Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão:05-03-2016 01
Executado por ILIDA006 (administrador) em ILIDA006-PC (06-04-2016 11:33:59)
Executando a partir de C:\Users\ILIDA006\Desktop
Perfis Carregados: ILIDA006 (Perfis Disponíveis: ILIDA006)
Platform: Windows 7 Home Basic Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Intel Corporation) C:\WINDOWS\System32\igfxCUIService.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\WINDOWS\System32\igfxEM.exe
(Intel Corporation) C:\WINDOWS\System32\igfxHK.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\xampp\xampp-control.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\xampp\mysql\bin\mysqld.exe
() C:\xampp\xampp-control.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registro (Whitelisted) ===========================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Dell, Inc.)
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1474168 2015-12-10] ()
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-02-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3930384 2016-03-22] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-1313665589-348142795-2787479133-1000\...\Run: [ctfmon] => C:\Windows\system32\ctfmon.exe [9728 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-1313665589-348142795-2787479133-1000\...\MountPoints2: {7f14cc2b-5dc4-11e4-b1eb-a41f72fae5ee} - F:\iLinker.exe
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BavShx64.dll Nenhum Arquivo
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 201.6.2.92 201.6.2.192
Tcpip\..\Interfaces\{0AE7E3F8-8E90-41F5-B3B8-BDA3DA161517}: [DhcpNameServer] 201.6.2.92 201.6.2.192
Tcpip\..\Interfaces\{EDD2E69F-C943-4046-A360-809635FA5F74}: [DhcpNameServer] 201.6.2.92 201.6.2.192
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1313665589-348142795-2787479133-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.vanyluz.com/
HKU\S-1-5-21-1313665589-348142795-2787479133-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1313665589-348142795-2787479133-1000 -> DefaultScope {77A2F91B-ED82-40A5-B09C-F08A179D17C0} URL = hxxps://br.search.yahoo.com/search?fr=mcafee&type=C014BR978D20150202&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1313665589-348142795-2787479133-1000 -> {0B3AD18D-CAC3-45E8-8A1D-7F632A4AF034} URL =
SearchScopes: HKU\S-1-5-21-1313665589-348142795-2787479133-1000 -> {47D3EBF2-9074-47A9-A577-1DE59F1BF7FA} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1313665589-348142795-2787479133-1000 -> {77A2F91B-ED82-40A5-B09C-F08A179D17C0} URL = hxxps://br.search.yahoo.com/search?fr=mcafee&type=C014BR978D20150202&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-04-06] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-04-06] (Microsoft Corporation)
BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2015-12-10] ()
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-04-06] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-04-06] (Microsoft Corporation)
BHO-x32: Auxiliar de Conexão de Conta da Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-04-06] (Microsoft Corporation)
BHO-x32: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2015-12-10] ()
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-04-06] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-04-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-04-06] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-04-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @qq.com/QQPhotoDrawEx -> C:\Program Files (x86)\Tencent\Qzone\npQQPhotoDrawEx.dll [2013-08-13] ()
FF Plugin-x32: @qq.com/QzoneMusic -> C:\Program Files (x86)\Tencent\QQMusic\QzoneMusic\npQzoneMusic.dll [2016-02-25] (Tencent)
FF Plugin-x32: @qq.com/TXSSO -> C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.4.1\Bin\npSSOAxCtrlForPTLogin.dll [2015-12-01] (Tencent)
FF Plugin-x32: @tencent.com/npQQMailWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\npQQMailWebKit.dll [2013-04-25] (Tencent)
FF Plugin-x32: @tencent.com/nptxftnWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\nptxftnWebKit.dll [2013-04-08] (Tencent Technology (Shenzhen) Company Limited)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-22] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1313665589-348142795-2787479133-1000: @1.qq.com/npqqwebgame -> C:\Users\ILIDA006\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.3\npqqwebgame.dll [2015-10-20] ( )
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.gmail.com/","hxxp://www.outlook.com/","hxxp://www.google.com.br/"
CHR DefaultSearchKeyword: Default -> www.google.com.br
CHR Profile: C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-22]
CHR Extension: (Google Docs) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-22]
CHR Extension: (Google Drive) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-04]
CHR Extension: (YouTube) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pool) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\cedbddnnmhgnedpamoenmdkhnpnfbpjb [2016-04-06]
CHR Extension: (Google Search) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-04]
CHR Extension: (Documentos Google off-line) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Build with Chrome) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbbhbjeecagnlfgggogfclkdjamoapf [2016-04-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-22]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Meu tema do Chrome) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2016-04-06]
CHR Extension: (Destroyer Bomba 3D) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\okehlnjpihomkdokiiafpejniofjaoom [2016-04-06]
CHR Extension: (Gmail) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]
==================== Serviços (Whitelisted) ========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [638456 2016-03-22] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3993088 2016-03-22] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1045928 2016-02-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [593880 2016-03-22] (AVG Technologies CZ, s.r.o.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2776664 2015-08-16] (Microsoft Corporation)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2557136 2015-02-26] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-02-26] (Dell Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
S2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [903288 2015-12-10] () [Arquivo não assinado]
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-30] (@ByELDI) [Arquivo não assinado]
S3 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [19288 2015-03-04] (Dell Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-01-30] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [73728 2012-02-08] (Atheros) [Arquivo não assinado]
S2 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [X]
S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [X]
===================== Drivers (Whitelisted) ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [137296 2015-07-31] (360.cn)
S3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [77904 2015-12-10] () [Arquivo não assinado]
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [319568 2015-09-21] (360.cn)
S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [40520 2015-05-18] (360.cn)
R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [363088 2015-07-31] (360.cn)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [306976 2016-03-08] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [246560 2016-03-07] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [302000 2015-10-08] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71456 2016-03-08] (AVG Technologies CZ, s.r.o.)
R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [178768 2015-07-31] (360.cn)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-02-26] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-02-26] (Dell Computer Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-04-06 11:33 - 2016-04-06 11:34 - 00021344 _____ C:\Users\ILIDA006\Desktop\FRST.txt
2016-04-06 11:33 - 2016-04-06 11:33 - 02374144 _____ (Farbar) C:\Users\ILIDA006\Desktop\FRST64.exe
2016-04-06 11:33 - 2016-04-06 11:33 - 00000000 ____D C:\FRST
2016-04-06 11:28 - 2016-04-06 11:29 - 21803966 _____ C:\Users\ILIDA006\Downloads\prestashop_1.6.1.4_pt.zip
2016-04-06 11:25 - 2016-04-06 11:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2016-04-06 11:20 - 2016-04-06 11:25 - 00003370 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart
2016-04-06 11:20 - 2016-04-06 11:25 - 00000000 ____D C:\Program Files\KMSpico
2016-04-06 11:20 - 2010-12-05 23:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2016-04-06 11:16 - 2016-04-06 11:16 - 00002178 _____ C:\Users\ILIDA006\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-06 11:16 - 2016-04-06 11:16 - 00002108 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-06 11:16 - 2016-04-06 11:16 - 00002108 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-06 11:16 - 2016-04-06 11:16 - 00002108 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-06 11:16 - 2016-04-06 11:16 - 00000000 ___RD C:\Users\ILIDA006\OneDrive
2016-04-06 11:16 - 2016-04-06 11:16 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-04-06 11:16 - 2016-04-06 11:16 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-04-06 11:16 - 2016-04-06 11:16 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-04-06 11:15 - 2016-04-06 11:15 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-04-06 11:08 - 2016-04-06 11:08 - 00002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002408 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002344 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002324 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-04-06 11:07 - 2016-04-06 11:07 - 00002461 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-04-06 11:07 - 2016-04-06 11:07 - 00002373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-04-06 11:07 - 2016-04-06 11:07 - 00002354 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-04-06 11:07 - 2016-04-06 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2016-04-06 11:05 - 2016-04-06 11:05 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-04-06 11:03 - 2016-04-06 11:05 - 00000000 ____D C:\Program Files\Microsoft Office
2016-04-06 11:03 - 2016-04-06 11:03 - 21543568 _____ C:\WindowsMSYH.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 21302624 _____ C:\WindowsMSJH.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 14381616 _____ C:\WindowsMSYHBD.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 14343024 _____ C:\WindowsMSJHBD.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00222632 _____ C:\WindowsMSUIGHUR.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00094064 _____ C:\WindowsLEELAWAD.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00093836 _____ C:\WindowsLEELAWDB.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00076588 _____ C:\WindowsALGER.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00066696 _____ C:\WindowsVIVALDII.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00056596 _____ C:\WindowsHARLOWSI.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00047644 _____ C:\WindowsBAUHS93.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-04-06 10:55 - 2016-04-06 10:56 - 00000000 ____D C:\Users\ILIDA006\Documents\Programas
2016-04-06 10:53 - 2016-04-06 10:53 - 00000000 ____D C:\Users\ILIDA006\Documents\My Palettes
2016-04-06 10:49 - 2016-04-06 10:49 - 00000000 ____D C:\Users\Todos os Usuários\Protexis64
2016-04-06 10:49 - 2016-04-06 10:49 - 00000000 ____D C:\Users\ILIDA006\Documents\Corel
2016-04-06 10:49 - 2016-04-06 10:49 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Corel
2016-04-06 10:49 - 2016-04-06 10:49 - 00000000 ____D C:\ProgramData\Protexis64
2016-04-06 10:47 - 2016-04-06 10:45 - 00003015 _____ C:\Users\Public\Desktop\CorelDRAW X7 (64-Bit).lnk
2016-04-06 10:46 - 2016-04-06 10:46 - 00000000 ____D C:\Users\Public\Documents\Corel
2016-04-06 10:46 - 2016-04-06 10:46 - 00000000 ____D C:\Program Files\Common Files\Protexis
2016-04-06 10:46 - 2016-04-06 10:46 - 00000000 ____D C:\Program Files\Common Files\Corel
2016-04-06 10:45 - 2016-04-06 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X7 (64-bit)
2016-04-06 10:45 - 2016-04-06 10:46 - 00000000 ____D C:\Users\Todos os Usuários\Corel
2016-04-06 10:45 - 2016-04-06 10:46 - 00000000 ____D C:\ProgramData\Corel
2016-04-06 10:45 - 2016-04-06 10:45 - 00000000 ____D C:\Program Files\Corel
2016-04-06 10:39 - 2016-04-06 10:49 - 00000000 ____D C:\Users\Todos os Usuários\CorelDRAW Graphics Suite X7 x64
2016-04-06 10:39 - 2016-04-06 10:49 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X7 x64
2016-04-06 10:38 - 2016-04-06 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2016-04-06 10:35 - 2016-04-06 10:38 - 00000000 ____D C:\xampp
2016-04-06 10:11 - 2016-04-06 10:11 - 04203840 _____ C:\Users\ILIDA006\Downloads\npp.6.9.1.Installer.exe
2016-04-06 10:11 - 2016-04-06 10:11 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Notepad++
2016-04-06 10:11 - 2016-04-06 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-04-06 10:11 - 2016-04-06 10:11 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-04-06 10:05 - 2016-04-06 10:47 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-04-06 10:05 - 2016-04-06 10:47 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-06 10:00 - 2016-04-06 10:01 - 124274392 _____ (Bitnami) C:\Users\ILIDA006\Downloads\xampp-win32-7.0.4-0-VC14-installer.exe
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ___HD C:\$AVG
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\TuneUp Software
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\AVG
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ____D C:\Program Files\Common Files\AV
2016-04-06 09:47 - 2016-04-06 09:51 - 00000000 ____D C:\Users\Todos os Usuários\MFAData
2016-04-06 09:47 - 2016-04-06 09:51 - 00000000 ____D C:\ProgramData\MFAData
2016-04-06 09:47 - 2016-04-06 09:48 - 00000000 ____D C:\Users\Todos os Usuários\Avg
2016-04-06 09:47 - 2016-04-06 09:48 - 00000000 ____D C:\ProgramData\Avg
2016-04-06 09:47 - 2016-04-06 09:48 - 00000000 ____D C:\Program Files (x86)\AVG
2016-04-06 09:47 - 2016-04-06 09:47 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\MFAData
2016-04-06 09:47 - 2016-04-06 09:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-04-06 09:46 - 2016-04-06 09:48 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\Avg
2016-04-06 09:46 - 2016-04-06 09:47 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\AvgSetupLog
2016-04-06 09:46 - 2016-04-06 09:46 - 00000000 ____D C:\Users\Public\SogouInput
2016-04-06 09:36 - 2016-04-06 09:36 - 00000000 ____D C:\Program Files\McAfee
2016-04-06 07:50 - 2016-04-06 08:36 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\Microsoft Games
2016-04-05 15:50 - 2016-04-06 10:36 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\uTorrent
2016-03-15 16:41 - 2016-03-15 16:41 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\WinRAR
2016-03-15 16:40 - 2016-03-15 16:40 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-03-15 16:40 - 2016-03-15 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-03-15 16:40 - 2016-03-15 16:40 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-03-11 10:45 - 2016-03-11 10:45 - 00000000 ____D C:\Users\Todos os Usuários\IsolatedStorage
2016-03-11 10:45 - 2016-03-11 10:45 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\IsolatedStorage
2016-03-11 10:45 - 2016-03-11 10:45 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\FileViewPro
2016-03-11 10:45 - 2016-03-11 10:45 - 00000000 ____D C:\ProgramData\IsolatedStorage
2016-03-11 10:44 - 2016-03-11 10:44 - 00000000 ____D C:\Spacekace
2016-03-10 11:03 - 2016-03-10 11:03 - 00000000 ____D C:\Users\ILIDA006\AppData\LocalLow\TENCENT
2016-03-10 10:59 - 2016-03-10 10:59 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\Tencent
2016-03-10 10:58 - 2016-03-10 10:58 - 00000000 ____D C:\Users\ILIDA006\AppData\LocalLow\QQMiniDL
2016-03-10 10:58 - 2016-03-10 10:58 - 00000000 ____D C:\Program Files (x86)\Tencent
2016-03-10 10:58 - 2016-03-10 10:58 - 00000000 ____D C:\Program Files (x86)\QQMailPlugin
2016-03-10 10:57 - 2016-04-06 09:35 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Tencent
2016-03-10 10:57 - 2016-03-10 11:02 - 00000000 ____D C:\Users\Todos os Usuários\Tencent
2016-03-10 10:57 - 2016-03-10 11:02 - 00000000 ____D C:\ProgramData\Tencent
2016-03-08 16:26 - 2016-04-06 09:49 - 00000000 ____D C:\Users\ILIDA006\AppData\LocalLow\SogouPY
2016-03-08 16:26 - 2016-03-08 16:35 - 00000000 ____D C:\Users\Todos os Usuários\SogouInput
2016-03-08 16:26 - 2016-03-08 16:35 - 00000000 ____D C:\ProgramData\SogouInput
2016-03-08 16:12 - 2016-03-08 16:12 - 00306976 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2016-03-08 16:12 - 2016-03-08 16:12 - 00071456 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avguniva.sys
2016-03-07 13:39 - 2016-03-07 13:39 - 00246560 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2016-02-16 15:07 - 2016-02-16 15:07 - 00162592 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2016-02-16 15:05 - 2016-02-16 15:05 - 00360736 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2016-02-05 15:31 - 2016-02-05 15:32 - 00000000 ____D C:\Users\Public\MARKETING-LINHA-DE-PRODUTOS
2016-01-26 11:04 - 2016-01-26 11:04 - 00272304 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2016-01-15 08:44 - 2016-01-15 08:44 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-01-15 08:44 - 2016-01-15 08:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-01-07 10:24 - 2016-04-06 11:20 - 00135592 _____ C:\Users\ILIDA006\AppData\Local\GDIPFONTCACHEV1.DAT
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-04-06 11:30 - 2009-07-14 01:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-06 11:30 - 2009-07-14 01:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-06 11:16 - 2014-08-18 10:52 - 00000000 ____D C:\Users\ILIDA006
2016-04-06 11:15 - 2014-01-30 11:44 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-04-06 11:15 - 2014-01-30 11:44 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-04-06 11:15 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-04-06 11:15 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-04-06 11:07 - 2014-01-30 11:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-04-06 11:01 - 2014-08-18 11:23 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-04-06 11:01 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-04-06 10:59 - 2009-07-13 23:34 - 00000419 _____ C:\Windows\win.ini
2016-04-06 10:40 - 2015-09-22 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-04-06 09:55 - 2010-11-21 06:37 - 00708416 _____ C:\Windows\system32\prfh0416.dat
2016-04-06 09:55 - 2010-11-21 06:37 - 00148196 _____ C:\Windows\system32\prfc0416.dat
2016-04-06 09:55 - 2009-07-14 02:13 - 01642550 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-06 09:50 - 2014-01-30 11:44 - 00000000 ____D C:\Users\Todos os Usuários\McAfee
2016-04-06 09:50 - 2014-01-30 11:44 - 00000000 ____D C:\ProgramData\McAfee
2016-04-06 09:50 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-06 09:49 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\SysWOW64\IME
2016-04-04 09:33 - 2015-05-28 09:08 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\CutePDF Writer
2016-03-24 18:01 - 2015-09-10 13:46 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Skype
2016-03-15 17:00 - 2014-08-18 11:02 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\VirtualStore
2016-03-14 12:30 - 2014-08-19 16:44 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\ElevatedDiagnostics
Alguns arquivos em TEMP:
====================
C:\Users\ILIDA006\AppData\Local\Temp\0226931459946221mcinst.exe
C:\Users\ILIDA006\AppData\Local\Temp\ose00000.exe
C:\Users\ILIDA006\AppData\Local\Temp\QzoneMusic.exe
C:\Users\ILIDA006\AppData\Local\Temp\xmlUpdater.exe
==================== Bamital & volsnap =================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2016-03-29 09:22
==================== Fim de FRST.txt ============================
Executado por ILIDA006 (administrador) em ILIDA006-PC (06-04-2016 11:33:59)
Executando a partir de C:\Users\ILIDA006\Desktop
Perfis Carregados: ILIDA006 (Perfis Disponíveis: ILIDA006)
Platform: Windows 7 Home Basic Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processos (Whitelisted) =================
(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Intel Corporation) C:\WINDOWS\System32\igfxCUIService.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\WINDOWS\System32\igfxEM.exe
(Intel Corporation) C:\WINDOWS\System32\igfxHK.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\xampp\xampp-control.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\xampp\mysql\bin\mysqld.exe
() C:\xampp\xampp-control.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registro (Whitelisted) ===========================
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-25] (Dell, Inc.)
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1474168 2015-12-10] ()
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [179624 2016-02-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3930384 2016-03-22] (AVG Technologies CZ, s.r.o.)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-1313665589-348142795-2787479133-1000\...\Run: [ctfmon] => C:\Windows\system32\ctfmon.exe [9728 2009-07-13] (Microsoft Corporation)
HKU\S-1-5-21-1313665589-348142795-2787479133-1000\...\MountPoints2: {7f14cc2b-5dc4-11e4-b1eb-a41f72fae5ee} - F:\iLinker.exe
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\BavShx64.dll Nenhum Arquivo
==================== Internet (Whitelisted) ====================
(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)
Tcpip\Parameters: [DhcpNameServer] 201.6.2.92 201.6.2.192
Tcpip\..\Interfaces\{0AE7E3F8-8E90-41F5-B3B8-BDA3DA161517}: [DhcpNameServer] 201.6.2.92 201.6.2.192
Tcpip\..\Interfaces\{EDD2E69F-C943-4046-A360-809635FA5F74}: [DhcpNameServer] 201.6.2.92 201.6.2.192
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrição <======= ATENÇÃO
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1313665589-348142795-2787479133-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.vanyluz.com/
HKU\S-1-5-21-1313665589-348142795-2787479133-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1313665589-348142795-2787479133-1000 -> DefaultScope {77A2F91B-ED82-40A5-B09C-F08A179D17C0} URL = hxxps://br.search.yahoo.com/search?fr=mcafee&type=C014BR978D20150202&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1313665589-348142795-2787479133-1000 -> {0B3AD18D-CAC3-45E8-8A1D-7F632A4AF034} URL =
SearchScopes: HKU\S-1-5-21-1313665589-348142795-2787479133-1000 -> {47D3EBF2-9074-47A9-A577-1DE59F1BF7FA} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1313665589-348142795-2787479133-1000 -> {77A2F91B-ED82-40A5-B09C-F08A179D17C0} URL = hxxps://br.search.yahoo.com/search?fr=mcafee&type=C014BR978D20150202&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-04-06] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-04-06] (Microsoft Corporation)
BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon64.dll [2015-12-10] ()
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-04-06] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-04-06] (Microsoft Corporation)
BHO-x32: Auxiliar de Conexão de Conta da Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-04-06] (Microsoft Corporation)
BHO-x32: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files (x86)\360\Total Security\safemon\safemon.dll [2015-12-10] ()
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-04-06] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-06] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-04-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-04-06] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-04-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @qq.com/QQPhotoDrawEx -> C:\Program Files (x86)\Tencent\Qzone\npQQPhotoDrawEx.dll [2013-08-13] ()
FF Plugin-x32: @qq.com/QzoneMusic -> C:\Program Files (x86)\Tencent\QQMusic\QzoneMusic\npQzoneMusic.dll [2016-02-25] (Tencent)
FF Plugin-x32: @qq.com/TXSSO -> C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.4.1\Bin\npSSOAxCtrlForPTLogin.dll [2015-12-01] (Tencent)
FF Plugin-x32: @tencent.com/npQQMailWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\npQQMailWebKit.dll [2013-04-25] (Tencent)
FF Plugin-x32: @tencent.com/nptxftnWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\nptxftnWebKit.dll [2013-04-08] (Tencent Technology (Shenzhen) Company Limited)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-22] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1313665589-348142795-2787479133-1000: @1.qq.com/npqqwebgame -> C:\Users\ILIDA006\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.3\npqqwebgame.dll [2015-10-20] ( )
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.gmail.com/","hxxp://www.outlook.com/","hxxp://www.google.com.br/"
CHR DefaultSearchKeyword: Default -> www.google.com.br
CHR Profile: C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-22]
CHR Extension: (Google Docs) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-22]
CHR Extension: (Google Drive) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-04]
CHR Extension: (YouTube) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Pool) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\cedbddnnmhgnedpamoenmdkhnpnfbpjb [2016-04-06]
CHR Extension: (Google Search) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-04]
CHR Extension: (Documentos Google off-line) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Build with Chrome) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbbhbjeecagnlfgggogfclkdjamoapf [2016-04-06]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-22]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Meu tema do Chrome) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2016-04-06]
CHR Extension: (Destroyer Bomba 3D) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\okehlnjpihomkdokiiafpejniofjaoom [2016-04-06]
CHR Extension: (Gmail) - C:\Users\ILIDA006\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-22]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]
==================== Serviços (Whitelisted) ========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [638456 2016-03-22] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3993088 2016-03-22] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1045928 2016-02-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [593880 2016-03-22] (AVG Technologies CZ, s.r.o.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2776664 2015-08-16] (Microsoft Corporation)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2557136 2015-02-26] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-02-26] (Dell Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (arvato digital services llc)
S2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [903288 2015-12-10] () [Arquivo não assinado]
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [737984 2015-08-30] (@ByELDI) [Arquivo não assinado]
S3 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [19288 2015-03-04] (Dell Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2014-01-30] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe [73728 2012-02-08] (Atheros) [Arquivo não assinado]
S2 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [X]
S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [X]
===================== Drivers (Whitelisted) ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
S3 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [137296 2015-07-31] (360.cn)
S3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [77904 2015-12-10] () [Arquivo não assinado]
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [319568 2015-09-21] (360.cn)
S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [40520 2015-05-18] (360.cn)
R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [363088 2015-07-31] (360.cn)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [306976 2016-03-08] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [246560 2016-03-07] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [302000 2015-10-08] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71456 2016-03-08] (AVG Technologies CZ, s.r.o.)
R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [178768 2015-07-31] (360.cn)
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-02-26] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [23312 2015-02-26] (Dell Computer Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Três Meses Criados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-04-06 11:33 - 2016-04-06 11:34 - 00021344 _____ C:\Users\ILIDA006\Desktop\FRST.txt
2016-04-06 11:33 - 2016-04-06 11:33 - 02374144 _____ (Farbar) C:\Users\ILIDA006\Desktop\FRST64.exe
2016-04-06 11:33 - 2016-04-06 11:33 - 00000000 ____D C:\FRST
2016-04-06 11:28 - 2016-04-06 11:29 - 21803966 _____ C:\Users\ILIDA006\Downloads\prestashop_1.6.1.4_pt.zip
2016-04-06 11:25 - 2016-04-06 11:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2016-04-06 11:20 - 2016-04-06 11:25 - 00003370 _____ C:\Windows\System32\Tasks\AutoPico Daily Restart
2016-04-06 11:20 - 2016-04-06 11:25 - 00000000 ____D C:\Program Files\KMSpico
2016-04-06 11:20 - 2010-12-05 23:16 - 00090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2016-04-06 11:16 - 2016-04-06 11:16 - 00002178 _____ C:\Users\ILIDA006\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-06 11:16 - 2016-04-06 11:16 - 00002108 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-06 11:16 - 2016-04-06 11:16 - 00002108 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-06 11:16 - 2016-04-06 11:16 - 00002108 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-06 11:16 - 2016-04-06 11:16 - 00000000 ___RD C:\Users\ILIDA006\OneDrive
2016-04-06 11:16 - 2016-04-06 11:16 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-04-06 11:16 - 2016-04-06 11:16 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-04-06 11:16 - 2016-04-06 11:16 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-04-06 11:15 - 2016-04-06 11:15 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-04-06 11:08 - 2016-04-06 11:08 - 00002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002408 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002344 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-04-06 11:08 - 2016-04-06 11:08 - 00002324 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-04-06 11:07 - 2016-04-06 11:07 - 00002461 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2016-04-06 11:07 - 2016-04-06 11:07 - 00002373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-04-06 11:07 - 2016-04-06 11:07 - 00002354 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-04-06 11:07 - 2016-04-06 11:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2016-04-06 11:05 - 2016-04-06 11:05 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-04-06 11:03 - 2016-04-06 11:05 - 00000000 ____D C:\Program Files\Microsoft Office
2016-04-06 11:03 - 2016-04-06 11:03 - 21543568 _____ C:\WindowsMSYH.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 21302624 _____ C:\WindowsMSJH.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 14381616 _____ C:\WindowsMSYHBD.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 14343024 _____ C:\WindowsMSJHBD.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00222632 _____ C:\WindowsMSUIGHUR.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00094064 _____ C:\WindowsLEELAWAD.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00093836 _____ C:\WindowsLEELAWDB.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00076588 _____ C:\WindowsALGER.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00066696 _____ C:\WindowsVIVALDII.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00056596 _____ C:\WindowsHARLOWSI.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00047644 _____ C:\WindowsBAUHS93.tt2
2016-04-06 11:03 - 2016-04-06 11:03 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-04-06 10:55 - 2016-04-06 10:56 - 00000000 ____D C:\Users\ILIDA006\Documents\Programas
2016-04-06 10:53 - 2016-04-06 10:53 - 00000000 ____D C:\Users\ILIDA006\Documents\My Palettes
2016-04-06 10:49 - 2016-04-06 10:49 - 00000000 ____D C:\Users\Todos os Usuários\Protexis64
2016-04-06 10:49 - 2016-04-06 10:49 - 00000000 ____D C:\Users\ILIDA006\Documents\Corel
2016-04-06 10:49 - 2016-04-06 10:49 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Corel
2016-04-06 10:49 - 2016-04-06 10:49 - 00000000 ____D C:\ProgramData\Protexis64
2016-04-06 10:47 - 2016-04-06 10:45 - 00003015 _____ C:\Users\Public\Desktop\CorelDRAW X7 (64-Bit).lnk
2016-04-06 10:46 - 2016-04-06 10:46 - 00000000 ____D C:\Users\Public\Documents\Corel
2016-04-06 10:46 - 2016-04-06 10:46 - 00000000 ____D C:\Program Files\Common Files\Protexis
2016-04-06 10:46 - 2016-04-06 10:46 - 00000000 ____D C:\Program Files\Common Files\Corel
2016-04-06 10:45 - 2016-04-06 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X7 (64-bit)
2016-04-06 10:45 - 2016-04-06 10:46 - 00000000 ____D C:\Users\Todos os Usuários\Corel
2016-04-06 10:45 - 2016-04-06 10:46 - 00000000 ____D C:\ProgramData\Corel
2016-04-06 10:45 - 2016-04-06 10:45 - 00000000 ____D C:\Program Files\Corel
2016-04-06 10:39 - 2016-04-06 10:49 - 00000000 ____D C:\Users\Todos os Usuários\CorelDRAW Graphics Suite X7 x64
2016-04-06 10:39 - 2016-04-06 10:49 - 00000000 ____D C:\ProgramData\CorelDRAW Graphics Suite X7 x64
2016-04-06 10:38 - 2016-04-06 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2016-04-06 10:35 - 2016-04-06 10:38 - 00000000 ____D C:\xampp
2016-04-06 10:11 - 2016-04-06 10:11 - 04203840 _____ C:\Users\ILIDA006\Downloads\npp.6.9.1.Installer.exe
2016-04-06 10:11 - 2016-04-06 10:11 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Notepad++
2016-04-06 10:11 - 2016-04-06 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2016-04-06 10:11 - 2016-04-06 10:11 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-04-06 10:05 - 2016-04-06 10:47 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-04-06 10:05 - 2016-04-06 10:47 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-06 10:00 - 2016-04-06 10:01 - 124274392 _____ (Bitnami) C:\Users\ILIDA006\Downloads\xampp-win32-7.0.4-0-VC14-installer.exe
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ___HD C:\$AVG
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\TuneUp Software
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\AVG
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-04-06 09:48 - 2016-04-06 09:48 - 00000000 ____D C:\Program Files\Common Files\AV
2016-04-06 09:47 - 2016-04-06 09:51 - 00000000 ____D C:\Users\Todos os Usuários\MFAData
2016-04-06 09:47 - 2016-04-06 09:51 - 00000000 ____D C:\ProgramData\MFAData
2016-04-06 09:47 - 2016-04-06 09:48 - 00000000 ____D C:\Users\Todos os Usuários\Avg
2016-04-06 09:47 - 2016-04-06 09:48 - 00000000 ____D C:\ProgramData\Avg
2016-04-06 09:47 - 2016-04-06 09:48 - 00000000 ____D C:\Program Files (x86)\AVG
2016-04-06 09:47 - 2016-04-06 09:47 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\MFAData
2016-04-06 09:47 - 2016-04-06 09:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-04-06 09:46 - 2016-04-06 09:48 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\Avg
2016-04-06 09:46 - 2016-04-06 09:47 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\AvgSetupLog
2016-04-06 09:46 - 2016-04-06 09:46 - 00000000 ____D C:\Users\Public\SogouInput
2016-04-06 09:36 - 2016-04-06 09:36 - 00000000 ____D C:\Program Files\McAfee
2016-04-06 07:50 - 2016-04-06 08:36 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\Microsoft Games
2016-04-05 15:50 - 2016-04-06 10:36 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\uTorrent
2016-03-15 16:41 - 2016-03-15 16:41 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\WinRAR
2016-03-15 16:40 - 2016-03-15 16:40 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-03-15 16:40 - 2016-03-15 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-03-15 16:40 - 2016-03-15 16:40 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-03-11 10:45 - 2016-03-11 10:45 - 00000000 ____D C:\Users\Todos os Usuários\IsolatedStorage
2016-03-11 10:45 - 2016-03-11 10:45 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\IsolatedStorage
2016-03-11 10:45 - 2016-03-11 10:45 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\FileViewPro
2016-03-11 10:45 - 2016-03-11 10:45 - 00000000 ____D C:\ProgramData\IsolatedStorage
2016-03-11 10:44 - 2016-03-11 10:44 - 00000000 ____D C:\Spacekace
2016-03-10 11:03 - 2016-03-10 11:03 - 00000000 ____D C:\Users\ILIDA006\AppData\LocalLow\TENCENT
2016-03-10 10:59 - 2016-03-10 10:59 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\Tencent
2016-03-10 10:58 - 2016-03-10 10:58 - 00000000 ____D C:\Users\ILIDA006\AppData\LocalLow\QQMiniDL
2016-03-10 10:58 - 2016-03-10 10:58 - 00000000 ____D C:\Program Files (x86)\Tencent
2016-03-10 10:58 - 2016-03-10 10:58 - 00000000 ____D C:\Program Files (x86)\QQMailPlugin
2016-03-10 10:57 - 2016-04-06 09:35 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Tencent
2016-03-10 10:57 - 2016-03-10 11:02 - 00000000 ____D C:\Users\Todos os Usuários\Tencent
2016-03-10 10:57 - 2016-03-10 11:02 - 00000000 ____D C:\ProgramData\Tencent
2016-03-08 16:26 - 2016-04-06 09:49 - 00000000 ____D C:\Users\ILIDA006\AppData\LocalLow\SogouPY
2016-03-08 16:26 - 2016-03-08 16:35 - 00000000 ____D C:\Users\Todos os Usuários\SogouInput
2016-03-08 16:26 - 2016-03-08 16:35 - 00000000 ____D C:\ProgramData\SogouInput
2016-03-08 16:12 - 2016-03-08 16:12 - 00306976 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2016-03-08 16:12 - 2016-03-08 16:12 - 00071456 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avguniva.sys
2016-03-07 13:39 - 2016-03-07 13:39 - 00246560 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2016-02-16 15:07 - 2016-02-16 15:07 - 00162592 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgdiska.sys
2016-02-16 15:05 - 2016-02-16 15:05 - 00360736 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgloga.sys
2016-02-05 15:31 - 2016-02-05 15:32 - 00000000 ____D C:\Users\Public\MARKETING-LINHA-DE-PRODUTOS
2016-01-26 11:04 - 2016-01-26 11:04 - 00272304 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsha.sys
2016-01-15 08:44 - 2016-01-15 08:44 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-01-15 08:44 - 2016-01-15 08:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-01-07 10:24 - 2016-04-06 11:20 - 00135592 _____ C:\Users\ILIDA006\AppData\Local\GDIPFONTCACHEV1.DAT
==================== Três Meses Modificados arquivos e pastas ========
(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)
2016-04-06 11:30 - 2009-07-14 01:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-06 11:30 - 2009-07-14 01:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-06 11:16 - 2014-08-18 10:52 - 00000000 ____D C:\Users\ILIDA006
2016-04-06 11:15 - 2014-01-30 11:44 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-04-06 11:15 - 2014-01-30 11:44 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-04-06 11:15 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-04-06 11:15 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-04-06 11:07 - 2014-01-30 11:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-04-06 11:01 - 2014-08-18 11:23 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-04-06 11:01 - 2009-07-14 02:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-04-06 10:59 - 2009-07-13 23:34 - 00000419 _____ C:\Windows\win.ini
2016-04-06 10:40 - 2015-09-22 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-04-06 09:55 - 2010-11-21 06:37 - 00708416 _____ C:\Windows\system32\prfh0416.dat
2016-04-06 09:55 - 2010-11-21 06:37 - 00148196 _____ C:\Windows\system32\prfc0416.dat
2016-04-06 09:55 - 2009-07-14 02:13 - 01642550 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-06 09:50 - 2014-01-30 11:44 - 00000000 ____D C:\Users\Todos os Usuários\McAfee
2016-04-06 09:50 - 2014-01-30 11:44 - 00000000 ____D C:\ProgramData\McAfee
2016-04-06 09:50 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-06 09:49 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\SysWOW64\IME
2016-04-04 09:33 - 2015-05-28 09:08 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\CutePDF Writer
2016-03-24 18:01 - 2015-09-10 13:46 - 00000000 ____D C:\Users\ILIDA006\AppData\Roaming\Skype
2016-03-15 17:00 - 2014-08-18 11:02 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\VirtualStore
2016-03-14 12:30 - 2014-08-19 16:44 - 00000000 ____D C:\Users\ILIDA006\AppData\Local\ElevatedDiagnostics
Alguns arquivos em TEMP:
====================
C:\Users\ILIDA006\AppData\Local\Temp\0226931459946221mcinst.exe
C:\Users\ILIDA006\AppData\Local\Temp\ose00000.exe
C:\Users\ILIDA006\AppData\Local\Temp\QzoneMusic.exe
C:\Users\ILIDA006\AppData\Local\Temp\xmlUpdater.exe
==================== Bamital & volsnap =================
(Não há correção automática para arquivos que não passaram na verificação.)
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente
LastRegBack: 2016-03-29 09:22
==================== Fim de FRST.txt ============================