Arquivado

Este tópico foi arquivado e está fechado para novas respostas.

adrianoboliveira

Executar como administrador em linha de comando...

6 posts neste tópico

Olá, galera

É o seguinte: no Windows XP e similares tem aquela opção para aplicativos executáveis que, quando você clica com o botão direito do mouse, aparece Executar como... - que serve para que um usuário sem perfil de administrador execute uma rotina desde que mse autentique como administrador ou algo do tipo

A pergunta é: como colocar isso em linha de comando?

Pois tenho o Norton antivírus 2004 nessas estações e os usuários são do domínio; quando executo o arquivo de atualização do Norton ou atualizo pelo LiveUpdate eu concluo a atualização, mas ao abrir o Norton ele não exibe a definição de vírus como atualizada, nem mesmo reiniciando a estação do usuário - só atualiza mesmo se eu logar como administrador local ou do domínio. Aí quando reinicio novamente com o usuário passa a partir daí a valer. É como se o usuário não tivesse permissão de mexer nas pastas ou no registro que envolve a atualização do Norton.

 

Alguém tem alguma solução?

Obrigado desde já

Nada a declarar...

0

Compartilhar este post


Link para o post
Compartilhar em outros sites

Use o comando runas. Para executar o Internet Explorer, por exemplo, como administrador, digite no menu Executar:

runas /user:[email protected]_do_computador (ou domínio) "C:Arquivos de programasInternet ExplorerIExplore.exe"

 

Só isso.

Atualizando assinatura...

0

Compartilhar este post


Link para o post
Compartilhar em outros sites

Data: 22/5/2005

Autor: flanilson

Use o comando runas. Para executar o Internet Explorer, por exemplo, como administrador, digite no menu Executar:

runas /user:[email protected]_do_computador (ou domínio) 'C:Arquivos de programasInternet ExplorerIExplore.exe'

 

Só isso.

 

Ou pode usar também o comando desta forma, o resultado será o mesmo:

 

runas /user:nome do computadornome do usuário Administrador programa ou caminho

 

  por exemplo...

 

runas /user:ArqServer01ANDERSON cmd

 

  ou se achar mais conveniente, clique com o botão direito sobre o executável ou arquivo e escolha Executar Como..., e digite a senha da conta Administrador (Padrão) ou qualquer outra conta que faça parte do Grupo Administradores trocando o nome do usuário.

 

Espero ter ajudado.

 

 

Possui uma dúvida? Iniciou um tópico? Encontrou o que desejava? Então seja educado e marque o tópico como resolvido se sua questão foi esclarecida!

Facilite a vida de todos que aqui passam para procurar/esclarecer suas dúvidas.

0

Compartilhar este post


Link para o post
Compartilhar em outros sites

tenho esse mesmo problema! Porem o que precisava era dar permissoes de administrador apenas para certos programas para o usuário comum. Dessa forma sempre depende do usuário que tem o usuário administrativo ir até o local para e executar como o programa para poder atualiza-lo.

Por exemplo um usuário logado com privilegio de usuário não tem permissao para concluir o Windows update pois é necessário permissao administrativa para isso.

Porem existe uma forma desse mesmo usuário receba essa permissao administrativa apenas para esse programa para que possa concluir a operacao sem que se precise ir alguém até lá e executar como (run as) administrador e continuar executando todas as outras tarefas como usuário comum?

 

Obrigado

 

Rodrigo

0

Compartilhar este post


Link para o post
Compartilhar em outros sites

esta soluçaõ é perfeita, mas como faço para passar a senha do administrador, por exemplo, pela linha de comando? Ou seja, não quero ter que digitar a senha.

0

Compartilhar este post


Link para o post
Compartilhar em outros sites
esta soluçaõ é perfeita, mas como faço para passar a senha do administrador, por exemplo, pela linha de comando? Ou seja, não quero ter que digitar a senha.

É exatamente isso que quero também para executar CABAL e COMBAT ARMS.

Se existe uma forma de deixar um atalho com a senha de admin gravada.


placa-mãe MSI P55-CD53 LGA 1156

Processador Intel Core i7 860 2.80GHz 8MB LGA 1156 Quad-Core Box

Placa de Vídeo EVGA GTS 250 1GB DDR3 256 Bits

Fonte OCZ StealthXStream 700W Reais ATX-EPS ATX 2.2 PFC Ativo

Gabinete ATX Cooler Master Dominator 690 Nvidia Edition Preto s/ fonte

Kit Dual Channel DDR3 Corsair XMS3 4GB ( 2X2GB ) 1333 MHz PC3-10666

2 x HDs - Seagate 250GB / Samsung 500GB

Gravador de DVD-RW GH22NS50 Securdisc 22x SATA Preto

0

Compartilhar este post


Link para o post
Compartilhar em outros sites
    • 6 Mensagens
    • 157 Visualizações
    • 2 Mensagens
    • 104 Visualizações
    • 2 Mensagens
    • 179 Visualizações
    • 4 Mensagens
    • 272 Visualizações
    • 4 Mensagens
    • 288 Visualizações

  • Postagens Recentes

    • Analise de log. - encaminhamento para sites duvidosos
      D54-C023-457F-AF03-497EACB6D519}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057} ***** [ Navegadores ] ***** [-] [C:\Users\Eduardo\AppData\Roaming\Mozilla\Firefox\Profiles\4mdf0zf7.default-1436985977120\prefs.js] Excluída : user_pref("browser.newtab.url", "hxxps://br.yahoo.com/?fr=vmn&type=vmn__webcompa__1_0__ya__hp_WCYID10196_swoc_campaign_151229__yaff");
      [-] [C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Excluído : cmfgjfhhmajdnadjbfflgjjkgdbhihdc ************************* :: Chaves "Tracing" excluídas
      :: Configurações Winsock restauradas ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [4599 bytes] - [29/07/2016 22:38:49]
      C:\AdwCleaner\AdwCleaner[S2].txt - [4524 bytes] - [29/07/2016 22:33:58] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4745 bytes] ##########
        HijackThis Logfile of Trend Micro HijackThis v2.0.4
      Scan saved at 22:59:30, on 29/07/2016
      Platform: Windows 7 SP1 (WinNT 6.00.3505)
      MSIE: Internet Explorer v11.0 (11.00.9600.18123)
      Boot mode: Normal Running processes:
      C:\Program Files\AVAST Software\Avast\AvastUI.exe
      C:\PROGRA~2\GbPlugin\GbpSv.exe
      D:\Documents\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
      F2 - REG:system.ini: UserInit=userinit.exe,
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
      O2 - BHO: Auxiliar de Conexão de Conta da Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
      O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll
      O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
      O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
      O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\ssmmgr.exe /autorun
      O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
      O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
      O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
      O8 - Extra context menu item: Adicionar a AMV/AVI Video Converter... - C:\Program Files (x86)\MediaPlayer Utilities 4.37\AMVConverter\grab.html
      O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
      O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
      O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
      O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
      O15 - Trusted Zone: imagem.caixa.gov.br
      O15 - Trusted Zone: internetbanking.caixa.gov.br
      O15 - Trusted Zone: internetbankingpf.caixa.gov.br
      O15 - Trusted Zone: www.caixa.gov.br
      O15 - Trusted Zone: http://www.caixa.gov.br
      O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
      O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
      O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
      O20 - Winlogon Notify:  GbPluginCef - C:\Program Files (x86)\GbPlugin\gbiehCef.dll
      O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
      O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
      O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
      O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
      O23 - Service: Avast antivírus (avast! antivírus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
      O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
      O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe
      O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
      O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
      O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
      O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
      O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
      O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
      O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
      O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) --
      End of file - 8564 bytes
        -->
    • Análise de logs - encaminhamento para sites duvidosos
      rol\Lsa\GBG]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\JD]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\OSConfig]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Skew1]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache]
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts >
       
      < \UserList >
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN >
      "Anchor_Visitation_Horizon" = 01 00 00 00  [binary data]
      "ApplicationTileImmersiveActivation" = 1
      "AssociationActivationMode" = 0
      "AutoHide" = yes
      "Cache_Percent_of_Disk" = 0A 00 00 00  [binary data]
      "Default_Page_URL" = http://go.microsoft.com/fwlink/p/?LinkId=255141
      "Default_Search_URL" = http://go.microsoft.com/fwlink/?LinkId=54896
      "Default_Secondary_Page_URL" =  [binary data]
      "Delete_Temp_Files_On_Exit" = yes
      "Enable_Disk_Cache" = yes
      "Extensions Off Page" = about:NoAdd-ons
      "Local Page" = C:\Windows\SysWOW64\blank.htm
      "Placeholder_Height" = 1A 00 00 00  [binary data]
      "Placeholder_Width" = 1A 00 00 00  [binary data]
      "Search Page" = http://go.microsoft.com/fwlink/?LinkId=54896
      "Security Risk Page" = about:SecurityRisk
      "Start Page" = http://go.microsoft.com/fwlink/p/?LinkId=255141
      "Use_Async_DNS" = yes
      "x86AppPath" = C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE -- [2016/07/29 09:57:46 | 000,820,416 | ---- | M] (Microsoft Corporation)
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\ErrorThresholds]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\UrlTemplate]
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon >
      "DefaultDomainName" =
      "DefaultUserName" =
      "EnableSIHostIntegration" = 1
      "PreCreateKnownFolders" = {A520A1A4-1780-4FF6-BD18-167343C5AF16}
      "Shell" = explorer.exe -- [2016/07/29 09:57:37 | 004,074,160 | ---- | M] (Microsoft Corporation)
      "ShellCritical" = 0
      "SiHostCritical" = 0
      "SiHostReadyTimeOut" = 0
      "SiHostRestartCountLimit" = 0
      "SiHostRestartTimeGap" = 0
      "Userinit" = C:\WINDOWS\system32\userinit.exe,
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]
       
      < \SpecialAccounts\UserList >
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN >
      "Anchor_Visitation_Horizon" = 01 00 00 00  [binary data]
      "ApplicationTileImmersiveActivation" = 1
      "AssociationActivationMode" = 0
      "AutoHide" = yes
      "Cache_Percent_of_Disk" = 0A 00 00 00  [binary data]
      "Default_Page_URL" = http://go.microsoft.com/fwlink/p/?LinkId=255141
      "Default_Search_URL" = http://go.microsoft.com/fwlink/?LinkId=54896
      "Default_Secondary_Page_URL" =  [binary data]
      "Delete_Temp_Files_On_Exit" = yes
      "Enable_Disk_Cache" = yes
      "Extensions Off Page" = about:NoAdd-ons
      "Local Page" = C:\Windows\SysWOW64\blank.htm
      "Placeholder_Height" = 1A 00 00 00  [binary data]
      "Placeholder_Width" = 1A 00 00 00  [binary data]
      "Search Page" = http://go.microsoft.com/fwlink/?LinkId=54896
      "Security Risk Page" = about:SecurityRisk
      "Start Page" = http://go.microsoft.com/fwlink/p/?LinkId=255141
      "Use_Async_DNS" = yes
      "x86AppPath" = C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE -- [2016/07/29 09:57:46 | 000,820,416 | ---- | M] (Microsoft Corporation)
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\ErrorThresholds]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\UrlTemplate]
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Google\Chrome >
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome >
       
      < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TermService >
      "ImagePath" = %SystemRoot%\System32\svchost.exe -k NetworkService -- [2015/10/30 04:18:25 | 000,037,256 | ---- | M] (Microsoft Corporation)
      "DisplayName" = @%SystemRoot%\System32\termsrv.dll,-268
      "ErrorControl" = 1
      "Start" = 3
      "Type" = 32
      "Description" = @%SystemRoot%\System32\termsrv.dll,-267
      "DependOnService" = RPCSS [binary data]
      "ObjectName" = NT Authority\NetworkService
      "ServiceSidType" = 1
      "RequiredPrivileges" = SeAssignPrimaryTokenPrivilegeSeAu [Binary data over 200 bytes]
      "FailureActions" = 80 51 01 00 00 00 00 00 00 00 00 00 03 00 00 00 14 00 00 00 01 00 00 00 60 EA 00 00 01 00 00 00 60 EA 00 00 00 00 00 00 60 EA 00 00  [binary data]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TermService\Parameters]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TermService\Performance]
       
      < net user /c >
      Contas de usu rio para \\FREEFALL-PC
      -------------------------------------------------------------------------------
      Administrador            Convidado                DefaultAccount          
      FreeFall                
      Comando conclu¡do com ˆxito.
       
      < MD5 for: TERMSRV.DLL  >
      [2014/10/13 23:13:06 | 000,683,520 | ---- | M] (Microsoft Corporation) MD5=008CD4EBFABCF78D0F19B3778492648C -- C:\Windows.old\Windows\System32\termsrv.dll
      [2014/10/13 23:13:06 | 000,683,520 | ---- | M] (Microsoft Corporation) MD5=008CD4EBFABCF78D0F19B3778492648C -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18637_none_ecb2935b6af13c52\termsrv.dll
      [2015/10/30 04:18:18 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=14307D4801C8CEF0A615907C09E886B3 -- C:\WINDOWS\SysNative\termsrv.dll
      [2015/10/30 04:18:18 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=14307D4801C8CEF0A615907C09E886B3 -- C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_10.0.10586.0_none_1b24da20fe9b4a93\termsrv.dll
      [2010/11/21 00:24:07 | 000,680,960 | ---- | M] (Microsoft Corporation) MD5=2E648163254233755035B46DD7B89123 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll
      [2014/07/16 23:07:44 | 000,681,984 | ---- | M] (Microsoft Corporation) MD5=4FC4C50985E5B840F4D72E57286887B8 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18540_none_eca0bf836affa9bb\termsrv.dll
      [2014/10/13 23:16:40 | 000,686,592 | ---- | M] (Microsoft Corporation) MD5=6A5B600AD0041E9AF564DE73B716F3D2 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22843_none_ed2d60f8841a8fd8\termsrv.dll
      [2014/07/16 00:23:41 | 000,686,080 | ---- | M] (Microsoft Corporation) MD5=F4D7114060C034134A440846F411BB7F -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22750_none_ed1f8e488425629d\termsrv.dll
       
      < %systemdrive%\$Recycle.Bin|@;true;true;true /fp >
       
      ========== Alternate Data Streams ==========
       
      @Alternate Data Stream - 10 bytes -> C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt   < End of report > -->
    • Analise de log. - encaminhamento para sites duvidosos
      ; PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\manifest.json, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\bg.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\buildVars, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\buildVars.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\companionSW.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\config.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\contentScript.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\contentScript.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\debug.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\debug.jade, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\extension_toolbar_api.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\initWidgetWindow.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\newTabContentScript.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\options.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent2.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent2.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spentJ.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spentK.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spentK.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\startup.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\stub.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\stubby.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\superFrame.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbar.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbar.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbarUI.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbarUI.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbarUI.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\url.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\webtooltab.cs.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\adapter\adapterUtil.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\adapter\widget-adapter.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\abstractbutton\background\abstractButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\alert\background\alertButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedhtml\background\embedHtmlWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedhtml\html\embedHtmlTemplate.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedhtml\js\embedHtmlUI.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedscript\background\embedScriptWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedscript\html\embedScriptTemplate.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedscript\js\embedScriptUI.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\flare\background\FlareWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\flare\icons\Icon_Flare_blue.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\flare\icons\Icon_Flare_pink.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\flare\icons\Thumbs.db, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\generic\background\GenericWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\link\background\linkButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\README.txt, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\background\menuButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\css\menuframe.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\html\menuframe.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\images\right_arrow.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\images\right_arrow_white.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\js\jquery-1.7.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\js\menuframe.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\js\query-string.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\js\underscore-1.3.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\rss\background\RssWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\thirdparty\background\thirdPartyWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\uninstall\background\uninstallButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\weather\background\weatherButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\bs.30.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\common.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\dynamic.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\enableDetect.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\eventListening.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\global.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\jquery-1.7.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\list-interaction.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\messageEventListener.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\navRedirector.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\paramReplacer.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\PartnerId.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\set.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\underscore-1.3.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\underscore-1.5.2.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\unifiedLogging.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widget-context-1.0.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\common.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\eventListening.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\list-interaction.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\set.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\radio-widget.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\css\radio-widget.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\js\radio-custom.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\js\radio-parser.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\js\radio-widget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\rss\rssWidget.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\rss\js\rss-widget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\invalid.json, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\jquery.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\qunit.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\qunit.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\resource.json, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\resource.xml, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\testWidget.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\testWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\widget.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\css\widget.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\js\topapps-config.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\js\widget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\weather\weatherButton.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\weather\css\weatherButton.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\weather\js\weather.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\background\ApiBasedWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\background\widget-api-impl.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\hiddenWidgetWindow.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\hiddenWidgetWindow.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\hiddenWidgetWindowInit.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\widgetWindow.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\widgetWindow.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\background\updateSearch.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\background\updateSearchPromptBg.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\07_buttons2.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\08_buttons2.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\defaultSearchModal.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\tvf_btn_ok.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\tvf_btn_ok2.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\tvf_restart_icon.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\updateSearchPromptFg.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\moviereviews\background\MovieReviewsWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\moviereviews\css\movieReviews.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\moviereviews\html\movieReviews.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\moviereviews\js\movieReviews.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\background\RadioWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\css\toolbar-item.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\foreground\button.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\radioWrapper\radioWrapper.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\radioWrapper\radioWrapper.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\background\searchBox.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\html\searchSuggestions.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\html\searchSuggestions.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\html\searchSuggestions.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\html\searchSuggestionsInit.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\css\supertab.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\html\supertab.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\newtabfork.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\reporting.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\srchsugg.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\supertab.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\unifiedLogging.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\__utm.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\arrowSprite.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon128.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon16.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon19disabled.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon19on.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon48.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\tb_icon_search_disappearing_ask.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757258.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757267.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757273.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757278.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757282.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757287.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757306.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\224931024.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\225241038.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\230584985.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\down_arrow.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\IDR_PRODUCT_LOGO_16.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\IDR_WEBSTORE_ICON.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\magnifying_glass.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\RadioPlayerSprite.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\search_button.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\tvf_icon_guide.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\tvf_logo.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\wrench.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\chromeUtils.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\companionSWUtils.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\exeManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\exeManagerNMD.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\exePackageManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\focusManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\globalBlacklistManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\messaging.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\mutation_summary-min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\mutation_summary.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\nativeMessagingDispatcher.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\newTabInfo.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\newTabInitialize.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\options.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\readLocalStorage.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\reservespacefortoolbar.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\reservespaceifenabled.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\scriptInjector.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\searchContext.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\settingsOverrides.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\toolbarCookieParser.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\toolbarPreinit.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\underscore-1.3.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\URILoaderContentScript.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\webTooltabAPI.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\Widget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\widgetContentScriptInjectee.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\widgetFactory.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\widgetWindowManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\cache.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\ce.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\debug.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\ss.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\libs\jquery-1.7.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\libs\jquery-1.9.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\libs\underscore-1.5.2.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\activePing.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\buttonLogger.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\competitorDnsList.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\console.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\FFPreferencesPersister.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\httpTransport.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\HttpURL.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\internationalSearch.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\LocalStoragePersister.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\MindsparkGlobal.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\MindsparkGlobal.unitTest.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\MindsparkGlobalNotes.txt, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\rsvp-latest.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\searchSuggestLocale.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\testHttpTransport.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\unifiedLogger.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\unifiedLogging.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\universalConsole.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\utils.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\_metadata\verified_contents.json, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.Spigot, C:\Users\Eduardo\AppData\Roaming\Mozilla\Firefox\Profiles\4mdf0zf7.default-1436985977120\prefs.js, Bom: (), Ruim: (user_pref("keyword.URL", "https://br.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=435371&p=");), ,[9837c564f3a7fa3c7a51425715ef56aa]
      PUP.Optional.Spigot, C:\Users\Eduardo\AppData\Roaming\Mozilla\Firefox\Profiles\4mdf0zf7.default-1436985977120\prefs.js, Bom: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Ruim: (user_pref("browser.startup.homepage", "https://br.search.yahoo.com/?type=435371&fr=spigot-), ,[5e710d1c81190c2a954ec8d7848032ce] Setores físicos: 0
      (Nenhum item malicioso detectado)
      (end) XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX   Log do HijackThis Logfile of Trend Micro HijackThis v2.0.4
      Scan saved at 21:27:04, on 29/07/2016
      Platform: Windows 7 SP1 (WinNT 6.00.3505)
      MSIE: Internet Explorer v11.0 (11.00.9600.18123)
      Boot mode: Normal Running processes:
      C:\PROGRA~2\GbPlugin\GbpSv.exe
      C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
      C:\Program Files\AVAST Software\Avast\AvastUI.exe
      C:\Windows\Samsung\PanelMgr\SSMMgr.exe
      D:\Documents\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
      F2 - REG:system.ini: UserInit=userinit.exe,
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
      O2 - BHO: Auxiliar de Conexão de Conta da Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
      O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll
      O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
      O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
      O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\ssmmgr.exe /autorun
      O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
      O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
      O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
      O8 - Extra context menu item: Adicionar a AMV/AVI Video Converter... - C:\Program Files (x86)\MediaPlayer Utilities 4.37\AMVConverter\grab.html
      O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
      O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
      O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
      O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
      O15 - Trusted Zone: imagem.caixa.gov.br
      O15 - Trusted Zone: internetbanking.caixa.gov.br
      O15 - Trusted Zone: internetbankingpf.caixa.gov.br
      O15 - Trusted Zone: www.caixa.gov.br
      O15 - Trusted Zone: http://www.caixa.gov.br
      O15 - Trusted Zone: http://*.webcompanion.com
      O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
      O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
      O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
      O20 - Winlogon Notify:  GbPluginCef - C:\Program Files (x86)\GbPlugin\gbiehCef.dll
      O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
      O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
      O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
      O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
      O23 - Service: Avast antivírus (avast! antivírus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
      O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
      O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe
      O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
      O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
      O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
      O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
      O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
      O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
      O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
      O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) --
      End of file - 8717 bytes
          -->