Resultado do exame da Farbar Recovery Scan Tool (FRST) (x86) Versão:27-04-2016
Executado por RONNA (administrador) em RONNAELLE (28-04-2016 23:50:36)
Executando a partir de C:\Users\RONNA\Downloads
Perfis Carregados: RONNA (Perfis Disponíveis: RONNA)
Platform: Microsoft Windows 8.1 Pro (X86) Idioma: Português (Brasil)
Internet Explorer Versão 11 (Navegador padrão: Chrome)
Modo da Inicialização: Normal
Tutorial da Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processos (Whitelisted) =================

(Se uma entrada for incluída na fixlist, o processo será fechado. O arquivo não será movido.)

(Autodesk Inc.) C:\Program Files\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe
(Akamai Technologies, Inc.) C:\Users\RONNA\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\RONNA\AppData\Local\Akamai\netsession_win.exe
(Autodesk) C:\Program Files\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe
(Autodesk) C:\Program Files\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe
(Autodesk) C:\Program Files\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\WinRAR\WinRAR.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registro (Whitelisted) ===========================

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido. O arquivo não será movido.)

HKLM\...\Run: [ADSKAppManager] => C:\Program Files\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [692160 2016-01-19] (Autodesk, Inc.)
HKU\S-1-5-21-3332443456-3493485007-4152111455-1001\...\Run: [Google Update] => C:\Users\RONNA\AppData\Local\Google\Update\GoogleUpdate.exe [154440 2016-04-27] (Google Inc.)
HKU\S-1-5-21-3332443456-3493485007-4152111455-1001\...\Run: [Akamai NetSession Interface] => C:\Users\RONNA\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3332443456-3493485007-4152111455-1001\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1151016 2016-02-02] (Autodesk, Inc.)
HKU\S-1-5-21-3332443456-3493485007-4152111455-1001\...\Policies\Explorer: [] 
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1151016 2016-02-02] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Nenhum Arquivo
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(Se um ítem for incluído na fixlist, sendo um ítem do Registro, será removido ou restaurado para o padrão.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9B0325EB-2FC6-4543-BFC4-9D300147533C}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)

FireFox:
========
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-27] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-27] (Google Inc.)
FF Plugin HKU\S-1-5-21-3332443456-3493485007-4152111455-1001: @tools.google.com/Google Update;version=3 -> C:\Users\RONNA\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-27] (Google Inc.)
FF Plugin HKU\S-1-5-21-3332443456-3493485007-4152111455-1001: @tools.google.com/Google Update;version=9 -> C:\Users\RONNA\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-27] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Apresentações) - C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-28]
CHR Extension: (Google Docs) - C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-28]
CHR Extension: (Google Drive) - C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-28]
CHR Extension: (YouTube) - C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-28]
CHR Extension: (Planilhas do Google) - C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-28]
CHR Extension: (Documentos Google off-line) - C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-28]
CHR Extension: (Pagamentos da Chrome Web Store) - C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-28]
CHR Extension: (Gmail) - C:\Users\RONNA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-28]

==================== Serviços (Whitelisted) ========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R2 AdAppMgrSvc; C:\Program Files\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1222664 2016-01-19] (Autodesk Inc.)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [290224 2015-06-01] (Intel Corporation)
S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe [1233376 2016-04-28] (Flexera Software LLC)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [Arquivo não assinado]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [278264 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22240 2013-08-22] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

R3 MEI; C:\Windows\System32\drivers\HECI.sys [41088 2010-10-19] (Intel Corporation)
R3 NETJME; C:\Windows\system32\DRIVERS\NETJME.sys [119296 2013-06-18] (JMicron Technology Corp.)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1659096 2013-07-31] (Realtek Semiconductor Corporation                           )
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [29128 2013-08-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [214368 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [93024 2013-08-22] (Microsoft Corporation)
S3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [187392 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Três Meses Criados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-04-28 23:48 - 2016-04-28 23:48 - 00022396 _____ C:\Users\RONNA\Downloads\Addition.txt
2016-04-28 23:47 - 2016-04-28 23:50 - 00009597 _____ C:\Users\RONNA\Downloads\FRST.txt
2016-04-28 23:47 - 2016-04-28 23:50 - 00000000 ____D C:\FRST
2016-04-28 23:46 - 2016-04-28 23:46 - 01728000 _____ (Farbar) C:\Users\RONNA\Downloads\FRST.exe
2016-04-28 23:44 - 2016-04-28 23:44 - 00000297 _____ C:\Users\RONNA\Desktop\fixlist.txt
2016-04-28 23:39 - 2016-04-28 23:40 - 00338320 _____ (Autodesk Inc.) C:\Users\RONNA\Downloads\AutoCAD_2017_Brazilian_Portuguese_Win_32_64bit_wi_pt-BR_Setup_webinstall (3).exe
2016-04-28 23:17 - 2015-12-09 15:11 - 00016224 ____N (Microsoft Corporation) C:\Users\RONNA\Downloads\api-ms-win-crt-runtime-l1-1-0.dll
2016-04-28 23:17 - 2015-07-16 13:48 - 00001925 ____N C:\Users\RONNA\Downloads\README.txt
2016-04-28 23:13 - 2016-04-28 23:13 - 00338320 _____ (Autodesk Inc.) C:\Users\RONNA\Downloads\AutoCAD_2017_Brazilian_Portuguese_Win_32_64bit_wi_pt-BR_Setup_webinstall (2).exe
2016-04-28 23:09 - 2016-04-28 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2016-04-28 23:09 - 2016-04-28 23:09 - 00000000 ____D C:\Program Files\KMSpico
2016-04-28 23:07 - 2016-04-28 23:07 - 00008998 _____ C:\Users\RONNA\Downloads\api-ms-win-crt-runtime-l1-1-0.zip
2016-04-28 23:07 - 2015-07-16 13:48 - 00001925 ____N C:\Users\RONNA\Desktop\README.txt
2016-04-28 19:13 - 2016-04-28 19:13 - 00000927 _____ C:\Users\Public\Desktop\LMTOOLS Utility.lnk
2016-04-28 19:02 - 2016-04-28 19:02 - 00338320 _____ (Autodesk Inc.) C:\Users\RONNA\Downloads\AutoCAD_2017_Brazilian_Portuguese_Win_32_64bit_wi_pt-BR_Setup_webinstall (1).exe
2016-04-28 19:00 - 2016-04-28 19:00 - 00000000 ____D C:\Users\RONNA\Documents\AdAppMgrSvcInstProxy
2016-04-28 18:48 - 2016-04-28 18:50 - 00000000 ____D C:\Users\Public\Downloads\260FD116-7539-4221-BD72-3775DD831EB5
2016-04-28 18:32 - 2016-04-28 18:32 - 00001431 _____ C:\Users\Public\Desktop\Autodesk Desktop App.lnk
2016-04-28 18:11 - 2016-04-28 18:11 - 00002019 _____ C:\Users\Public\Desktop\A360 Desktop.lnk
2016-04-28 17:48 - 2016-04-28 17:48 - 00002116 _____ C:\Users\Public\Desktop\AutoCAD 2017 - Português - Brasil (Brazilian Portuguese).lnk
2016-04-28 17:48 - 2016-04-28 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2017 - Português - Brasil (Brazilian Portuguese)
2016-04-28 17:47 - 2016-04-28 18:59 - 00000000 ____D C:\Users\RONNA\AppData\Local\Autodesk
2016-04-28 17:47 - 2016-04-28 17:47 - 00000000 ____D C:\Users\Public\Documents\Autodesk
2016-04-28 17:45 - 2016-04-28 17:45 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2016-04-28 17:40 - 2016-04-28 23:15 - 00000000 ____D C:\Program Files\Autodesk
2016-04-28 16:30 - 2016-04-28 19:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2016-04-28 16:30 - 2016-04-28 17:45 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared
2016-04-28 16:10 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2016-04-28 16:10 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2016-04-28 16:10 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2016-04-28 16:10 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2016-04-28 16:10 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2016-04-28 16:10 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2016-04-28 16:10 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2016-04-28 16:10 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2016-04-28 16:10 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2016-04-28 16:10 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2016-04-28 16:10 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2016-04-28 16:10 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2016-04-28 16:07 - 2016-04-28 16:09 - 00000000 ____D C:\Users\Todos os Usuários\Package Cache
2016-04-28 16:07 - 2016-04-28 16:09 - 00000000 ____D C:\ProgramData\Package Cache
2016-04-28 13:09 - 2016-04-28 18:59 - 00000000 ____D C:\Users\RONNA\AppData\Roaming\Autodesk
2016-04-28 13:09 - 2016-04-28 18:32 - 00000000 ____D C:\Users\Todos os Usuários\Autodesk
2016-04-28 13:09 - 2016-04-28 18:32 - 00000000 ____D C:\ProgramData\Autodesk
2016-04-28 12:58 - 2016-04-28 19:13 - 00000000 ____D C:\Autodesk
2016-04-28 12:58 - 2016-04-28 13:00 - 00000000 ____D C:\Users\RONNA\AppData\Local\Akamai
2016-04-28 12:56 - 2016-04-28 23:14 - 18685488 _____ C:\Users\RONNA\Downloads\AutoCAD_2017_Brazilian_Portuguese_Win_32_64bit_wi_pt-BR_Setup.exe
2016-04-28 12:26 - 2016-04-28 12:26 - 00338320 _____ (Autodesk Inc.) C:\Users\RONNA\Downloads\AutoCAD_2017_Brazilian_Portuguese_Win_32_64bit_wi_pt-BR_Setup_webinstall.exe
2016-04-28 00:00 - 2016-04-28 00:00 - 00000000 ____D C:\Users\RONNA\Downloads\AtvDR Win 8.1 - PHDOWNS
2016-04-28 00:00 - 2016-04-28 00:00 - 00000000 ____D C:\Users\RONNA\AppData\Roaming\WinRAR
2016-04-27 23:53 - 2016-04-27 23:53 - 02906269 _____ C:\Users\RONNA\Downloads\AtvDR Win 8.1 - PHDOWNS.rar
2016-04-27 23:51 - 2016-04-27 23:51 - 00000000 ____D C:\Program Files\Common Files\AV
2016-04-27 23:49 - 2016-04-28 23:26 - 00000000 ____D C:\Users\Todos os Usuários\AVAST Software
2016-04-27 23:49 - 2016-04-28 23:26 - 00000000 ____D C:\ProgramData\AVAST Software
2016-04-27 23:49 - 2016-04-27 23:49 - 00000000 ____D C:\Users\RONNA\AppData\Roaming\Macromedia
2016-04-27 23:47 - 2016-04-27 23:47 - 00000000 ____D C:\Users\RONNA\AppData\Roaming\Foxit Software
2016-04-27 23:47 - 2016-04-27 23:47 - 00000000 ____D C:\Users\Public\Foxit Software
2016-04-27 23:46 - 2016-04-27 23:46 - 00002111 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2016-04-27 23:46 - 2016-04-27 23:46 - 00000000 ____D C:\Users\Todos os Usuários\Foxit ContentPlatform
2016-04-27 23:46 - 2016-04-27 23:46 - 00000000 ____D C:\Users\RONNA\AppData\Roaming\Foxit AgentInformation
2016-04-27 23:46 - 2016-04-27 23:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2016-04-27 23:46 - 2016-04-27 23:46 - 00000000 ____D C:\ProgramData\Foxit ContentPlatform
2016-04-27 23:46 - 2016-04-27 23:46 - 00000000 ____D C:\Program Files\Foxit Software
2016-04-27 23:45 - 2016-04-27 23:45 - 00001133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-04-27 23:45 - 2016-04-27 23:45 - 00001121 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-04-27 23:45 - 2016-04-27 23:45 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-04-27 23:45 - 2016-04-27 23:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-04-27 23:44 - 2016-04-28 18:12 - 00002159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-27 23:44 - 2016-04-28 18:12 - 00002147 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-27 23:43 - 2016-04-28 23:48 - 00001074 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-27 23:43 - 2016-04-28 23:48 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-27 23:43 - 2016-04-27 23:44 - 00000000 ____D C:\Program Files\Google
2016-04-27 23:43 - 2016-04-27 23:43 - 00987728 _____ (Google Inc.) C:\Users\RONNA\Downloads\ChromeSetup.exe
2016-04-27 23:42 - 2016-04-27 23:42 - 00307200 _____ (Secure By Design Inc.) C:\Users\RONNA\Downloads\Ninite Avast Firefox Foxit Reader OneDrive Installer.exe
2016-04-27 23:42 - 2016-04-27 23:42 - 00000000 ____D C:\Program Files\Intel
2016-04-27 23:42 - 2016-04-27 23:42 - 00000000 ____D C:\Intel
2016-04-27 23:41 - 2016-04-27 23:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2016-04-27 23:39 - 2016-04-28 12:49 - 00002390 _____ C:\Users\RONNA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-27 23:39 - 2016-04-28 00:02 - 00000000 ____D C:\Users\RONNA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-04-27 23:39 - 2016-04-27 23:39 - 00000000 ____D C:\Users\RONNA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-04-27 23:39 - 2016-04-27 23:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-04-27 23:39 - 2016-04-27 23:39 - 00000000 ____D C:\Program Files\WinRAR
2016-04-27 23:38 - 2016-04-28 23:48 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3332443456-3493485007-4152111455-1001UA.job
2016-04-27 23:38 - 2016-04-28 23:48 - 00001046 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3332443456-3493485007-4152111455-1001Core.job
2016-04-27 23:38 - 2016-04-28 13:09 - 00000000 ____D C:\Users\RONNA\AppData\Local\Google
2016-04-27 23:30 - 2016-04-27 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2016-04-27 23:30 - 2016-04-27 23:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2016-04-27 23:29 - 2016-04-27 23:29 - 00000000 ____D C:\Windows\PCHEALTH
2016-04-27 23:29 - 2016-04-27 23:29 - 00000000 ____D C:\Program Files\MSBuild
2016-04-27 23:29 - 2016-04-27 23:29 - 00000000 ____D C:\Program Files\Microsoft Sync Framework
2016-04-27 23:29 - 2016-04-27 23:29 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-04-27 23:28 - 2016-04-27 23:28 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 8
2016-04-27 23:27 - 2016-04-27 23:31 - 00000000 ____D C:\Users\Todos os Usuários\Microsoft Help
2016-04-27 23:27 - 2016-04-27 23:29 - 00000000 ____D C:\Program Files\Microsoft Office
2016-04-27 23:27 - 2016-04-27 23:27 - 00000000 __RHD C:\MSOCache
2016-04-27 23:27 - 2016-04-27 23:27 - 00000000 ____D C:\Users\RONNA\AppData\Local\Microsoft Help
2016-04-27 23:27 - 2016-04-27 23:27 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2016-04-27 23:26 - 2016-04-27 23:26 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-04-27 23:19 - 2016-04-28 23:31 - 01707228 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-27 23:15 - 2016-04-27 23:17 - 00000000 ____D C:\Users\RONNA\AppData\Local\Packages
2016-04-27 23:15 - 2016-04-27 23:15 - 00001422 _____ C:\Users\RONNA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-04-27 23:15 - 2016-04-27 23:15 - 00000020 ___SH C:\Users\RONNA\ntuser.ini
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Modelos
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Meus Documentos
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Menu Iniciar
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Documents\Minhas Músicas
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Documents\Minhas Imagens
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Documents\Meus Vídeos
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Dados de Aplicativos
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Configurações Locais
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\AppData\Local\Histórico
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\AppData\Local\Dados de Aplicativos
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Ambiente de Rede
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 _SHDL C:\Users\RONNA\Ambiente de Impressão
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 ____D C:\Windows\CSC
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 ____D C:\Users\RONNA\AppData\Roaming\Adobe
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 ____D C:\Users\RONNA\AppData\Local\VirtualStore
2016-04-27 23:15 - 2016-04-27 23:15 - 00000000 ____D C:\Users\RONNA
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas Músicas
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Minhas Imagens
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Usuário Padrão\Documents\Meus Vídeos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Histórico
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Usuário Padrão\AppData\Local\Dados de Aplicativos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Usuário Padrão
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Todos os Usuários\Modelos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Todos os Usuários\Menu Iniciar
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Todos os Usuários\Documentos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Todos os Usuários\Dados de Aplicativos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Todos os Usuários
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Public\Documents\Minhas Músicas
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Public\Documents\Minhas Imagens
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Public\Documents\Meus Vídeos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Modelos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Meus Documentos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Menu Iniciar
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Documents\Minhas Músicas
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Documents\Minhas Imagens
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Documents\Meus Vídeos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Dados de Aplicativos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Configurações Locais
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\AppData\Local\Histórico
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\AppData\Local\Dados de Aplicativos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Ambiente de Rede
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default\Ambiente de Impressão
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas Músicas
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default User\Documents\Minhas Imagens
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default User\Documents\Meus Vídeos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Histórico
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Dados de Aplicativos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\ProgramData\Modelos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\ProgramData\Menu Iniciar
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\ProgramData\Documentos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\ProgramData\Dados de Aplicativos
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Program Files\Common Files\Sistema
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Program Files\Arquivos Comuns
2016-04-27 23:14 - 2016-04-27 23:14 - 00000000 _SHDL C:\Arquivos de Programas
2016-04-27 23:10 - 2016-04-27 23:15 - 00000000 ____D C:\Windows\Panther
2016-02-19 07:21 - 2016-02-19 07:21 - 01924816 _____ (Autodesk, Inc.) C:\Windows\system32\styleman.cpl
2016-02-19 07:21 - 2016-02-19 07:21 - 01924816 _____ (Autodesk, Inc.) C:\Windows\system32\plotman.cpl
2016-02-19 07:19 - 2016-02-19 07:19 - 00024784 _____ (Autodesk, Inc.) C:\Windows\system32\AcSignExtRes.dll
2016-02-07 01:28 - 2016-02-07 01:28 - 00435168 _____ (Autodesk, Inc.) C:\Windows\system32\AcSignOpt.exe
2016-02-07 01:28 - 2016-02-07 01:28 - 00048608 _____ (Autodesk, Inc.) C:\Windows\system32\AcSignIcon.dll
2016-02-07 01:28 - 2016-02-07 01:28 - 00034784 _____ (Autodesk, Inc.) C:\Windows\system32\AcSignExt.dll

==================== Três Meses Modificados arquivos e pastas ========

(Se uma entrada for incluída na fixlist, o arquivo/pasta será movido.)

2016-04-28 23:31 - 2013-08-22 11:12 - 00738078 _____ C:\Windows\system32\prfh0416.dat
2016-04-28 23:31 - 2013-08-22 11:12 - 00150714 _____ C:\Windows\system32\prfc0416.dat
2016-04-28 23:31 - 2013-08-22 03:21 - 00000000 ____D C:\Windows\inf
2016-04-28 23:26 - 2013-08-22 04:23 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-28 23:10 - 2013-08-22 03:13 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-04-28 18:36 - 2013-08-22 04:22 - 00546168 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-28 17:44 - 2013-08-22 05:17 - 00000000 ___SD C:\Windows\Downloaded Program Files
2016-04-28 16:12 - 2013-08-22 05:17 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-28 16:06 - 2013-08-22 05:17 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-04-27 23:29 - 2013-08-22 11:16 - 00000000 ____D C:\Windows\ShellNew
2016-04-27 23:28 - 2013-08-22 05:17 - 00000000 ____D C:\Program Files\Common Files\System
2016-04-27 23:28 - 2013-08-22 03:13 - 00000167 _____ C:\Windows\win.ini
2016-04-27 23:22 - 2013-08-22 05:17 - 00000000 ____D C:\Windows\AppReadiness
2016-04-27 23:15 - 2013-08-22 05:17 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-04-27 23:15 - 2013-08-22 05:17 - 00000000 ____D C:\Windows\WinStore
2016-04-27 23:15 - 2013-08-22 05:17 - 00000000 ____D C:\Windows\rescache
2016-04-27 23:15 - 2013-08-22 05:17 - 00000000 ____D C:\Windows\FileManager
2016-04-27 23:15 - 2013-08-22 05:17 - 00000000 ____D C:\Windows\Camera
2016-04-27 23:14 - 2013-08-22 05:17 - 00000000 ____D C:\Program Files\Windows NT
2016-04-27 23:10 - 2013-08-22 05:17 - 00262144 _____ C:\Windows\system32\config\BCD-Template

Alguns arquivos em TEMP:
====================
C:\Users\RONNA\AppData\Local\Temp\AcDeltree.exe


==================== Bamital & volsnap =================

(Não há correção automática para arquivos que não passaram na verificação.)

C:\Windows\explorer.exe => O arquivo é assinado digitalmente
C:\Windows\system32\winlogon.exe => O arquivo é assinado digitalmente
C:\Windows\system32\wininit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\svchost.exe => O arquivo é assinado digitalmente
C:\Windows\system32\services.exe => O arquivo é assinado digitalmente
C:\Windows\system32\User32.dll => O arquivo é assinado digitalmente
C:\Windows\system32\userinit.exe => O arquivo é assinado digitalmente
C:\Windows\system32\rpcss.dll => O arquivo é assinado digitalmente
C:\Windows\system32\dnsapi.dll => O arquivo é assinado digitalmente
C:\Windows\system32\Drivers\volsnap.sys => O arquivo é assinado digitalmente


LastRegBack: 2016-04-27 23:11

==================== Fim de FRST.txt ============================