cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Resultado do exame da Farbar Recovery Scan Tool (FRST) (x64) Versão: 13-07-2016 02
Executado por HP (administrador) em HP-PC (16-07-2016 00:54:28)
Executando a partir de C:\Users\HP\Downloads
Perfis Carregados: HP (Perfis Disponíveis: HP)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Idioma: Português (Brasil)
Internet Explorer Versão 9 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [8900328 2016-12-07] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-05-20] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2753910758-3268672274-3724683160-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-13] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-07-05] (AVAST Software)
BootExecute: autocheck autochk * aswBoot.exe /M:76a54eeb /wow /dir:"C:\Program Files\AVAST Software\Avast"
CHR HKLM\SOFTWARE\Policies\Google: Restrição <======= ATENÇÃO

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 187.122.254.57 187.122.254.62
Tcpip\..\Interfaces\{69654994-66D3-4B9C-90D7-32E74567BBE5}: [DhcpNameServer] 187.122.254.57 187.122.254.62

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKU\S-1-5-21-2753910758-3268672274-3724683160-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://br.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2753910758-3268672274-3724683160-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2753910758-3268672274-3724683160-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://br.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_adsafld_16_27¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dbr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0F0EyCtA0FyCtByB0E0AtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CyCzyyB0B0C0EtGyCtB0CtAtGzzyCzz0CtGyB0F0F0AtGtCtDyE0FyBtB0C0BzytCzz0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyE0BzyzytDtA0BtGyEyByCyCtGyEyB0CyDtG0AtDtBzytGtA0B0D0A0AyC0Bzy0DtDyDzy2QtN0A0LzuyE%26cr%3D816514708%26a%3Dwncy_adsafld_16_27%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-07-09] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-07-05] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-07-15] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-07-09] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-07-15] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-07-05] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-07-15] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-07-15] (Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-15] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-07-15] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-07-15] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-15] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-07-15] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-07-15] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-07-15] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-07-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-07-09] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-07-15] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-07-15] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-07-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-07-05] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-07-05]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-07-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF

Chrome:
=======
CHR HomePage: ckanckwipaieddrottion -> hxxps://www.google.com.br/
CHR StartupUrls: ckanckwipaieddrottion -> "hxxps://www.google.com.br/"
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-07-05] (AVAST Software)
S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [441880 2016-07-04] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [421400 2016-07-04] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [458264 2016-07-04] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2944768 2016-06-10] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-07-05] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-07-05] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108304 2016-07-05] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-07-05] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-07-05] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-07-05] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [473592 2016-07-17] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [162904 2016-07-05] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [290088 2016-07-05] (AVAST Software)
S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-07-04] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2016-07-04] (Bluestack System Inc. )
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2016-07-05] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2016-07-05] (REALiX(tm))
R3 netr28x; C:\Windows\System32\DRIVERS\netr28x.sys [2506384 2016-07-05] (MediaTek Inc.)
R3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [10368 2016-07-05] ()
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Um Mês Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-12-07 18:36 - 2016-12-07 18:36 - 00000967 _____ C:\Users\Public\Desktop\Driver Easy.lnk
2016-12-07 18:36 - 2016-12-07 18:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy
2016-12-07 18:36 - 2016-12-07 18:36 - 00000000 ____D C:\Program Files\Easeware
2016-12-07 18:34 - 2016-12-07 18:35 - 03618624 _____ (Easeware ) C:\Users\HP\Downloads\DriverEasy_Setup (1).exe
2016-07-16 00:54 - 2016-07-16 00:55 - 00018250 _____ C:\Users\HP\Downloads\FRST.txt
2016-07-16 00:54 - 2016-07-16 00:54 - 00000000 ____D C:\FRST
2016-07-16 00:53 - 2016-07-16 00:53 - 02390528 _____ (Farbar) C:\Users\HP\Downloads\FRST64.exe
2016-07-16 00:43 - 2016-07-16 00:43 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-07-16 00:43 - 2016-07-16 00:43 - 00000000 ____D C:\ProgramData\Package Cache
2016-07-16 00:41 - 2016-07-16 00:42 - 14572000 _____ (Microsoft Corporation) C:\Users\HP\Downloads\vc_redist.x64.exe
2016-07-16 00:37 - 2016-07-16 00:37 - 00629006 _____ C:\Users\HP\Downloads\Windows6.1-KB2999226-x86.msu
2016-07-16 00:23 - 2016-07-16 00:23 - 00002119 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-16 00:23 - 2016-07-16 00:23 - 00002110 _____ C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-16 00:23 - 2016-07-16 00:23 - 00002110 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-16 00:23 - 2016-07-16 00:23 - 00002110 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-07-16 00:23 - 2016-07-16 00:23 - 00000000 ___RD C:\Users\HP\OneDrive
2016-07-16 00:23 - 2016-07-16 00:23 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2016-07-16 00:22 - 2016-07-16 00:22 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft OneDrive
2016-07-16 00:22 - 2016-07-16 00:22 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2016-07-16 00:20 - 2016-07-16 00:20 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-07-15 23:33 - 2016-07-15 23:33 - 00002406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-07-15 23:33 - 2016-07-15 23:33 - 00002371 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-07-15 23:33 - 2016-07-15 23:33 - 00002355 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-07-15 23:33 - 2016-07-15 23:33 - 00002352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-07-15 23:33 - 2016-07-15 23:33 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-07-15 23:33 - 2016-07-15 23:33 - 00002338 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-07-15 23:33 - 2016-07-15 23:33 - 00002322 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-07-15 23:33 - 2016-07-15 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ferramentas do Microsoft Office 2016
2016-07-15 23:20 - 2016-07-16 00:21 - 00000000 ____D C:\Users\Todos os Usuários\regid.1991-06.com.microsoft
2016-07-15 23:20 - 2016-07-16 00:21 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-07-15 23:20 - 2016-07-15 23:20 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2016-07-15 23:10 - 2016-07-15 23:10 - 21543568 _____ C:\WindowsMSYH.tt2
2016-07-15 23:10 - 2016-07-15 23:10 - 14381616 _____ C:\WindowsMSYHBD.tt2
2016-07-15 23:10 - 2016-07-15 23:10 - 00222632 _____ C:\WindowsMSUIGHUR.tt2
2016-07-15 23:10 - 2016-07-15 23:09 - 21302624 _____ C:\WindowsMSJH.tt2
2016-07-15 23:10 - 2016-07-15 23:09 - 14343024 _____ C:\WindowsMSJHBD.tt2
2016-07-15 23:10 - 2016-07-15 23:09 - 00093836 _____ C:\WindowsLEELAWDB.tt2
2016-07-15 23:10 - 2016-07-15 23:08 - 00094064 _____ C:\WindowsLEELAWAD.tt2
2016-07-15 23:07 - 2016-07-15 23:19 - 00000000 ____D C:\Program Files\Microsoft Office
2016-07-15 23:04 - 2016-07-15 23:04 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-07-15 23:02 - 2016-07-15 23:02 - 04930248 _____ (Microsoft Corporation) C:\Users\HP\Downloads\Setup.x64.pt-br_ProfessionalRetail_NKGG6-WBPCC-HXWMY-6DQGJ-CPQVG_act_1_.exe
2016-07-10 15:37 - 2016-07-10 15:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-07-10 15:36 - 2016-07-10 15:36 - 00026624 ____H C:\Users\HP\Desktop\photothumb.db
2016-07-10 15:35 - 2016-07-10 16:39 - 00000000 ____D C:\Users\HP\AppData\Roaming\PhotoScape
2016-07-10 15:34 - 2016-07-10 15:34 - 00001035 _____ C:\Users\HP\Desktop\PhotoScape.lnk
2016-07-10 15:34 - 2016-07-10 15:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
2016-07-10 15:34 - 2016-07-10 15:34 - 00000000 ____D C:\Program Files (x86)\PhotoScape
2016-07-10 15:30 - 2016-07-10 15:31 - 21025552 _____ (Mooii) C:\Users\HP\Downloads\PhotoScapeSetup_V3.7.exe
2016-07-09 16:07 - 2016-07-09 16:08 - 03887840 _____ (Husdawg, LLC) C:\Users\HP\Downloads\Detection (1).exe
2016-07-09 15:28 - 2016-07-09 15:28 - 00001076 _____ C:\Users\HP\Desktop\Counter-Strike 1.6.lnk
2016-07-09 15:28 - 2016-07-09 15:28 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2016-07-09 15:28 - 2016-07-09 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2016-07-09 15:23 - 2016-07-09 15:28 - 00000000 ____D C:\Program Files (x86)\Counter-Strike 1.6
2016-07-09 13:42 - 2016-07-09 13:42 - 03887840 _____ (Husdawg, LLC) C:\Users\HP\Downloads\Detection.exe
2016-07-09 13:29 - 2016-07-09 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-07-09 13:29 - 2016-07-09 13:28 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-07-09 13:27 - 2016-07-09 13:27 - 00000000 ____D C:\Program Files\Java
2016-07-09 13:26 - 2016-07-09 13:26 - 57667136 _____ (Oracle Corporation) C:\Users\HP\Downloads\jre-8u91-windows-x64 (1).exe
2016-07-09 13:08 - 2016-07-09 13:24 - 00000000 ____D C:\Users\HP\AppData\Roaming\.minecraft
2016-07-09 13:08 - 2016-07-09 13:08 - 00000000 ____D C:\Users\HP\AppData\Roaming\Sun
2016-07-09 13:08 - 2016-07-09 13:08 - 00000000 ____D C:\Users\HP\AppData\LocalLow\Sun
2016-07-09 13:08 - 2016-07-09 13:08 - 00000000 ____D C:\Users\HP\.oracle_jre_usage
2016-07-09 13:07 - 2016-07-09 13:30 - 00000000 ____D C:\Users\Todos os Usuários\Oracle
2016-07-09 13:07 - 2016-07-09 13:30 - 00000000 ____D C:\ProgramData\Oracle
2016-07-09 13:07 - 2016-07-09 13:07 - 00000000 ____D C:\Users\HP\AppData\LocalLow\Oracle
2016-07-09 13:06 - 2016-07-09 13:06 - 57667136 _____ (Oracle Corporation) C:\Users\HP\Downloads\jre-8u91-windows-x64.exe
2016-07-09 13:05 - 2016-07-09 13:05 - 00000000 ____D C:\Users\HP\Downloads\Shiginima Launcher 3.100
2016-07-09 13:05 - 2016-02-24 04:32 - 03650180 _____ () C:\Users\HP\Desktop\Shiginima Launcher SE v3.100.exe
2016-07-09 13:04 - 2016-07-09 13:05 - 09373843 _____ C:\Users\HP\Downloads\Shiginima Launcher 3.100.rar
2016-07-09 12:49 - 2016-07-09 12:49 - 01030400 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2016-07-09 12:49 - 2016-07-09 12:49 - 00082544 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2016-07-08 12:36 - 2016-07-08 12:36 - 00000000 ____D C:\swsetup
2016-07-05 20:52 - 2016-07-05 20:53 - 02506384 _____ (MediaTek Inc.) C:\Windows\system32\Drivers\netr28x.sys
2016-07-05 20:50 - 2016-07-05 20:50 - 00010368 _____ () C:\Windows\system32\Drivers\whfltr2k.sys
2016-07-05 20:49 - 2016-07-05 20:49 - 00003798 _____ C:\Windows\System32\Tasks\Driver Easy Scheduled Scan
2016-07-05 20:49 - 2016-07-05 20:49 - 00000000 ____D C:\Users\HP\AppData\Roaming\Easeware
2016-07-05 20:49 - 2002-01-01 00:01 - 00000400 _____ C:\Windows\Tasks\Driver Easy Scheduled Scan.job
2016-07-05 20:47 - 2016-07-05 20:47 - 03620360 _____ (Easeware ) C:\Users\HP\Downloads\DriverEasy_Setup.exe
2016-07-05 20:34 - 2016-07-05 21:38 - 00000000 ___SD C:\Users\HP\AppData\LocalLow\Temp
2016-07-05 18:45 - 2016-07-05 18:45 - 00000000 ____D C:\Users\HP\AppData\Roaming\Macromedia
2016-07-05 18:45 - 2016-07-05 18:45 - 00000000 ____D C:\Users\HP\AppData\Roaming\Adobe
2016-07-05 18:45 - 2016-07-05 18:45 - 00000000 ____D C:\Users\HP\AppData\Local\Macromedia
2016-07-05 18:42 - 2016-07-05 18:45 - 00000000 ____D C:\Users\Todos os Usuários\BlueStacksSetup
2016-07-05 18:42 - 2016-07-05 18:45 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-07-05 18:42 - 2016-07-05 18:42 - 00001822 _____ C:\Users\Public\Desktop\BlueStacks.lnk
2016-07-05 18:42 - 2016-07-05 18:42 - 00001822 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BlueStacks.lnk
2016-07-05 18:41 - 2016-07-05 18:42 - 00000000 ____D C:\Program Files (x86)\Bluestacks
2016-07-05 18:41 - 2016-07-05 18:41 - 00000000 ____D C:\Users\Todos os Usuários\Bluestacks
2016-07-05 18:41 - 2016-07-05 18:41 - 00000000 ____D C:\Users\HP\AppData\Local\Bluestacks
2016-07-05 18:41 - 2016-07-05 18:41 - 00000000 ____D C:\ProgramData\Bluestacks
2016-07-05 18:32 - 2016-07-05 18:35 - 277574656 _____ (BlueStack Systems Inc.) C:\Users\HP\Downloads\BlueStacks2_native_e634931ab9b97bffbaf84cbde7a61d06.exe
2016-07-05 18:29 - 2016-07-05 18:30 - 00000000 ____D C:\Users\HP\Downloads\Programas
2016-07-05 18:11 - 2016-07-05 18:11 - 00000000 ____D C:\Users\Todos os Usuários\Origin
2016-07-05 18:11 - 2016-07-05 18:11 - 00000000 ____D C:\ProgramData\Origin
2016-07-05 18:10 - 2016-07-05 18:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2016-07-05 18:10 - 2016-07-05 18:10 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2016-07-05 18:10 - 2013-04-04 15:00 - 00112640 _____ C:\Windows\SysWOW64\ff_vfw.dll
2016-07-05 18:10 - 2013-03-17 13:21 - 03649536 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2016-07-05 18:10 - 2012-06-09 14:21 - 00178688 _____ C:\Windows\SysWOW64\unrar.dll
2016-07-05 18:10 - 2011-12-21 14:14 - 00151552 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2016-07-05 18:10 - 2011-12-07 14:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2016-07-05 18:10 - 2011-06-24 11:44 - 00243200 _____ C:\Windows\SysWOW64\xvidvfw.dll
2016-07-05 18:10 - 2011-06-24 11:28 - 00650752 _____ C:\Windows\SysWOW64\xvidcore.dll
2016-07-05 17:51 - 2016-07-05 17:51 - 00000810 _____ C:\Users\HP\Desktop\µTorrent.lnk
2016-07-05 17:51 - 2016-07-05 17:51 - 00000790 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-07-05 17:03 - 2016-07-05 17:03 - 00000000 ____D C:\Users\HP\AppData\Roaming\Mozilla
2016-07-05 16:58 - 2016-07-05 16:58 - 00000000 ____D C:\Users\HP\AppData\Local\gromeychejakqpuing
2016-07-05 16:58 - 2016-07-05 16:58 - 00000000 ____D C:\extensions
2016-07-05 16:57 - 2016-07-17 16:41 - 00000000 ____D C:\Program Files (x86)\Griwoward
2016-07-05 16:55 - 2016-07-05 17:01 - 00000000 ____D C:\Users\HP\AppData\Roaming\DAEMON Tools Lite
2016-07-05 16:55 - 2016-07-05 16:59 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2016-07-05 16:55 - 2016-07-05 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2016-07-05 16:55 - 2016-07-05 16:55 - 00030352 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2016-07-05 16:55 - 2016-07-05 16:55 - 00001743 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2016-07-05 16:52 - 2016-07-05 16:55 - 00000000 ____D C:\Users\Todos os Usuários\DAEMON Tools Lite
2016-07-05 16:52 - 2016-07-05 16:55 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2016-07-05 15:59 - 2016-07-05 15:59 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-07-05 15:59 - 2016-07-05 15:59 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-07-05 15:59 - 2016-07-05 15:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-07-05 15:59 - 2016-07-05 15:59 - 00000000 ____D C:\Program Files\CCleaner
2016-07-05 15:53 - 2001-12-31 23:03 - 00000000 ____D C:\Users\HP\AppData\Roaming\uTorrent
2016-07-05 15:48 - 2014-05-14 13:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-07-05 15:48 - 2014-05-14 13:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-07-05 15:48 - 2014-05-14 13:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-07-05 15:48 - 2014-05-14 13:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-07-05 15:48 - 2014-05-14 13:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-07-05 15:48 - 2014-05-14 13:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-07-05 15:48 - 2014-05-14 13:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2016-07-05 15:48 - 2014-05-14 13:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-07-05 15:48 - 2014-05-14 13:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-07-05 15:48 - 2014-05-14 13:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-07-05 15:48 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-07-05 15:48 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-07-05 15:48 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-07-05 15:48 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-07-05 15:40 - 2016-07-05 15:40 - 00428146 __RSH C:\LCPVE
2016-07-05 15:29 - 2016-07-05 15:29 - 00000000 ____D C:\Users\HP\AppData\Local\Setup2551037
2016-07-05 15:29 - 2016-07-05 15:29 - 00000000 ____D C:\Users\HP\AppData\Local\fici
2016-07-05 15:27 - 2016-07-05 15:27 - 00002208 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
2016-07-05 15:26 - 2016-12-07 17:26 - 00000000 ____D C:\Users\Todos os Usuários\{1002D561-9A40-5FA7-1C86-C1E586C44A2B}
2016-07-05 15:26 - 2016-12-07 17:26 - 00000000 ____D C:\ProgramData\{1002D561-9A40-5FA7-1C86-C1E586C44A2B}
2016-07-05 15:26 - 2016-07-05 15:48 - 00000000 ____D C:\Users\HP\AppData\Roaming\{791D4FA6-5C4F-22D0-3779-0502EBABF83C}
2016-07-05 15:26 - 2016-07-05 15:29 - 00000372 __RSH C:\Users\Todos os Usuários\ntuser.pol
2016-07-05 15:26 - 2016-07-05 15:29 - 00000372 __RSH C:\ProgramData\ntuser.pol
2016-07-05 15:26 - 2016-07-05 15:26 - 00004328 _____ C:\Windows\System32\Tasks\Yahoo! Powered derem
2016-07-05 15:26 - 2016-07-05 15:26 - 00002393 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk
2016-07-05 15:26 - 2016-07-05 15:26 - 00000000 ____D C:\Users\Public\Documents\Tools
2016-07-05 15:26 - 2016-07-05 15:26 - 00000000 ____D C:\Users\Public\Documents\Guid
2016-07-05 15:26 - 2016-07-05 15:26 - 00000000 ____D C:\Users\Public\Documents\Baidu
2016-07-05 15:26 - 2016-07-05 15:26 - 00000000 ____D C:\Users\HP\AppData\Local\{79404F1C-5DE8-23A4-3070-064C1418FAD4}
2016-07-05 15:24 - 2016-07-05 15:24 - 00000000 ____D C:\Users\HP\AppData\Roaming\WinRAR
2016-07-05 15:21 - 2016-07-05 15:21 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-07-05 15:21 - 2016-07-05 15:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-07-05 15:21 - 2016-07-05 15:21 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-07-05 15:06 - 2016-07-05 15:06 - 00000000 ____D C:\Users\HP\AppData\Local\CEF
2016-07-05 15:05 - 2016-07-05 15:05 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-07-05 15:05 - 2016-07-05 15:05 - 00003890 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1467741952
2016-07-05 15:05 - 2016-07-05 15:05 - 00001037 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-07-05 15:05 - 2016-07-05 15:05 - 00001037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-07-05 15:03 - 2016-07-05 15:03 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-07-05 15:03 - 2016-07-05 15:03 - 00001922 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-07-05 15:03 - 2016-07-05 15:03 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2016-07-05 15:03 - 2016-07-05 15:03 - 00000000 ____D C:\Users\HP\AppData\Roaming\AVAST Software
2016-07-05 15:03 - 2016-07-05 15:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-07-05 15:03 - 2016-07-05 15:03 - 00000000 ____D C:\Program Files\Common Files\AV
2016-07-05 15:02 - 2016-07-17 16:39 - 00473592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-07-05 15:02 - 2016-07-05 15:03 - 00473592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.146878435973701
2016-07-05 15:02 - 2016-07-05 15:02 - 00390984 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-07-05 15:02 - 2016-07-05 15:02 - 00290088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2016-07-05 15:02 - 2016-07-05 15:02 - 00162904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-07-05 15:02 - 2016-07-05 15:02 - 00108304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-07-05 15:02 - 2016-07-05 15:02 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-07-05 15:02 - 2016-07-05 15:02 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-07-05 15:02 - 2016-07-05 15:02 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-07-05 15:02 - 2016-07-05 15:01 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-07-05 15:02 - 2016-07-05 15:01 - 00992960 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-07-05 15:02 - 2016-07-05 15:01 - 00921280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-07-05 15:01 - 2016-07-05 15:01 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-07-05 15:00 - 2016-07-05 15:05 - 00000000 ____D C:\Program Files\AVAST Software
2016-07-05 14:58 - 2016-07-05 15:05 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-07-05 14:58 - 2016-07-05 15:05 - 00000000 ____D C:\ProgramData\AVAST Software
2016-07-05 14:47 - 2016-07-05 14:47 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-07-05 14:47 - 2016-07-05 14:47 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-07-05 14:40 - 2016-07-09 12:49 - 00116304 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2016-07-05 14:40 - 2016-07-05 14:40 - 00334992 _____ (Mediatek Inc.) C:\Windows\system32\RaCoInstx.dll
2016-07-05 14:40 - 2016-07-05 14:40 - 00016103 _____ C:\Windows\system32\RaCoInst.dat
2016-07-05 14:37 - 2016-07-05 14:37 - 15546880 _____ (Intel Corporation) C:\Windows\system32\ig4icd64.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 11405824 _____ (Intel Corporation) C:\Windows\SysWOW64\ig4icd32.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 10629408 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2016-07-05 14:37 - 2016-07-05 14:37 - 06549504 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 04896768 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 04722176 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 04338688 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 03158560 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2016-07-05 14:37 - 2016-07-05 14:37 - 01991936 _____ C:\Windows\system32\iglhxa64.cpa
2016-07-05 14:37 - 2016-07-05 14:37 - 00982240 _____ C:\Windows\SysWOW64\igkrng500.bin
2016-07-05 14:37 - 2016-07-05 14:37 - 00982240 _____ C:\Windows\system32\igkrng500.bin
2016-07-05 14:37 - 2016-07-05 14:37 - 00830464 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00571904 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdx32.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00511008 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2016-07-05 14:37 - 2016-07-05 14:37 - 00439308 _____ C:\Windows\SysWOW64\igcompkrng500.bin
2016-07-05 14:37 - 2016-07-05 14:37 - 00439308 _____ C:\Windows\system32\igcompkrng500.bin
2016-07-05 14:37 - 2016-07-05 14:37 - 00418336 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2016-07-05 14:37 - 2016-07-05 14:37 - 00387616 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2016-07-05 14:37 - 2016-07-05 14:37 - 00380416 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00272384 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00244224 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00228864 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00224800 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2016-07-05 14:37 - 2016-07-05 14:37 - 00208896 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00206336 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00189552 _____ C:\Windows\system32\Gfxres.th-TH.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00188416 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00178407 _____ C:\Windows\system32\Gfxres.el-GR.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00165395 _____ C:\Windows\system32\Gfxres.ru-RU.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00163360 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2016-07-05 14:37 - 2016-07-05 14:37 - 00154656 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2016-07-05 14:37 - 2016-07-05 14:37 - 00147456 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00139909 _____ C:\Windows\system32\Gfxres.ar-SA.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00136401 _____ C:\Windows\system32\Gfxres.ja-JP.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00133746 _____ C:\Windows\system32\Gfxres.he-IL.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00125558 _____ C:\Windows\system32\Gfxres.it-IT.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00123230 _____ C:\Windows\system32\Gfxres.ko-KR.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00122927 _____ C:\Windows\system32\Gfxres.es-ES.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00122709 _____ C:\Windows\system32\Gfxres.de-DE.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00122368 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2016-07-05 14:37 - 2016-07-05 14:37 - 00121173 _____ C:\Windows\system32\Gfxres.tr-TR.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00120800 _____ C:\Windows\system32\Gfxres.fr-FR.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00120366 _____ C:\Windows\system32\Gfxres.pt-BR.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00119808 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00119616 _____ C:\Windows\system32\Gfxres.hu-HU.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00119586 _____ C:\Windows\system32\Gfxres.nl-NL.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00119360 _____ C:\Windows\system32\Gfxres.sv-SE.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00119067 _____ C:\Windows\system32\Gfxres.pt-PT.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00118745 _____ C:\Windows\system32\Gfxres.cs-CZ.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00118697 _____ C:\Windows\system32\Gfxres.fi-FI.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00118409 _____ C:\Windows\system32\Gfxres.pl-PL.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00118058 _____ C:\Windows\system32\Gfxres.sk-SK.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00114852 _____ C:\Windows\system32\Gfxres.nb-NO.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00114372 _____ C:\Windows\system32\Gfxres.sl-SI.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00114261 _____ C:\Windows\system32\Gfxres.da-DK.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00110211 _____ C:\Windows\system32\Gfxres.en-US.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00108544 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00104044 _____ C:\Windows\system32\Gfxres.zh-TW.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00102883 _____ C:\Windows\system32\Gfxres.zh-CN.resources
2016-07-05 14:37 - 2016-07-05 14:37 - 00092356 _____ C:\Windows\SysWOW64\igfcg500m.bin
2016-07-05 14:37 - 2016-07-05 14:37 - 00092356 _____ C:\Windows\system32\igfcg500m.bin
2016-07-05 14:37 - 2016-07-05 14:37 - 00090112 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2869.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00088576 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088576 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088576 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00088064 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087552 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087040 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00087040 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00086528 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00086528 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00084992 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00084992 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00083968 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00083968 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2016-07-05 14:37 - 2016-07-05 14:37 - 00061952 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00060254 _____ C:\Windows\system32\iglhxg64.vp
2016-07-05 14:37 - 2016-07-05 14:37 - 00060226 _____ C:\Windows\system32\iglhxc64.vp
2016-07-05 14:37 - 2016-07-05 14:37 - 00060015 _____ C:\Windows\system32\iglhxo64.vp
2016-07-05 14:37 - 2016-07-05 14:37 - 00027648 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00023552 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00005448 _____ C:\Windows\system32\iglhxs64.vp
2016-07-05 14:37 - 2016-07-05 14:37 - 00004096 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2016-07-05 14:37 - 2016-07-05 14:37 - 00001090 _____ C:\Windows\system32\iglhxa64.vp
2016-07-05 14:37 - 2016-07-05 14:37 - 00000259 _____ C:\Windows\system32\GfxUI.exe.config
2016-07-05 14:37 - 2016-07-05 14:37 - 00000000 ____D C:\Program Files (x86)\Intel
2016-07-05 14:34 - 2016-12-07 17:33 - 00000000 ____D C:\Users\Todos os Usuários\ProductData
2016-07-05 14:34 - 2016-12-07 17:33 - 00000000 ____D C:\ProgramData\ProductData
2016-07-05 14:34 - 2016-07-17 16:34 - 00002862 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (HP)
2016-07-05 14:34 - 2016-07-09 12:52 - 00002154 _____ C:\Users\Public\Desktop\Driver Booster 3.lnk
2016-07-05 14:34 - 2016-07-05 14:35 - 00000000 ____D C:\Users\HP\AppData\LocalLow\IObit
2016-07-05 14:34 - 2016-07-05 14:34 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2016-07-05 14:34 - 2016-07-05 14:34 - 00003230 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2016-07-05 14:34 - 2016-07-05 14:34 - 00000000 ____D C:\Windows\IObit
2016-07-05 14:34 - 2016-07-05 14:34 - 00000000 ____D C:\Users\Todos os Usuários\IObit
2016-07-05 14:34 - 2016-07-05 14:34 - 00000000 ____D C:\Users\HP\AppData\Roaming\IObit
2016-07-05 14:34 - 2016-07-05 14:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3
2016-07-05 14:34 - 2016-07-05 14:34 - 00000000 ____D C:\ProgramData\IObit
2016-07-05 14:34 - 2016-07-05 14:34 - 00000000 ____D C:\Program Files (x86)\IObit
2016-07-05 14:31 - 2016-07-05 14:31 - 00002269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-07-05 14:31 - 2016-07-05 14:31 - 00002257 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-07-05 14:30 - 2016-07-17 16:31 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-05 14:30 - 2016-07-16 00:41 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-05 14:30 - 2016-07-10 15:37 - 00000000 ____D C:\Users\HP\AppData\Local\Google
2016-07-05 14:30 - 2016-07-10 15:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-07-05 14:30 - 2016-07-05 14:36 - 00004066 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-07-05 14:30 - 2016-07-05 14:35 - 00003814 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-07-05 14:30 - 2016-07-05 14:30 - 00000000 ____D C:\Users\HP\AppData\Local\Deployment
2016-07-05 14:30 - 2016-07-05 14:30 - 00000000 ____D C:\Users\HP\AppData\Local\Apps\2.0
2016-07-05 14:29 - 2016-07-15 23:40 - 00110176 _____ C:\Users\HP\AppData\Local\GDIPFONTCACHEV1.DAT
2016-07-05 14:07 - 2016-07-16 00:23 - 00000000 ____D C:\Users\HP
2016-07-05 14:07 - 2016-07-09 15:44 - 00000000 ____D C:\Users\HP\AppData\Local\VirtualStore
2016-07-05 14:07 - 2016-07-05 14:07 - 00001423 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-07-05 14:07 - 2016-07-05 14:07 - 00001389 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-07-05 14:07 - 2016-07-05 14:07 - 00000020 ___SH C:\Users\HP\ntuser.ini
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Modelos
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Meus documentos
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Menu Iniciar
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Documents\Minhas músicas
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Documents\Minhas imagens
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Documents\Meus vídeos
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Dados de aplicativos
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Configurações locais
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\AppData\Local\Histórico
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\AppData\Local\Dados de aplicativos
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Ambiente de rede
2016-07-05 14:07 - 2016-07-05 14:07 - 00000000 _SHDL C:\Users\HP\Ambiente de impressão
2016-07-05 14:07 - 2010-11-21 06:47 - 00000000 ____D C:\Users\HP\AppData\Roaming\Media Center Programs
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas músicas
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas imagens
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus vídeos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de aplicativos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Usuário Padrão
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Todos os Usuários\Favoritos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de aplicativos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Todos os Usuários
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Public\Documents\Minhas músicas
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Public\Documents\Minhas imagens
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Public\Documents\Meus vídeos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Modelos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Meus documentos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Documents\Minhas músicas
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Documents\Minhas imagens
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Documents\Meus vídeos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Dados de aplicativos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Configurações locais
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de aplicativos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Ambiente de rede
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default\Ambiente de impressão
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas músicas
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas imagens
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default User\Documents\Meus vídeos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de aplicativos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\ProgramData\Modelos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\ProgramData\Favoritos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\ProgramData\Documentos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\ProgramData\Dados de aplicativos
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2016-07-05 13:59 - 2016-07-05 13:59 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2016-07-05 13:21 - 2016-07-05 13:21 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-07-05 13:17 - 2016-07-05 16:00 - 00000000 ____D C:\Windows\Panther
2016-07-05 13:06 - 2016-07-05 13:16 - 00000000 ____D C:\$WINDOWS.~LS
2016-07-05 13:06 - 2016-07-05 13:06 - 00000000 ____D C:\Windows.old.001
2016-07-05 13:06 - 2016-07-05 13:06 - 00000000 ____D C:\$WINDOWS.~BT
2016-07-05 12:35 - 2016-07-05 12:35 - 00000000 ____D C:\Windows.old.000
2016-07-05 12:07 - 2016-07-05 12:07 - 00000000 ____D C:\Windows.old
2016-07-04 15:30 - 2016-07-04 15:30 - 00000000 ____D C:\Intel
2016-07-04 14:52 - 2016-07-04 14:52 - 00000000 _SHDL C:\Arquivos de Programas
2016-07-04 14:47 - 2016-07-05 13:16 - 00008192 __RSH C:\BOOTSECT.BAK
2016-07-04 14:47 - 2010-11-21 00:23 - 00383786 __RSH C:\bootmgr

==================== Um Mês Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-07-17 16:41 - 2010-11-21 06:37 - 00654272 _____ C:\Windows\system32\prfh0416.dat
2016-07-17 16:41 - 2010-11-21 06:37 - 00124724 _____ C:\Windows\system32\prfc0416.dat
2016-07-17 16:41 - 2009-07-14 02:13 - 01491932 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-17 16:31 - 2009-07-14 02:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-07-16 00:39 - 2009-07-14 01:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-16 00:39 - 2009-07-14 01:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-16 00:20 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2016-07-16 00:19 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\inf
2016-07-09 13:54 - 2009-07-14 02:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-07-05 18:42 - 2009-07-14 00:20 - 00000000 __RHD C:\Users\Public\Libraries
2016-07-05 15:26 - 2009-07-14 00:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2016-07-05 15:26 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2016-07-05 14:47 - 2009-07-14 02:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-07-05 14:29 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\system32\NDF
2016-07-05 14:07 - 2009-07-14 01:45 - 00274824 _____ C:\Windows\system32\FNTCACHE.DAT
2016-07-05 13:59 - 2009-07-14 00:20 - 00000000 ____D C:\Program Files\Windows NT
2016-07-05 13:58 - 2009-07-14 00:20 - 00000000 ____D C:\Windows\rescache
2016-07-05 13:18 - 2010-11-21 06:47 - 00000000 ____D C:\Windows\CSC
2016-07-05 13:16 - 2009-07-14 02:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template

Alguns arquivos em TEMP:
====================
C:\Users\HP\AppData\Local\Temp\GoogleSetup.exe


==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\SysWOW64\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-07-05 13:18

==================== Fim de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité