cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão:07-02-2016
Executado por Proprietario (administrador) em PROPRIETARIO-PC (13-02-2016 13:31:17)
Executando a partir de C:\Users\Proprietario\Downloads\Programs
Perfis Carregados: Proprietario (Perfis Disponíveis: Proprietario)
Platform: Windows 7 Professional (X64) Idioma: Português (Brasil)
Internet Explorer Versão 8 (Navegador padrão: FF)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
(Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [NBKeyScan] => C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-02-18] (Nero AG)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-01-12] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3873704 2016-02-01] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [170496 2009-02-06] (ArcSoft Inc.)
HKLM-x32\...\Run: [TV IR] => C:\Program Files (x86)\TV IR\TV IR.exe [692296 2010-04-21] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2056841780-3759938509-4262343036-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKU\S-1-5-21-2056841780-3759938509-4262343036-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3931728 2015-12-08] (Tonec Inc.)
HKU\S-1-5-21-2056841780-3759938509-4262343036-1000\...\MountPoints2: {ea386011-cac4-11e5-afeb-806e6f6e6963} - D:\0091.exe
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk [2016-02-13]
ShortcutTarget: TMMonitor.lnk -> C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{0C996A4E-5D49-4E90-BD25-739244AD1029}: [DhcpNameServer] 8.8.8.8 8.8.4.4

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2056841780-3759938509-4262343036-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={EF0F86F1-1CBD-492C-A749-D0B168112371}&mid=d8bb1d2bfcd147cca3f595ceba090da7-bac44df1c6573411c47493a90dae72a31f621de2&lang=en&ds=AVG&coid=avgtbavg&cmpid=0116pi&pr=fr&d=2016-02-03 22:14:06&v=4.2.5.441&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-13] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-13] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Proprietario\AppData\Roaming\Mozilla\Firefox\Profiles\lgpt10vq.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-12] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-12] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1223183.dll [2015-12-22] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Proprietario\AppData\Roaming\Mozilla\Firefox\Profiles\lgpt10vq.default\Extensions\abs@avira.com [2016-02-13]
FF Extension: MEGA - C:\Users\Proprietario\AppData\Roaming\Mozilla\Firefox\Profiles\lgpt10vq.default\Extensions\firefox@mega.co.nz.xpi [2016-02-13]
FF Extension: Adblock Plus - C:\Users\Proprietario\AppData\Roaming\Mozilla\Firefox\Profiles\lgpt10vq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-12]
FF HKU\S-1-5-21-2056841780-3759938509-4262343036-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: IDM integration - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-12-09]
FF HKU\S-1-5-21-2056841780-3759938509-4262343036-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Proprietario\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Proprietario\AppData\Roaming\IDM\idmmzcc5 [2016-02-13] [não assinado]
FF HKU\S-1-5-21-2056841780-3759938509-4262343036-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

Chrome:
=======
CHR Profile: C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-03]
CHR Extension: (Google Docs) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-03]
CHR Extension: (Google Drive) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-03]
CHR Extension: (YouTube) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-03]
CHR Extension: (Google Search) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-03]
CHR Extension: (Planilhas do Google) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-03]
CHR Extension: (Segurança do navegador Avira) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-13]
CHR Extension: (Documentos Google off-line) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-03]
CHR Extension: (AdBlock) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-12]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-02-03]
CHR Extension: (Gmail) - C:\Users\Proprietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-03]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-18]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-18]

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [604144 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3881184 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1048488 2016-01-12] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [561104 2016-02-01] (AVG Technologies CZ, s.r.o.)
R2 Nero BackItUp Scheduler 3; C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-02-18] (Nero AG)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [529704 2008-02-28] (Nero AG)
R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Arquivo não assinado]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2016-01-05] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-08] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [398256 2015-08-14] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [260528 2016-01-22] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [302000 2015-10-08] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 smsbda; C:\Windows\System32\drivers\smsbda.sys [63648 2009-12-03] (Siano)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-02-13 13:28 - 2016-02-13 13:31 - 00000000 ____D C:\FRST
2016-02-13 13:15 - 2016-02-13 13:15 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-02-13 13:14 - 2016-02-13 13:14 - 00000000 ____D C:\Users\Todos os Usuários\TEMP
2016-02-13 13:14 - 2016-02-13 13:14 - 00000000 ____D C:\ProgramData\TEMP
2016-02-13 12:45 - 2016-02-13 12:45 - 00000000 ____D C:\Users\Proprietario\Desktop\citra-latest-windows-amd64
2016-02-13 12:20 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2016-02-13 12:20 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-02-13 12:20 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2016-02-13 12:20 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2016-02-13 12:20 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2016-02-13 12:20 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2016-02-13 12:20 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2016-02-13 12:20 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2016-02-13 12:20 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-02-13 12:20 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2016-02-13 12:20 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2016-02-13 12:20 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2016-02-13 12:20 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2016-02-13 12:20 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2016-02-13 12:20 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2016-02-13 12:04 - 2016-02-13 12:20 - 00000000 ____D C:\Windows\SysWOW64\directx
2016-02-13 12:02 - 2016-02-13 12:03 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-02-13 12:02 - 2016-02-13 12:03 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-13 12:01 - 2016-02-13 12:35 - 00000000 ____D C:\Users\Public\Documents\WinDS PRO
2016-02-13 12:01 - 2016-02-13 12:01 - 00002162 _____ C:\Users\Public\Desktop\WinDS PRO.lnk
2016-02-13 12:01 - 2016-02-13 12:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDS PRO
2016-02-13 11:36 - 2016-02-13 11:36 - 424148992 _____ C:\Users\Proprietario\Desktop\Ome-Ru Fr€€
2016-02-13 11:10 - 2016-02-13 11:10 - 00000000 ____D C:\Users\Proprietario\Desktop\3DS To CIA Converter v4.1
2016-02-13 09:59 - 2016-02-13 13:29 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\DMCache
2016-02-13 09:59 - 2016-02-13 12:44 - 00000000 ____D C:\Users\Proprietario\Downloads\Compressed
2016-02-13 09:59 - 2016-02-13 10:42 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\IDM
2016-02-13 09:59 - 2016-02-13 09:59 - 00000000 ____D C:\Users\Todos os Usuários\IDM
2016-02-13 09:59 - 2016-02-13 09:59 - 00000000 ____D C:\Users\Proprietario\Downloads\Video
2016-02-13 09:59 - 2016-02-13 09:59 - 00000000 ____D C:\ProgramData\IDM
2016-02-13 09:57 - 2016-02-13 09:57 - 00001013 _____ C:\Users\Proprietario\Desktop\Internet Download Manager.lnk
2016-02-13 09:57 - 2016-02-13 09:57 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-02-13 09:57 - 2016-02-13 09:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-02-13 09:56 - 2016-02-13 09:56 - 00000000 ____D C:\Users\Proprietario\Desktop\IDM 6.25 Build 9 + Crack
2016-02-13 09:18 - 2016-02-13 09:18 - 00000000 ____D C:\Users\Proprietario\Desktop\WinDS PRO 2016.01.28
2016-02-13 08:50 - 2009-11-25 12:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-02-13 08:50 - 2009-11-25 12:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2016-02-13 08:50 - 2009-11-25 12:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-02-13 08:50 - 2009-11-25 12:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-02-13 08:50 - 2009-11-25 12:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2016-02-13 08:50 - 2009-11-25 12:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2016-02-13 08:50 - 2009-11-25 12:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-02-13 08:50 - 2009-11-25 12:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2016-02-13 08:50 - 2009-11-25 12:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2016-02-13 08:50 - 2009-11-25 12:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-02-13 02:38 - 2016-02-13 09:59 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2016-02-13 02:33 - 2016-02-13 02:33 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\WinRAR
2016-02-13 01:15 - 2016-02-13 02:43 - 271802696 _____ (BlueStack Systems Inc.) C:\Users\Proprietario\Downloads\BlueStacks2_native.exe
2016-02-13 00:09 - 2016-02-13 00:09 - 00000000 ____D C:\Users\Proprietario\Documents\ArcSoft ToGo
2016-02-13 00:09 - 2016-02-13 00:09 - 00000000 ____D C:\Users\Proprietario\AppData\Local\ArcSoft
2016-02-13 00:09 - 2016-02-13 00:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tv IR
2016-02-13 00:09 - 2016-02-13 00:09 - 00000000 ____D C:\Program Files (x86)\TV IR
2016-02-13 00:08 - 2016-02-13 00:10 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\ArcSoft
2016-02-13 00:08 - 2016-02-13 00:09 - 00000000 ____D C:\Users\Todos os Usuários\ArcSoft
2016-02-13 00:08 - 2016-02-13 00:09 - 00000000 ____D C:\ProgramData\ArcSoft
2016-02-13 00:08 - 2016-02-13 00:08 - 00002005 _____ C:\Users\Public\Desktop\TotalMedia 3.5.lnk
2016-02-13 00:08 - 2016-02-13 00:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft TotalMedia 3.5
2016-02-13 00:08 - 2016-02-13 00:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Connect
2016-02-13 00:08 - 2006-11-14 11:31 - 00022784 _____ (Arcsoft, Inc.) C:\Windows\SysWOW64\Drivers\afc.sys
2016-02-13 00:07 - 2016-02-13 00:07 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2016-02-13 00:07 - 2011-04-09 04:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-02-13 00:07 - 2011-04-09 04:45 - 05509504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-13 00:07 - 2011-04-09 04:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-02-13 00:07 - 2011-04-09 04:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-02-13 00:07 - 2011-04-09 03:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2016-02-13 00:07 - 2005-07-16 02:35 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2016-02-13 00:07 - 2003-03-18 22:14 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2016-02-13 00:07 - 2003-02-21 04:42 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2016-02-13 00:04 - 2016-02-13 00:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-13 00:04 - 2016-02-13 00:04 - 00000000 ____D C:\Program Files (x86)\Driver
2016-02-12 22:27 - 2016-02-12 23:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-03 22:14 - 2016-02-12 21:54 - 00000000 ____D C:\Users\Todos os Usuários\AVG Security Toolbar
2016-02-03 22:14 - 2016-02-12 21:54 - 00000000 ____D C:\ProgramData\AVG Security Toolbar
2016-02-03 22:04 - 2016-02-03 22:04 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\AVG
2016-02-03 22:03 - 2016-02-12 22:17 - 00000936 _____ C:\Users\Public\Desktop\AVG Protection.lnk
2016-02-03 22:03 - 2016-02-12 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-02-03 22:03 - 2016-02-12 22:17 - 00000000 ____D C:\Program Files\Common Files\AV
2016-02-03 22:03 - 2016-02-03 22:03 - 00000000 ___HD C:\$AVG
2016-02-03 22:03 - 2016-02-03 22:03 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\TuneUp Software
2016-02-03 22:02 - 2016-02-13 12:52 - 00000000 ____D C:\Users\Todos os Usuários\MFAData
2016-02-03 22:02 - 2016-02-13 12:52 - 00000000 ____D C:\ProgramData\MFAData
2016-02-03 22:02 - 2016-02-03 22:03 - 00000000 ____D C:\Users\Todos os Usuários\Avg
2016-02-03 22:02 - 2016-02-03 22:03 - 00000000 ____D C:\ProgramData\Avg
2016-02-03 22:02 - 2016-02-03 22:02 - 00000000 ____D C:\Users\Proprietario\AppData\Local\MFAData
2016-02-03 22:02 - 2016-02-03 22:02 - 00000000 ____D C:\Program Files (x86)\AVG
2016-02-03 22:01 - 2016-02-12 22:16 - 00000000 ____D C:\Users\Proprietario\AppData\Local\Avg
2016-02-03 22:01 - 2016-02-03 22:02 - 00000000 ____D C:\Users\Proprietario\AppData\Local\AvgSetupLog
2016-02-03 21:55 - 2016-02-03 21:55 - 00000000 ____D C:\Program Files (x86)\GPLGS
2016-02-03 21:54 - 2016-02-03 21:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CutePDF
2016-02-03 21:54 - 2016-02-03 21:54 - 00000000 ____D C:\Program Files (x86)\Acro Software
2016-02-03 21:54 - 2016-01-22 16:57 - 00089008 _____ C:\Windows\system32\cpwmon64.dll
2016-02-03 21:52 - 2016-02-03 21:52 - 02570096 _____ (Acro Software Inc. ) C:\Users\Proprietario\Downloads\CuteWriter.exe
2016-02-03 21:49 - 2016-02-03 21:49 - 00002777 _____ C:\Users\Public\Desktop\Nero StartSmart.lnk
2016-02-03 21:49 - 2016-02-03 21:49 - 00000000 ____D C:\Users\Proprietario\AppData\Local\Ahead
2016-02-03 21:49 - 2016-02-03 21:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 8
2016-02-03 21:49 - 2016-02-03 21:49 - 00000000 ____D C:\Program Files (x86)\NeroInstall.bak
2016-02-03 21:46 - 2016-02-03 21:46 - 00001024 _____ C:\Users\Proprietario\.rnd
2016-02-03 21:46 - 2016-02-03 21:46 - 00000026 _____ C:\Windows\Irremote.ini
2016-02-03 21:45 - 2016-02-03 21:45 - 00000000 ____D C:\Users\Todos os Usuários\Nero
2016-02-03 21:45 - 2016-02-03 21:45 - 00000000 ____D C:\Users\Proprietario\AppData\LocalLow\Adobe
2016-02-03 21:45 - 2016-02-03 21:45 - 00000000 ____D C:\ProgramData\Nero
2016-02-03 21:45 - 2016-02-03 21:45 - 00000000 ____D C:\Program Files (x86)\Nero
2016-02-03 21:45 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2016-02-03 21:45 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2016-02-03 21:42 - 2016-02-03 21:42 - 06828320 _____ (Piriform Ltd) C:\Users\Proprietario\Downloads\ccsetup_514.exe
2016-02-03 21:40 - 2016-02-03 21:53 - 244960376 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Proprietario\Downloads\AVG_Antivirus_Free_x64_693(1).exe
2016-02-03 21:40 - 2016-02-03 21:48 - 223359696 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Proprietario\Downloads\AVG_Antivirus_Free_x86_694.exe
2016-02-03 21:40 - 2016-02-03 21:48 - 201900432 _____ (AVAST Software) C:\Users\Proprietario\Downloads\avast_free_antivirus_setup.exe
2016-02-03 21:31 - 2016-02-13 08:57 - 00000214 _____ C:\Windows\Tasks\AutoKMS.job
2016-02-03 21:31 - 2016-02-03 21:31 - 00108824 _____ C:\Users\Proprietario\AppData\Local\GDIPFONTCACHEV1.DAT
2016-02-03 21:31 - 2016-02-03 21:31 - 00002446 _____ C:\Windows\System32\Tasks\AutoKMS
2016-02-03 21:31 - 2016-02-03 21:31 - 00000135 _____ C:\Windows\AutoKMS.ini
2016-02-03 21:26 - 2016-02-03 21:26 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-02-03 21:26 - 2016-02-03 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2016-02-03 21:26 - 2016-02-03 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-02-03 21:25 - 2016-02-03 21:25 - 00000000 ____D C:\Windows\PCHEALTH
2016-02-03 21:25 - 2016-02-03 21:25 - 00000000 ____D C:\Program Files\Microsoft Synchronization Services
2016-02-03 21:25 - 2016-02-03 21:25 - 00000000 ____D C:\Program Files\Microsoft Sync Framework
2016-02-03 21:25 - 2016-02-03 21:25 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2016-02-03 21:25 - 2016-02-03 21:25 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-02-03 21:24 - 2016-02-03 20:31 - 00000000 ____D C:\Windows\Panther
2016-02-03 21:23 - 2016-02-03 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2005
2016-02-03 21:23 - 2016-02-03 21:23 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-02-03 21:23 - 2016-02-03 21:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2016-02-03 21:23 - 2016-02-03 21:23 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2016-02-03 21:22 - 2016-02-03 21:28 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-02-03 21:22 - 2016-02-03 21:25 - 00000000 ____D C:\Program Files\Microsoft Office
2016-02-03 21:22 - 2016-02-03 21:22 - 00000000 __RHD C:\MSOCache
2016-02-03 21:22 - 2016-02-03 21:22 - 00000000 ____D C:\Users\Proprietario\AppData\Local\Microsoft Help
2016-02-03 21:22 - 2016-02-03 21:22 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-02-03 21:21 - 2016-02-03 21:45 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\Adobe
2016-02-03 21:21 - 2016-02-03 21:21 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2016-02-03 21:21 - 2016-02-03 21:21 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\Macromedia
2016-02-03 21:21 - 2016-02-03 21:21 - 00000000 ____D C:\Users\Proprietario\AppData\Local\Macromedia
2016-02-03 21:20 - 2016-02-03 21:21 - 05032952 _____ (Adobe Systems Inc.) C:\Users\Proprietario\Downloads\Shockwave_Installer_Slim.exe
2016-02-03 21:17 - 2016-02-13 12:32 - 00000902 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-02-03 21:17 - 2016-02-12 22:36 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-03 21:17 - 2016-02-12 22:36 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-03 21:17 - 2016-02-12 22:36 - 00003840 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-03 21:17 - 2016-02-03 21:17 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-02-03 21:17 - 2016-02-03 21:17 - 00000000 ____D C:\Windows\system32\Macromed
2016-02-03 21:15 - 2016-02-03 21:45 - 00000000 ____D C:\Users\Proprietario\AppData\Local\Adobe
2016-02-03 20:56 - 2015-12-02 13:18 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-02-03 20:53 - 2016-02-12 23:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-03 20:53 - 2016-02-03 21:19 - 00000000 ____D C:\Users\Proprietario\AppData\Local\Mozilla
2016-02-03 20:53 - 2016-02-03 21:08 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\Mozilla
2016-02-03 20:53 - 2016-02-03 20:53 - 00001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-03 20:53 - 2016-02-03 20:53 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-02-03 20:49 - 2016-02-03 20:52 - 56786528 _____ (Oracle Corporation) C:\Users\Proprietario\Downloads\jre-8u71-windows-x64.exe
2016-02-03 20:49 - 2016-02-03 20:52 - 49972320 _____ (Oracle Corporation) C:\Users\Proprietario\Downloads\jre-8u71-windows-i586.exe
2016-02-03 20:48 - 2016-02-03 20:52 - 43005624 _____ C:\Users\Proprietario\Downloads\Firefox Setup 44.0.exe
2016-02-03 20:48 - 2016-02-03 20:49 - 45868112 _____ (Google Inc.) C:\Users\Proprietario\Downloads\ChromeStandaloneSetup (1).exe
2016-02-03 20:48 - 2016-02-03 20:48 - 00242240 _____ C:\Users\Proprietario\Downloads\Firefox Setup Stub 44.0.exe
2016-02-03 20:47 - 2016-02-03 20:47 - 00000000 ____D C:\Program Files (x86)\Intel
2016-02-03 20:47 - 2016-02-03 20:47 - 00000000 ____D C:\Intel
2016-02-03 20:44 - 2016-02-13 12:54 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-03 20:44 - 2016-02-13 08:57 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-03 20:44 - 2016-02-12 23:01 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-03 20:44 - 2016-02-12 23:01 - 00002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-03 20:44 - 2016-02-12 22:33 - 00000000 ____D C:\Users\Proprietario\AppData\Local\Google
2016-02-03 20:44 - 2016-02-03 20:49 - 00004066 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-03 20:44 - 2016-02-03 20:49 - 00003814 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-03 20:44 - 2016-02-03 20:46 - 00000000 ____D C:\Users\Proprietario\Downloads\Service Pack1
2016-02-03 20:44 - 2016-02-03 20:44 - 00000000 ____D C:\Program Files (x86)\Google
2016-02-03 20:43 - 2016-02-03 21:52 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-02-03 20:43 - 2012-06-02 20:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-03 20:43 - 2012-06-02 20:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-03 20:43 - 2012-06-02 20:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-03 20:43 - 2012-06-02 20:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-03 20:42 - 2016-02-03 21:52 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-02-03 20:42 - 2016-02-03 20:42 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-02-03 20:42 - 2016-02-03 20:42 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-03 20:42 - 2016-02-03 20:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-03 20:42 - 2016-02-03 20:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-02-03 20:42 - 2012-06-02 20:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-03 20:42 - 2012-06-02 20:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-03 20:42 - 2012-06-02 20:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-03 20:42 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-03 20:42 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-03 20:41 - 2016-02-13 02:23 - 00000000 ____D C:\Users\Proprietario\Downloads\Office 2010 64bits
2016-02-03 20:41 - 2016-02-03 21:48 - 00000000 ____D C:\Users\Todos os Usuários\Adobe
2016-02-03 20:41 - 2016-02-03 21:48 - 00000000 ____D C:\ProgramData\Adobe
2016-02-03 20:41 - 2016-02-03 20:42 - 00000000 ____D C:\Program Files\WinRAR
2016-02-03 20:41 - 2015-11-30 20:46 - 06801752 _____ (Piriform Ltd) C:\Users\Proprietario\Downloads\ccsetup512.exe
2016-02-03 20:41 - 2015-04-09 18:22 - 03478920 _____ C:\Users\Proprietario\Downloads\winrar-x64-521br.exe
2016-02-03 20:41 - 2010-07-24 08:41 - 00000056 _____ C:\Users\Proprietario\Downloads\Nero 8 Serial.txt
2016-02-03 20:41 - 2008-05-18 15:28 - 196463120 _____ (Igor Pavlov) C:\Users\Proprietario\Downloads\Nero-8.3.2.1_ptb_trial.exe
2016-02-03 20:40 - 2015-10-23 20:08 - 236991136 _____ (AVG Technologies) C:\Users\Proprietario\Downloads\AVG_Antivirus_Free_x64_693.exe
2016-02-03 20:40 - 2015-06-23 10:04 - 51254432 _____ (Adobe Systems Incorporated) C:\Users\Proprietario\Downloads\AcroRdrDC1500720033_pt_BR.exe
2016-02-03 20:39 - 2016-02-03 20:39 - 00000000 ____D C:\Users\Proprietario\Downloads\Office 2013
2016-02-03 20:32 - 2016-02-03 20:32 - 00001423 _____ C:\Users\Proprietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-03 20:32 - 2016-02-03 20:32 - 00001389 _____ C:\Users\Proprietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-02-03 20:31 - 2016-02-13 08:46 - 00000000 ____D C:\Users\Proprietario\AppData\Local\VirtualStore
2016-02-03 20:31 - 2016-02-03 21:46 - 00000000 ____D C:\Users\Proprietario
2016-02-03 20:31 - 2016-02-03 20:31 - 00000020 ___SH C:\Users\Proprietario\ntuser.ini
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Usuário Padrão
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Todos os Usuários
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Modelos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Meus documentos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Menu Iniciar
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Documents\Minhas músicas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Documents\Minhas imagens
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Documents\Meus vídeos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Dados de aplicativos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Configurações locais
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\AppData\Local\Histórico
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\AppData\Local\Dados de aplicativos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Ambiente de rede
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Proprietario\Ambiente de impressão
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Modelos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Meus documentos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Configurações locais
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\ProgramData\Modelos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\ProgramData\Favoritos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\ProgramData\Documentos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2016-02-03 20:31 - 2016-02-03 20:31 - 00000000 _SHDL C:\Arquivos de Programas
2016-02-03 20:31 - 2009-07-14 16:12 - 00000000 ____D C:\Users\Proprietario\AppData\Roaming\Media Center Programs
2016-02-03 20:28 - 2016-02-03 20:28 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-02-03 20:28 - 2016-02-03 20:28 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-01-22 15:15 - 2016-01-22 15:15 - 00260528 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2016-01-08 10:46 - 2016-01-08 10:46 - 00272304 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2016-01-08 10:46 - 2016-01-08 10:46 - 00023472 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avguniva.sys
2016-01-05 16:02 - 2016-01-05 16:02 - 00315312 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-12-18 11:20 - 2015-12-10 06:53 - 00199152 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2015-12-04 14:27 - 2015-12-04 14:27 - 00042416 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx64.sys

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-02-13 13:24 - 2009-07-14 03:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-02-13 09:04 - 2009-07-14 02:45 - 00020688 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-02-13 09:04 - 2009-07-14 02:45 - 00020688 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-02-13 09:03 - 2009-07-14 15:55 - 00663606 _____ C:\Windows\system32\prfh0416.dat
2016-02-13 09:03 - 2009-07-14 15:55 - 00127896 _____ C:\Windows\system32\prfc0416.dat
2016-02-13 09:03 - 2009-07-14 03:13 - 01517030 _____ C:\Windows\system32\PerfStringBackup.INI
2016-02-13 09:03 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\inf
2016-02-13 08:57 - 2009-07-14 03:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-02-12 22:52 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\rescache
2016-02-12 21:54 - 2009-07-14 01:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-02-03 21:45 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\Cursors
2016-02-03 21:36 - 2009-07-14 02:45 - 00415600 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-03 21:25 - 2009-07-14 16:12 - 00000000 ____D C:\Windows\ShellNew
2016-02-03 21:25 - 2009-07-14 03:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-02-03 21:25 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-02-03 21:24 - 2009-07-14 03:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2016-02-03 21:23 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Common Files\System
2016-02-03 21:23 - 2009-07-14 00:34 - 00000478 _____ C:\Windows\win.ini
2016-02-03 20:37 - 2009-07-14 03:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-02-03 20:31 - 2009-07-14 01:20 - 00000000 ____D C:\Program Files\Windows NT
2016-02-03 20:28 - 2009-07-14 01:20 - 00000000 ____D C:\Windows\system32\sysprep
2016-02-03 20:25 - 2009-07-14 16:12 - 00000000 ____D C:\Windows\CSC

Alguns arquivos em TEMP:
====================
C:\Users\Proprietario\AppData\Local\Temp\converter.exe
C:\Users\Proprietario\AppData\Local\Temp\UNINSTALL.EXE


==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-02-12 22:42

==================== Fim de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité