Este fórum foi descontinuado. LEIA AQUI e participe da Comunidade BABOO :)

Ir para conteúdo
bolha001

Solicitação de Análise de Logs

Mensagem Recomendada

Já fiz todos os procedimentos solicitados no Tópico Oficial.

O meu problema é: O Notebook começa a travar e tem picos de usos de CPU e MEMÓRIA, sempre ao usar o GOOGLE CHROME. Retorna ao normal imediatamente após eu fechar o CHROME.

Segue meu log para exame: 

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:17:14, on 03/06/2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
C:\ProgramData\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Dropbox\Client\73.4.118\QtWebEngineProcess.exe
C:\Program Files (x86)\Dropbox\Client\73.4.118\QtWebEngineProcess.exe
C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: ContentBlockerBrowserHelperObject - {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: VirtualKeyboardBrowserHelperObject - {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll
O2 - BHO: Safe Money Plugin - {E3D96E85-529D-4269-AC6A-97CF9E2221E3} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\Usuario\AppData\Local\Apps\2.0\BCP4AW1C.CWK\PAX8B8TD.Y9Y\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe
O4 - HKCU\..\RunOnce: [Delete Cached Update Binary] C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
O4 - HKCU\..\RunOnce: [Delete Cached Standalone Update Binary] C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SISTEMA')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: EvernoteTray.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Capturar esta página - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Capturar favorito - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: Capturar imagem - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Capturar seleção - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Nova nota - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O9 - Extra button: Teclado virtual - {09A10376-994C-4BBF-9121-F50CF7BA237E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: www.bancobrasil.com.br
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: aapj.bb.com.br
O15 - Trusted Zone: seg.bb.com.br
O15 - Trusted Zone: www.bb.com.br
O15 - Trusted Zone: http://www.bb.com.br
O15 - Trusted Zone: imagem.caixa.gov.br
O15 - Trusted Zone: internetbanking.caixa.gov.br
O15 - Trusted Zone: internetbankingpf.caixa.gov.br
O15 - Trusted Zone: www.caixa.gov.br
O15 - Trusted Zone: http://www.caixa.gov.br
O15 - Trusted Zone: *.dell.com
O15 - Trusted Zone: cloud.gastecnologia.com.br
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Serviço do Kaspersky Anti-Virus 15.0.1 (AVP15.0.1) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
O23 - Service: Box Sync Update Service (BoxSyncUpdateService) - Box, Inc. - C:\Program Files\Box\Box Sync\SyncUpdaterService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\elevation_service.exe
O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Warsaw Technology - GAS Tecnologia LTDA - C:\Program Files\Diebold\Warsaw\core.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe

--
End of file - 17207 bytes
 

Compartilhar este post


Link para o post
Compartilhar em outros sites

Desative temporariamente seu Antivírus.

Baixe o ZHPCleaner e salve no Desktop. (Área de Trabalho)

Usuários do Windows 7, 8, 8.1 ou 10: clique com o botão direito do mouse no ícone do Programa e selecione  executar-como-administrador.png

Dê um duplo-clique sobre o ZHPCleaner.exe.

Clique no botão Scanner.

A Ferramenta comecará o exame do seu Sistema. Tenha paciência pois pode demorar um pouco dependendo da quantidades de itens a examinar.

Ao final da Verificação, clique no botão Reparar.

Concluída a operação, um Log se abrirá. Caso isso não aconteça, clique no botão Relatório e salve o Log.

Selecione, copie e cole o conteúdo deste Log na sua próxima resposta + um novo Log do HijackThis.


assinatura-mrmillion.png65301516_windows-insider-mvp-logo(Custom).png.36263cb7b506cc6935fb37f39e504cec.png

Compartilhar este post


Link para o post
Compartilhar em outros sites

Procedimento efetuado...segue Log do ZHP

~ ZHPCleaner v2019.6.1.80 by Nicolas Coolman (2019/06/01)
~ Run by Usuario (Administrator)  (04/06/2019 11:52:52)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Repair
~ Report : C:\Users\Usuario\Desktop\ZHPCleaner (R).txt
~ Quarantine : C:\Users\Usuario\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
Windows 7 Ultimate, 64-bit Service Pack 1 (Build 7601)


---\\  Alternate Data Stream (ADS). (0)
~ No malicious or unnecessary items found.


---\\  Services (0)
~ No malicious or unnecessary items found.


---\\  Browser internet (0)
~ No malicious or unnecessary items found.


---\\  Hosts file (1)
~ The hosts file is legitimate (10)


---\\  Scheduled automatic tasks. (1)
DELETED task: [AutoKMS] [C:\Windows\Tasks\AutoKMS.job (Not File) ]  =>HackTool.AutoKMS


---\\  Explorer ( File, Folder) (265)
MOVED file: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\zy2o0a2z.default\searchplugins\Search Provided by Bing.xml    =>.SUP.SearchProvided
MOVED file: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\zy2o0a2z.default\searchplugins\yahoo! powered.xml    =>Adware.YahooPowered
MOVED file: C:\Windows\Tasks\AutoKMS.job    =>HackTool.AutoKMS
MOVED file: C:\Windows\Prefetch\AUTOKMS.EXE-7CC2D49E.pf    =>HackTool.AutoKMS
MOVED file: C:\Windows\Installer\wix{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{62F029AB-85F2-0000-866A-9FC0DD99DDBC}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{A05FDFEC-4377-49E0-82CB-B6D1386E89DA}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\wix{B5E06417-A4AC-4225-B36E-7E34C91616E7}.SchedServiceConfig.rmi    =>.SUP.Empty
MOVED file: C:\Windows\Installer\MSI9CC0.tmp    =>.SUP.MSIInstaller
MOVED file^: C:\Users\Usuario\AppData\Local\Temp\aria-debug-5200.log    =>.SUP.Temporary.OneDrive
MOVED file: C:\Users\Usuario\AppData\Local\Temp\aria-debug-7116.log    =>.SUP.Temporary.OneDrive
MOVED file^: C:\Users\Usuario\AppData\Local\Temp\Evernote_exe_PID3552_201963_224250004083a.lock    =>.SUP.Temporary.Empty
MOVED file: C:\Users\Usuario\AppData\Local\Temp\FXSTIFFDebugLogFile.txt    =>.SUP.Temporary.Empty
MOVED file: C:\Users\Usuario\AppData\Local\Temp\wct173A.tmp    =>.SUP.Temporary.Office
MOVED file: C:\Users\Usuario\AppData\Local\Temp\wctED0E.tmp    =>.SUP.Temporary.Office
MOVED file: C:\Users\Usuario\AppData\Local\Temp\wctF324.tmp    =>.SUP.Temporary.Office
MOVED file: C:\Windows\AutoKMS\AutoKMS.log    =>HackTool.AutoKMS
MOVED file: C:\Program Files\MyCam\MyCam.exe [Copyright 2009 - Web Cam Module]  =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files\WinRAR\WinRAR.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Imobzi Nuvem\IMOBZI.exe [Quickfast Software House - ]  =>.SUP.Orphan.MUICache
MOVED file: C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe [BitTorrent Inc. - µTorrent]  =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Free YouTube Downloader Converter\YoutubeConverter.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Hp\HPSSUPPLY\hpqSSupply.exe [(c) 2006, Hewlett-Packard Development Company L.P.. A - Hewlett-Packard Development Company L.P.]  =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Ministério do Meio Ambiente\CAR - Off-Line\CarDesktop.exe [ - CarDesktop]  =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\KXOPT Monitor\service.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Ministério do Meio Ambiente\CAR - Off-Line\server\services\node_modules\topcube\bin\cefclient\cefclient.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files (x86)\Hp\Diagnostics\PSDR\HPPSDr.exe    =>.SUP.Orphan.MUICache
MOVED file: C:\Program Files\Google\Drive\googledrivesync.exe    =>.SUP.Orphan.MUICache
MOVED folder: C:\Program Files\FileViewPro  =>.SUP.Solvusoft
MOVED folder: C:\ProgramData\AMMYY  =>.SUP.Ammyy
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro  =>.SUP.Solvusoft
MOVED folder: C:\Windows\AutoKMS  =>HackTool.AutoKMS
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\000  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\001  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\003  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\005  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\006  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\007  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\008  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\009  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\010  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\011  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\012  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\013  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\014  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\015  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\016  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\017  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\018  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\019  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\020  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\021  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\022  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\023  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\024  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\025  =>.SUP.Temporary.Chrome
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins  =>.SUP.Temporary.Chrome
MOVED folder: C:\Program Files (x86)\QuickTime  =>Riskware.QuickTime
MOVED folder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime  =>Riskware.QuickTime
MOVED folder: C:\Users\Usuario\AppData\Local\Google\Update  =>Heuristic.Suspect
MOVED folder: C:\Users\Usuario\AppData\Local\Microsoft Toolkit  =>HackTool.AutoKMS
MOVED folder: C:\Windows\Installer\MSI140E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1409.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1574.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI15C3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI166B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI19D8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI19E6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1CE4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1DE3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI1E91.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2217.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI22A2.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2508.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI257B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2598.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI26E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI26F5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2890.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI293F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI29D3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI29FE.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2B47.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI2BFF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3289.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3327.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3394.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3504.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI369E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI36BB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI378D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI384A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3899.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI38C7.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3924.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI39CD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI39E3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3A39.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3B07.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3B1B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3B56.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3CEB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3E51.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3E6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3F05.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI3FEA.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4151.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4163.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI41E9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI420F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4372.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI43A4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI44FE.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI44F4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI456E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI46FC.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4741.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI48B3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI48D9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI48D9.tmp-0  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4AD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4CB3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4D62.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4F1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI4FA0.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI52CD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI535B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI53C9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI53E1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5459.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI54AA.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5597.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI55DE.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI55E1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI567D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI58B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5A30.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5BB5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5C0E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5C16.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5D66.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5D83.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5E3B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI5E5A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI616B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI6226.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI62D4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI639C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI6486.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI64AF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI64B5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI65C1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI65FD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI6692.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI6713.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI67FF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI68BD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI69E5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI708.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI71BD.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI72AF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI73D0.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7454.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7581.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7601.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI76C8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI77EA.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7927.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI793.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7A8B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7B68.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7BF8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7C10.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7C67.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7D25.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI7DD5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI827C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8357.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8357.tmp-0  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI84EF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI85A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI85F9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8656.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI88C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI892C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8957.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8A2E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8C46.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8D1F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8D4D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8E3B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8EB6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI8FA6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI902F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI908.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI90BC.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI912C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI91E7.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI99C5.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSI99D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA0C6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA28F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA485.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA8D6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIA9B0.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIAD7E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIADCB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIAE6A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIAEA0.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIAFEF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB0D4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB119.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB172.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB3A7.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB5D4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB629.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB762.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIB9.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIBA0D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIBC83.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIBEA8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIBF9B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIC63F.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIC7CB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSICA8A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID18A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID3BC.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID3C1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID52A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID579.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID5E4.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID5E3.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID663.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID759.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID889.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSID928.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIDDCA.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE057.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE1B.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE1D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE30D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE316.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE3CB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIE6E8.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIEB18.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIEF3E.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF15C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF1A.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF2A1.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF2AB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF453.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF495.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF4DF.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF6EB.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF86D.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF890.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF8DC.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF93C.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIF9B6.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIFB11.tmp-  =>.SUP.Empty
MOVED folder: C:\Windows\Installer\MSIFB2.tmp-  =>.SUP.Empty
MOVED folder: C:\Users\Usuario\AppData\LocalLow\Intel  =>.SUP.Empty
MOVED folder: C:\Users\Usuario\AppData\LocalLow\VDownloader  =>.SUP.Empty


---\\  Registry ( Key, Value, Data) (332)
DELETED key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1[...]] [Yahoo! Powered]  =>Adware.YahooPowered
DELETED key: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1[...]] [Yahoo! Powered]  =>Adware.YahooPowered
DELETED key: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1[...]] [Yahoo! Powered]  =>Adware.YahooPowered
DELETED key**: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}]  =>Adware.YahooPowered
DELETED key**: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}]  =>Adware.YahooPowered
DELETED key**: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [https://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}]  =>Adware.YahooPowered
DELETED key*: HKEY_USERS\S-1-5-21-2073883679-1445547909-3807002837-1000\SOFTWARE\Ammyy []  =>.SUP.Ammyy
DELETED key*: HKEY_USERS\S-1-5-21-2073883679-1445547909-3807002837-1000\SOFTWARE\drpsu []  =>.SUP.DriverPack
DELETED key*: HKEY_USERS\.DEFAULT\Software\Ammyy []  =>.SUP.Ammyy
DELETED key**: HKCU\Software\Ammyy []  =>.SUP.Ammyy
DELETED key**: HKCU\Software\drpsu []  =>.SUP.DriverPack
DELETED key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\uTorrent [BitTorrent Inc.]  =>BitTorrent (P2P)
DELETED key*: [X64] HKLM\SOFTWARE\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library]  =>Adware.OpenCandy
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 []  =>.SUP.ByteFence
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS []  =>.SUP.ByteFence
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileViewPro_is1 [Solvusoft Corporation]  =>.SUP.Solvusoft
DELETED key*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1 [Vitzo Limited]  =>Adware.OpenCandy
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Ammyy []  =>.SUP.Ammyy
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5} [ITool]  =>Toolbar.Ask
DELETED key**: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552} [OCComSDK 1.0 Type Library]  =>Adware.OpenCandy
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ByteFenceScan_RASAPI32 []  =>.SUP.ByteFence
DELETED key*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ByteFenceScan_RASMANCS []  =>.SUP.ByteFence
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\MyCam\MyCam.exe [Web Cam Module]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Skype\Phone\Skype.exe [Skype ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [Google Chrome]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Evernote\Evernote\Evernote.exe [Evernote]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\AVAST Software\Avast\AvastUI.exe [avast! antivírus]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [Google Earth]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Everything\Everything.exe [Everything]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Windows Photo Viewer\PhotoViewer.dll [Visualizador de Fotos do Windows]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Windows\eHome\ehshell.exe [Windows Media Center]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\PROGRA~2\MICROS~1\Office14\OIS.EXE [Microsoft Office 2010]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe [TeamViewer 9]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\PROGRAMS\CORELPP.EXE [Corel PHOTO-PAINT(R)]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll [Visualizador de Fotos do Windows]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\PROGRAMS\CORELDRW.EXE [CorelDRAW(R)]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe [Adobe Reader ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Internet Explorer\iexplore.exe [Internet Explorer]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\iTunes\iTunes.exe [iTunes]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\K-Lite Codec Pack\Media Player Classic\mpc-hc.exe [MPC-HC]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE [Microsoft Word]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Windows Media Player\wmplayer.exe [Windows Media Player]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Windows NT\Accessories\WORDPAD.EXE [WordPad]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\IrfanView\i_view32.exe [IrfanView]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Windows Media Player\wmplayer.exe [Windows Media Player]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Winamp\winamp.exe [Winamp]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [DAEMON Tools Lite]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\WinRAR\WinRAR.exe [WinRAR archiver]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Windows\Explorer.exe [Windows Explorer]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\picasa39-setup.exe [Picasa]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\ProgramData\rvlkl\rvlkl.exe [Revealer Keylogger Free]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\BlueStacks-ThinInstaller.exe [BlueStacks Thin Installer]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE [Microsoft Excel]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\GoogleEarthProWin.exe [GoogleEarthProWin.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\kis15.0.0.463PT_6307.exe [Kaspersky Internet Security [15.0.0.463.0.226.0]]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Desktop\Licença Kaspersky Interney Security 2015.exe [Licença Kaspersky Interney Security 2015.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Desktop\KIS 2015\OPTIONAL-OPCIONAL\Reset Trial 30 days always.exe [Reset Trial 30 days always.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe [Kaspersky Anti-Virus]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Freemake\Freemake Video Converter\FreemakeVC.exe [Freemake Video Converter]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE [WordPad]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Imobzi Nuvem\IMOBZI.exe [IMOBZI.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe [µTorrent]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Google\Google Earth Pro\client\googleearth.exe [Google Earth]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Free YouTube Downloader Converter\YoutubeConverter.exe [YoutubeConverter.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\GoogleEarthProSetup (1).exe [Google Update Setup]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\GoogleEarthProSetup.exe [Google Update Setup]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Hp\HPSSUPPLY\hpqSSupply.exe [Hewlett-Packard Development Company L.P.]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Ministério do Meio Ambiente\CAR - Off-Line\CarDesktop.exe [CarDesktop]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\CAR.exe [CAR.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\KXOPT Monitor\service.exe [service.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\GoProStudioPC-2.5.7.549.exe [GoPro Studio 2.5.7]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\Receitanet-1.07.exe [Instalador do Receitanet 1.07]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\iGBPCEFgb.exe [Instalação do Módulo Adicional de Segurança CAIXA]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Ministério do Meio Ambiente\CAR - Off-Line\server\services\node_modules\topcube\bin\cefclient\cefclient.exe [cefclient.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\Cloudfogger_Setup.exe [Cloudfogger Setup                                           ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe [Foxit Reader 7.3]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\iTunes\iTunes.exe [iTunes]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\QuickTime\QuickTimePlayer.exe [QuickTime Player]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\G:\HD SAMSUNG\Instaladores\KIS 2015\Licença Kaspersky Interney Security 2015.exe [Licença Kaspersky Interney Security 2015]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\setuplotefacil.exe [LoteFácil Setup                                             ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE [Microsoft PowerPoint]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Wondershare\Wondershare Filmora (Portuguese)\Filmora.exe [Wondershare Filmora]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\freedvdcreator.exe [Free DVD Creator (by minidvdsoft) Setup                     ]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Hp\Diagnostics\PSDR\HPPSDr.exe [HP Webpack]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC64\mpc-hc64.exe [MPC-HC x64]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\AppData\Local\SquirrelTemp\Update.exe [Update]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\FormatFactory\FormatFactory.exe [FormatFactory]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Documents\GoogleEarthProSetup.exe [Google Update Setup]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Documents\Kaspersky 2015 ativado até 25-08-2017.exe [KIS15.0.1.415MR1_ES_RePack by WH33L3R]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Windows\SysWOW64\mspaint.exe [Paint]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcLauncher.exe [AutoCAD DWG Launcher]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Autodesk\AutoCAD 2014\acad.exe [AutoCAD Application]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\installbackupandsync.exe [Google Update Setup]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Google\Drive\googledrivesync.exe [googledrivesync.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\R.G. Mechanics\Grand Theft Auto V\GTA5.exe [Grand Theft Auto V]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\AppData\Roaming\Foxit Software\Addon\Foxit Reader\FoxitReaderUpdater.exe [Foxit Updater]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\CMSSetup_1.0.0.52.exe [CMSSetup_1.0.0.52.exe]  =>.SUP.Orphan.MUICache
DELETED value: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\Usuario\Downloads\Baixaki_TuneUp Utilities_0921116176.exe [Prog Setup                                                  ]  =>.SUP.Orphan.MUICache
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\BR\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CS\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CT\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\CZ\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\DE\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\EN\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\ES\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\FR\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\IT\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\JP\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\KR\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\MA\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\NL\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\PL\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\RU\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SU\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\PCUUI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\PCUUI\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\PCUUI\Images\Button\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Languages\SV\Programs\PCUUI\Images\Frame\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Corel\9EF6126F-9624-497F-8151-D62E9A56570A\Programs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Java\jre1.8.0_51\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\ProgramData\Kaspersky Lab\AVP15.0.2\Data\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\LUTs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\CineFormAdobePlugins\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\QuickTimeCodec\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Logs\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\x64\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\x86\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ar-SA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\bg-BG\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\cs-CZ\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\da-DK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\de-DE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\el-GR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\en-US\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\es-ES\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\et-EE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\fi-FI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\fr-FR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\he-IL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\hr-HR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\hu-HU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\it-IT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ja-JP\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ko-KR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\lt-LT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\lv-LV\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\nb-NO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\nl-NL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\pl-PL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\pt-BR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\pt-PT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ro-RO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\ru-RU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\sk-SK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\sl-SI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\sr-BA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\sv-SE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\th-TH\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\tr-TR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\uk-UA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\zh-CN\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\zh-HK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Solutions\zh-TW\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Ceement\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Users\Usuario\AppData\Local\Temp\Ceement\src\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ar-SA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\bg-BG\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\cs-CZ\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\da-DK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\de-DE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\el-GR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\en-US\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\es-ES\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\et-EE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\fi-FI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\fr-FR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\he-IL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\hr-HR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\hu-HU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\it-IT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ja-JP\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ko-KR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\lt-LT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\lv-LV\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\nb-NO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\nl-NL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\pl-PL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\pt-BR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\pt-PT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ro-RO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\ru-RU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\sk-SK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\sl-SI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\sr-BA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\sv-SE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\th-TH\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\tr-TR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\uk-UA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\zh-CN\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\zh-HK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Translations\zh-TW\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Warranty\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Contact\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ar-SA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\bg-BG\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\cs-CZ\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\da-DK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\de-DE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\el-GR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\en-US\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\es-ES\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\et-EE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\fi-FI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\fr-FR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\he-IL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\hr-HR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\html_pages_files\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\hu-HU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\Images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\it-IT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ja-JP\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ko-KR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\lt-LT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\lv-LV\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\nb-NO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\nl-NL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\pl-PL\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\pt-BR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\pt-PT\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ro-RO\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ru-RU\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\sk-SK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\sl-SI\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\sr-BA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\sv-SE\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\th-TH\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\tr-TR\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\uk-UA\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\zh-CN\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\zh-HK\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Content\ZH-TW\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Dezide\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\images\ [No Folder]  =>.SUP.Obsolete.NoFolder
DELETED value: HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\Notifications\ [No Folder]  =>.SUP.Obsolete.NoFolder


---\\  Summary of the elements found (20)
https://nicolascoolman.eu/2017/02/02/hacktool-autokms/  =>HackTool.AutoKMS
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.SearchProvided
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>Adware.YahooPowered
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.MSIInstaller
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Temporary.OneDrive
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Temporary.Empty
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Temporary.Office
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Orphan.MUICache
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Solvusoft
https://nicolascoolman.eu/2017/04/13/superfluous-ammyy/  =>.SUP.Ammyy
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Temporary.Chrome
https://nicolascoolman.eu/2017/01/15/riskware-quicktime/  =>Riskware.QuickTime
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/  =>Heuristic.Suspect
https://nicolascoolman.eu/2018/07/04/sup-driverpack/  =>.SUP.DriverPack
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>BitTorrent (P2P)
https://nicolascoolman.eu/2017/02/24/adware-opencandy/  =>Adware.OpenCandy
https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/  =>.SUP.ByteFence
https://nicolascoolman.eu/2017/02/28/toolbar-ask/  =>Toolbar.Ask
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Obsolete.NoFolder


---\\  Other deletions. (253)
~ Registry Keys Tracing deleted (253)
~ Remove the old reports ZHPCleaner. (0)


---\\ Result of repair
~ Repair carried out successfully
~ Browser not found (Opera Software)
~ The system has been restarted.


---\\ Statistics
~ Items scanned : 1215
~ Items found : 0
~ Items cancelled : 0
~ Items options : 12/12
~ Space saving (bytes) : 31463040


~ End of clean in 00h01mn19s

---\\  Reports (2)
ZHPCleaner--04062019-11_18_09.txt
ZHPCleaner-[R]-04062019-11_54_11.txt
 

----------------------------------------------------------------------------------------------------------------------------------------------

Segue novo HIJACKTHIS

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:59:21, on 04/06/2019
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
C:\ProgramData\MEGAsync\MEGAsync.exe
C:\Program Files (x86)\Evernote\Evernote\Evernote.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Evernote\Evernote\EvernoteSubprocess.exe
C:\Program Files (x86)\Dropbox\Client\73.4.118\QtWebEngineProcess.exe
C:\Program Files (x86)\Dropbox\Client\73.4.118\QtWebEngineProcess.exe
C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
c:\program files (x86)\common files\installshield\updateservice\isuspm.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe
C:\Users\Usuario\AppData\Roaming\ZHP\ZHPCleaner.exe
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fs_17_29&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyEtC0FyBtB0F0DyEtAzzyD0C0AzytAtN0D0Tzu0StBtDtBtAtN1L2XzutAtFtBzytFtCtDyEtFyDtCtN1L1Czu1BzztN1L1G1B1V1N2Y1L1Qzu2StD0E0ByD0B0EyEtDtGtByByCyDtGyC0D0D0EtGyB0AzztAtG0Azz0A0AyCzz0EyC0BzyyDzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0E0A0BtCyB0EtDtAtG0DtAyCtDtGyEyE0AtBtG0AyB0B0FtG0E0D0DtCtD0B0FyC0BtB0EyD2QtN0A0LzuyE%26cr%3D1900840451%26a%3Dwbf_fs_17_29%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: ContentBlockerBrowserHelperObject - {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_211\bin\ssv.dll
O2 - BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: VirtualKeyboardBrowserHelperObject - {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_211\bin\jp2ssv.dll
O2 - BHO: Safe Money Plugin - {E3D96E85-529D-4269-AC6A-97CF9E2221E3} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [iCloudDrive] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "c:\Program Files (x86)\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\Usuario\AppData\Local\Apps\2.0\BCP4AW1C.CWK\PAX8B8TD.Y9Y\dell..tion_e30b47f5d4a30e9e_0005.000e_4ab3a7332dd76702\DellSystemDetect.exe
O4 - HKCU\..\RunOnce: [Delete Cached Update Binary] C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
O4 - HKCU\..\RunOnce: [Delete Cached Standalone Update Binary] C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIÇO DE REDE')
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SISTEMA')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O4 - Startup: EvernoteClipper.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
O4 - Startup: EvernoteTray.lnk = C:\Program Files (x86)\Evernote\Evernote\EvernoteTray.exe
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: &Enviar para o OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Capturar esta página - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=1
O8 - Extra context menu item: Capturar favorito - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=0
O8 - Extra context menu item: Capturar imagem - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=4
O8 - Extra context menu item: Capturar seleção - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\Clip.html?clipAction=3
O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Nova nota - C:\Program Files (x86)\Evernote\Evernote\EvernoteIERes\NewNote.html
O9 - Extra button: Teclado virtual - {09A10376-994C-4BBF-9121-F50CF7BA237E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe
O9 - Extra button: Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar para o OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Anotações Vinculadas do OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\OLIEResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: www.bancobrasil.com.br
O15 - Trusted Zone: www14.bancobrasil.com.br
O15 - Trusted Zone: www2.bancobrasil.com.br
O15 - Trusted Zone: aapj.bb.com.br
O15 - Trusted Zone: seg.bb.com.br
O15 - Trusted Zone: www.bb.com.br
O15 - Trusted Zone: http://www.bb.com.br
O15 - Trusted Zone: imagem.caixa.gov.br
O15 - Trusted Zone: internetbanking.caixa.gov.br
O15 - Trusted Zone: internetbankingpf.caixa.gov.br
O15 - Trusted Zone: www.caixa.gov.br
O15 - Trusted Zone: http://www.caixa.gov.br
O15 - Trusted Zone: *.dell.com
O15 - Trusted Zone: cloud.gastecnologia.com.br
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Serviço do Kaspersky Anti-Virus 15.0.1 (AVP15.0.1) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
O23 - Service: Box Sync Update Service (BoxSyncUpdateService) - Box, Inc. - C:\Program Files\Box\Box Sync\SyncUpdaterService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_0\bin\fbserver.exe
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) - Google Inc. - C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.169\elevation_service.exe
O23 - Service: Serviço do Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Serviço do Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Warsaw Technology - GAS Tecnologia LTDA - C:\Program Files\Diebold\Warsaw\core.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe

--
End of file - 17409 bytes
 

Compartilhar este post


Link para o post
Compartilhar em outros sites
1 hora atrás, bolha001 disse:

DELETED task: [AutoKMS] [C:\Windows\Tasks\AutoKMS.job (Not File) ]  =>HackTool.AutoKMS

Seu "técnico" usou um Cracker chamado AutoKMS para habilitar o Windows/Office...

Isso é considerado pirataria e eu não posso ajudá-la desta forma, podendo até inutilizar seu PC com o uso de Ferramentas de desinfecção

Boa sorte.

 


assinatura-mrmillion.png65301516_windows-insider-mvp-logo(Custom).png.36263cb7b506cc6935fb37f39e504cec.png

Compartilhar este post


Link para o post
Compartilhar em outros sites

×
×
  • Criar Novo...