Este fórum foi descontinuado. LEIA AQUI e participe da Comunidade BABOO :)

A área de Remoção de Malwares está aberta na Comunidade BABOO. LEIA AQUI

Ir para conteúdo
bolha001

Solicitação de Análise de Logs

Mensagem Recomendada

Já fiz todos os procedimentos solicitados no Tópico Oficial.

O meu problema é: O Notebook começa a travar e tem picos de usos de CPU e MEMÓRIA, sempre ao usar o GOOGLE CHROME. Retorna ao normal imediatamente após eu fechar o CHROME.

Segue meu log para exame: 

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:17:14, on 03/06/2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
C:\ProgramData\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Dropbox\Client\73.4.118\QtWebEngineProcess.exe
C:\Program Files (x86)\Dropbox\Client\73.4.118\QtWebEngineProcess.exe
C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: ContentBlockerBrowserHelperObject - {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: VirtualKeyboardBrowserHelperObject - {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll
O2 - BHO: Safe Money Plugin - {E3D96E85-529D-4269-AC6A-97CF9E2221E3} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\Usuario\AppData\Local\Apps\2.0\BCP4AW1C.CWK\PAX8B8TD.Y9Y\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe
O4 - HKCU\..\RunOnce: [Delete Cached Update Binary] C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
O4 - HKCU\..\RunOnce: [Delete Cached Standalone Update Binary] C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SISTEMA')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: EvernoteTray.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Capturar esta página - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Capturar favorito - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: Capturar imagem - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Capturar seleção - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Nova nota - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O9 - Extra button: Teclado virtual - {09A10376-994C-4BBF-9121-F50CF7BA237E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: www.bancobrasil.com.br
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: aapj.bb.com.br
O15 - Trusted Zone: seg.bb.com.br
O15 - Trusted Zone: www.bb.com.br
O15 - Trusted Zone: http://www.bb.com.br
O15 - Trusted Zone: imagem.caixa.gov.br
O15 - Trusted Zone: internetbanking.caixa.gov.br
O15 - Trusted Zone: internetbankingpf.caixa.gov.br
O15 - Trusted Zone: www.caixa.gov.br
O15 - Trusted Zone: http://www.caixa.gov.br
O15 - Trusted Zone: *.dell.com
O15 - Trusted Zone: cloud.gastecnologia.com.br
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Serviço do Kaspersky Anti-Virus 15.0.1 (AVP15.0.1) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
O23 - Service: Box Sync Update Service (BoxSyncUpdateService) - Box, Inc. - C:\Program Files\Box\Box Sync\SyncUpdaterService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\elevation_service.exe
O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Warsaw Technology - GAS Tecnologia LTDA - C:\Program Files\Diebold\Warsaw\core.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe

--
End of file - 17207 bytes
 

Compartilhar este post


Link para o post
Compartilhar em outros sites

Desative temporariamente seu Antivírus.

Baixe o ZHPCleaner e salve no Desktop. (Área de Trabalho)

Usuários do Windows 7, 8, 8.1 ou 10: clique com o botão direito do mouse no ícone do Programa e selecione  executar-como-administrador.png

Dê um duplo-clique sobre o ZHPCleaner.exe.

Clique no botão Scanner.

A Ferramenta comecará o exame do seu Sistema. Tenha paciência pois pode demorar um pouco dependendo da quantidades de itens a examinar.

Ao final da Verificação, clique no botão Reparar.

Concluída a operação, um Log se abrirá. Caso isso não aconteça, clique no botão Relatório e salve o Log.

Selecione, copie e cole o conteúdo deste Log na sua próxima resposta + um novo Log do HijackThis.


assinatura-mrmillion.png65301516_windows-insider-mvp-logo(Custom).png.36263cb7b506cc6935fb37f39e504cec.png

Compartilhar este post


Link para o post
Compartilhar em outros sites

Procedimento efetuado...segue Log do ZHP

~ ZHPCleaner v2019.6.1.80 by Nicolas Coolman (2019/06/01)
~ Run by Usuario (Administrator)  (04/06/2019 11:52:52)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Repair
~ Report : C:\Users\Usuario\Desktop\ZHPCleaner (R).txt
~ Quarantine : C:\Users\Usuario\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601)


---\\  Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.


---\\  Services (0)
~ No malicious or unnecessary items found.


---\\  Browser internet (0)
~ No malicious or unnecessary items found.


---\\  Hosts file (1)
~ The hosts file is legitimate (10)


---\\  Scheduled automatic tasks. (1)
DELETED task: [AutoKMS] [C:\Windows\Tasks\AutoKMS.job (Not File) ]  =>HackTool.AutoKMS


---\\  Explorer ( File, Folder) (265)
MOVED file: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\zy2o0a2z.default\searchplugins\Search Provided by Bing.xml    =>.SUP.SearchProvided
MOVED file: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\zy2o0a2z.default\searchplugins\yahoo! powered.xml    =>Adware.YahooPowered
MOVED file: C:\Windows\Tasks\AutoKMS.job    =>HackTool.AutoKMS
MOVED file: C:\Windows\Prefetch\AUTOKMS.EXE-7CC2D49E.pf    =>HackTool.AutoKMS
MOVED file: C:\Windows\Installer\wix{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{62F029AB-85F2-0000-866A-9FC0DD99DDBC}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{A05FDFEC-4377-49E0-82CB-B6D1386E89DA}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{B5E06417-A4AC-4225-B36E-7E34C91616E7}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\MSI9CC0.tmp    =>.SUP.MSIInstaller
MOVED file^: C:\Users\Usuario\AppData\Local\Temp\aria-debug-5200.log    =>.SUP.Temporary.OneDrive
MOVED file: C:\Users\Usuario\AppData\Local\Temp\aria-debug-7116.log    =>.SUP.Temporary.OneDrive
MOVED file^: C:\Users\Usuario\AppData\Local\Temp\Evernote_exe_PID3552_201963_224250004083a.lock    =>.SUP.Temporary.Empty
MOVED file: C:\Users\Usuario\AppData\Local\Temp\FXSTIFFDebugLogFile.txt    =>.SUP.Temporary.Empty
MOVED file: C:\Users\Usuario\AppData\Local\Temp\wct173A.tmp    =>.SUP.Temporary.Office
MOVED file: C:\Users\Usuario\AppData\Local\Temp\wctED0E.tmp    =>.SUP.Temporary.Office
MOVED file: C:\Users\Usuario\AppData\Local\Temp\wctF324.tmp    =>.SUP.Temporary.Office
MOVED file: C:\Windows\AutoKMS\AutoKMS.log    =>HackTool.AutoKMS
MOVED file: C:\Program Files\MyCam\MyCam.exe [Copyright 2009 - Web Cam Module]  =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files\WinRAR\WinRAR.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Imobzi Nuvem\IMOBZI.exe [Quickfast Software House - ]  =>.SUP.Orphan.MUICache
MOVED file: C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe [BitTorrent Inc. - µTorrent]  =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Free YouTube Downloader Converter\YoutubeConverter.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Hp\HPSSUPPLY\hpqSSupply.exe [(c) 2006, Hewlett-Packard Development Company L.P.. A - Hewlett-Packard Development Company L.P.]  =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Ministério do Meio Ambiente\CAR - Off-Line\CarDesktop.exe [ - CarDesktop]  =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\KXOPT Monitor\service.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Ministério do Meio Ambiente\CAR - Off-Line\server\services\node_modules\topcube\bin\cefclient\cefclient.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Hp\Diagnostics\PSDR\HPPSDr.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files\Google\Drive\googledrivesync.exe    =>.SUP.Orphan.MUICache
MOVED folder: C:\Program Files\FileViewPro  =>.SUP.Solvusoft
MOVED folder: C:\ProgramData\AMMYY  =>.SUP.Ammyy
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro  =>.SUP.Solvusoft
MOVED folder: C:\Windows\AutoKMS  =>HackTool.AutoKMS
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\000  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\001  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\003  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\005  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\006  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\007  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\008  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\009  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\010  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\011  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\012  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\013  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\014  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\015  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\016  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\017  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\018  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\019  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\020  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\021  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\022  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\023  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\024  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\025  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins  =>.SUP.Temporary.Chrome
MOVED folder: C:\Program Files (x86)\QuickTime  =>Riskware.QuickTime
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime  =>Riskware.QuickTime
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Update  =>Heuristic.Suspect
MOVED folder: C:\Users\Usuario\AppData\Local\Microsoft Toolkit  =>HackTool.AutoKMS
MOVED folder: C:\Windows\Installer\MSI140E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1409.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1574.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI15C3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI166B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI19D8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI19E6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1CE4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1DE3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1E91.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2217.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI22A2.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2508.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI257B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2598.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI26E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI26F5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2890.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI293F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI29D3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI29FE.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2B47.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2BFF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3289.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3327.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3394.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3504.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI369E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI36BB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI378D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI384A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3899.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI38C7.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3924.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI39CD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI39E3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3A39.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3B07.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3B1B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3B56.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3CEB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3E51.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3E6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3F05.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3FEA.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4151.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4163.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI41E9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI420F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4372.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI43A4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI44FE.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI44F4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI456E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI46FC.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4741.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI48B3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI48D9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI48D9.tmp-0  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4AD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4CB3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4D62.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4F1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4FA0.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI52CD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI535B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI53C9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI53E1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5459.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI54AA.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5597.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI55DE.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI55E1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI567D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI58B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5A30.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5BB5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5C0E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5C16.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5D66.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5D83.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5E3B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5E5A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI616B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI6226.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI62D4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI639C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI6486.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI64AF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI64B5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI65C1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI65FD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI6692.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI6713.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI67FF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI68BD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI69E5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI708.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI71BD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI72AF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI73D0.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7454.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7581.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7601.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI76C8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI77EA.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7927.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI793.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7A8B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7B68.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7BF8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7C10.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7C67.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7D25.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7DD5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI827C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8357.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8357.tmp-0  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI84EF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI85A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI85F9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8656.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI88C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI892C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8957.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8A2E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8C46.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8D1F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8D4D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8E3B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8EB6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8FA6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI902F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI908.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI90BC.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI912C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI91E7.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI99C5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI99D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA0C6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA28F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA485.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA8D6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA9B0.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIAD7E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIADCB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIAE6A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIAEA0.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIAFEF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB0D4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB119.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB172.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB3A7.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB5D4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB629.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB762.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIBA0D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIBC83.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIBEA8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIBF9B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIC63F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIC7CB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSICA8A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID18A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID3BC.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID3C1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID52A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID579.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID5E4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID5E3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID663.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID759.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID889.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID928.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIDDCA.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE057.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE1B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE1D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE30D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE316.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE3CB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE6E8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIEB18.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIEF3E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF15C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF1A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF2A1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF2AB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF453.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF495.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF4DF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF6EB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF86D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF890.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF8DC.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF93C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF9B6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIFB11.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIFB2.tmp-  =>.SUP.Empty
MOVED folder: C:\Users\Usuario\AppData\LocalLow\Intel  =>.SUP.Empty
MOVED folder: C:\Users\Usuario\AppData\LocalLow\VDownloader  =>.SUP.Empty


---\\  Registry ( Key, Value, Data) (332)
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1[...]] [Yahoo! Powered]  =>Adware.YahooPowered
DELETED key: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1[...]] [Yahoo! Powered]  =>Adware.YahooPowered
DELETED key: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1[...]] [Yahoo! Powered]  =>Adware.YahooPowered
DELETED key**: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}]  =>Adware.YahooPowered
DELETED key**: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}]  =>Adware.YahooPowered
DELETED key**: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}]  =>Adware.YahooPowered
DELETED key*: HKEY_USERS\S-1-5-21-2073883679-1445547909-3807002837-1000\SOFTWARE\Ammyy []  =>.SUP.Ammyy
DELETED key*: HKEY_USERS\S-1-5-21-2073883679-1445547909-3807002837-1000\SOFTWARE\drpsu []  =>.SUP.DriverPack
DELETED key*: HKEY_USERS\.DEFAULT\Software\Ammyy []  =>.SUP.Ammyy
DELETED key**: HKCU\Software\Ammyy []  =>.SUP.Ammyy
DELETED key**: HKCU\Software\drpsu []  =>.SUP.DriverPack
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent [BitTorrent Inc.]  =>BitTorrent (P2P)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library]  =>Adware.OpenCandy
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 []  =>.SUP.ByteFence
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS []  =>.SUP.ByteFence
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileViewPro_is1 [Solvusoft Corporation]  =>.SUP.Solvusoft
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1 [Vitzo Limited]  =>Adware.OpenCandy
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Ammyy []  =>.SUP.Ammyy
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool]  =>Toolbar.Ask
DELETED key**: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library]  =>Adware.OpenCandy
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ByteFenceScan_RASAPI32 []  =>.SUP.ByteFence
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ByteFenceScan_RASMANCS []  =>.SUP.ByteFence
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\MyCam\MyCam.exe [Web Cam Module]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Skype\Phone\Skype.exe [Skype ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [Google Chrome]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Evernote\Evernote\Evernote.exe [Evernote]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\AVAST Software\Avast\AvastUI.exe [avast! antivírus]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [Google Earth]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Everything\Everything.exe [Everything]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Windows Photo Viewer\PhotoViewer.dll [Visualizador de Fotos do Windows]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Windows\eHome\ehshell.exe [Windows Media Center]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\PROGRA~2\MICROS~1\Office14\OIS.EXE [Microsoft Office 2010]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe [TeamViewer 9]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\PROGRAMS\CORELPP.EXE [Corel PHOTO-PAINT(R)]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll [Visualizador de Fotos do Windows]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\PROGRAMS\CORELDRW.EXE [CorelDRAW(R)]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe [Adobe Reader ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Internet Explorer\iexplore.exe [Internet Explorer]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\iTunes\iTunes.exe [iTunes]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe [MPC-HC]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [Microsoft Word]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Windows Media Player\wmplayer.exe [Windows Media Player]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Windows NT\Accessories\WORDPAD.EXE [WordPad]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\IrfanView\i_view32.exe [IrfanView]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Windows Media Player\wmplayer.exe [Windows Media Player]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Winamp\winamp.exe [Winamp]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [DAEMON Tools Lite]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\WinRAR\WinRAR.exe [WinRAR archiver]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Windows\Explorer.exe [Windows Explorer]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\picasa39-setup.exe [Picasa]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\ProgramData\rvlkl\rvlkl.exe [Revealer Keylogger Free]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\BlueStacks-ThinInstaller.exe [BlueStacks Thin Installer]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE [Microsoft Excel]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\GoogleEarthProWin.exe [GoogleEarthProWin.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\kis15.0.0.463PT_6307.exe [Kaspersky Internet Security [15.0.0.463.0.226.0]]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Desktop\Licença Kaspersky Interney Security 2015.exe [Licença Kaspersky Interney Security 2015.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Desktop\KIS 2015\OPTIONAL-OPCIONAL\Reset Trial 30 days always.exe [Reset Trial 30 days always.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe [Kaspersky Anti-Virus]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Freemake\Freemake Video Converter\FreemakeVC.exe [Freemake Video Converter]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE [WordPad]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Imobzi Nuvem\IMOBZI.exe [IMOBZI.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe [µTorrent]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Google\Google Earth Pro\client\googleearth.exe [Google Earth]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Free YouTube Downloader Converter\YoutubeConverter.exe [YoutubeConverter.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\GoogleEarthProSetup (1).exe [Google Update Setup]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\GoogleEarthProSetup.exe [Google Update Setup]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Hp\HPSSUPPLY\hpqSSupply.exe [Hewlett-Packard Development Company L.P.]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Ministério do Meio Ambiente\CAR - Off-Line\CarDesktop.exe [CarDesktop]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\CAR.exe [CAR.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\KXOPT Monitor\service.exe [service.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\GoProStudioPC-2.5.7.549.exe [GoPro Studio 2.5.7]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\Receitanet-1.07.exe [Instalador do Receitanet 1.07]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\iGBPCEFgb.exe [Instalação do Módulo Adicional de Segurança CAIXA]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Ministério do Meio Ambiente\CAR - Off-Line\server\services\node_modules\topcube\bin\cefclient\cefclient.exe [cefclient.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\Cloudfogger_Setup.exe [Cloudfogger Setup                                           ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe [Foxit Reader 7.3]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\iTunes\iTunes.exe [iTunes]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe [QuickTime Player]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\G:\HD SAMSUNG\Instaladores\KIS 2015\Licença Kaspersky Interney Security 2015.exe [Licença Kaspersky Interney Security 2015]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\setuplotefacil.exe [LoteFácil Setup                                             ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE [Microsoft PowerPoint]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Wondershare\Wondershare Filmora (Portuguese)\Filmora.exe [Wondershare Filmora]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\freedvdcreator.exe [Free DVD Creator (by minidvdsoft) Setup                     ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Hp\Diagnostics\PSDR\HPPSDr.exe [HP Webpack]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC64\mpc-hc64.exe [MPC-HC x64]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\AppData\Local\SquirrelTemp\Update.exe [Update]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\FormatFactory\FormatFactory.exe [FormatFactory]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Documents\GoogleEarthProSetup.exe [Google Update Setup]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Documents\Kaspersky 2015 ativado até 25-08-2017.exe [KIS15.0.1.415MR1_ES_RePack by WH33L3R]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Windows\SysWOW64\mspaint.exe [Paint]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcLauncher.exe [AutoCAD DWG Launcher]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Autodesk\AutoCAD 2014\acad.exe [AutoCAD Application]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\installbackupandsync.exe [Google Update Setup]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Google\Drive\googledrivesync.exe [googledrivesync.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\R.G. Mechanics\Grand Theft Auto V\GTA5.exe [Grand Theft Auto V]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\AppData\Roaming\Foxit Software\Addon\Foxit Reader\FoxitReaderUpdater.exe [Foxit Updater]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\CMSSetup_1.0.0.52.exe [CMSSetup_1.0.0.52.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\Baixaki_TuneUp Utilities_0921116176.exe [Prog Setup                                                  ]  =>.SUP.Orphan.MUICache
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Java\jre1.8.0_51\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\ProgramData\Kaspersky Lab\AVP15.0.2\Data\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\LUTs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\CineFormAdobePlugins\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\QuickTimeCodec\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Logs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\x64\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\x86\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ar-SA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\bg-BG\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\cs-CZ\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\da-DK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\de-DE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\el-GR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\en-US\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\es-ES\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\et-EE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\fi-FI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\fr-FR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\he-IL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\hr-HR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\hu-HU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\it-IT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ja-JP\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ko-KR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\lt-LT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\lv-LV\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\nb-NO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\nl-NL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\pl-PL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\pt-BR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\pt-PT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ro-RO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ru-RU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\sk-SK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\sl-SI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\sr-BA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\sv-SE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\th-TH\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\tr-TR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\uk-UA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\zh-CN\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\zh-HK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\zh-TW\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Ceement\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Ceement\src\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ar-SA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\bg-BG\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\cs-CZ\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\da-DK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\de-DE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\el-GR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\en-US\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\es-ES\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\et-EE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\fi-FI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\fr-FR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\he-IL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\hr-HR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\hu-HU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\it-IT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ja-JP\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ko-KR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\lt-LT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\lv-LV\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\nb-NO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\nl-NL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\pl-PL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\pt-BR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\pt-PT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ro-RO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ru-RU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\sk-SK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\sl-SI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\sr-BA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\sv-SE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\th-TH\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\tr-TR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\uk-UA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\zh-CN\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\zh-HK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\zh-TW\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Warranty\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Contact\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ar-SA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\bg-BG\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\cs-CZ\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\da-DK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\de-DE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\el-GR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\en-US\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\es-ES\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\et-EE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\fi-FI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\fr-FR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\he-IL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\hr-HR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\html_pages_files\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\hu-HU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\it-IT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ja-JP\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ko-KR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\lt-LT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\lv-LV\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\nb-NO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\nl-NL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\pl-PL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\pt-BR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\pt-PT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ro-RO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ru-RU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\sk-SK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\sl-SI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\sr-BA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\sv-SE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\th-TH\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\tr-TR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\uk-UA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\zh-CN\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\zh-HK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ZH-TW\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Dezide\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Notifications\ [No Folder]  =>.SUP.Obsolete.NoFolder


---\\  Summary of the elements found (20)
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/  =>HackTool.AutoKMS
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.SearchProvided
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>Adware.YahooPowered
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.MSIInstaller
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Temporary.OneDrive
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Temporary.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Temporary.Office
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Orphan.MUICache
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Solvusoft
https://nicolascoolman.eu/2017/04/13/superfluous-ammyy/  =>.SUP.Ammyy
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Temporary.Chrome
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/  =>Riskware.QuickTime
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/  =>Heuristic.Suspect
https://nicolascoolman.eu/2018/07/04/sup-driverpack/  =>.SUP.DriverPack
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>BitTorrent (P2P)
https://nicolascoolman.eu/2017/02/24/adware-opencandy/  =>Adware.OpenCandy
https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/  =>.SUP.ByteFence
https://nicolascoolman.eu/2017/02/28/toolbar-ask/  =>Toolbar.Ask
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Obsolete.NoFolder


---\\  Other deletions. (253)
~ Registry Keys Tracing deleted (253)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)
~ The system has been restarted.


---\\ Statistics
~ Items scanned : 1215
~ Items found : 0
~ Items cancelled : 0
~ Items options : 12/12
~ Space saving (bytes) : 31463040


~ End of clean in 00h01mn19s

---\\  Reports (2)
ZHPCleaner--04062019-11_18_09.txt
ZHPCleaner-[R]-04062019-11_54_11.txt
 

----------------------------------------------------------------------------------------------------------------------------------------------

Segue novo HIJACKTHIS

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:59:21, on 04/06/2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
C:\ProgramData\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Dropbox\Client\73.4.118\QtWebEngineProcess.exe
C:\Program Files (x86)\Dropbox\Client\73.4.118\QtWebEngineProcess.exe
C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
c:\program files (x86)\common files\installshield\updateservice\isuspm.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe
C:\Users\Usuario\AppData\Roaming\ZHP\ZHPCleaner.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: ContentBlockerBrowserHelperObject - {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: VirtualKeyboardBrowserHelperObject - {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll
O2 - BHO: Safe Money Plugin - {E3D96E85-529D-4269-AC6A-97CF9E2221E3} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "c:\Program Files (x86)\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\Usuario\AppData\Local\Apps\2.0\BCP4AW1C.CWK\PAX8B8TD.Y9Y\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe
O4 - HKCU\..\RunOnce: [Delete Cached Update Binary] C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
O4 - HKCU\..\RunOnce: [Delete Cached Standalone Update Binary] C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SISTEMA')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: EvernoteTray.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Capturar esta página - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Capturar favorito - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: Capturar imagem - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Capturar seleção - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Nova nota - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O9 - Extra button: Teclado virtual - {09A10376-994C-4BBF-9121-F50CF7BA237E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: www.bancobrasil.com.br
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: aapj.bb.com.br
O15 - Trusted Zone: seg.bb.com.br
O15 - Trusted Zone: www.bb.com.br
O15 - Trusted Zone: http://www.bb.com.br
O15 - Trusted Zone: imagem.caixa.gov.br
O15 - Trusted Zone: internetbanking.caixa.gov.br
O15 - Trusted Zone: internetbankingpf.caixa.gov.br
O15 - Trusted Zone: www.caixa.gov.br
O15 - Trusted Zone: http://www.caixa.gov.br
O15 - Trusted Zone: *.dell.com
O15 - Trusted Zone: cloud.gastecnologia.com.br
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Serviço do Kaspersky Anti-Virus 15.0.1 (AVP15.0.1) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
O23 - Service: Box Sync Update Service (BoxSyncUpdateService) - Box, Inc. - C:\Program Files\Box\Box Sync\SyncUpdaterService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\elevation_service.exe
O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Warsaw Technology - GAS Tecnologia LTDA - C:\Program Files\Diebold\Warsaw\core.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe

--
End of file - 17409 bytes
 

Compartilhar este post


Link para o post
Compartilhar em outros sites
1 hora atrás, bolha001 disse:

DELETED task: [AutoKMS] [C:\Windows\Tasks\AutoKMS.job (Not File) ]  =>HackTool.AutoKMS

Seu "técnico" usou um Cracker chamado AutoKMS para habilitar o Windows/Office...

Isso é considerado pirataria e eu não posso ajudá-la desta forma, podendo até inutilizar seu PC com o uso de Ferramentas de desinfecção

Boa sorte.

 


assinatura-mrmillion.png65301516_windows-insider-mvp-logo(Custom).png.36263cb7b506cc6935fb37f39e504cec.png

Compartilhar este post


Link para o post
Compartilhar em outros sites

×
×
  • Criar Novo...