Arquivado

Este tópico foi arquivado e está fechado para novas respostas.

virtualbruno

Internet Explorer abre sozinho

4 posts neste tópico

Segue meu Log para analise:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:15:21, on 29/10/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16827)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\TPSrv.exe

C:\WINDOWS\system32\svchost.exe

C:\ARQUIVOS DE PROGRAMAS\PANDA SECURITY\PANDA antivírus PRO 2009\WebProxy.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Arquivos de programas\Arquivos comuns\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Arquivos de programas\Bonjour\mDNSResponder.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe

C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\PsCtrls.exe

C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\PavFnSvr.exe

C:\Arquivos de programas\Arquivos comuns\Panda Security\PavShld\pavprsrv.exe

C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\PsImSvc.exe

c:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PsiService_2.exe

C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\PskSvc.exe

C:\WINDOWS\system32\SnMgrSvc.exe

C:\WINDOWS\system32\svchost.exe

C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\pavsrv51.exe

C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\AVENGINE.EXE

C:\WINDOWS\system32\SnAgOS.exe

C:\WINDOWS\Explorer.exe

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\WINDOWS\system32\SnEngine.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe

C:\Arquivos de programas\Nero\Nero 7\InCD\NBHGui.exe

C:\Arquivos de programas\Nero\Nero 7\InCD\InCD.exe

C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\ApvxdWin.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Arquivos de programas\iTunes\iTunesHelper.exe

C:\Arquivos de programas\DAP\DAP.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\Arquivos de programas\Windows Live\Messenger\MsnMsgr.Exe

C:\Arquivos de programas\iPod\bin\iPodService.exe

C:\Documents and Settings\VIRTUALSERVER\Desktop\Versão Final (Virtual Acess)\LanTimer.exe

C:\Arquivos de programas\Nero\Nero 7\Core\nero.exe

C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

C:\Arquivos de programas\Mozilla Firefox\firefox.exe

C:\Arquivos de programas\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &http://home.Microsoft.com/intl/br/access/allinone.asp

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.Microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.Microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.Microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.Microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://g.live.com/9uxp9en-us/hpg_lnk2

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Arquivos de programas\Arquivos comuns\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\ARQUIV~1\MICROS~2\Office12\GRA8E1~1.DLL

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Arquivos de programas\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [securDisc] C:\Arquivos de programas\Nero\Nero 7\InCD\NBHGui.exe

O4 - HKLM\..\Run: [inCD] C:\Arquivos de programas\Nero\Nero 7\InCD\InCD.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Arquivos de programas\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Arquivos de programas\Arquivos comuns\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Arquivos de programas\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Arquivos de programas\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [APVXDWIN] "C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [sCANINICIO] "C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\Inicio.exe"

O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Arquivos de programas\DAP\DAP.EXE" /STARTUP

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Arquivos de programas\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: hpzrcv01.LNK = ?

O8 - Extra context menu item: &Clean Traces - C:\Arquivos de programas\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download with &DAP - C:\Arquivos de programas\DAP\dapextie.htm

O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Arquivos de programas\MP3 Player Utilities 4.00\AMVConverter\grab.html

O8 - Extra context menu item: Download &all with DAP - C:\Arquivos de programas\DAP\dapextie2.htm

O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\ARQUIV~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Arquivos de programas\MP3 Player Utilities 4.00\MediaManager\grab.html

O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARQUIV~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARQUIV~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARQUIV~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Arquivos de programas\Messenger\msmsgs.exe

O14 - IERESET.INF: SEARCH_PAGE_URL=&http://home.Microsoft.com/intl/br/access/allinone.asp

O17 - HKLM\System\CCS\Services\Tcpip\..\{2CA32EFC-8CEB-4839-AE4C-BAEBE9AD05C4}: NameServer = 208.67.222.222,208.67.220.220

O17 - HKLM\System\CS1\Services\Tcpip\..\{2CA32EFC-8CEB-4839-AE4C-BAEBE9AD05C4}: NameServer = 208.67.222.222,208.67.220.220

O17 - HKLM\System\CS2\Services\Tcpip\..\{2CA32EFC-8CEB-4839-AE4C-BAEBE9AD05C4}: NameServer = 208.67.222.222,208.67.220.220

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\ARQUIV~1\MICROS~2\Office12\GR99D3~1.DLL

O23 - Service: Application Experience Lookup Services (AeLookupSvcs) - Unknown owner - C:\WINDOWS\system32\SVCH0ST.EXE (file missing)

O23 - Service: Dispositivo Celular da Apple (Apple Mobile Device) - Apple Inc. - C:\Arquivos de programas\Arquivos comuns\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Bonjour Service - Apple Inc. - C:\Arquivos de programas\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Arquivos de programas\Arquivos comuns\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Arquivos de programas\Nero\Nero 7\InCD\InCDsrv.exe

O23 - Service: iPod Service - Apple Inc. - C:\Arquivos de programas\iPod\bin\iPodService.exe

O23 - Service: NBService - Nero AG - C:\Arquivos de programas\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Arquivos de programas\Arquivos comuns\Ahead\Lib\NMIndexingService.exe

O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\PsCtrls.exe

O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\PavFnSvr.exe

O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Arquivos de programas\Arquivos comuns\Panda Security\PavShld\pavprsrv.exe

O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\pavsrv51.exe

O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\PsImSvc.exe

O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Arquivos de programas\Arquivos comuns\Protexis\License Service\PsiService_2.exe

O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\PskSvc.exe

O23 - Service: SNMgrSvc - Open Communications Security S/A - C:\WINDOWS\system32\SnMgrSvc.exe

O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Arquivos de programas\Panda Security\Panda antivírus Pro 2009\TPSrv.exe

--

End of file - 10260 bytes

0

Compartilhar este post


Link para o post
Compartilhar em outros sites

Ok, baixe o Malwarebytes' Anti-Malware (MBAM) neste link ou neste aqui.

Dê um duplo-clique no mbam-setup.exe, escolha a linguagem e na instalação, aceite todas as opções padrão.

  • Verifique se as caixas Atualizar Malwarebytes Anti-Malware e Executar Malwarebytes Anti-Malware estão marcadas e clique então, em Concluir.
  • Se houver atualizações a serem feitas, serão baixadas e instaladas.
  • Ao final da atualização, com o programa aberto, marque Verificação Rápida e clique no botão Verificar.
  • Começará então o exame. Aguarde, pois pode demorar.
  • Ao acabar o exame, clique em OK, depois no botão Mostrar Resultados para ver o relatório.
  • Se houver ítens encontrados, certifique-se de que, estão todos marcados e clique no botão Remover.
  • Ao final da desinfecção, abrirá o Bloco de notas com um log e poderá aparecer um aviso se quer reiniciar o PC. (Ver Nota abaixo)
  • O log é automaticamente salvo pelo MBAM e para vê-lo, clique na aba Logs na janela principal do programa.
  • Selecione, copie e cole todo o conteúdo deste log na sua próxima resposta, juntamente com um novo log do HijackThis.

NOTA: Se o MBAM encontrar arquivos que não consiga remover, poderá ter de reiniciar o PC (talvez mais de uma vez). Faça isso imediatamente, ao ser perguntado se quer reiniciar o PC.


 

 

xerl_roums_16.JPG

0

Compartilhar este post


Link para o post
Compartilhar em outros sites
    • 1 Mensagens
    • 58 Visualizações
    • 6 Mensagens
    • 159 Visualizações
    • 3 Mensagens
    • 231 Visualizações
    • 9 Mensagens
    • 376 Visualizações
    • 3 Mensagens
    • 219 Visualizações

  • Postagens Recentes

    • Analise de log. - encaminhamento para sites duvidosos
      #13; [-] Chave Excluída : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{0015CAC9-FC30-4CD0-BFAA-7412CC2C4DD9}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{26C7AFDB-3690-449E-B979-B0AF5CC56DD4}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{3A5A5381-DAAF-4C0D-B032-2C66B3EE4A8D}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{472EF1D2-4AAE-470D-AE85-6AF8177916FD}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{8F010D54-C023-457F-AF03-497EACB6D519}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{9A754403-27B1-4ED7-96D7-588F07888EBF}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{CB31FF8F-BF80-4D2B-ADBE-12C6F5347890}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\CLSID\{FCAA532B-E807-4027-940C-BA16B9D50105}
      [-] Chave Excluída : HKLM\SOFTWARE\Classes\TypeLib\{ED62BC6E-64F1-46BE-866F-4C8DC0DF7057} ***** [ Navegadores ] ***** [-] [C:\Users\Eduardo\AppData\Roaming\Mozilla\Firefox\Profiles\4mdf0zf7.default-1436985977120\prefs.js] Excluída : user_pref("browser.newtab.url", "hxxps://br.yahoo.com/?fr=vmn&type=vmn__webcompa__1_0__ya__hp_WCYID10196_swoc_campaign_151229__yaff");
      [-] [C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Excluído : cmfgjfhhmajdnadjbfflgjjkgdbhihdc ************************* :: Chaves "Tracing" excluídas
      :: Configurações Winsock restauradas ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [4599 bytes] - [29/07/2016 22:38:49]
      C:\AdwCleaner\AdwCleaner[S2].txt - [4524 bytes] - [29/07/2016 22:33:58] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [4745 bytes] ##########
        HijackThis Logfile of Trend Micro HijackThis v2.0.4
      Scan saved at 22:59:30, on 29/07/2016
      Platform: Windows 7 SP1 (WinNT 6.00.3505)
      MSIE: Internet Explorer v11.0 (11.00.9600.18123)
      Boot mode: Normal Running processes:
      C:\Program Files\AVAST Software\Avast\AvastUI.exe
      C:\PROGRA~2\GbPlugin\GbpSv.exe
      D:\Documents\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
      F2 - REG:system.ini: UserInit=userinit.exe,
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
      O2 - BHO: Auxiliar de Conexão de Conta da Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
      O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll
      O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
      O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
      O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\ssmmgr.exe /autorun
      O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
      O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
      O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
      O8 - Extra context menu item: Adicionar a AMV/AVI Video Converter... - C:\Program Files (x86)\MediaPlayer Utilities 4.37\AMVConverter\grab.html
      O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
      O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
      O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
      O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
      O15 - Trusted Zone: imagem.caixa.gov.br
      O15 - Trusted Zone: internetbanking.caixa.gov.br
      O15 - Trusted Zone: internetbankingpf.caixa.gov.br
      O15 - Trusted Zone: www.caixa.gov.br
      O15 - Trusted Zone: http://www.caixa.gov.br
      O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
      O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
      O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
      O20 - Winlogon Notify:  GbPluginCef - C:\Program Files (x86)\GbPlugin\gbiehCef.dll
      O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
      O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
      O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
      O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
      O23 - Service: Avast antivírus (avast! antivírus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
      O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
      O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe
      O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
      O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
      O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
      O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
      O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
      O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
      O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
      O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) --
      End of file - 8564 bytes
        -->
    • Análise de logs - encaminhamento para sites duvidosos
        [binary data]
      "crashonauditfail" = 0
      "LimitBlankPasswordUse" = 1
      "NoLmHash" = 1
      "Notification Packages" = scecli [binary data] -- [2015/10/30 04:18:26 | 000,227,840 | ---- | M] (Microsoft Corporation)
      "Authentication Packages" = msv1_0 [binary data] -- [2016/07/29 09:56:54 | 000,294,752 | ---- | M] (Microsoft Corporation)
      "SecureBoot" = 1
      "disabledomaincreds" = 0
      "everyoneincludesanonymous" = 0
      "forceguest" = 0
      "restrictanonymous" = 0
      "restrictanonymoussam" = 1
      "fullprivilegeauditing" =  [binary data]
      "LsaPid" = 812
      "ProductType" = 3
      "Security Packages" = kerberosmsv1_0schannelwdigestt [Binary data over 200 bytes]
      "SamConnectedAccountsExist" = 1
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Audit]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\CentralizedAccessPolicies]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Credssp]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Data]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\GBG]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\JD]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\OSConfig]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Skew1]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SSO]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\SspiCache]
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts >
       
      < \UserList >
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN >
      "Anchor_Visitation_Horizon" = 01 00 00 00  [binary data]
      "ApplicationTileImmersiveActivation" = 1
      "AssociationActivationMode" = 0
      "AutoHide" = yes
      "Cache_Percent_of_Disk" = 0A 00 00 00  [binary data]
      "Default_Page_URL" = http://go.microsoft.com/fwlink/p/?LinkId=255141
      "Default_Search_URL" = http://go.microsoft.com/fwlink/?LinkId=54896
      "Default_Secondary_Page_URL" =  [binary data]
      "Delete_Temp_Files_On_Exit" = yes
      "Enable_Disk_Cache" = yes
      "Extensions Off Page" = about:NoAdd-ons
      "Local Page" = C:\Windows\SysWOW64\blank.htm
      "Placeholder_Height" = 1A 00 00 00  [binary data]
      "Placeholder_Width" = 1A 00 00 00  [binary data]
      "Search Page" = http://go.microsoft.com/fwlink/?LinkId=54896
      "Security Risk Page" = about:SecurityRisk
      "Start Page" = http://go.microsoft.com/fwlink/p/?LinkId=255141
      "Use_Async_DNS" = yes
      "x86AppPath" = C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE -- [2016/07/29 09:57:46 | 000,820,416 | ---- | M] (Microsoft Corporation)
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\ErrorThresholds]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\UrlTemplate]
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon >
      "DefaultDomainName" =
      "DefaultUserName" =
      "EnableSIHostIntegration" = 1
      "PreCreateKnownFolders" = {A520A1A4-1780-4FF6-BD18-167343C5AF16}
      "Shell" = explorer.exe -- [2016/07/29 09:57:37 | 004,074,160 | ---- | M] (Microsoft Corporation)
      "ShellCritical" = 0
      "SiHostCritical" = 0
      "SiHostReadyTimeOut" = 0
      "SiHostRestartCountLimit" = 0
      "SiHostRestartTimeGap" = 0
      "Userinit" = C:\WINDOWS\system32\userinit.exe,
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]
       
      < \SpecialAccounts\UserList >
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN >
      "Anchor_Visitation_Horizon" = 01 00 00 00  [binary data]
      "ApplicationTileImmersiveActivation" = 1
      "AssociationActivationMode" = 0
      "AutoHide" = yes
      "Cache_Percent_of_Disk" = 0A 00 00 00  [binary data]
      "Default_Page_URL" = http://go.microsoft.com/fwlink/p/?LinkId=255141
      "Default_Search_URL" = http://go.microsoft.com/fwlink/?LinkId=54896
      "Default_Secondary_Page_URL" =  [binary data]
      "Delete_Temp_Files_On_Exit" = yes
      "Enable_Disk_Cache" = yes
      "Extensions Off Page" = about:NoAdd-ons
      "Local Page" = C:\Windows\SysWOW64\blank.htm
      "Placeholder_Height" = 1A 00 00 00  [binary data]
      "Placeholder_Width" = 1A 00 00 00  [binary data]
      "Search Page" = http://go.microsoft.com/fwlink/?LinkId=54896
      "Security Risk Page" = about:SecurityRisk
      "Start Page" = http://go.microsoft.com/fwlink/p/?LinkId=255141
      "Use_Async_DNS" = yes
      "x86AppPath" = C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE -- [2016/07/29 09:57:46 | 000,820,416 | ---- | M] (Microsoft Corporation)
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\ErrorThresholds]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl]
       
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\UrlTemplate]
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Google\Chrome >
       
      < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome >
       
      < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TermService >
      "ImagePath" = %SystemRoot%\System32\svchost.exe -k NetworkService -- [2015/10/30 04:18:25 | 000,037,256 | ---- | M] (Microsoft Corporation)
      "DisplayName" = @%SystemRoot%\System32\termsrv.dll,-268
      "ErrorControl" = 1
      "Start" = 3
      "Type" = 32
      "Description" = @%SystemRoot%\System32\termsrv.dll,-267
      "DependOnService" = RPCSS [binary data]
      "ObjectName" = NT Authority\NetworkService
      "ServiceSidType" = 1
      "RequiredPrivileges" = SeAssignPrimaryTokenPrivilegeSeAu [Binary data over 200 bytes]
      "FailureActions" = 80 51 01 00 00 00 00 00 00 00 00 00 03 00 00 00 14 00 00 00 01 00 00 00 60 EA 00 00 01 00 00 00 60 EA 00 00 00 00 00 00 60 EA 00 00  [binary data]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TermService\Parameters]
       
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TermService\Performance]
       
      < net user /c >
      Contas de usu rio para \\FREEFALL-PC
      -------------------------------------------------------------------------------
      Administrador            Convidado                DefaultAccount          
      FreeFall                
      Comando conclu¡do com ˆxito.
       
      < MD5 for: TERMSRV.DLL  >
      [2014/10/13 23:13:06 | 000,683,520 | ---- | M] (Microsoft Corporation) MD5=008CD4EBFABCF78D0F19B3778492648C -- C:\Windows.old\Windows\System32\termsrv.dll
      [2014/10/13 23:13:06 | 000,683,520 | ---- | M] (Microsoft Corporation) MD5=008CD4EBFABCF78D0F19B3778492648C -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18637_none_ecb2935b6af13c52\termsrv.dll
      [2015/10/30 04:18:18 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=14307D4801C8CEF0A615907C09E886B3 -- C:\WINDOWS\SysNative\termsrv.dll
      [2015/10/30 04:18:18 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=14307D4801C8CEF0A615907C09E886B3 -- C:\Windows\WinSxS\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_10.0.10586.0_none_1b24da20fe9b4a93\termsrv.dll
      [2010/11/21 00:24:07 | 000,680,960 | ---- | M] (Microsoft Corporation) MD5=2E648163254233755035B46DD7B89123 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_ecc547376ae3a1a3\termsrv.dll
      [2014/07/16 23:07:44 | 000,681,984 | ---- | M] (Microsoft Corporation) MD5=4FC4C50985E5B840F4D72E57286887B8 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18540_none_eca0bf836affa9bb\termsrv.dll
      [2014/10/13 23:16:40 | 000,686,592 | ---- | M] (Microsoft Corporation) MD5=6A5B600AD0041E9AF564DE73B716F3D2 -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22843_none_ed2d60f8841a8fd8\termsrv.dll
      [2014/07/16 00:23:41 | 000,686,080 | ---- | M] (Microsoft Corporation) MD5=F4D7114060C034134A440846F411BB7F -- C:\Windows.old\Windows\winsxs\amd64_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22750_none_ed1f8e488425629d\termsrv.dll
       
      < %systemdrive%\$Recycle.Bin|@;true;true;true /fp >
       
      ========== Alternate Data Streams ==========
       
      @Alternate Data Stream - 10 bytes -> C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt   < End of report > -->
    • Analise de log. - encaminhamento para sites duvidosos
      1.9.61533_0\icons, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\libs, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\_metadata, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh, , [bd128e9b4c4ebc7a8b452f6b010314ec],  Arquivos: 239
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\manifest.json, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\bg.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\buildVars, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\buildVars.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\companionSW.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\config.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\contentScript.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\contentScript.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\debug.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\debug.jade, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\extension_toolbar_api.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\initWidgetWindow.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\newTabContentScript.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\options.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent2.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spent2.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spentJ.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spentK.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\spentK.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\startup.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\stub.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\stubby.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\superFrame.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbar.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbar.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbarUI.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbarUI.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\toolbarUI.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\url.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\webtooltab.cs.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\adapter\adapterUtil.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\adapter\widget-adapter.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\abstractbutton\background\abstractButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\alert\background\alertButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedhtml\background\embedHtmlWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedhtml\html\embedHtmlTemplate.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedhtml\js\embedHtmlUI.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedscript\background\embedScriptWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedscript\html\embedScriptTemplate.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\embedscript\js\embedScriptUI.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\flare\background\FlareWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\flare\icons\Icon_Flare_blue.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\flare\icons\Icon_Flare_pink.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\flare\icons\Thumbs.db, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\generic\background\GenericWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\link\background\linkButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\README.txt, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\background\menuButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\css\menuframe.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\html\menuframe.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\images\right_arrow.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\images\right_arrow_white.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\js\jquery-1.7.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\js\menuframe.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\js\query-string.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\menu\js\underscore-1.3.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\rss\background\RssWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\thirdparty\background\thirdPartyWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\uninstall\background\uninstallButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\components\weather\background\weatherButton.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\bs.30.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\common.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\dynamic.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\enableDetect.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\eventListening.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\global.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\jquery-1.7.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\list-interaction.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\messageEventListener.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\navRedirector.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\paramReplacer.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\PartnerId.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\set.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\underscore-1.3.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\underscore-1.5.2.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\js\unifiedLogging.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widget-context-1.0.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\common.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\eventListening.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\list-interaction.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\set.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\radio-widget.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\css\radio-widget.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\js\radio-custom.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\js\radio-parser.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\radio\js\radio-widget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\rss\rssWidget.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\rss\js\rss-widget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\invalid.json, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\jquery.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\qunit.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\qunit.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\resource.json, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\resource.xml, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\testWidget.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\test\testWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\widget.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\css\widget.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\js\topapps-config.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\topapps\js\widget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\weather\weatherButton.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\weather\css\weatherButton.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\common\widget-api\widgets\weather\js\weather.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\background\ApiBasedWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\background\widget-api-impl.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\hiddenWidgetWindow.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\hiddenWidgetWindow.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\hiddenWidgetWindowInit.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\widgetWindow.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\api\window\widgetWindow.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\background\updateSearch.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\background\updateSearchPromptBg.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\07_buttons2.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\08_buttons2.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\defaultSearchModal.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\tvf_btn_ok.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\tvf_btn_ok2.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\tvf_restart_icon.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\defaultSearch\foreground\updateSearchPromptFg.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\moviereviews\background\MovieReviewsWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\moviereviews\css\movieReviews.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\moviereviews\html\movieReviews.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\moviereviews\js\movieReviews.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\background\RadioWidget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\css\toolbar-item.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\foreground\button.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\radioWrapper\radioWrapper.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\radio\radioWrapper\radioWrapper.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\background\searchBox.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\html\searchSuggestions.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\html\searchSuggestions.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\html\searchSuggestions.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\search\html\searchSuggestionsInit.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\css\supertab.css, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\html\supertab.html, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\newtabfork.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\reporting.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\srchsugg.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\supertab.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\unifiedLogging.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\components\supertab\js\__utm.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\arrowSprite.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon128.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon16.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon19disabled.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon19on.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\icon48.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\icons\tb_icon_search_disappearing_ask.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757258.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757267.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757273.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757278.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757282.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757287.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\223757306.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\224931024.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\225241038.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\230584985.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\down_arrow.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\IDR_PRODUCT_LOGO_16.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\IDR_WEBSTORE_ICON.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\magnifying_glass.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\RadioPlayerSprite.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\search_button.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\tvf_icon_guide.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\tvf_logo.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\images\wrench.png, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\chromeUtils.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\companionSWUtils.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\exeManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\exeManagerNMD.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\exePackageManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\focusManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\globalBlacklistManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\messaging.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\mutation_summary-min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\mutation_summary.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\nativeMessagingDispatcher.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\newTabInfo.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\newTabInitialize.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\options.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\readLocalStorage.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\reservespacefortoolbar.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\reservespaceifenabled.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\scriptInjector.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\searchContext.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\settingsOverrides.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\toolbarCookieParser.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\toolbarPreinit.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\underscore-1.3.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\URILoaderContentScript.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\webTooltabAPI.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\Widget.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\widgetContentScriptInjectee.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\widgetFactory.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\js\widgetWindowManager.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\cache.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\ce.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\debug.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\ss.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\libs\jquery-1.7.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\libs\jquery-1.9.1.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\native\libs\underscore-1.5.2.min.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\activePing.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\buttonLogger.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\competitorDnsList.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\console.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\FFPreferencesPersister.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\httpTransport.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\HttpURL.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\internationalSearch.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\LocalStoragePersister.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\MindsparkGlobal.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\MindsparkGlobal.unitTest.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\MindsparkGlobalNotes.txt, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\rsvp-latest.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\searchSuggestLocale.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\testHttpTransport.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\unifiedLogger.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\unifiedLogging.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\universalConsole.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\shared\utils.js, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.MindSpark, C:\Users\Eduardo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgplhcfmaadpnkmnkhgadmaekeldbnh\12.41.9.61533_0\_metadata\verified_contents.json, , [bd128e9b4c4ebc7a8b452f6b010314ec], 
      PUP.Optional.Spigot, C:\Users\Eduardo\AppData\Roaming\Mozilla\Firefox\Profiles\4mdf0zf7.default-1436985977120\prefs.js, Bom: (), Ruim: (user_pref("keyword.URL", "https://br.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=435371&p=");), ,[9837c564f3a7fa3c7a51425715ef56aa]
      PUP.Optional.Spigot, C:\Users\Eduardo\AppData\Roaming\Mozilla\Firefox\Profiles\4mdf0zf7.default-1436985977120\prefs.js, Bom: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Ruim: (user_pref("browser.startup.homepage", "https://br.search.yahoo.com/?type=435371&fr=spigot-), ,[5e710d1c81190c2a954ec8d7848032ce] Setores físicos: 0
      (Nenhum item malicioso detectado)
      (end) XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX   Log do HijackThis Logfile of Trend Micro HijackThis v2.0.4
      Scan saved at 21:27:04, on 29/07/2016
      Platform: Windows 7 SP1 (WinNT 6.00.3505)
      MSIE: Internet Explorer v11.0 (11.00.9600.18123)
      Boot mode: Normal Running processes:
      C:\PROGRA~2\GbPlugin\GbpSv.exe
      C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
      C:\Program Files\AVAST Software\Avast\AvastUI.exe
      C:\Windows\Samsung\PanelMgr\SSMMgr.exe
      D:\Documents\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
      F2 - REG:system.ini: UserInit=userinit.exe,
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
      O2 - BHO: Auxiliar de Conexão de Conta da Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
      O2 - BHO: G-Buster Browser Defense CEF - {C41A1C0E-EA6C-11D4-B1B8-444553540003} - C:\Program Files (x86)\GbPlugin\gbiehcef.dll
      O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
      O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
      O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\ssmmgr.exe /autorun
      O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
      O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
      O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~1\MICROS~2\Office15\ONBttnIE.dll/105
      O8 - Extra context menu item: Adicionar a AMV/AVI Video Converter... - C:\Program Files (x86)\MediaPlayer Utilities 4.37\AMVConverter\grab.html
      O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
      O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
      O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
      O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
      O15 - Trusted Zone: imagem.caixa.gov.br
      O15 - Trusted Zone: internetbanking.caixa.gov.br
      O15 - Trusted Zone: internetbankingpf.caixa.gov.br
      O15 - Trusted Zone: www.caixa.gov.br
      O15 - Trusted Zone: http://www.caixa.gov.br
      O15 - Trusted Zone: http://*.webcompanion.com
      O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
      O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
      O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
      O20 - Winlogon Notify:  GbPluginCef - C:\Program Files (x86)\GbPlugin\gbiehCef.dll
      O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
      O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
      O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
      O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
      O23 - Service: Avast antivírus (avast! antivírus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
      O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
      O23 - Service: Gbp Service (GbpSv) - GAS Tecnologia - C:\PROGRA~2\GbPlugin\GbpSv.exe
      O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
      O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
      O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
      O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
      O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
      O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
      O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
      O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
      O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) --
      End of file - 8717 bytes
          -->