Virus - Relatorio

Malwarebytes
www.malwarebytes.com
-Detalhes de registro-
Data da análise: 26/06/18
Hora da análise: 10:48
Arquivo de registro: 981a1a4c-7947-11e8-8ea5-000000000000.json
Administrador: Sim
-Informação do software-
Versão: 3.5.1.2522
Versão de componentes: 1.0.374
Versão do pacote de definições: 1.0.5635
Licença: Versão de Avaliação
-Informação do sistema-
Sistema operacional: Windows 7 Service Pack 1
CPU: x64
Sistema de arquivos: NTFS
Usuário: System
-Resumo da análise-
Tipo de análise: Análise de Ameaças
Análise Iniciada Por: Agendamento
Resultado: Concluído
Objetos verificados: 414075
Ameaças detectadas: 666
Ameaças em quarentena: 666
Tempo decorrido: 1 hr, 22 min, 12 seg
-Opções da análise-
Memória: Habilitado
Inicialização: Habilitado
Sistema de arquivos: Habilitado
Arquivos compactados: Habilitado
Rootkits: Desabilitado
Heurística: Habilitado
PUP: Detectar
PUM: Detectar
-Detalhes da análise-
Processo: 0
(Nenhum item malicioso detectado)
Módulo: 0
Chave de registro: 31
PUP.Optional.ArcadeCandy.PrxySvrRST,
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES,
Quarentena, [2391], [-1],0.0.0
PUP.Optional.SearchManager,
HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce,
Quarentena, [242], [443378],1.0.5635
HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce
, Quarentena, [242], [443378],1.0.5635
PUP.Optional.SearchManager, HKU\S-1-5-21-710546048-3760741328-878552338-
1000\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce,
Quarentena, [242], [443378],1.0.5635
PUP.Optional.MailRu,
HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\bhjhnafpiilpffhglajcaepjbnbjemci
, Quarentena, [231], [448280],1.0.5635
HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\hcadgijmedbfgciegjomfpjcdchlhnif
, Quarentena, [231], [448282],1.0.5635
HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej,
Quarentena, [242], [464596],1.0.5635
HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej
, Quarentena, [242], [464596],1.0.5635
PUP.Optional.SearchManager, HKU\S-1-5-21-710546048-3760741328-878552338-
1000\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej,
Quarentena, [242], [464596],1.0.5635
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS
NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\topnews17infoooism, Quarentena, [299],
[385384],1.0.5635
NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B30069DA-EFC8-455E-8ABD-54C097F1F10D},
Quarentena, [299], [385384],1.0.5635
NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{B30069DA-EFC8-455E-8ABD-54C097F1F10D},
Quarentena, [299], [385384],1.0.5635
PUP.Optional.PSScriptLoad.ACMB3, HKU\S-1-5-18\CONSOLE\%SYSTEMROOT
%_SYSTEM32_SVCHOST.EXE, Quarentena, [6456], [425124],1.0.5635
PUP.Optional.PSScriptLoad.ACMB3, HKU\S-1-5-18\CONSOLE\TASKENG.EXE, Quarentena,
[6456], [425125],1.0.5635
Trojan.Agent.CLK, HKU\S-1-5-18\SOFTWARE\osTip, Quarentena, [7015],
[358175],1.0.5635
Adware.Ghokswa, HKU\S-1-5-21-710546048-3760741328-878552338-1000\SOFTWARE\Jamjob,
Quarentena, [714], [423743],1.0.5635
Trojan.Agent.CLK, HKU\S-1-5-21-710546048-3760741328-878552338-1000\SOFTWARE\osTip,
Quarentena, [7015], [358175],1.0.5635
PUP.Optional.MailRu, HKU\S-1-5-21-710546048-3760741328-878552338-
1000\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\ru.mail.go.ext_info_host,
Quarentena, [231], [485554],1.0.5635
PUP.Optional.InstallCore, HKU\S-1-5-21-710546048-3760741328-878552338-
1000\SOFTWARE\PRODUCTSETUP, Quarentena, [393], [481004],1.0.5635
PUP.Optional.Plumbytes, HKLM\SOFTWARE\Plumbytes Software, Quarentena, [3523],
[262040],1.0.5635
Adware.Ghokswa, HKLM\SOFTWARE\WOW6432NODE\Jamjob, Quarentena, [714],
[423744],1.0.5635
Adware.Elex, HKLM\SOFTWARE\WOW6432NODE\WinSaberSvc, Quarentena, [618],
[350440],1.0.5635
HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\epgjfmblhacacphaljkdcjllkomdcjpc
, Quarentena, [231], [403166],1.0.5635
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW
RIGHTS\ELEVATIONPOLICY\{68AE298D-7E8A-4F53-BE55-15D2B065F6C0}, Quarentena, [231],
[471429],1.0.5635
PUP.Optional.RussAd,
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER
OBJECTS\{8E8F97CD-60B5-456F-A201-73065652D099}, Quarentena, [287],
[351113],1.0.5635
PUP.Optional.RussAd, HKLM\SOFTWARE\CLASSES\IESearchPlugin.MailRuBHO, Quarentena,
[287], [351113],1.0.5635
PUP.Optional.RussAd, HKLM\SOFTWARE\CLASSES\IESearchPlugin.MailRuBHO.1, Quarentena,
[287], [351113],1.0.5635
PUP.Optional.RussAd, HKU\S-1-5-21-710546048-3760741328-878552338-
1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8E8F97CD-60B5-456F-
A201-73065652D099}, Quarentena, [287], [351113],1.0.5635
PUP.Optional.RussAd, HKU\S-1-5-
18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8E8F97CD-60B5-456F-A201-
73065652D099}, Quarentena, [287], [351113],1.0.5635
PUP.Optional.RussAd, HKU\S-1-5-21-710546048-3760741328-878552338-
1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8E8F97CD-60B5-456F-A201-
73065652D099}, Quarentena, [287], [351113],1.0.5635
PUP.Optional.RussAd, HKU\S-1-5-
18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8E8F97CD-60B5-456F-A201-
73065652D099}, Quarentena, [287], [351113],1.0.5635
Valor de registro: 17
PUP.Optional.ArcadeCandy.PrxySvrRST, HKU\S-1-5-
18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE,
Quarentena, [2391], [-1],0.0.0
Quarentena, [2391], [-1],0.0.0
Quarentena, [2391], [-1],0.0.0
PUP.Optional.ArcadeCandy.PrxySvrRST, HKU\S-1-5-21-710546048-3760741328-878552338-
Quarentena, [2391], [-1],0.0.0
Quarentena, [2391], [-1],0.0.0
Quarentena, [2391], [-1],0.0.0
HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|
PROXYENABLE, Quarentena, [2391], [-1],0.0.0
%_SYSTEM32_SVCHOST.EXE|WINDOWPOSITION, Quarentena, [6456], [425124],1.0.5635
%_SYSTEM32_WINDOWSPOWERSHELL_V1.0_POWERSHELL.EXE|WINDOWPOSITION, Quarentena,
[6456], [425126],1.0.5635
PUP.Optional.PSScriptLoad.ACMB3, HKU\S-1-5-18\CONSOLE\TASKENG.EXE|WINDOWPOSITION,
Quarentena, [6456], [425125],1.0.5635
PUP.Optional.InstallCore, HKU\S-1-5-21-710546048-3760741328-878552338-
1000\SOFTWARE\PRODUCTSETUP|TB, Quarentena, [393], [481004],1.0.5635
PUP.Optional.MailRu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW
RIGHTS\ELEVATIONPOLICY\{68AE298D-7E8A-4F53-BE55-15D2B065F6C0}|APPPATH, Quarentena,
[231], [471429],1.0.5635
PUP.Optional.PCSpeedupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS
NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC SPEEDUP SERVICE
DEACTIVATOR.JOB, Quarentena, [1273], [484530],1.0.5635
PUP.Optional.PCSpeedupPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS
NT\CURRENTVERSION\SCHEDULE\COMPATIBILITYADAPTER\SIGNATURES|PC SPEEDUP SERVICE
DEACTIVATOR.JOB.FP, Quarentena, [1273], [484530],1.0.5635
NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B30069DA-EFC8-455E-8ABD-54C097F1F10D}|
PATH, Quarentena, [299], [385383],1.0.5635
Hijack.AutoConfigURL.PrxySvrRST,
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES|,
Quarentena, [3778], [391734],1.0.5635
Adware.Ghokswa,
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREW
ALLRULES|{400B2452-B2CC-4A69-BD41-2608A2F2F8CA}, Quarentena, [714],
[423745],1.0.5635
Dados de registro: 0
Fluxo de dados: 0
Pasta: 92
PUP.Optional.PennyBee,
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ICSharpCode.net\PennyBeeW.ex
e_Url_pdfsfuhjvq2z1tkl01mfogi3g1cr2hhw\1.0.2.0, Quarentena, [809],
[178856],1.0.5635
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\ICSHARPCODE.NET\PennyBeeW.ex
e_Url_pdfsfuhjvq2z1tkl01mfogi3g1cr2hhw, Quarentena, [809], [178856],1.0.5635
C:\Users\Sofia\AppData\Local\Google\Chrome\User
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\_metadat
a, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\icons,
Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core,
Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\html,
Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\css,
Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\lib,
Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src,
Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\js,
Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0,
Quarentena, [2391], [180970],1.0.5635
C:\USERS\SOFIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Local Extension
Settings\lebmkjafnodbnhbahbgdollaaabcmpbh, Quarentena, [2391], [180970],1.0.5635
C:\USERS\SOFIA\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\DEFAULT\EXTENSIONS\LEBMKJAFNODBNHBAHBGDOLLAAABCMPBH, Quarentena, [2391],
[180970],1.0.5635
PUP.Optional.Tuto4PC,
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\SunnyDay7, Quarentena,
[591], [181935],1.0.5635
Adware.Elex, C:\USERS\VLADEMIR\APPDATA\ROAMING\MICROSOFT\WINDOWS\START
MENU\PROGRAMS\AMULEC, Quarentena, [618], [378430],1.0.5635
PUP.Optional.SearchManager, C:\Users\Sofia\AppData\Local\Google\Chrome\User
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\content\images
\sitesThumbnails, Quarentena, [242], [443378],1.0.5635
\weather, Quarentena, [242], [443378],1.0.5635
\icons, Quarentena, [242], [443378],1.0.5635
\tiles, Quarentena, [242], [443378],1.0.5635
, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\pt_BR
, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\content\fonts,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\en,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\fr,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\hi,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\vi,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\skin\icons,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_metadata,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\content,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\vendor,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\skin,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0, Quarentena,
[242], [443378],1.0.5635
PUP.Optional.SearchManager, C:\USERS\SOFIA\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\Default\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce, Quarentena, [242],
[443378],1.0.5635
PUP.Optional.MailRu, C:\Users\Sofia\AppData\Local\Google\Chrome\User
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0\integration\dist
ribution, Quarentena, [231], [448280],1.0.5635
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0\integration,
Quarentena, [231], [448280],1.0.5635
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0\_metadata,
Quarentena, [231], [448280],1.0.5635
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0\img, Quarentena,
[231], [448280],1.0.5635
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0, Quarentena,
[231], [448280],1.0.5635
PUP.Optional.MailRu, C:\USERS\SOFIA\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\Default\EXTENSIONS\bhjhnafpiilpffhglajcaepjbnbjemci, Quarentena, [231],
[448280],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\integration\dist
ribution, Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\integration\unit
y, Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\integration,
Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\_metadata,
Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\icons,
Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0, Quarentena,
[231], [448282],1.0.5635
DATA\Default\EXTENSIONS\hcadgijmedbfgciegjomfpjcdchlhnif, Quarentena, [231],
[448282],1.0.5635
PUP.Optional.SearchManager, C:\Users\Vlademir\AppData\Local\chromium\User
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\content\images
\converter, Quarentena, [242], [453140],1.0.5635
\maps, Quarentena, [242], [453140],1.0.5635
, Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\pt_BR
, Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\content\fonts,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\en,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\fr,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\hi,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\vi,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\skin\icons,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_metadata,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\content,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\vendor,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\skin,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0, Quarentena,
[242], [453140],1.0.5635
PUP.Optional.SearchManager, C:\USERS\VLADEMIR\APPDATA\LOCAL\CHROMIUM\USER
DATA\Default\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, Quarentena, [242],
[453140],1.0.5635
\converter, Quarentena, [242], [464596],1.0.5635
\maps, Quarentena, [242], [464596],1.0.5635
, Quarentena, [242], [464596],1.0.5635
, Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\content\fonts,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales\en,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales\fr,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales\hi,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales\vi,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\skin\icons,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_metadata,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\content,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\vendor,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\skin,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0, Quarentena,
[242], [464596],1.0.5635
DATA\Default\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, Quarentena, [242],
[464596],1.0.5635
PUP.Optional.WinYahoo, C:\Users\Sofia\AppData\Local\{0767313B-23CF-5D83-4E57-
786B6A3F84F3}\HowToRemove, Quarentena, [245], [302717],1.0.5635
PUP.Optional.WinYahoo, C:\USERS\SOFIA\APPDATA\LOCAL\{0767313B-23CF-5D83-4E57-
786B6A3F84F3}, Quarentena, [245], [302717],1.0.5635
PUP.Optional.PriceFountain.TskLnk,
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\CARTOONINGFORERUNNER,
Quarentena, [1293], [431028],1.0.5635
Arquivo: 526
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ICSharpCode.net\PennyBeeW.ex
e_Url_pdfsfuhjvq2z1tkl01mfogi3g1cr2hhw\1.0.2.0\user.config, Quarentena, [809],
[178856],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\acc
essconfig.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\ada
ptmodel.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\add
material.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\cal
culateaccount.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\del
eteparameters.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\get
server.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\hel
parchitecture.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\inc
ludepositive.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\inc
remententry.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\min
imalshell.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\mov
ecounter.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\put
list.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\rec
eiveservice.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\ser
vepath.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\core\too
gletimeout.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\css\back
comp.css, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\css\styl
e.css, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\html\bac
kground.html, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\icons\12
8.png, Quarentena, [2391], [180970],1.0.5635
.png, Quarentena, [2391], [180970],1.0.5635
.png, Quarentena, [2391], [180970],1.0.5635
.png, Quarentena, [2391], [180970],1.0.5635
.png, Quarentena, [2391], [180970],1.0.5635
.png, Quarentena, [2391], [180970],1.0.5635
.png, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\js\vast.
js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\lib\requ
ire.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\acqu
isitionservice.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\addp
ath.js, Quarentena, [2391], [180970],1.0.5635
athA.js, Quarentena, [2391], [180970],1.0.5635
athB.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\comp
utegate.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\isbo
olmaterial.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\move
broker.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\serv
eaccuracy.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\show
actor.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\thro
wnotification.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\src\toog
leclock.js, Quarentena, [2391], [180970],1.0.5635
a\computed_hashes.json, Quarentena, [2391], [180970],1.0.5635
a\verified_contents.json, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\manifest
.json, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\removepa
th.js, Quarentena, [2391], [180970],1.0.5635
Data\Default\Extensions\lebmkjafnodbnhbahbgdollaaabcmpbh\42.3429.1096.28_0\shredmat
erial.js, Quarentena, [2391], [180970],1.0.5635
C:\Users\Sofia\AppData\Local\Google\Chrome\User Data\Default\Local Extension
Settings\lebmkjafnodbnhbahbgdollaaabcmpbh\000003.log, Quarentena, [2391],
[180970],1.0.5635
Settings\lebmkjafnodbnhbahbgdollaaabcmpbh\CURRENT, Quarentena, [2391],
[180970],1.0.5635
Settings\lebmkjafnodbnhbahbgdollaaabcmpbh\LOCK, Quarentena, [2391],
[180970],1.0.5635
Settings\lebmkjafnodbnhbahbgdollaaabcmpbh\LOG, Quarentena, [2391],
[180970],1.0.5635
Settings\lebmkjafnodbnhbahbgdollaaabcmpbh\LOG.old, Quarentena, [2391],
[180970],1.0.5635
Settings\lebmkjafnodbnhbahbgdollaaabcmpbh\MANIFEST-000001, Quarentena, [2391],
[180970],1.0.5635
C:\USERS\SOFIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences,
Substituído, [2391], [180970],1.0.5635
C:\USERS\SOFIA\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync
Data\SyncData.sqlite3, Substituído, [2391], [180970],1.0.5635
Adware.Elex, C:\Users\Vlademir\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\amuleC\aMuleC.lnk, Quarentena, [618], [378430],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\content\fonts\
HelveticaNeue-Thin.otf, Quarentena, [242], [443378],1.0.5635
HelveticaNeueLT-Roman.woff, Quarentena, [242], [443378],1.0.5635
neue-bold.woff, Quarentena, [242], [443378],1.0.5635
neue.woff, Quarentena, [242], [443378],1.0.5635
\icons\128.png, Quarentena, [242], [443378],1.0.5635
\icons\close.png, Quarentena, [242], [443378],1.0.5635
\icons\favicon.ico, Quarentena, [242], [443378],1.0.5635
\icons\trends.svg, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\amazon_tile_v2.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\booking_tile_v2.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\ebay.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\ebay_tile_v2.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\facebook.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\facebook_tile_v2.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\gmail.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\gmail_tile_v2.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\gtranslte.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\pinterest.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\twitter.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\twitter_tile_v2.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\yahoo.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\yahoo_tile_v2.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\youtube.png, Quarentena, [242], [443378],1.0.5635
\sitesThumbnails\youtube_tile_v2.png, Quarentena, [242], [443378],1.0.5635
\tiles\DOC-to-PDF.jpg, Quarentena, [242], [443378],1.0.5635
\tiles\PDF-to-DOC.jpg, Quarentena, [242], [443378],1.0.5635
\tiles\Translation.jpg, Quarentena, [242], [443378],1.0.5635
\tiles\View-PDF.jpg, Quarentena, [242], [443378],1.0.5635
\weather\01d.svg, Quarentena, [242], [443378],1.0.5635
\weather\01n.svg, Quarentena, [242], [443378],1.0.5635
\eyeglass.png, Quarentena, [242], [443378],1.0.5635
\angle-arrow-down.png, Quarentena, [242], [443378],1.0.5635
\bing.png, Quarentena, [242], [443378],1.0.5635
\bing_large.png, Quarentena, [242], [443378],1.0.5635
\bluesky-bg.jpg, Quarentena, [242], [443378],1.0.5635
\brush.png, Quarentena, [242], [443378],1.0.5635
\bt.png, Quarentena, [242], [443378],1.0.5635
\clock.png, Quarentena, [242], [443378],1.0.5635
\cloud.png, Quarentena, [242], [443378],1.0.5635
\cupcake-bg.jpg, Quarentena, [242], [443378],1.0.5635
\desk-bg.jpg, Quarentena, [242], [443378],1.0.5635
\doodle.png, Quarentena, [242], [443378],1.0.5635
\down.png, Quarentena, [242], [443378],1.0.5635
\enhanced_google.png, Quarentena, [242], [443378],1.0.5635
\gmx_large.png, Quarentena, [242], [443378],1.0.5635
\google.png, Quarentena, [242], [443378],1.0.5635
\google_large.png, Quarentena, [242], [443378],1.0.5635
\hero-bg.jpg, Quarentena, [242], [443378],1.0.5635
\just-the-box-empty.png, Quarentena, [242], [443378],1.0.5635
\just-the-box.png, Quarentena, [242], [443378],1.0.5635
\mountain-bg.jpg, Quarentena, [242], [443378],1.0.5635
\pointer2.png, Quarentena, [242], [443378],1.0.5635
\radio-selected.svg, Quarentena, [242], [443378],1.0.5635
\radio-unselected.svg, Quarentena, [242], [443378],1.0.5635
\sea-bg.jpg, Quarentena, [242], [443378],1.0.5635
\settings.png, Quarentena, [242], [443378],1.0.5635
\smallMagnifier.png, Quarentena, [242], [443378],1.0.5635
\star-unselected.svg, Quarentena, [242], [443378],1.0.5635
\star.svg, Quarentena, [242], [443378],1.0.5635
\todoc.png, Quarentena, [242], [443378],1.0.5635
\toggle-off.svg, Quarentena, [242], [443378],1.0.5635
\toggle-on.svg, Quarentena, [242], [443378],1.0.5635
\topdf.png, Quarentena, [242], [443378],1.0.5635
\transparent_img.png, Quarentena, [242], [443378],1.0.5635
\yahoo.png, Quarentena, [242], [443378],1.0.5635
\yahoo.svg, Quarentena, [242], [443378],1.0.5635
\yahoo_large.png, Quarentena, [242], [443378],1.0.5635
\yandex.png, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\content\bundle
.v0.0.1.min.css, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\skin\icons\16.
png, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\vendor\md5.min
.js, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\vendor\react-
dom.min.js, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\vendor\react-
with-addons.min.js, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\en\me
ssages.json, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\fr\me
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\hi\me
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\pt_BR
\messages.json, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_locales\vi\me
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\_metadata\veri
fied_contents.json, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\2bfc185be71f44
cd73ac81511fc1f5a5.woff, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\b495e340f4ef89
24fea0284c1bf9e7ac.woff, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\background.htm
l, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\background.v0.
0.1.min.js, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\c5a5cbf4dbcaa7
064f2bc77f52101aec.otf, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\client.v0.0.1.
min.js, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\common.js.v0.0
.1.min.js, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\e5d3501d500d07
b0a1e952b0f8a81d78.woff, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\e_.json,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\index.html,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\manifest.json,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\popupTab2.html
, Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\popupTab2.js,
Quarentena, [242], [443378],1.0.5635
Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.2.63_0\responseConfig
.json, Quarentena, [242], [443378],1.0.5635
DATA\Default\Secure Preferences, Substituído, [242], [443378],1.0.5635
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0\img\128.png,
Quarentena, [231], [448280],1.0.5635
Quarentena, [231], [448280],1.0.5635
Quarentena, [231], [448280],1.0.5635
Quarentena, [231], [448280],1.0.5635
ribution\background.js, Quarentena, [231], [448280],1.0.5635
ribution\distribution-module.js, Quarentena, [231], [448280],1.0.5635
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0\_metadata\verifi
ed_contents.json, Quarentena, [231], [448280],1.0.5635
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0\manifest.json,
Quarentena, [231], [448280],1.0.5635
Data\Default\Extensions\bhjhnafpiilpffhglajcaepjbnbjemci\12.0.23_0\metrics.js,
Quarentena, [231], [448280],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\icons\128.png,
Quarentena, [231], [448282],1.0.5635
Quarentena, [231], [448282],1.0.5635
Quarentena, [231], [448282],1.0.5635
Quarentena, [231], [448282],1.0.5635
ribution\background.js, Quarentena, [231], [448282],1.0.5635
ribution\distribution-module.js, Quarentena, [231], [448282],1.0.5635
y\unity-stub-background.js, Quarentena, [231], [448282],1.0.5635
y\unity-stub-inject.js, Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\_metadata\verifi
ed_contents.json, Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\manifest.json,
Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\hcadgijmedbfgciegjomfpjcdchlhnif\12.0.28_0\metrics.js,
Quarentena, [231], [448282],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\content\fonts\
\converter\close-FF8A5A.svg, Quarentena, [242], [453140],1.0.5635
\converter\collection-9B9B9B.svg, Quarentena, [242], [453140],1.0.5635
\converter\collection-FF691E.svg, Quarentena, [242], [453140],1.0.5635
\converter\doc-icon-FFFFFF.svg, Quarentena, [242], [453140],1.0.5635
\converter\error-FF691E.svg, Quarentena, [242], [453140],1.0.5635
\converter\pdf-2-doc-9B9B9B.svg, Quarentena, [242], [453140],1.0.5635
\converter\pdf-2-doc-FFFFFF.svg, Quarentena, [242], [453140],1.0.5635
\converter\pdf-icon-FFFFFF.svg, Quarentena, [242], [453140],1.0.5635
\converter\success-FF8A5A.svg, Quarentena, [242], [453140],1.0.5635
\converter\tab-arrow-FF691E.svg, Quarentena, [242], [453140],1.0.5635
\converter\upload-FF691E.svg, Quarentena, [242], [453140],1.0.5635
\maps\bing-maps-FFFFFF.svg, Quarentena, [242], [453140],1.0.5635
\maps\from-to-icon-8881FF.svg, Quarentena, [242], [453140],1.0.5635
\maps\google-maps-FFFFFF.svg, Quarentena, [242], [453140],1.0.5635
\maps\location-icon-8881FF.svg, Quarentena, [242], [453140],1.0.5635
\maps\search-4A4A4A.svg, Quarentena, [242], [453140],1.0.5635
\maps\search-8881FF.svg, Quarentena, [242], [453140],1.0.5635
\maps\switch-8881FF.svg, Quarentena, [242], [453140],1.0.5635
\maps\tab-arrow-8881FF.svg, Quarentena, [242], [453140],1.0.5635
\maps\whereto-logo-8881FF.svg, Quarentena, [242], [453140],1.0.5635
\maps\whereto-logo-FFFFFF.svg, Quarentena, [242], [453140],1.0.5635
\sitesThumbnails\aliexpress_tile_v2.png, Quarentena, [242], [453140],1.0.5635
\sitesThumbnails\google-translate-icon-FFFFFF.svg, Quarentena, [242],
[453140],1.0.5635
\sitesThumbnails\wix_tile_v2.png, Quarentena, [242], [453140],1.0.5635
\eyeglass_transparent.png, Quarentena, [242], [453140],1.0.5635
\search-D7D7D7.svg, Quarentena, [242], [453140],1.0.5635
\_enhanced_google.png, Quarentena, [242], [453140],1.0.5635
\_gmx_large.png, Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\content\bundle
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\skin\icons\16.
png, Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\vendor\md5.min
.js, Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\vendor\react-
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\en\me
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\fr\me
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\hi\me
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_locales\vi\me
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\_metadata\veri
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\2bfc185be71f44
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\b495e340f4ef89
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\background.htm
l, Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\background.v0.
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\c5a5cbf4dbcaa7
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\client.v0.0.1.
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\common.js.v0.0
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\e5d3501d500d07
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\e_.json,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\index.html,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\manifest.json,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\popupTab2.html
, Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\popupTab2.js,
Quarentena, [242], [453140],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.63_0\responseConfig
.json, Quarentena, [242], [453140],1.0.5635
\converter\close-FF8A5A.svg, Quarentena, [242], [464596],1.0.5635
\converter\collection-9B9B9B.svg, Quarentena, [242], [464596],1.0.5635
\converter\collection-FF691E.svg, Quarentena, [242], [464596],1.0.5635
\converter\doc-icon-FFFFFF.svg, Quarentena, [242], [464596],1.0.5635
\converter\error-FF691E.svg, Quarentena, [242], [464596],1.0.5635
\converter\pdf-2-doc-9B9B9B.svg, Quarentena, [242], [464596],1.0.5635
\converter\pdf-2-doc-FFFFFF.svg, Quarentena, [242], [464596],1.0.5635
\converter\pdf-icon-FFFFFF.svg, Quarentena, [242], [464596],1.0.5635
\converter\success-FF8A5A.svg, Quarentena, [242], [464596],1.0.5635
\converter\tab-arrow-FF691E.svg, Quarentena, [242], [464596],1.0.5635
\converter\upload-FF691E.svg, Quarentena, [242], [464596],1.0.5635
\maps\bing-maps-FFFFFF.svg, Quarentena, [242], [464596],1.0.5635
\maps\from-to-icon-8881FF.svg, Quarentena, [242], [464596],1.0.5635
\maps\google-maps-FFFFFF.svg, Quarentena, [242], [464596],1.0.5635
\maps\location-icon-8881FF.svg, Quarentena, [242], [464596],1.0.5635
\maps\search-4A4A4A.svg, Quarentena, [242], [464596],1.0.5635
\maps\search-8881FF.svg, Quarentena, [242], [464596],1.0.5635
\maps\switch-8881FF.svg, Quarentena, [242], [464596],1.0.5635
\maps\tab-arrow-8881FF.svg, Quarentena, [242], [464596],1.0.5635
\maps\whereto-logo-8881FF.svg, Quarentena, [242], [464596],1.0.5635
\maps\whereto-logo-FFFFFF.svg, Quarentena, [242], [464596],1.0.5635
\sitesThumbnails\aliexpress_tile_v2.png, Quarentena, [242], [464596],1.0.5635
\sitesThumbnails\google-translate-icon-FFFFFF.svg, Quarentena, [242],
[464596],1.0.5635
\sitesThumbnails\wix_tile_v2.png, Quarentena, [242], [464596],1.0.5635
\eyeglass_transparent.png, Quarentena, [242], [464596],1.0.5635
\search-D7D7D7.svg, Quarentena, [242], [464596],1.0.5635
\_enhanced_google.png, Quarentena, [242], [464596],1.0.5635
\_gmx_large.png, Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\content\bundle
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\skin\icons\16.
png, Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\vendor\md5.min
.js, Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales\en\me
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales\fr\me
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales\hi\me
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_locales\vi\me
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\_metadata\veri
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\2bfc185be71f44
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\b495e340f4ef89
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\background.htm
l, Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\background.v0.
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\c5a5cbf4dbcaa7
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\client.v0.0.1.
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\common.js.v0.0
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\e5d3501d500d07
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\e_.json,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\index.html,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\manifest.json,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\popupTab2.html
, Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\popupTab2.js,
Quarentena, [242], [464596],1.0.5635
Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.65_0\responseConfig
.json, Quarentena, [242], [464596],1.0.5635
DATA\Default\Sync Data\SyncData.sqlite3, Substituído, [242], [464596],1.0.5635
PUP.Optional.MixVideoPlayer,
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\DESKTOP\MIXVIDEOPLAYER.LNK, Quarentena,
[2026], [240856],1.0.5635
PUP.Optional.SpeedBrowser,
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MICROSOFT\INTERNET
EXPLORER\QUICK LAUNCH\SPEED BROWSER.LNK, Quarentena, [2603], [252748],1.0.5635
PUP.Optional.AliExpress,
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\DESKTOP\ALIEXPRESS.URL, Quarentena, [694],
[360410],1.0.5635
PUP.Optional.MailRu, C:\USERS\VLADEMIR\APPDATA\ROAMING\MICROSOFT\INTERNET
EXPLORER\QUICK LAUNCH\MAIL.RU.LNK, Quarentena, [231], [384473],1.0.5635
PUP.Optional.StartPage, C:\WINDOWS\SYSTEM32\TASKS\topnews17infoooism, Quarentena,
[299], [385384],1.0.5635
PUP.Optional.SearchModule, C:\USERS\SOFIA\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\Default\LOCAL STORAGE\chrome-
extension_nahhmpbckpgdidfnmfkfgiflpjijilce_0.localstorage, Quarentena, [248],
[453492],1.0.5635
PUP.Optional.MailRu, C:\USERS\VLADEMIR\FAVORITES\Mail.Ru Агент - используй для
общения!.url, Quarentena, [231], [471428],1.0.5635
PUP.Optional.MailRu, C:\USERS\VLADEMIR\FAVORITES\Mail.Ru.url, Quarentena, [231],
[471428],1.0.5635
PUP.Optional.WinYahoo, C:\USERS\SOFIA\APPDATA\LOCAL\{0767313B-23CF-5D83-4E57-
786B6A3F84F3}\HOWTOREMOVE\HOWTOREMOVE.HTML, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\chromium-min.jpg, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\control panel-min-min.JPG, Quarentena, [245],
[302717],1.0.5635
786B6A3F84F3}\HowToRemove\down.png, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\ff menu.JPG, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\ff search engine-min.png, Quarentena, [245],
[302717],1.0.5635
786B6A3F84F3}\HowToRemove\hp-min ff.png, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\hp-min ie.png, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\search engine.gif, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\setup pages.gif, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\sp-min.png, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\start-min.jpg, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\HowToRemove\up.png, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\mositotat, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\seroniti, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\uninst.exe, Quarentena, [245], [302717],1.0.5635
786B6A3F84F3}\uninstp.dat, Quarentena, [245], [302717],1.0.5635
PUP.Optional.FFHijacker, C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\15886377.CFG,
Quarentena, [5353], [330649],1.0.5635
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\CARTOONINGFORERUNNER\RKEY.DA
T, Quarentena, [1293], [431028],1.0.5635
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\CartooningForerunner\Aliexpr
ess .lnk, Quarentena, [1293], [431028],1.0.5635
ess.ico, Quarentena, [1293], [431028],1.0.5635
ess.lnk, Quarentena, [1293], [431028],1.0.5635
ess.smenu.URL, Quarentena, [1293], [431028],1.0.5635
ess.tbar.URL, Quarentena, [1293], [431028],1.0.5635
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\CartooningForerunner\Critiqu
ingEclair.dat, Quarentena, [1293], [431028],1.0.5635
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\CartooningForerunner\Dialect
Concentrically.dll, Quarentena, [1293], [431028],1.0.5635
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\CartooningForerunner\uninst.
exe, Quarentena, [1293], [431028],1.0.5635
PUP.Optional.MediaDownloader, C:\USERS\PUBLIC\DOCUMENTS\MEDIADOWNLOADER.EXE,
Quarentena, [3514], [445346],1.0.5635
PUP.Optional.InstallCore.Generic, C:\USERS\SOFIA\DOWNLOADS\BAIXAKI_SKYPE.EXE,
Quarentena, [6204], [511857],1.0.5635
PUP.Optional.InstallCore, C:\USERS\VLADEMIR\DOWNLOADS\BAIXAKI_QUEBRA-LINK.EXE,
Quarentena, [393], [324268],1.0.5635
PUP.Optional.BundleInstaller, C:\USERS\VLADEMIR\DOWNLOADS\BAND IN A BOX 2016 FULL
VERSION CRACK - SHARKDOWNLOADS_0164091494.EXE, Quarentena, [400],
[458014],1.0.5635
Adware.FileTour, C:\USERS\VLADEMIR\DOWNLOADS\BATALHA_EM_SEATTLE__LEGENDADO.ZIP,
Quarentena, [401], [404252],1.0.5635
PUP.Optional.BundleInstaller, C:\USERS\VLADEMIR\DOWNLOADS\COLDPLAY HIT
´S_3917156217.EXE, Quarentena, [400], [520835],1.0.5635
PUP.Optional.ErrorFixKit, C:\USERS\VLADEMIR\DOWNLOADS\ERRORKIT-SETUP.EXE,
Quarentena, [4530], [473742],1.0.5635
Adware.IStartSurf, C:\USERS\VLADEMIR\DOWNLOADS\HACKTOOL.ZIP, Quarentena, [588],
[348779],1.0.5635
MachineLearning/Anomalous.96%, C:\USERS\VLADEMIR\DOWNLOADS\INSTALACAO
ADOBEFLASHPLAYER 11.EXE, Quarentena, [0], [392687],1.0.5635
PUP.Optional.MoboGenie, C:\USERS\VLADEMIR\DOWNLOADS\MOBOGENIEMINI_1002_10006.EXE,
Quarentena, [2551], [102445],1.0.5635
PUP.Optional.Amonetize, C:\USERS\VLADEMIR\DOWNLOADS\ROBERT+HENRY+SROUR+ETICA.ACE,
Quarentena, [430], [82536],1.0.5635
PUP.Optional.SpyHunter, C:\USERS\VLADEMIR\DOWNLOADS\SPYHUNTER-INSTALLER (1).EXE,
Quarentena, [5242], [433139],1.0.5635
PUP.Optional.SpyHunter, C:\USERS\VLADEMIR\DOWNLOADS\SPYHUNTER-INSTALLER.EXE,
Quarentena, [5242], [433139],1.0.5635
Adware.ICLoader,
C:\USERS\VLADEMIR\DOWNLOADS\SUSAN_STRANGE_STATES_AND_MARKETS_PDF_DOWNLOAD.ZIP,
Quarentena, [501], [371410],1.0.5635
PUP.Optional.Wajam, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\SETUP
WIZARD\075D923B-59C7-4F58-913B-E4069D1F8457\WWE_1.58.1.36.EXE, Quarentena, [209],
[301204],1.0.5635
PUP.Optional.PullUpdate,
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\SETUP WIZARD\53EC921E-F525-
4BB8-8F80-DD72BC6F8AFB\SETUP.EXE, Quarentena, [408], [301158],1.0.5635
PUP.Optional.EoRezo.Generic,
C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\SETUP WIZARD\55E90908-0FC1-
4C22-BF8B-6DC7B1782A44\SUNNYDAY.EXE, Quarentena, [9556], [115895],1.0.5635
PUP.Optional.Uniblue, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\SETUP
WIZARD\9429E573-0A9D-4EF5-947E-60E16AC0B469\DRIVERSCANNER.EXE, Quarentena, [1302],
[519936],1.0.5635
Adware.Elex, C:\WINDOWS\INSTALLER\4C9D44D.MSI, Quarentena, [618], [370501],1.0.5635
Adware.Elex.ShrtCln, C:\USERS\SOFIA\APPDATA\LOCAL\GOOGLE\CHROME\USER
DATA\Default\Web Data, Substituído, [246], [454715],1.0.5635
Setor físico: 0
Instrumentação do Windows (WMI): 0
(end)

Virus - Relatorio

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Virus - Relatorio

Uploaded by

Copyright:

Available Formats

Malwarebytes

You might also like