : @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra Button: Enviar para Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O9 - Extra 'Tools' menuitem : Enviar para Dispositivo &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Arquivos de Programas\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Arquivos de Programas\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O13 - gopher Prefix: missing

O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.6.0_39)

O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)

O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 10.21.2)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.182.1 192.168.182.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AD8C9A72-A805-49B8-A0BB-57DA757F12D4}: DhcpNameServer = 192.168.182.1 192.168.182.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CB1930A5-1097-44BE-A440-C9724CBB6C4C}: DhcpNameServer = 192.168.0.1

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Arquivos de Programas\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll) - File not found

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/07/07 15:02:46 | 000,000,000 | ---D | C] -- C:\_OTL

[2013/07/06 21:07:27 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess

[2013/07/01 22:09:38 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

[2013/07/01 20:29:13 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2013/07/01 20:28:38 | 000,000,000 | ---D | C] -- C:\JRT

[2013/07/01 20:19:12 | 000,545,954 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\Pessoal\Desktop\JRT.exe

[2013/06/25 01:13:23 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN

[2013/06/25 01:10:21 | 000,000,000 | ---D | C] -- C:\Windows\temp

[2013/06/25 01:01:10 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe

[2013/06/25 01:01:10 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe

[2013/06/25 01:01:10 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe

[2013/06/25 00:35:36 | 000,000,000 | ---D | C] -- C:\Qoobox

[2013/06/25 00:35:18 | 000,000,000 | ---D | C] -- C:\Windows\erdnt

[2013/06/24 23:49:36 | 000,000,000 | ---D | C] -- C:\PenClean

[2013/06/24 19:33:15 | 000,083,672 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013/06/24 19:17:52 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Roaming\Avira

[2013/06/24 19:16:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

[2013/06/24 19:16:16 | 000,000,000 | ---D | C] -- C:\Firefox

[2013/06/24 19:13:23 | 000,130,016 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013/06/24 19:13:23 | 000,100,712 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013/06/24 19:13:23 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys

[2013/06/24 19:13:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira

[2013/06/24 16:56:29 | 000,085,969 | ---- | C] (GMER) -- C:\Windows\SysWow64\drivers\gmer.sys

[2013/06/24 13:37:44 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\GMER

[2013/06/21 09:25:28 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Local\Programs

[2013/06/21 08:21:54 | 005,081,922 | R--- | C] (Swearware) -- C:\Users\Pessoal\Desktop\ComboFix.exe

[2013/06/21 01:56:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MpcStar

[2013/06/21 01:32:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper

[2013/06/21 01:32:04 | 000,000,000 | ---D | C] -- C:\Users\Pessoal\AppData\Roaming\WinZipper

[2013/06/21 01:32:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinZipper

[2013/06/20 22:38:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Baidu Security

[2011/08/04 12:49:28 | 003,085,984 | ---- | C] (Adobe Systems, Inc.) -- C:\Users\Pessoal\install_flash_player.exe

========== Files - Modified Within 30 Days ==========

[2013/07/08 22:57:51 | 001,563,750 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013/07/08 22:57:51 | 000,677,784 | ---- | M] () -- C:\Windows\SysNative\prfh0416.dat

[2013/07/08 22:57:51 | 000,629,262 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013/07/08 22:57:51 | 000,137,428 | ---- | M] () -- C:\Windows\SysNative\prfc0416.dat

[2013/07/08 22:57:51 | 000,114,708 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013/07/08 22:53:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013/07/08 22:53:30 | 2384,744,448 | -HS- | M] () -- C:\hiberfil.sys

[2013/07/08 22:41:22 | 000,047,559 | ---- | M] () -- C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\be27.js

[2013/07/08 22:04:07 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2013/07/08 22:04:00 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2013/07/08 22:04:00 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013/07/08 21:58:35 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013/07/08 21:58:35 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013/07/08 21:51:14 | 000,000,384 | ---- | M] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Pessoal.job

[2013/07/07 19:53:01 | 000,000,374 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateXML_Pessoal.job

[2013/07/07 19:15:01 | 000,000,378 | ---- | M] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Pessoal.job

[2013/07/04 12:23:46 | 001,764,295 | ---- | M] () -- C:\Users\Pessoal\Desktop\Aula 4 Resultantes.pdf

[2013/07/01 22:12:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Pessoal\Desktop\OTL.exe

[2013/07/01 20:47:09 | 000,648,201 | ---- | M] () -- C:\Users\Pessoal\Desktop\AdwCleaner.exe

[2013/07/01 20:21:05 | 000,545,954 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Pessoal\Desktop\JRT.exe

[2013/07/01 19:43:29 | 000,083,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys

[2013/06/27 07:14:24 | 000,031,816 | ---- | M] () -- C:\Windows\Launcher.exe

[2013/06/25 01:10:38 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2013/06/24 19:07:27 | 000,130,016 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys

[2013/06/24 19:07:27 | 000,100,712 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys

[2013/06/24 19:07:27 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys

[2013/06/24 17:20:01 | 000,000,250 | ---- | M] () -- C:\Windows\gmer.ini

[2013/06/24 16:56:29 | 000,884,736 | ---- | M] () -- C:\Windows\gmer.dll

[2013/06/24 16:56:29 | 000,085,969 | ---- | M] (GMER) -- C:\Windows\SysWow64\drivers\gmer.sys

[2013/06/24 16:56:29 | 000,000,080 | ---- | M] () -- C:\Windows\gmer_uninstall.cmd

[2013/06/24 16:53:16 | 000,811,008 | ---- | M] () -- C:\Windows\gmer.exe

[2013/06/21 08:25:25 | 005,081,922 | R--- | M] (Swearware) -- C:\Users\Pessoal\Desktop\ComboFix.exe

[2013/06/21 01:56:50 | 000,001,107 | ---- | M] () -- C:\Users\Public\Desktop\Comet Player.lnk

[2013/06/21 01:56:50 | 000,000,957 | ---- | M] () -- C:\Users\Public\Desktop\MpcStar.lnk

[2013/06/10 01:05:55 | 000,281,644 | ---- | M] () -- C:\Users\Pessoal\Documents\FAQ.pdf

========== Files Created - No Company Name ==========

[2013/07/08 22:00:01 | 000,047,559 | ---- | C] () -- C:\Users\Pessoal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\be27.js

[2013/07/04 12:23:44 | 001,764,295 | ---- | C] () -- C:\Users\Pessoal\Desktop\Aula 4 Resultantes.pdf

[2013/07/01 20:44:39 | 000,648,201 | ---- | C] () -- C:\Users\Pessoal\Desktop\AdwCleaner.exe

[2013/06/25 01:01:10 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe

[2013/06/25 01:01:10 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe

[2013/06/25 01:01:10 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe

[2013/06/25 01:01:10 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe

[2013/06/25 01:01:10 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe

[2013/06/24 16:56:29 | 000,884,736 | ---- | C] () -- C:\Windows\gmer.dll

[2013/06/24 16:56:29 | 000,811,008 | ---- | C] () -- C:\Windows\gmer.exe

[2013/06/24 16:56:29 | 000,000,250 | ---- | C] () -- C:\Windows\gmer.ini

[2013/06/24 16:56:29 | 000,000,080 | ---- | C] () -- C:\Windows\gmer_uninstall.cmd

[2013/06/22 19:47:27 | 000,000,384 | ---- | C] () -- C:\Windows\tasks\RNUpgradeHelperLogonPrompt_Pessoal.job

[2013/06/22 19:47:15 | 000,000,378 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateFiles_Pessoal.job

[2013/06/22 19:47:13 | 000,000,374 | ---- | C] () -- C:\Windows\tasks\ReclaimerUpdateXML_Pessoal.job

[2013/06/21 09:26:46 | 000,031,816 | ---- | C] () -- C:\Windows\Launcher.exe

[2013/06/21 01:56:50 | 000,001,107 | ---- | C] () -- C:\Users\Public\Desktop\Comet Player.lnk

[2013/06/21 01:56:50 | 000,000,957 | ---- | C] () -- C:\Users\Public\Desktop\MpcStar.lnk

[2013/06/10 01:05:53 | 000,281,644 | ---- | C] () -- C:\Users\Pessoal\Documents\FAQ.pdf

[2012/07/20 11:58:22 | 000,000,032 | ---- | C] () -- C:\Users\Pessoal\jagex_cl_runescape_LIVE.dat

[2011/10/14 21:24:32 | 000,000,660 | RHS- | C] () -- C:\Users\Pessoal\ntuser.pol

[2011/09/16 19:33:23 | 000,000,129 | ---- | C] () -- C:\Users\Pessoal\jagex_runescape_preferences2.dat

[2011/09/16 19:28:53 | 000,000,035 | ---- | C] () -- C:\Users\Pessoal\jagex_runescape_preferences.dat

[2011/07/19 19:57:35 | 000,002,072 | ---- | C] () -- C:\Users\Pessoal\Avira AntiVir Control Center.lnk

[2011/05/27 12:35:55 | 000,007,443 | ---- | C] () -- C:\Users\Pessoal\.recently-used.xbel

[2011/05/19 22:42:00 | 000,020,480 | -H-- | C] () -- C:\Users\Pessoal\photothumb.db

[2011/01/15 22:34:58 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

[2010/06/21 10:08:20 | 000,027,611 | ---- | C] () -- C:\Users\Pessoal\AppData\Roaming\UserTile.png

[2010/04/24 11:19:27 | 000,000,095 | ---- | C] () -- C:\Users\Pessoal\AppData\Local\fusioncache.dat

[2010/04/10 19:27:44 | 000,013,312 | ---- | C] () -- C:\Users\Pessoal\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2009/07/14 01:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013/02/27 02:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013/02/27 01:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 22:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 09:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 22:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2010/12/30 15:24:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Atari

[2010/12/01 13:35:33 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Autodesk

[2012/04/03 17:50:44 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\CometPlayer

[2010/04/18 15:40:05 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Dev-Cpp

[2011/05/19 22:26:51 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\gtk-2.0

[2010/07/09 15:00:19 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Leadertech

[2012/07/21 18:10:42 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Need for Speed World

[2011/05/19 22:48:41 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\PhotoScape

[2012/03/04 12:45:41 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\PrimoPDF

[2012/07/03 21:35:10 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\tigerplayer

[2013/03/16 08:40:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\uTorrent

[2010/07/06 22:54:45 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Windows Live Writer

[2013/06/21 02:20:27 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\WinZipper

[2010/05/27 20:54:01 | 000,000,000 | ---D | M] -- C:\Users\Pessoal\AppData\Roaming\Zylom

========== Purity Check ==========

< End of report >

Compartilhar este post


Link para o post
Compartilhar em outros sites

Cara Ana.C

Faça o download do Malwarebytes Anti-Malware:

  • Link1
  • Link alternativo
    • Clique duas vezes em mbam-setup.exe, escolha a linguagem e siga as instruções para o software ser instalado.
    • Certifique-se que esteja marcada a caixa Atualizar Malwarebytes Anti-Malware e Executar Malwarebytes Anti-Malware, e clique em concluir.
    • Se existirem atualizações, elas serão baixadas e instaladas.
    • Quando as atualizações terminarem, abrirá uma janela do programa. Marque "Verificação Rápida", e depois clique no botão Verificar.
    • O scan iniciará e poderá ser demorado. Por favor seja paciente.
    • Quando o scan estiver completo, clique em Ok, depois em Mostrar Resultados para ver o log.
    • Se algo for encontrado, certifique-se que tudo está marcado e clique em Remover.
    • Quando a desinfecção terminar, automaticamente um log surgirá aberto num documento do Bloco de Notas e pode ser questionado para reiniciar o PC. (Leia a nota)
    • O log é automaticamente guardado e pode ser consultado clicando na tab Logs do menu principal.
    • Copie e cole o conteúdo desse log na sua próxima resposta.

Nota: Em infecções mais complicadas, poderá haver a necessidade de reiniciar o PC. Caso lhe seja pedido para reiniciar, por favor, faça-o imediatamente.

Abraços :D

Compartilhar este post


Link para o post
Compartilhar em outros sites

não foi foi preciso remover ítens, o log gerado inicialmente foi esse:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

Versão da Base de Dados: v2013.07.10.08

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16618

Pessoal :: ANACLARA-PC [administrador]

10/07/2013 18:59:06

mbam-log-2013-07-10 (18-59-06).txt

Tipo de Verificação: Verificação Rápida

Opções de verificações ativadas: Memória | Inicialização | Registro | Sistema de arquivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM

Opções de verificação desativadas: P2P

Objetos escaneados: 225835

Tempo decorrido: 7 minuto(s), 55 segundo(s)

Processos de Memória Detectados: 0

(Não foram detectados ítens maliciosos)

Módulos de Memória Detectados: 0

(Não foram detectados ítens maliciosos)

Chaves de Registro Detectadas: 0

(Não foram detectados ítens maliciosos)

Valores de Registro Detectadas: 0

(Não foram detectados ítens maliciosos)

Itens de Dados no Registro Detectadas: 0

(Não foram detectados ítens maliciosos)

Pastas Detectadas: 0

(Não foram detectados ítens maliciosos)

Arquivos Detectados: 0

(Não foram detectados ítens maliciosos)

(fim)

Compartilhar este post


Link para o post
Compartilhar em outros sites

Cara Ana.C

Faça o download do Kaspersky AVP Tool de um desses links:

Alternativa 1

Alternativa 2

  • Você será direcionado a uma página da Kaspersky, solicitando um email para cadastro, nome e sobrenome.
  • Somente o campo "email" é obrigatório.
  • Informe seu email depois clique no botão Submit Form.
  • A página será recarregada. Clique no botão Download
  • Salve-o em sua área de trabalho (Desktop).
  • Execute o arquivo e aguarde a instalação.
    • ** Usuários do Windows Vista e Windows 7: Clique com o direito sobre o arquivo, depois clique em Executar como administrador

  • Na tela do contrato de licença, marque a opção I accept the license agreement e depois clique no botão Start.
  • Aparentemente o programa congela e nada acontece. É normal, apenas aguarde até aparecer a tela inicial do programa, e então clique no ícone Settings:

KRT_settings.png

Nesta tela, marque a caixa ao lado de:

  • Meu Computador;
  • Disco local (C:);
  • Marque também todas as unidades que aparecem abaixo de Disco Local, caso houverem;
  • Depois clique na aba Automatic Scan.

KRT_install2_.png

  • De volta à tela inicial do programa, clique no botão Start scanning;
  • Tenha paciência, é um pouco demorado;
  • Quando terminar, caso tenha detectado algo, o programa irá lhe perguntar o que fazer;
  • Marque o quadradinho ao lado de Apply to all objects e depois clique em Skip (queremos apenas o log).

KRT_detection_.png

Uma vez finalizado o scan, proceda da seguinte forma:

  1. Na tela principal, caso tenha sido detectado algo, então salve o log.
  2. Se você fechar o programa e esquecer de salvar o log, terá que repetir todo o scan novamente.
  3. Para salvar o log, clique no ícone Reports (ao lado do ícone "Settings").
  4. Na próxima janela, clique em Detected Threats, depois clique no ícone de disquete para salvar o log.
  5. Escolha um local de fácil acesso e salve como log.txt
  6. Copie todo o conteúdo desse bloco de notas e cole em sua próxima resposta.
  7. Se nada for detectado, então não precisa salvar o log, apenas avise.
  8. Para sair do programa, basta clicar no X no canto superior direito.

Observações:
Enquanto durar o scan, a tela inicial exibirá uma barra de progresso. Quando terminar, o programa exibirá o status concluído e um botão que ficará na cor
laranja
, caso nada tenha sido detectado; e na cor
vermelha
, caso tenha encontrado algo. Caso tenha detectado algo, o programa também exibirá uma tela de alerta, avisando que o seu sistema está desprotegido e sugerindo um produto da Kaspersky. Clique no botão
No, thanks
.

Abraços :D

  • Curtir 1

Compartilhar este post


Link para o post
Compartilhar em outros sites

Qual é a versão do Kaspersky mostradas nessas imagens? Pois a versão que baixei não é nem um pouco parecida e nem tem os botões que você citou... Possui apenas os botões "verificação rápida" e "verificação completa". Não tem nem botão "settings"!

Compartilhar este post


Link para o post
Compartilhar em outros sites

Verificação automática: concluído 25 minutos atrás (eventos: 18, objetos: 763203, hora: 04:15:56)

28/07/2013 10:55:28 Tarefa iniciada Ação padrão selecionada

28/07/2013 11:08:29 Detectados: Trojan-Downloader.Win32.Agent.xcgn C:\Documents and Settings\Pessoal\AppData\Local\Zylom Games\Sudoku! Deluxe\sudoku.exe Ação padrão selecionada

28/07/2013 11:09:01 Não neutralizado: Trojan-Downloader.Win32.Agent.xcgn C:\Documents and Settings\Pessoal\AppData\Local\Zylom Games\Sudoku! Deluxe\sudoku.exe Ignorado pelo usuário

28/07/2013 11:12:42 Detectados: Trojan-Downloader.Win32.Agent.xcgn C:\Documents and Settings\Pessoal\Configurações locais\Zylom Games\Sudoku! Deluxe\sudoku.exe Ação padrão selecionada

28/07/2013 11:12:42 Não neutralizado: Trojan-Downloader.Win32.Agent.xcgn C:\Documents and Settings\Pessoal\Configurações locais\Zylom Games\Sudoku! Deluxe\sudoku.exe Ignorado pelo usuário

28/07/2013 11:57:26 Detectados: Trojan-Downloader.Win32.Agent.xcgn C:\Users\Pessoal\AppData\Local\Zylom Games\Sudoku! Deluxe\sudoku.exe Ação padrão selecionada

28/07/2013 11:57:26 Não neutralizado: Trojan-Downloader.Win32.Agent.xcgn C:\Users\Pessoal\AppData\Local\Zylom Games\Sudoku! Deluxe\sudoku.exe Ignorado pelo usuário

28/07/2013 12:00:27 Detectados: Trojan-Downloader.Win32.Agent.xcgn C:\Users\Pessoal\Configurações locais\Zylom Games\Sudoku! Deluxe\sudoku.exe Ação padrão selecionada

28/07/2013 12:00:27 Não neutralizado: Trojan-Downloader.Win32.Agent.xcgn C:\Users\Pessoal\Configurações locais\Zylom Games\Sudoku! Deluxe\sudoku.exe Ignorado pelo usuário

28/07/2013 13:35:05 Detectados: Trojan-Downloader.Win32.Agent.xcgn C:\Documents and Settings\Pessoal\AppData\Local\Zylom Games\Sudoku! Deluxe\sudoku.exe Ação padrão selecionada

28/07/2013 13:35:05 Não neutralizado: Trojan-Downloader.Win32.Agent.xcgn C:\Documents and Settings\Pessoal\AppData\Local\Zylom Games\Sudoku! Deluxe\sudoku.exe Ignorado pelo usuário

28/07/2013 13:38:11 Detectados: Trojan-Downloader.Win32.Agent.xcgn C:\Documents and Settings\Pessoal\Configurações locais\Zylom Games\Sudoku! Deluxe\sudoku.exe Ação padrão selecionada

28/07/2013 13:38:11 Não neutralizado: Trojan-Downloader.Win32.Agent.xcgn C:\Documents and Settings\Pessoal\Configurações locais\Zylom Games\Sudoku! Deluxe\sudoku.exe Ignorado pelo usuário

28/07/2013 14:06:50 Detectados: Trojan-Downloader.Win32.Agent.xcgn C:\Users\Pessoal\AppData\Local\Zylom Games\Sudoku! Deluxe\sudoku.exe Ação padrão selecionada

28/07/2013 14:06:50 Não neutralizado: Trojan-Downloader.Win32.Agent.xcgn C:\Users\Pessoal\AppData\Local\Zylom Games\Sudoku! Deluxe\sudoku.exe Ignorado pelo usuário

28/07/2013 14:09:53 Detectados: Trojan-Downloader.Win32.Agent.xcgn C:\Users\Pessoal\Configurações locais\Zylom Games\Sudoku! Deluxe\sudoku.exe Ação padrão selecionada

28/07/2013 14:09:53 Não neutralizado: Trojan-Downloader.Win32.Agent.xcgn C:\Users\Pessoal\Configurações locais\Zylom Games\Sudoku! Deluxe\sudoku.exe Ignorado pelo usuário

28/07/2013 15:11:24 Tarefa concluída Ação padrão selecionada

é isso aí mesmo?

Compartilhar este post


Link para o post
Compartilhar em outros sites

Cara Ana.C

Pelo resultado acima, somente temos arquivos de jogos, cabe a você decidir o que fazer com eles ;)

No mais o log limpo :)

>>>> Como está o computador?

# Etapa nº 1 #

Novamente com o OTL

  • Clique duas vezes no ícone 3984478580_7ed4cabc45_o.gif
  • Clique no botão 3979150508_cb492f5c9b_o.jpg
  • Aguarde...
  • Quando for pedido para reiniciar clique em OK.

# Etapa nº 2 #

  • Novamente: clique duas vezes no adwcleaner.exe
    • Atenção: Usuários Windows Vista, 7 e 8, cliquem com o botão direito do mouse e escolha: execadmin.png

  • Clique em Desinstalar
  • Clique em Sim, aguarde.

# Etapa nº 4 #
O seu Java está desatualizado.
Atenção: Desinstale TODAS as versões antigas do Java.
  • Feche todos os programas especialmente o seu Navegador (IE, Firefox etc).
  • Acesse o site Java para Windows
  • Clique em 4531602912_e9606174d3_o.gif
  • Na janela que surgir clique em Executar;
  • Siga os procedimentos de instalação.

# Etapa nº 5 #

<<@>> Instale o CCleaner

O CCleaner é um excelente utilitário de limpeza para o computador, que lhe ajudará no desempenho do computador. Faça o download dele aqui CCleaner


  • IMPORTANTE: Após a instalação vá até o local onde o programa foi instalado, C:\Arquivos de programas\CCleaner, clique duas vezes na pasta, numa área vazia desta janela, clique com o botão direito do mouse e escolha Novo > pasta e crie uma nova pasta; coloque o nome de backups!
  • Abra o programa e clique em Executar Limpeza;
  • clique no botão Registro > Procurar Erros > Corrigir erro(s) seleciona(s)...
    Obs: Não se esqueça de aceitar o backup das correções, e salvá-los nas pasta criada acima!

<<@>> Mantenha sempre seu Windows atualizado; mantenha uma vigilância constante com o firewall e antivírus e por fim, lembre-se que, a melhor forma de prevenir começa pelas nossas atitudes!

Abraços :D

Compartilhar este post


Link para o post
Compartilhar em outros sites
Visitante
Este tópico está impedido de receber novos posts.
Entre para seguir isso  





Sobre o Clube do Hardware

No ar desde 1996, o Clube do Hardware é uma das maiores, mais antigas e mais respeitadas publicações sobre tecnologia do Brasil. Leia mais

Direitos autorais

Não permitimos a cópia ou reprodução do conteúdo do nosso site, fórum, newsletters e redes sociais, mesmo citando-se a fonte. Leia mais

×