Ir ao conteúdo
  • Cadastre-se
Sheldonn

Malware/Adware maldito

Recommended Posts

Boa noite pessoal do FCH!

 

A minha máquina foi infecta por um agente que lança propagandas indevidas nas páginas que acesso bem como redireciona para sites bastante esquisitos deixando a navegação extremamente irritante. O Windows passou a desligar a máquina para "prevenir um dano" e vez por outra a velocidade da internet cai drasticamente. Conto com o apoio de vocês para resolver esse problema.

 

Ps importante.: tive que postar o log aqui, pois não consegui anexá-lo.

 


 

ZA-Scan V1.0.0.5 Updated 15-October-2015

Tool run by Sheldonn on 17/10/2015 at  1:07:22,68.

Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Sheldonn\Desktop\Adware maldito\Programas\ZA-Scan.exe [Z-Analyse Scan]

 

==== Running Processes ======================

 

C:\PROGRA~2\GbPlugin\GbpSv.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

C:\Users\Sheldonn\AppData\Roaming\TSv\TSvr.exe

C:\ProgramData\KMSAuto\KMSES.exe

C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

C:\Program Files (x86)\Popcorn Time\Updater.exe

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

C:\Windows\SysWOW64\DllHost.exe

C:\PROGRA~2\GbPlugin\GbpSv.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exe

C:\Users\Sheldonn\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe

C:\Users\Sheldonn\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

C:\Users\Sheldonn\Desktop\Adware maldito\Programas\ZA-Scan.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\SysWOW64\cmd.exe

C:\Users\Sheldonn\AppData\Local\Temp\ZAScan.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

C:\Program Files (x86)\Nero\Update\NASvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

 

==== Drivers(whitelist) ======================

Powered by E Dev

 

R0 - [FileInfo] - File Information FS MiniFilter - C:\Windows\system32\Drivers\FileInfo.sys

R0 - [FltMgr] - FltMgr - C:\Windows\system32\Drivers\FltMgr.sys

R0 - [Mup] - Mup - C:\Windows\system32\Drivers\Mup.sys

R1 - [NetBIOS] - NetBIOS Interface - C:\Windows\system32\Drivers\NetBIOS.sys

R3 - [srv] - Driver SMB 1.xxx do Servidor - C:\Windows\system32\Drivers\srv.sys

R3 - [srv2] - Driver SMB 2.xxx do Servidor - C:\Windows\system32\Drivers\srv2.sys

R0 - [ACPI] - Microsoft ACPI Driver - C:\Windows\system32\Drivers\ACPI.sys

R0 - [amdxata] - amdxata - C:\Windows\system32\Drivers\amdxata.sys

R0 - [CLFS] - Log Comum (CLFS) - C:\Windows\system32\Drivers\CLFS.sys [x]

R0 - [CNG] - CNG - C:\Windows\system32\Drivers\CNG.sys

R0 - [Compbatt] - Microsoft Composite Battery Driver - C:\Windows\system32\Drivers\Compbatt.sys

R0 - [Disk] - Driver de disco - C:\Windows\system32\Drivers\Disk.sys

R0 - [fvevol] - Driver de Filtro de Criptografia de Unidade de Disco BitLocker - C:\Windows\system32\Drivers\fvevol.sys

R0 - [hwpolicy] - Hardware Policy Driver - C:\Windows\system32\Drivers\hwpolicy.sys

R0 - [iaStor] - Intel AHCI Controller - C:\Windows\system32\Drivers\iaStor.sys

R0 - [KSecDD] - KSecDD - C:\Windows\system32\Drivers\KSecDD.sys

R0 - [KSecPkg] - KSecPkg - C:\Windows\system32\Drivers\KSecPkg.sys

R0 - [mountmgr] - Gerenciador de Pontos de Montagem - C:\Windows\system32\Drivers\mountmgr.sys

R0 - [msisadrv] - msisadrv - C:\Windows\system32\Drivers\msisadrv.sys

R0 - [NDIS] - Driver do Sistema NDIS - C:\Windows\system32\Drivers\NDIS.sys

R0 - [partmgr] - Gerenciador de Partições - C:\Windows\system32\Drivers\partmgr.sys

R0 - [pci] - PCI Bus Driver - C:\Windows\system32\Drivers\pci.sys

R0 - [pcw] - Performance Counters for Windows Driver - C:\Windows\system32\Drivers\pcw.sys

R0 - [rdyboost] - ReadyBoost - C:\Windows\system32\Drivers\rdyboost.sys

R0 - [spldr] - Security Processor Loader Driver - C:\Windows\system32\Drivers\spldr.sys

R0 - [Tcpip] - Driver de Protocolo TCP/IP - C:\Windows\system32\Drivers\Tcpip.sys

R0 - [vdrvroot] - Driver de enumerador da unidade virtual Microsoft - C:\Windows\system32\Drivers\vdrvroot.sys

R0 - [volmgr] - Volume Manager Driver - C:\Windows\system32\Drivers\volmgr.sys

R0 - [volmgrx] - Gerenciador de Volume Dinâmico - C:\Windows\system32\Drivers\volmgrx.sys

R0 - [volsnap] - Volumes de armazenamento - C:\Windows\system32\Drivers\volsnap.sys

R0 - [Wd] - Driver de Watchdog da Microsoft - C:\Windows\system32\Drivers\Wd.sys

R0 - [Wdf01000] - Serviço de Estruturas de Driver em Modo Kernel - C:\Windows\system32\Drivers\Wdf01000.sys

R1 - [AFD] - Ancillary Function Driver for Winsock - C:\Windows\system32\Drivers\AFD.sys

R1 - [beep] - Beep - C:\Windows\system32\Drivers\Beep.sys

R1 - [tdx] - Driver de Suporte a TDI Herdado de NetIO - C:\Windows\system32\Drivers\tdx.sys

R2 - [tcpipreg] - TCP/IP Registry Compatibility - C:\Windows\system32\Drivers\tcpipreg.sys

S3 - [atapi] - Canal de IDE - C:\Windows\system32\Drivers\atapi.sys

 

==== Startup Registry Enabled ======================

 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

 

[HKEY_USERS\S-1-5-21-832865506-4223121327-1405444904-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"uTorrent"="C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exe  /MINIMIZED"

 

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

 

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"uTorrent"="C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exe  /MINIMIZED"

 

==== Startup Registry Enabled x64 ======================

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

 

==== Startup Registry Disabled x64 ======================

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CCleaner Monitoring]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="CCleaner Monitoring"

"hkey"="HKCU"

"command"="\"C:\\Program Files\\CCleaner\\CCleaner64.exe\" /MONITOR"

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="uTorrent"

"hkey"="HKCU"

"command"="\"C:\\Users\\Sheldonn\\AppData\\Roaming\\uTorrent\\uTorrent.exe\"  /MINIMIZED"

 

 

==== Task Scheduler Jobs ======================

 

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000Core.job --a------ C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exe [19/08/2012 19:56]

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000UA.job --a------ C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exe [19/08/2012 19:56]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [28/08/2015 12:29]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [28/08/2015 12:29]

 

==== Other Scheduled Tasks ======================

 

"C:\Windows\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]

"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000Core" [C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exe]

"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000UA" [C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\SpyHunter4Startup" ["C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter4.exe"]

"C:\Windows\SysNative\tasks\USER_ESRV_SVC" ["C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{8CD95661-3607-4EAB-A8EB-DC4B4052B272}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\Nero\Nero Info" [C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe]

"C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Analyzer" [C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.0.26\SymErr.exe]

"C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Processor" [C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.0.26\SymErr.exe]

"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\ActiveStatusCollect" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\CheckSystemInfo" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\DeployCRMflag" ["%ProgramFiles%\Sony\VAIO Care\DeployCRMflag.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\GetPOTInfo" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\UpdateSolution" ["%ProgramFiles%\Sony\VAIO Care\Solution.Updater.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\UploadPOT" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VAIO Care" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCCheckIolo" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCMetrics" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCOneClick" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCRLog" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCSelfHeal" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Gate\StartExecuteProxy" ["%programfiles%\Sony\VAIO Gate\ExecutionProxy.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Gate\VAIO Gate" [C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart" ["%ProgramFiles%\Sony\VAIO Gate\VAIO Gate.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader" [C:\Program Files\Sony\VAIO Improvement\viuploader.exe]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start" [C:\Program Files\Sony\VAIO Smart Network\VSNClient]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Update\VAIO Update" ["C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe"]

"C:\Windows\SysNative\tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair" [C:\Program Files\Sony\VAIO Update\VUSR.exe]

 

==== Firefox Start and Search pages ======================

 

ProfilePath: C:\Users\Sheldonn\AppData\Roaming\Mozilla\Firefox\Profiles\nfr6emfw.default

user_pref("browser.startup.homepage", "about:home");

user_pref("browser.newtab.url", "about:newtab");

 

==== Firefox Extensions ======================

 

==== Firefox Plugins ======================

 

Profilepath: C:\Users\Sheldonn\AppData\Roaming\Mozilla\Firefox\Profiles\nfr6emfw.default

3CD19649B2C3023D65E67C056457A2BC - C:\Users\Sheldonn\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin

16485F315911FD051DCA03BD50FB470A - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll - Shockwave Flash

 

 

==== Chromium Look ======================

 

Google Slides - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek

Google Docs - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

With one button to jump try and beat what is quite possibly. - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\boldjdfecepecfhplpmdjoiahdoddnjg

selector is not a valid CSS selector - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb

Adblock for Youtube - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk

Google Search - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Facebook Customizer (by Adblock Plus) - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\deoeenbkoccjaefmmhpmlegngdjohdcm

Google Sheets - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap

Google Docs Offline - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi

AdBlock - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom

With one button to jump try and beat what is quite possibly. - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibfkeabjpcbfpeedphfbiecdgfjlhgch

Chrome Web Store Payments - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Last updated at time on date - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch

Gmail - Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

 

==== IE Start and Search Settings ======================

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page Restore"="http://www.google.com"

"Start Page"="http://www.google.com"

"Default_Page_URL"="http://www.google.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://www.google.com"

"Start Page"="http://www.google.com"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://www.google.com"

"Start Page"="http://www.google.com"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] not found

 

==== HijackThis Entries ======================

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

F2 - REG:system.ini: UserInit=userinit.exe,

O1 - Hosts: ::1 localhost

O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll

O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

O2 - BHO: Auxiliar de Conexão do Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office15\URLREDIR.DLL

O2 - BHO: G-Buster Browser Defense Itaú Unibanco - {C41A1C0E-EA6C-11D4-B1B8-444553540008} - C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehuni.dll

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~3\Office15\GROOVEEX.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

 

==== EOF on 17/10/2015 at  1:11:31,91 ======================

 


 

 

Compartilhar este post


Link para o post
Compartilhar em outros sites

Caro Sheldonn

 

Por favor, anexe os logs. ;)

 

Recomendo que salve este tópico em seus Favoritos para facilitar na hora de encontrá-lo.

Por favor, atente para o seguinte:

  • Caso fique sem resposta durante 3 dias, me envie uma Mensagem Privada (MP);
  • O que será passado aqui, somente será com relação ao problema do seu computador portanto, não faça mais em nenhum outro;
  • Siga, por favor, atentamente as instruções passadas e em caso de dúvidas não hesite em perguntá-las;
  • Sempre coloque suas respostas neste tópico... Não abra outro!
  • Procure sempre me manter informado, durante a remoção, sobre o que acontece com seu computador.
  • Respeite a ordem das instruções passadas.
  • Observação: Não tome outra medida além das passadas aqui; atente para que, caso peça ajuda em outro fórum, não deixe de nos informar, sob risco de desconfigurar seu computador!
# Etapa nº 1 #

Faça o download Junkware Removal Tool e salve em seu Desktop.
  • Desative seus programas de proteção (antivírus etc) para evitar qualquer conflito.
  • Clique duas vezes JRT.exe
    • Se seu sistema for Windows Vista ou Windows 7 ou Windows 8, clique com o botão direito do mouse e peça para Executar como Administrador.

    [*]Seja paciente e aguarde o scan terminar.[*]Abra o log JRT.txt que está em seu Desktop.[*]Copie todo conteúdo e cole em sua próximo mensagem.



# Etapa nº 2 #

  • Clique duas vezes no adwcleaner.exe
    • Atenção: Usuários Windows Vista, 7 e 8, cliquem com o botão direito do mouse e escolha: execadmin.png

  • Clique em Pesquisar
  • No final do scan será aberto um log com o resultado.
  • Caso algo seja detectado, clique então no botão Remover.
  • Novamente, no final do scan será aberto um log com o resultado.
  • Copie todo seu conteúdo e cole em sua próxima resposta.



# Etapa nº 3 #

Desative temporariamente seu antivírus, antispywares e firewall, para não causar conflitos.

Baixe o Farbar Recovery Scan Tool e salve na sua área de trabalho.
32 bit (x86)ou 64 bit (x64)

Dê um duplo-clique para executar a ferramenta. Aceite o contrato e depois clique no botão Scan.

Aguarde e ao final, os logs FRST.txt e Addition.txt serão salvos no seu desktop.

Anexe os logs na sua próxima resposta.

Abraços :D

Compartilhar este post


Link para o post
Compartilhar em outros sites

Diego conforme solicitado seguem os logs para exame:

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.6.4 (09.28.2015:1)

OS: Windows 7 Home Premium x64

Ran by Sheldonn on 19/10/2015 at 9:45:23,13

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

Successfully deleted: [service] bprotectex [Reboot required]

Successfully deleted: [service] pcfapiutil [Reboot required]

~~~ Tasks

~~~ Registry Values

~~~ Registry Keys

~~~ Files

~~~ Folders

Successfully deleted: [Folder] C:\Users\Sheldonn\Start Menu\Programs\browser manager

~~~ Chrome

[C:\Users\Sheldonn\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Sheldonn\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Sheldonn\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Sheldonn\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

[]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 19/10/2015 at 9:49:27,26

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v5.014 - Relatório criado 19/10/2015 às 09:57:22# Atualizado 18/10/2015 por Xplode# Banco de dados : 2015-10-18.5 [servidor]# Sistema operacional : Windows 7 Home Premium Service Pack 1 (x64)# Usuário : Sheldonn - SHELDONN-VAIO# Executando de : C:\Users\Sheldonn\Desktop\Adware maldito\Programas\adwcleaner_5.014.exe# Opção : Verificar# Apoio : http://toolslib.net/forum***** [ Serviços ] ********** [ Pastas ] ********** [ Arquivos ] ********** [ DLLs ] ********** [ Atalhos ] ********** [ Tarefas agendadas ] ********** [ Registro ] ********** [ Navegadores ] *****########## EOF - C:\AdwCleaner\AdwCleaner[s4].txt - [644 bytes] ##########

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-10-2015Ran by Sheldonn (administrator) on SHELDONN-VAIO (19-10-2015 10:00:03)Running from C:\Users\Sheldonn\Desktop\Adware maldito\ProgramasLoaded Profiles: Sheldonn (Available Profiles: Sheldonn)Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Português (Brasil)Internet Explorer Version 11 (Default browser: Chrome)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(Intel Corporation) C:\Windows\System32\hkcmd.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe(GAS Tecnologia) C:\Program Files (x86)\GbPlugin\gbpsv.exe(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe==================== Registry (Whitelisted) ===========================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)Winlogon\Notify\ GbPluginUni: C:\Program Files (x86)\GbPlugin\gbiehUni.dll [2015-07-06] (Banco Itaú Unibanco)HKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\Run: [uTorrent] => C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exe [1822048 2015-10-13] (BitTorrent Inc.)HKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd)HKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\MountPoints2: {191073a3-bdbb-11e4-8ea9-90004eb6dc70} - F:\SETUP.EXEHKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\MountPoints2: {473864f7-d81f-11e2-b30c-90004eb6dc70} - E:\Startme.exeHKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\MountPoints2: {65662826-70d9-11e5-9c25-90004eb6dc70} - E:\LGAutoRun.exeShellExecuteHooks-x32: GbPluginObj Class - {E37CB5F0-51F5-4395-A808-5FA49E399008} - C:\PROGRAM FILES (X86)\GbPlugin\gbiehuni.dll [1759992 2015-07-06] (Banco Itaú Unibanco)CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION==================== Internet (Whitelisted) ====================(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4Tcpip\..\Interfaces\{903BC9B3-15C7-493F-A0F9-0CE70981418F}: [DhcpNameServer] 8.8.8.8 8.8.4.4Internet Explorer:==================HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.comHKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.comHKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.comHKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.comHKU\S-1-5-21-832865506-4223121327-1405444904-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.sony.com.br/vaioHKU\S-1-5-21-832865506-4223121327-1405444904-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxps://br.search.yahoo.com/yhs/web?hspart=nzn&hsimp=yhs-nzn_testSearchScopes: HKU\S-1-5-21-832865506-4223121327-1405444904-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-09-15] (Microsoft Corporation)BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No FileBHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)BHO-x32: Java Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-11-19] (Oracle Corporation)BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-02-24] (Atheros Commnucations)BHO-x32: Auxiliar de Conexão do Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)BHO-x32: GbIehObj Class -> {C41A1C0E-EA6C-11D4-B1B8-444553540008} -> C:\PROGRAM FILES (X86)\GBPLUGIN\gbiehuni.dll [2015-07-06] (Banco Itaú Unibanco)BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-09-15] (Microsoft Corporation)BHO-x32: Java Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-19] (Oracle Corporation)Toolbar: HKU\S-1-5-21-832865506-4223121327-1405444904-1000 -> No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - No FileDPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cabHandler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - No FileHandler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - No FileFireFox:========FF ProfilePath: C:\Users\Sheldonn\AppData\Roaming\Mozilla\Firefox\Profiles\nfr6emfw.defaultFF NewTab: about:newtabFF Homepage: about:homeFF Plugin: @microsoft.com/GENUINE -> disabled [No File]FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2011-05-11] ()FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-19] (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-19] (Oracle Corporation)FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2015-08-28] (Nero AG)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-26] (Adobe Systems Inc.)FF Plugin HKU\S-1-5-21-832865506-4223121327-1405444904-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Sheldonn\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)FF Plugin HKU\S-1-5-21-832865506-4223121327-1405444904-1000: anvisoft.com/AdblockPlugin -> C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\npAdblockPlugin.dll [No File]FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)FF SearchPlugin: C:\Users\Sheldonn\AppData\Roaming\Mozilla\Firefox\Profiles\nfr6emfw.default\searchplugins\clikseguro.xml [2013-08-10]FF Extension: No Name - C:\Users\Sheldonn\AppData\Roaming\Mozilla\Firefox\Profiles\nfr6emfw.default\extensions\wrigtdamon@yahoo.com [not found]FF Extension: No Name - C:\Users\Sheldonn\AppData\Roaming\Mozilla\Firefox\Profiles\nfr6emfw.default\extensions\warnerroberts@hotmail.com [not found]FF Extension: No Name - C:\Users\Sheldonn\AppData\Roaming\Mozilla\Firefox\Profiles\nfr6emfw.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [not found]FF Extension: No Name - C:\Users\Sheldonn\AppData\Roaming\Mozilla\Firefox\Profiles\nfr6emfw.default\extensions\3c8f3083-413b-4aa6-ad29-fb93d8982e80@gmail.com [not found]Chrome: =======CHR StartupUrls: Default -> "hxxp://www.uol.com.br/"CHR Profile: C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Google Apresentações) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-29]CHR Extension: (Google Docs) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-29]CHR Extension: (Google Drive) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-06-16]CHR Extension: (YouTube) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-16]CHR Extension: (Ad!Block Plus) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\boldjdfecepecfhplpmdjoiahdoddnjg [2015-09-29]CHR Extension: (Adblock Plus) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-09-29]CHR Extension: (Adblock para o Youtube™) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2015-09-29]CHR Extension: (Google Search) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-16]CHR Extension: (Facebook Customizer (by Adblock Plus)) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\deoeenbkoccjaefmmhpmlegngdjohdcm [2015-09-29]CHR Extension: (Planilhas do Google) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-29]CHR Extension: (Documentos Google off-line) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-29]CHR Extension: (AdBlock) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-09-29]CHR Extension: (AddBllock Plus) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibfkeabjpcbfpeedphfbiecdgfjlhgch [2015-09-29]CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-02]CHR Extension: (AdBlock Pro) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocifcklkibdehekfnmflempfgjhbedch [2015-09-29]CHR Extension: (Gmail) - C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-16]==================== Services (Whitelisted) ========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)S2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-02-24] (Atheros) [File not signed]S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [73376 2011-02-24] (Atheros Commnucations) [File not signed]S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [104096 2011-07-19] (Atheros Communication Inc.) [File not signed]S2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] ()R2 GbpSv; C:\Program Files (x86)\GbPlugin\gbpsv.exe [546104 2014-09-29] (GAS Tecnologia)S2 IhPul; C:\Users\Sheldonn\AppData\Roaming\TSv\TSvr.exe [396944 2015-09-20] (tsvr.com)S2 KMSEmulator; C:\ProgramData\KMSAuto\KMSES.exe [277504 2015-02-26] () [File not signed]S2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)S2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2015-07-17] (Popcorn Time) [File not signed]S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] ()S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation)S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)===================== Drivers (Whitelisted) ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)R1 360FltOEM; C:\Windows\System32\DRIVERS\360FltOEM.sys [289952 2012-05-31] (360.cn)R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2015-01-07] (Sony Mobile Communications)S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2014-11-13] ()R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [29352 2015-10-08] ()S3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2015-08-12] ()S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [X]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-10-19 09:59 - 2015-10-19 10:00 - 00000000 ____D C:\FRST2015-10-19 09:49 - 2015-10-19 09:49 - 00001292 _____ C:\Users\Sheldonn\Desktop\JRT.txt2015-10-18 21:41 - 2015-10-19 09:35 - 00000001 _____ C:\Windows\SysWOW64\br.html2015-10-17 01:11 - 2015-10-17 01:11 - 00017353 _____ C:\ZA-Scan.txt2015-10-17 01:09 - 2015-10-17 00:45 - 00005708 _____ C:\zoek-results2015-10-17-034547.log2015-10-17 01:04 - 2015-10-17 12:40 - 00000902 _____ C:\Windows\PFRO.log2015-10-17 00:44 - 2015-10-17 00:44 - 00000000 ____D C:\zoek_backup2015-10-16 15:02 - 2015-10-16 15:03 - 00278920 _____ C:\Windows\Minidump\101615-29593-01.dmp2015-10-16 15:02 - 2015-10-16 15:02 - 553974103 _____ C:\Windows\MEMORY.DMP2015-10-16 10:37 - 2015-10-19 09:35 - 00002128 _____ C:\Windows\setupact.log2015-10-16 10:37 - 2015-10-16 10:37 - 00000000 _____ C:\Windows\setuperr.log2015-10-15 10:31 - 2015-09-18 16:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe2015-10-15 10:31 - 2015-09-18 16:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll2015-10-15 10:31 - 2015-09-18 16:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll2015-10-15 10:31 - 2015-09-18 16:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll2015-10-15 10:31 - 2015-09-18 16:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll2015-10-15 10:31 - 2015-09-18 16:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll2015-10-15 10:31 - 2015-09-18 16:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll2015-10-13 17:47 - 2015-08-06 15:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll2015-10-13 17:47 - 2015-08-06 15:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll2015-10-13 17:47 - 2015-08-06 14:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll2015-10-13 17:46 - 2015-09-29 00:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe2015-10-13 17:46 - 2015-09-29 00:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll2015-10-13 17:46 - 2015-09-29 00:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll2015-10-13 17:46 - 2015-09-29 00:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll2015-10-13 17:46 - 2015-09-29 00:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll2015-10-13 17:46 - 2015-09-29 00:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe2015-10-13 17:46 - 2015-09-29 00:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe2015-10-13 17:46 - 2015-09-28 23:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll2015-10-13 17:46 - 2015-09-28 22:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys2015-10-13 17:46 - 2015-09-25 15:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll2015-10-13 17:46 - 2015-09-25 15:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll2015-10-13 17:46 - 2015-09-25 15:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll2015-10-13 17:46 - 2015-09-25 15:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll2015-10-13 17:46 - 2015-09-25 15:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll2015-10-13 17:46 - 2015-09-25 15:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll2015-10-13 17:46 - 2015-09-25 15:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll2015-10-13 17:46 - 2015-09-25 15:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe2015-10-13 17:46 - 2015-09-25 15:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll2015-10-13 17:46 - 2015-09-25 15:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe2015-10-13 17:46 - 2015-09-25 15:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll2015-10-13 17:46 - 2015-09-25 14:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll2015-10-13 17:46 - 2015-09-25 14:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll2015-10-13 17:46 - 2015-09-25 14:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll2015-10-13 17:46 - 2015-09-25 14:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll2015-10-13 17:46 - 2015-09-25 14:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe2015-10-13 17:46 - 2015-09-18 16:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll2015-10-13 17:46 - 2015-09-18 15:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll2015-10-13 17:46 - 2015-09-16 01:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll2015-10-13 17:46 - 2015-09-16 01:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb2015-10-13 17:46 - 2015-09-16 01:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll2015-10-13 17:46 - 2015-09-16 01:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll2015-10-13 17:46 - 2015-09-16 01:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll2015-10-13 17:46 - 2015-09-16 01:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll2015-10-13 17:46 - 2015-09-16 01:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec2015-10-13 17:46 - 2015-09-16 01:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll2015-10-13 17:46 - 2015-09-16 01:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll2015-10-13 17:46 - 2015-09-16 01:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll2015-10-13 17:46 - 2015-09-16 01:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll2015-10-13 17:46 - 2015-09-16 01:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll2015-10-13 17:46 - 2015-09-16 01:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll2015-10-13 17:46 - 2015-09-16 01:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll2015-10-13 17:46 - 2015-09-16 01:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll2015-10-13 17:46 - 2015-09-16 01:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe2015-10-13 17:46 - 2015-09-16 01:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe2015-10-13 17:46 - 2015-09-16 01:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe2015-10-13 17:46 - 2015-09-16 00:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll2015-10-13 17:46 - 2015-09-16 00:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll2015-10-13 17:46 - 2015-09-16 00:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll2015-10-13 17:46 - 2015-09-16 00:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll2015-10-13 17:46 - 2015-09-16 00:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb2015-10-13 17:46 - 2015-09-16 00:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll2015-10-13 17:46 - 2015-09-16 00:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll2015-10-13 17:46 - 2015-09-16 00:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll2015-10-13 17:46 - 2015-09-16 00:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll2015-10-13 17:46 - 2015-09-16 00:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll2015-10-13 17:46 - 2015-09-16 00:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec2015-10-13 17:46 - 2015-09-16 00:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll2015-10-13 17:46 - 2015-09-16 00:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll2015-10-13 17:46 - 2015-09-16 00:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll2015-10-13 17:46 - 2015-09-16 00:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll2015-10-13 17:46 - 2015-09-16 00:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe2015-10-13 17:46 - 2015-09-16 00:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll2015-10-13 17:46 - 2015-09-16 00:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll2015-10-13 17:46 - 2015-09-16 00:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl2015-10-13 17:46 - 2015-09-16 00:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll2015-10-13 17:46 - 2015-09-16 00:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll2015-10-13 17:46 - 2015-09-16 00:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll2015-10-13 17:46 - 2015-09-16 00:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe2015-10-13 17:46 - 2015-09-16 00:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll2015-10-13 17:46 - 2015-09-16 00:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll2015-10-13 17:46 - 2015-09-16 00:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll2015-10-13 17:46 - 2015-09-16 00:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll2015-10-13 17:46 - 2015-09-16 00:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll2015-10-13 17:46 - 2015-09-16 00:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll2015-10-13 17:46 - 2015-09-16 00:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll2015-10-13 17:46 - 2015-09-16 00:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll2015-10-13 17:46 - 2015-09-16 00:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll2015-10-13 17:46 - 2015-09-16 00:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll2015-10-13 17:46 - 2015-09-16 00:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll2015-10-13 17:46 - 2015-09-15 23:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll2015-10-13 17:46 - 2015-09-15 23:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll2015-10-13 17:46 - 2015-09-15 23:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll2015-10-13 17:46 - 2015-09-15 23:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll2015-10-13 17:46 - 2015-09-15 23:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl2015-10-13 17:46 - 2015-09-15 23:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll2015-10-13 17:46 - 2015-09-15 23:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll2015-10-13 17:46 - 2015-09-15 23:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll2015-10-13 17:46 - 2015-09-15 23:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll2015-10-13 17:46 - 2015-09-15 23:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll2015-10-13 17:46 - 2015-09-15 15:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys2015-10-13 17:46 - 2015-09-15 15:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys2015-10-13 17:46 - 2015-09-15 15:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll2015-10-13 17:46 - 2015-08-06 14:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll2015-10-13 17:45 - 2015-10-01 15:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi2015-10-13 17:45 - 2015-10-01 15:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi2015-10-13 17:45 - 2015-10-01 15:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe2015-10-13 17:45 - 2015-10-01 15:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll2015-10-13 17:45 - 2015-10-01 15:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll2015-10-13 17:45 - 2015-10-01 15:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll2015-10-13 17:45 - 2015-10-01 15:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe2015-10-13 17:45 - 2015-10-01 14:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll2015-10-13 17:45 - 2015-10-01 14:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys2015-10-13 17:45 - 2015-09-29 00:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll2015-10-13 17:45 - 2015-09-29 00:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll2015-10-13 17:45 - 2015-09-29 00:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll2015-10-13 17:45 - 2015-09-29 00:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll2015-10-13 17:45 - 2015-09-29 00:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll2015-10-13 17:45 - 2015-09-29 00:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll2015-10-13 17:45 - 2015-09-29 00:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll2015-10-13 17:45 - 2015-09-29 00:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll2015-10-13 17:45 - 2015-09-29 00:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll2015-10-13 17:45 - 2015-09-29 00:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll2015-10-13 17:45 - 2015-09-29 00:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe2015-10-13 17:45 - 2015-09-29 00:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe2015-10-13 17:45 - 2015-09-29 00:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll2015-10-13 17:45 - 2015-09-29 00:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll2015-10-13 17:45 - 2015-09-29 00:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll2015-10-13 17:45 - 2015-09-29 00:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll2015-10-13 17:45 - 2015-09-29 00:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe2015-10-13 17:45 - 2015-09-29 00:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe2015-10-13 17:45 - 2015-09-29 00:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll2015-10-13 17:45 - 2015-09-29 00:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll2015-10-13 17:45 - 2015-09-29 00:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll2015-10-13 17:45 - 2015-09-29 00:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll2015-10-13 17:45 - 2015-09-28 23:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll2015-10-13 17:45 - 2015-09-28 23:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll2015-10-13 17:45 - 2015-09-28 23:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll2015-10-13 17:45 - 2015-09-28 23:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll2015-10-13 17:45 - 2015-09-28 23:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll2015-10-13 17:45 - 2015-09-28 23:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe2015-10-13 17:45 - 2015-09-28 23:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll2015-10-13 17:45 - 2015-09-28 23:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe2015-10-13 17:45 - 2015-09-28 23:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll2015-10-13 17:45 - 2015-09-28 23:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll2015-10-13 17:45 - 2015-09-28 23:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll2015-10-13 17:45 - 2015-09-28 23:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll2015-10-13 17:45 - 2015-09-28 23:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll2015-10-13 17:45 - 2015-09-28 23:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 23:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 22:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys2015-10-13 17:45 - 2015-09-28 22:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys2015-10-13 17:45 - 2015-09-28 22:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe2015-10-13 17:45 - 2015-09-28 22:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe2015-10-13 17:45 - 2015-09-28 22:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 22:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 22:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll2015-10-13 17:45 - 2015-09-28 22:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll2015-10-13 17:45 - 2015-09-15 15:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll2015-10-13 17:45 - 2015-09-15 15:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll2015-10-13 17:45 - 2015-09-15 15:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll2015-10-13 17:45 - 2015-09-15 15:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll2015-10-13 17:45 - 2015-09-15 15:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll2015-10-13 17:45 - 2015-09-15 15:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe2015-10-13 17:45 - 2015-09-15 14:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll2015-10-13 17:45 - 2015-09-15 14:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll2015-10-13 17:45 - 2015-09-15 14:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll2015-10-13 17:45 - 2015-09-15 14:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll2015-10-13 17:44 - 2015-07-18 10:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll2015-10-13 13:09 - 2015-10-19 09:35 - 00000000 ____D C:\Users\Sheldonn\AppData\LocalLow\uTorrent2015-10-12 16:28 - 2015-10-19 09:52 - 00000000 ____D C:\Users\Sheldonn\Desktop\Adware maldito2015-10-12 10:59 - 2015-10-12 11:00 - 00000000 ____D C:\Users\Sheldonn\AppData\Roaming\Nero2015-10-12 10:43 - 2015-10-12 10:43 - 00000000 ____D C:\Windows\System32\Tasks\Nero2015-10-12 10:41 - 2015-10-12 10:41 - 00002913 _____ C:\Users\Public\Desktop\Nero 2016.lnk2015-10-12 10:37 - 2015-10-12 10:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 20162015-10-12 10:36 - 2015-10-12 10:44 - 00000000 ____D C:\Users\Todos os Usuários\Nero2015-10-12 10:36 - 2015-10-12 10:44 - 00000000 ____D C:\ProgramData\Nero2015-10-12 10:36 - 2015-10-12 10:43 - 00000000 ____D C:\Program Files (x86)\Nero2015-10-12 10:36 - 2015-10-12 10:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero2015-10-12 10:31 - 2015-10-12 10:31 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache2015-10-12 10:31 - 2015-10-12 10:31 - 00000000 ____D C:\ProgramData\Package Cache2015-10-09 21:07 - 2015-10-09 21:08 - 06677440 _____ (Piriform Ltd) C:\Users\Sheldonn\Downloads\ccsetup510.exe2015-10-08 22:48 - 2015-10-08 22:48 - 00003146 _____ C:\Windows\System32\Tasks\USER_ESRV_SVC2015-10-08 22:48 - 2015-10-08 22:48 - 00002027 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care.lnk2015-10-08 22:48 - 2015-10-08 22:48 - 00000000 __RHD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care2015-10-08 22:48 - 2015-10-08 22:47 - 00029352 _____ C:\Windows\system32\Drivers\semav6msr64.sys2015-10-08 22:48 - 2015-10-08 22:47 - 00010324 _____ C:\Windows\system32\Drivers\semav6msr64.cat2015-10-07 19:27 - 2015-10-19 09:57 - 00000000 ____D C:\AdwCleaner2015-10-02 20:32 - 2015-10-02 20:32 - 00000000 ___HD C:\$Windows.~BT2015-09-30 23:32 - 2015-10-16 02:06 - 00000000 ____D C:\Users\Sheldonn\Documents\VideoOutput2015-09-30 23:32 - 2015-09-30 23:32 - 00000000 ____D C:\Users\Sheldonn\Documents\Snapshot2015-09-30 23:31 - 2015-09-30 23:31 - 00001013 _____ C:\Users\Public\Desktop\Video to Video.lnk2015-09-30 23:31 - 2015-09-30 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video to Video2015-09-30 23:31 - 2015-09-30 23:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters2015-09-30 23:31 - 2015-09-30 23:31 - 00000000 ____D C:\Program Files (x86)\Video to Video2015-09-30 21:57 - 2015-09-30 21:57 - 00000000 ____D C:\Users\Sheldonn\Documents\Documentos empresa2015-09-29 21:33 - 2015-09-29 21:33 - 00126714 _____ C:\Users\Sheldonn\Downloads\legendas_tv_20150928144423 (1).rar2015-09-29 21:32 - 2015-09-29 21:32 - 00126714 _____ C:\Users\Sheldonn\Downloads\legendas_tv_20150928144423.rar2015-09-29 13:49 - 2015-09-29 13:50 - 00000000 ____D C:\Users\Sheldonn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome2015-09-29 13:49 - 2015-09-29 13:49 - 00000000 ____D C:\Users\Sheldonn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome2015-09-28 12:51 - 2015-10-07 19:29 - 00000000 ____D C:\Windows\system32\log2015-09-22 08:55 - 2015-09-22 08:56 - 00000000 ____D C:\Users\Sheldonn\AppData\Roaming\TSv==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-10-19 09:49 - 2014-12-01 12:01 - 02037634 _____ C:\Windows\WindowsUpdate.log2015-10-19 09:45 - 2011-12-13 23:37 - 00000000 ____D C:\Users\Sheldonn\AppData\Roaming\uTorrent2015-10-19 09:44 - 2009-07-14 01:45 - 00028848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-10-19 09:44 - 2009-07-14 01:45 - 00028848 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-10-19 09:41 - 2012-10-28 16:07 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job2015-10-19 09:35 - 2012-10-28 16:07 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job2015-10-19 09:35 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT2015-10-18 23:01 - 2012-08-19 19:56 - 00000940 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000UA.job2015-10-18 21:52 - 2011-11-11 15:44 - 00003974 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{8CD95661-3607-4EAB-A8EB-DC4B4052B272}2015-10-18 11:03 - 2011-05-11 16:24 - 00706460 _____ C:\Windows\system32\prfh0416.dat2015-10-18 11:03 - 2011-05-11 16:24 - 00148042 _____ C:\Windows\system32\prfc0416.dat2015-10-18 11:03 - 2009-07-14 02:13 - 01637442 _____ C:\Windows\system32\PerfStringBackup.INI2015-10-17 20:01 - 2012-08-19 19:56 - 00000918 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000Core.job2015-10-17 01:10 - 2011-11-11 10:07 - 00000000 ____D C:\Users\Sheldonn\AppData\Local\CrashDumps2015-10-16 15:02 - 2013-09-26 01:31 - 00000000 ____D C:\Windows\Minidump2015-10-16 03:01 - 2015-04-16 15:57 - 00000000 ____D C:\Windows\system32\appraiser2015-10-16 03:01 - 2014-05-06 00:15 - 00000000 ___SD C:\Windows\system32\CompatTel2015-10-16 02:05 - 2015-02-07 22:34 - 00000000 ____D C:\Users\Sheldonn\AppData\Roaming\MPC-HC2015-10-15 17:31 - 2015-02-24 15:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk2015-10-15 17:30 - 2015-06-25 23:14 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task2015-10-14 15:52 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\rescache2015-10-14 03:24 - 2013-07-20 10:12 - 00000000 ____D C:\Windows\system32\MRT2015-10-14 03:18 - 2011-11-20 11:22 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe2015-10-14 03:15 - 2015-02-26 10:53 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 20132015-10-14 03:15 - 2011-11-24 20:34 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help2015-10-14 03:15 - 2011-11-24 20:34 - 00000000 ____D C:\ProgramData\Microsoft Help2015-10-14 03:13 - 2009-07-13 23:34 - 00000478 _____ C:\Windows\win.ini2015-10-12 10:00 - 2011-12-13 23:35 - 00000000 ____D C:\Users\Sheldonn\Downloads\Programas2015-10-09 21:08 - 2011-12-28 02:11 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk2015-10-09 21:08 - 2011-12-28 02:11 - 00000000 ____D C:\Program Files\CCleaner2015-10-09 09:55 - 2015-04-06 09:50 - 00000000 ___SD C:\Windows\system32\GWX2015-10-08 22:48 - 2011-05-11 11:53 - 00000000 ____D C:\Windows\System32\Tasks\Sony Corporation2015-10-08 22:48 - 2011-05-11 11:53 - 00000000 ____D C:\Program Files\Sony2015-10-08 22:36 - 2011-11-13 11:00 - 00000000 ____D C:\Update2015-10-08 00:21 - 2015-04-06 09:50 - 00000000 ___SD C:\Windows\SysWOW64\GWX2015-10-06 12:58 - 2009-07-14 02:08 - 00032608 _____ C:\Windows\Tasks\SCHEDLGU.TXT2015-10-05 13:36 - 2011-11-11 10:03 - 00000000 ____D C:\Windows\pss2015-10-02 20:33 - 2011-02-10 19:48 - 00000000 ____D C:\Windows\Panther2015-10-01 08:45 - 2009-07-14 01:45 - 00466720 _____ C:\Windows\system32\FNTCACHE.DAT2015-09-30 22:31 - 2015-08-31 21:13 - 00000000 ____D C:\Users\Sheldonn\Downloads\PopcornTime2015-09-30 22:05 - 2011-11-11 10:03 - 00120024 _____ C:\Users\Sheldonn\AppData\Local\GDIPFONTCACHEV1.DAT2015-09-30 21:52 - 2013-04-02 10:43 - 00000000 ____D C:\Users\Todos os Usuários\Skype2015-09-30 21:52 - 2013-04-02 10:43 - 00000000 ____D C:\Users\Sheldonn\AppData\Roaming\Skype2015-09-30 21:52 - 2013-04-02 10:43 - 00000000 ____D C:\ProgramData\Skype2015-09-30 17:30 - 2011-05-11 11:31 - 00000000 ____D C:\Program Files (x86)\DDNi2015-09-30 17:29 - 2012-01-26 15:08 - 00000000 ____D C:\Program Files (x86)\Nokia2015-09-29 13:22 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\System==================== Files in the root of some directories =======2013-08-10 10:08 - 2013-08-10 11:01 - 0000116 _____ () C:\Users\Sheldonn\AppData\Local\ap_UA-24552437-8.txt2013-08-10 10:08 - 2013-08-10 11:01 - 0000117 _____ () C:\Users\Sheldonn\AppData\Local\ap_UA-24552437-9.txt2013-04-06 22:49 - 2013-04-06 22:49 - 0003584 _____ () C:\Users\Sheldonn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini2011-05-11 13:15 - 2011-05-11 13:15 - 0000035 _____ () C:\ProgramData\AtherosServiceConfig.ini2014-11-08 00:43 - 2014-11-08 00:43 - 0000165 _____ () C:\ProgramData\bc.iniSome files in TEMP:====================C:\Users\Sheldonn\AppData\Local\Temp\kernel32.dll==================== Bamital & volsnap =================(There is no automatic fix for files that do not pass verification.)C:\Windows\system32\winlogon.exe => File is digitally signedC:\Windows\system32\wininit.exe => File is digitally signedC:\Windows\SysWOW64\wininit.exe => File is digitally signedC:\Windows\explorer.exe => File is digitally signedC:\Windows\SysWOW64\explorer.exe => File is digitally signedC:\Windows\system32\svchost.exe => File is digitally signedC:\Windows\SysWOW64\svchost.exe => File is digitally signedC:\Windows\system32\services.exe => File is digitally signedC:\Windows\system32\User32.dll => File is digitally signedC:\Windows\SysWOW64\User32.dll => File is digitally signedC:\Windows\system32\userinit.exe => File is digitally signedC:\Windows\SysWOW64\userinit.exe => File is digitally signedC:\Windows\system32\rpcss.dll => File is digitally signedC:\Windows\system32\dnsapi.dll => File is digitally signedC:\Windows\SysWOW64\dnsapi.dll => File is digitally signedC:\Windows\system32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-10-11 22:08==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-10-2015Ran by Sheldonn (2015-10-19 10:00:51)Running from C:\Users\Sheldonn\Desktop\Adware maldito\ProgramasWindows 7 Home Premium Service Pack 1 (X64) (2011-11-11 13:02:35)Boot Mode: Normal============================================================================== Accounts: =============================Administrador (S-1-5-21-832865506-4223121327-1405444904-500 - Administrator - Disabled)Convidado (S-1-5-21-832865506-4223121327-1405444904-501 - Limited - Disabled)Sheldonn (S-1-5-21-832865506-4223121327-1405444904-1000 - Administrator - Enabled) => C:\Users\Sheldonn==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)==================== Installed Programs ======================(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)µTorrent (HKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)Adobe Flash Player 10 Plugin (HKLM-x32\...\{E6725026-A650-449C-897B-D6B7A5EEA058}) (Version: 10.2.152.26 - Adobe Systems Incorporated)Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.4.402.287 - Adobe Systems Incorporated)Adobe Reader XI (11.0.13) - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated)ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.142 - ArcSoft)ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.392 - ArcSoft)Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Atheros)Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.90 - Atheros Communications)CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)CDisplay 1.8 (HKLM-x32\...\CDisplay_is1) (Version: - dvd8n)Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.0.53 - Conexant)Controle ActiveX do Windows Live Mesh para Conexões Remotas (HKLM-x32\...\{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}) (Version: 15.4.5722.2 - Microsoft Corporation)D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)Ferramenta de Restauração de Dados VAIO (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.6.0.13140 - Sony Corporation)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) HiddenGoogle Update Helper (x32 Version: 1.3.28.15 - Google Inc.) HiddenIntel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)Intel® Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) HiddenIntel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenLAV Filters 0.55.3 (HKLM-x32\...\lavfilters_is1) (Version: 0.55.3 - Hendrik Leppkes)Manual VAIO (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 2.0.0.02250 - Sony Corporation)Media Gallery (Version: 1.5.0.16020 - Your Company Name) HiddenMesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) HiddenMicrosoft .NET Framework 4.5.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50938 - Microsoft Corporation)Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0416-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)Microsoft Office com Clique para Executar 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)MPC-HC 1.7.8 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.8 - MPC-HC Team)MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) HiddenMSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) HiddenMSVC90_x64 (Version: 1.0.1.2 - Nokia) HiddenMSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) HiddenMSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)Nero 2016 (HKLM-x32\...\{4297E807-5633-466A-8AC0-5AC48D310471}) (Version: 17.0.02000 - Nero AG)Nero 2016 Content Pack (HKLM-x32\...\{006F5CFF-ED35-41AF-9B2A-F52B0F545BF4}) (Version: 17.0.00200 - Nero AG)Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)OOBE (HKLM-x32\...\{18894D16-5448-4BF9-A128-F7E937322F91}) (Version: 11.2.1.10 - Sony Corporation)Pacote de Driver do Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)PC Connectivity Solution (HKLM-x32\...\{7390478C-8581-415E-92E9-2997D9306B81}) (Version: 12.0.32.0 - Nokia)PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation)PMB VAIO Edition Guide (x32 Version: 1.5.00.02250 - Sony Corporation) HiddenPMB VAIO Edition Plug-in (Version: 1.5.00.04010 - Sony Corporation) HiddenPMB VAIO Edition Plug-in (x32 Version: 1.5.00.02250 - Sony Corporation) HiddenPMB VAIO Edition Plug-in (x32 Version: 1.5.00.04060 - Sony Corporation) HiddenPopcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: 5.4.0.0 - Popcorn Time)Prerequisite installer (x32 Version: 17.0.0002 - Nero AG) HiddenQualcomm Atheros Direct Connect (x32 Version: 3.0 - Qualcomm Atheros) HiddenRealtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.92 - Realtek Semiconductor Corp.)Remote Keyboard (x32 Version: 1.1.1.07060 - Sony Corporation) HiddenRemote Play with PlayStation 3 (x32 Version: 1.1.0.15070 - Sony Corporation) HiddenRevisores de Texto do Microsoft Office 2013 – Português do Brasil (x32 Version: 15.0.4569.1506 - Microsoft Corporation) HiddenService Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft)Software de dispositivo do Chipset Intel® (x32 Version: 10.0.24 - Intel® Corporation) HiddenSony Corporation (Version: 1.0.0 - Default Company Name) HiddenSony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.17.201412121559 - Sony Mobile Communications Inc.)Sony PC Companion 2.10.245 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.245 - Sony)SSLx64 (Version: 1.0.0 - Sony Corporation ) HiddenSSLx86 (x32 Version: 1.0.0 - Sony Corporation ) HiddenStashimi Stub Installer (x32 Version: 18.001.1 - Nero AG) HiddenSuporte de Transferência VAIO (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.4.0.14230 - Sony Corporation)Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0416-0000-0000000FF1CE}_Office15.PROPLUSR_{B36586AD-3256-47B6-8AE7-FA0D8727D7C2}) (Version: - Microsoft)Update for Skype for Business 2015 (KB3085581) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{E93D8472-11CA-4A0C-B31F-C82C9E9AA1CC}) (Version: - Microsoft)Update for Skype for Business 2015 (KB3085581) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0416-0000-0000000FF1CE}_Office15.PROPLUSR_{E93D8472-11CA-4A0C-B31F-C82C9E9AA1CC}) (Version: - Microsoft)Update for Skype for Business 2015 (KB3085581) 32-Bit Edition (HKLM-x32\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{E93D8472-11CA-4A0C-B31F-C82C9E9AA1CC}) (Version: - Microsoft)VAIO - Media Gallery (HKLM-x32\...\{FA870BF1-44A1-4B7D-93E1-C101369AF0C1}) (Version: 1.5.0.16020 - Sony Corporation)VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.02250 - Sony Corporation)VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{270380EB-8812-42E1-8289-53700DB840D2}) (Version: 1.5.00.04060 - Sony Corporation)VAIO - Reprodução remota com PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.15070 - Sony Corporation)VAIO - Teclado Remoto (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.1.0.07060 - Sony Corporation)VAIO Care (HKLM\...\{6EEC3E9C-3479-42EB-B93C-E7DF7927DD82}) (Version: 8.4.4.09181 - Sony Corporation)VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.5.0.03040 - Sony Corporation)VAIO Data Restore Tool (x32 Version: 1.6.0.13140 - Sony Corporation) HiddenVAIO Easy Connect (HKLM-x32\...\InstallShield_{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.1.2.01120 - Sony Corporation)VAIO Easy Connect (x32 Version: 1.1.2.01120 - Sony Corporation) HiddenVAIO Event Service (HKLM-x32\...\{73D8886A-D416-4687-B609-0D3836BA410C}) (Version: 5.5.0.03040 - Sony Corporation)VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.2.02200 - Sony Corporation)VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.4.0.03240 - Sony Corporation)VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280 - Sony Corporation) HiddenVAIO Help and Support (HKLM-x32\...\{F5248E24-F52C-4FD1-B76F-102460BAFD6B}) (Version: 14.00.0125 - Sony Corporation)VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.0.0.14150 - Sony Corporation)VAIO Messenger (HKLM-x32\...\VAIO Messenger) (Version: 2.0.118.0 - DDNi)VAIO Messenger (x32 Version: 2.0.118.0 - DDNi) HiddenVAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.5.5 - Sony Corporation)VAIO Quick Web Access (x32 Version: 1.4.5.5 - Sony Corporation) HiddenVAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.0.09010 - Sony Corporation)VAIO Satisfaction Survey. (HKLM-x32\...\VAIO Satisfaction Survey.3.0) (Version: 3.0 - Sony Electronics Inc.)VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.8.1.08270 - Sony Corporation)VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.1.0.08060 - Sony Corporation)VCCx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)VESx64 (Version: 1.0.0 - Sony Corporation) HiddenVESx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVGClientX64 (Version: 1.0.0 - Sony Corporation) HiddenVGClientX86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVideo to Video (HKLM-x32\...\{7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1) (Version: - Media Converters)Visualizador do Microsoft PowerPoint (HKLM-x32\...\{95140000-00AF-0416-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)VIx64 (Version: 1.0.0 - Sony Corporation) HiddenVIx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVSNx64 (Version: 1.0.0 - Sony Corporation) HiddenVSNx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVU5x64 (Version: 1.1.0 - Sony Corporation ) HiddenVU5x86 (x32 Version: 1.1.0 - Sony Corporation ) HiddenVWSTx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenWindows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)WinRAR 4.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== Restore Points =========================15-10-2015 01:31:47 Windows Update16-10-2015 03:00:15 Windows Update16-10-2015 03:24:12 Windows Update16-10-2015 14:20:48 Windows Update17-10-2015 12:44:00 Windows Update18-10-2015 03:00:13 Windows Update18-10-2015 03:15:57 Windows Update18-10-2015 13:52:07 Windows Update19-10-2015 09:39:58 Windows Update19-10-2015 09:45:23 JRT Pre-Junkware Removal==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2009-07-13 23:34 - 2015-09-29 13:06 - 00000841 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {0779DF5B-649D-4864-90B5-2F16DDD986CA} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {0A72DDB0-94A8-4F37-A438-F6240E44BFDB} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {141A033B-3E8B-4975-9CCA-0652E6B87055} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2015-08-06] (Sony Corporation)Task: {15CAB967-B392-4B77-BDBD-0F15C0C52D01} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)Task: {1F1EB4FA-199E-4E90-8C3D-5E03AC547209} - System32\Tasks\SpyHunter4Startup => C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter4.exeTask: {20270ABB-3E0D-40B4-9F9A-EA36F6041DB5} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation)Task: {29F759E4-B652-490F-90BC-64B3D6FA6029} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2015-07-23] (Sony Corporation)Task: {2B629790-C211-47B0-9521-F6E4412CD3D2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)Task: {303C4235-C0FB-4A6B-8468-B3481281D383} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)Task: {304BCC5F-E679-4508-B702-71CB0631490B} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\compattelrunner.exe [2015-09-18] (Microsoft Corporation)Task: {3B32DF98-D513-4AC1-86E2-9C3B242ACFE7} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation)Task: {3E0E645E-3FD8-4F97-9766-71423674F522} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {437DB2F5-13F3-4BE6-82E1-5F006472C988} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000UA => C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-19] (Facebook Inc.)Task: {527554D0-7719-4B7C-BBAC-CE15986623F3} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {618F9F11-6F77-4037-8894-214888723C97} - System32\Tasks\{49C84FDA-CDF7-4E39-825C-D0CAE16B4F84} => pcalua.exe -a C:\Users\Sheldonn\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=red <==== ATTENTIONTask: {8C3C7169-7FA1-4588-86AE-9145A196BF45} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.0.26\SymErr.exeTask: {9D692AAD-D7C3-44ED-80EF-4E07ACF5FEBA} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)Task: {A1218B69-CCF9-4504-966F-888002C5ABE8} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClientTask: {A441C023-EE9B-4ACD-B984-063319FD604B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exeTask: {A9B770CD-1551-4844-A7F6-83B8D1764B39} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"Task: {AAC0B0A9-4CFA-4112-8972-A7FB0D663520} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)Task: {AD01490E-2831-422C-BC1E-FB7F8F72CFC1} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)Task: {B2F08059-B5ED-4D33-B36A-A9C5416C5290} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000Core => C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-19] (Facebook Inc.)Task: {B6D70A14-A950-43BA-A2EC-F7ADF64FCDC9} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2015-07-31] (Sony Corporation)Task: {C05D74A7-22DE-4CCF-8EFA-466408A0D918} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)Task: {C8C7A57B-1C1E-45FE-A396-0762F1F912E5} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.0.26\SymErr.exeTask: {CA5DDDB9-83BC-4F2C-AA79-AE780F87C647} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {D4A47B21-ABB2-45E7-8149-8E39E8204242} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {D5A09F3B-5C22-4294-907F-1D6C09229FAF} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {D649D762-170A-4F35-A0A1-B358979F31B9} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2015-02-04] (Sony Corporation)Task: {D67534CA-21F7-4656-8804-A1508B447127} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)Task: {D7E9B38E-3F26-4DC3-A761-A74FF5A8E891} - \SPBIW_UpdateTask_Time_323736373132313731372d2d37505a2a6c55326c342341 -> No File <==== ATTENTIONTask: {E79B7CCA-9EC2-42DE-B798-77ACB65FE182} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {E833B68C-BA46-4BDF-BEB2-B23950FFE93E} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {EAE0218F-B266-4D59-9085-C1387012FB1E} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {F2B590E0-E96D-4F2F-BC95-F2DA16EE4B57} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000Core.job => C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exeTask: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000UA.job => C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe==================== Loaded Modules (Whitelisted) ==============2011-11-13 13:49 - 2011-05-28 21:05 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll2015-09-16 16:34 - 2015-09-16 16:34 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1046.dll2015-09-18 09:53 - 2015-09-18 09:53 - 00245912 _____ () C:\Program Files\Sony\VAIO Care\analyzer.dll2014-10-16 10:53 - 2014-10-16 10:53 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll2011-05-11 11:37 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll2011-05-11 12:06 - 2011-03-05 16:42 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll2015-10-15 21:44 - 2015-10-08 21:53 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libglesv2.dll2015-10-15 21:44 - 2015-10-08 21:53 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libegl.dll2015-10-16 02:30 - 2015-10-15 13:20 - 16493256 _____ () C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\PepperFlash\19.0.0.226\pepflashplayer.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C:\Windows\System32:8BB8CE5C_Uni.gbp==================== Safe Mode (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)==================== EXE Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)IE trusted site: HKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\itau.com.br -> bankline.itau.com.br==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-832865506-4223121327-1405444904-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Sheldonn\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 8.8.8.8 - 8.8.4.4HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)Windows Firewall is enabled.==================== MSCONFIG/TASK MANAGER disabled items ==(Currently there is no automatic fix for this section.)MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITORMSCONFIG\startupreg: uTorrent => "C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [{75418B17-1886-4F5B-9AE1-949BF9E560D2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exeFirewallRules: [{0D885E99-3823-45E3-BD76-706CE3986E1C}] => (Allow) LPort=2869FirewallRules: [{BD1C90A7-F098-4748-A66B-E0D38D53ADE9}] => (Allow) LPort=1900FirewallRules: [{CD0E062C-1286-45AD-82EF-301225E1AE4B}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exeFirewallRules: [{487055CC-A267-4EF5-A9A1-1243C0B1AF57}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exeFirewallRules: [{42F5BC9B-0173-4BC2-A6C2-815A6A11B884}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [{0D995819-709F-4E4F-A47B-6EDF9CFA56D8}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [{CFE869AE-3CE4-4988-9D00-EC554A99921D}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [TCP Query User{E0B27671-2B58-4628-A035-6C1227B4850D}C:\users\sheldonn\downloads\programas\utorrent.exe] => (Allow) C:\users\sheldonn\downloads\programas\utorrent.exeFirewallRules: [uDP Query User{A8BAFCFB-136F-44CE-8E44-7C4C06EDB94C}C:\users\sheldonn\downloads\programas\utorrent.exe] => (Allow) C:\users\sheldonn\downloads\programas\utorrent.exeFirewallRules: [{2B0D64C2-07EE-4229-8AAC-28CBAF7DF108}] => (Allow) C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exeFirewallRules: [{07990A32-53F9-4AB5-B857-AD2B2E16D91F}] => (Allow) C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exeFirewallRules: [{88862233-1E1B-48EF-B3DD-47FE742D355E}] => (Allow) C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exeFirewallRules: [{1886192E-9AF5-473B-A31A-8C6FB3AB52AD}] => (Allow) C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exeFirewallRules: [{DAB2720D-E158-4134-9944-07AF64969312}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [{2830462D-A207-4526-A7C5-89EA2BE4D94C}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [{8BFE91EA-74BF-43A8-890A-54136C1577AC}] => (Allow) C:\Users\Sheldonn\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exeFirewallRules: [{F7BE6510-2296-47C1-A84B-EC0D74BD7799}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exeFirewallRules: [{5B84CB7E-846C-4AFB-B968-07E07DEC9201}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exeFirewallRules: [{3E92560A-DA66-43D2-8AFA-ED56F5B29E9B}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exeFirewallRules: [{5D157890-3EAB-46C4-A090-1367F0EBFE71}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exeFirewallRules: [{7B49DF5C-BCBE-4E1A-BE21-C6A3E2C445CB}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exeFirewallRules: [{E1D11FB0-83AB-47F5-98C3-F7CA0073F331}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exeFirewallRules: [{01F7112A-164B-4941-8F9B-45AA6DA58D43}] => (Allow) LPort=1688FirewallRules: [{2F2AAA35-AE95-4F66-AB82-FE88F60CF4DD}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exeFirewallRules: [{FA150706-91BF-4832-A333-FBE3EA717C87}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exeFirewallRules: [{BA59888F-DD7B-44DD-B9E5-6D38E89211C7}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exeFirewallRules: [{BDF99DC4-12E9-4A35-81E2-088C03A416C9}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exeFirewallRules: [{9C3C038A-1DFB-41D4-9FCD-31AF55B6F647}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exeFirewallRules: [{8CE098AD-F5CE-4484-A867-C2426171B804}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exeFirewallRules: [{38E476D0-ABA4-429F-B090-3AE9B640858A}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exeFirewallRules: [{DBECA4AB-A3E5-4AD1-BFA2-7062BA0C3E15}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exeFirewallRules: [{C34EFE69-40CA-4472-BB44-7E42C73ABEC6}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exeFirewallRules: [{8C81300F-E98F-4A32-855F-C2479A8DD442}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exeFirewallRules: [{5C4A1CDD-A58F-48E2-B233-C8F9CC8B8A6E}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exeFirewallRules: [{60771ABF-05BF-4371-BBB6-271FEE20A957}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exeFirewallRules: [{D7D7A0EA-3B75-4CE0-93C3-6EADB335CCDE}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exeFirewallRules: [{C20AC09C-1716-4D5A-AAEF-C9A799649BE4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe==================== Faulty Device Manager Devices =============Name: Teredo Tunneling Pseudo-InterfaceDescription: Adaptador de Túnel Teredo da MicrosoftClass Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: tunnelProblem: : This device cannot start. (Code10)Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.Name: Dispositivo Periférico BluetoothDescription: Dispositivo Periférico BluetoothClass Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28)Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.==================== Event log errors: =========================Application errors:==================Error: (10/19/2015 09:41:06 AM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/19/2015 09:41:03 AM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.Error: (10/18/2015 01:52:56 PM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/18/2015 01:52:54 PM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.Error: (10/18/2015 03:16:14 AM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/18/2015 03:16:13 AM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.Error: (10/18/2015 03:01:31 AM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/18/2015 03:01:30 AM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.Error: (10/17/2015 12:45:24 PM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/17/2015 12:45:22 PM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.System errors:=============Error: (10/19/2015 09:48:08 AM) (Source: Service Control Manager) (EventID: 7032) (User: )Description: O Gerenciador de controle de serviços tentou executar uma ação corretiva (Reiniciar o serviço) após a finalização inesperada do serviço Instalador de Módulos do Windows, mas essa ação falhou com o seguinte erro: %%1056Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço Application Virtualization Client foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço VCService foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: O serviço Instalador de Módulos do Windows foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 120000 milissegundos: Reiniciar o serviço.Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: O serviço Windows Installer foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 120000 milissegundos: Reiniciar o serviço.Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço Intel® Management and Security Application User Notification Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço Nero Update foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço CamMonitor foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço IconMan_R foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço VUAgent foi encerrado inesperadamente. Isso aconteceu 1 vez(es).==================== Memory info =========================== Processor: Intel® Core i5-2410M CPU @ 2.30GHzPercentage of memory in use: 44%Total physical RAM: 4043.86 MBAvailable physical RAM: 2237.01 MBTotal Virtual: 8085.93 MBAvailable Virtual: 6043.89 MB==================== Drives ================================Drive c: () (Fixed) (Total:455.41 GB) (Free:247.59 GB) NTFS==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 476F9F5C)Partition 1: (Not Active) - (Size=10.3 GB) - (Type=27)Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 3: (Not Active) - (Size=455.4 GB) - (Type=07 NTFS)==================== End of Addition.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-10-2015Ran by Sheldonn (2015-10-19 10:00:51)Running from C:\Users\Sheldonn\Desktop\Adware maldito\ProgramasWindows 7 Home Premium Service Pack 1 (X64) (2011-11-11 13:02:35)Boot Mode: Normal============================================================================== Accounts: =============================Administrador (S-1-5-21-832865506-4223121327-1405444904-500 - Administrator - Disabled)Convidado (S-1-5-21-832865506-4223121327-1405444904-501 - Limited - Disabled)Sheldonn (S-1-5-21-832865506-4223121327-1405444904-1000 - Administrator - Enabled) => C:\Users\Sheldonn==================== Security Center ========================(If an entry is included in the fixlist, it will be removed.)==================== Installed Programs ======================(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)µTorrent (HKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)Adobe Flash Player 10 Plugin (HKLM-x32\...\{E6725026-A650-449C-897B-D6B7A5EEA058}) (Version: 10.2.152.26 - Adobe Systems Incorporated)Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.4.402.287 - Adobe Systems Incorporated)Adobe Reader XI (11.0.13) - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated)ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{61438020-DDD4-42FA-99A2-50225441980A}) (Version: 2.0.1.142 - ArcSoft)ArcSoft WebCam Companion 4 (HKLM-x32\...\{C793AD32-2BB8-4CC4-ABD3-A1469C21593C}) (Version: 4.0.21.392 - ArcSoft)Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Atheros)Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.3.0.90 - Atheros Communications)CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)CDisplay 1.8 (HKLM-x32\...\CDisplay_is1) (Version: - dvd8n)Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.0.53 - Conexant)Controle ActiveX do Windows Live Mesh para Conexões Remotas (HKLM-x32\...\{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}) (Version: 15.4.5722.2 - Microsoft Corporation)D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) HiddenESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)Ferramenta de Restauração de Dados VAIO (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.6.0.13140 - Sony Corporation)Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.71 - Google Inc.)Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) HiddenGoogle Update Helper (x32 Version: 1.3.28.15 - Google Inc.) HiddenIntel® Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)Intel® Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) HiddenIntel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) HiddenLAV Filters 0.55.3 (HKLM-x32\...\lavfilters_is1) (Version: 0.55.3 - Hendrik Leppkes)Manual VAIO (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 2.0.0.02250 - Sony Corporation)Media Gallery (Version: 1.5.0.16020 - Your Company Name) HiddenMesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) HiddenMicrosoft .NET Framework 4.5.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50938 - Microsoft Corporation)Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0416-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)Microsoft Office com Clique para Executar 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0409-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)MPC-HC 1.7.8 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.8 - MPC-HC Team)MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) HiddenMSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) HiddenMSVC90_x64 (Version: 1.0.1.2 - Nokia) HiddenMSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) HiddenMSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)Nero 2016 (HKLM-x32\...\{4297E807-5633-466A-8AC0-5AC48D310471}) (Version: 17.0.02000 - Nero AG)Nero 2016 Content Pack (HKLM-x32\...\{006F5CFF-ED35-41AF-9B2A-F52B0F545BF4}) (Version: 17.0.00200 - Nero AG)Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)OOBE (HKLM-x32\...\{18894D16-5448-4BF9-A128-F7E937322F91}) (Version: 11.2.1.10 - Sony Corporation)Pacote de Driver do Windows - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)PC Connectivity Solution (HKLM-x32\...\{7390478C-8581-415E-92E9-2997D9306B81}) (Version: 12.0.32.0 - Nokia)PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation)PMB VAIO Edition Guide (x32 Version: 1.5.00.02250 - Sony Corporation) HiddenPMB VAIO Edition Plug-in (Version: 1.5.00.04010 - Sony Corporation) HiddenPMB VAIO Edition Plug-in (x32 Version: 1.5.00.02250 - Sony Corporation) HiddenPMB VAIO Edition Plug-in (x32 Version: 1.5.00.04060 - Sony Corporation) HiddenPopcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: 5.4.0.0 - Popcorn Time)Prerequisite installer (x32 Version: 17.0.0002 - Nero AG) HiddenQualcomm Atheros Direct Connect (x32 Version: 3.0 - Qualcomm Atheros) HiddenRealtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.92 - Realtek Semiconductor Corp.)Remote Keyboard (x32 Version: 1.1.1.07060 - Sony Corporation) HiddenRemote Play with PlayStation 3 (x32 Version: 1.1.0.15070 - Sony Corporation) HiddenRevisores de Texto do Microsoft Office 2013 – Português do Brasil (x32 Version: 15.0.4569.1506 - Microsoft Corporation) HiddenService Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft)Software de dispositivo do Chipset Intel® (x32 Version: 10.0.24 - Intel® Corporation) HiddenSony Corporation (Version: 1.0.0 - Default Company Name) HiddenSony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.17.201412121559 - Sony Mobile Communications Inc.)Sony PC Companion 2.10.245 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.245 - Sony)SSLx64 (Version: 1.0.0 - Sony Corporation ) HiddenSSLx86 (x32 Version: 1.0.0 - Sony Corporation ) HiddenStashimi Stub Installer (x32 Version: 18.001.1 - Nero AG) HiddenSuporte de Transferência VAIO (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.4.0.14230 - Sony Corporation)Update for Skype for Business 2015 (KB2889853) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0416-0000-0000000FF1CE}_Office15.PROPLUSR_{B36586AD-3256-47B6-8AE7-FA0D8727D7C2}) (Version: - Microsoft)Update for Skype for Business 2015 (KB3085581) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{E93D8472-11CA-4A0C-B31F-C82C9E9AA1CC}) (Version: - Microsoft)Update for Skype for Business 2015 (KB3085581) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0416-0000-0000000FF1CE}_Office15.PROPLUSR_{E93D8472-11CA-4A0C-B31F-C82C9E9AA1CC}) (Version: - Microsoft)Update for Skype for Business 2015 (KB3085581) 32-Bit Edition (HKLM-x32\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{E93D8472-11CA-4A0C-B31F-C82C9E9AA1CC}) (Version: - Microsoft)VAIO - Media Gallery (HKLM-x32\...\{FA870BF1-44A1-4B7D-93E1-C101369AF0C1}) (Version: 1.5.0.16020 - Sony Corporation)VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.02250 - Sony Corporation)VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{270380EB-8812-42E1-8289-53700DB840D2}) (Version: 1.5.00.04060 - Sony Corporation)VAIO - Reprodução remota com PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.15070 - Sony Corporation)VAIO - Teclado Remoto (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.1.0.07060 - Sony Corporation)VAIO Care (HKLM\...\{6EEC3E9C-3479-42EB-B93C-E7DF7927DD82}) (Version: 8.4.4.09181 - Sony Corporation)VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.5.0.03040 - Sony Corporation)VAIO Data Restore Tool (x32 Version: 1.6.0.13140 - Sony Corporation) HiddenVAIO Easy Connect (HKLM-x32\...\InstallShield_{7C80D30A-AC02-4E3F-B95D-29F0E4FF937B}) (Version: 1.1.2.01120 - Sony Corporation)VAIO Easy Connect (x32 Version: 1.1.2.01120 - Sony Corporation) HiddenVAIO Event Service (HKLM-x32\...\{73D8886A-D416-4687-B609-0D3836BA410C}) (Version: 5.5.0.03040 - Sony Corporation)VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.2.02200 - Sony Corporation)VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.4.0.03240 - Sony Corporation)VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280 - Sony Corporation) HiddenVAIO Help and Support (HKLM-x32\...\{F5248E24-F52C-4FD1-B76F-102460BAFD6B}) (Version: 14.00.0125 - Sony Corporation)VAIO Improvement (HKLM-x32\...\{3A26D9BD-0F73-432D-B522-2BA18138F7EF}) (Version: 1.0.0.14150 - Sony Corporation)VAIO Messenger (HKLM-x32\...\VAIO Messenger) (Version: 2.0.118.0 - DDNi)VAIO Messenger (x32 Version: 2.0.118.0 - DDNi) HiddenVAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.4.5.5 - Sony Corporation)VAIO Quick Web Access (x32 Version: 1.4.5.5 - Sony Corporation) HiddenVAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.4.0.09010 - Sony Corporation)VAIO Satisfaction Survey. (HKLM-x32\...\VAIO Satisfaction Survey.3.0) (Version: 3.0 - Sony Electronics Inc.)VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.8.1.08270 - Sony Corporation)VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.1.0.08060 - Sony Corporation)VCCx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)VESx64 (Version: 1.0.0 - Sony Corporation) HiddenVESx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVGClientX64 (Version: 1.0.0 - Sony Corporation) HiddenVGClientX86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVideo to Video (HKLM-x32\...\{7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1) (Version: - Media Converters)Visualizador do Microsoft PowerPoint (HKLM-x32\...\{95140000-00AF-0416-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)VIx64 (Version: 1.0.0 - Sony Corporation) HiddenVIx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVSNx64 (Version: 1.0.0 - Sony Corporation) HiddenVSNx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenVU5x64 (Version: 1.1.0 - Sony Corporation ) HiddenVU5x86 (x32 Version: 1.1.0 - Sony Corporation ) HiddenVWSTx86 (x32 Version: 1.0.0 - Sony Corporation) HiddenWindows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)WinRAR 4.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)==================== Custom CLSID (Whitelisted): ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== Restore Points =========================15-10-2015 01:31:47 Windows Update16-10-2015 03:00:15 Windows Update16-10-2015 03:24:12 Windows Update16-10-2015 14:20:48 Windows Update17-10-2015 12:44:00 Windows Update18-10-2015 03:00:13 Windows Update18-10-2015 03:15:57 Windows Update18-10-2015 13:52:07 Windows Update19-10-2015 09:39:58 Windows Update19-10-2015 09:45:23 JRT Pre-Junkware Removal==================== Hosts content: ===============================(If needed Hosts: directive could be included in the fixlist to reset Hosts.)2009-07-13 23:34 - 2015-09-29 13:06 - 00000841 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Scheduled Tasks (Whitelisted) =============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)Task: {0779DF5B-649D-4864-90B5-2F16DDD986CA} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {0A72DDB0-94A8-4F37-A438-F6240E44BFDB} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {141A033B-3E8B-4975-9CCA-0652E6B87055} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2015-08-06] (Sony Corporation)Task: {15CAB967-B392-4B77-BDBD-0F15C0C52D01} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)Task: {1F1EB4FA-199E-4E90-8C3D-5E03AC547209} - System32\Tasks\SpyHunter4Startup => C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter4.exeTask: {20270ABB-3E0D-40B4-9F9A-EA36F6041DB5} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation)Task: {29F759E4-B652-490F-90BC-64B3D6FA6029} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2015-07-23] (Sony Corporation)Task: {2B629790-C211-47B0-9521-F6E4412CD3D2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)Task: {303C4235-C0FB-4A6B-8468-B3481281D383} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)Task: {304BCC5F-E679-4508-B702-71CB0631490B} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\compattelrunner.exe [2015-09-18] (Microsoft Corporation)Task: {3B32DF98-D513-4AC1-86E2-9C3B242ACFE7} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation)Task: {3E0E645E-3FD8-4F97-9766-71423674F522} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {437DB2F5-13F3-4BE6-82E1-5F006472C988} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000UA => C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-19] (Facebook Inc.)Task: {527554D0-7719-4B7C-BBAC-CE15986623F3} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {618F9F11-6F77-4037-8894-214888723C97} - System32\Tasks\{49C84FDA-CDF7-4E39-825C-D0CAE16B4F84} => pcalua.exe -a C:\Users\Sheldonn\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=red <==== ATTENTIONTask: {8C3C7169-7FA1-4588-86AE-9145A196BF45} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.0.26\SymErr.exeTask: {9D692AAD-D7C3-44ED-80EF-4E07ACF5FEBA} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation)Task: {A1218B69-CCF9-4504-966F-888002C5ABE8} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClientTask: {A441C023-EE9B-4ACD-B984-063319FD604B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exeTask: {A9B770CD-1551-4844-A7F6-83B8D1764B39} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"Task: {AAC0B0A9-4CFA-4112-8972-A7FB0D663520} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)Task: {AD01490E-2831-422C-BC1E-FB7F8F72CFC1} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)Task: {B2F08059-B5ED-4D33-B36A-A9C5416C5290} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000Core => C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-19] (Facebook Inc.)Task: {B6D70A14-A950-43BA-A2EC-F7ADF64FCDC9} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2015-07-31] (Sony Corporation)Task: {C05D74A7-22DE-4CCF-8EFA-466408A0D918} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)Task: {C8C7A57B-1C1E-45FE-A396-0762F1F912E5} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2013.3.0.26\SymErr.exeTask: {CA5DDDB9-83BC-4F2C-AA79-AE780F87C647} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {D4A47B21-ABB2-45E7-8149-8E39E8204242} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {D5A09F3B-5C22-4294-907F-1D6C09229FAF} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {D649D762-170A-4F35-A0A1-B358979F31B9} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2015-02-04] (Sony Corporation)Task: {D67534CA-21F7-4656-8804-A1508B447127} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation)Task: {D7E9B38E-3F26-4DC3-A761-A74FF5A8E891} - \SPBIW_UpdateTask_Time_323736373132313731372d2d37505a2a6c55326c342341 -> No File <==== ATTENTIONTask: {E79B7CCA-9EC2-42DE-B798-77ACB65FE182} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {E833B68C-BA46-4BDF-BEB2-B23950FFE93E} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {EAE0218F-B266-4D59-9085-C1387012FB1E} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)Task: {F2B590E0-E96D-4F2F-BC95-F2DA16EE4B57} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000Core.job => C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exeTask: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-832865506-4223121327-1405444904-1000UA.job => C:\Users\Sheldonn\AppData\Local\Facebook\Update\FacebookUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exeTask: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe==================== Loaded Modules (Whitelisted) ==============2011-11-13 13:49 - 2011-05-28 21:05 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll2015-09-16 16:34 - 2015-09-16 16:34 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1046.dll2015-09-18 09:53 - 2015-09-18 09:53 - 00245912 _____ () C:\Program Files\Sony\VAIO Care\analyzer.dll2014-10-16 10:53 - 2014-10-16 10:53 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll2011-05-11 11:37 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IsdiInterop.dll2011-05-11 12:06 - 2011-03-05 16:42 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll2015-10-15 21:44 - 2015-10-08 21:53 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libglesv2.dll2015-10-15 21:44 - 2015-10-08 21:53 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.71\libegl.dll2015-10-16 02:30 - 2015-10-15 13:20 - 16493256 _____ () C:\Users\Sheldonn\AppData\Local\Google\Chrome\User Data\PepperFlash\19.0.0.226\pepflashplayer.dll==================== Alternate Data Streams (Whitelisted) =========(If an entry is included in the fixlist, only the ADS will be removed.)AlternateDataStreams: C:\Windows\System32:8BB8CE5C_Uni.gbp==================== Safe Mode (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)==================== EXE Association (Whitelisted) ===============(If an entry is included in the fixlist, the registry item will be restored to default or removed.)==================== Internet Explorer trusted/restricted ===============(If an entry is included in the fixlist, it will be removed from the registry.)IE trusted site: HKU\S-1-5-21-832865506-4223121327-1405444904-1000\...\itau.com.br -> bankline.itau.com.br==================== Other Areas ============================(Currently there is no automatic fix for this section.)HKU\S-1-5-21-832865506-4223121327-1405444904-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Sheldonn\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpgDNS Servers: 8.8.8.8 - 8.8.4.4HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)Windows Firewall is enabled.==================== MSCONFIG/TASK MANAGER disabled items ==(Currently there is no automatic fix for this section.)MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITORMSCONFIG\startupreg: uTorrent => "C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED==================== FirewallRules (Whitelisted) ===============(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)FirewallRules: [{75418B17-1886-4F5B-9AE1-949BF9E560D2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exeFirewallRules: [{0D885E99-3823-45E3-BD76-706CE3986E1C}] => (Allow) LPort=2869FirewallRules: [{BD1C90A7-F098-4748-A66B-E0D38D53ADE9}] => (Allow) LPort=1900FirewallRules: [{CD0E062C-1286-45AD-82EF-301225E1AE4B}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exeFirewallRules: [{487055CC-A267-4EF5-A9A1-1243C0B1AF57}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exeFirewallRules: [{42F5BC9B-0173-4BC2-A6C2-815A6A11B884}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [{0D995819-709F-4E4F-A47B-6EDF9CFA56D8}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [{CFE869AE-3CE4-4988-9D00-EC554A99921D}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [TCP Query User{E0B27671-2B58-4628-A035-6C1227B4850D}C:\users\sheldonn\downloads\programas\utorrent.exe] => (Allow) C:\users\sheldonn\downloads\programas\utorrent.exeFirewallRules: [uDP Query User{A8BAFCFB-136F-44CE-8E44-7C4C06EDB94C}C:\users\sheldonn\downloads\programas\utorrent.exe] => (Allow) C:\users\sheldonn\downloads\programas\utorrent.exeFirewallRules: [{2B0D64C2-07EE-4229-8AAC-28CBAF7DF108}] => (Allow) C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exeFirewallRules: [{07990A32-53F9-4AB5-B857-AD2B2E16D91F}] => (Allow) C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exeFirewallRules: [{88862233-1E1B-48EF-B3DD-47FE742D355E}] => (Allow) C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exeFirewallRules: [{1886192E-9AF5-473B-A31A-8C6FB3AB52AD}] => (Allow) C:\Users\Sheldonn\AppData\Roaming\uTorrent\uTorrent.exeFirewallRules: [{DAB2720D-E158-4134-9944-07AF64969312}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [{2830462D-A207-4526-A7C5-89EA2BE4D94C}] => (Allow) C:\Program Files\Sony\VAIO Smart Network\WFDA\WiFiDirectApplication.exeFirewallRules: [{8BFE91EA-74BF-43A8-890A-54136C1577AC}] => (Allow) C:\Users\Sheldonn\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exeFirewallRules: [{F7BE6510-2296-47C1-A84B-EC0D74BD7799}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exeFirewallRules: [{5B84CB7E-846C-4AFB-B968-07E07DEC9201}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exeFirewallRules: [{3E92560A-DA66-43D2-8AFA-ED56F5B29E9B}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exeFirewallRules: [{5D157890-3EAB-46C4-A090-1367F0EBFE71}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exeFirewallRules: [{7B49DF5C-BCBE-4E1A-BE21-C6A3E2C445CB}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exeFirewallRules: [{E1D11FB0-83AB-47F5-98C3-F7CA0073F331}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exeFirewallRules: [{01F7112A-164B-4941-8F9B-45AA6DA58D43}] => (Allow) LPort=1688FirewallRules: [{2F2AAA35-AE95-4F66-AB82-FE88F60CF4DD}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exeFirewallRules: [{FA150706-91BF-4832-A333-FBE3EA717C87}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exeFirewallRules: [{BA59888F-DD7B-44DD-B9E5-6D38E89211C7}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exeFirewallRules: [{BDF99DC4-12E9-4A35-81E2-088C03A416C9}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exeFirewallRules: [{9C3C038A-1DFB-41D4-9FCD-31AF55B6F647}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exeFirewallRules: [{8CE098AD-F5CE-4484-A867-C2426171B804}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exeFirewallRules: [{38E476D0-ABA4-429F-B090-3AE9B640858A}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exeFirewallRules: [{DBECA4AB-A3E5-4AD1-BFA2-7062BA0C3E15}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exeFirewallRules: [{C34EFE69-40CA-4472-BB44-7E42C73ABEC6}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exeFirewallRules: [{8C81300F-E98F-4A32-855F-C2479A8DD442}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exeFirewallRules: [{5C4A1CDD-A58F-48E2-B233-C8F9CC8B8A6E}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\StartNBR.exeFirewallRules: [{60771ABF-05BF-4371-BBB6-271FEE20A957}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exeFirewallRules: [{D7D7A0EA-3B75-4CE0-93C3-6EADB335CCDE}] => (Allow) C:\Program Files (x86)\Nero\Nero 2016\Nero Burning ROM\nero.exeFirewallRules: [{C20AC09C-1716-4D5A-AAEF-C9A799649BE4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe==================== Faulty Device Manager Devices =============Name: Teredo Tunneling Pseudo-InterfaceDescription: Adaptador de Túnel Teredo da MicrosoftClass Guid: {4d36e972-e325-11ce-bfc1-08002be10318}Manufacturer: MicrosoftService: tunnelProblem: : This device cannot start. (Code10)Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.Name: Dispositivo Periférico BluetoothDescription: Dispositivo Periférico BluetoothClass Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28)Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.==================== Event log errors: =========================Application errors:==================Error: (10/19/2015 09:41:06 AM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/19/2015 09:41:03 AM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.Error: (10/18/2015 01:52:56 PM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/18/2015 01:52:54 PM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.Error: (10/18/2015 03:16:14 AM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/18/2015 03:16:13 AM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.Error: (10/18/2015 03:01:31 AM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/18/2015 03:01:30 AM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.Error: (10/17/2015 12:45:24 PM) (Source: MsiInstaller) (EventID: 1024) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 - A atualização 'Update for Microsoft Office 2013 (KB3085585) 32-Bit Edition' não pôde ser instalada. Código de erro 1603. O Windows Installer pode criar logs para ajudar a solucionar problemas na instalação de pacotes de software. Use o link a seguir para obter informações sobre ativação do suporte a registro em log: http://go.microsoft.com/fwlink/?LinkId=23127Error: (10/17/2015 12:45:22 PM) (Source: MsiInstaller) (EventID: 11335) (User: AUTORIDADE NT)Description: Produto: Microsoft Office 64-bit Components 2013 -- Erro 1335.O arquivo de gabinete 'PATCH_CAB' necessário para esta instalação está corrompido e não pode ser usado. Isso pode indicar um erro Isso pode indicar um erro de rede, um erro de leitura do CD-ROM ou um problema com este pacote.System errors:=============Error: (10/19/2015 09:48:08 AM) (Source: Service Control Manager) (EventID: 7032) (User: )Description: O Gerenciador de controle de serviços tentou executar uma ação corretiva (Reiniciar o serviço) após a finalização inesperada do serviço Instalador de Módulos do Windows, mas essa ação falhou com o seguinte erro: %%1056Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço Application Virtualization Client foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço VCService foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: O serviço Instalador de Módulos do Windows foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 120000 milissegundos: Reiniciar o serviço.Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7031) (User: )Description: O serviço Windows Installer foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 120000 milissegundos: Reiniciar o serviço.Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço Intel® Management and Security Application User Notification Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço Nero Update foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço CamMonitor foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço IconMan_R foi encerrado inesperadamente. Isso aconteceu 1 vez(es).Error: (10/19/2015 09:46:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )Description: O serviço VUAgent foi encerrado inesperadamente. Isso aconteceu 1 vez(es).==================== Memory info =========================== Processor: Intel® Core i5-2410M CPU @ 2.30GHzPercentage of memory in use: 44%Total physical RAM: 4043.86 MBAvailable physical RAM: 2237.01 MBTotal Virtual: 8085.93 MBAvailable Virtual: 6043.89 MB==================== Drives ================================Drive c: () (Fixed) (Total:455.41 GB) (Free:247.59 GB) NTFS==================== MBR & Partition Table ==========================================================================Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 476F9F5C)Partition 1: (Not Active) - (Size=10.3 GB) - (Type=27)Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)Partition 3: (Not Active) - (Size=455.4 GB) - (Type=07 NTFS)==================== End of Addition.txt ============================

Compartilhar este post


Link para o post
Compartilhar em outros sites

Tópico Arquivado

Como o autor não respondeu ao tópico por mais de 10 dias, o mesmo foi arquivado.

Caso você seja o autor do tópico e quer que o mesmo seja reaberto, entre em contato com um Analista de Segurança do Fórum solicitando o desbloqueio.

Compartilhar este post


Link para o post
Compartilhar em outros sites
Visitante
Este tópico está impedido de receber novos posts.





Sobre o Clube do Hardware

No ar desde 1996, o Clube do Hardware é uma das maiores, mais antigas e mais respeitadas publicações sobre tecnologia do Brasil. Leia mais

Direitos autorais

Não permitimos a cópia ou reprodução do conteúdo do nosso site, fórum, newsletters e redes sociais, mesmo citando-se a fonte. Leia mais

×